N00019-21-R-0011 DRAFT RFP 20210122.pdf

CODE

(Hour)

PAGE(S)

until local t ime

X

A X B X C X D

EX

X

G F 87 - 103

104 - 121 X H 122 - 128

RATING PAGE OF PAGES

7. ISSUED BY

(Date)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

Previous Edition is Unusable 33-134 STANDARD FORM 33 (REV. 9-97)

Prescribed by GSA FAR (48 CFR) 53.214(c)

1 128

(If other than Item 7)

15A. NAME 16. NAME AND TITLE OF PERSON AUTHORIZED TO

AND

ADDRESS SIGN OFFER (Type or print)

OF

OFFEROR

AMENDMENT NO. DATE

15B. TELEPHONE NO (Include area code) 17. SIGNATURE15C. CHECK IF REMITTANCE ADDRESS

IS DIFFERENT FROM ABOVE - ENTER

SUCH ADDRESS IN SCHEDULE.

18. OFFER DATE

1. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

2. CONTRACT NO.

8. ADDRESS OFFER TO

See Item 7

9. Sealed offers in original and copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if handcarried, in the depository located in

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and conditions contained in this solicitation.

10. FOR INFORMATION

CALL:

A. NAME (NO COLLECT CALLS)

11. TABLE OF CONTENTS

SOLICITATION/ CONTRACT FORM

SUPPLIES OR SERVICES AND PRICES/ COSTS

1 - 2 3 - 18

X I CONTRACT CLAUSES

DESCRIPTION/ SPECS./ WORK STATEMENT X

PACKAGING AND MARKING

19 - 42 43 - 44

J LIST OF ATTACHMENTS

INSPECTION AND ACCEPTANCE

DELIVERIES OR PERFORMANCE

45 - 46

47 - 49 X K REPRESENTATIONS, CERTIFICATIONS AND

OTHER STATEMENTS OF OFFERORS

CONTRACT ADMINISTRATION DATA 50 - 58 X

SPECIAL CONTRACT REQUIREMENTS

OFFER (Must be fully completed by offeror) 59 - 68 X M

L INSTRS., CONDS., AND NOTICES TO OFFERORS

EVALUATION FACTORS FOR AWARD

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

14. ACKNOWLEDGMENT OF AMENDMENTS

(The offeror acknowledges receipt of amendments

AMENDMENT NO. DATE

to the SOLICITATION for offerors and related documents numbered and dated):

FACILITY

12. In compliance with the above, the undersigned agrees, if this offer is accepted within calendar days (60 calendar days unless a different period

SOLICITATION, OFFER AND AWARD

X

(X) SEC. DESCRIPTION (X) SEC. DESCRIPTION PAGE(S)

PART I - THE SCHEDULE

26. NAME OF CONTRACTING OFFICER (Type or print) 27. UNITED STATES OF AMERICA 28. AWARD DATE

EMAIL:TEL: (Signature of Contracting Officer)

CODE CODE

B. TELEPHONE (Include area code) C. E-MAIL ADDRESS

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

10 U.S.C. 2304(c)( ) 41 U.S.C. 253(c)( ) (4 copies unless otherwise specified)

23. SUBMIT INVOICES TO ADDRESS SHOWN IN ITEM

24. ADMINISTERED BY (If other than Item 7) CODE 25. PAYMENT WILL BE MADE BY CODE

PART IV - REPRESENTATIO NS AND INSTRUCTIO NS

PART III - LIST O F DO CUMENTS, EXHIBITS AND O THER ATTACHMENTS

69 - 85

PART II - CO NTRACT CLAUSES

FAX:

TEL:

FAX:

TEL:

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

6. REQUISITION/PURCHASE NO.5. DATE ISSUED4. TYPE OF SOLICITATION

SEALED BID (IFB)

NEGOTIATED (RFP)

[ X ]

3. SOLICITATION NO.

N0001921R0011

DRAFT

Section A - Solicitation/Contract Form

SOLICITATION / CONTRACT FORM

GOVERNMENT POINTS OF CONTACT

Contract Specialist: William Martin E-mail: William.martin@jsf.mil

Procuring Contracting Officer: Sheila Utz E-mail: sheila.utz@jsf.mil

VERBIAGE AND TERMINOLOGY

For clarification purposes, throughout this solicitation, Cost-Plus-Fixed-Fee (CPFF) Term and CPFF Level of Effort are used interchangeably for CPFF Labor CLINs.

PRODUCT SERVICE CODE

The basic contract of this Single-Award Indefinite Delivery/Indefinite Quantity, CPFF, and Cost Reimbursable vehicle will have an associated Product Service Code (PSC) of R499 and the North American Industry Classification System (NAICS) code for this requirement is 541990, All Other Professional, Scientific and Technical Services.

CONTRACT TYPE

The Contract resulting from this solicitation will be a Single-Award Indefinite Delivery/Indefinite Quantity contract utilizing CPFF CLINs for Labor. Cost Reimbursable CLINs will be used for Other Direct Costs (Travel).

Immediately upon award, the Government intends on awarding one (1) initial task order (T/O 0001). If necessary, subsequent task orders under this SA IDIQ will be awarded.

SECURITY CLEARANCE REQUIREMENTS

Top Secret facility clearance is required at time of proposal submission. All personnel are required to have a minimum of a Secret clearance at task order award. Task orders will specify the exact labor categories, security level (secret or top secret) and number of employees required to have the specified clearance levels.

