E2 M00264-24-Q-0109 Amendment 0002.pdf

AMENDMENT 0002 to SOLICITATION M00264-24-Q-0109

For

MARINE FORCES CYBER COMMAND’s SPECIAL SECURITY OFFICE SUPPORT

The purpose of Amendment 0002 is to:

1) Reopen solicitation M00264-24-Q-0109 effective 17 October 2024 due to a change in the requirement.

MCINCR-RCO is accepting quotes from 17 October to the revised closing date. Previously submitted quotes will not be considered.

2) All quotes are due no later than 4 November 2024 10:00 E.T.

3) Please see revisions to FAR 52.212-1 and FAR 52.212-2 Addendums.

4) Please see revised PWS.

5) Please see attached revised Pricing Template.

Amendment 0002 changes and revisions are highlighted in yellow. All other terms and conditions remain unchanged.

This is a combined synopsis/solicitation for commercial products or commercial services prepared in accordance with the format in FAR Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotes are being requested and a written solicitation will not be issued.

Solicitation M00264-24-Q-0109 is issued as a request for quote (RFQ).

The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2024-05.

This acquisition is a competitive 100% set aside limited to eligible 8(a) participants. (SBA Requirement # KG1720036865S) The associated NACIS is 561611 ‘Investigation and Personal Background Check Services’ with a size standard of $25M.

A list of line item number(s) and items, quantities, and units of measure (including options), along with the requirement’s description and performance period dates and acceptance follow.

The provision at FAR 52.212-1 ‘Instructions to Offerors- Commercial Products and Commercial Services’ is incorporated by reference and applies to this acquisition, with addenda applicable to paragraphs (b) and (e) following.

The provision at FAR 52.212-2 ‘Evaluation- Commercial Products and Commercial Services’ applies to this acquisition. The addenda following provides the specific evaluation criteria and procedures.

Quoters are advised to include a completed copy of the provision at FAR 52-212-3 ‘Offeror Representations and Certifications- Commercial Products and Commercial Services’ with its quote.

The clause at FAR 52.212-5 ‘Contract Terms and Conditions Required to Implement Statutes or Executive Orders- Commercial Products and Commercial Services’ applies to this acquisition. The additional FAR clauses cited and identified with an “X” marked in the clause are applicable to the acquisition.

Additional contract requirements or terms and conditions as determined by the contracting officer to be necessary for this acquisition follow.

DISCLAIMER. This is an RFQ, and a quote submitted in response (quotation) is not an offer and, consequently, cannot be accepted by the Government to form a binding contract. Therefore, issuance by the Government of an order in response to a quotation does not establish a contract. The order is an offer by the Government to the supplier

MFCC SSO Support Services

M00264-24-Q-0109 Page 2 of 67 to buy certain supplies or services upon specified terms and conditions. A contract is established when the supplier accepts the offer. See FAR 13.004(a)

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 12 Months MCCYWG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for the Base Period.

Potential future location change from Columbia, MD to Ft. Meade, MD FOB: Destination

PSC CD: R499

NET AMT

0002 12 Months MCCOG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for the Base Period.

M00264-24-Q-0109 Page 3 of 67

1001 12 Months OPTION MCCYWG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for Option Period 1.

Potential future location change from Columbia, MD to Ft. Meade, MD

1002 12 Months OPTION MCCOG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for Option Period 1.

2001 12 Months OPTION MCCYWG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for Option Period 2.

Potential future location change from Columbia, MD to Ft. Meade, MD

M00264-24-Q-0109 Page 4 of 67

2002 12 Months OPTION MCCOG Support Services

FFP

In accordance with PWS 2.1.1, 2.1.2, and 2.1.3 tasks for Option Period 2.

PERFORMANCE WORK STATEMENT (PWS)

SPECIAL SECURITY OFFICE SUPPORT (SSO)

UNITED STATES MARINE CORPS

PART 1

GENERAL INFORMATION

1.0 BACKGROUND: This Performance Work Statement (PWS) provides support services for physical, administrative, and visitor control for the Marine Corps Cyberspace Warfare Group (MCCYWG), and the Marine Corps Cyber Operations Group (MCCOG).

