M00264-21-Q-0098_0003.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to make the follow ing:

1) Change CLIN's 0002 status from required CLIN to an optional CLIN;

2) Make the change on the PWS Task 2 and put it as an optional task and;

3) Extend the quote due date from 24-May-2021 to 31-May-2021 12:00 PM.

Please see summary of changes.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 20

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 21-May-2021

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X M0026421Q0098

X 9B. DATED (SEE ITEM 11)

08-Apr-2021

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

21-May-2021

CODE

MCINCR - RCO

2010 HENDERSON RD

JOEL MIRO MARQUEZ

QUANTICO VA 22134

M00264 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M0026421Q0098

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 24-May-2021 12:00 PM to 31-May-2021 12:00 PM.

SUPPLIES OR SERVICES AND PRICES

CLIN 0002

The option status has changed from No Status to Option.

The following have been modified:

PWS

PERFORMANCE WORK STATEMENT (PWS)

SPECIAL SECURITY OFFICE SUPPORT

UNITED STATES MARINE CORPS MFCC

PART 1

GENERAL INFORMATION

1.0 GENERAL: This Performance Work Statement (PWS) is for a non-personal service contract to provide support services for physical, information, and visitor control for the MARFORCYBER (MFCC), Marine Corps Cyberspace

Warfare Group (MCCYWG), and the Marine Corps Cyber Operations Group (MCCOG). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide non-personal services necessary to perform special security office (SSO) support as defined in the Performance Work Statement. MFCC plans, coordinates, integrates, synchronizes, and directs full spectrum Marine Corps cyberspace operations, to include: DoD Global

Information Grid Operations, Defensive Cyber Operations, and when directed, Offensive Cyberspace Operations.

These capabilities are in support of MFCC, MCCYWG, and MCCOG which is an operational and staff organization supporting global Marine Corps Enterprise Network (MCEN) Command and Control capabilities for Fleet Marine

Forces and garrison forces stationed around the world. The MCCOG provides technical expertise, personnel, logistics, management, and facilities necessary to operate and defend the critical world-wide communications services, engineering services, operations services, and hardware and software enhancements and upgrades, in support of mission essential systems used throughout the Marine Corps. The MCCYWG organizes, trains, equips, provides administrative support, manages readiness, and recommends certification and presentation of Cyber

Mission Force Teams to USCYBERCOM. In addition, the MCCYWG plans and conducts full spectrum cyberspace operations as directed by COMMARFOCYBER in support of service, combatant command, joint, and coalition requirements.

1.2 Objectives: The basic objectives of this requirement are to:

Administer routine aspects of security programs and support Sensitive Compartmented Information (SCI) programs in compliance with the National Industrial Security Program Operating Manual; Joint Air Force, Army, Navy memo’s; Director of Central Intelligence Directive’s; Intelligence Community Directive’s

(ICD) and other applicable government security directives associated with SCI security programs;

Implement and monitor SCI security policies and procedures; ensure compliance with all aspects of the security program used by MFCC, MCCOG and MCCYWG;

Establish and maintain a working relationship with all government agencies while building/managing

Sensitive Compartmented Information Facilities (SCIF) as well as filing necessary clearance paperwork for

MFCC, MCCOG and MCCYWG personnel. Assist personnel in completing SF86 packages;

Coordinate with customer security representative to process security clearance requirements;

Review all security paperwork for accuracy, completion and submission;

Maintain SCIF visitor control functions; Prepare visit authorization letters;

Develop and provide new employee’s with security briefings, exit interviews, and debriefings;

Investigate and report security violations, infractions and incident reports to the appropriate entities;

Work closely with the SSO in preparing DD254 forms;

Conduct SCIF self-inspections in preparation for security audits;

Prepare written reports of surveys and inspections;

Maintain all security documentation and files in accordance with government requirements;

Provide front office access support for visitors and new personnel, to include temporary badges

1.3 General Information:

1.3.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-concurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

1.3.2 Recognized Holidays:

The following federal holidays are observed:

New Year’s Day

Martin Luther King’s Birthday

Presidents Day

Memorial Day

Independence Day

Labor Day

Columbus Day

Veterans Day

Thanksgiving Day

Christmas Day

Note: If a federally observed holiday should fall on a Saturday, it will be observed on the preceding Friday; if it falls on a Sunday, it will be observed on the following Monday. Should this occur, the Contractor is exempt from performing work on these days.

