N0016724Q0004 CSS.docx

N0016724Q0004

This is a combined synopsis/solicitation for commercial items prepared in accordance with Federal Acquisition Regulation (FAR) Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation that Naval Surface Warfare Center Carderock Division (NSWCCD) intends to issue, and is a Request for Quotes (RFQ) for the following Supplies and/or Services.

NSWCCD Code 105 is procuring Security Support Services that include the following: document destruction services, physical security administration support, information security administration support, access control, routine mail services for classified materials, automated mailroom operations, courier services, operation of the Classified Inventory Collection (CIC), and four (4) Code Media Centers on an Alaska Native Corporation (ANC) 8(a) Sole Source Program basis.

The provisions and clauses included and/or incorporated in this solicitation document are those in effect through the Federal Acquisition Circular. This RFQ incorporates all provisions and clauses in effect through Federal Acquisition Circular FAC 2023-05 effective 09/22/2023 located on https://www.acquisition.gov/?q=browsefar and the Defense Federal Acquisition Regulation Supplement (DFARS) DPN 20230929 effective 09/29/2023 located at https://www.acq.osd.mil/dpap/dars/change_notices.html. SEE ATTACHED SOLICITATION FOR CLAUSES AND PROVISIONS. The NAICS code is 561210 and the associated PSC code is R799, and the Small Business Standard is $47M for this procurement: NOTE: A Class Waiver is not applicable to a procurement unless the NAICS code, PSC, and NAICS Code Descriptor currently in effect, match the item(s) being procured. This procurement IS being set-aside to Alaska Native Corporation (ANC) 8(a) Program.

Interested parties may identify their interest to this requirement by submitting a quote and/or capabilities statement no later than 12:00 PM on 26 October 2023. It is anticipated one firm-fixed price purchase order will be issued in response to this RFQ. All responses shall include price(s), FOB point, a point of contact, name and phone number, GSA contract number (if applicable), and business size. Each response must clearly indicate the capability of the quoter to meet all specifications and requirements.

Offers/quotes submitted in response to this solicitation shall not contain nor be subject to the offeror's/vendor's standard commercial terms and conditions. Any offer/quote submitted in response to this solicitation which includes the offeror's/vendor's standard commercial terms and conditions may be considered a material defect and may be rejected as being non-responsive to the solicitation.

Responses to this notice are due on or before 12:00 PM on 26 October 2023, Eastern Daylight Time (EDT) to arnel.a.ngo.civ@us.navy.mil.

Point of Contact for this notice is Arnel Ngo, 757-469-6784, arnel.a.ngo.civ@us.navy.mil.

PERFORMANCE WORK STATEMENT

NAVAL SURFACE WARFARE CENTER, CARDEROCK DIVISION

PERFORMANCE WORK STATEMENT

SECURITY SUPPORT SERVICES

1.0 BACKGROUND

The Naval Surface Warfare Center, Carderock Division (NSWCCD) provides research, development, test and evaluation, engineering, and fleet support for ships and submarines, operating under the direction of the Commander, Naval Sea Systems Command (NAVSEA), and with employees and facilities in various locations.

The Division of Corporate Operations (DCO), Code 10, provides efficient and effective business solutions to facilitate and enable the Naval Surface Warfare Center, Carderock Division in achieving its strategic direction and technical mission while maintaining the public trust at the lowest cost, which includes the areas of Computer technology, information systems, human resources, information security, and physical security operations. As part of its cognizance over Infrastructure Support, Code 10 is responsible for the management of NSWCCD’s security program that includes, classified mail, classified document control, destruction of classified material, security education, training and awareness, physical & information security inspections, and access control.

2.0 PERIOD OF PERFORMANCE, PLACE OF PERFORMANCE AND BUSINESS HOURS

The period of performance for the effort contemplated with this Performance Work Statement (PWS) is one (1) base year with four (4) option years, each 1 year in duration. The primary locations for performance of the contemplated effort are NSWCCD’s West Bethesda and Olney, MD facilities.

