M95494-18-R-0006-0001.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of Amendment 0001 is to address Questions submitted by industry and to update the solicitation accordingly. All changes are highlighted in red font.

1) Update the solicitation response/date time,

2) Updated Section 15.0 of the Performance Work Statement, and

3) Updated 52.212-1 Instructions to Offerors.

Please see attached.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 22

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 26-Jan-2018

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X M9549418R0006

X 9B. DATED (SEE ITEM 11)

09-Jan-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

26-Jan-2018

CODE

MCICOM HQ

3000 MARINE CORPS PENTAGON

WASHINGTON DC 20350-3000

M95494 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M9549418R0006

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

The following items are applicable to this modification:

SUMMARY OF CHANGES

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 29-Jan-2018 10:00 AM to 02-Feb-2018 10:00 AM.

The following have been modified:

INSIDER THREAT PROGRAM AND ANALYSIS CENTER

PERFORMANCE WORK STATEMENT (PWS)

1.0 BACKGROUND

This is a non-personal services contract to provide support services for the United States Marine Corps (USMC), Plans, Policy, and Operations (PP&O), Marine Corps Insider Threat Program (MCInTP). The Identity Activities

Branch (formerly Security Branch), operating under the Deputy Commandant, PP&O Security Division, is responsible for generating, implementing, and measuring the effectiveness of service policy governing the MCInTP and serves as the advocate. The MCInTP is responsible for the development, implementation, oversight of Service doctrine and policy, training, tactics, technologies, and coordination with other Department of Defense (DoD) and interagency partners to support mission area across all Marine Air Ground Task Force (MAGTF). The Marine Corps

Insider Threat section is responsible for coordinating the development and execution of service plans and policies related to Insider Threat capabilities directed by the National Insider Threat Task Force (NITTF) under Executive

Order 13587.

Executive Order 13587, Structural Reforms to Improve the Security of Classified Networks and the Responsible

Sharing and Safeguarding of Classified Information, requires the Marine Corps to develop a program to deter, detect, and mitigate insider threats. More specifically, the National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs requires agency heads to establish an integrated capability to monitor and audit information for insider threat detection and mitigation that leverages counterintelligence, security, cybersecurity, human resources, law enforcement, and other relevant functions and resources to identify and counter the insider threat.

The MCInTP and its Analysis Center located in Quantico, Virginia are envisioned as performing multiple functions, ranging from identification of data and events to education and training. Unifying disparate monitoring capabilities, aggregating data from multiple sources while complying with relevant laws and privacy policies, analyzing data and interpreting the meaning of personnel actions (behavioral indicators) realistically and ethically, providing actionable information to leaders, and self-assessing performance are all examples. The role of the Program and the Analysis

Center, therefore, are to meet Executive Branch requirements by educating, training, informing, and supporting

Marine Corps leaders.

2.0 SCOPE

The scope of this requirement is to provide behavioral, analytical, policy, and technical support along with the concepts, expectations, and performance requirements to the USMC, PP&O, Identity Activities Branch; Insider

Threat Section. The primary objective is to implement a MCInTP, to include an Analysis Center that effectively detects, deters, and mitigates intentional and unintentional insider threats among uniformed, government, and contracted personnel. This Analysis Center will leverage the experience of its analysts, alongside technical and non-technical controls, to mitigate insider threats and coordinate with appropriate Insider Threat enterprise representatives (Defense Insider Threat Management and Analysis Center, National Insider Threat Task Force, Carnegie Mellon University SEI CERT capabilities and other Services, etc.). In addition to its analytical hub capability, the MCInTP will support training and awareness across the Marine Corps to assist in mitigation strategies and command interaction.

3.0 APPLICABLE DOCUMENTS

The Contractor shall be familiar with and be able to reference the following documents, instructions, and manuals.

All applicable documents in support of this effort will be made available by the Government.

Executive Order 13587, Structural Reforms to Improve the Security of Classified Networks and the

Responsible Sharing and Safeguarding of Classified Information, 07 October 2011

Presidential Memorandum, National Insider Threat Policy and Minimum Standards for Executive Branch

Insider Threat Programs, 21 November 2012

Executive Order 10450, Security Requirements for Government Employment, 27 April 1953

Executive Order 12829, National Industrial Security Program (as amended), 16 December 1993

Executive Order 12968, Access to Classified Information, 02 August 1995

Executive Order 13467, Reforming Processes Related to Suitability for Government Employment, Fitness for Contractor Employees and Eligibility for Access to Classified National Security Information (as amended), 29 September 2016

Executive Order 13526, Classified National Security Information, 29 December 2009

Executive Order 12333, United States Intelligence Activities (as amended), 04 August 2008

DoDI 5200.08, Security of DoD Installations and Resources and the DoD Physical Security Review Board

