24R8000 Amendment 01_Attachment 1 TMIT PWS_(Rev 1) with Track Changes.pdf

t 1

Version: 0.23 15 Feb 2024

UNCLASSIFIED

Prepared By:

Program Manager, Training Systems

Base Contract Performance Work Statement (PWS)

For Trackless Mobile Infantry

Targets (TMIT)

PM TRASYS BASE CONTRACT PWS FOR TMIT

UNCLASSIFIED ii

CONTENTS 2

1 INTRODUCTION................................................................................................................. 1 3

1.1 General ........................................................................................................................................................... 1 4

1.2 Mission ............................................................................................................................................................ 1 5

1.3 Background .................................................................................................................................................... 1 6

1.4 Scope ............................................................................................................................................................... 1 7

2 APPLICABLE DOCUMENTS ............................................................................................ 4 8

2.1 Department of Defense (DoD) Instructions, Directives, Standards, and Guides ......................................... 4 9

2.2 Department of the Navy Instructions, Directives, Standards, and Guides ................................................... 4 10

2.3 Marine Corps Orders (MCO), Manuals, Directives, and Guides ................................................................. 4 11

2.4 Availability of DoD Documents ..................................................................................................................... 5 12

2.5 Other Documents, Drawings, and Publications ............................................................................................ 5 13

3 REQUIREMENTS ................................................................................................................ 6 14

3.1 General Requirements .................................................................................................................................... 6 15

3.1.1 Non-Personal Services ...................................................................................................................... 6 16

3.1.2 Business Relations ............................................................................................................................ 6 17

3.1.3 Contractor Personnel, Disciplines, and Specialties .......................................................................... 8 18

3.1.4 Resource Requirements ..................................................................................................................... 8 19

3.1.5 Security Requirements ..................................................................................................................... 11 20

3.1.6 Safety ............................................................................................................................................... 16 21

3.1.7 Locations and Hours of Work ......................................................................................................... 18 22

3.1.8 Travel .............................................................................................................................................. 20 23

3.1.9 Government Property ...................................................................................................................... 23 24

3.1.10 Program Management .................................................................................................................... 24 25

3.1.11 Operational Availability ................................................................................................................. 31 26

3.1.12 Spectrum ......................................................................................................................................... 32 27

3.1.13 Risk Management Framework (RMF) Support ............................................................................... 34 28

3.1.14 Configuration Management ............................................................................................................ 36 29

3.1.15 Privacy Act Information .................................................................................................................. 36 30

3.1.16 Disclosure of Information ............................................................................................................... 36 31

3.1.17 Transportation of Contractor Equipment in Hawaii ....................................................................... 36 32

3.1.18 Technology Readiness ..................................................................................................................... 37 33

3.1.19 Performance in Japan ..................................................................................................................... 37 34

3.2 Specific Requirements .................................................................................................................................. 38 35

3.2.1 System Characteristics .................................................................................................................... 38 36

3.2.2 After Action Reviews (AARs) ........................................................................................................... 38 37

3.2.3 Scheduling And Training Requirements .......................................................................................... 39 38

APPENDIX A. SYSTEM CHARACTERISTICS…………………………………….……………………………..41 39

APPENDIX B. CONTRACTS TO BE PERFORMED IN JAPAN .......................................................................... 47 40

Deleted: 2

Deleted: 9

Deleted: 9

Deleted: 12

Deleted: 17

Deleted: 22

Deleted: 23

Deleted: 30

Deleted: 33

Deleted: 35

Deleted: 37

UNCLASSIFIED iii

I. SOFA ARTICLE XIV STATUS ................................................................................................................... 47 52 II. SOFA ARTICLE I(b) STATUS ................................................................................................................... 49 53 III. LOGISTIC SUPPORT ................................................................................................................................. 51 54 IV. Further Information. .................................................................................................................................... 52 55

APPENDIX C. PERFORMANCE STANDARDS…………………………………………………………………..53 56

APPENDIX D. CUSTOMER COMPLAINT RECORD (CCR)…………………………………………………….57 57

APPENDIX E. ACRONYMS……………………………………………………………………………………...…58 58

Revision Log 59

Date Version Revision Description 28 Jul 2023 0.13 PWS prepared for MAT review

21 Aug 2023 0.14 MAT review complete 29 Dec 2023 0.20 PWS Restructured

10 Jan 2024 0.21 Minor revisions 19 Jan 2024 0.22 CDRL numbering revisions 15 Feb 2024 0.23 Additional security information

UNCLASSIFIED Page 1

1 Introduction 61

1.1 General 62

The Trackless Mobile Infantry Targets (TMIT) contract is a single award, Indefinite 63 Delivery/Indefinite Quantity (IDIQ) contract. The contract provides flexibility and an expedited 64 ordering process to satisfy the Marine Corps’ need for TMIT’s in accordance with the systems 65 characteristics defined in the PWS. Each task order will identify the performance objectives, 66 performance standards, Acceptable Quality Levels (AQL), locations, and schedules in the PWS. 67

1.2 Mission 68

Training and Education Command’s (TECOM) mission is to lead the Marine Corps Training and 69 Education continuum from individual entry-level training, professional military education and 70 continuous professional development, through unit, collective, and service-level training in order 71 to produce warfighters and enhance warfighting organizations that enable the FMF to build and 72 sustain the combat readiness required to fight and win today and in the future. The TMIT 73 capability supports TECOM’s mission by providing the Fleet Marine Forces with a dynamic and 74 realistic representation of human targets for use in live-fire / non-live fire training to increase 75 lethality and unit readiness. 76