MCCYWG plans, coordinates, integrates, synchronizes, and directs full spectrum Marine Corps cyberspace operations, to include DoD Global Information Grid Operations, Defensive Cyber Operations, and when directed, Offensive Cyberspace Operations. These capabilities are in support of MCCYWG and MCCOG which is an operational and staff organization supporting global Marine Corps Enterprise Network (MCEN) Command and Control capabilities for Fleet Marine Forces and garrison forces stationed around the world. The MCCYWG organizes, trains, equips, provides administrative support, manages readiness, and recommends certification and presentation of Cyber Mission Force Teams to USCYBERCOM. In addition, the MCCYWG plans and conducts full spectrum cyberspace operations as directed by COMMARFOCYBER in support of service, combatant command, joint, and coalition requirements. The MCCOG provides technical expertise, personnel, logistics, management, and facilities necessary to operate and defend the critical world-wide communications services, engineering services, operations services, and hardware and software enhancements and upgrades, in support of mission essential systems used throughout the Marine Corps.

1.1 SCOPE: This PWS describes the services required by MCCYWG and MCCOG to support its security mission in the following areas: Personnel, Visitor Control, and Special Security Administrative tasks.

1.2 OBJECTIVE: The objective of this PWS is to receive consistent quality and service-oriented contractor support to administer routine aspects of security programs and support Sensitive Compartmented Information (SCI) programs while ensuring compliance with the National Industrial Security Program Operating Manual; Joint Air Force, Army, Navy memo’s; Director of Central Intelligence Directive’s; Intelligence Community Directive’s (ICD) and other applicable Government security directives associated with SCI security programs. Required services also include: implement and monitor SCI security policies and procedures; ensure compliance with all aspects of the security program used by MCCYWG and MCCOG.

M00264-24-Q-0109 Page 5 of 67

1.3. QUALITY CONTROL: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, resolve, and prevent repeatable unsatisfactory and defective services. The contractor’s quality control program is the means by which it ensures effective contract performance.

1.4 HOURS OF OPERATION: Services are required during MCCYWG and MCCOG operational hours. The MCCYWG facility is operational Monday through Friday: 0600 to2000. The MCCOG facility at Bldg. 27410 is operational Monday through Sunday, 24 hours a day seven days a week (to include holidays). The MCCOG facility at Bldg. 3255 is operational Monday through Friday; 0600 – 1800; however, services are only required 1400 – 1800 Monday through Friday.

1.5 RECOGNIZED HOLIDAYS:

The following federal holidays are observed:

New Year’s Day Martin Luther King’s Birthday Presidents Day Memorial Day Juneteenth Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day

Note: If a federally observed holiday should fall on a Saturday, it will be observed on the preceding Friday; if it falls on a Sunday, it will be observed on the following Monday. Should this occur, the contractor is exempt from performing work on these days.

1.6 PLACE OF PERFORMANCE: Unless otherwise specified by task description(s), all performance shall take place at Government facilities in the Columbia Gateway Business Park, Columbia, Maryland (MD) and Quantico (Bldg. 27410 and Bldg. 3255), Virginia (VA). The Columbia location may be relocated to Ft. Meade, Maryland.

1.7 ALTERNATE PLACE OF PERFORMANCE: CONTINGENCY ONLY: As determined by the Contracting Officer Representative (COR), contractor employees may be required to work at an alternate place of performance (e.g., the contractor’s facility, or another COR-approved location within the local travel area) in cases of unforeseen conditions or contingencies (e.g. exercises, Government closure due to inclement weather, etc.). The Government will provide Common Access Cards (CAC) readers, thereby expecting the contractor to provide the same level of effort and prepare deliverables and other contract documentation utilizing contractor resources.

1.8 SECURITY REQUIREMENTS: Contractor personnel performing work under this contract at the Columbia, MD, and the potential Ft. Meade, MD location must have an active Top Secret/Sensitive Compartmented Information (TS/SCI) or continuous evaluation (CE) enrollment within expiration of five (5) years and Counterintelligence (CI) Polygraph within expiration of six (6) years in Defense Information Security System (DISS) prior to performing work under this PWS. The contractor shall ensure this level of clearance is maintained throughout the life of the contract. Security clearances at the TS level without SCI are not sufficient for the Columbia or the Ft. Meade facility.

Security clearances at the TS/SCI level based on a Single Scope Background Tier 5 Investigation is required for all positions located at Quantico. The contractor shall ensure this level of clearance is maintained throughout the life of the contract.

M00264-24-Q-0109 Page 6 of 67

The Government will conduct the National Security Agency (NSA) Military & External Affairs Division (MEAD) indoctrination process following indoctrination to MCCYWG. The contractor is responsible for fully supporting the process and having employees fully adjudicated within five months of the employee start date.

The contractor personnel shall be required to access information systems such as the Navy Marine Corps Intranet, NSANET, or the Marine Corps Enterprise Network (MCEN) and data accessed through portals via user accounts and CAC that is provided by the government.