1.3.3 Hours of Operation: Two shifts will be required at the MCCYWG work location, Monday through Friday:

0600-1500 and 1100-2000. For the Quantico location, two shifts are required, Monday through Sunday: 0600-1800 and 1800-0600. For the MFCC location, shifts will be required to cover closing at 1730.

1.3.4 Place of Performance: The work to be performed under this contract will be performed at Fort George G.

Meade Maryland, Columbia Maryland, and Quantico Virginia.

1.3.5 Security Requirements: Contractor personnel performing work under this contract must have a Top

Secret/Sensitive Compartmented Information (TS/SCI). The Contractor shall maintain the level of security required for the life of the contract.

Security clearances at the Top Secret with SCI level based on a Single Scope Background Investigation will be required for all positions located at Quantico. All personnel working at Fort Meade shall possess a Top Secret /SCI with a counter intelligence polygraph. Security clearances at the TS level without SCI are not sufficient for the Fort

Meade location.Support staff must be able to maintain clearance levels assigned to their tasks or the contractor shall be replaced within 30 days with an individual that possesses the proper clearance.

The Government will conduct the NSA Military Affairs Division (MAD) indoctrination process following indoctrination to MFCC and MCCYWG. The Contractor is responsible for fully supporting the process and having employees fully adjudicated within five months of the employee start date. The Government reserves the right to negotiate a lower labor rate for a Contractor employee when the Contractor employee is not fully indoctrinated and badged with the NSA, unless reasonable delays are adequately justified in writing to the Agreements Officer

Representative and Agreements Officer, and performance is unaffected by delays.

Any Contractor personnel conducting Intelligence or Intelligence-related activities or supporting those efforts under

Department of Defense authorities shall report any Questionable Intelligence Activity (QIA), Significant, or Highly

Sensitive Matter (S/HSM) to the Command Intelligence Oversight Program Manager or Senior Intelligence Officer.

Questionable Intelligence Activity (QIA) is defined as: “Any Intelligence or Intelligence-related activity when there is reason to believe such activity may be unlawful or contrary to an Executive Order, Presidential Directive, Intelligence Community Directive, or applicable DoD policy governing that activity

. The Contractor personnel will be required to access information systems such as the Navy Marine Corps Intranet, NSANET, or the MCEN and data accessed through portals via user accounts and Common Access Cards that will be provided by the government.

Contractors shall be required to provide the following:

- JPAS visit request

- SF312 (Classified Information Nondisclosure Agreement)

- DD 2875 (System Authorization Access Request)

1.3.6 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

WORKING ON A GOVERNMENT INSTALLATION

The Contractor and its employees shall be subject to all traffic, security, and registration regulations for personnel and vehicles, to include Marine Corps Base Order 4200.3 “Contractor Screening Policy”. Copies of current regulations may be obtained from the KO.

Base Access

In order to gain access to Marine Corps Base Quantico VA and Fort George G. Meade MD, registration in the

Defense Biometric Identification System (DBIDS) must be completed as well as possession of a valid form of identification. The DBID registration information and a list of valid forms of identification are found at:

https://www.quantico.marines.mil/Base-Access/

1.3.7 NON-DISCLOSURE AGREEMENTS

All Contractor personnel receiving access to Government data or data from another Contractor through this contract must provide a signed non-disclosure agreement prior to commencing work. The original agreement shall be submitted to the KO and a copy shall be submitted to the COR. All non-disclosure agreements shall be signed by all

Contractor personnel involved in this effort and returned within five (5) business days after receipt of award or https://www.quantico.marines.mil/Base-Access/ within five (5) business days of onboarding of new incoming personnel. “Business day” as used in the context of this paragraph means normal Government working hours between the hours of 0730 and 1630, Monday to Friday, excluding weekends and federally observed holidays.

1.3.8 KEY AND ACCESS POLICY

1.3.8.1 Key Control. The Contractor shall establish and implement methods of making sure any keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality

Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the

Contracting Officer.

