J27. 47QFHA24R0001_T10_09_DEAMS Seed Attachment 1_ PWS.docx

TEMPLATE AS OF 26 FEBRUARY 2019

PERFORMANCE WORK STATEMENT (PWS)

Support Defense Enterprise Accounting and Management System (DEAMS) – Financial Management Functional Support to Deployment, Sustainment, Audit, and Development

30 August 2023

NOTE TO OUR CUSTOMERS: THIS TEMPLATE MUST BE TAILORED FOR YOUR AGENCY BY INCLUDING YOUR UNIQUE REQUIREMENTS, QUANTITIES FOR WORKLOAD, SPECIFIC SURVEILLANCE TECHNIQUES, ETC. ANY QUESTIONS REGARDING THIS TEMPLATE SHOULD BE ADDRESSED TO YOUR CONTRACT SPECIALIST/CONTRACTING OFFICER.

GENERAL AND FILL-IN INFORMATION IS PRESENTED IN BLUE ITALICS. PLEASE DELETE ALL BLUE ITALICS WHEN FINALIZING THE PWS. 5.4 DO NOT DELETE ANY PARAGRAPH TITLES. IF THE PARAGRAPH DOES NOT APPLY TO YOUR REQUIREMENT, SIMPLY REPLACE THE PARAGRAPH TEXT WITH “NOT APPLICABLE”.

1. General: This is a non-personal services contract to provide support to the DEAMS Functional Management Office (FMO) located at Wright Patterson AFB, OH.

1.1. Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform deployment, operations, and sustainment of the DEAMS as defined in this PWS except for those items specified as Government furnished property and services. The contractor shall perform to the standards in this contract.

1.2. Background: The DEAMS program implements and fields the Department of the Air Force’s core financial accounting and entitlement system. During this contract the DEAMS Functional Management Office (FMO) will provide product owner and testing support to the agile software development of the Air Force’s highest priority functionality, provide user training, business process reengineering and sustain an unmodified System and Organizational Controls audit. The Air Force Accounting Operations Center (AFAOC) will continue to improve communication, market knowledge management tools to increase user self- sufficiency, provide consistent support to all DEAMS bases, while supporting audit requirements and developing and improving internal controls.

1.3. Objective: The objective of this contract is to provide DoD Financial Management and IT technical staff and expertise to support the mission of the DEAMS FMO, AFAOC, and field commands using the DEAMS application.

1.4. Scope: The contractor shall support a range of task requirements related to the development, deployment, operations, and sustainment of the DEAMS application, using organizations, and related business processes. The range of services to be procured under this contract are summarized in the subsequent paragraphs. The specific tasks to be supported and performed include, but are not limited to, those identified in the subsequent paragraphs.

1.5. Period of Performance: The period of performance shall be for one Base Year of 12 months and four 12-month option years.

1.6. General Information

1.6.1. Quality Control: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-4, Inspection of Services – Fixed-Price). The Contractor shall develop, implement, and maintain an effective Quality Control System which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting contract performance to ensure all contract requirements are met. The Contractors’ QCP must contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP, as a minimum, shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspection; discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints. The contractor shall upon request provide to the Government their quality control documentation. The QCP shall be provided to the administrative Contracting Officer (KO) and contract specialist via e-mail within 10 business days of the PSD. The Government will accept or return the contract QCP for revision within 10 business days. Any change to the QCP after initial acceptance requires the review and acceptance of the KO.

1.6.2. Quality Assurance: The Government will evaluate the contractor’s performance under this contract in accordance with (IAW) the Quality Assurance Surveillance Plan. This plan is a government only document primarily focused on what the Government must do to assure that the contractor has performed IAW the requirements of the contract.

1.6.3. Federal Government Holidays: https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/#url=2024

1.6.4. Hours of Operation: Hours of support can and will be dependent on specific customer requirements for assigned tasks. The contractor shall coordinate work schedules with the COR to ensure service requirements are met. As applicable (i.e., labor hour tasks), the Contractor shall not exceed the monthly allocation of hours, calculated at 8 hours per day times the number of business days/month, without authorization from the COR. Additional details are provided below.