2.1 Operating hours are defined as all working weekdays (Mondays through Fridays) from 0730 to 1600 hours. Working weekdays are defined as all weekdays except federal observed holidays as identified on the Office of Personnel Management (OPM) website https://www.opm.gov/policy-data-oversight/pay.../holidays-work-schedules- and-pay. The Government will handle facility closures on a case-by-case basis, in accordance with the instructions and guidance provided by OPM. Available at: https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/.

3.0 SCOPE

The Contractor shall provide Non-Personal Services labor and supervision, as necessary, to perform the tasks detailed in this PWS. The Contractor shall provide the required personnel in order to perform the tasks and produce the deliverables identified in the contract data requirements list (CDRL) contained herein. The services required in this PWS include the following: document destruction services, physical security administration support, information security administration support, access control, routine mail services for classified materials, automated mailroom operations, courier services, operation of the Classified Inventory Collection (CIC), and four (4) Code Media Centers. The Contractor shall provide 11 Full-Time Equivalent (FTEs) to perform these functions.

4.0 APPLICABLE DOCUMENTS

The Contractor will have access to Government computers to perform day-to-day duties. The Contractor shall use and comply with the most current version of the below documents which are available on the NSWCCD intranet.

4.1 29 CFR 1910.136, Standard Foot Protection

4.2 DoDM 5200.01 Vol 2, DoD Information Security Program: Marking of Classified Material

4.3 DoDM 5200.01 Vol 3, DoD Information Security Program: Protection of Classified Information

4.4 DoDI 5200.48: Controlled Unclassified Information (CUI)

4.5 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM) Final Rule of 24 February 2021

4.6 DoDM 5205.02, DoD Operations Security (OPSEC) Program Manual of 29 October 2020

4.7 DTR 4500.9-R Defense Transportation Regulation, Part II

4.8 CARDEROCKDIVINST 5500.4F, Security Program and Manual

4.9 CARDEROCKDIVINST 5530.14B, Physical Security and Loss Prevention Program

4.10 DOD 5200.08-R, Physical Security Program of 19 October 2020

4.11 DODM 5200.08, Vol 3, Physical Security Program: Access to DoD Installations of 18 September 2020

4.12 NAVSEA M-5510.1, NAVSEA Command Security Program Manual

4.13 NSWCHQ/NUWCHQINST 5510.1 NAVSEA Warfare Centers Security Program Manual

4.14 Any forthcoming regulation defining industrial security, physical security, or information security requirements and control methods

The Contractor shall review in their entirety all Department policy/regulations/instructions listed above along with any documents referenced therein.

5.0 REQUIREMENTS

During the performance of this requirement, the Contractor shall handle business sensitive material, classified material up to Secret, as well as Controlled Unclassified Information (CUI). The Contractor shall handle all classified and CUI materials in accordance with applicable DoD, SECNAV, OPNAV, Navy, and NSWCCD policies and procedures.

The Contractor shall provide footwear conforming to the requirements of the regulations at Applicable Document 4.1.

The contractor personnel shall complete all required DoD, DON, SECNAV, OPNAV, NAVSEA, and NSWC training requirements throughout the Fiscal Year. All required training will either be administered as computer-based or on-site at NSWCCD. The Government will notify the Contractor when each training event is due, how to access each training module, and/or the location of the on-site training. Failure to complete required training may result in NMCI account suspension or Common Access Card (CAC) revocation.

Contractor personnel working in the CIC and Customer Service Desk shall complete Mail Orderly training in order to sign for official mail delivered to NSWCCD. It is recommended that all contractor personnel complete Mail Orderly Training.

All contractor personnel shall complete on the job security training, provided and tracked internally by Code 105.

Contract personnel shall comply with all security regulations, to include any modifications, additions or deletions that may occur during the term of the contract.

At no time shall the contractor insert unauthorized equipment or software (e.g., cell phone or other USB-type devices) into any device or network. The Government shall immediately remove from the contract contractor personnel found to be in violation of applicable information security or cybersecurity instructions/regulations/ policies.