1.3.8.2 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the

Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the

Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor in an amount bilaterally agreed to. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor in an amount bilaterally agreed to.

1.3.8.3 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the

Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the Contracting Officer.

1.3.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal

Acquisition Regulation Subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings, the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.3.10 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract:

perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.3.11 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are

Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel will be required to wear assigned badges in the performance of this service.

1.3.12 Travel: Local travel may be required occasionally between MFCC and the MCCYWG, as well as Quantico’s four sites at no additional cost to the Government.

1.3.13 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information

(e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.3.14 Phase-In/Phase-Out Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the phase in/ phase out periods.

At the end of the existing contract period, if the incumbent contractor is not selected the incumbent contractor shall provide any information such as Standard Operating Procedures (SOP), processes, and/or files etc. to the new incumbent for up to thirty (30) days. The activities shall include but will not be limited to such functions as:

• Transfer of knowledge, experience, and lessons learned to the new contractor.

• A period where all deliverables are recompiled to ensure that they work as delivered.

• Assistance in start-up to ensure no service disruption and a smooth transition.

• Appropriate transfer of property, documentation, or personnel, as agreed to between the parties (including but not limited to, devices, equipment, databases, and systems)

• Phase-in activities shall also include contractor attendance at program reviews, participation in working groups, briefings, on-site communications, and full disclosure of technical, cost, and programmatic information.

• The plan shall also include a training program for contractor personnel and a date for accepting responsibilities for each division of work described in the plan.

Transition-Out: The Contractor shall develop and deliver to the Government a transition out plan, allowing 30 days for an orderly transition to any potential new Contractor for these services to ensure the level and quality of services are maintained. . This transition plan shall include digital and hard copies of the following:

• Documentation, operating procedures and other resources, including but not limited to, devices, equipment, databases and systems.

• a training program to be conducted with the incoming vendor and a date for transferring responsibilities for each division of work described in the plan.

• provide written confirmation to the Contracting Officer via email that they and all its employees have transferred and are no longer in possession of any U.S. Government Data and Information including, but not limited to, all copies, portions, data files and other related information created or generated by the Contractor under this effort or provided by the government.

PART 2

DEFINITIONS & ACORNYMS

2.0 Definitions.

CHANGE CONTROL BOARD (CCB). A committee to make decisions regarding approval of proposed changes to a software system and whether they should be implemented. The change control board may be constituted of project stakeholders or their representatives, development manager, test lead and a product manager.

CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the

Government. The term used in this contract refers to the prime.

CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the

Performance Work Statement.

DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

ENTERPRISE ARCHITECTURE GOVERNANCE BOARD (EAGB). A committee to make decisions regarding approval of proposed changes, additions, and deletions to the Enterprise Architecture Artifacts.

KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

QUALITY ASSURANCE. The Government procedures to verify that services being performed by the

Contractor are performed according to acceptable standards.

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

REAL PROPERTY. Land and rights in land, ground improvements, utility distribution systems, and buildings and other structures. It does not include foundations.

SUBCONTRACTOR. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

VISITOR. Means anyone on the grounds of ANC, to include ANC Government employees and contractor employees who are not on official Government duty (i.e., employees visiting outside of tour of duty or personal time off).

WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

WORK WEEK. Monday through Friday, unless specified otherwise.

2.1. Acronyms:

CCB Change Control Board

CFR Code of Federal Regulations

COR Contracting Officer Representative

DFARS Defense Federal Acquisition Regulation Supplement

FAR Federal Acquisition Regulation

ICD Intelligence Community Directive

JPAS Joint Personnel Adjudication System

KO Contracting Officer

MFCC Marine Force Cyber Command

MCCOG Marine Corps Cyber Operations Group

MCCYWG Marine Corps Cyberspace Warfare Group

MCEN Marine Corps Enterprise Network

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QASP Quality Assurance Surveillance Plan

QC Quality Control

SCI Sensitive Compartmented Information

SCIF Sensitive Compartmented Information Facility

SSO Special Security Office

TS Top Secret

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3.0 The contractor is not required to take possession of Government Furnished Property (GFP) and/or Government

Furnished Equipment (GFE) in the performance of this requirement.