LABOR CATEGORY INFORMATION

This is NOT a Service Contract Labor Standards Contract

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Labor - Term - In support of SOW

CPFF

Services in accordance with Section C, Statement of Work (SOW).

FOB: Destination

PSC CD: R499

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Labor - Term - NWCF

CPFF

Not Separately Priced (NSP) from CLIN 0001.

Labor - Term - RDT&E

CPFF

Not Separately Priced (NSP) from CLIN 0001.

Labor - Term - O&MN

CPFF

Not Separately Priced (NSP) from CLIN 0001.

Labor - Term - Procurement

CPFF

Not Separately Priced (NSP) from CLIN 0001.

Labor - Term - FMS

CPFF

Not Separately Priced (NSP) from CLIN 0001.

ODC - Travel supporting SOW

COST

Other Direct Cost (ODC) - Travel in support of CLIN 0001 in accordance with Section C, Statement of Work (SOW paragraph 6.1 Other Direct Costs (ODCS), 5252.232-9509, Travel Approval and Reimbursement Procedures.

ODC - Travel - NWCF

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0007.

ODC - Travel - RDT&E

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0007.

ODC - Travel - OMN

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0007.

ODC - Travel - Procurement

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0007.

ODC - Travel - FMS

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0007.

ODC - Material Supporting SOW

COST

Other Direct Cost (ODC) in support of CLIN 0001 in accordance with Section C, Statement of Work (SOW paragraph 6.2 Other Direct Costs (ODCS), 5252.242- 9515 (Variation), Restriction of the Direct Charging of Material.

ODC - Material - NWCF

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

ODC - Material - RDT&E

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

ODC - Material - OMN

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

ODC - Material - Procurement

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

ODC - Material - FMS

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

DSSR

COST

Department of State Standardized Regulations (DSSR) Allowances. The NTE amount is for all positions with OCONUS performance locations.

Administrative/Financial/Technical Data

COST

Not Separately Priced (NSP) Other Direct Costs (ODC) from CLIN 0013.

CLAUSES INCORPORATED BY FULL TEXT

5252.211-9503 LEVEL OF EFFORT (COST REIMBURSEMENT) (NAVAIR)(DEC 2012)

(a) The level of effort estimated to be ordered during the term of this contract is [Insert man-hours] man-hours of direct labor including authorized subcontract labor, if any. The contractor shall not, under any circumstances, exceed one hundred (100%) percent of the total level of effort specified in this basic contract. The estimated composition of the total man-hours of direct labor by classification is as follows:

Labor Category Man-hours Total Man-hours

CLIN TOTAL Man-Hours 0001 867,360

(b) FAR Clause 52.232-20, "Limitation of Cost" applies to fully funded orders and FAR Clause 52.232-22, "Limitation of Funds" applies to incrementally funded orders. Nothing in this clause amends the rights or responsibilities of the parties hereto under either of those two clauses. In addition, the notifications required by this clause are separate and distinct from any specified in either FAR Clause 52.232-20 or FAR Clause 52.232-22.

(c) In the event that less than one hundred (100%) percent of the established level of effort of the contract/order is actually expended by the end of the performance period, the Government shall have the option of:

(1) Requiring the Contractor to continue performance, subject to the provisions of the FAR Clause 52.232-20 or 52.232-22, as applicable, until the effort expended equals 100% of the established Level of Effort; or

(2) Effecting a reduction in the fixed fee by the percentage by which the total expended man-hours is less than one hundred (100%) percent of the established Level of Effort.

(d) The contractor agrees that effort performed in fulfillment of level of effort obligations under this contract shall include only verifiable effort in direct support of the work specified. It shall not include efforts such as work performed in transit to or from an employee's usual workplace, work during lunchtime activities, or effort performed at other non-work locations.

(e) In performing the contract/order, the contractor may use any reasonable combination of hours for the labor categories in support of section C of this contract/order.

B-1 Task Orders (TOs) that include CPFF Labor CLINs will be issued under this contract using the following streamlined ordering procedures:

(1) For each proposed order that includes CPFF Labor CLINs, the contracting officer will provide the Contractor a TO and an Independent Government Cost Estimate (IGCE). The IGCE is an estimate of labor hours by labor category utilizing the Hourly Burdened Composite Labor Rates provided in table(s) below, to calculate the total estimated cost for the proposed CLINs and/or TO.

i. The TO fixed fee is calculated using Section G Clause 5252.232-9510 PAYMENT OF FIXED FEE

(NAVAIR).

ii. Ceiling for ODCs will be priced in accordance with the Government estimate.

iii. TOs crossing multiple years will be estimated by the Government using the Hourly Burdened

Composite Labor Rates for each year in proportion to the Period of Performance (PoP) of the TO.

(2) Within three (3) working days of receipt of the TO and IGCE, the Contractor shall respond:

i. If the Contractor agrees that it can perform the TO within the parameters of the IGCE, they will sign and return the DD 1155 to the contracting officer. If the requirement remains valid, a priced order will be issued to the Contractor; or

ii. If the Contractor does not agree with the TO and/or IGCE, the Contractor shall acknowledge its disagreement within three (3) working days. Additionally, a proposal shall be submitted to the contracting officer within five (5) working days of receipt of the TO and IGCE, addressing only the specific areas of difference in labor categories and/or hours in the IGCE. Once the differences are resolved between the contracting officer and the Contractor, and the requirement remains valid, a priced order will be issued to the Contractor.