At no time shall the Contractor provide access to classified information or materials that an individual does not have the appropriate clearance and need-to-know, as identified in the DoD system of record and the Base Inventory Tracking System (BITS) access group module or access lists.

At no time shall the Contractor provide CUI information or materials to an individual that does not have a Lawful Government Purpose for accessing that information or material.

5.1 Building 42 Operations

5.1.1 Automated Mailroom Operations: The Contractor shall perform electronic manifesting, as designated by the Transportation Agent, under the authority of the Transportation Officer (Note: the contractor will not be appointed to perform any function involving the obligation or expenditure of Government funds). Electronic manifesting is for outbound administrative shipments using approved General Services Administrative (GSA) carriers (i.e., FedEx, USPS, etc.) and meter outbound mail to the appropriate code (25 pieces per week, on average).

5.1.2 Classified Inventory Control (CIC): The CIC is the central control center for all incoming and outgoing classified mail. Management of the CIC involves processing outgoing classified metered mail (up to Secret), incoming metered mail delivered to Building 42, manifest electronic shipments, completion of all required OPNAV forms for document control and report of violations, shelving an inventory of material received by the CIC, and other carrier services on the NSWCCD West Bethesda and Olney campuses and to/from other points in the National Capitol Region, as required.

5.1.2.1 The Contractor shall utilize the NSWCCD BITS to account for receipt, transfer, inventory and destruction of classified material.

5.1.2.2 The Contractor shall verify authorized users have the appropriate level of security clearance on their courier card for the material requested.

5.1.2.3 The Contractor shall perform or assist in destruction and transmittal services to authorized users.

5.1.2.4 The Contractor shall conduct an annual inventory of CIC material; and assist with the annual base-wide inventory and control of the SF 700s maintained by Security utilizing and updating all through BITS. The Contractor shall complete the inventory and the inventory shall be verified in BITS using the Inventory Sight Report.

5.1.2.5 The Contractor shall conduct a check of all material for compliance with applicable regulations/instructions, based on the classification level of the material, prior to processing.

5.1.2.6 The Contractor shall staff the customer service desk from 0730-1600 HRS. Services provided include: updating badging and alarm system access lists, importing alarm system encoding on the customer Common Access Cards (CAC), resetting CAC pins, creating and issuing Carderock Site Badges, issuing DD 2501 courier cards, and answering the customer support line and directing calls to the correct Security Specialist. This task shall include the creation and maintenance of a customer log report, submitted weekly (CDRL 0001) to the Government. The CIC will provide a customer log for the prior 2 years.

5.1.2.7 The Contractor shall perform controlled inventory services for classified/controlled material up to Secret for administrative material entering and leaving NSWCCD (25-30 pieces per week, on average). The Contractor shall maintain transmittal logs and VCARDS for the prior 2 years.

5.1.2.8 Shipments: The Contractor shall request a DD1149 for all FedEx shipment needs for Code 105. The Contractor shall coordinate all other shipping needs for Code 105 using the proper US Postal Service requirements. The Contractor shall provide a log of all customers on a monthly basis (CDRL 0002).

5.1.3 Destruction Operations: The Contractor shall provide comprehensive classified destruction in support of NSWCCD Code 10, including the management and operation of the Division’s Destruction Facility, receipt for material prepared for destruction pickup, execution of destruction on the NSWCCD campus and offsite at the Olney, MD facility as necessary, and accounting for destruction performed. The Contractor shall provide the Information Security team a weekly log of materials destroyed by item type, quantity destroyed, and date destroyed (CDRL 0003).

5.1.3.1 The Contractor shall utilize the NSWCCD BITS for final disposition of classified material.

5.1.3.2 The Contractor shall read and comply with all applicable SOPs and operating manuals/instructions and operate the destruction devices maintained at the centralized destruction facility. Should the equipment be damaged or fail to operate due to the contractor operators failure to follow proper use of the equipment, the Contractor shall assume responsibility for any and all repairs to the equipment and expenses to continue daily operations using other approved means for classified destruction of materials.