(PSRB), 19 May 2010

DoD 5200.08-R, Physical Security Program, 09 April 2007

DoDD 5205.16, The DoD Insider Threat Program, 30 September 2014 Incorporating Change 1, Effective

25 January 2017

DoDD 5240.02, Counterintelligence (CI), 17 March 2015

DoDM 5240.01, Procedures Governing the Conduct of DoD Intelligence Activities, 08 August 2016

DoDD 5240.06, Counterintelligence Awareness and Reporting (CIAR), W/Ch 1, 30 May 2013

DoDM 5105.21-V3, Sensitive Compartmented Information (SCI) Administrative Security Manual:

Administration Of Personnel Security, Industrial Security, and Special Activities, 19 October, 2012

SECNAVINST 5510.37, Department of the Navy (DoN) Insider Threat Program, 08 August 2013

SECNAV M-5510.30, Department of the Navy Personnel Security Program, 01 June 2006

OPNAVINST 5510.165A, Navy Insider Threat Program, 01 October 2015

MCO 5530.14A, Marine Corps Physical Security Program Manual, 05 June 2009

MCO 3302.1E, Marine Corps Antiterrorism Program

MCO 3900.20, Marine Corps Capabilities Based Assessment, 27 September 2016

MCBul 5100, Marine Corps Insider Threat Program (MCInTP), 29 September 2017

4.0 SPECIFIC TASKS REQUIREMENTS

The Contractor shall assist the Marine Corps by establishing, maintaining, assessing, modifying, and effectively implementing the MCInTP and Analysis Center to include:

4.1 Program Development Support:

The Contractor shall:

a) Research, identify, and make recommendations on best practices utilized within DoD agencies, other government agencies and corporate organizations, for implementing an insider threat program in line with the MCInTP strategic vision.

b) Provide support to the Marine Corps in achieving Full Operational Capability by assisting in the development of processes, information management, knowledge management, records management, insider threat response actions, in accordance with the NITTF criteria, and provide an Executive Summary on the status of the MC InTP to NITTF in accordance with Section 6 Delivery Schedule.

c) Provide program management support for the MCInTP to include development, review, and coordination of all policies, directives, instructions, and alignment of existing programs as it relates to the insider threat, personnel security, physical security, information security, force protection, and mission assurance.

d) Provide support in conducting the Marine Corps Capabilities Based Assessments (MC CBA) in accordance with MCO 3900.20, to provide Joint Capabilities Integration Development System (JCIDS) assessment components (Capability Analysis, Gap Analysis, Solutions Analysis, and Risk Analysis) and conduct assessments of training and education standards development, and Doctrine, Organization, Training, Material, Leadership and Education, Personnel and Facilities (DOTMLPF) assessment within process.

e) Provide support to the Government Program Lead with the development of a comprehensive budgeting strategy, to include proposed funding levels for Program Objective Memorandum (POM) efforts over the five-year Future Years Defense Program (FYDP) as it relates to the InTP.

f) Review and assist with the establishment of annual reporting guidelines for Component Departments to report relevant InTP information.

g) Develop and manage the capability to process relevant insider threat information from internal and external sources (User Activity Monitoring (UAM), Defense Insider Threat Analysis Center (DITMAC), law enforcement, physical security, personnel security, continuous evaluation, human resources) as part of InTP

Analysis Center operations.

h) Develop and manage the capability to ingest, triage, analyze, provide recommendations, develop analytical reports, and respond to requests for information.

i) Attend and support Inspector General Marine Corps (IGMC) site inspections to ensure policy compliance as it relates to the InTP at various MC installations in accordance with Section 7 Travel Schedule.

4.2 Policy and Procedures Development Support:

a) Assist in the development of policy pertaining to InTP, ensuring compliance with higher (DoN, DoD) authority directives.

b) Identify policy modifications or gaps in DoD, Navy, and Marine Corps policies to ensure all necessary

Marine Corps components and departments can integrate with the InTP.

c) Provide policy recommendations for approval by Marine Corps leadership as it relates to InTP.

d) Coordinate with Government representative(s) with the execution of tasks tracking and coordination via the

DoN Tracker System.

e) Provide input to and assist with updating the InTP SharePoint web pages on the Security Division web site that contains information used by subordinate commands and other users for execution of the program.

f) Assist in the development and execution of InTP records handling procedures.

g) Develop and execute procedures for reporting actions and insider threat response, both internally and externally, and procedures for documenting each matter reported and response action taken within the case management system.

h) Assist in the maintenance process for access control to and the protection of classified and controlled unclassified sensitive information in accordance with National Archives and Records Administration

(NARA), DoD Information Security Program, Navy Information Security Program, Marine Corps

Information and Personnel Security Program.

i) Attend and participate at the annual Operational Advisory Working Groups, annual Insider Threat

Conferences, and annual DoD Security Conferences by identifying gaps in policies and make recommendation to policy changes in accordance with Section 7 Travel Schedule.

j) Participate in meetings to support InTP integration initiatives with higher echelon requirements.

