M00264-21-Q-0098 SSO Solicitation.pdf

SEE ADDENDUM

(No Collect Calls)

M0026421Q0098 08-Apr-2021

b. TELEPHONE NUMBER

703-784-1316

8. OFFER DUE DATE/LOCAL TIME

12:00 AM 12 May 2021

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

M002649. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JOEL M. MIRO MARQUEZ

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

MCINCR - RCO

2010 HENDERSON RD

JOEL MIRO MARQUEZ

QUANTICO VA 22134

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE M30605 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

M30605

1472 DORSEY RD,

HANOVER MD 21076

MJZAGIN

TEL: (443) 654-6304 FAX:

FAX:

TEL: 703-784-1316

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

X 8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$22,000,000

NAICS:

561621

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF72

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

M0026421Q0098

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 12 Months Support at Quantico, MCCOG Facilities

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

Control Support at Quantico, VA MCCOG Facilities IAW PWS 4.1.

NOTE: The requirements in DFARS 252.211-7003, Item Identification and

Valuation, are applicable for this line item. The contractor shall provide DoD unique identification or a DoD recognized unique identification equivalent.

FOB: Destination

NET AMT

0002 12 Months Support at Fort Meade MFCC Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

Control Support at Fort Meade MFCC Facility IAW PWS 4.2.

0003 12 Months Support at Fort Meade MCCYWG Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

Control Support at Fort Meade MFCC Facility IAW PWS 4.3.

1001 12 Months OPTION Support at Quantico, MCCOG Facilities

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

Control Support at Quantico, VA MCCOG Facilities IAW PWS 4.1.

1002 12 Months OPTION Support at Fort Meade MFCC Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

1003 12 Months OPTION Support at Fort Meade MCCYWG Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

2001 12 Months OPTION Support at Quantico, MCCOG Facilities

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

Control Support at Quantico, VA MCCOG Facilities IAW PWS 4.1.

2002 12 Months OPTION Support at Fort Meade MFCC Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

2003 12 Months OPTION Support at Fort Meade MCCYWG Facility

FFP

The contractor shall Conduct Information, Personnel, Administrative and Visitor

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 N/A N/A N/A Government

0002 N/A N/A N/A Government

0003 N/A N/A N/A Government

1001 N/A N/A N/A Government

1002 N/A N/A N/A Government

1003 N/A N/A N/A Government

2001 N/A N/A N/A Government

2002 N/A N/A N/A Government

2003 N/A N/A N/A Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 18-NOV-2021 TO

17-NOV-2022

N/A M30605

1472 DORSEY RD,

HANOVER MD 21076

MJZAGIN

(443) 654-6304

M30605

0002 POP 18-NOV-2021 TO

N/A (SAME AS PREVIOUS LOCATION)

0003 POP 18-NOV-2021 TO

N/A (SAME AS PREVIOUS LOCATION)

1001 POP 18-NOV-2022 TO

17-NOV-2023

N/A (SAME AS PREVIOUS LOCATION)

1002 POP 18-NOV-2022 TO

N/A (SAME AS PREVIOUS LOCATION)

1003 POP 18-NOV-2022 TO

N/A (SAME AS PREVIOUS LOCATION)

2001 POP 18-NOV-2023 TO

17-NOV-2024

N/A (SAME AS PREVIOUS LOCATION)

2002 POP 18-NOV-2023 TO

N/A (SAME AS PREVIOUS LOCATION)

2003 POP 18-NOV-2023 TO

N/A (SAME AS PREVIOUS LOCATION)

PWS

PERFORMANCE WORK STATEMENT (PWS)

SPECIAL SECURITY OFFICE SUPPORT

UNITED STATES MARINE CORPS MFCC

PART 1

GENERAL INFORMATION

1.0 GENERAL: This Performance Work Statement (PWS) is for a non-personal service contract to provide support services for physical, information, and visitor control for the MARFORCYBER (MFCC), Marine Corps Cyberspace

Warfare Group (MCCYWG), and the Marine Corps Cyber Operations Group (MCCOG). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide non-personal services necessary to perform special security office (SSO) support as defined in the Performance Work Statement. MFCC plans, coordinates, integrates, synchronizes, and directs full spectrum Marine Corps cyberspace operations, to include: DoD Global

Information Grid Operations, Defensive Cyber Operations, and when directed, Offensive Cyberspace Operations.