(3) Rate Tables

(a) Hourly Burdened Composite Labor Rates for Government Site LABOR (Government Site) Hourly Burdened Composite Labor Rates (Regardless of Clearance or if Key)

Contract Labor Category Government Site

Year I Year II Year III Year IV Year V

Administrative Security Support (Junior) - Crystal City, VA (SOC: 33-9099)

Administrative Security Support (Journeyman) - Crystal City, VA (SOC: 33- 9099)

Support - International (Journeyman) - Crystal City, VA (SOC: 33-9099)

Anti-Terrorism Force Protection Specialist

Classification Management Specialist (Journeyman) -

Specialist (Senior) - Crystal

COMSEC Engineer -

VA (SOC: 17-2199)

Functional Lead (Senior) - Crystal City, VA (SOC: 17- 2199)

Counterintelligence Product Specialist - (Journeyman) -

Document Control Specialist (Junior) - Crystal City, VA

(SOC: 33-9099)

Export Integration Specialist (Senior) - Crystal City, VA

Financial Manager ID/IQ

(SOC: 13-1210)

Foreign Disclosure Specialist

(Journeyman) - Pax River, MD (SOC: 33-9099)

(Journeyman) - Edwards

AFB, CA (SOC: 33-9099)

Industrial Security Specialist

Insider Threat Specialist

International Security

Specialist - Functional Lead

Operational Security (OPSEC) Specialist

Personal Security Specialist

(Journeyman) - WPAFB, OH

Personal Security Specialist -

Physical Security Specialist

Program Manager ID/IQ

(SOC: 11-1021)

Program Protection Specialist

Project Manager (Senior) - Crystal City, VA (SOC: 11- 1021)

Project Manager Security

SAP Security Specialist

(Journeyman) - Eglin AFB, FL (SOC: 33-9099)

SAP Security Specialist -

SCI Security Specialist

Security Control Assessor

VA (SOC: 15-1212)

(SOC: 15-1212)

Security Control Assessor -

Crystal City, VA (SOC: 15- 1212)

Security Education and Training (SETA) Specialist

VA (SOC: 11-3031)

Security Escort (Junior) -

Security Generalist (Senior) -

Security Generalist

Security Generalist (Junior) -

Security Operations Analyst

(SOC: 13-1111)

Ship and Site Activation

Technical Writer (Senior) - Crystal City, VA (SOC: 27- 3042)

TEMPEST Engineer

Visitor Control (Junior) -

Visitor Control (Journeyman)

- Crystal City, VA (SOC: 33-

Visitor Control - Functional Lead (Journeyman) - Crystal

(b) Hourly Burdened Composite Labor Rates for Contractor Site LABOR (Contractor Site) Hourly Burdened Composite Labor Rates (Regardless of Clearance or if Key)

Contract Labor Category Contractor Site

Year I Year II Year III Year IV Year V

Administrative Security Support (Junior) - Crystal

Support (Journeyman) -

Support - International

Anti-Terrorism Force Protection Specialist

Crystal City, VA (SOC: 17- 2199)

Counterintelligence Product Specialist - (Journeyman) -

Document Control Specialist

Export Integration Specialist

Financial Manager ID/IQ

(SOC: 13-1210)

(Journeyman) - Pax River, MD (SOC: 33-9099)

(Journeyman) - Edwards

AFB, CA (SOC: 33-9099)

Industrial Security Specialist

Insider Threat Specialist

International Security Specialist - Functional Lead

Operational Security (OPSEC) Specialist

Personal Security Specialist -

Physical Security Specialist

Program Manager ID/IQ

Program Protection Specialist

Project Manager (Senior) - Crystal City, VA (SOC: 11- 1021)

Project Manager Security

(Journeyman) - Eglin AFB, FL (SOC: 33-9099)

SAP Security Specialist -

SCI Security Specialist

(SOC: 15-1212)

Security Control Assessor -

Crystal City, VA (SOC: 15- 1212)

Security Education and Training (SETA) Specialist

VA (SOC: 11-3031)

Security Escort (Junior) -

Security Generalist (Senior) -

Security Generalist

Security Generalist (Junior) -

Security Operations Analyst

(SOC: 13-1111)

Technical Writer (Senior) - Crystal City, VA (SOC: 27- 3042)

TEMPEST Engineer

Visitor Control (Junior) -

Visitor Control (Journeyman)

- Crystal City, VA (SOC: 33-

Visitor Control - Functional Lead (Journeyman) - Crystal

B-2 LABOR FEE

CPFF Labor - Fixed fee will be calculated based on fee per hour and in accordance with 5252.232-9510 Payment of Fixed Fee (NAVAIR)(OCT 2005). The fee per hour is the total fee proposed for all periods divided by the total number of hours for all years (1,355,520). The CPFF Labor fee per hour is $ [To be determined at contract award].

Applicable to CLINs 0001 through 0006.