1.3 Background 77

Marine Corps operational training ranges are comprised of a sophisticated infrastructure spread 78 across multiple geographic locations. Training requirements are determined by expected 79 missions, and training and readiness programs focus on training to successfully accomplish 80 Marine Air-Ground Task Force (MAGTF) missions across the range of military operations, 81 including stability operations, contingency operations, and major theater wars. To that end, the 82 Range Training Program Division (RTPD), Training and Education Command (TECOM), has a 83 requirement for education and training services to meet a need for combat marksmanship 84 training incorporating Trackless Mobile Infantry Targets (TMITs). 85

1.4 Scope 86

The specific scope of this PWS includes, but is not limited to, the following: 87

Supporting Marine Corps training with TMITs capable of moving on a training range 88 within established geographic boundaries to ensure safety, and to present shooters with 89 realistic, moving threats on live-fire ranges and training areas used by the Marine Corps; 90

Providing TMIT system operations and pre and post exercise support for Marine Corps 91 training; 92

Providing data to training audiences for After Action Reviews (AARs); 93

Deleted: task order

Deleted: task order Performance Work Statement (

Deleted: )

UNCLASSIFIED Page 2

Creating (new), or modifying (existing) TMIT training scenarios; 97

Developing TMIT training concepts; 98

Supporting live-fire and non-live fire training events with TMITs so that military 99 personnel can evaluate the skills of individuals, leaders, teams, and units, and sustain 100 operational readiness. 101

The contractor shall provide TMIT support to the following locations (see Figure 1): 102

Figure 1 – Places of Performance 103

Please note, with respect to the locations identified in Figure 1, Section B of the IDIQ identifies a 104 corollary CLIN/SLIN for each location which prescribes the total number of hours of training 105 time and the number of trailers. (One TMIT trailer shall be comprised of at least 8 TMITs that 106 shall be available to meet Marine Corps training requirements at the identified location). It is the 107 contractor’s responsibility to determine how to meet the availability requirements for each 108 location. Therefore, the contractor shall consider, for their system, how often failures occur, and 109 corrective maintenance required, how often preventative maintenance is performed, how quickly 110 failures can be isolated and repaired, how quickly preventive maintenance tasks can be 111 performed, and how long logistics support delays contribute to down time. 112

Note 1: Performance in Hawaii will primarily occur on the island of O’ahu. However, the 113 contractor is expected to provide services for at least two (2) Pohakuloa Training Area (PTA) 114 deployments, that are on average, four (4) consecutive weeks (approximately 8 total weeks) at 115 PTA, on the island of Hawaii for each 12-month period. If supporting training at PTA, the 116 contractor will not be required to support training on the island of O’ahu. Stated differently, the 117 contractor shall provide service on either O’ahu or at PTA, but not at the same time. 118 Reimbursement for the cost to travel for offsite training is as specified in the Travel section of 119 this PWS. 120

Note 2: On occasion, the Government may require that the contractor support training that takes 121 place at locations other than the main locations included in Figure 1. These CONUS-to-CONUS 122 requirements will only be conducted when requested in advance and approved in writing by the 123 COR. When offsite training requests are approved by the COR in writing, the contractor will be 124 expected to support training exercises at the main location commensurate with the number of 125 remain behind training assets at the main location from which the offsite training assets are 126

Marine Corps Base (MCB) Camp

Lejeune, Camp Lejeune, NC

(See Note 2)

Qty 3 Trailers

Marine Corps Air- Ground Combat

Center, Twentynine Palms, CA

(See Note 2)

Qty 3 Trailers

MCB Camp Pendleton, Camp

Pendleton, CA

(See Note 2)

Qty 3 Trailers

MCB Hawaii, Kaneohe Bay, HI

(See Note 1)

Qty 2 Trailers

MCB Camp Smedley D. Butler, Okinawa, Japan

Qty 1 Trailer

MCB Camp Quantico, Quantico

VA

(See Note 2)

Qty 1 Trailer

UNCLASSIFIED Page 3 sourced. Reimbursement for the cost to travel for offsite training is as specified in the Travel 127 section of this PWS. 128

2 APPLICABLE DOCUMENTS 129

The current version of the following documents form a part of this PWS to the extent specified 130 herein. Moreover, the latest version of the following documents in effect at the time a task order 131 is issued under this contract will supersede the prior version of the document cited in this PWS. 132 Unless otherwise noted, in the event of a conflict between the PWS and the references cited 133 herein, the text of this PWS takes precedence. 134

2.1 Department of Defense (DoD) Instructions, Directives, Standards, and Guides 135

DoDM 5200.01 Volume 1 – DoD Information Security Program: Overview, 136 Classification, and Declassification 137

DoDM 5200.01 Volume 2 – DoD Information Security Program: Marking of Information 138

DoDI 5030.59 – National Geospatial Intelligence Agency (NGA) Limited Distribution 139 Geospatial Intelligence (GEOINT) 140

DoDI 5200.48 – Controlled Unclassified Information (CUI) 141

DoDD 5205.02E – DoD Operations Security (OPSEC) Program 142

DoDI 5200.46 – DoD Investigative and Adjudicative Guidance for Issuing the Common 143 Access Card (CAC) 144