3.1 The Government will provide the Contractor with all reasonable available information requested concerning this

PWS and the applicable documents as identified in Part I: Section D of this PWS.

3.3 The services performed under this contract involve access to and handling of material up to Top Secret / SCI level. All material developed by the Contractor during this contract shall become the property of the HQMC United

States Government. The Contractor shall be required to abide by the disclosure standards set forth in Defense

Federal Acquisition Regulation Supplement (DFARS) 252.204-7000 and to complete Employee Confidentiality and

Non-Disclosure forms. The Contractor shall not release any information to regulators, media, or other parties. Any information released shall come from USMC Government employees only.

3.4 In performance of this contract, the Contractor shall have access to a workspace at Government installations.

The government will provide workstation and access to the networks.

3.5 The Government will provide the necessary workspace for the Contractor personnel to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

PART 4

SPECIFIC TASKS

4.0 TECHNICAL REQUIREMENTS

The objective of the MFCC/MCCYWG/MCCOG security branch is to provide Information, Personnel, Administrative and Physical Security to all MFCC/MCCYWG/MCCOG facilities and personnel. The Security branch must also establish and implement a solid Security Management program that will ensure the proper handling and safeguarding of information and personnel at all levels. The Contractor will support the security branch mission.

4.1 TASK 1: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL

SUPPORT AT QUANTICO, VA MCCOG FACILITIES

The Contractor shall support the MCCOG security office in monitoring of daily activities of over 1,000 employees, to include logging, monitoring, and assisting an average of 5,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems (IDS), UL 2050 certified IDS, the user panel that controls UL 2050 IDS, as well as commonly used Government Services Administrated approved devices, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.1.1 Badging. The Contractor shall program badges and verify security clearance in the Joint Personnel

Adjudication System (JPAS) within 24 hours of receiving a request, Defense Information System for Security

(DISS), or other provided system, for proper access control into the facility. The Contractor can expect an average of

800 badges per year.

CDRL A001: Monthly Status Report: Badging (Quantico)

4.1.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 150 indoctrinations, 50 polygraph scheduling, 10 security incidents, 50 fingerprint scheduling, and 150 debriefs annually.

CDRL B001: Monthly Status Report: Interviews and Debriefings (Quantico)

4.1.3 Escorting and Front Desk. The Contractor shall provide escorting services as needed for visiting personnel.

The Contractor shall provide front desk support to ensure proper access control to the facilities.

4.1.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security matters.

4.2 TASK 2 (OPTIONAL): CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR

CONTROL SUPPORT AT FORT MEADE MFCC FACILITY

The Contractor shall support MFCC security office in monitoring of daily activities of all personnel and visitors, to include logging, escorting, and assisting an average of 5,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems and devises, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.2.1 Badging. The Contractor shall program badges and verify security clearance in the JPAS within 24 hours of receiving a request, or other provided system, for proper access control into the facility. The Contractor can expect an average of 400 badges per year shared between MFCC and MCCYWG.

CDRL C002: Monthly Status Report: Badging (MFCC)

4.2.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 52 indoctrinations, 450 polygraph scheduling, 20 security incidents, 50 fingerprint scheduling, and 200 debriefs annually shared between the MCCYWG and MFCC locations.

CDRL D002: Monthly Status Report: Interviews and Debriefs (Ft. Meade MFCC)

4.2.3 Escorting. The Contractor shall provide escorting services as needed for visiting personnel.

4.2.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security

4.2.5 Facility Closing. At the end of each day, the assigned personnel to the final shift shall conduct a security walkthrough of the facility. Facility closing differ from each location.

4.3 TASK 3: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL

SUPPORT AT FORT MEADE MCCYWG FACILITY

The Contractor shall support MCCYWG security office in monitoring of daily activities of all personnel and visitors, to include logging, escorting, and assisting an average of 3,000 visitors annually. The Contractor shall have knowledge of the state-of-the-art in intrusion detection systems and devises, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of JPAS, DISS, and Scattered Castles

4.3.1 Badging. The Contractor shall verify security clearance in the JPAS within 24 hours of receiving a request, or other provided systems, and create badges for proper access control into the facility. The Contractor can expect an average of 400 badges per year shared between MFCC and MCCYWG.