5.1.3.3 The Contractor shall ensure approval for destruction is received by the proper authority, i.e., the information owner, prior to execution on all BITS accountable material.

5.1.3.4 The Contractor shall ensure removal of all classification labels, markings, and stickers of IT media prior to destruction to include markings on packaging. The Contractor shall coordinate with facilities personnel to remove destroyed materials and perform quality control to ensure this was completed properly.

5.1.3.5 The Contractor shall perform destruction services of classified material up to Secret and CUI, in accordance with DoDM 5200.01 Vol 3, DoDI 5200.48 and the NSWCCD Command Security Manual. On average, the facility destroys 240 pounds of paper material and 50 hard drives per day. The Contractor shall destroy, remove, or permanently cover markings on packages, boxes, or cases that can’t be destroyed. The Contractor shall coordinate with facilities to receive CUI materials (25 shred bins per week). The Contractor shall provide the Information Security team a weekly log of materials destroyed by item type, quantity destroyed, and date destroyed (CDRL 0003).

5.1.3.6 The Contractor shall keep a maintenance log of each machine used and report any malfunctioning equipment to the Information Security team upon discovery. The Contractor shall provide the maintenance log on the last work day of each week (CDRL 0004).

5.2 Code Media Centers (4): The Contractor shall provide the following services to each Carderock (to include the Olney, MD facility) Media Center during business hours:

· Receipt of material from CIC and custodians,

· Review of transmittals, review of derivative classification markings,

· Processing of destruction requests,

· Shelving and inventory of material received by the media center.

5.2.1 The Contractor shall perform controlled inventory services of classified material up to Secret for administrative material entering and leaving code spaces and control points. Contractor will service four media centers located at NSWCCD West Bethesda and Olney MD (building location TBD).

5.2.2 The Contractor shall utilize the NSWCCD BITS for receipt, transfer, inventory, and destruction of classified material and ensure this is done from start to completion.

5.2.3 The Contractor shall verify authorized users have the appropriate level of security clearance and the need-to- know for the material requested. An access list will be provided by the Security Division or the applicable Work Center.

5.2.4 The Contractor shall perform or assist in destruction and transmittal services to the customer.

5.2.5 The Contractor shall conduct an annual inventory of media center classified materials that will be verified/validated by the Government.

5.2.6 The Contractor shall assist with annual base-wide inventory for the control of the SF 700s maintained by Security utilizing and updating all through BITS.

5.2.7 The Contractor shall conduct a check of all material for compliance with regulations/instructions based on the classification level of the material prior to processing.

5.3 Courier Cards: The Contractor shall perform the issuance of DD 2501 courier cards.

5.3.1 The Contractor shall prepare courier cards for issuance at NSWCCD locations and coordinate with the individual requesting the courier card or the recipient for pickup.

5.3.2 The Contractor shall track courier cards based on expiration date and initiate a reissuance as required using an approved tracking system. A log showing the issuance or reissuance or cards will be maintained and the contractor will ensure the requester is notified 30 days prior to card expiration.

5.3.3 The Contractor shall scan and/or upload courier briefing statements and required documentation on to the central repository for records retention.

5.3.4 The Contractor shall collect expired courier cards and outgoing member’s courier cards upon departure from NSWCCD locations using the current out-processing procedures.

5.4 Courier Authorization Letters: The Contractor shall draft and route all courier letters for review and signature. The Contractor shall track all letters and place all documentation in the central repository once the letter has been distributed to the end user.

5.5 Shredders and Shred Bins: The Contractor shall assist with destruction needs for all classified and unclassified materials.

5.5.1 Contractor shall coordinate with Code 10 Facilities personnel for the pick-up and return of grey shred bins on each Friday of the month and on a continuing four week cycle as determined by the government. In addition, the Contractor shall assist with bulk collection services four (4) times a year. The Contractor shall be given advanced notice a minimum of three (3) working days prior to the anticipated collection date.

