Amendment_0001_to_M9549418R0022.pdf

M0009018RC00022

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to:

1. Extend due date and time

2. Revise (highlighted) Section 5.0 (Key Personnel) of the PWS.

3. Incorporate clause at FAR 52.204-23, Prohibition on Contracting for Hardw are, Softw are, and Services Developed or Provided by Kaspersky Lab or Other Covered Entities

1. CONTRACT ID CODE PAGE OF PAGES

S 1 15

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 10-Aug-2018

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X M9549418R0022

X 9B. DATED (SEE ITEM 11)

06-Aug-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

10-Aug-2018

CODE

MCICOM HQ

3000 MARINE CORPS PENTAGON

WASHINGTON DC 20350-3000

M95494 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M9549418R0022

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 15-Aug-2018 03:00 PM to 17-Aug-2018 02:00 PM.

The following have been added by reference:

52.204-23

The following have been modified:

PERFORMANCE WORK STATEMENT

Performance Work Statement for Antiterrorism Program Support

1.0) Background

Headquarters Marine Corps (HQMC), Plans, Policies and Operations (PP&O), Security Division (PS) is responsible for supporting the safeguarding of personnel, property, and resources during all phases of operations in coordination with the United States Marine Corps (USMC) Antiterrorism (AT) Program. The AT Program is designed to deter, detect, delay, deny, or defend against acts of terrorism and destructive or potentially destructive events, enhance protection and AT awareness, and assign AT responsibilities for Marine Corps elements and personnel. Diverse and changing threats require the development of a multi-faceted and comprehensive AT program. The essential elements of an AT program must include: risk management, planning, training and exercises, resource application, and comprehensive program review to ensure commanders at all levels develop prescriptive and comprehensive AT Plans that include these five (5) essential AT program elements.

2.0) Scope

The purpose of this requirement is to provide AT support for the following Task Areas:

Task 1: Information Sharing/Information Fusion (ISIF) and Intel Analytical Support Task 2: Provide Surveillance Detection Capability Support Task 3: Provide Antiterrorism Training Support Task 4: Provide Analytical Gap Analysis Support for Anti-Terrorism (AT) Program

The intent of this requirement is to ensure that the Marine Corps remains the most effective fighting force possible by ensuring that AT is embedded in all aspects of Marine Corps planning, operations, and daily activities in an operating environment of constant and asymmetric threats. The Contractor must provide a multi-faceted, comprehensive AT program that includes an all-hazard, Mission Assurance (MA) approach, is proactive in nature, and is coordinated throughout appropriate commands. Exhibit A provides the orders and directives that apply to this effort.

3.0) Tasks

The HQMC Threat Fusion Cell is the capstone terminology used to manage the USMC intelligence and threat information and reporting requirements and its services are detailed within tasks 1 and 2.

3.1 Task 1 – Information Sharing/Information Fusion (ISIF) and Intel Analytical Support

A. AT Program Coordination Support

Contractor services are required to facilitate the Marine Corps AT program coordination efforts amongst other DoD stakeholders. The Contractor must provide technical and programmatic services to support the following components: Critical Infrastructure Protection (CIP); Chemical, Biological, Radiological, Nuclear (CBRNE); MA; Physical Security (PS); Law Enforcement (LE); Emergency Management (EM); Fire and Emergency Services (FES); Information Sharing/Information Fusion (IFIS); Command Communications Computers and Intelligence (C4I)); and Trapwire, which is the Marine Corps’ Surveillance Detection and Suspicious Activity Reporting System. The Contractor must:

Analyze and provide recommendations to respond to Requests for Information (RFI) from NCIS and

USMC CID Criminal Intelligence (CRIMINT). RFI topics shall include: naval aspects of NCIS’s MTAC missions (e.g., Threat Assessment Port visits); HQMC Threat Fusion Cell matters; Insider Threat Programs; and analytical/planning tool assessments.

Provide recommendations to standardize RFI responses, threat indicators, and warning information. The intent of this task is to establish a seamless, real-time information exchange between internal and external agencies that provide detection, deterrence, and recovery missions to the Marine Corps.

Analyze Marine Corps information sharing procedures through needs assessments and system design reviews and provide recommendations to enhance these capabilities.