Section C - Descriptions and Specifications

STATEMENT OF WORK

STATEMENT OF WORK (SOW) for

PROGRAM SECURITY SUPPORT SERVICES

1.0 OVERVIEW

The F-35 Joint Program Office (JPO) is the Department of Defense’s (DoD) focal point for defining affordable next generation strike aircraft weapon systems for the Navy, Air Force, Marines, and our allies. The F-35 is the next generation strike fighter bringing cutting-edge technologies to the battle-space of the future. The F-35s advanced airframe, autonomic logistics, avionics, propulsion systems, stealth, and firepower will ensure that the F-35 is the most affordable, lethal, supportable and survivable aircraft ever to be used by so many warfighters around the world. The JPO SAT supports the program office IPT’s with program management support services, contracting services, and quality assurance in order to provide the best, most efficient contract strategies in support of the JSF vision, mission, goals and objectives.

The F-35 Lightning II Program (also known as the Joint Strike Fighter Program) is a joint, multi-national program and is composed of the United States (U.S.) Air Force (USAF), U.S. Navy (USN), U.S. Marine Corps (USMC), and U.S. allies composed of seven (7) cooperative international partners: the United Kingdom, Italy, Netherlands, Canada, Australia, Denmark, and Norway. The program’s objective is to develop and deploy the F-35 Air System (AS), a three (3) variant family of highly common and affordable 5th Generation strike fighter aircraft that meets the operational needs of the USAF, USN, USMC, and cooperative partner international services. Additional production of the F-35 is made through Foreign Military Sales (FMS). The F-35 Enterprise is defined as, but not limited to: Air Vehicle (AV), Systems (AS), AS Ground Support, Support Equipment (SE) Systems, Depot Maintenance, Business, Flight Test, and Training Systems. The F-35 security team has a mature Program Protection Plan (PPP), robust policies and procedures and established Special Access Program (SAP) facilities throughout the world. However, requirements continue to evolve as the program matures and the F-35 security team is responsible for ensuring that any new security challenges are appropriately identified and safeguarded in accordance with (IAW) DoD regulations and specifications.

2.0 SCOPE

The F-35 Joint Program Office (F-35 JPO) requires program security support services to support its critical mission of developing, deploying and sustaining the next generation strike fighter aircraft. The program security support disciplines consist of Program Management, General Security Support, Information Security Support, Industrial Security Support, Physical Security Support, Personnel Security Support, Counter-Intelligence Support, Special Security Studies, Foreign Disclosure Support, Program Protection Cybersecurity/Security Control Assessment Services and Program Protection Engineering Services. The program security support services encompass the management and control of controlled unclassified information (CUI), collateral/general service (GENSER) information, Special Access Program (SAP) information, North Atlantic Treaty Organization (NATO) information, Critical Nuclear Weapons Design Information (CNWDI) and Sensitive Compartmented Information (SCI). This is an Indefinite Delivery/Indefinite Quantity contract which sets forth the conditions and clauses under which future acquisitions between the parties shall be governed. This contract will be used as a means of providing security services to the F-35 JPO.

3.0 PERFORMANCE REQUIREMENTS

The Contractor shall furnish the necessary personnel, skills, material, and other services as required to perform tasks outlined in this SOW. Paragraphs 3.2 – 3.12 provide examples of security support services that may be requested via a task order at, or after, award of the ID/IQ.

3.1 Provide Program Management Support. The Contractor shall provide program management support under this contract, including project management and financial management. This includes the management and oversight of all activities performed by contractor personnel, including subcontractors, to ensure all F-35 program security support services satisfy the requirements identified in each individual task order that may be issued under this contract.

3.2 Provide General Program Security Support. The contractor shall provide general security support under this contract. This includes performing activities related to general security standard discipline management and support. Unless otherwise specified, contractor should note all tasks may pertain to both US and International Security Support. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.2.1 Provide Administrative Security Support. Contractor shall provide administrative security support tasks as required by each task order. Examples of such support include but are not limited to:

• Maintain recall rosters, organizational charts, and contact cards for Security personnel

• Maintain, update, and coordinate Security Operations Manuals (SOM), Standard Operating Procedures

(SOP), Access Management Control Plan (AMCP), Project Security Instruction (PSI), Continuity Of Operations Plan (COOP), Occupant Emergency Plan (OEP), Emergency Action Plan (EAP) and other security-generated publications

• Schedule and support security meetings

• Coordinate with Human Resources (HR) regarding security onboarding/off-boarding

• Coordinate onboarding of security new hires

• Coordinate and prepare Security Program Management Reviews (PMRs)

• Coordinate Security Conference for International Security

• Maintain and update security mail groups and calendar

• Issue courier cards and provide appropriate courier training

• Monitor, control, and service post office box

• Distribute mail and packages to local security offices

• Distribute policy and guidance to CONUS and OCONUS locations as required

• Maintain a central security document and file archive

• Maintain, update, and coordinate F-35 security database systems (e.g. Joint Access Database Environment (JADE), Defense Information System for Security (DISS), local databases, SharePoint, central archive, etc.)