CDRL E003: Monthly Status Report: Badging (MCCYWG)

4.3.2 Interviews and Debriefings. The Contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, investigate and report security violations to proper authorities, review and submit security clearance background investigations, administer and submit fingerprints, prepare foreign born waiver packages for personnel with foreign relationships needing a TS/SCI clearance, and other personnel security tasks as needed. The Contractor shall conduct de-briefs when personnel detach from the command. The Contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The Contractor can expect approximately 52 indoctrinations, 450 polygraph scheduling, 20 security incidents, 50 fingerprint scheduling, and 200 debriefs annually shared between the MCCYWG and MFCC locations.

CDRL F003: Monthly Status Report: Interviews and Debriefings (Ft Meade MCCYWG)

4.3.3 Escorting and Front Desk. The Contractor shall provide escorting services as needed for visiting personnel.

The Contractor shall provide front desk support to ensure proper access control to the facility.

4.3.4 Meetings. In conjunction with government counterparts, the Contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security

4.3.5 Facility Closing. At the end of each day, the assigned personnel to the 1100 to 2000 shift shall conduct a security walkthrough of the facility and secure the SCIF. Facility closing differ from each location.

PART 5

OTHER PERTINENT INFORMATION OR SPECIAL CONSIDERATIONS

5.0 Project Management and Administration

The contractor shall designate a contractor employee to serve as the primary point of contact whoshall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the KO. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract.

The contract manager or alternate shall be available between 0730 thru 1630 Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons.

5.1 Technical training of Contractor Employeeswill be performed at the contractor’s own expense, with the following exceptions:

1. When the contracting officer has given prior approval for training to meet special requirements that are peculiar to the environment and/or operations.

2. Limited Contractor employee training may be authorized by the contracting officer, if the Government changes hardware, software, processes or hosting environments during the performance of this contract, and it is determined by the contracting officer to be in the best interest of the Government.

3. Sseminars, symposiums, or other similar conferences ONLY if the COR certifies and the contracting officer approves that attendance is mandatory for the performance of the task requirements.

5.2 5237.102-90 Enterprise-wide Contractor Manpower Reporting Application (ECMRA).

(a) DOD contracting activities awarding or administering contracts shall incorporate the following Enterprise-wide

Contractor Manpower Reporting Application (ECMRA) standard language into all contracts which include services, provided the organization that is receiving or benefiting from the contracted service is a Department of Defense organization, including reimbursable appropriated funding sources from non-DOD executive agencies where the

Defense Component requiring activity is the executive agent for the function performed. The reporting requirement does not apply to situations where a Defense Component is merely a contracting agent for another executive agency.

Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission

(D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

(b)The standard language to be inserted is:

The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the [NAMED COMPONENT] via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission

(D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

The contractor is required to completely fill in all required data fields using the following web address:

https://www.sam.gov.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year

(FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data https://www.sam.gov/ shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://www.sam.gov.

5.3 SPECIAL CONSIDERATIONS

Government Information Protection

The Contractor is obligated to protect from unauthorized use or disclosure all government confidential or classified material and/or Government-owned proprietary items obtained in the course of performance under the contract, as long as such data remains proprietary, confidential, or classified. Any information obtained in the course of duties, or the performance of services, under this contract including, but not limited to, information that may be made available for use that relates to the technical data, trade secrets, processes, operations, style of work, or apparatus, or to the technical data, statistical data, amount or source of any income, profits, losses, or expenditures of any person, firm, partnership, corporation, or association is included in this paragraph (and with “Items”). Contract personnel shall not publish, divulge, disclose, or make known Items in any manner, or to any extent not authorized by the

Contracting Officer. When the Contractor’s need for such Items ends, the Items shall be returned promptly (within ten (10) business days) to the appropriate government program personnel. However, the obligation not to discuss, disclose, release, reproduce or otherwise provide or make available such Items, or any portion thereof, shall continue, even after completion of this contract/order. Any actual or suspected unauthorized use, disclosure, release, or reproduction of any Items or violation of this agreement, of which the company or any employee is or may become aware, will be reported promptly (within one business day) to the Contractor’s program manager, who will inform the Contracting Officer within five (5) business days of receiving such report.