5.5.2 The Contractor shall inspect all grey shred bins to ensure they are in good working order and report any repairs that need to be completed on a monthly basis. The Contractor shall ensure the placard/flyer for acceptable/unacceptable material is attached on the top of the grey shred bins.

5.5.3 The Contractor shall track, map, inventory, and associate all grey shred bins with location, POC, and cycle order. The Contractor shall provide the updated inventory, map, and cycle order on an annual basis (CDRL 0005).

5.5.4 The Contractor shall track, map, inventory, and associate all shredders with location, POC, NSA EPL, and device information. The Contractor shall provide an updated inventory monthly (CDRL 0006).

5.5.5 The Contractor shall verify each shredder on the NSA EPL and create and/or update a shredder letter for each device.

5.5.6 The Contractor shall ensure each device has a current shredder letter posted on the device or within a close visual distance.

5.5.7 The Contractor shall facilitate the removal of any device that is not on the NSA EPL.

5.5.8 The Contractor shall facilitate the delivery of new shredders from storage as requested.

5.6 Classified Meeting Plans: The Contractor shall conduct initial review of all classified meeting plans. Once approved the Contractor shall forward to the Information Security Team for final approval and processing. The Contractor shall retain approved plans in the central repository.

5.7 Container/Safe Combinations: The Contractor shall perform all container combination changes upon request.

5.7.1 The Contractor shall provide training on SF700, SF701, and SF702 forms as requested or upon each combination change.

5.8 Naval Nuclear Propulsion Information (NNPI): The Contractor shall assist the NNPI team with room certification inspections. Contractor will complete a NNPI yes/no checklist upon request and provide it to the Information security team for completion (CDRL 0007).

5.9 Spot Inspections: The Contractor shall conduct spot inspections to support the Information Security team. Inspection areas include but are not limited to Personally Identifiable Information (PII), NNPI, Classified Material holdings, SF700/701/702 forms, CUI, North Atlantic Treaty Organization (NATO), and Restricted Data/Formerly Restricted Data (RD/FRD). The Contractor shall complete a Spot Inspection yes/no checklist upon request and provide it to the Information Security team for completion (CDRL 0008).

5.10 Administrative Holdings: The Contractor shall support the Information Security team with administrative needs to include filing, escorting, scanning, form completion, editing, documenting, and writing.

5.10.1 The Contractor shall assist the government personnel with the drafting and development of SOPs, editing reference guides, documenting procedures, and other like tasks. The Contractor shall not be responsible for developing policies/procedures independently from the government.

5.10.2 The Contractor shall assist in records retention and inventory for Information Security areas to include but not limited to PII, NNPI, Classified Material holdings, SF700/701/702 forms, CUI, NATO, and RD/FRD.

5.11 Physical Security Operations: The Contractor shall assist Government personnel with administrative support for the vulnerability assessment of NSWCCD facilities. The Contractor shall provide administrative support and recommended findings in the form of organizational recommendations, document revisions, and policy and procedure improvements.

5.11.1 The Contractor shall provide vulnerability assessments that address multiple facets of the agency’s operations and encompass both the counterintelligence and security disciplines.

5.11.2 The Contractor shall provide assessments that include physical location of facilities; proximity of the location to the highways/roads/street; vulnerability of agency infrastructure such as building and information technologies, and physical security measures.

5.12 Security Inspections and Building Risk Assessments/Risk Management Program: The Contractor shall provide administrative support for the risk management process, planning, training, exercises, resources, and AT/FP vulnerability assessments and program reviews.

5.12.1 The Contractor shall provide Threat/Vulnerability-based assessments that address various specialties within agency operations to include AT/FP, counterintelligence and physical security. The Contractor shall complete an assessment yes/no checklist and provide it to Physical Security for review and coordination upon request (CDRL 0009).

5.12.2 The Contractor shall research and gather information in support of the Security Office formulating and developing AT/FP assessments and reports in accordance with DoD directives and policy.