DoDI 5230.09 – Clearance of DoD Information for Public Release 145

DoDI 5230.24 – Distribution Statements on Technical Documents 146

DoDI 8500.01 – Cybersecurity 147

DoDI 8510.01 – Risk Management Framework (RMF) for DoD Information Technology 148

(IT) 149

DoD 8570.01-M – Information Assurance Workforce Improvement Program 150

Department of Defense Foreign Clearance Guide 151

2.2 Department of the Navy Instructions, Directives, Standards, and Guides 152

SECNAVINST 3070.2A – Operations Security 153

SECNAV M-5216.5 – Department of the Navy Correspondence Manual 154

SECNAV M-5239.1 – Department of the Navy Information Assurance Manual 155

SECNAV M-5510.30 – Department of the Navy Personnel Security Program 156

SECNAVINST 5510.30C – Department of the Navy Personnel Security Program 157

2.3 Marine Corps Orders (MCO), Manuals, Directives, and Guides 158

MCO 1553.1B – The Marine Corps Training and Education System 159

MCO 1553.3B – Unit Training Management (UTM) Program 160

MCO 1553.10 – Marine Corps Training Information Management System (MCTIMS) 161 Standard Operating Procedures (SOP) 162

UNCLASSIFIED Page 5

MCO 3070.2A – The Marine Corps Operations Security (OPSEC) Program 163

MCO 3500.72A – Marine Corps Ground Training and Readiness (T&R) Program 164

MCO 3550.10 – Policies and Procedures for Range and Training Area Management 165

MCO 3570.1C – Range Safety 166

MCO 5090.2 – Environmental Compliance and Protection Program 167

MCO 5100.29 B – Marine Corps Safety Program 168

MCO 5239.2B – Marine Corps Cybersecurity Program 169

MCO 5510.18B – United States Marine Corps Information and Personnel Security 170 Program (IPSP) 171

MCO 5510.20C – Disclosure of Military Information to Foreign Governments and 172 Interests 173

MCO 3570.1 – Range Safety 174

NAVMC 1553.1A – Marine Corps Instructional Systems Design/Systems Approach to 175 Training and Education Handbook 176

NAVMC 1553.2 – Marine Corps Formal School Management Policy Guidance 177

NAVMC 3500.65A – Operational Culture and Language Training and Readiness Manual 178

NAVMC 3500.44 – Infantry Training and Readiness Manual 179

MCRP 8-10B.1 – Operational Training Ranges Required Capabilities 180

MCRP 8-10B.2 – Rifle Marksmanship 181

MARCORSYSCOMO 11010.1 – Construction Acquisition Guidelines 182

MARCORSYSCOM Information Systems Cybersecurity Security Classification Guide 183

2.4 Availability of DoD Documents 184

DoD Directives, Manuals, Instructions and Publications are available online at 185 https://discover.dtic.mil/products-services/ or from the National Technical Information 186 Services (NTIS), 5285 Port Royal Road, Springfield, VA 22161 187

DoN Directives, Manuals, Instructions and Publications are available online at 188 https://www.secnav.navy.mil/doni/allinstructions.aspx 189

USMC Orders, Manuals, Directives, and Guides are available online at 190 https://www.marines.mil/News/Publications/ELECTRONIC-LIBRARY/ 191

Electronic Foreign Clearance Guide available online at 192 https://www.fcg.pentagon.mil/fcg.cfm 193

2.5 Other Documents, Drawings, and Publications 194

FED-STD-313E, Federal Standard: Material Safety Data, Transportation Data and 195 Disposal Data For Hazardous Materials Furnished To Government Activities 196

Parts 730-774 of Title 15, Code of Federal Regulations (also known as the “Export 197 Administration Regulations”) 198

UNCLASSIFIED Page 6

Parts 120-130 of Title 22, Code of Federal Regulations (also known as the “International 199 Traffic in Arms Regulations”) 200

Part 1910 of Title 29, Code of Federal Regulations (also known as OSHA Occupational 201 Safety and Health Standards) 202

U.S. Forces Japan Instruction 36-2611 – Change of Status by Persons in Japan to One of 203 the Categories Authorized by the Status of Forces Agreement 204

U.S. Forces Japan Instruction 36-2808 – USFJ Quarterly Strength Report 205

U.S. Forces Japan Instruction 36-2811 – Indoctrination Training Programs 206

U.S. Forces Japan Instruction 64-100 – Contract Performance in Japan 207

U.S. Forces Japan Instruction 64-102 – United States Contractors and their Employees 208

Installation Range Regulations and Standard Operating Procedures 209

RFMSS User Manual 210

3 REQUIREMENTS 211

All requirements identified in this PWS are for delivering training services to support, primarily, 212 the Marine Corps Fleet Marine Forces (FMF) requirements for combat marksmanship training 213 with TMIT’s in accordance with the systems characteristics defined in Appendix A of this PWS. 214

3.1 General Requirements 215

3.1.1 Non-Personal Services 216

The Government will neither supervise contractor employees nor control how the contractor 217 performs the required tasks. The Government will not assign tasks nor prepare work schedules 218 for individual contractor employees. 219

To provide a clear distinction between Government employees and contractor employees, 220 contractor employees shall introduce themselves as contractor personnel, display distinguishing 221 badges or other visible identification for meetings with Government personnel, and identify 222 themselves as employees of the contractor in telephone conversations and formal and informal 223 written correspondence. 224