4.3 SOP and CONOP Development Support:

a) Assist in the development of Standard Operating Procedures (SOPs) and Concept of Operations

(CONOPs) to assist with the implementation and operationalization of the program.

b) Determine and validate staffing requirements for Analysis Center operations, to include reporting lines and liaisons to efficiently support the program.

c) Determine, identify, and validate internal and external reporting requirements to DoD, Secretary of the

Navy (SECNAV), DITMAC, leadership and commanders.

d) Establish, validate, and execute workflow processes associated with case management, triage, insider threat analysis, validation, and reporting within the DITMAC System of Systems (DSOS), various databases, and case management systems.

e) Develop insider threat Analytic Reports based off of information that is received by the Analysis Center, information that has been analyzed and insider threat concerns that have been validated against established insider threat thresholds, and the 13 adjudicative guidelines within personnel security.

f) Develop and define business rules to ensure compliance with policy, adherence to applicable laws, ethical practices, privacy protection and safeguarding of sensitive information, and workflow.

g) Develop and support strategic communications plans that includes stakeholder communication strategy, program integration strategy, enterprise communications strategy, and senior leadership engagement strategy.

h) Develop and maintain a Plan of Action and Milestones (POA&M) to ensure milestones, scheduling and timelines for program development are known and progress is accurately tracked. POA&M shall be briefed during the Monthly Status Meetings.

4.4 Training and Education Support:

a) Participate in the Senior Leadership Working Group to assist the Government with the development of a training and education strategy as it relates to the InTP strategic communications plan in accordance with

Section 7 Travel Schedule.

b) Coordinate and implement a continuing training program tailored to different training audiences

(uniformed, government, and contracted personnel.)

c) Assist in the development of the curriculum and media used for the initial indoctrination/preliminary training, annual refresher training, and special training designed to address insider threat policy, operations discrepancies, deficiencies, and promote awareness of insider threat policies, procedures and indicators of potential insider threat activities and behaviors.

d) Assist in the development of the curriculum and media for the Analysis Center staff, that includes insider threat awareness, analytical processes and procedures, counterintelligence fundamentals, personnel and information security fundamentals, records handing, safeguarding of sensitive information, civil liberties, privacy laws, and regulations, workplace violence, investigative referral procedures, insider threat analyst response actions and procedures.

e) Assist in the development the curriculum and media for the MC enterprise, that includes insider threat awareness, counterintelligence fundamentals, personnel and information security fundamentals, records safeguarding of sensitive information, civil liberties, privacy laws, and regulations, workplace violence, reporting procedures.

f) Assist in the development curriculum and media that is tailorable and in modular form to be included into professional military education courses, instructor led training events, and computer based training.

g) Coordinate with Marine Corps wide training coordinators to ensure annual InTP timelines are met, training is provided, and properly documented.

h) Attend required training events in accordance with Section 7 Travel Schedule.

5.0 CONTRACT DELIVERABLES

5.1 Contract Kick-off Meeting

The Contractor shall schedule and coordinate a Kick-Off Meeting within five (5) days after contract award and at a location approved by the Government. The Government, with assistance from the Contractor, shall develop a

Meeting Agenda. The Contracting Officers Representative (COR) shall ensure all identified participants are notified in advance of the meeting. The Contractor shall develop and, after Government approval, distribute the kick-off meeting minutes in accordance with paragraph 5.3 below and Section 6 Delivery Schedule.

5.2 Monthly Meeting and Status Reports

The Contractor shall attend the reoccurring monthly meeting and provide a Monthly Status Report (MSR) in accordance with Section 6 Delivery Schedule. The first MSR shall be submitted on the first Friday following the first full month after the contract award date. A MSR shall be emailed to the COR no later than the 2nd Friday of each month. The report will include:

a) Contract Status and review of invoices

b) Current tasks assigned

c) Status of assigned tasks

d) Completion of assigned tasks

e) USMC InTP compliance to NITTF status

f) Number of cases referred to Analysis Center (reference 4.3e)

Number of referrals received

Sources of referrals

Number of cases entered into the DITMAC’s System of Systems (DSOS)

Number of cases not accepted and rejected

Number of Request for Information (RFI) entered into DSOS

Number of cases opened for action in DSOS

Number of cases closed in DSOS

Number of cases remain open in DSOS

Total number of cases analyzed

g) Trends and deviations recorded

5.3 Meeting Minutes

The Contractor shall take Meeting Minutes for each meeting attended. The report must include a list of attendees, action items, and other pertinent information discussed in the meeting and delivered in accordance with Section 6

Delivery Schedule.