Prior to performing, the contractor shall be required to provide the following:

- DISS visit request

- DD Form 254 (Department of Defense Contract Security Classification Specification)

- SF312 (Classified Information Nondisclosure Agreement)

- DD 2875 (System Authorization Access Request)

1.9 SAFEGUARDING : The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, Sensitive Compartmented Information Facility (SCIF) , equipment, and materials shall be secured.

1.10 WORKING ON A GOVERNMENT INSTALLATION

The contractor and its employees shall be subject to all traffic, security, and registration regulations for personnel and vehicles, to include Marine Corps Base Order 4200.3 “Contractor Screening Policy”. Copies of current regulations may be obtained from the Government Special Security Officer lead.

Base Access In order to gain access to Marine Corps Base Quantico VA and Ft. Meade MD, registration in the Defense Biometric Identification System (DBIDS) must be completed as well as possession of a valid form of identification. The DBIDS registration information and a list of valid forms of identification are found at:

https://www.quantico.marines.mil/Base-Access/ https://home.army.mil/meade/index.php/about/visitor-information

1.10.1 Required Insurance: The following types of insurance are required IAW FAR Clause 52.228-5, “Insurance

– Work on a Government Installation” and shall be maintained in the minimum amounts shown:

1.10.1.1 Workmen’s Compensation and Employers Liability Insurance as required by law except if this contract is to be performed in a State that does not require or permit private insurance, then companies with the statutory or administrative requirements in any such State will be satisfactory. The required Workmen’s Compensation insurance shall extend to cover employer’s liability for accidental bodily injury or death and for occupational disease with a minimum liability of $100,000.00.

1.10.1.2 General Liability Insurance. Bodily injury liability insurance, in the minimum limits of $500,000.00 per occurrence shall be required on the comprehensive.

1.10.1.3 Automobile Liability Insurance. This insurance shall be required on the comprehensive policy and shall provide bodily injury liability and property damage liability covering the operation of all automobiles used in connection with the performance of the contract. At least the minimum limits of $200,000.00 per person and $500,000.00 per occurrence for bodily injury and $20,000.00 per occurrence for property damage shall be required.

1.11 OPERATIONS SECURITY (OPSEC): OPSEC is a five-step analytical process (identify critical information; analyze the threat; analyze vulnerabilities; assess risk; develop countermeasures) that is used as a means to identify, control, and protect unclassified and unclassified sensitive information associated with U.S.

national security related programs and activities. All personnel working under this task will at some time handle, produce, or process Critical Information or Critical Program Information, and therefore all contractor personnel must practice OPSEC. All work is to be performed in accordance with DoD OPSEC requirements, MFCO 3070.1B and in accordance with the OPSEC attachment to the DD254.

M00264-24-Q-0109 Page 7 of 67

1.12 NON-DISCLOSURE AGREEMENTS

All contractor personnel receiving access to Government data or data from another contractor through this contract must provide a signed non-disclosure agreement prior to commencing work. The original agreement shall be submitted to the COR. All non-disclosure agreements shall be signed by all contractor personnel involved in this effort and returned within five (5) business days after receipt of award or within five (5) business days of onboarding of new incoming personnel. “Business day” as used in the context of this paragraph means Monday to Friday, excluding federally observed holidays. Contractor format, identifying the business name and contract number, is acceptable.

1.13 KEY AND ACCESS POLICY

1.13.1 Key Control. The contractor shall establish and implement methods of making sure any keys/key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the contractor by the Government shall be duplicated. The contractor shall develop procedures covering key control that shall be included in its Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or fraudulent duplicate keys to the security officer, contracting officer representative, and contracting officer.

1.13.2 In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the contracting officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the contractor in an amount bilaterally agreed to. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the contractor in an amount bilaterally agreed to.

1.13.3 The contractor shall prohibit the use of Government issued keys by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the contracting officer.

1.14 CONTRACTING OFFICER REPRESENTATIVE (COR): The COR will be identified by separate letter.

The COR monitors all technical aspects of the contract and assists in contract administration A letter of designation issued to the COR, a copy of which is sent to the contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting award.

1.15 IDENTIFICATION OF CONTRACTOR EMPLOYEES: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

Contractor personnel will be required to wear Government- assigned badges in the performance of this service.

1.16 TRAVEL: Local travel may be required occasionally between Fort Meade and MCCYWG's Columbia, MD location, as well as MCCOG’s two sites (Bldg. 27410 and Bldg. 3255) at Quantico at no additional cost to the Government.