If the contractor believes that any actions constitute or are perceived to constitute personal 225 services, it shall be the contractor’s responsibility to notify the contracting officer and the 226 Contracting Officer’s Representative (COR) immediately. 227

3.1.2 Business Relations 228

The contractor shall integrate and coordinate all activity needed to accomplish the requirements 229 herein and any task order issued under this contract. The contractor shall perform program 230 management for the contract’s duration and any task order issued under this contract. When 231

UNCLASSIFIED Page 7 applicable, the contractor shall submit corrective action plans and provide timely resolution of 232 issues. 233

Contract Administration 234

The contractor shall establish processes and assign appropriate resources to effectively 235 administer the requirements of this contract and any task order issued under the contract. The 236 contractor shall respond to contract modification changes or direction from the contracting 237 officer in a timely fashion. 238

Responsibility in Subcontracting 239

The contractor shall be responsible for any subcontract management necessary to integrate work 240 performed and shall be responsible and accountable for subcontractor performance for any task 241 order issued under the contract. The prime contractor shall manage work distribution to ensure 242 there is no Organizational Conflict of Interest (OCI) considerations. The contractor may add 243 subcontractors to their team after notification to the contracting officer and COR. The contractor 244 is responsible for ensuring that all applicable contractual provisions and clauses are passed 245 through to its subcontractors and that those provisions are enforced. 246

Contracting Officer’s Representative 247

One individual may serve as the COR for the base contract in addition to one or more task orders 248 issued under this contract, or there may be one individual appointed to perform COR duties for 249 the base contract, with other individuals appointed to perform COR duties for task orders issued 250 under this contract. The Government will provide the contractor with the name and contact 251 information for the COR appointed for the contract and any task order issued under this contract. 252 The duties of the COR are not delegable. 253

Additionally, ACORs may be assigned under a task order and will be assigned to a specific 254 geographic location. 255

Third-Party Coordination 256

There may be instances when more than one contractor or vendor is required to perform work for 257 the Government that affects the same program or project or, for unrelated matters, perform work 258 under separate contracts or agreements in proximity to one another. In such instances, the 259 Government expects that each contractor or vendor extend basic professional courtesy and 260 interaction to satisfy all of the Government’s requirements. 261

Should an issue arise, the Government expects the contractor(s) or vendor(s) to resolve the issue 262 without the assistance of the Government. However, if the contractor(s) or vendor(s) cannot 263 resolve an issue without the Government’s assistance, the contractor must promptly notify the 264 contracting officer in writing, furnishing recommendations for a solution. 265

UNCLASSIFIED Page 8

The contractor shall not be relieved of its obligations under this contract because of its failure to 266 promptly refer matters to the contracting officer or implement the contracting officer’s 267 directions. Furthermore, the contractor is not relieved of any contract requirements or entitled to 268 an adjustment to the contract’s terms and conditions or price because it fails to resolve a 269 disagreement with another contractor or vendor unless the contractor can demonstrate, to the 270 contracting officer’s satisfaction, that the failure to resolve the issue was not due its negligence, 271 fault, failure to cooperate, or failure to perform its obligations in good faith. 272

Should contracting officer intervention be required, the Government reserves the right to 273 terminate this contract and any task order issued under this contract for convenience at no cost to 274 the Government. 275

Task Orders 276

Task orders will be individually funded. Accounting classification citation data will be 277 incorporated in one or more Accounting Classification Reference Numbers (ACRN) included 278 with each task order. In addition, the contractor may be required to track separately identifiable 279 Contract Line-Item Numbers (CLINs) or Subline Items Numbers (SLINs) to submit invoices 280 accurately and facilitate the timely payment of valid invoices. The pricing on task orders that 281 cross ordering periods will be based upon the pricing that is effective at the time the order is 282 issued and will be effective throughout the period of performance for the task order. 283

3.1.3 Contractor Personnel, Disciplines, and Specialties 284

The contractor shall satisfy the requirements of any task order issued under this contract by 285 employing and utilizing personnel with an appropriate combination of education, knowledge, 286 skills, abilities, certifications, and experience. The contractor shall assign appropriate labor 287 categories and the labor hours necessary to meet all of the work requirements of a task order. All 288 personnel training, licenses, certification, and qualifications required to meet the requirements of 289 a task order, whether specified or not, shall be obtained, maintained, paid for, and otherwise 290 provided for by the contractor. 291

3.1.4 Resource Requirements 292

Except as otherwise provided, the contractor shall provide all personnel, equipment, tools, 293 materials, supervision, and quality control necessary to perform the requirements of this contract 294 and any task orders issued under this contract. TMIT system shall not require DoD personnel to 295 operate, maintain, or support the TMIT system beyond exercise planning. 296

Marine Corps Enterprise Network (MCEN) 297

Except as otherwise provided, all computer assets required by the contractor to meet the 298 performance requirements of this contract and any task order issued under this contract, whether 299

UNCLASSIFIED Page 9 to be connected to the MCEN or to be employed by the contractor as standalone assets, shall be 300 provided for by the contractor. 301