Work will be conducted primarily on-site at MFCC/MCCOG facilities in Quantico, VA; Fort Meade, MD; and.

Local Quantico support staff may be required to travel occasionally between any of the two Quantico sites utilizing privately owned vehicles at no additional cost to the Government.

Training and non-local travel within the continental United States is authorized and may occasionally be required at the request of the Government. All non-local travel and training shall be at no additional cost to the Government.

PART 6

APPLICABLE PUBLICATONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The Contractor must abide by all applicable regulations, publications, manuals, and local policies and procedures. The following documents are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC/MFCC as Government Furnished Information.

APPLICABLE DOCUMENTS AND DIRECTIVES

D.1 The following documents are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC, MFCC, MCCOG and MCCYWG as Government Furnished Information.

D.1.1 DoD 8570.01-M Change 1, Information Assurance Workforce Improvement Program

D.1.2 ICD 700 (Protection of National Intelligence, CI & Security Activities)

D.1.3 ICD 701 (Unauthorized Disclosures of Classified Information)

D.1.4 ICD 703; ICPG 703.1-6 (Protection of Classified National Intelligence, Including SCI)

D.1.5 ICD 704; ICPG 704.1-6 (Personnel Security Standards)

D.1.6 ICD 705; ICS 705.1-2; IC Tech Spec for ICD 705 (SCIF Physical Security)

- ICD 709 (Clearance Reciprocity)

D.1.7 ICD 709 (Clearance Reciprocity)

D.1.8 ICD 710; ICPG 710.1-2 (Classification Management and Control Marking

System)

D.1.9 DoDM 5105.21 Vol 1-3 (SCIF Administrative Security Manual -Information, https://www.sam.gov/

Physical, Personnel and Special Activities Security)

D.1.10 DoDM 5200.01 Vol 1-4 (Information Security - Classification, Marking, Protection, Controlled Unclassified Information)

D.1.11 DoD 5200.2-R (Personnel Security Program)

D.1.12 DoD 5200.08-R (Physical Security Program)

PART 7

DELIVERABLES

Key documents/deliverables shall be sufficient, and relevant to support the Contractor’s findings, be consistent with fact, and include supporting documentation when needed by the United States Government. Where possible, and when agreed to by the Government lead, reports may be consolidated to maintain management efficiencies. No data, materials, information or other items (hereinafter singularly or collectively “Items”) created or provided expressly for this PWS shall be used by the Contractor for any purpose other than those that are in support of, or for performance under, this PWS without the prior written permission of the Contracting Officer.

7.1 The Contractor shall provide Monthly Status Reports to the COR and to the local senior Security Officer not later than the 10th day of the following month for the services performed from the first through the final calendar day of the previous month. The Monthly Status Reports shall include the following information:

1. Complete study title and Contract Number

2. Executive Summary covering the specific reporting period

3. Contract Progress Report

4. Objectives Covered

5. Identification of Government COR and Contractor Program Manager

6. Identification of Principle Contract Performers

7. Work Progress Accomplished During the specific reporting period, identified by individual tasks

8. Work Planned for Next Reporting Period

9. Reports, Briefings, and Meetings during the Reporting Period, identified by individual tasks

10. Problem Areas and Recommended Solutions

11. Contract Schedule Status

7.2 The contractor shall also provide Weekly Activity Reports to the local senior Security Officer. These reports will only include items 1, 4, 7, and 9 as described in 7.1 of this PWS.

7.3 All electronic copies of draft and final deliverables shall be provided in Microsoft Office software or in a format as required by the Marine Corps’ printing and/or administrative regulations.

7.4 All reports, documents, and other deliverables shall be prepared in accordance with the Marine Corps’ orders on files and directives, and correspondence.

7.5 All deliverables will be prepared and approved by the COR during the course of contract performance.

Deliverable due dates are designated in section schedule below.

7.6 See complete list of required monthly report submissions on the attached CDRL table.

Technical Exhibit 1

PERFORMANCE REQUIREMENTS SUMMARY

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

The performance standards for this PWS are stated in the Performance Requirements Summary (PRS) below.