These capabilities are in support of MFCC, MCCYWG, and MCCOG which is an operational and staff organization supporting global Marine Corps Enterprise Network (MCEN) Command and Control capabilities for Fleet Marine

Forces and garrison forces stationed around the world. The MCCOG provides technical expertise, personnel, logistics, management, and facilities necessary to operate and defend the critical world-wide communications services, engineering services, operations services, and hardware and software enhancements and upgrades, in support of mission essential systems used throughout the Marine Corps. The MCCYWG organizes, trains, equips, provides administrative support, manages readiness, and recommends certification and presentation of Cyber

Mission Force Teams to USCYBERCOM. In addition, the MCCYWG plans and conducts full spectrum cyberspace operations as directed by COMMARFOCYBER in support of service, combatant command, joint, and coalition requirements.

1.2 Objectives: The basic objectives of this requirement are to:

Administer routine aspects of security programs and support Sensitive Compartmented Information (SCI) programs in compliance with the National Industrial Security Program Operating Manual; Joint Air Force, Army, Navy memo’s; Director of Central Intelligence Directive’s; Intelligence Community Directive’s

(ICD) and other applicable government security directives associated with SCI security programs;

Implement and monitor SCI security policies and procedures; ensure compliance with all aspects of the security program used by MFCC, MCCOG and MCCYWG;

Establish and maintain a working relationship with all government agencies while building/managing

Sensitive Compartmented Information Facilities (SCIF) as well as filing necessary clearance paperwork for

MFCC, MCCOG and MCCYWG personnel. Assist personnel in completing SF86 packages;

Coordinate with customer security representative to process security clearance requirements;

Review all security paperwork for accuracy, completion and submission;

Maintain SCIF visitor control functions; Prepare visit authorization letters;

Develop and provide new employee’s with security briefings, exit interviews, and debriefings;

Investigate and report security violations, infractions and incident reports to the appropriate entities;

Work closely with the SSO in preparing DD254 forms;

Conduct SCIF self-inspections in preparation for security audits;

Prepare written reports of surveys and inspections;

Maintain all security documentation and files in accordance with government requirements;

Provide front office access support for visitors and new personnel, to include temporary badges

1.3 General Information:

1.3.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-concurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

1.3.2 Recognized Holidays:

The following federal holidays are observed:

New Year’s Day

Martin Luther King’s Birthday

Presidents Day

Memorial Day

Independence Day

Labor Day

Columbus Day

Veterans Day

Thanksgiving Day

Christmas Day

Note: If a federally observed holiday should fall on a Saturday, it will be observed on the preceding Friday; if it falls on a Sunday, it will be observed on the following Monday. Should this occur, the Contractor is exempt from performing work on these days.

1.3.3 Hours of Operation: Two shifts will be required at the MCCYWG work location, Monday through Friday:

0600-1500 and 1100-2000. For the Quantico location, two shifts are required, Monday through Sunday: 0600-1800 and 1800-0600. For the MFCC location, shifts will be required to cover closing at 1730.

1.3.4 Place of Performance: The work to be performed under this contract will be performed at Fort George G.

Meade Maryland, Columbia Maryland, and Quantico Virginia.

1.3.5 Security Requirements: Contractor personnel performing work under this contract must have a Top

Secret/Sensitive Compartmented Information (TS/SCI). The Contractor shall maintain the level of security required for the life of the contract.

Security clearances at the Top Secret with SCI level based on a Single Scope Background Investigation will be required for all positions located at Quantico. All personnel working at Fort Meade shall possess a Top Secret /SCI with a counter intelligence polygraph. Security clearances at the TS level without SCI are not sufficient for the Fort

Meade location.Support staff must be able to maintain clearance levels assigned to their tasks or the contractor shall be replaced within 30 days with an individual that possesses the proper clearance.