Marine Corps Enterprise Network (MCEN) Computer Access – Contractor personnel accessing 302 Marine Corps Systems Command Information Systems must maintain compliance with United 303 States Marine Corps Enterprise Cybersecurity Manual 007 Resource Access Guide. Contractor 304 personnel will submit a DD 2875 and a completion certificate for the CYBERC course located 305 on MarineNet located at https://www.marinenet.usmc.mil. The CYBERC course consist of the 306 DOD Cyber Awareness Challenge and the Department of the Navy Annual Privacy Training 307 (PII). Contractors will have to create a MarineNet account in order to complete the required 308 training. 309

MCEN IT resources, if provided, are designated for official use only and other limited authorized 310 purposes. DOD military, civilian personnel, consultants, and contractor personnel performing 311 duties on MCEN information systems may be assigned to one of three position sensitivity 312 designations. 313

1) ADP-I (IT-1): Favorably adjudicated T-5, T5R, (formerly known as Single Scope 314 Background Investigation (SSBI)/SSBI Periodic Reinvestigation (SBPR)/SSBI 315 Phased Periodic Reinvestigation (PPR)) 316

2) ADP-II (IT-2): Favorably adjudicated T-3, T3R, (formerly known as Access National 318 Agency Check and Inquiries (ANACI)/ National Agency Check with Law and Credit 319 (NACLC)/Secret Periodic Review (S-PR)) 320

3) ADP-III (IT-3): Completed T-1, (formerly known as National Agency Check with 322 Inquiries (NACI)) 323

Privileged users must maintain the baseline Cyberspace Workforce Information Assurance 324 Technical (IAT) or Information Assurance Manager (IAM) relating to the position being filled. 325 Privileged users are defined as anyone who has privileges over a standard user account as in 326 system administrators, developers, network administrators, code signing specialist and Service 327 Desk technicians. 328

All MCEN users must read, understand, and comply with policy and guidance to protect 329 classified national security information, CUI, and prevent unauthorized disclosures in accordance 330 with United States Marine Corps Enterprise Cybersecurity Manual 007 Resource Access Guide 331 and CJCSI 6510.01F. 332

MCEN Official E-mail usage – MCEN IT resources are provided for official government use 333 only and other limited authorized purposes. Authorized purposes may include personal use 334 within limitations as defined by the supervisor or the local Command. Auto forwarding of e- 335 mail from MCEN-N to commercial or private domains (e.g., Hotmail, Yahoo, Gmail, etc.) is 336

UNCLASSIFIED Page 10 strictly prohibited. E-mail messages requiring either message integrity or non-repudiation are 337 digitally signed using DOD PKI. All e-mail containing CUI, an attachment, or embedded active 338 content must be digitally signed. 339

MCEN users will follow specific guidelines to safeguard CUI, which includes Personally 340 Identifiable Information (PII) and Health Insurance Portability and Accountability Act (HIPAA) 341 information. Non-official e-mail is not authorized for and will not be used to transmit any CUI. 342 Non-official e-mail is not authorized for official use unless under specific situations where it is 343 the only means for communication available to meet operational requirements. This can occur 344 when the official MCEN provided e-mail is not available but must be approved prior to use by 345 the Marine Corps Authorizing Official (AO). 346

All personnel will use DOD authorized PKI certificates to encrypt e-mail messages if they 347 contain any of the following: 348

1. CUI. 349

2. Any contract sensitive information that normally would not be disclosed to anyone 350 other than the intended recipient as this is considered CUI. 351

3. Any privacy data, PII, or information intended for inclusion in an employee’s personal 352 file or any information that would fall under the tenets of MSGID: DOC/5 USC 552A. Personal 353 or commercial e-mail accounts are not authorized to transmit unencrypted CUI. 354

4. Any medical or health data, to include medical status or diagnosis concerning another 355 individual. 356

5. Any operational data regarding status, readiness, location, or deployment of forces or 357 equipment. 358

Contractor assets connectivity to the MCEN – The contracting company will comply with 359 MCENMSG-Unification 003-14 ENABLING CONTRACTOR ASSET CONNECTIVITY TO 360 THE MCEN. The Contractor representative will transfer the contractor owned laptops to the 361 Marine Corps Systems Command (MARCORSYSCOM) Information Technology Asset 362 Management (ITAM) department to have the MCEN images places on each laptop before it is 363 authorized to connect to the MCEN. 364

All contractor owned laps must meet or exceed the USMC laptop specifications. A list of 365 laptops authorized to be attached to the MCEN can be obtained from MARCORSYSCOM IT 366 upon request. 367

Upon completion of the contract or at such time as the contractor reclaims the asset from the 368 USMC, non-Government owned internal\external hard drives shall become the property of the 369 U.S. Government. Once the hard drives have been removed, the laptops\assets will be returned 370

UNCLASSIFIED Page 11 to the Contractor. For additional questions regarding current system specifications contact the 371 MARCORSYSCOM, Electronic Maintenance Facility, lead at Berton.whisenant@usmc.mil 372

Magnetic Hard Drive Storage Devices – This paragraph covers the requirements of classified and 373 unclassified internal and removable magnetic and solid state hard drives that store Government 374 data. This includes, but is not limited to, storage area network (SAN) devices, servers, 375 workstations, laptops/notebooks, printers, copiers, scanners and multi-functional devices (MFD) 376 with internal hard drives, removable hard drives and external hard drives. Upon disposal, 377 replacement, turn in of hard drives or completion of the contract, non-Government owned 378 internal\external hard drives shall become the property of the U.S. Government in accordance 379 with GENADMIN Processing of Magnetic Hard Drive Storage Media for Disposal. 380