The table below identifies the work hour requirements.

Standard Duty Hours Support The contractor shall provide for normal (during core business hours) and staggered standard duty hours support as required to ensure adequate coverage for CONUS and OCONUS time zones.

Normal Workday - (work hour category A) A standard normal workday is defined as any 8 hours of productive labor which must include the Core Business hours of 0900 through 1500 local time, Monday through Friday, excluding Federal Holidays. Exceptions may be required and shall be coordinated with the COR, to include short-term or long-term requirements for staggered workdays.

Staggered Workday - (work hour category B) A standard staggered workday requires that on-site support shall be provided 0700 through 2100 local time, Monday through Friday, excluding Federal Holidays. Exceptions may be required and shall be coordinated with the COR, if coverage is required outside the established timeframe.

Staggered Workday - (work hour category C) Not used in base contract A standard staggered workday requires that on-site support shall be provided 24 hours per day, 6 days per week, 1700 Sunday through 1700 Friday, local time, excluding Federal Holidays.

Exceptions may be required and shall be coordinated with the COR, if coverage is required outside the established timeframe.

Scheduled (work hour category D) Scheduled non-standard duty hours support shall be coordinated with the authorized Government point of contact and the contractor’s designated point of contact. Government may request non- standard duty hour support for their environments (fiscal year close-out periods; deployment/release periods, and peak operational periods). Scheduled non-standard duty hour support may also be required to support a short-term surge in requirements.

Un-Scheduled (work hour category E) The Government may also request that the contractor provide un-scheduled (e.g., emergency technical support), non-standard duty hours support. The contractor shall respond within 15 minutes of notification. When off-site support can resolve the issue, the contractor’s personnel shall begin immediately upon notification. The contractor shall assess the cause, determine the scope of the problem, advise the appropriate Government organization, provide an estimated restoration time, and identify and implement action for problem resolution. When required, on-site support shall begin within one hour of notification to the contractor’s designated individual.

This unscheduled support may include:

Normal Workday - (work hour category F, specific to this contract) A standard normal workday is defined as any 8 hours of productive labor excluding Federal Holidays. Exceptions may be required and shall be coordinated with the COR, to include short-term or long-term requirements for staggered workdays. Required hours of work are as follows:

1.6.5. Place of Performance: Work to be performed under this contract will be performed on-site at Government installations (See table below). The Government estimates that approximately 70 Government provided shared workspaces will be available to support contractor performance at WPAFB, Ohio for all performance spanning the contract. The primary place of performance for all key personnel, unless otherwise stated in this PWS, shall be at WPAFB, Ohio. All contract personnel must be present on-site during the hours of operation (see 1.6.4. Hours of Operation). Exceptions can only be made via a written request to COR. The request must include the place where work is to be performed i.e., Contractor facilities or telework; the hours during which the work will be performed, a justification for the Alternate Work Location (AWL), and an explanation of how the employee’s work will be monitored for quality and timeliness. The request for AWL shall be time bound and only to be made for a reasonably specified period of time. The COR must provide written approval before work can be performed at the AWL. The Government reserves the right to terminate the AWL as necessary.

Place of performance requirements are identified in the table below:

1.6.6. Type of Contract: The Government will award a hybrid Firm Fixed Price and Labor Hour contract.

1.6.7. Security Requirements: Contractor personnel performing work under this contract must either have a SECRET security clearance from the Defense Security Service in accordance with the attached DD Form 254, Department of Defense Contract Security Classification Specification, or a favorable background investigation at the time of proposal submission and must maintain the level of security required for the life of the contract. The table below identifies the minimum-security requirement for each paragraph in the PWS.

5.10 Functional Systems (DEAMS) Interface and Data

Management Support 12 Tier 1 Security Investigation – all positions

5.2B Air Force Installation and Mission Support Center (AFIMSC) SME Tier 3 (Secret) Security Investigation – all positions*

5.2B USSOCOM AT&L SME

Support – Labor Hours Tier 3 (Secret) Security Investigation – all positions*

5.2B Air Force Security Assistance & Training Squadron – Labor Hours Tier 3 (Secret) Security Investigation- all positions

*Secret Clearance authorizes contractors facility access (See DD 254). Contractors will not have access to classified data while working on this contract. This eliminates government escorts required for facility access, providing a convenience to the government and reduces government loss in productivity relative to providing government escorts.