Program Guide – The Contractor must develop a detailed Program Guide that summarizes the requirements under this task to include analysis summaries, reports, plans of actions and milestones, action items, standard operating procedures, and points of contact, as applicable. The Program Guide must be submitted in accordance with Section 4.0.

B. Threat Information Sharing – Indications and Warnings

The Contractor must:

Identify opportunities to consolidate and develop efficiencies related to information sharing and overall coordination efforts between the USMC Threat Fusion Cell, USMC Insider Threat, and NCIS Liaison.

Liaise with HQMC, PP&O, Marine Corps Operations Center (MCOC), MCICOM Watch Officer, Marine Corps Component Commands, MCIA, and MTAC. This task shall include receiving USMC programmatic guidance from PS to share threat information across the USMC enterprise and attend applicable working groups such as but not limited to the HQMC AT Working Group, Senior Leaders Security Conference and Marine Corps Mission Assurance Working Groups.

Utilize the Marine Corps Suspicious Activity Information Portal (MCSAIP), a.k.a. the TrapWire system, to detect activity patterns indicative of terrorist, criminal, or hostile intelligence service surveillance operations occurring at or near USMC sites in the United States and overseas. In addition, the contractor will develop a MCSAIP Operators Course and Master Trainers Course. The objective of this task is to train and provide those responsible for site security with the ability to detect terrorist and other surveillance activity in the early stages, thereby enabling the USMC to take appropriate counter-measures to prevent the attack and to assist in the apprehension of the perpetrators.

Analyze classified and unclassified intelligence and law enforcement databases, message traffic, and finished intelligence products for indications and warnings of threats to Marine Corps equities. Produce quarterly and annual Suspicious Activity Reports and other threat pattern trend analysis reports as directed and identified in Section 4.0. Research includes Non-classified Internet Protocol (IP) Router Network (NIPRNET), Secret Internet Protocol Router Network (SIPRNet), and Joint Worldwide Intelligence Communications System (JWICS) message traffic and finished intelligence products from national-level intelligence agencies and federal, state, local, and military law enforcement agencies.

Threat Assessments – Research, compile, analyze, and interpret threat indications and warnings from the

Marine Corps and outside agency reports to make appropriate and timely notifications.

Analyze and evaluate threat information for source credibility, placement and access, threat intent, and capability. The Contractor must integrate the information with previous threat reports to determine the likelihood of impact to Marine Corps personnel or facilities and advise the Government on recommended courses of action.

Analyze intelligence information, including association matrices and link analysis, to determine threats and vulnerabilities of Marine Corps equities and special events and advise the Government on recommended courses of action. Special events examples include: the Commandants Ball, Summer and Evening Parades, Fleet Weeks and DoD Warrior Games.

Disseminate all relevant information, that is not an active component to an open investigation, to HQMC PS Division, the appropriate regional threat information managers, installations, and commands (i.e., MARFORNORTH, MARFORPAC, MCICOM, MARFORRES, MCRC, etc.), Provost Marshals, CID Crime Analysts, and MCOC as appropriate to support regional and installation threat working groups and commanders’ protection decisions.

Attend and provide pertinent updates during daily NCIS MTAC Synchronization Meetings to ensure all members and agencies within the MTAC are aware of USMC interests and to obtain threat information with the potential to impact Marine Corps interests from other agencies. The Contractor must submit meeting minutes in accordance with Section 4.0.

Provide recommendations to respond to RFI’s from the Marine Corps protection community including law enforcement, antiterrorism, and intelligence personnel as well as federal, state, and local intelligence and law enforcement agencies.

Attend regional meetings and threat working groups of law enforcement and intelligence personnel in order to share and receive information on criminal, terrorist, and foreign intelligence threats, patterns, new methodologies, and developing tools.

Provide recommendations to develop executive threat reports for PS staff when significant threats and trends emerge.

Provide recommendations to streamline processes related to threat information collection, reporting, analysis, and dissemination within the Marine Corps to include execution and implementation efforts and long-range plans for information sharing.