3.1.5 Security Requirements 381

The information provided to the contractor will be unclassified and/or CUI. The contractor is not 382 required or expected to have Facility Clearance and contractor personnel supporting this effort 383 are not required to possess Personnel Clearance Levels. If the company has a DISS account, the 384 Facility Security Officer (FSO) is required to establish, populate, and own the DISS record of 385 every contractor processed for and/or issued a Common Access Card (CAC). Any contractor 386 personnel requiring access to U.S. Government CUI shall possess a completed background 387 investigation (minimum of a T-1/NACI) for this Public Trust Position. Due to Insider Threat 388 concerns, the Company is requested to notify the MARCORSYSCOM Personnel Security 389 (PERSEC) Office at 703-432-3952/3490/3374, within 24 hours of any adverse/derogatory 390 information associated with the 13 Adjudicative Guidelines concerning any contractor 391 performing on this contract if they have been issued a CAC and/or a Government building badge. 392

In accordance with DoDI 5200.48, “Controlled Unclassified Information (CUI),” all contractors 393 supporting MARCORSYSCOM who receive, store, or generate CUI are required to take the 394 DoD Mandatory CUI Training, available on the Security Awareness Hub at: 395 https://securityawareness.usalearning.gov/cui/index.html. Per DoDI 5200.48 and pursuant to 396 contractual requirements, DoD contractors require initial CUI training and annual CUI refresher 397 training. Additional MARCORSYSCOM specific CUI training and guidance can be attained by 398 contacting the MARCORSYSCOM Security Classification Management Office at 703-432-3141 399 / 3140 or MCSC_ACSG2_SCMO@usmc.mil. 400

While performing aboard NAVY/USMC sites, the contractor shall comply with the provisions of 401 DoD Directive 5205.02E, “DoD Operations Security (OPSEC) Program,” SECNAVINST 402 3070.2A, “Operations Security,” MARCORSYSCOMO 3070.1B, “Operations Security 403 Program,” Marine Corps Order 3070.2A, “The Marine Corps Operations Security (OPSEC) 404 Program,” and the MARCORSYSCOMO P5510.2C, “Security Manual,” at all other sites the 405 contractor shall comply with the local command and/or program OPSEC plan. The contractor 406 must comply with all local/Service requirements if required to perform at any other DOD 407

UNCLASSIFIED Page 12 location. Contractor personnel shall follow OPSEC concepts and principles in the conduct of this 408 requirement to protect critical information, personnel, facilities, equipment, and operations from 409 compromise. All Contractors (including Subcontractors) shall supplement their current security 410 practices by requiring any personnel involved in executing this contract to complete OPSEC 411 Awareness for Military Members, DOD Employees and contractor training, available on the 412 Security Awareness Hub at: https://securityawareness.usalearning.gov/opsec/index.htm 413

Data Management 414

The contractor shall provide a point of contact for data oversight for this contract and for each 415 task order issued under this contract to ensure that all data delivered, furnished, or otherwise 416 provided to the Government includes the appropriate version, format, and associated rights. The 417 security of the data and the protection of Controlled Unclassified Information (CUI), or 418 proprietary data shall be the contractor's responsibility. 419

Common Access Card (CAC) Requirement 420

The task order COR will identify and only approve those contractor employees performing on 421 this contract that require a CAC in order to perform their job function. In accordance with 422 Headquarters, United States Marine Corps issued guidance relative to Homeland Security 423 Presidential Directive – 12 (HSPD-12), all personnel must meet eligibility criteria to be issued a 424 CAC. In order to meet the eligibility criteria, contractor employees requiring a CAC must obtain 425 and maintain a favorably adjudicated Personnel Security Investigation (PSI). Prior to 426 authorizing a CAC, the employee’s Defense Information System for Security (DISS) record must 427 indicate a completed and favorably adjudicated PSI or (at a minimum) that a PSI has been 428 submitted and accepted (opened). The minimum acceptable investigation is a T-1 or a National 429 Agency Check with Written Inquiries (NACI). If a contractor employee’s open investigation 430 closes and is not favorably adjudicated, the CAC must be immediately retrieved and revoked. 431 CACs are not issued for convenience. 432

Facility Security Officers (FSOs) are responsible for notifying the MARCORSYSCOM 433 Personnel Security Office (PERSEC Office) at 703-432-3490/3952 if any contractor performing 434 on this contract receives an unfavorable adjudication after being issued a CAC. Due to Insider 435 Threat concerns, the Company is requested to notify the MARCORSYSCOM Personnel Security 436 Office (PERSEC Office) at 703-432-3952/3490/3374, within 24 hours of any adverse/derogatory 437 information associated with the 13 Adjudicative Guidelines concerning any contractor 438 performing on this contract, if they have been issued a CAC and/or a MARCORSYSCOM 439 Building Badge. 440

Each CAC is issued with a “ctr@usmc.mil” e-mail account that the individual contractor is 441 responsible to maintain as active by logging in on a regular basis (at least twice a month), 442 sending an e-mail and clearing any unneeded e-mails. Contractors issued a CAC are prohibited 443 from “auto- forwarding” their .mil e-mail account to their .com e-mail account. If the 444