1.6.7.1. Physical Security: The contractor shall be responsible for safeguarding all Government equipment, information and property provided for contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured.

1.6.7.2. Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR.

1.6.7.2.1. In the event keys are lost or duplicated, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3. Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.4. Key-pad Access Control. The Contractor shall establish and implement methods of making sure all key-pad access control numbers issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. No key-pad access control numbers issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key-pad access number control that shall be included in the Quality Control Plan. The Contractor shall immediately report any occurrences of compromised key-pad access control numbers to the Contracting Officer’s Representative (COR). The Contractor shall prohibit the use of Government issued key-pad access control numbers by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR.

1.6.8. Special Qualifications: See Section 5 and Key Personnel Section.

1.6.9. Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity IAW Federal Acquisition Regulation Subpart 42.5, Post Award Orientation. The Contracting Officer, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the Government will apprise the contractor of how the Government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.10. Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notify both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11. Key Personnel: Key personnel are personnel proposed to perform in key positions. Key positions are those deemed essential for successful contractor accomplishment of the work to be performed. The contractor shall not divert key personnel to other projects or replace them without receiving prior authorization from the CO. Tasks assigned or funded to a single contractor employee will be treated as key for purposes of reassignment.

The table below identifies the minimum number of key positions to be filled by key personnel for this contract as identified by the Government.

5.6 DEAMS FMO

Strategic Communications Task Lead

5.8 AFAOC DEAMS Course Developers

Task Leads

1.6.11.1 Personnel Retention and Recruitment

Government review and acceptance is required for all resumes of personnel proposed to support this contract. The Contractor shall make every effort to retain personnel in order to ensure continuity. If it should become necessary to substitute or replace personnel, the Contractor shall immediately notify the CO and COR in writing of any potential vacancies and shall submit the resume(s) of replacement personnel within 14 calendar days of the notification. Additionally, for all new positions identified by the Government, the Contractor shall submit the resume(s) of proposed personnel within 14 calendar days of the Government’s initial request. The Contractor shall submit the resume(s) of all potential personnel selected to perform under this contract to the CO and COR through Assisted Services Information System (ASSIST), or any other process means identified/required, for Government review and acceptance/rejection. Upon Government acceptance of a personnel resume(s), the candidate shall be available to begin performance within 14 calendar days. The contractor shall ensure continuity of operations during periods of personnel turnover and long-term absences. Long-term absences are considered those longer than one week in duration.

1.6.11.2 PERSONNEL

Contract Management (key position); PWS 5.1 Experience: will be a senior executive with minimum ten (10) years of experience in leading and providing technical direction to complex engagements within the DoD or Federal Government.

AFAOC Support task lead (key position); PWS 5.2 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams and expertise in Air Force financial management policies, processes, and procedures specifically in using the DEAMS application.

AFAOC MAJCOM/COCOM SME (MCSME) and agency specific SME; PWS, 5.2B Experience: will have a minimum five (5) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) expertise in Air Force financial management policies, processes, and procedures specifically in using the DEAMS application.

Deployment/Training Support task lead (key position); PWS 5.3 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams, in IT system fielding, application end-user training and expertise in Air Force financial management policies, processes and procedures specifically in using the DEAMS application.

AFAOC Data Analytics and Field Support task leads (key positions); PWS 5.4 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams and expertise in Air Force financial management data related policies, processes and procedures and data analytic tools and presentations.

DEAMS FMO Strategic Communications task lead (key position); PWS 5.7 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams and expertise in delivering change management and strategic communications to include briefings, articles and social media. Will also have knowledge of Air Force organizational structure and protocol for coordination of communication products and contextual understanding.