C. Suspicious Activity Reporting (SAR) Tracking and Analysis

The Marine Corps Suspicious Activity Reporting process consists of four (4) stages: Collection; Reporting;

Analysis; and Dissemination of Threat Information. The collection of Suspicious Activity Reports (SAR) relies primarily on the use of the Marine Corps’ Eagle Eyes (EE) Suspicious Activity Reporting Program (www.usmceagleeyes.org) to educate non-security personnel and community members on identifying and reporting suspicious activity (SA).

Utilize EE to analyze SAR in CONUS. This tracking tool allows the Contractor MTAC Liaison Officer

(LNO) analysts to record suspicious activity reporting from multiple sources and also displays that data geospatially for analysis.

Develop and provide all Marine Corps SARs to the NCIS MTAC Watch. The Contractor must ensure

Marine Corps SAR is sent to the appropriate NCIS Field Office.

Integrate information from federal, state, and local law enforcement agencies; other service criminal investigative organizations; and Marine Corps SARs to form a comprehensive suspicious incident/threat picture for Marine Corps protection members.

Present analyses and statistics in various internal and external forums and brief PS leadership and installation protection members (LE and AT) on pertinent threat intelligence.

Analyze statistical data resources to assist in proactive investigations, preventative enforcement and education, identification of patterns and trends, and identification of known and repeat offenders.

Research, compile, analyze, and interpret statistical data from an internal SAR database in order to identify strategic SAR patterns and trends. The Contractor must analyze long-term SAR trends using probability studies and complex statistical analyses such as random samplings, correlation, and regression analysis.

Produce and disseminate quarterly and annual SAR Summaries for PS and installation protection staffs.

D. Crisis Support

The Contractor must assist NCIS MTAC and the HQMC Threat Fusion Cell analysts with making contact with active duty Marines and support personnel abroad during crises and increased threat situations. The Contractor must provide NCIS with the contact information and location for deployed Marines and embassy personnel.

E. Liaison

The intent of this task is to develop and strengthen partnerships between NCIS, USMC Insider Threat, and the USMC Threat Fusion Cell. The Contractor must:

Attend the Senior Analyst Working Group and other relevant working groups/meetings in the Russell-

Knox building at MCB Quantico, Virginia.

Develop, as requested, weekly USMC force disposition handouts and distribute them to the NCIS MTAC geographic division analysts and MTAC Watch Officer. The intent of these products is to improve MTAC identification of threat indications and warnings that may impact Marine Corps interests.

Attend Threat Working Groups, Mission Assurance Working Groups and insider threat Working Groups as required/directed.

Share pertinent threat information with USMC Threat Information Managers.

3.2 Task 2 - Provide Surveillance Detection Capability Support

Evaluate TrapWire data to ensure quality assurance and policy compliance.

Conduct account maintenance on the Marine Corps Surveillance Detection and Suspicious Activity

Reporting System. The Contractor must validate new account requests and delete unused accounts (longer than 90 days).

Teach the TrapWire Operator Course (TOC) and Intelligence Integration Course to law enforcement and mission assurance personnel at all Marine Corps bases and revise the course criteria when current policies and procedures are updated.

Develop, update/maintain, and implement a Surveillance Detection Training Course (SDC) that will be used at all Marine Corps bases.

Program Guide – The Contractor must develop a detailed Program Guide that summarizes the requirements under this task to include analysis summaries, reports, plans of actions and milestones,

3.3 Task 3 – Provide Antiterrorism Training Support

The current Antiterrorism Officer (ATO) Level II course is a 5-day, 40-hour evolution that was revised by the Mobile Training Team (MTT) instructors to focus on the Mission Assurance Strategy the Marine Corps mandates along with other applicable directives (see Exhibit B). The intent of ATO Level II is to provide a broad knowledge of ATO responsibilities whether assigned to an installation, reserve center, recruiting center, or OPFOR unit.

Provide recommendations to refine and improve the following courses:

o ATO Level II o Marine Corps Antiterrorism Level III Commanders Course and related spouses training o Emergency Operations Center training o Installation Commanders Course o Marine Corps Antiterrorism Level IV Executive Level Course

Provide technical support to develop Antiterrorism Course modules for the Marine Corps Military Police Officer course and ATO LV II. Course modules must meet the Systems Approach to Training (SAT) standard set forth by Training and Education Command.