1.17 ORGANIZATIONAL CONFLICT OF INTEREST: Contractor and subcontractor personnel performing work under this contract may receive, have access to proprietary information which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR 2.101. The contractor shall notify the contracting officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the contracting officer to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the contracting

M00264-24-Q-0109 Page 8 of 67 officer and unilaterally determined that any such OCI cannot be satisfactorily avoided or mitigated, the contracting officer may affect other remedies as deemed necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.18 CONTRACT TRANSITION: The contractor shall be fully staffed with all contractor personnel at full performance within 30 days of performance start date. The contractor shall maintain full personnel staffing up to the contract end date to support Government transition to a new contractor in the event of a new awardee from a re-compete award. The transition period, if required, shall commence 30 days prior to the contract end date. During the transition period, the contractor shall turnover such documents, information, and all associated intellectual property, to the Government if not already delivered.

1.19 POST AWARD CONFERENCE AND PERIODIC PROGRESS MEETINGS: The contractor shall attend a post-award conference convened by the contracting officer in accordance with FAR Subpart 42.5. The meeting will provide an introduction between key personnel such as the contracting officer, the COR, and other Government personnel, as appropriate, to achieve a clear and mutual understanding of all contract requirements.

The contracting officer and COR may meet periodically with the contractor to review the contractor's performance.

At these meetings, the contractor will be apprised of how the Government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

The contractor shall plan and conduct a monthly contract status meeting. The primary purpose of these meeting is to review contract performance status and address contract-related issues. These meetings are expected to last no longer than one (1) hour. At a minimum, the meeting will include appropriate contractor representative(s), the contracting officer, the COR, and Government technical personnel, as appropriate; however, the contracting officer may choose to include other Government attendees. The meeting will be held virtually, via a phone conference call, or at a location determined by the contracting officer.

Each meeting will cover the following topics, as appropriate:

Contract Performance Status Status of contract deliverables/tasks Performance issues encountered or expected Compliance with staffing Discussions against QASP metrics

Other Items:

CLIN-related issues Invoice submissions and payment status

M00264-24-Q-0109 Page 9 of 67

PART 2

PERFORMANCE TASKS

2.0 TECHNICAL REQUIREMENTS

The MCCYWG and the MCCOG security branch is responsible to establish and implement a solid Security Management Program that will ensure the proper handling and safeguarding of information and personnel at all levels. The contractor shall support the security objective.

2.1 PERSONNEL, ADMINISTRATIVE AND VISITOR CONTROL TASKS

The contractor shall support the MCCYWG and MCCOG security office facilities in the monitoring of daily activities for 1,200 MCCYWG employees and for over 1,000 MCCOG employees, to include logging, monitoring, and assisting on average 3,000 and 5,000 visitors annually to MCCYWG and MCCOG facilities, respectively. The contractor shall have working knowledge of state-of-the-art intrusion detection systems (IDS), UL 2050 certified IDS, the user panel that controls UL 2050 IDS, as well as commonly used General Services Administration approved devices, safes and other storage containers, locks and locking systems, and personnel entry control systems. The contractor shall have working knowledge of DISS, and Scattered Castles.

2.1.1 PERSONNEL

2.1.1.1 Physical Security: The contractor shall assist in performing walkthroughs, inspections of workspaces to include if sensitive documentation is left unlocked in a storage container or unattended and ensure storage containers are properly locked up. The contractor shall provide findings of inspections to the Government Special Security Officer. The contractor shall assist in opening and closing, sanitize spaces, and perform combination changes for various secure locks for safes. The contractor shall conduct Random Anti-Terrorism Measures (RAMs) on a daily basis. RAMs must be truly random; i.e. the time must be different day to day.

2.1.1.2 Badging: Within 24 hours of checking in with the command, the contractor shall program badges within 48 hours and verify security clearance in the Defense Information System for Security (DISS), or other provided systems, for proper access control into the facility. The contractor can expect an average of 400 badges per year shared between MCCYWG and its Higher Headquarter Command and 800 badges per year for MCCOG.