The Government will conduct the NSA Military Affairs Division (MAD) indoctrination process following indoctrination to MFCC and MCCYWG. The Contractor is responsible for fully supporting the process and having employees fully adjudicated within five months of the employee start date. The Government reserves the right to negotiate a lower labor rate for a Contractor employee when the Contractor employee is not fully indoctrinated and badged with the NSA, unless reasonable delays are adequately justified in writing to the Agreements Officer

Representative and Agreements Officer, and performance is unaffected by delays.

Any Contractor personnel conducting Intelligence or Intelligence-related activities or supporting those efforts under

Department of Defense authorities shall report any Questionable Intelligence Activity (QIA), Significant, or Highly

Sensitive Matter (S/HSM) to the Command Intelligence Oversight Program Manager or Senior Intelligence Officer.

Questionable Intelligence Activity (QIA) is defined as: “Any Intelligence or Intelligence-related activity when there is reason to believe such activity may be unlawful or contrary to an Executive Order, Presidential Directive, Intelligence Community Directive, or applicable DoD policy governing that activity

. The Contractor personnel will be required to access information systems such as the Navy Marine Corps Intranet, NSANET, or the MCEN and data accessed through portals via user accounts and Common Access Cards that will be provided by the government.

Contractors shall be required to provide the following:

- JPAS visit request

- SF312 (Classified Information Nondisclosure Agreement)

- DD 2875 (System Authorization Access Request)

1.3.6 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

WORKING ON A GOVERNMENT INSTALLATION

The Contractor and its employees shall be subject to all traffic, security, and registration regulations for personnel and vehicles, to include Marine Corps Base Order 4200.3 “Contractor Screening Policy”. Copies of current regulations may be obtained from the KO.

Base Access

In order to gain access to Marine Corps Base Quantico VA and Fort George G. Meade MD, registration in the

Defense Biometric Identification System (DBIDS) must be completed as well as possession of a valid form of identification. The DBID registration information and a list of valid forms of identification are found at:

https://www.quantico.marines.mil/Base-Access/

1.3.7 NON-DISCLOSURE AGREEMENTS

All Contractor personnel receiving access to Government data or data from another Contractor through this contract must provide a signed non-disclosure agreement prior to commencing work. The original agreement shall be submitted to the KO and a copy shall be submitted to the COR. All non-disclosure agreements shall be signed by all

Contractor personnel involved in this effort and returned within five (5) business days after receipt of award or within five (5) business days of onboarding of new incoming personnel. “Business day” as used in the context of this paragraph means normal Government working hours between the hours of 0730 and 1630, Monday to Friday, excluding weekends and federally observed holidays.

1.3.8 KEY AND ACCESS POLICY

1.3.8.1 Key Control. The Contractor shall establish and implement methods of making sure any keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality

Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the

Contracting Officer.

1.3.8.2 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the

Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the

Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor in an amount bilaterally agreed to. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor in an amount bilaterally agreed to.

1.3.8.3 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the

Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the Contracting Officer.

1.3.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal

Acquisition Regulation Subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings, the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

https://www.quantico.marines.mil/Base-Access/

1.3.10 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract:

perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.3.11 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are

Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel will be required to wear assigned badges in the performance of this service.

1.3.12 Travel: Local travel may be required occasionally between MFCC and the MCCYWG, as well as Quantico’s four sites at no additional cost to the Government.

1.3.13 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information

(e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.3.14 Phase-In/Phase-Out Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the phase in/ phase out periods.

At the end of the existing contract period, if the incumbent contractor is not selected the incumbent contractor shall provide any information such as Standard Operating Procedures (SOP), processes, and/or files etc. to the new incumbent for up to thirty (30) days. The activities shall include but will not be limited to such functions as:

• Transfer of knowledge, experience, and lessons learned to the new contractor.

• A period where all deliverables are recompiled to ensure that they work as delivered.

• Assistance in start-up to ensure no service disruption and a smooth transition.

• Appropriate transfer of property, documentation, or personnel, as agreed to between the parties (including but not limited to, devices, equipment, databases, and systems)

• Phase-in activities shall also include contractor attendance at program reviews, participation in working groups, briefings, on-site communications, and full disclosure of technical, cost, and programmatic information.

• The plan shall also include a training program for contractor personnel and a date for accepting responsibilities for each division of work described in the plan.