Provide technical support for the contractor instructors of the ATO Level II Course MTT. Contractor support shall include uploading course materials to Government-owned and approved external hard drives that are provided to students. The contractor instructors must teach the ATO Level II Course in accordance with the AT Terminal and Enabling Learning Objectives and comply with the directives in Exhibit B.

Provide 20 ATO Level II Courses of instructions annually. Training shall be conducted in accordance with Section 6.0 and in coordination with the Contractor Officer’s Representative (COR). The anticipated frequency of training events is two (2) courses in a two-week period. Student evaluations will be posted to the AT share portal for review by the PM and COR.

Provide technical support to facilitate course scheduling and student enrollment. The Contractor must ensure that course schedules, registration pages, and updates are published to the AT SharePoint Portal.

NOTE: Prospective students must have an eHQMC account (access to HQMC domain) prior to access being granted to the AT SharePoint Portal.

Annually support the AT government lead in conducting a Control Board to revise and update the ATO

Level II, II and IV Courses IAW the DoD and MCO AT/MA policy references, current MAAT benchmarks, and student feedback.

Program Guide – The Contractor must develop a detailed Program Guide that summarizes the requirements under this task to include analysis summaries, reports, plans of actions and milestones, Provide instructions for ATO’s to access the following:

o AT information relevant to their respective MA programs such as announcements/messages, training videos, community contact information, and discussion areas o Training travel requirements o Eagle Eyes Suite o C4I Suite

3.4 Task 4 Provide Analytical Gap Analysis Support

Provide analytical support to identify protection related gaps for the Protection Advocate. Contractor support shall include protection related data sets and conducting studies to advocate the annual gap list.

Protection Program Reports – The Contractor must conduct studies and develop reports for the government to support strategic level initiatives to reduce risk to protection programs. Studies shall include Doctrine, Organization, Training, Material, Leadership and Education, Personnel, Facilities and Policy (DOTMLPF) requirements and provide strategic recommendations and methodologies to support emergent requirements.

Review policies, publications, and doctrine and provide recommendations to support programmatic actions to meet current and emergent requirements.

Provide recommendations to develop strategic level mission focus statements to aid commanders at all levels in understanding critical mission components.

Provide support to plan, execute, and coordinate Senior Leader Events. The Contractor must develop After Action Reports (AAR) to summarize each event in accordance with Section 4.0.

Program Guide – The Contractor must develop a detailed Program Guide that summarizes the requirements under this task to include analysis summaries, reports, plans of actions and milestones, 4.0) Deliverables

4.1 Deliverables Table:

Deliverable PWS Ref. Due Date / Frequency RFI Responses and Recommendations 3.1A As Required Threat Assessments 3.1A As Required Executive Threat Reports 3.1B As Required Suspicious Activity Reports 3.1C As Required

Quarterly SAR Summaries 3.1C Quarterly & Annually within 10 days of the end of each Qtr and Yr.

Force Disposition Products 3.1E Weekly and Monthly Surveillance Detection Training Course 3.2 As required Training Recommendations 3.3 As Required ATO Level II Courses – Twenty (20) 3.3 See 3.3 Protection Program Reports 3.4 As Required After Action Report (AAR) 3.4 Within 14 days of event ending Meeting Minutes All Tasks Within five (5) days after meetings Program Guides All Tasks Every six (6) months

4.2 Inspection and Acceptance

All Deliverables under this contract will be provided to the COR, unless otherwise specified. The COR will be responsible for inspecting and accepting all reports/deliverables under this contract. All deliverables will be inspected for content, completeness, accuracy, and conformance to contract requirements by the COR.

If the Government finds that a draft or final deliverable contains spelling errors, grammatical errors, or improper format, or otherwise does not conform to the requirements stated within this TO, the document may be immediately rejected without further review and returned to the Contractor for correction and resubmission.

Deliverables will be accepted when all discrepancies, errors, or other deficiencies identified in writing by the Government have been corrected. If the draft deliverable is adequate, the Government may accept the draft and provide comments for incorporation into the final version. All of the Government's comments on deliverables must either be incorporated in the succeeding version of the deliverable, or the Contractor must demonstrate to the Government's satisfaction why such comments should not be incorporated.