6.0 DELIVERY SCHEDULE

The following deliverables shall be provided to the COR:

7.0 TRAVEL

7.1 Travel Schedule:

The table below summarizes the anticipated travel requirements under this effort:

Task

PWS

Ref.

Number of

Travelers

Estimated

Month Duration Location

Inspector General Marine

Corps Site Inspections 4.1.i 1

Estimated six visits per year

5 days USMC locations

Operational Advisory

Groups 4.2.i 2 May 5 Days New Orleans, LA

Insider Threat Conference 4.2.i 3 May 4 Days San Antonio, TX

DoD Security Conference 4.2.i 3 Aug 4 days Florida

Senior Leadership

Working Group 4.4a 3 Annual

3 days each

Camp Lejeune, NC

Camp Pendleton, CA

MCB Foster, Okinawa, MILESTONE/

DELIVERABLE

PWS

REF.

DUE DATE FORMAT

Executive Summary 4.1.b Quarterly Microsoft Word

InTP Analytical Reports 4.3.e As Required DSOS template, Microsoft

Word

Strategic Communication Plan 4.3.g 30 September 2018 Microsoft Word

POA&M 4.3.h Monthly at Monthly Status

Meetings

Microsoft Excel

Training Materials 4.4.c-f 30 September 2018 Power Point slides, Microsoft

Word

Kick-Off Meeting and Agenda 5.1 Five (5) days after contract award date

Meeting Forum; Microsoft

Word

Kick-Off Meeting Minutes 5.1 Five (5) days after meeting Microsoft Word

Monthly Status Reports (MSR) 5.2 2nd Friday of each month Microsoft Word

Meeting Minutes 5.3 Five (5) days after meeting Microsoft Word

Japan

NITTF Hub Managers

Training 4.4.h 3

As

Required 3 days Chantilly, VA

Insider Threat Analyst

Training Course 4.4.h 3

As

Required 3 days Alexandria, VA

DOD security specialist

Training Course 4.4.h 3

As

Required 6 days Linthicum, MD

7.2 Travel Regulations:

The Contractor shall adhere to the following travel regulations (see FAR 31.205-46):

Federal Travel Regulations (FTR) – Prescribed by the General Services Administration, for travel in the contiguous United States.

Joint Travel Regulations (JTR), Volume 2, DoD Civilian Personnel, Appendix A. Prescribed by the

Department of Defense for travel in Alaska, Hawaii, and outlying areas of the United States.

Department of State Standardized Regulations (DSSR) (Government Civilians, Foreign Areas), Section 925, "Maximum Travel Per Diem Allowances for Foreign Areas," prescribed by the

Department of State for travel in areas not covered in the FTR or JTR.

7.3 Travel Requirements:

All travel shall be coordinated and approved by the COR prior to incurring any travel expense. Any travel under this contract must be specifically requested in writing by the Contractor and approved by the COR, prior to incurring any travel expense. The Contractor must submit the written request to the COR five (5) days in advance.

The travel request must include as a minimum, the following:

Contract number

Date, time, and place of proposed travel

Purpose of travel and how it relates to the contract

Contractor’s estimated cost of travel with a breakdown of the estimated costs of transportation, lodging, meals, and incidentals

Name(s) of individual(s) traveling

The Contractor shall use only the minimum number of travelers and rental cars needed to accomplish the task(s).

Travel shall be scheduled during normal duty hours whenever possible.

7.4 Travel Reimbursement:

The Contractor must be reimbursed for the reasonable actual cost of transportation, lodging, meals and incidental expenses. However, actual costs are considered reasonable, allowable, and reimbursable only to the extent that they do not exceed on a daily basis the maximum per diem rate in effect at the time of travel as set forth in the

DOD Joint Travel Regulations located at http://www.defensetravel.DoD.mil/. Actual cost does not include handling charges, general and administrative cost, overhead, profit or any other indirect cost.

The Contractor must use the allowable Government personnel rates for transportation and lodging.

Reimbursement for airfare must not exceed the lowest customary standard, coach, or equivalent airfare quoted during normal business hours. The Contractor will not be reimbursed for travel expenses unless audited records for transportation contain evidence, such as original receipts, substantiating actual expenses incurred for travel. In no event will reimbursement exceed the published rates of common carriers. Expenses for lodging, meals and incidental expenses must be reimbursed to the Contractor, provided that the overnight stay was documented as necessary.

The contract includes a not-to-exceed funding limitation for travel costs. When the Contractor expects total funding expended for reimbursable travel to reach 85 percent of the total funds available on the travel CLIN, the

Contractor must notify the Contracting Officer and the COR and any other Government official identified by the

Contracting Officer. The notice must state the estimated amount of additional funds required to continue performance for the period specified in the task order. The Contractor must not exceed or incur costs that exceed the amount of funding stated on the reimbursable travel CLIN. The Government is not obligated to reimburse the

Contractor for otherwise reimbursable travel in excess of the funded amount stated on the reimbursable travel

CLIN.