Transition-Out: The Contractor shall develop and deliver to the Government a transition out plan, allowing 30 days for an orderly transition to any potential new Contractor for these services to ensure the level and quality of services are maintained. . This transition plan shall include digital and hard copies of the following:

• Documentation, operating procedures and other resources, including but not limited to, devices, equipment, databases and systems.

• a training program to be conducted with the incoming vendor and a date for transferring responsibilities for each division of work described in the plan.

• provide written confirmation to the Contracting Officer via email that they and all its employees have transferred and are no longer in possession of any U.S. Government Data and Information including, but not limited to, all copies, portions, data files and other related information created or generated by the Contractor under this effort or provided by the government.

PART 2

DEFINITIONS & ACORNYMS

2.0 Definitions.

CHANGE CONTROL BOARD (CCB). A committee to make decisions regarding approval of proposed changes to a software system and whether they should be implemented. The change control board may be constituted of project stakeholders or their representatives, development manager, test lead and a product manager.

CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the

Government. The term used in this contract refers to the prime.

CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the

Performance Work Statement.

DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

ENTERPRISE ARCHITECTURE GOVERNANCE BOARD (EAGB). A committee to make decisions regarding approval of proposed changes, additions, and deletions to the Enterprise Architecture Artifacts.

KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

QUALITY ASSURANCE. The Government procedures to verify that services being performed by the

Contractor are performed according to acceptable standards.

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

REAL PROPERTY. Land and rights in land, ground improvements, utility distribution systems, and buildings and other structures. It does not include foundations.

SUBCONTRACTOR. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

VISITOR. Means anyone on the grounds of ANC, to include ANC Government employees and contractor employees who are not on official Government duty (i.e., employees visiting outside of tour of duty or personal time off).

WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

WORK WEEK. Monday through Friday, unless specified otherwise.

2.1. Acronyms:

CCB Change Control Board

CFR Code of Federal Regulations

COR Contracting Officer Representative

DFARS Defense Federal Acquisition Regulation Supplement

FAR Federal Acquisition Regulation

ICD Intelligence Community Directive

JPAS Joint Personnel Adjudication System

KO Contracting Officer

MFCC Marine Force Cyber Command

MCCOG Marine Corps Cyber Operations Group

MCCYWG Marine Corps Cyberspace Warfare Group

MCEN Marine Corps Enterprise Network

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QASP Quality Assurance Surveillance Plan

QC Quality Control

SCI Sensitive Compartmented Information

SCIF Sensitive Compartmented Information Facility

SSO Special Security Office

TS Top Secret

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3.0 The contractor is not required to take possession of Government Furnished Property (GFP) and/or Government

Furnished Equipment (GFE) in the performance of this requirement.

3.1 The Government will provide the Contractor with all reasonable available information requested concerning this

PWS and the applicable documents as identified in Part I: Section D of this PWS.

3.3 The services performed under this contract involve access to and handling of material up to Top Secret / SCI level. All material developed by the Contractor during this contract shall become the property of the HQMC United

States Government. The Contractor shall be required to abide by the disclosure standards set forth in Defense

Federal Acquisition Regulation Supplement (DFARS) 252.204-7000 and to complete Employee Confidentiality and

Non-Disclosure forms. The Contractor shall not release any information to regulators, media, or other parties. Any information released shall come from USMC Government employees only.

3.4 In performance of this contract, the Contractor shall have access to a workspace at Government installations.

The government will provide workstation and access to the networks.

3.5 The Government will provide the necessary workspace for the Contractor personnel to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

PART 4

SPECIFIC TASKS

4.0 TECHNICAL REQUIREMENTS

The objective of the MFCC/MCCYWG/MCCOG security branch is to provide Information, Personnel, Administrative and Physical Security to all MFCC/MCCYWG/MCCOG facilities and personnel. The Security branch must also establish and implement a solid Security Management program that will ensure the proper handling and safeguarding of information and personnel at all levels. The Contractor will support the security branch mission.