The COR will provide written notification of acceptance or rejection of all final deliverables within 10 workdays (unless specified otherwise). All notifications of rejection will be accompanied with an explanation of the specific deficiencies causing the rejection. Deficiencies will be corrected, by the Contractor, within 10 workdays of the rejection notice. If the deficiencies cannot be corrected within 10 workdays, the Contractor must immediately notify the COR of the reason for the delay and provide a proposed corrective action plan within 10 workdays.

4.3 Deliverables Format

The Contractor must deliver all electronic versions of deliverables by email and removable electronic media, unless otherwise specified. The following are the required electronic formats, whose versions must be compatible with the latest, commonly available version on the market: Microsoft Word (*.docx); Excel (*.xlsx);

and PowerPoint (*.ppt).

Moreover, the Contractor must ensure that the Marine Corps must have unrestricted access and use of all deliverables upon delivery. Therefore, the Contractor must provide all deliverables in a version, format, and media used/useable and modifiable by the Marine Corps.

4.4 The Contractor must notify the COR in writing and communicate any issues with deliverable due dates.

5.0) Key Personnel Requirements

The following positions have been identified as Key Personnel. The Contractor must ensure these positions are filled throughout the performance of the contract. The Contractor must specify at least one (1) person per each labor category below. All personnel assigned to this contract under a specific key personnel labor category must meet the specific minimum requirements of that category. Personnel should have specialized experience in the private or public sector developing and implementing Mission Assurance, Antiterrorism and Critical Infrastructure Protection polies and coordinating the full range of Mission Assurance program requirements.

5.1 Intelligence Analyst

The Intelligence Analyst must coordinate with NCIS MTAC, Marines Corps Insider Threat Program (MCInTP) and HQMC Marines Corps Threat Fusion Cell in order to receive, analyze, and share threat information, assessments, and updates via the MTAC. The MTAC Intelligence Analyst must disseminate daily threat information to the USMC enterprise, including specific threat warnings.

A. Minimum Experience:

- Minimum 15 years of experience in military intelligence

- Minimum 10 years of experience in mission assurance

- Minimum five (5) years’ experience executing threat and hazard assessments at the Service

Headquarters and experience developing analytic methodologies and assessment program guides.

- Minimum five (5) of experience in educational instruction (resident or non-resident)

- Possess a strong analytical background

- Excellent written and verbal skills with ability to deliver briefings to large professional groups

- Ability to successfully plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness and relevance to mission.

- Ability to work independently under tight deadlines.

- Knowledge of current domestic and international threats to U.S. national security interests.

- Knowledge and use of intelligence community IT programs, systems and applications.

- Knowledge of mission assurance programs and experience working in an environment that encompassed analysis of both threats and hazards (natural and man-made)

B. Minimum Requirements:

TOP SECRET security clearance, SCI eligible

5.2 Suspicious Activity Reporting (SAR) Analyst

The SAR Analyst must coordinate with the MTAC Intelligence Analyst and the HQMC Marines Corps Threat Fusion Cell in order to receive, analyze, and share threat information, assessments, and updates. The SAR Analyst must disseminate daily, weekly, monthly, quarterly and annual SAR information to the USMC enterprise and liaise with the Marine Corps Threat information Hub.

A. Minimum Experience:

- Minimum 10 years of experience in military intelligence

- Minimum five (5) of experience in mission assurance

- Minimum three (3) years’ experience executing threat and hazard assessments at the Service

Headquarters and experience developing analytic methodologies and assessment program guides.

- Minimum five (5) of experience in educational instruction (resident or non-resident)

- Possess a strong analytical background

- Excellent written and verbal skills with ability to deliver briefings to large professional groups

- Ability to successfully plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness and relevance to mission.

- Ability to work independently under tight deadlines.

- Knowledge of current domestic and international threats to U.S. national security interests.

- Knowledge and use of intelligence community IT programs, systems and applications.

- Knowledge of mission assurance programs and experience working in an environment that encompassed analysis of both threats and hazards (natural and man-made)[provide experience

5.3 Threat Information Analyst

The Threat Information Analyst will coordinate with the MTAC Intelligence Analyst and SAR Analyst in order to receive, analyze, and share threat information, assessments, and updates via multiple sources. The Threat Information Analyst must disseminate daily, weekly, monthly, quarterly and annual threat information to the USMC enterprise.