The Government is not obligated to reimburse the Contractor for otherwise reimbursable travel in excess of the funded amount stated on the reimbursable travel CLIN.

The Contractor is not obligated to continue performance of any reimbursable work under this Contract or otherwise incur costs for reimbursable travel in excess of the funded amount stated on the reimbursable travel CLIN unless the Contracting Officer notifies the Contractor in writing that the funded amount stated under the applicable reimbursable travel CLIN has been increased. In the event notification is made orally, such notification shall be followed up in writing within two (2) business days.

No notice, communication, or representation from any person other than the Contracting Officer shall affect the

Government’s obligation to reimburse the Contractor.

8.0 OTHER DIRECT COSTS

In the event that additional or specialized equipment, services, and/or supplies are required for a Task Order that has prior approval from both the and COR, the Government will reimburse the Contractor(s) only for the actual price paid for such services, equipment, or supplies that are expressly identified as reimbursable items by this contract or any order issued thereunder. “Actual Price” paid by the Contractor(s) includes tax paid, if any, and reduced by any and all credits and rebates, whether accrued or realized, associated with the supplies and services provided. “Actual Price” does not include material handling charges, overhead, general and administrative costs, profit, or any other indirect cost that is in any way associated with the Contractor(s)’s purchase or provision of additional or specialized equipment, services, and/or supplies.

The Contracting Officer may reduce the reimbursement by any amount above that the Contracting Officer finds, in his/her sole discretion, is greater than that which is fair and reasonable for the supplies or services provided, giving due consideration to the facts and circumstances prevailing at the time that the Contractor(s) procured the supplies and services. Disputes as to the amount by which any reimbursement is reduced shall be resolved in accordance with the “Disputes” clause of the contract. It shall be the Contractor(s)’s burden to demonstrate that the price it paid for reimbursable supplies and services were fair and reasonable.

Each order that requires additional or specialized equipment, services, and/or supplies will include a. estimated funding limitation for ODCs. When the Contractor(s) expects total funding expended for reimbursable ODCs to reach 85 percent of the total funds available on the ODC CLIN, the Contractor(s) shall notify the Contracting

Officer and the COR and any other Government official identified by the Contracting Officer. The notice shall state the estimated amount of additional funds required to continue performance for the period specified in the order. The Contractor(s) shall not exceed or incur costs that exceed the amount of funding stated on an order’s reimbursable ODC CLIN.

The Contractor(s) is not obligated to continue performance of any reimbursable work under this Contract or otherwise incur costs for reimbursable travel in excess of the funded amount stated on the reimbursable travel CLIN unless the Contracting Officer notifies the Contractor(s) via Contract/Task Order modification that the funded amount stated under the applicable reimbursable travel CLIN has been increased. In the event notification is made orally such notification shall be followed up in writing within two (2) business days.

No notice, communication, or representation from any person other than the Contracting Officer shall affect the

Government’s obligation to reimburse the Contractor.

9.0 CHANGE ORDERS

Change orders shall not be considered an authorization to exceed the funded amount stated on a reimbursable CLIN unless they contain a statement expressly increasing the funded amount of that reimbursable CLIN by a sufficient amount to cover the change order.

10.0 PERIOD OF PERFORMANCE

This contract is for a one (1) one-year base period with two (2) one-year option periods.

Period Date Range

Base Period 12 March 2018 – 11 March 2019

Option One 12 March 2019 – 11 March 2020

Option Two 12 March 2020 – 11 March 2021

11.0 PLACE OF PERFORMANCE

The primary place of performance will be at a Government facility at the MCB Quantico and the Pentagon.

12.0 HOURS OF OPERATION

The Contractor shall be made available and conduct business between the hours of 7:30am and 4:30pm (EST)

Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must, at all times, maintain an adequate workforce for uninterrupted performance of all tasks defined within this PWS when the

Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1st January New Year’s Day

3rd Monday of January Martin Luther King’s Birthday

3rd Monday of February Presidents Day

Last Monday of May Memorial Day

4th July Independence Day

1st Monday of September Labor Day

2nd Monday of October Columbus Day

11th November Veterans Day

4th Thursday of November Thanksgiving Day

25th December Christmas Day

Note1: If a federally observed holiday should fall on a Saturday, it will be observed on the preceding Friday; if it falls on a Sunday, it will be observed on the following Monday. Should this occur the Contractor is exempt from performing work under this contract on these days.

Note2: Inauguration Day (for NCR only): NCR will be closed on this day with no access to Government facilities.

Contractor personnel shall refer to company policy for further guidance on this day.