4.1 TASK 1: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL

SUPPORT AT QUANTICO, VA MCCOG FACILITIES

The Contractor shall support the MCCOG security office in monitoring of daily activities of over 1,000 employees, to include logging, monitoring, and assisting an average of 5,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems (IDS), UL 2050 certified IDS, the user panel that controls UL 2050 IDS, as well as commonly used Government Services Administrated approved devices, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.1.1 Badging. The Contractor shall program badges and verify security clearance in the Joint Personnel

Adjudication System (JPAS) within 24 hours of receiving a request, Defense Information System for Security

(DISS), or other provided system, for proper access control into the facility. The Contractor can expect an average of

800 badges per year.

CDRL A001: Monthly Status Report: Badging (Quantico)

4.1.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 150 indoctrinations, 50 polygraph scheduling, 10 security incidents, 50 fingerprint scheduling, and 150 debriefs annually.

CDRL B001: Monthly Status Report: Interviews and Debriefings (Quantico)

4.1.3 Escorting and Front Desk. The Contractor shall provide escorting services as needed for visiting personnel.

The Contractor shall provide front desk support to ensure proper access control to the facilities.

4.1.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security matters.

4.2 TASK 2: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL

SUPPORT AT FORT MEADE MFCC FACILITY

The Contractor shall support MFCC security office in monitoring of daily activities of all personnel and visitors, to include logging, escorting, and assisting an average of 5,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems and devises, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.2.1 Badging. The Contractor shall program badges and verify security clearance in the JPAS within 24 hours of receiving a request, or other provided system, for proper access control into the facility. The Contractor can expect an average of 400 badges per year shared between MFCC and MCCYWG.

CDRL C002: Monthly Status Report: Badging (MFCC)

4.2.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 52 indoctrinations, 450 polygraph scheduling, 20 security incidents, 50 fingerprint scheduling, and 200 debriefs annually shared between the MCCYWG and MFCC locations.

CDRL D002: Monthly Status Report: Interviews and Debriefs (Ft. Meade MFCC)

4.2.3 Escorting. The Contractor shall provide escorting services as needed for visiting personnel.

4.2.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security

4.2.5 Facility Closing. At the end of each day as described in 1.4.4, the assigned personnel to the final shift shall conduct a security walkthrough of the facility.

4.3 TASK 3: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL

SUPPORT AT FORT MEADE MCCYWG FACILITY

The Contractor shall support MCCYWG security office in monitoring of daily activities of all personnel and visitors, to include logging, escorting, and assisting an average of 3,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems and devises, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.3.1 Badging. The Contractor shall verify security clearance in the JPAS within 24 hours of receiving a request, or other provided systems, and create badges for proper access control into the facility. The Contractor can expect an average of 400 badges per year shared between MFCC and MCCYWG.

CDRL E003: Monthly Status Report: Badging (MCCYWG)

4.3.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 52 indoctrinations, 450 polygraph scheduling, 20 security incidents, 50 fingerprint scheduling, and 200 debriefs annually shared between the MCCYWG and MFCC locations.

CDRL F003: Monthly Status Report: Interviews and Debriefings (Ft Meade MCCYWG)

4.3.3 Escorting and Front Desk. The Contractor shall provide escorting services as needed for visiting personnel.

The Contractor shall provide front desk support to ensure proper access control to the facility.

4.3.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security

4.3.5 Facility Closing. At the end of each day as described in 1.4.4, the assigned personnel to the 1100 to 2000 shift shall conduct a security walkthrough of the facility and secure the SCIF.

PART 5

OTHER PERTINENT INFORMATION OR SPECIAL CONSIDERATIONS

5.0 Project Management and Administration

The contractor shall designate a contractor employee to serve as the primary point of contact whoshall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the KO. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract.

The contract manager or alternate shall be available between 0730 thru 1630 Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons.

5.1 Technical training of Contractor Employeeswill be performed at the contractor’s own expense, with the following exceptions:

1. When the contracting officer has given prior approval for training to meet special requirements that are peculiar to the environment and/or operations.

2. Limited Contractor employee training may be authorized by the contracting officer, if the Government changes hardware, software, processes or hosting environments during the performance of this contract, and it is determined by the contracting officer to be in the best interest of the Government.