A. Minimum Experience:

- Minimum 10 years of experience in military intelligence

- Minimum five (5) of experience in Insider Threat Programs

- Minimum five (5) of experience in educational instruction (resident or non-resident)

- Possess a strong analytical background

- Excellent written and verbal skills with ability to deliver briefings to large professional groups

- Ability to successfully plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness and relevance to mission.

- Ability to work independently under tight deadlines.

- Knowledge of current domestic and international threats to U.S. national security interests.

- Knowledge and use of intelligence community IT programs, systems and applications.

- Knowledge of mission assurance programs and experience working in an environment that encompassed analysis of both threats and hazards (natural and man-made)[provide experience

5.4. Lead AT Level II Instructor

A. Minimum Experience:

Minimum 15 years of defense, national security, and/or homeland security experience

Demonstrates experience in leading comprehensive risk assessments at the industry sector and regional level.

Demonstrates experience with the National Infrastructure Protection Plan; industry sector partnership models is highly preferred

Demonstrates experience in providing senior-level infrastructure protection and mission assurance policy, risk analytics, and program management support to USMC, DON and/or USACE, DHS, DOE, OSD-HD, MAD

Minimum 15 years of experience in MA Minimum five (5) years of experience in educational instruction Demonstrates experience with complex analyses and working independently under aggressive deadlines

B. Minimum Requirements:

SECRET security clearance Completed USMC Antiterrorism (ATO) Level II Resident Course Marine Corps Critical Asset Management System (MCCAMS) Training or equivalent Asset and

Risk Management Program Experience

5.4 AT Level II Instructor

A. Minimum Experience:

Minimum 10 years of Antiterrorism experience Minimum 10 years of experience in MA Minimum 10 years of experience executing higher headquarters MA program reviews and installation level MA assessments Minimum five (5) years of experience in educational instruction Demonstrates experience with complex analyses and working independently under aggressive deadlines

B. Minimum Requirements:

Secret with the ability to attain a TS SCI Clearance.

Completed USMC or Service Level (i.e. Army, Navy, Air Force) equivalent) Antiterrorism (ATO)

Level II Resident Course Marine Corps Critical Asset Management System (MCCAMS) Training or equivalent Asset and

Risk Management Program Experience

5.6. Strategic Analyst

The contractor must provide an analytical support that will identify protection related gaps to support the Protection Advocate. This support will data mine protection related data sets and conduct strategic level studies to support and advocates annual gap list. The contractor will create products for the government to support strategic level initiatives to reduce risk to protection programs. The studies will consider DOTMLPF requirements, and provide strategic recommendations, methodologies and other related products necessary to support emergent requirements.

A. Minimum Experience:

Minimum four (4) years of DoD service specific strategic analytical experience in doctrine development for protection program related requirements.

Minimum four (4) years of experience developing, creating and reviewing executive level military strategy documents Minimum four (4) years of Service Headquarters experience developing analytic methodologies and Service level program guides and campaign plans.

B. Minimum Requirements:

Secret with the ability to attain a TS SCI Clearance.

Demonstrates experience with complex analyses and working independently under aggressive deadlines

Demonstrates experience briefing executive level audiences Demonstrates experience planning, coordinating, and executing protection-related programs Education:

o Doctorate in a protection-related field with minimum four (4) years experience o Master’s Degree in Criminal Justice with minimum five (5) years experience

5.7. Key Personnel Substitution

A. General Provision

The Contractor agrees to assign to this contract those persons identified as personnel whose resumes were submitted with this proposal and who are necessary to fulfill the requirements of this contract.

B. Guidance on Substitutions

During the first 90 days of the contract performance period, no personnel substitutions by the Contractor will be made unless substitutions are necessitated by an individual's sudden illness, death, or termination of employment. In any of these events, the Contractor must promptly notify the Contracting Officer and provide the information required by Paragraph C below. After the initial 90 day period, all proposed substitutions must be submitted, in writing, at least 10 days in advance of the proposed substitutions to the Contracting Officer and provide information required by Paragraph C below.

C. Request for Substitution

All requests for substitutions must provide a detailed explanation of the circumstances necessitating the proposed substitution, a resume for the proposed substitute, and any other information requested by the Contracting officer. All proposed substitutes must have qualifications equal to or higher than the qualifications stated in the PWS and the personnel being substituted. The Contracting Officer or his/her authorized representative will evaluate such requests and promptly notify the Contractor of his/her approval or disapproval thereof.