2.1.2 ADMINISTRATIVE

2.1.2.1 Indoctrinations and Debriefings: The contractor shall conduct security indoctrinations into sensitive and classified programs, schedule polygraphs for personnel, review and submit security clearance background investigations, scheduling fingerprint appointments, prepare foreign born waiver packages for personnel with foreign relationships requiring a TS/SCI clearance, report potential and confirmed security violations, infractions, and incident reports to appropriate Government personnel, and other security tasks as needed. The contractor shall conduct de-briefs when personnel detach from the command. The contractor shall prepare monthly reports to identify and summarize personnel and actions who were involved in these processes. The contractor can expect an estimated 520 indoctrinations, 260 security incidents and violations, scheduling of 25 fingerprint appointments, and 450 debriefs annually at the MCCYWG facility annually. The contractor can expect an estimated 150 indoctrinations, 10 security incidents and violations, scheduling of 50 fingerprint appointments, and 150 debriefs annually at the MCCOG facility.

2.1.2.2 Meetings: In conjunction with Government counterparts, the contractor shall attend, participate in, and offer subject matter expertise in support of conference calls and meetings, as deemed necessary to discuss security matters.

2.1.3 VISITOR CONTROL

2.1.3.1 Entry Control Point (ECP) /Visitor Control Support: The contractor shall provide access/visitor support for all visiting personnel. The contractor shall verify clearance levels, assist with escorting visitors without clearances within accredited secure spaces, and sign in visitors into the visitor access log. The contractor shall issue appropriate

M00264-24-Q-0109 Page 10 of 67 badges to all visitors entering the building. The contractor shall maintain a daily log documenting visitors names (visitor, contractor or Government personnel), Points of Contact (POC), date and time of arrival/departure, employer, and the visitor badge number assigned.

M00264-24-Q-0109 Page 11 of 67

PART 3

OTHER PERTINENT INFORMATION OR SPECIAL CONSIDERATIONS

3.0 PROJECT MANAGEMENT AND ADMINISTRATION

The contractor shall designate a primary point of contact who shall be responsible for the performance of the work.

The name of this person and an alternate who shall act for the contractor when the primary is absent shall be designated in writing to the contracting officer and COR prior to the start of performance. Both individuals shall have full authority to act on the behalf of the contractor on all contract matters relating to performance under this contract. The primary and alternate shall be available during Government core hours of 0900 through 1500, Monday thru Friday, except Federal holidays, for the MCCYWG location. The primary or alternate shall be available 24/7 for the MCCOG location.

3.1 TRAINING

Technical training of contractor employees is the responsibility of the contractor and shall be performed at the contractor’s own expense, with the following exceptions:

1. Limited contractor employee training provided by the Government may be required and communicated by the Contracting Officer Representative in instances when the Government changes hardware, software, processes or hosting environments during the performance of this contract. This training is at no cost to the contractor.

3.2 SPECIAL CONSIDERATIONS

Government Information Protection: The contractor is obligated to protect from unauthorized use or disclosure all Government classified material, Government-owned proprietary items, or information obtained in the course of performance under the contract, as long as such data remains proprietary, confidential, or classified. Any information obtained in the course of duties, or the performance of services, under this contract including, but not limited to, information that may be made available for use that relates to the technical data, trade secrets, processes, operations, style of work, or apparatus, or to the technical data, statistical data, amount or source of any income, profits, losses, or expenditures of any person, firm, partnership, corporation, or association is included in this paragraph (and with data, materials, information or other items. Hereinafter referred to as singularly or collectively “Items”). Contract personnel shall not publish, divulge, disclose, or make known Items in any manner, or to any extent not authorized by the contracting officer. When the contractor’s need for such Items ends, the Items shall be returned promptly (within ten (10) business days) to the appropriate government program personnel. However, the obligation not to discuss, disclose, release, reproduce or otherwise provide or make available such Items, or any portion thereof, shall continue, even after completion of this contract/order. Any actual or suspected unauthorized use, disclosure, release, or reproduction of any Items or violation of this agreement, of which the company or any employee is or may become aware, will be reported promptly (within one business day) to the contractor’s program manager, who shall inform the contracting officer within five (5) business days of receiving such report.

M00264-24-Q-0109 Page 12 of 67

PART 4

DELIVERABLES

4.0 Key documents/deliverables shall be sufficient and relevant to support the contractor’s findings, be consistent with fact, and include supporting documentation when needed by the United States Government. Where possible, and when agreed to by the Government lead, reports may be consolidated to maintain management efficiencies. No data, materials, information or other items (hereinafter singularly or collectively referred to as ‘Items’ created or provided expressly for this PWS shall be used by the contractor for any purpose other than those that are in support of, or for performance under, this PWS without the prior written permission of the contracting officer.