UNCLASSIFIED Page 13

“ctr@usmc.mil” e-mail account is not kept active, G-6 will deactivate the account and the CAC 445 will also lose its functionality. Contractor employees shall solely use their government furnished 446 “ctr@usmc.mil” e-mail accounts for work supporting the USMC, conducted in fulfillment of this 447 contract, and shall not use a contractor supplied or personal e-mail account to conduct official 448 U.S. government business. The use of a contractor or personal e-mail account for contractor 449 business or personal use is allowed, but only when using cellular or a commercial internet 450 service provider. 451

If a contractor loses their eligibility for a CAC due to an adverse adjudicative decision, they have 452 also lost their eligibility to perform on MARCORSYSCOM contracts. 453

Physical Security 454

The contractor shall take reasonable care to safeguard Government property (real and personal) 455 and information provided by the Government for the contractor’s use as part of this contract or 456 any task order issued under this contract. At the close of each work period, the contractor shall 457 secure Government facilities, equipment, materials, etc., for which the contractor is responsible. 458 Within two (2) hours, the contractor shall notify the COR of any suspected security breach, theft, 459 or vandalism. In addition, the contractor shall notify the Government when systems, training 460 spaces, and/or workspaces under the contractor’s control cannot be adequately secured. 461

The contractor shall implement procedures to ensure that keys, key cards, identification cards, 462 access badges, etc., whether Government or contractor provided, are not misplaced, lost, or used 463 by unauthorized persons. Keys issued to the contractor by the Government shall not be 464 duplicated without the written permission of the contracting officer or COR. 465

The contractor shall prohibit the use of Government-issued keys/key cards by any persons other 466 than the contractor’s authorized employees. In addition, the contractor shall prohibit access to 467 secured areas by other than authorized Government or contractor employees. 468

Installation Access 469

The commander for each installation has broad authority to remove or exclude any person to 470 protect personnel and property, maintain good order and discipline, and ensure the successful 471 and uninterrupted performance of the Marine Corps’ mission. By exercising this authority, the 472 commander, or their designee, may refuse to grant access to the installation. Refusal to grant 473 installation access to a contractor’s employee does not relieve the contractor of its responsibility 474 to continue performance under this contract or any task order issued under this contract. 475

The contractor shall ensure that contractor and subcontractor personnel, at any tier, comply with 476 local security policies and procedures for the installations and facilities to which they are 477 assigned or to which they have been granted access. The contractor shall provide all necessary 478 information required to perform background checks to meet installation access requirements as 479

UNCLASSIFIED Page 14 set forth by the cognizant Provost Marshal Office or Security Office. Host installations may 480 require one, or all, of the following for entry: proof of a valid state driver’s license, vehicle 481 insurance, or a DoD CAC or Defense Biometric Identification (DBID) card. 482

If the Force Protection Condition (FPCON) at a facility or installation changes, then the 483 contractor shall comply with the posted FPCON and notify the contracting officer or COR as 484 soon as practicable. If FPCON changes affect one or more of the places of performance provided 485 for under any task order issued under this contract, the Government will determine whether the 486 total contract price is affected due to FPCON changes. If FPCON changes affect the total 487 contract price, a negotiated settlement will be reached as deemed appropriate by the contracting 488 officer. Generally, one of the following two situations apply: 489

1. If there is sufficient funding and contractor employees can continue to perform (either 490 on-site or at a site other than their regular work location), then they shall continue to 491 perform, and the contract price will not be adjusted. 492

2. If contractor employees cannot continue performance (either on-site or at a site other than 493 their regular work location) due to FPCON changes, they may be asked to stop work, and 494 the contract price may be adjusted. 495

Visit Requests 496

When required, the contractor shall submit a visit request via the DISS system a minimum of (5) 497 working days before the scheduled visit. 498

Identification of Contractor Employees 499

Each contractor employee shall wear a visible, contractor-furnished identification badge or card 500 that shall include, as a minimum, the full name and signature of the employee, a picture of the 501 employee, and the name of the individual contractor’s employer (prime or, if applicable, a 502 subcontractor). 503

All contractor personnel attending meetings, answering Government telephones, and working in 504 other situations where their contractor employee’s status is not apparent to third parties are 505 required to identify themselves as contractors to avoid creating an impression in the minds of 506 members of the public that they are Government officials. 507

All contractor personnel shall identify themselves as contractor employees in written 508 correspondence (to include letters, memos, or emails) related to efforts undertaken to support a 509 task order issued under this contract. 510

The contracting officer may, at their sole discretion, direct the contractor to remove any 511 contractor employee from Government real property or facilities for misconduct or security 512 reasons. However, removing a contractor’s employee as described herein does not relieve the 513

UNCLASSIFIED Page 15 contractor's responsibility to continue meeting the performance requirements for an individually 514 awarded task order. 515

The contractor shall deliver to the Government a list of all contractor personnel assigned to any 516 task order issued under this contract. 517

STD: Timeliness. 518

AQL: 90 percent compliance with CDRL submission timelines. 519

CDRL B001: DI-MGMT-81928 NOT 1 Contractor’s Progress and Status Report 520

Defense Biometric Identification (DBID) Card 521

Certain contractors may require the issuance of a DBID card to gain access to Marine Corps 522 bases/stations. The COR will identify and approve only those contractor employees performing 523 on this contract that require a DBID card to perform their job function aboard the base. All 524 contractor personnel accessing Marine Corps Base Quantico and Marine Corps Systems 525 Command must comply Access Control policy identified within MCSCO 5530.2A Access 526 Control Order. 527