Compliance Development and Support (key position); PWS 5.8 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading audit and/or audit readiness teams including Certified Public Accountant or Independent Public accountant (IA) experience in complex federal government audits including SSAE 18 Service Organizations Controls

Technical Advisors (key positions); PWS 5.9 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in ERP implementation Agile software development, and expertise in Air Force financial management policies, processes, and procedures. Must have knowledge of table structures, functionality, and advanced troubleshooting skills in Oracle eBS and related support applications.

Agile Development Support leads (key positions); PWS 5.9 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams and Agile software development, and expertise in Air Force financial management policies, processes, and procedures specifically in using Oracle applications.

DEAMS Integration lead (key position); PWS, 5.10 Experience: will have a minimum ten (10) years of experience (advanced degree and/or professional certification may be substituted for equivalent years of experience) in leading teams and expertise in Air Force financial management policies, processes, and procedures specifically in using the DEAMS application.

General Requirements All contractor employees shall meet the minimum general requirements listed below.

· All contractor personnel shall be capable of working independently.

· Strong written and oral communication skills in the English language. All contractor employees must be able to read, write, speak and understand English.

· Contractor personnel performing in a leadership capacity shall be capable of directing contractor personnel and interfacing with the Government and customers.

· Exceptional customer service skills.

· Strong time-management and prioritization skills.

· Ability to communicate applicable technical subject matter expertise to management and others.

Specific Expertise and Experience The contractor shall provide personnel with the appropriate skill levels for each task order. While each individual contractor employee may not possess expertise and experience in each area below, the Government requires that the overall contractor staff possess the aggregate skills, expertise, and experience in each of the areas identified to successfully complete all task orders.

· Working knowledge of DoD Financial Management systems, processes and procedures

· Working knowledge of AF Financial Management systems, processes and procedures

· Functional knowledge of Federal applications of Oracle eBusiness software

· Technical knowledge of Federal applications of Oracle eBusiness software

· Functional Experience with Oracle Federal Financial audit capabilities

· Working knowledge of DoD legacy financial management systems and processes

· Functional Expertise in operational Standard Financial Information Structure (SFIS)

· Functional Experience as Certified Public Accountant (CPA)

· Functional Experience as Certified Internal Auditor (CIA)

· Working knowledge of Federal and Defense financial audit processes

· Functional and Technical Experience as a Certified Information Systems Auditor (CISA)

· Defense Financial Manager (CDFM) Certification

· Government Financial Manager (CGFM) Certification

· Certifications in SAFe Agile Framework

· Other Agile software certifications including scrum master or product owner

ADMINISTRATIVE CONSIDERATIONS

All requirements, as defined in the PWS, are applicable.

In response to this PWS, the Contractor shall provide a task order proposal including but not limited to the following items:

· Complete (all positions) staffing plan/matrix, to include CLIN level identification (CLIN, labor category, position title, estimated hours, complete performance location, key personnel depiction). The contractor is responsible for identifying additional key positions beyond those identified in paragraph 1.6.11 of the PWS, as applicable to the proposed staffing plan

· Resumes for key personnel (if new)

· Completed pricing template (released with RFQ)

A complete listing of the proposal submission requirements and formatting is located within the DEAMS Evaluation Criteria included within this solicitation.

1.6.12. Identification of Contractor Employees: The Contractor will have a government issued Common Access Card (CAC) to use as identification, log onto computer systems, and gain access on base and buildings. ID Badges shall be worn at all times during which the employee is performing work under this contract. Each Contractor (to include subcontractors) employees shall wear the ID Badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit. The Contractor (to include subcontractors) shall be responsible for collection of ID Badges upon completion of the contract or termination of employee. All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. Per Air Force Trusted Associate Sponsorship System (TASS) Standard Operating Procedures (SOP), dated December 18, 2020 all contractor CAC’s will be reverified every 180 days.

1.6.13. Supervision of Contractor Employees: The Government will not exercise any supervision or control over Contractor or subcontractor employees while performing work under the contract. Such employees shall be accountable solely to the Contractor, not the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor employees.

1.6.14 Contractor Travel: The Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR)/Federal Travel Regulation (FTR)/or State Department Travel Regulation and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR, prior to making travel arrangements, by submitting a collaboration for “Contractor Travel Request” through the GSA ASSIST Portal at https://assist.gsa.gov. The travel request shall include at minimum a brief description of the travel to include traveler(s) name(s), dates of travel, destination and purpose of travel along with overall estimated costs.