13.0 GOVERNMENT FURNISHED INFORMATION, EQUIPMENT, MATERIALS, RESOURCES, AND

FACILITIES

Common Access Card (CAC). All personnel performing tasks under this contract must be eligible for, and obtain, a DoD Common Access Card (CAC) and associated DoD PKI certificates for identity verification and encryption of transmitted correspondence.

Government Furnished Facilities (GFF). Government furnished facilities and workspaces will be provided as a matter of routine. The Government will provide workspaces, administrative supplies, telephones, desktop computers, laptops, access to printers, FAX machines, and copiers on an as needed basis for on-site personnel.

Government Furnished Information (GFI) / Materials. The Contractor shall protect GFI (technical data) provided by the Government from public disclosure in accordance with the marking contained thereon. The services performed under this contract involve access to and handling of material at the classified level. All materials developed by the Contractor during this contract shall become the property of the Headquarters, U.S. Marine Corps.

The Contractor shall be required to abide by the disclosure standards set forth in DFARS 252.204-7000. The

Contactor shall not release any information to regulators, media, or other parties. Any information release will come from USMC Government employees only.

Government Resources: In general, the Contractor will be provided access to Marine Corps owned hardware and software that is required to upgrade databases and extract files as necessary to conform to the specifications/requirements of this contract. Contractors will be given access to systems required NIPR, SIPR, JWICS accounts as required.

14.0 PERSONNEL REQUIREMENTS

It is the Contractor’s responsibility to provide and maintain a trained workforce capable of providing the services specified under this contract. All related training, continuing education, certification courses, and other similar events are the financial responsibility of the Contractor, except as otherwise specified in the contract. Task priorities, short-notice suspense, operational constraints, and other potential impacts shall be managed to maintain schedule requirements for all task areas. Further requirements for personnel qualifications are set forth in this PWS.

Contractor personnel shall attend all mandatory Headquarters Marine Corps training. Training topics include, but are not limited to, Sexual Harassment in the workplace, Safety, Security and Ethics. The Contractor may be required to attend DoD training prior to traveling and working at locations.

15.0 KEY PERSONNEL

All key personnel supporting this contract shall meet all requirements specified in Section 15.0, respectively. All key positions under this contract shall be staffed upon award.

The following positions have been identified as key personnel and shall provide on-site support at MCB Quantico, with the exception of the Physical Specialist position, which shall provide on-site support at the Pentagon. There are a maximum of 12 seats available at MCB Quantico for on-site personnel. Personnel should have specialized experience in the private or public sector developing and implementing insider threat, force protection, physical security, intelligence, and law enforcement functions to support the InTP requirements. The Contractor shall designate one key personnel as the single point of contact to function as the liaison between the COR and contractor staff on InTP efforts and progress.

The following minimum education, experience, knowledge, skills, and abilities are required to meet each key personnel qualification under this contract:

15.1 Program Specialist:

Bachelor’s Degree in Business Administration or an equivalent field

Minimum of 10 years of defense, national security, and homeland security experience

Must have one of the following certifications:

o Insider Threat Vulnerability Assessor o Program Manager Certifications o Carnegie Mellon University SEI CERT o Insider Threat Program Manager o Insider Threat Hub Operations Course o Insider Threat Program Assessor o Project Management Professional (PMP) o Master Project Management

Must have experience in leading and managing personnel, managing schedules, and monitoring work performance

Must have experience in providing senior-level security, insider threat and violence prevention stakeholders with risk analytics, and program management support (experience with Program

Management within the USMC is preferred)

Must have experience in security and project management (education requirement can be waived with

7 years of policy related work experience)

Must have experience in Program Objective Memorandum (POM) efforts in support of program budget forecasting

Must have experience with DoD process and procedures with regards to classified networks and environments

Possess an active TS/SCI Security Clearance

15.2 Social Scientist Subject Matter Expertise (SME)

Master’s Degree in Social Sciences (Anthropology/ Political Science), or an equivalent field with experience in social sciences and analysis. (USMC-specific experience is preferred)

Minimum of 10 years of experience working in the context of the American military and specifically the Marine Corps

Must have experience with DoD process and procedures with regards to policy development, interpreting orders and directives, operation on and protection of classified networks and environments

Must have knowledge of DoD violence prevention initiatives, programs and resources

Must possess a clear understanding of DoD process and procedures with regards to policy development, interpreting orders and directives, operation on and protection of classified networks and environments

Must possess extensive knowledge and skill to conduct comprehensive research to identify and characterize risk factors, develop strategies to reduce threat incidence, evaluate and recommend methods for deterring, detecting, and mitigating insider threats utilizing social science concepts

Must be skilled in written and oral communications sufficient to prepare and present complex findings and recommendations to upper management, carry out specific actions regarding controversial issues, and for implementing new ideas and concepts

Must be able to communicate with and advise high level managers regarding new behavioral science research

15.3 Senior Analyst

Minimum of 8 years of experience in military, all-source intelligence analysis, supporting tactical and strategic levels