3. Sseminars, symposiums, or other similar conferences ONLY if the COR certifies and the contracting officer approves that attendance is mandatory for the performance of the task requirements.

5.2 5237.102-90 Enterprise-wide Contractor Manpower Reporting Application (ECMRA).

(a) DOD contracting activities awarding or administering contracts shall incorporate the following Enterprise-wide

Contractor Manpower Reporting Application (ECMRA) standard language into all contracts which include services, provided the organization that is receiving or benefiting from the contracted service is a Department of Defense organization, including reimbursable appropriated funding sources from non-DOD executive agencies where the

Defense Component requiring activity is the executive agent for the function performed. The reporting requirement does not apply to situations where a Defense Component is merely a contracting agent for another executive agency.

Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission

(D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

(b)The standard language to be inserted is:

The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the [NAMED COMPONENT] via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission

(D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

The contractor is required to completely fill in all required data fields using the following web address:

https://www.sam.gov.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year

(FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data https://www.sam.gov/ shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://www.sam.gov.

5.3 SPECIAL CONSIDERATIONS

Government Information Protection

The Contractor is obligated to protect from unauthorized use or disclosure all government confidential or classified material and/or Government-owned proprietary items obtained in the course of performance under the contract, as long as such data remains proprietary, confidential, or classified. Any information obtained in the course of duties, or the performance of services, under this contract including, but not limited to, information that may be made available for use that relates to the technical data, trade secrets, processes, operations, style of work, or apparatus, or to the technical data, statistical data, amount or source of any income, profits, losses, or expenditures of any person, firm, partnership, corporation, or association is included in this paragraph (and with “Items”). Contract personnel shall not publish, divulge, disclose, or make known Items in any manner, or to any extent not authorized by the

Contracting Officer. When the Contractor’s need for such Items ends, the Items shall be returned promptly (within ten (10) business days) to the appropriate government program personnel. However, the obligation not to discuss, disclose, release, reproduce or otherwise provide or make available such Items, or any portion thereof, shall continue, even after completion of this contract/order. Any actual or suspected unauthorized use, disclosure, release, or reproduction of any Items or violation of this agreement, of which the company or any employee is or may become aware, will be reported promptly (within one business day) to the Contractor’s program manager, who will inform the Contracting Officer within five (5) business days of receiving such report.

Work will be conducted primarily on-site at MFCC/MCCOG facilities in Quantico, VA; Fort Meade, MD; and.

Local Quantico support staff may be required to travel occasionally between any of the two Quantico sites utilizing privately owned vehicles at no additional cost to the Government.

Training and non-local travel within the continental United States is authorized and may occasionally be required at the request of the Government. All non-local travel and training costs shall be approved in writing prior to the contractor incurring these costs. Any Government approved travel incurred will be reimbursed, in accordance with the Joint Travel Regulations.

PART 6

APPLICABLE PUBLICATONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The Contractor must abide by all applicable regulations, publications, manuals, and local policies and procedures. The following documents are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC/MFCC as Government Furnished Information.

APPLICABLE DOCUMENTS AND DIRECTIVES

D.1 The following documents are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC, MFCC, MCCOG and MCCYWG as Government Furnished Information.

D.1.1 DoD 8570.01-M Change 1, Information Assurance Workforce Improvement Program

D.1.2 ICD 700 (Protection of National Intelligence, CI & Security Activities)

D.1.3 ICD 701 (Unauthorized Disclosures of Classified Information)

D.1.4 ICD 703; ICPG 703.1-6 (Protection of Classified National Intelligence, Including SCI)

D.1.5 ICD 704; ICPG 704.1-6 (Personnel Security Standards)

D.1.6 ICD 705; ICS 705.1-2; IC Tech Spec for ICD 705 (SCIF Physical Security)

- ICD 709 (Clearance Reciprocity)

D.1.7 ICD 709 (Clearance Reciprocity)

D.1.8 ICD 710; ICPG 710.1-2 (Classification Management and Control Marking

System)

D.1.9 DoDM 5105.21 Vol 1-3 (SCIF Administrative Security Manual -Information, Physical, Personnel and Special Activities Security)