All travel requires Government approval/authorization and notification to the COR, prior to making travel arrangements. The Contractor shall be responsible for all travel arrangements including airline, hotel, and rental car reservations. The Contractor shall make every commercially reasonable effort to schedule travel far enough in advance to take advantage of reduced airfares. The Contractor shall stay in Government furnished lodging, if available.

Contractors supporting the program may be granted remote work approval on a case-by-case basis; however, all costs associated with travel to Wright Patterson AFB, OH will be at the expense of the contractor and not the government.

If the contractor’s employee is approved to work remote from Wright Patterson AFB, Dayton OH and required to travel back to the area, the contractor will be responsible for all travel costs incurred. This includes transportation allowances (airfare/auto mileage), hotel costs, rental car, per diem and any authorized incidental travel costs.

If a worker is required to travel to work in areas outside of the WPAFB/Dayton area (over 50 miles) then the standard travel reimbursement processed authorized by the contract will be applicable.

1.6.14.1 The Contractor shall submit an expense report to the COR when invoicing for travel costs. This report shall contain the following, at a minimum:

• A brief description of the travel to include traveler(s) name(s), dates of travel, destination and purpose of travel.

• Copies of receipts for all airfare, lodging and any expense in excess of $75.00.

• Claims for payment of per diem shall be accompanied by a corporate worksheet or copy of the employee’s per diem voucher listing the location, dates and per diem rate applied to the claim.

Acceptable submissions include paid receipts from airlines and hotels or copies of corporate credit / purchase card statements providing that the statement lists the date, vendor name and amount of purchase.

• All backup documentation shall clearly indicate the actual date that the contractor incurred the claimed expense.

• Failure to provide the required documentation may result in rejection of the contractor’s invoice as not being a proper invoice as described in FAR 32.905(b)(2).

• Travel invoices shall be submitted separately from labor invoices through the GSA ASSIST Portal https://assist.gsa.gov.

1.6.15. Other Direct Costs: This category includes travel (outlined in 1.6.14), reproduction, and shipping expenses associated with training activities and visits to contractor facilities. It could also entail the renting of suitable training venues.

1.6.16. Organizational Conflict of Interest (OCI): The contracting officer has not identified any OCIs inherent to this requirement. It is the offeror’s responsibility to notify the contracting officer, prior to submission of proposals, if a potential OCI is identified.

1.6.17. Anti-Terrorism (AT) Level I Training. All contractor employees requiring access to a military installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days of the performance start date (PSD) or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees. AT level I awareness training is available at the following website: Course: Force Protection (ZZ133079) (af.mil). Certificates will be uploaded in the Governments ASSIST filing system.

1.6.18. Access and General Protection/Security Policy and Procedures. Contractor and employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, Air Force and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.18.1. Contractors Requiring a Common Access Card (CAC). Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with AFI 31-101. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management. Loss of CAC by a contractor employee is required to be reported to the COR within 48 hours and shall be annotated on the monthly status report.

The CAC will be provided by the government at the local CAC issuance authority. Contractor CAC badges shall be worn and displayed at all times. The contract employee CAC will be authorized for use in accordance with AFI 31-101, Integrated Defense (dated, 8 Oct 2009), the Air Force Resource Protection Program, and shall be issued, displayed, and surrendered as directed by local authority. In addition, the Contractor employee shall identify themselves as Contractor employees in E-mails, telephone usage, correspondence, meetings, etc. If a contract employee leaves the contract for any reason the contract company has 7 business days to return the CAC to the local Government Security Office.

The status of each Government issued CAC will be accounted for on the monthly status report as an attachment to maintain individual accountability. The contractor will report losses of a CAC, or the need for CACs, in the monthly status reports. Personnel changes that also require the need for newly issued CACs, or for cards to be returned will also be documented in the monthly status report.