5.12.3 The Contractor shall provide support or conduct security inspections of Open Storage Areas in support of recertification. All inspection results will be provided to the government for validation prior to any action being taken. Contractor will complete an assessment yes/no checklist upon request and provide it to Physical Security for review and coordination (CDRL 0010).

5.12.4 The Contractor shall prepare documents, reports, and certification letters in support of the inspection program. The Contractor shall place all documentation created in the central repository for records retention requirements. These are administrative tasks that the Contractor shall perform on an as needed basis.

5.13 Access Control: The Contractors shall serve as the primary resource custodian for Access Control Management. The Contractor shall assist with the management of the administrative and technical requirements necessary to efficiently support mission requirements and the personnel performing duties for access control management.

5.13.1 The contractor shall provide timely security support, and effort, to the Physical Security Team’s internal and external tasking, projects, and programs, to include Physical Security, Lenel, Preventative Maintenance Inspection (PMI), and Access Control (Security Management System and Department of Defense Common Access Card).

5.13.2 The Contractor shall provide timely security support and effort to Government personnel located on NSWCCD and Olney Support Site in support of Physical Security.

5.13.3 SEATech High Performance Computing Lab: The Contractor shall provide support to SEATech’s tasking, projects, and programs, to include physical security and access control, container/safe inspection readiness, escorting requirements, key control, and novice level Communications Security (COMSEC) Secure Telephone Equipment (STE) phone operation and Video Teleconferencing operation. The Contractors shall assist with the management of the administrative and programmatic requirements necessary to efficiently support mission requirements and capture and develop metrics for SEATech operations.

5.14 Deliverables

5.15 Staffing

5.15.1 It is the intent of the government to award a firm fixed price contract. Contractor personnel shall report on time daily during normal working days (Monday through Friday except Federal Holidays and Authorized Closures) and remain on site for 8.5 hours per day, including a 30 minute lunch break. Normal business hours for NSWCCD are from 0730-1600 daily. If contractor personnel are expected to be out for more than one (1) working day in a row, the contractor shall replace that person with an equally qualified person. For qualifications, see Labor Category (see Table 1). It shall be the contractor’s responsibility to ensure personnel are on-site on time, daily, and shall replace personnel who cannot meet the staffing requirements. If the contractor is unable to staff a position, the Government shall seek equitable adjustment for every hour of lost productivity.

5.15.2 For level of effort, the contractor shall assume 11 full time equivalent (FTE) positions. The contractor may staff the positions in any manner they wish, however each FTE requires a contractor to physically be on site and in their respective area of job performance during normal business hours (with the exception of a 30-minute lunch break between the hours of 1100 and 1300) to ensure customer service is provided to the Security Office and their customers.

Table 1 – Staffing requirement

5.15.3 Government Holidays and Closures

The government observes the following holidays:

New Year’s Day, Birthday of Martin Luther King, Jr., Washington’s Birthday, Memorial Day, Juneteenth National Independence Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day, and Christmas Day.

If any of the above holidays fall on a Saturday, the Government observes the preceding Friday as the legal holiday. When the holiday falls on a Sunday, the Government observes the following Monday as the legal holiday.

In addition, any other day designated by Federal Statute, Executive Order or President’s proclamation, will be considered as a legal holiday. Closure due to inclement weather will be determined by the Office of Personnel Management (OPM). The Contractor is responsible for determining the Government’s operating status. If NSWCCD is closed or has its normal operating schedule modified by OPM, services would be suspended/modified accordingly. The Contractor may also call 1-877-679-2231 to receive status of NSWCCD for that particular day.