• Provide centralized security customer service support

• Provide technical writing support in compliance with appropriate guidance

• Assist in development, coordination, and distribution of security policies and procedures

3.2.2 Provide Security Incident Inquiry Support. Contractor shall provide tasks as required by each task order.

Examples of such support include but are not limited to:

• Conduct and assist with security incident inquiries

• Track and provide trend analysis on reported security incidents

• Provide incident matrix to the Director of Security (DS) and Government SAP Security Officer

(GSSO)

• Recommend classification determinations prior to inquiry initiation

• Monitor inquiry progress, provide status updates to the GSSO, and draft appropriate reports before, during, and after inquiry

• Participate in containment and clean-up actions and document results

• Maintain the Security Incident Guide in coordination with the Information System Security Manager

(ISSM)

• Ensure personnel are notified of the initial incident in accordance with (IAW) policy

3.2.3 Provide Security Education and Training Awareness (SETA) Support. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Collaborate with Subject Matter Experts (SMEs) and develop specific security training and indoctrination briefings

• Serve as primary point of contact for all F-35 JPO security education and training products

• Develop or coordinate the acquisition of security awareness and training products

• Develop and provide security awareness newsletter to the enterprise

• Develop and provide Commanders Call security briefing

• Coordinate with HR regarding security briefing at new hire orientation; conduct security briefing at new hire orientation; ensure new hire orientation security briefing slide deck is accurate

• Develop security education training plans, maintain, track, and conduct comprehensive security training

• Track and provide data on training status for F-35 JPO personnel

• Assist international country security managers with developing country-specific security training

3.2.4 Provide CONUS and OCONUS International Security Support. Contractor shall provide tasks as

• Provide multi-disciplined security guidance and mentorship to F-35 Partner and Foreign Military Sales (FMS) security professionals

• Provide continuous evaluation of F-35 Partner and FMS security posture and provide written updates to International Security Manager, Program Security Officer, and assigned International Security Specialist

• Assist F-35 Partner and FMS security professionals in developing country-unique security documents to ensure protection of F-35 assets at the appropriate level

• Develop and provide training to F-35 Partner and FMS security professionals to facilitate building, implementing and managing a comprehensive F-35 security program

• Assist F-35 Partner and FMS security professionals in ensuring security policies and procedures are in compliance with Special Access Program (SAP), Classified Military Information (CMI), and Controlled Unclassified Information (CUI) in accordance with U.S Government security requirements

• Provide general, physical, and cybersecurity support and training to F-35 Partner and FMS security professionals

• Provide security support at air shows, fighter competitions and other collaborative events

• Provide country map data

3.2.5 Provide Operational Security (OPSEC) Support. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Assist in development of OPSEC measures for specific programs

• Aid in the development, management and execution of the F-35 JPO OPSEC program

• Perform risk management assessments and provide analysis

3.2.6 Provide Program Protection Support. Contractor shall provide tasks as required by each task order.

• Perform risk management and risk analysis

• Develop, manage and execute Program Protection Plans (PPP)

• Conduct PPP reviews as required by policy and integrate identified changes

• Identify Critical Program Information (CPI), mission critical functions, and mission critical components

• Develop enhanced protection measures

• Assist the Government in establishing and chairing an Observables, Identification, and Containment

(OI&C) Working Group

• Coordinate and facilitate the review of the F-35 CPIs

3.2.7 Provide Special Access Program (SAP) Security Support. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Manage International Partner/FMS conference space

• Track Partner/FMS required inventories, self-inspections, training, and other applicable documents

• Maintain and update Cooperative Program Personnel (CPP) SOP

• Maintain and update Technology Assessment/Control Plan (TA/CP)

• Coordinate with geographically separated GSSOs and international country security managers to facilitate and record SAP security requirements

• Generate new international security documents as additional FMS participants join the program

• Conduct formal and/or informal inspections and/or assessments at international and U.S. SAP facilities

• Author detailed trip reports and maintain records of communications with GSSOs and foreign partners and FMS participants

• Support Government Security Managers at Executive Committee (EXCOM) and Tri-Service briefings

• Conduct collateral and SAP security self-inspections and staff assistance visits

• Track corrective actions

• Provide support to F-35 JPO by arming and disarming secure rooms as needed

3.2.8 Provide Sensitive Compartmented Information (SCI) Security Support. Contractor shall provide tasks

• Maintain and update SCI SOP

• Coordinate with international country security managers to facilitate meeting and recording security requirements

• Conduct formal and/or informal inspections at SCI Facilities (SCIFs)

• Conduct SCI security self-inspections and staff assistance visits

• Provide support to F-35 JPO by arming and disarming secure rooms as needed

3.2.9 Provide Visitor Control Support. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Transmit SAP, SCI, and collateral visit certifications for F-35 JPO personnel

• Issue, maintain, distribute, track, and inventory F-35 JPO visitor badges

• Process incoming and outgoing visit requests

• Create and process country clearance requests through the approved visit system

• Monitor and control incoming and outgoing U.S. Government property

• Collect, maintain, and close out foreign travel reports

3.2.10 Provide Analytical Security Support. Contractor shall provide tasks as required by each task order.

• Assess and optimize security processes, including automation, for a rapidly growing program to ensure consistent security support, and produce products resulting from this analysis

• Identify program requirements through review and analysis of user needs and produce products resulting from this analysis

• Identify emerging threats and produce products resulting from this analysis

• Conduct special security studies and produce products resulting from these studies

3.2.11 Provide Security Escort Support. Contractor shall provide tasks as required by each task order. Examples

• Escort and monitor the facilities engineering, vendor, and maintenance personnel working within F-35 JPO occupied spaces