5.8. Place of Performance

Work performance will take place at the following locations:

At the Contractor’s facility Russell-Knox Building, Quantico VA for the MTAC LNO Marine Corps Base Quantico for Insider threat and threat fusion cell support AT Level II Instructors: At Contractor’s facilities and on all Marine Corps installations where training takes place both CONUS and OCONUS.

Travel: The contractor should expect to make several trips to Marine Corps installations every year (approximately 1-2 contractor employees on each trip). Each trip is estimated to last between six (6) to nine (9) days to the locations listed below. These trips are estimations and are subject to change throughout the contract.

20 trips for AT LVII Courses throughout the year Three (3) trips to regional MCI Commands for TOC, SDC and Master Trainer Course instruction

6.0) Period of Performance

Period of Performance Dates

Base 31 August 2018 – 30 November 2018 Option 1 01 December 2018 – 30 November 2019 Option 2 01 December 2019 – 30 November 2020 Option 3 01 December 2020 – 30 November 2021 Option 4 01 December 2021 – 30 November 2022

7.0) Security Requirements

7.1 DD254

Security requirements applicable to this contract are described in the Department of Defense Contract Security Classification Specification DD254 (Attachment 1). The Contractor will comply with the following:

A. All Contractors supporting this contract must have a current a SECRET (or TS/SCI if stipulated) security clearance based on a Tier 3 investigation before beginning to support this work.

B. All personnel performing tasks under this contract must be eligible for, and obtain, a DoD Common

Access Card (CAC) and associated DoD PKI certificates for identity verification and encryption of transmitted correspondence.

C. Access to Government buildings will be granted to Contractor staff, when needed. The Contractor is required to wear site-access badges at all times while on-site. Contractor personnel shall follow procedures established at each site for ensuring the security of the building, equipment, materials and personnel who are working in and around facilities.

7.2 Working on a Government Installation

Contractor employees must be clearly identifiable while on Government property by wearing appropriate badges at all times. The Contractor shall provide each employee with an identification badge, which identifies, by photograph, the individual as an employee of the Contractor. These badges shall be worn at all times and presented for examination upon request from the Contracting Officer, COR, Military Police, or any other Government Official with a need to see the badge. The Contractor and its employees shall be subject to all traffic, security, and registration regulations for personnel and vehicles.

All Contractor personnel attending meetings, answering Government telephones, in electronic messages or correspondence related to this contract, working on site, where their Contractor status is not known to third parties, must identify themselves as Contractors, to include wearing ID badges, which identify them as Contractor personnel. Contractor personnel shall also ensure that when logged onto Government equipment that their profile shows them as Contractor personnel. Unless otherwise directed by the COR, all documents produced or revised by Contractors or developed through Contractor participation must be marked as “Contractor generated documents” or otherwise identified in a manner that discloses the contractor’s participation. (Note: No deliverable shall contain any proprietary markings inconsistent with the Government's data rights set forth in this TO.)

Contractor-occupied facilities (on Government installations) such as offices, separate rooms, or cubicles must be clearly identified with Contractor supplied signs, name plates or other identification, showing that these are work areas for Contractor personnel. When required to work in a government facility, the contractors will be provided workstation access in the Russell-Knox Building, Quantico VA.

8.0) Data, Software and Intellectual Property Rights

All reports, materials (including, all training and training-related materials including all evaluations and evaluation criteria, computer software/applications and hardware, source code, interfaces, tools, works, and other related items) data, information, and all electronic/digital files and other items described herein, and any other items, (hereinafter referred to individually or collectively as the Work or Works), and all intellectual property rights in or to such Works, in whatever form, created, generated, produced or provided under, or as a result of, this contract/effort must become the property of the U.S. Government/Marine Corps, i.e., the U.S.

Government/Marine Corps must be the owner of all of these Works and all intellectual property rights in or to these Works. Therefore, any restricted data rights, information, software, materials and/or other items including, the Contractor’s or a Third-Party’s Proprietary data, information, software, materials and/or items must not be used under this contract without the specific written approval by the COR prior to start of any work.