4.1 The contractor shall provide a Monthly Status Report to the COR and to the local senior security officer for each location no later than the 10th calendar day of the following month for the services performed during the preceding month. The Monthly Status Report shall include the following information:

1. Contract Number

2. Executive Summary; to include all tasking covering both MCCOG and MCCYWG locations during the reporting period.

3. Contractor Staffing Progress Report

a. Start date (Command Indoc)

b. Command INDOC submission date

c. MEAD INDOC submission date (MCCYWG Location only)

d. Full INDOC date

4. Identification of Contract Performers to include location of support.

5. Work progress accomplished during the specific reporting period, identified by individual tasks listed within PWS.

a. Total number of debriefs and indoctrinations

b. Total number of incident reports

c. Total number of escort duties

d. Total number of badge creations

e. Total number of Visit Requests

f. Total number of MEAD submission (MCCYWG only)

6. Problems and concerns

4.2 The contractor shall also provide a Weekly Activity Report to the local senior security officer every Friday by 10:00 am. These reports will only include items 1 and 4. as described in 4.1 of this PWS.

4.3 All electronic copies of deliverables shall be provided in Microsoft Office software or in a format as required by the Marine Corps’ printing and administrative regulations. The COR reserves the right to submit questions and concerns, with any subsequent revised deliverables at no additional cost to the Government.

4.4 All reports, documents, and other deliverables shall be prepared in accordance with the Marine Corps’ orders on files and directives, and correspondence.

M00264-24-Q-0109 Page 13 of 67

PART 5

DEFINITIONS & ACORNYMS/INITIALISMS

5.0 DEFINITIONS

CHANGE CONTROL BOARD (CCB). A committee to make decisions regarding approval of proposed changes to a software system and whether they should be implemented. The change control board may be constituted of project stakeholders or their representatives, development manager, test lead and a product manager.

CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

COVERAGE. As directed herein, to work in, have responsibility for, or provide services in a specific area.

DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

ENTERPRISE ARCHITECTURE GOVERNANCE BOARD (EAGB). A committee to make decisions regarding approval of proposed changes, additions, and deletions to the Enterprise Architecture Artifacts.

HIGH TRAFFIC: Peak Hours: of a place, or time, where a lot of people are anticipated to pass through or where people pass through very often, as specified per site.

KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

MONITOR: Observe and check the progress or quality of (something); keep under systematic review.

QUALITY ASSURANCE. The Government procedures to verify that services being performed by the contractor are performed according to acceptable standards.

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

RANDOM ANTITERRORISM. When security personnel perform various tasks, i.e., inspections of workspaces or checking personnel bags for sensitive information, on different days and times.

M00264-24-Q-0109 Page 14 of 67

REAL PROPERTY. Land and rights in land, ground improvements, utility distribution systems, and buildings and other structures. It does not include foundations.

SANTIZE SPACES. Observe and check workspaces to ensure no sensitive documentation is left unlocked in storage container or unattended. As well as ensuring that storage containers are properly locked up.

SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

VISITOR. Means anyone on the grounds of ANC, to include ANC Government employees and contractor employees who are not on official Government duty (i.e., employees visiting outside of tour of duty or personal time off).

WORK WEEK. Monday through Friday, unless specified otherwise.

5.1 ACRONYMS AND INITIALISMS:

CCB Change Control Board CFR Code of Federal Regulations COR Contracting Officer Representative DFARS Defense Federal Acquisition Regulation Supplement DISS Defense Information System for Security FAR Federal Acquisition Regulation ICD Intelligence Community Directive KO Contracting Officer MFCC Marine Force Cyber Command MCCOG Marine Corps Cyber Operations Group MCCYWG Marine Corps Cyberspace Warfare Group MCEN Marine Corps Enterprise Network PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan QC Quality Control RAM Random Anti-Terrorism Measures SCI Sensitive Compartmented Information SCIF Sensitive Compartmented Information Facility SSO Special Security Office TS Top Secret

M00264-24-Q-0109 Page 15 of 67

PART 6

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

6. GOVERNMENT FURNISHED ITEMS AND SERVICES

6.1 Services: The Government will provide workstations, access to networks, and the help desk availability.

6.2 Facilities: The Government will provide necessary workspace for contractor personnel to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

6.3 Utilities: All utilities in the facility will be available for contractor use in the performance of duties outlined in this PWS. The contractor shall instruct employees in utility conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities.

6.4 Equipment: The Government will provide scanners, printers, and teleconference equipment. This equipment is only for use on-site within Government facilities. CAC readers will be provided in the event an alternate workplace of performance is required (See 1.7)

6.5 Information: Procedures, policies, and or program/system technical manuals will be provided as needed to support problem resolution, and or field support, as appropriate.