• Provide escorts for facility-related projects

3.3 Provide Information Security Support. The contractor shall provide Information Security support under this contract. This includes the management and oversight of all activities performed to support the protection of printed, electronic, or any other form of sensitive information from unauthorized access, use, misuse, disclosure, destruction, modification, or disruption. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.3.1 Provide Classification Management Support. Contractor shall provide tasks as required by each task

• Maintain collateral and SAP Security Classification Guides (SCG)

• Coordinate with program Subject Matter Experts (SMEs) to develop SCGs

• Develop, manage and execute the classification challenge process

• Coordinate SCG reviews and changes, update SCGs as required, and distribute as appropriate

• Conduct document classification reviews as required

• Assist with classification determinations as needed

• Review Public Release requests in coordination with F-35 JPO Public Affairs team

3.3.2 Provide Document Control Support. Contractor shall provide tasks as required by each task order.

• Perform all document control duties associated with receipt, transmission, inventory, reproduction, disposition, and management of classified information

• Administer receipt and dispatch system for all collateral and SAP information, and SCI as required

• Prepare classified packages for transmission through mail, secure fax, or courier

• Maintain document tracking log for Partner/FMS specific AMCP, PSI, SOP, Memoranda of

Understanding (MOU), and other applicable documents

3.4 Provide Industrial Security Support. The contractor shall provide Industrial Security support under this contract. This includes the management and oversight of all activities performed to support the protection of classified information developed by or entrusted to U.S industry operating under the National Industrial Security Program (NISP). The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.4.1 Provide Ship and Site Activation Team Security Support. Contractor shall provide tasks as required by

• Brief and coordinate SAP and collateral security requirements for USAF, USN, USMC, and international bed down sites

• Communicate secure facility construction and accreditation technical security standards

• Maintain and monitor security activities at bed down locations until facilities receive accreditation

• Identify security clearance and SAP access requirements at bed down locations

• Assist the services in defining facility and infrastructure requirement to meet F-35 bed down for all sites

• Coordinate and participate in the development of CONUS and OCONUS Facilities Requirements

Documents (FRDs) and document results

3.4.2 Provide Security Role in Supply Chain Risk Management (SCRM). Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to

• Assist F-35 JPO Security with the development and execution of a SCRM program

• Assist JPO Security with preventing the introduction of parts with malicious intent by a foreign adversary to disrupt, disable, or render ineffective F-35 systems

• Conduct Critical Program Information (CPI) Assessments and Criticality Analyses

• Evaluate and track SCRM Program and Implementation Plans

• Assist in coordinating with external agencies

3.4.3 Assist with DoD Industrial Security Requirements Compliance. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to

• Develop and maintain a database of cleared defense contractors supporting the F-35 JPO and their compliance status

• Assist in coordination with SMEs at Government agencies

3.4.4 Provide DD-254 Management Support. Contractor shall provide tasks as required by each task order.

• Draft DD-254s for prime contractors and update/revise existing DD-254s as changes occur; review sub-contract DD-254s to ensure accuracy

• Maintain appropriate supporting documentation for each DD-254 on file

• Validate facility clearance and storage level

• Validate DD-254 on file for Program Access Requests to support PERSEC inquiries

• Prepare and coordinate National Interest Determinations (NIDs)

• Provide DD-254 guidance and contracting strategies

• Update and maintain the DD-254 database of record

3.5 Provide Physical Security Support. The contractor shall provide Physical Security support under this contract. This includes the management and oversight of activities performed to support the active and passive measures, designed to prevent the unauthorized access to personnel, equipment, materials, and information; and to safeguard them against espionage, sabotage, terrorism, damage, and criminal activity. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.5.1 Provide Guidance and Documentation to Facilitate DoD/Intelligence Community Directive (ICD) Compliance. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Maintain and update Occupant Emergency Plan, Criticality Assessment; and Program Evacuation Plan

• Update security portion of Continuity of Operations Plan

3.5.2 Provide Support for Secure Area Accreditation (Pre-Construction to De-accreditation). Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Maintain and track F-35 JPO sponsored facility accreditation letters

• Complete and maintain Fixed Facility Checklists and assist with annual facility inspections

• Coordinate with appropriate offices for construction or alterations

• Participate in pre-construction meetings and document results

• Document and maintain construction progress and activities

3.5.3 Provide Anti-Terrorism Force Protection (ATFP). Contractor shall provide tasks as required by each task

• Coordinate and maintain program ATFP Plan

• Manage, track, and provide required ATFP training for F-35 JPO personnel

3.5.4 Provide Alarm Response Support. Contractor shall provide tasks as required by each task order. Examples

• Provide alarm response support and situation-dictated response action

• Schedule alarm maintenance

• Coordinate semi-annual alarm testing

3.5.5 Provide Facility Access Control. Contractor shall provide tasks as required by each task order. Examples

• Manage facility key issuance, inventory, and maintenance processes

• Manage and support security container availability and requirements

• Monitor, administer, and maintain program badge control system

• Change, issue, and manage combinations on doors and security containers

3.6 Provide Personnel Security (PERSEC) Support. The contractor shall provide PERSEC support under this contract. This includes the management and oversight of activities performed to support the established standards, criteria, and guidelines upon which personnel security eligibility determinations are based. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.6.1 Provide Program Access Request (PAR) Management Support. Contractor shall provide tasks as

• Electronically create, track, update, and provide trend analysis for PARs

• Perform Security Officer review of PARs and prioritize PARs when necessary

• Schedule and perform SAP indoctrination briefings with approved personnel

• Maintain Personnel files IAW current policy

• Electronically process, track, update, and provide trend analysis for Partner/FMS PARs