Minimum of 5 years in demonstrated knowledge of intelligence processes, cycle and organizations;

knowledge of and ability to use various research tools; procedures and methods of analyzing, compiling, reporting and disseminating intelligence data; and/or knowledge of organization(s) for and methods of collecting and analyzing intelligence data

Minimum of 5 years demonstrated knowledge of research and analytical techniques as applied to difficult and complex assignments in security, law enforcement, and counterintelligence analysis

Must possess a strong analytical background

Must have excellent written and verbal skills with ability to deliver briefings to large professional groups

Must possess the ability to successfully plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness and relevance to mission

Must possess knowledge of current domestic and international threats to U.S. national security interests

15.4 Policy Development Specialist (SME)

Minimum of 10 years of experience in DoD, program and policy development (USMC-specific is preferred)

Must have a comprehensive understanding of JCIDS and the DOTMLPF principles and process to assist in the development of the MC CBA

Must have comprehensive knowledge of how qualitative and quantitative measures can be applied to programmatic efforts in program development and analytics

Must possess the ability to develop, implement, and monitor scientifically defensible qualitative and quantitative measures for program evaluation aligned with the strategic vision of the Marine Corps

Insider Threat Program

Must have excellent written and verbal skills, ability to construct briefs for senior leaders on material and non-material solutions for program development

Must possess the ability to work both independently and on a team

15.5 Program Evaluation and Training (SME)

Minimum of 10 years of experience working with military populations, understanding of military culture (USMC experience preferred)

Must have comprehensive knowledge of how qualitative and quantitative measures can be applied to programmatic efforts in scientifically defensible ways

Must possess the ability to develop, implement, and monitor scientifically defensible qualitative and quantitative measures for program evaluation aligned with the strategic vision of the Marine Corps

Insider Threat Program

Must possess the ability to align program evaluation measures with DoD, DoN, and Marine Corps standards or requirements

Must possess the ability to brief senior leaders on programmatic effectiveness and defend evaluation

Must possess the ability to translate complex and technical concepts into non-specialist terms

Must have knowledge of best practices for mixed population, non-intelligence community insider threat programs

Must have the ability to develop comprehensive training content targeted at specific Marine Corps populations, (e.g., different ranks, MOSs, uniformed/civilian/contractor, etc.)

Must have the ability to develop, implement, and monitor scientifically defensible qualitative and quantitative measures for training evaluation aligned with the strategic vision of the Marine Corps

Insider Threat Program

15.6 Physical Security Specialist

Minimum of 7 years of experience in the Physical Security specialization

Must have completed physical security training courses via the Defense Security Service, U.S. Army

Military Police School Physical Security Course, and Federal Law Enforcement Training Center

Physical Security Course

Must demonstrate the ability to apply systematic thinking principles to the field of material solution with regard to DoD requirements

Must have USMC operation experience, knowledge of forward deployed and amphibious missions

Must have an understanding of physical security systems, measures and equipment

Must have in-depth knowledge of the identity intelligence analysis process

Must have expertise in DoD, DoN and Marine Corps Physical Security doctrine, policies, strategies, directives, and interoperability requirements

Must demonstrate expertise in work processes, optimization methods, and risk management

Must possess experience of physical security surveys, IGMC reports, deviation requests, and physical security sections of Mission Assurance Assessments in order to identify trends and key vulnerabilities.

16.0 SUBSTITUTION OF KEY PERSONNEL

General Provision – The Contractor agrees to assign to this contract those persons identified as personnel whose resumes were submitted with this proposal and who are necessary to fulfill the requirements of this contract. No substitutions of personnel shall be made except as stated herein.

Guidance on Substitutions – During the first 90 days of the contract performance period no personnel substitutions by the Contractor shall be made unless substitutions are necessitated by an individual's sudden illness, death, or termination of employment. In any of these events, the Contractor shall promptly notify the Contracting Officer and provide the information required below. After the initial 90 days, all proposed substitutions must be submitted, in writing, at least two (2) weeks in advance of the proposed substitutions to the Contracting Officer and provide information required below. There shall be no more than a ten (10) business day gap in support due to a key personnel replacement issue.

Request for Substitution – All requests for substitutions must provide a detailed explanation of the circumstances necessitating the proposed substitution, a resume for the proposed substitute, and any other information requested by the Contracting Officer. All proposed substitutes must have qualifications equal to or higher than the qualifications of the person being replaced. The Contracting Officer or his/her authorized representative will evaluate such requests and promptly notify the Contractor of his/her approval or disapproval thereof.

17.0 SECURITY REQUIREMENTS

The minimum investigation required is a Single Scope Background Investigation (SSBI) or a Tier 5 investigation for all Contractor personnel supporting this contract. Security requirements applicable to this contract are described on the DoD Contract Security Classification Specification (DD254), Attachment 1.