Performance Requirements Summary (PRS)

Task

Paragraph

Deliverable Performance Standard Acceptable Quality

Level (AQL)

Incentives/Remedies

Task 01: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND PHYSICAL SECURITY AT QUANTICO, VA

MCCOG FACILITIES

4.1.1 CDRL A001: Monthly Status Report:

Badging (Quantico)

-Accuracy on processing in- doctrinations, scheduling of polygraphs, reporting violations to proper authorities, submitting security clearances, and conducting de-briefs.

-Properly verifying security clearances and providing correct access into appropriate facilities.

-Respond to requests within a 24 hour time period.

-Appropriate access granted to authorized/cleared individuals.

< 10% of rejection rate of processing, scheduling, and accuracy of verification.

100% of deliverables are accepted by

Government with two or less revisions required.

Incentive to meet/exceed AQL:

invoice approval, advantageous

CPARS rating.

Remedy for not meeting AQL:

invoice rejection, disadvantageous

CPARS ratings

4.1.2 CDRL B001: Monthly Status Report:

Interviews and Debriefs (Quantico)

Management and administration will be evaluated based on the following measures of performance and compliance:

- Deliverables shall be complete and accurate

- Assisting to help identify and preclude problems, or resolve issues.

<5% rejection rate of all format deliverables submitted under the performance provisions of the contract; and

<10% rejection rate of draft and first time submissions. The

Contractor shall adjudicate all

Government comments and resubmit the deliverable within ten

(10) calendar days of invoice approval, invoice rejection, disadvantageous

CPARS ratings receipt of the

Government’s comments.

4.1.3 Escorting and Front Desk -Ability to escort

uncleared visitors in and out of the area

-Securing all restricted areas during non-working hours

95% of contractor employees are appropriately trained and cleared to escort uncleared visitors

100% of the time all restricted areas are secured during non-working hours and no descepancies identified in the duty logbook.

invoice approval, invoice rejection, disadvantageous

CPARS ratings

Task 2: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND PHYSICAL SECURITY AT FORT MEADE

MFCC FACILITY

4.2.1 CDRL C002: Monthly Status Report:

Badging (MFCC)

-Accuracy on processing in- doctrinations, scheduling of polygraphs, reporting violations to proper authorities, submitting providing correct access

Government with two invoice approval, invoice rejection,

4.2.2 CDRL D002: Monthly Status Report:

Interviews and Debriefs (MFCC)

- Deliverables shall be complete, accurate, and prepared to a professional standard

- Ability to identify and preclude problems, or resolve issues.

submitted under the submissions. The

Contractor shall adjudicate all

Government comments and resubmit the deliverable within ten

(10) calendar days of receipt of the

Government’s comments.

invoice approval, invoice rejection, disadvantageous

CPARS ratings

4.2.3 Escorting and Front Desk -Ability to escort

working hours

95% of contractor employees are appropriately trained and cleared to escort uncleared visitors

100% of the time all restricted areas are secured during non-working hours and no invoice approval, invoice rejection, disadvantageous

CPARS ratings

Task 3: CONDUCT INFORMATION, PERSONNEL, ADMINISTRATIVE AND PHYSICAL SECURITY AT FORT MEADE

MCCYWG FACILITY

4.3.1 CDRL E003: Monthly Status Report:

Badging (MCCYWG)

-Accuracy on processing in- doctrinations, scheduling of polygraphs, reporting violations to proper authorities, submitting providing correct access

Government with two invoice approval, invoice rejection,

4.3.2 CDRL F003: Monthly Status Report:

Interviews and Debriefs (MCCYWG)

Management and administration will be evaluated based on the following measures of performance and compliance:

- Deliverables shall be complete, accurate, and prepared to a professional standard

- Ability to identify and preclude problems, or resolve issues.

submitted under the submissions.

invoice approval, invoice rejection, disadvantageous

CPARS ratings

4.3.3 Escorting and Front Desk -Ability to escort

working hours

95% of contractor employees are appropriately trained and cleared to escort uncleared visitors

100% of the time all restricted areas are secured during non-working hours and no invoice approval, invoice rejection, (End of Summary of Changes)