• Coordinate and maintain accuracy of program billet rosters

3.6.2 Provide Personnel Clearance (PCL) Management Support. Contractor shall provide tasks as required by

• Execute reports to identify personnel requiring Periodic Reinvestigation (PR)

• Coordinate PR initiation with employee’s Service PERSEC POC and provide guidance

• Coordinate and manage the Continuous Evaluation (CE) program

• Facilitate adverse/required reporting actions as required

3.7 Provide Counter-Intelligence (CI) Product Support. The contractor shall provide Counter-Intelligence Product support under this contract. This includes the management and oversight of all activities performed to support product development and distribution designed to ensure personnel awareness of their responsibilities to report unusual activities or behaviors and how to identify various threats from foreign intelligence entities, other illicit collectors of U.S. defense information, and/or terrorists. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.7.1 Provide Adversarial Program Threats Support. Contractor shall provide tasks as required by each task

• Collaborate with agencies such as Air Force Office of Special Investigations (AFOSI) and Naval Criminal Investigative Service (NCIS), and Counterintelligence Product Manager to develop and provide threat briefings to program personnel

• Analyze Intelligence/CI data and develop security products to support all IPTs

3.7.2 Provide Insider Threat Support. Contractor shall provide tasks as required by each task order. Examples

• Aide in the development, management, and execution of the Insider Threat Program supporting F-35

JPO

• Prepare documentation as required in support of Insider Threat Program

• Participate in and document results of Insider Threat working groups

3.7.3 Conduct Foreign Travel Briefings. Contractor shall provide tasks as required by each task order. Examples

• Develop and maintain foreign threat briefings for each country

3.7.4 Provide Counterintelligence (CI) Support to the Development of PPP. Contractor shall provide tasks as

• Draft CI portions of PPPs and staff for coordination with stakeholders

3.7.5 Provide CI Guidance and Recommendations to Government Entities. Contractor shall provide tasks as

• Provide guidance and recommendations on Intelligence and CI Assessments

• Assist with F-35 CI/Intelligence Security Working Groups

3.8 Provide Foreign Disclosure Support. The contractor shall provide Foreign Disclosure Support in reviewing and documenting the release of information to international partners and customers. The contractor shall provide technical and analytical support for the Foreign Disclosure Office (FDO) in developing, updating, administering and evaluating F-35 policies and procedures directly affecting the release of highly technical and sensitive information to F-35 foreign partners and participants. The contractor shall assist the Government in interpreting disclosure policy and ensuring the appropriate Delegation of Disclosure Letter (DDL), Technical Assistance Agreement (TAA), Information Exchange Guide (IEG), National Disclosure Policy and/or export license are upheld. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.8.1 Provide Foreign Disclosure Analysis Support. Contractor shall provide tasks as required by each task

• Assist with the development of DDLs and Information Exchange Guides (IEGs).

• Assist with amendments, as needed, to country-specific Project Security Instructions (PSI), Technology

Assessment/Control Plans (TA/CPs) and Cooperative Program Personnel Standard Operating Procedures (CPP SOPs).

• Coordinate daily review of unclassified and classified material proposed for foreign release and provide recommendations to the Government FDOs.

3.8.2 Provide Foreign Disclosure Auditing Support. Contractor shall provide tasks as required by each task

• Monitor unclassified Government systems (i.e., unclassified JSF Virtual Enterprise (JVE)) to ensure program personnel are correctly performing unclassified releases of information to foreign nationals and marking the released information in accordance with program policy.

• Auditing ten (10) percent of the documents created each month. Randomly select documents from the JSF electronic document library; Reviewing the documents to ensure they are marked appropriately and do not contain any non-releasable information in accordance with current DDLs.

3.8.3 Provide Foreign Disclosure Visit Support. Contractor shall provide tasks as required by each task order.

• Provide Foreign Visit System (FVS) on-site support.

• Monitor international visits through the Government’s Foreign Visit System, validating JPO Partner nationals and FMS participant foreign national travel within the U.S to JPO sites and JPO contractor facilities.

• Support/review requests for foreign visits via the via the SPAN Foreign Visit System.

3.8.4 Provide Foreign Disclosure Training Support. Contractor shall provide tasks as required by each task

• Assist the security education and training specialist to research, prepare, and present material for foreign disclosure security education and training.

• Develop new and/or update current foreign disclosure training products.

• Deliver annual refresher training to program personnel on the release of unclassified material to foreign nationals.

• Develop training aids when DDLs change to ensure all personnel are informed of any new disclosure guidance.

3.9 Provide Export Integration Support. The contractor shall assist the Government in facilitating export-related policy activities and support the F-35 Export Compliance Office including preparation and coordination of presentations for committee review, interacting with applicable interagency partners such as Department of State for export licenses, and interpreting/maintaining export-related documentation.

3.10 Provide Program Protection Cybersecurity/Security Control Assessment Services. The contractor shall provide Cybersecurity Services throughout the cybersecurity lifecycle process for Information Systems (IS), Platform Information Technology (PIT), Information Technology (IT) Services, and IT products that are or will be assessed or assessed and authorized by Authorizing Officials (AOs) within the F-35 Enterprise. The contractor shall perform all six steps RMF/JSIG processes, with a focus on Steps 4 and 5, Assessing Security Controls and Authorizing the System.