Contractor personnel providing support under this contract will require background checks in order to obtain user account at the Information Technology (IT) level 2 (classified network access). An in-person visit with the HQMC

Security Officer will be required for Contractor personnel to in-process. All Contractor personnel supporting this effort will be required to sign a Classified Non-Disclosure Agreement (SF312).

The Contractor shall perform in accordance with the National Industrial Security Program Operating Manual

(NISPOM), DOD 5220.22M, and ensure that all classified material is handled in accordance with the NISPOM and the appropriate Security/Program Guides/Directives. The Contractor shall obtain appropriate security clearances for required personnel.

All Contractor personnel assigned to this effort will have access to information that may be subject to the Privacy

Act of 1974. The Contractor is required to ensure the proper safeguarding of such information to prevent unauthorized release. All task requirements will be conducted in full compliance with DoD security regulations.

All Contractors supporting this contract must have a current a TOP SECRET (SCI eligible) clearance based on an

SSBI/ SBPR/ PPR or Tier 5 investigation before beginning to support this work and must maintain the level of security and eligibility required for the life of the contract. The Contractor must hold an active TOP SECRET

Facility Clearance.

The Contractors that will be accessing security sensitive data will need a CAC and will need to complete a System

Authorization Access Request-Navy (SAAR-N) and the DOD Information Assurance Awareness Training.

Access to Government buildings will be granted to Contractor staff, when needed. Contractor employees must be clearly identifiable while on Government property by wearing appropriate badges at all times. The Contractor shall provide each employee with an identification badge, which identifies, by photograph, the individual as an employee of the Contractor. These badges must be presented for examination upon request from the Contracting Officer, COR, Military Police, or any other Government Official with a need to see the badge. The Contractor and its employees shall be subject to all traffic, security, and registration regulations for personnel and vehicles.

All Contractor personnel attending meetings, answering Government telephones, in electronic messages or correspondence related to this contract, working on site, where their Contractor status is not known to third parties, must identify themselves as Contractors. Contractor personnel shall also ensure that when logged onto Government equipment that their profile shows them as Contractor personnel.

Contractor-occupied facilities (on Government installations) such as offices, separate rooms, or cubicles must be clearly identified with Contractor supplied signs, name plates or other identification, showing that these are work areas for Contractor personnel.

18.0 SPECIAL CONSIDERATIONS

18.1 Marking of Contractor Reports

All reports required under contracts for individual experts and consultants; studies, analyses, and evaluations; and management and professional support services should prominently show on the cover of the report:

a) Name and business address of the Contractor.

b) Contract number.

c) Contract dollar amount.

d) Whether the contract was competitively or non-competitively awarded.

e) Name of individual sponsor. The sponsor should be an individual from the requiring activity at the Program

Manager or comparable level.

f) Name and address of requiring activity.

18.2 Data, Software, and Intellectual Property Rights

All reports, materials, data, information, and all electronic/digital files and other items described herein, and any other items, (hereinafter referred to individually or collectively as the Work or Works), and all intellectual property rights in or to such Works, in whatever form, created, generated, produced or provided under, or as a result of, this contract/effort shall become the property of the U.S. Government/Marine Corps, i.e., the U.S. Government/Marine

Corps shall be the owner of all of these Works and all intellectual property rights in or to these Works. Therefore, any restricted data rights, information, software, materials and/or other items including, the Contractor's or a Third-

Party's Proprietary data, information, software, materials and/or items must not be used under this contract without the specific written approval by the COR prior to start of any work.

Use of Works: Except as provided in writing by the COR, no Work (as defined in the Intellectual Property Rights paragraph above) material and/or other item created, generated, produced or provided under, or as a result of, this

PWS/Contract/effort shall be used by the Contractor or any of its employees/agents, subcontractors and/or representatives, for any purpose other than for the support and performance of this PWS/Contract/effort. Therefore, The Contractor is obligated to protect the Works from unauthorized use and shall incorporate this paragraph in each of its contracts/subcontracts associated with the goods and/or services provided under this PWS/Contract/effort.

18.3 Enterprise-Wide Contractor Manpower Reporting Application (ECMRA)

The Contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

a) Lease/Rental of Equipment;

b) Lease/Rental of Facilities;

c) Construction of Structures and Facilities;

d) Utilities ONLY;

e) Freight and Shipping ONLY.

The Contractor is required to completely fill in all required data fields using the following web address https://doncmra.nmci.navy.mil. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year.

Contractors may direct questions to the help desk, linked at https://doncmra.nmci.navy.mil.

18.4 Organization Conflicts of Interest

The Contractor acknowledges that it is familiar with FAR Subpart 9.5, Organizational and Consultant Conflicts of

Interest, and agrees to avoid, neutralize or mitigate such conflicts of interest in accordance with the…