1.6.18.2. Background Investigation Requirements: The contractor shall ensure immediate compliance with all instructions regarding background investigation processing, including those provided verbally, by e-mail or via a Government system. The contractor is cautioned that the entire process from submittal to return may routinely take from two to six weeks and shall factor this lead time into its hiring/placement process. The contractor shall make all reasonable efforts to ensure that contractor employees meet CAC eligibility standards upon assignment to the contract and shall be held responsible for delays, failure to meet performance requirements or decreases in efficiency in accordance with the applicable inspection clause.

1.6.18.3. CAC Return: The contractor shall return all identification media (i.e., badges and vehicle pass) to the Government within 7 days of an employee’s departure or upon immediate request of the Government if identification is required for particular one-time or case-by-case access. The contractor shall return issued CACs to the applicable security office upon departure or dismissal of each contractor employee, and shall obtain a receipt for each card and provide it to the COR or CO.

1.6.18.4. CAC Management: The contractor shall manage requests for new or renewal CAC cards in sufficient time to ensure that all contractor employees have them when needed to perform work under this contract. The contractor shall provide at least 10 calendar days advance notice, unless there are extenuating circumstances approved by the COR or CO.

The Contractor will be provided an Entry Authorization List (EAL) package for completion and return to the COR as soon as possible after award. This requirement must be returned at least two weeks prior to required access date. Contractor shall contact the COR for EAL updates. The Contractor shall retrieve and turn in to the COR all identification media (including vehicle passes) from its employees who depart employment for any reason. CAC cards will be issued by the Government and all cost for processing will be absorbed by the same.

1.6.19. AT Awareness Training for Contractor Personnel Traveling Overseas. The contractor shall receive Government provided area of responsibility (AOR) specific AT awareness training as directed by DoDI 2000.16 Vol 1 and AFI 10-245 and provide this training to each of its US based employees required to travel overseas. Specific AOR training content is directed by the combatant commander with the requiring activity’s Anti-Terrorism Officer (ATO) being the local point of contact.

1.6.20. Access to Government Information Systems. All contractor employees with access to a Government info system shall be registered in the Air Force My Learning and shall successfully complete the DoD AF Information Assurance (IA) Awareness prior to gaining access to the IS and annually thereafter. DoD AF IA training is available at Cyber Awareness Challenge 2023 - MLMW1173 (af.mil).

1.6.21. OPSEC Training. Per AFI 10-701, Operations Security, all contractor employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees shall complete annual OPSEC awareness training.

1.6.22 Dissemination of Information

The Contractor shall implement and enforce strict confidentiality of the information/data that it is provided by the Government during the performance of this contract. The Government has determined that the information/data that the Contractor will be provided during the performance of this contract is of a sensitive nature.

1.6.23 Disclosure

Disclosure of the information/data, in whole or in part, by the Contractor can only be made after the Contractor receives prior written approval from the CO. Whenever the Contractor is uncertain with regard to the proper handling of information/data under this contract, the Contractor shall obtain a written determination from the CO.

1.6.24 Protection

The Contractor shall not release, publish, or disclose sensitive information to unauthorized personnel, and shall protect such information in accordance with provisions of the following laws and any other pertinent laws and regulations governing the confidentiality of sensitive information: 18 U.S.C. 641 (Criminal Code: Public Money, Property or Records) 18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information) Public Law 96-511 (Paperwork Reduction Act)

The contractor shall protect system design-related documents and operational data, written or electronic, via a network in accordance with all applicable policies and procedures for such data. The policies, including DoD Regulations 5400.7-R and 5200.1-R, include the latest changes and applicable service/agency/combatant command policies and procedures. The contractor shall protect system design-related documents and operational data at least to the level provided by Secure Sockets Layer (SSL)/Transport Security Layer (TSL)-protected web site connections with certificate and or userid/password-based access controls. In either case, the certificates used by the contractor for these protections shall be DoD- or IC-approved PKI certificates issued by a DoD approved External Certification Authority (ECA) and shall make use of at least 128-bit encryption.

1.6.25 Contractor-Employee Non-Disclosure Agreements

Due to the sensitive nature of the data and information being worked with on a daily basis, all Contractor personnel assigned to the contract are required to complete the Government provided non-disclosure statement within 30 calendar days after contract award to ensure information that is considered sensitive or proprietary is not compromised. Signed non-disclosure statements shall be provided to the COR.