The contractor shall perform research of known threats and threat vectors on variety of classified systems.

3.11 Provide Program Protection Cybersecurity (CS) Specialist Services. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.11.1 Provide Cybersecurity Compliance Assessments. Contractor shall provide tasks as required by each task

• Perform cybersecurity compliance assessments in alignment with Security with Staff Assistance Visits (SAVs) and Operational Assessment (OA) both CONUS and OCONUS. Provide written accounts of OA or SAV cybersecurity compliance assessments to event lead(s), and maintain knowledge and share site/files for lessons learned. Maintain and update Cybersecurity SAV and OA Checklists, database entries and required files. Schedule OA/SAV meetings and provide updates to Government entities.

3.11.2 Provide CS Specialist Services to F-35 Partners and FMS Security Professionals. Contractor shall provide tasks as required by each task order. Examples of such support include but are not limited to:

• Provide Cybersecurity Specialist support to perform on-site cybersecurity compliance and oversight for

Partner and/or FMS sites. Provide a full range of Information Assurance/Cybersecurity services which include but are not limited to: planning, developing, implementing, and maintaining programs, policies, and procedures to protect the integrity and confidentiality of systems, networks, and data; monitor the compliance of Partner/FMS participants with Authority to Operate (ATO) requirements for authorized F-35 information systems through on-site visits and email communication; develop, administer, and conduct cybersecurity training; train Partner/FMS personnel in cyber positions on cybersecurity best practices, procedures, industry standards, processes, and protocols; and participate in periodic meetings with Government entities to facilitate compliance activities being met, properly captured and reported.

3.12 Provide Program Protection Engineering Services. The following subtasks are not assigned to any one specific security business area and are intended to provide maximum flexibility and support to the enterprise:

3.12.1 Provide Anti-Tamper Security Support. Contractor shall provide tasks as required by each task order.

• Provide insight into system requirements, design trades, architecture evolution, risk management, hardware and platform-software development, reliability, maintainability, safety certification, security certification, special programs, weight, power, cooling and volume to ensure a balanced Air System Design to facilitate meeting Anti Tamper (AT) requirements. Document architecture and design and coordinate reviews with Government entities.

3.12.2 Provide COMSEC Engineering Services. Contractor shall provide tasks as required by each task order.

• Perform COMSEC engineering for the F-35 systems cryptographic and key management architecture.

Support certification and accreditation activities for operational systems including performing full Risk Management Framework (RMF) efforts. Assist with National Security Agency (NSA) approval of cryptographic changes to the baseline F-35 End Cryptographic Units (ECUs) as well as new developments of F-35 ECUs, includes validating the usage of F-35 keying material to the operational controlling authorities.

3.12.3 Provide TEMPEST Engineering Services. Contractor shall provide tasks as required by each task order.

• Coordinate and participate in the development of TEMPEST requirements for the F-35 Joint Strike Fighter (JSF) Air System (AS) and secure facilities supporting the Air System. Coordinate with the Air System Contractor, other Government entities, and Certified TEMPEST Technical Authorities (CTTAs) to ensure the F-35 AS is compliant with TEMPEST Regulations.

3.12.4 Provide Cyber Systems Engineering and Technical Assistance (SETA). Contractor shall provide tasks

• Provide systems engineering and technical cyber subject matter expertise to protect the air system and supporting networks and systems (Collateral and SAP/SAR) against sophisticated cyber threats. Provide expert input to the process of cyber requirements decomposition as part of the F-35 JPO Block 4 Continuous Capability Development and Delivery (C2D2) processes. Provide support to the F-35 JPO Cybersecurity Test and Evaluation Phases to include Analysis and Planning, Cyber Table Top Exercises, Developmental Testing, and Operational Testing. Develop and incorporate requirements for special purpose cyber capabilities and coordinate with external partners to identify and integrate approved technologies

4.0 GENERAL INFORMATION

4.1 Period of Performance. The period of performance (PoP) consists of a five (5) year ordering period. .

4.2 Place(s) of Performance. The primary place of performance will be the F-35 JPO located in Arlington, Virginia (VA). Other Government sites, which will be provided in the individual task orders, may include but are not limited to:

• Naval Air Warfare Center/Aircraft Division (NAWC/AD), Patuxent River, MD

• Edwards AFB, CA

• Naval Air Warfare Center/Weapons Division (NAWC/WD) China Lake, CA

• NAWC/WD, Pt. Mugu, CA

• Wright-Patterson AFB, OH

• Eglin AFB, FL

• OCONUS Locations TBD based on requirements

4.2.1 Contractors performing on-site support at the F-35 JPO will be provided access to workspaces, telephones, printers, facsimile machines, copy machines, shredders, computers, and network access including web servers and applicable databases or other applications necessary to carry out assigned tasks unless otherwise stated in the respective task order.

4.3 Hours of Operations. The contractor shall provide the required services and staffing coverage during normal working hours. Core hours are 0900-1500, Monday through Friday (except on the legal holidays specified in paragraph 3.5.3). Some supported Government offices have flexibility to start as early as 0500/0530 and end as late as 1900, Monday through Friday. This contract may include non-standard work hours at the task order level, including weekends and/or holidays. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential.

4.4 Compressed Work…