6.0 GOVERNMENT FURNISHED INFORMATION (GFI)

The Government will provide the following GFI:

6.0.1 Past year’s Record of Receipts

6.0.2 Past year’s Transmittal Files

6.0.3 Past year’s Registry Receipt

6.0.4 Standard Operating Procedures:

-BITS

-CIC

-Destruction Facility -Courier

-SF 700/701/702

-Classified Meetings

6.0.5 Command Organizational Charts

6.0.6 Security Clearance and verification of “Need to Know” in support of section 5.2.3

6.1 GOVERNMENT FURNISHED EQUIPMENT (GFE)/Government Furnished Property (GFP)

The Government will provide all supplies, materials, and equipment required for the performance of this effort. The Contractor shall first report all GFP issued to the Contractor within the first 30 days of award. Subsequent GFP reports shall be submitted quarterly. The final GFP report shall be submitted within the last 30 days of the contract’s period of performance. (CDRL 0011)

7.0 QUALIFICATIONS

Contractor personnel who will perform the services described in the PWS require experience in the following areas: information security, physical security, performing inspections, building surveys, document control, classified material handling, mailroom operations, strong customer service, strong written and verbal communications skills, and understanding of Microsoft Office Suite. The individuals must possess the capability to work independently in a fast-paced working environment.

The Contractor shall apply administrative and technological concepts, principles and practices sufficient to handle classified material with 100% accuracy, operate destruction equipment, maintain a valid driver's license, and operate office automation systems with applicable office automation software, including the ability to produce Word documents, PowerPoint presentations and Excel spreadsheets.

Personnel shall be US Citizens.

Contractor personnel requiring network access to perform duties assigned within the statement of work shall be able to obtain and maintain a properly adjudicated Tier 3 (T3) or similar in scope PSI (NACLC/ANACI/T3R) investigation. Upon proper adjudication of a T3 or similar in scope PSI, the contractor will be issued a Common Access Card (CAC) in order to access facilities and work stations with network access. Upon completion of the contract, removal from position, or a change in status of the T3 investigation, the contractor shall return their CAC to the Security Division. Personnel unable to maintain a T3 investigation shall be removed from the contract and replaced with an equally capable contractor with a properly adjudicated T3 investigation.

Contractor employees without current eligibility are required to complete the appropriate PSI commensurate with position filled. NSWC Carderock Division (Code 105 Security) will coordinate PSI for the contractor(s) requiring eligibility.

The Contractor requires access to controlled unclassified information (CUI). CUI is official information that requires the application of controls and protective measures for a variety of reasons and has not been approved for public release, to include technical information, proprietary data, information requiring protection under the Privacy Act of 1974, and Government-developed privileged information involving the award of contracts. CUI is a categorical designation that refers to unclassified information per Executive Order 13556. CUI does not meet the standards for National Security Classification under Executive Order 13526, but is pertinent to the national interest of the United States or to the important interests of entities outside the Federal Government, and under Laws, Regulations or Government-wide Policies (LRGWP) that requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination.

For proper CUI management, the contractor shall comply with DODI 5200.48, Controlled Unclassified Information (CUI).

Contractor employees embedded in Government work spaces will be included in the NSWC Carderock Division security education program per SECNAV M-5510.36B and must complete prescribed Department of Defense (DoD) or DON training requirements.

Contractor personnel assigned to perform work under this contract may require access to Navy Information Technology (IT) resources (e.g., computers, laptops, personal electronic devices/personal digital assistants (PEDs/PDAs), NMCI, RDT&E networks, NAVY Enterprise Resource Planning (N-ERP), and Navy Web servers requiring Common Access Card (CAC) Public Key Infrastructure (PKI)).

Contractor personnel (prime, subcontractor, consultants, and temporary employees) requiring access to Navy IT resources shall submit a completed System Authorization Access Request Navy (SAAR-N), OPNAV 5239/14 (Jul 2008) form or latest version thereof, and have initiated the requisite background investigation (or provide proof of a current background investigation) prior to accessing any Navy IT resources. SAAR-N forms will be submitted to the Contracting Officer’s Representative (COR) via the contractor’s Facility Security Officer (FSO). For those contractors that do not have a FSO, SAAR-N forms shall be submitted directly to the COR or designated SAAR-N Government Sponsor. Copies of the approved SAAR-N forms may be obtained through the COR/ACOR or designated SAAR-N Government Sponsor.