9.0 Use of Works

Except as provided in writing by the COR, no Work (as defined in the Intellectual Property Rights paragraph above) material and/or other item created, generated, produced or provided under, or as a result of, this PWS/Contract/effort must be used by the Contractor or any of its employees/agents, subcontractors and/or representatives, for any purpose other than for the support and performance of this PWS/Contract/effort. Therefore, the Contractor is obligated to protect the Works from unauthorized use and must incorporate this paragraph in each of its contracts/subcontracts associated with the goods and/or services provided under this PWS/Contract/effort.

10.0 Travel Reimbursement

Any travel under this contract must be specifically requested in writing by the Contractor and approved by the COR, prior to incurring any travel expense. The Contractor must submit the written request to the COR five

(5) days in advance. The travel request must include as a minimum, the following:

Contract number Date, time, and place of proposed travel Purpose of travel and how it relates to the contract Contractor’s estimated cost of travel with a breakdown of the estimated costs of transportation, lodging, meals, and incidentals; and Name(s) of individual(s) traveling.

The COR must review and approve/disapprove (as appropriate) all travel requests submitted giving written notice of such approval or disapproval to the Contractor.

Travel Reimbursement. The Contractor must be reimbursed for the reasonable actual cost of transportation, lodging, meals and incidental expenses. However, actual costs must be considered reasonable, allowable, and reimbursable only to the extent that they do not exceed on a daily basis the maximum per diem rate in effect at the time of travel as set forth in the DoD Joint Travel Regulations located at https://secureapp2.hqda.pentagon.mil/perdiem/. Actual cost does not include handling charges, general and administrative cost, overhead, profit or any other indirect cost.

The Contractor must use the allowable Government personnel rates for transportation and lodging.

Reimbursement for airfare must not exceed the lowest customary standard, coach, or equivalent airfare quoted during normal business hours. The Contractor will not be reimbursed for travel expenses unless audited records for transportation contain evidence, such as original receipts, substantiating actual expenses incurred for travel. In no event will reimbursement exceed the published rates of common carriers. Expenses for lodging, meals and incidental expenses must be reimbursed to the Contractor, provided that the overnight stay was documented as necessary.

The contract includes a not-to-exceed funding limitation for travel costs. When the Contractor expects total funding expended for reimbursable travel to reach 85 percent of the total funds available on the travel CLIN, the Contractor must notify the Contracting Officer and the COR and any other Government official identified by the Contracting Officer. The notice must state the estimated amount of additional funds required to continue performance for the period specified in the task order. The Contractor must not exceed or incur costs that exceed the amount of funding stated on the reimbursable travel CLIN. The Government is not obligated to reimburse the Contractor for otherwise reimbursable travel in excess of the funded amount stated on the reimbursable travel CLIN.

The Contractor is not obligated to continue performance of any reimbursable work under this Contract or otherwise incur costs for reimbursable travel in excess of the funded amount stated on the reimbursable travel CLIN unless the Contracting Officer notifies the Contractor in writing that the funded amount stated under the applicable reimbursable travel CLIN has been increased. In the event notification is made orally, such notification must be followed up in writing within two working days.

No notice, communication, or representation from any person other than the Contracting Officer must affect the Government’s obligation to reimburse the Contractor.

Change orders must not be considered an authorization to exceed the funded amount stated under the reimbursable travel CLIN unless they contain a statement expressly increasing the funded amount of that reimbursable CLIN by a sufficient amount to cover the change order.

11.0 Enterprise-wide Contractor Manpower Reporting Application (ECMRA)

The Contractor must report Contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Antiterrorism Support via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs).

The excluded PSCs are:

1. W, Lease/Rental of Equipment;

2. X, Lease/Rental of Facilities;

3. Y, Construction of Structures and Facilities;

4. D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications

Transmission (D304) and Internet (D322) ONLY;

5. S, Utilities ONLY;

6. V, Freight and Shipping ONLY.

The Contractor is required to completely fill in all required data fields using the following web address https://ecmra.mil.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data must be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://www.ecmra.mil.

12.0 List of Attachments

(1) DD-254 Security Classification Form

(2) Performance Requirement Summary (PRS)

(3) Pricing Template

(End of Summary of Changes)