1.6.26 Safeguards

Given the nature of Advisory and Assistance service, it is imperative that safeguards be in place to ensure procurement integrity and Government functions are maintained. Individuals performing under an Advisory and Assistance contract often have advanced knowledge of requirements and the procurement of those requirements (development, design, analysis, etc.). Contractors performing under an Advisory and Assistance Service contract are authorized to make decisions, identify and develop requirements, and evaluate third party solutions, within the terms of the PWS. Information generated in the performance of the Advisory and Assistance contract services is not to be released or reviewed outside the Governmental sphere.

1.6.27 Additional Security Requirements

In accordance with DoD 5200.1-R and AFI 31-401, the service provider is to comply with Air Force Special Security Instruction (AFSSI) 5102, Computer Security Program (COMPUSEC); AFI 33-204, Information Protection Security Awareness, Training and Education (SATE) Program; applicable AFIs, and AFSSIs for Communications Security (COMSEC); and AFI 10-1101, Operations Security (OPSEC) Instructions.

1.6.28 Physical Security

Contractor employees shall comply with base Operations Plans/instructions for Force Protection Conditions (FPCON) procedures, Random Antiterrorism Measures (RAMS) and local search/identification requirements. The Contractor shall safeguard all Government property. At the close of each work period, Government training, equipment, facilities, support equipment, and other valuable materials are to be secured.

1.6.29 Access Control

The Contractor shall implement control procedures to ensure common access cards issued by the Government are properly safeguarded and not used by unauthorized personnel.

1.6.30 In-Processing Requirements

For those contractor employees requiring access to Government work sites, the company’s Facility Security Officer (FSO) or the Contractor's Contract Manager (or alternate) shall complete a Visit Authorization Request (VAR) and submit it to the appropriate (i.e., SAF/FMFS WPAFB Security Office via the Joint Personnel Adjudication System (JPAS). The VAR shall include each contractor employee's full name and social security number. Upon in-processing, the contractor must submit a Defense Department (DD) Form 2875, System Authorization Access Request (SAAR) to the Government PM for signature. Part III of the initial and final DD Form 2875 must be completed by the SM. The Contractor must have at a minimum a favorable Tier 1 Security Investigation, or an Interim Access Risk Acceptance Waiver signed prior to receiving a CAC and obtaining system access. Once a VAR has been submitted to the SAF/FMFS (WP) SM, the COR will coordinate the in-processing for the individual Contractor personnel through the appropriate security personnel. Point of Contact information for the COR is provided to the Contractor by CO Letter of COR Designation at the time of contract award.

1.6.30 Out-Processing Requirements

For contractor employees that required access to Government work sites and equipment, the Contractor's Contract Manager (or alternate) shall notify the FMO Administrative Team to create an out-processing checklist on the SharePoint site and complete the checklist before their last duty day. Followed by the contractor or contractor’s supervisor must complete the DEAMS Access End-User Form and submit it via ServiceNow incident ticket requesting that all their system accesses be end dated. Next the contractor employee should out-process with the Security Manager to, revoke CAC physically and in the Contractor Verification System (CVS), complete the AF Form 2587 and other administrative tasks.

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or services to the Government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the PWS.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

2.1.6. GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT PROPERTY (GP). Property in the possession of, or directly acquired by, the Government and subsequently made available to the Contractor.

2.1.7. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS.

2.1.8. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.9. QUALITY ASSURANCE. The Government procedures to verify that services being performed by the Contractor are acceptable IAW established standards and requirements of this contract.

2.1.10. QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.11. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.2. ACRONYMS:

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services: The Government shall provide, without cost, the facilities, equipment, materials and services listed below. The Government furnished property and services provided as part of this contract shall be used only by the contractor only to perform under the terms of this contract. No expectation of personal privacy or ownership using any Government electronic information or communication equipment shall be expected. All property at Government work sites, except for contractor personal items will be assumed to be government property unless an inventory of contractor property is submitted and approved by the CO/COR.