D.1.10 DoDM 5200.01 Vol 1-4 (Information Security - Classification, Marking, Protection, Controlled Unclassified Information)

D.1.11 DoD 5200.2-R (Personnel Security Program)

D.1.12 DoD 5200.08-R (Physical Security Program)

PART 7

DELIVERABLES

Key documents/deliverables shall be sufficient, and relevant to support the Contractor’s findings, be consistent with fact, and include supporting documentation when needed by the United States Government. Where possible, and when agreed to by the Government lead, reports may be consolidated to maintain management efficiencies. No data, materials, information or other items (hereinafter singularly or collectively “Items”) created or provided expressly for this PWS shall be used by the Contractor for any purpose other than those that are in support of, or for performance under, this PWS without the prior written permission of the Contracting Officer.

7.1 The Contractor shall provide Monthly Status Reports to the COR and to the local senior Security Officer not later than the 10th day of the following month for the services performed from the first through the final calendar day of the previous month. The Monthly Status Reports shall include the following information:

1. Complete study title and Contract Number

2. Executive Summary covering the specific reporting period

3. Contract Progress Report

4. Objectives Covered

5. Identification of Government COR and Contractor Program Manager

6. Identification of Principle Contract Performers

7. Work Progress Accomplished During the specific reporting period, identified by individual tasks

8. Work Planned for Next Reporting Period

9. Reports, Briefings, and Meetings during the Reporting Period, identified by individual tasks

10. Problem Areas and Recommended Solutions

11. Contract Schedule Status

7.2 The contractor shall also provide Weekly Activity Reports to the local senior Security Officer. These reports will only include items 1, 4, 7, and 9 as described in 7.1 of this PWS.

7.3 All electronic copies of draft and final deliverables shall be provided in Microsoft Office software or in a format as required by the Marine Corps’ printing and/or administrative regulations.

7.4 All reports, documents, and other deliverables shall be prepared in accordance with the Marine Corps’ orders on files and directives, and correspondence.

7.5 All deliverables will be prepared and approved by the COR during the course of contract performance.

Deliverable due dates are designated in section schedule below.

7.6 See complete list of required monthly report submissions on the attached CDRL table.

Technical Exhibit 1

PERFORMANCE REQUIREMENTS SUMMARY

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

The performance standards for this PWS are stated in the Performance Requirements Summary (PRS) below.

Performance Requirements Summary (PRS)

Task

Paragraph

Deliverable Performance Standard Acceptable Quality

Level (AQL)

Incentives/Remedies

Task 01: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND PHYSICAL SECURITY AT QUANTICO, VA

MCCOG FACILITIES

4.1.1 CDRL A001: Monthly Status Report:

Badging (Quantico)

-Accuracy on processing in- doctrinations, scheduling of polygraphs, reporting violations to proper authorities, submitting security clearances, and conducting de-briefs.

-Properly verifying security clearances and providing correct access into appropriate facilities.

-Respond to requests within a 24 hour time period.

-Appropriate access granted to authorized/cleared individuals.

< 10% of rejection rate of processing, scheduling, and accuracy of verification.

100% of deliverables are accepted by

Government with two or less revisions required.

Incentive to meet/exceed AQL:

invoice approval, advantageous

CPARS rating.

Remedy for not meeting AQL:

invoice rejection, disadvantageous

CPARS ratings

4.1.2 CDRL B001: Monthly Status Report:

Interviews and Debriefs (Quantico)

Management and administration will be evaluated based on the following measures of performance and compliance:

- Deliverables shall be complete and accurate

- Assisting to help identify and preclude problems, or resolve issues.

<5% rejection rate of all format deliverables submitted under the performance provisions of the contract; and

<10% rejection rate of draft and first time submissions. The

Contractor shall adjudicate all

Government comments and resubmit the deliverable within ten

(10) calendar days of invoice approval, invoice rejection, disadvantageous

CPARS ratings receipt of the

Government’s comments.

4.1.3 Escorting and Front Desk -Ability to escort

uncleared visitors in and out of the area

-Securing all restricted areas during non-working hours

95% of contractor employees are appropriately trained and cleared to escort uncleared visitors

100% of the time all restricted areas are secured during…