M00264-24-Q-0109 Page 16 of 67

PART 7

APPLICABLE PUBLICATONS

7. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

7.1. The contractor must abide by all applicable regulations, publications, manuals, and local policies and procedures. The following documents and associated version updates are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC/MFCC as Government Furnished Information.

APPLICABLE DOCUMENTS AND DIRECTIVES

The following documents are applicable to this requirement. Additional documents, as appropriate, will be provided by HQMC, MCCOG and MCCYWG as Government Furnished Information.

DoD 8570.01-M Change 1, Information Assurance Workforce Improvement Program ICD 700 (Protection of National Intelligence, CI & Security Activities) ICD 701 (Unauthorized Disclosures of Classified Information) ICD 703; ICPG 703.1-6 (Protection of Classified National Intelligence, Including SCI) ICD 704; ICPG 704.1-6 (Personnel Security Standards) ICD 705; ICS 705.1-2; IC Tech Spec for ICD 705 (SCIF Visitor control)

- ICD 709 (Clearance Reciprocity) ICD 709 (Clearance Reciprocity) ICD 710; ICPG 710.1-2 (Classification Management and Control Marking System) DoDM 5105.21 Vol 1-3 (SCIF Administrative Security Manual -Information, Physical, Personnel and Special Activities Security) DoDM 5200.01 Vol 1-4 (Information Security - Classification, Marking, Protection, Controlled Unclassified Information) DoD 5200.2-R (Personnel Security Program) DoD 5200.08-R (Visitor control Program) Technical Specifications For Construction And Management Of Sensitive Compartmented Information

Facilities Version 1.3, IC Tech Spec‐for ICD/ICS 705, 10 September 2015 -- (U) DoD Instruction 5200.8, Security of DoD Installations and Resources, dated 10 December 2005 -- (U) DoD 5200.8R, Physical Security Program, 27 May 2009

MCCOG 5510 Group Order 5510.1B Security Program MMCOG 5239 Cyber Security Group Order SECNAV M-5510.36 Information Security Program SECNAV M-5510.30 Personnel Security Program MCO 5510.18B Security Order

M00264-24-Q-0109 Page 17 of 67

PART 8

PERFORMANCE REQUIREMENTS SUMMARY

The performance standards for this PWS are stated in the Performance Requirements Summary (PRS) below. This table details the performance objectives and performance standards that must be performed by the contractor to ensure mission success. The table details the method of surveillance the COR will use to determine the quality of the contractor’s performance as it relates to those objectives and standards.

Performance Requirements Summary (PRS)

Performance Objective

PWS

Reference

Performance Standard

Acceptable Quality Level

(AQL)

Surveillance

Method Incentive

Indoctrinations and Debriefings

2.1.2.1

Indoctrination Indoctrination documents shall be complete, accurate, appropriately filed away, and uploaded into DISS within 48 hours of individual receiving Indoctrination

-Debriefing:

Within two hours of individual receiving debriefing, all required documents must be complete , appropriately filed away, and uploaded into the DISS.

-Nothing less than 100% accurate when completing indoctrination and debriefing documents.

-Completion of debrief documents must not exceed 2 hours.

- Inspections: 2025 Periodic Inspection

- Analysis

- Demonstration

- Customer Feedback

CPARS

rating.

Exercising of Option Year

Physical Security (Opening and Closing)

2.1.1.1

-SF701

(opening) and

SF702

(closing)

-Nothing less than 100% accurate when completing

-Inspections:

Periodic Inspection

- Analysis

CPARS

rating.

M00264-24-Q-0109 Page 18 of 67 documents) shall be accurately completed while performing the opening and closing the SCIF.

- Demonstration

- Customer Feedback

Exercising of Option Year

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government 1001 Destination Government Destination Government 1002 Destination Government Destination Government 2001 Destination Government Destination Government 2002 Destination Government Destination Government

DELIVERY INFORMATION – To be determined prior to award

M00264-24-Q-0109 Page 19 of 67

CLAUSES INCORPORATED BY REFERENCE

52.201-1 Acquisition 360: Voluntary Survey SEP 2023 52.203-3 Gratuities APR 1984 52.203-12 Limitation On Payments To Influence Certain Federal

Transactions

JUN 2020

52.204-2 Security Requirements MAR 2021 52.204-7 System for Award Management OCT 2018 52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011 52.204-13 System for Award Management Maintenance OCT 2018 52.204-16 Commercial and Government Entity Code Reporting AUG 2020 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.204-22 Alternative Line Item Proposal JAN 2017 52.204-27 Prohibition on a ByteDance Covered Application JUN 2023 52.204-29 Federal Acquisition Supply Chain Security Act Orders--

Representation and Disclosures.