Marine Corps Base Quantico (MCBQ) Installation Gate Access 528

Access onto MCBQ requires the use of an active Department of Defense Personally Identifiable 529 Verification (PIV) credential (i.e., Common Access Card (CAC), Military Dependent 530 Identification Card, Military Retiree Identification Card, Transportation Worker Identification 531 Credential) that can be scanned at all installation Gates prior to being granted access onto the 532 installation. Contractors/vendors who require routine/reoccurring access to MCBQ and are not 533 receiving a CAC in support of this contract effort (or do not already have an acceptable PIV), are 534 eligible for a DBID card. DBID cards may be obtained at no cost from the MCBQ Provost 535 Marshall’s Office (PMO) after coordination with the COR and the MCSC Physical Security 536 Team (PHYSEC Team). To obtain a DBID card, the vendor shall submit a completed Vendor 537 Screening Form (obtained from the COR or the PHYSEC Team) via: encrypted email to 538 mcsc_physicalsecurity@usmc.mil, faxing to 703-432-3481 (attn.: Physical Security), or a hand 539 delivered typed hard copy to the PHYSEC Team at Building 2200. The information on the 540 Vendor Screening Form will be used by MCBQ PMO to conduct a background check. The 541 vendor will be notified of the results of their vendor screening background check by the 542 PHYSEC Team and/or COR. Vendors who do not meet the eligibility standards, will not be 543 cleared for access onto MCBQ or MCSC. Vendors who meet the eligibility standards and receive 544 a favorable response to the background check will be required to complete the DBID registration 545 process using a website address/link that will be provided by the PHYSEC Team or COR. Once 546 the Vendor has successfully completed the DBID registration process, a registration code will be 547 provided. The registration code shall be printed, and hand carried by the Vendor to MCBQ PMO, 548 Bldg. 2043, between the hours of 0700 – 1500 to be issued the DBID card. DBID cards will be 549

UNCLASSIFIED Page 16 issued for a period of 3 years regardless of contract expiration. For additional questions 550 regarding submission of the Vendor screening Form or access requirements, you may contact the 551 PHYSEC Team at mcsc_physicalsecurity@usmc.mil or by calling 703-432-3964/3909. 552

Marine Corps Systems Command (MCSC) Facility Access 553

All contractor personnel accessing Marine Corps Systems Command facilities/buildings, must 554 maintain compliance with access control policy identified within MCSC Order 5530.2A - Access 555 Control Order. Access into MCSC facilities requires use of a Command facility access badge 556 issued by the PHYSEC Team. Contractor personnel assigned to sit within MCSC spaces with a 557 dedicated (by name) workspace will be considered “on-site” contractors and may be issued a 558 Green badge with the holder’s photograph. Contractor personnel that frequently visit (three or 559 more times a week) MCSC spaces will be considered “off-site” contractors and may be issued an 560 Orange badge with the holder’s photograph. Issuance of a MCSC facility access badge shall be 561 initiated by the COR using the Badge Request process hosted on the MCSC VIPER website. 562 Vendors may be issued a MCSC facility badge prior to issuance of a CAC or DBID card; 563 however, receipt of an unfavorable response will result in deactivation of any currently issued 564 MCSC facility access badge. All other vendors supporting this contract who do not meet the 565 “Green” or “Orange” badge standards shall be required to have their visit to MCSC notified in 566 advance using the MCSC Visitor Notification System hosted on the MCSC VIPER website. 567 Visitor Notifications shall only be submitted by a MCSC sponsor with access to the MCSC 568 VIPER website. Visitors who arrive at MCSC facilities without an approved Visitor Notification 569 on file shall be turned away unless a MCSC escort with a “White,” “Powder Blue,” or “Green” 570 badge can be reasonably coordinated. Vendors possessing an “Orange” badge are not authorized 571 to escort visitors without an approved Visitor Notification on file. All “Green” and “Orange” 572 badges will be programmed with unescorted access into approved MCSC facilities Monday 573 through Friday from 0630-1700. Unescorted access outside of these times to include federal 574 holidays, furloughs, shutdowns, etc. is restricted. For additional questions regarding MCSC 575 facility access requirements, you may contact the PHYSEC Team at 576 mcsc_physicalsecurity@usmc.mil or by calling 703-432-3964/3909. 577

3.1.6 Safety 578

Accidents and Mishaps 579

The contractor shall immediately report any accident/incident with safety/security implications 580 along with any other condition or incident that could reasonably be expected to be of interest to 581 the Government. The contractor shall report damage to Government property or injury to 582 Government employees, contractor employees, or any other person must be reported to the 583 contracting officer and COR within four (4) hours. Initial reports from the contractor may be 584 verbal but shall be followed up in writing using OSHA Form 301, Injury and Illness Incident 585 Report, which shall be submitted to the contracting officer and COR within 24 hours. Contractor 586

UNCLASSIFIED Page 17 reports of incidents with security implications shall include the full details of the incident, any 587 remedial actions taken by the contractor and shall otherwise comply with all applicable security 588 instructions. 589

The contractor shall investigate all accidents and mishaps occurring on Government property 590 involving contractor employees and report the findings (on applicable forms) to the contracting 591 officer and COR within (3) three calendar days of the incident.