DEC 2023

52.207-2 Notice Of Streamlined Competition MAY 2006 52.209-7 Information Regarding Responsibility Matters OCT 2018 52.212-1 Instructions to Offerors--Commercial Products and

Commercial Services

SEP 2023

52.212-2 Evaluation - Commercial Items NOV 2021 52.212-4 Contract Terms and Conditions--Commercial Products and

Commercial Services

NOV 2023

52.217-5 Evaluation Of Options JUL 1990 52.219-8 Utilization of Small Business Concerns FEB 2024 52.223-5 Pollution Prevention and Right-to-Know Information MAY 2024 52.224-1 Privacy Act Notification APR 1984 52.224-2 Privacy Act APR 1984 52.225-13 Restrictions on Certain Foreign Purchases FEB 2021 52.227-14 Rights in Data--General MAY 2014 52.228-5 Insurance - Work On A Government Installation JAN 1997 52.229-3 Federal, State And Local Taxes FEB 2013 52.229-11 Tax on Certain Foreign Procurements--Notice and

Representation

JUN 2020

52.232-8 Discounts For Prompt Payment FEB 2002 52.232-23 Assignment Of Claims MAY 2014 52.237-1 Site Visit APR 1984 52.237-2 Protection Of Government Buildings, Equipment, And

Vegetation

APR 1984

52.242-13 Bankruptcy JUL 1995 52.246-4 Inspection Of Services--Fixed Price AUG 1996 252.201-7000 Contracting Officer's Representative DEC 1991 252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7002 Requirement to Inform Employees of Whistleblower Rights DEC 2022 252.203-7005 Representation Relating to Compensation of Former DoD

Officials

SEP 2022

252.204-7000 Disclosure Of Information OCT 2016 252.204-7003 Control Of Government Personnel Work Product APR 1992 252.204-7004 Antiterrorism Awareness Training for Contractors JAN 2023 252.204-7008 Compliance With Safeguarding Covered Defense Information

Controls

OCT 2016

252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information

JAN 2023

M00264-24-Q-0109 Page 20 of 67

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support

JAN 2023

252.204-7016 Covered Defense Telecommunications Equipment or Services -- Representation

DEC 2019

252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services -- Representation

MAY 2021

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services

JAN 2023

252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements NOV 2023 252.204-7020 NIST SP 800-171 DoD Assessment Requirements NOV 2023 252.204-7022 Expediting Contract Closeout MAY 2021 252.204-7023 Reporting Requirements for Contracted Services. JUL 2021 252.204-7024 Notice on the Use of the Supplier Performance Risk System MAR 2023 252.205-7000 Provision Of Information To Cooperative Agreement Holders JUN 2023 252.209-7004 Subcontracting With Firms That Are Owned or Controlled By

The Government of a Country that is a State Sponsor of Terrorism

MAY 2019

252.215-7008 Only One Offer DEC 2022 252.223-7006 Prohibition On Storage, Treatment, and Disposal of Toxic or

Hazardous Materials

SEP 2014

252.225-7048 Export-Controlled Items JUN 2013 252.225-7055 Representation Regarding Business Operations with the

Maduro Regime

MAY 2022

252.225-7056 Prohibition Regarding Business Operations with the Maduro Regime

JAN 2023

252.226-7001 Utilization of Indian Organizations, Indian-Owned Economic Enterprises, and Native Hawaiian Small Business Concerns

JAN 2023

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006 252.237-7010 Prohibition on Interrogation of Detainees by Contractor

Personnel

JAN 2023

252.243-7001 Pricing Of Contract Modifications DEC 1991 252.243-7002 Requests for Equitable Adjustment DEC 2022 252.244-7000 Subcontracts for Commercial Products or Commercial

Services

NOV 2023

CLAUSES INCORPORATED BY FULL TEXT

52.204-24 REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2021)

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it "does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument" in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services-- Representation, or in paragraph (v)(2)(i) of the provision at 52.212-3, Offeror Representations and Certifications- Commercial Products and Commercial Services. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it "does not use covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services" in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

(a) Definitions. As used in this provision-

M00264-24-Q-0109 Page 21 of 67

Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

(b) Prohibition.

(1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to--

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract. Nothing in the prohibition shall be construed to--

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for "covered telecommunications equipment or services."

(d) Representations. The Offeror represents that--

(1) It [ ___ ] will, [ ___ ] will not provide covered…