In order to maintain access to Navy IT resources, the contractor shall ensure completion of initial and annual IA training, monitor expiration of requisite background investigations, and initiate re-investigations as required. If requested, the contractor shall provide to the COR or designated SAAR-N Government Sponsor documentation sufficient to prove that it is monitoring/tracking the SAAR-N requirements for its employees who are accessing Navy IT resources. For those contractor personnel not in compliance with the requirements of this clause, access to Navy IT resources will be denied and/or revoked. The contractor shall identify a program lead for this contract. The program lead shall have documented supervisory experience in a fast-paced environment overseeing the types of services required herein.

Contractor personnel working in the CIC or Customer Service Desk shall be issued DD Form 285, Appointment of Military Postal Clerk, Unit Mail Clerk or Mail Orderly, in order to sign for official mail delivered to NSWCCD.

8.0 QUALITY SURVEILLANCE AND PERFORMANCE STANDARDS

The Government will conduct quality surveillance via various methods including formal and informal meetings, review of technical reports, review of monthly progress reports, and review of deliverables. The contractor shall be evaluated based on the Quality Assurance Surveillance Plan (QASP) in attachment 2.

Contractor performance shall be evaluated in the areas of customer service, technical quality, accuracy, compliance, responsiveness, and timeliness. Responsiveness will be evaluated based upon the Government's experience interacting with the contractor during performance. Timeliness will be evaluated on the contractor's ability to meet schedules with minimal variance. Compliance will be measured based on announced and unannounced audits of process, inventory results, and receipt of notifications involving security violations.

QUALITY ASSURANCE SURVEILLANCE PLAN

(QASP)

8.1 INTRODUCTION

This Quality Assurance Surveillance Plan (QASP) is pursuant to the requirements listed in the performance work statement (PWS) entitled Security Support Services Contract. This plan sets forth the procedures and guidelines the Naval Service Warfare Center Carderock Division will use in order to ensure the required performance standards or service levels are achieved by the contractor.

8.1.1 Purpose

The purpose of the QASP is to describe the systematic methods used to monitor performance and to identify the required documentation and resources to be employed. The QASP provides a means for evaluating whether the contractor is meeting the performance standards/quality levels identified in the PWS and the contractor’s Quality Control Plan (QCP), and to ensure that the government pays only for the level of services received.

8.1.2 This QASP defines the roles and responsibilities of all members of the integrated product team (IPT), identifies the performance objectives, defines the methodologies used to monitor and evaluate the contractor’s performance, describes quality assurance documentation requirements, and describes the analysis of quality assurance monitoring results.

8.2 Performance Management Approach

8.2.1 The PWS structures the acquisition around “what” service or quality level is required, as opposed to “how” the contractor should perform the work (i.e., results, not compliance). This QASP will define the performance management approach taken by the Security Division to monitor and manage the contractor’s performance to ensure the expected outcomes or performance objectives communicated in the PWS are achieved. Performance management rests on developing a capability to review and analyze information generated through performance assessment. The ability to make decisions based on the analysis of performance data is the cornerstone of performance management; this analysis yields information that indicates whether expected outcomes for the project are being achieved by the contractor.

8.2.2 Performance management represents a significant shift from the more traditional Quality Assurance (QA) concepts in several ways. Performance management focuses on assessing whether outcomes are being achieved and to what extent. This approach migrates away from scrutiny of compliance with the processes and practices used to achieve the outcome. A performance-based approach enables the contractor to play a large role in how the work is performed, as long as the proposed processes are within the stated constraints. The only exceptions to process reviews are those required by law (federal, state, and local) and compelling business situations, such as safety and health. A “results” focus provides the contractor flexibility to continuously improve and innovate over the course of the contract as long as the critical outcomes expected are being achieved and/or the desired performance levels are being met.

8.3 Performance Management Strategy

8.3.1 The contractor is responsible for the quality of all work performed. The contractor measures that quality through the contractor’s own Quality Control (QC) program. QC is work output, not workers, and therefore includes all work performed under this contract regardless of whether the work is performed by contractor employees or by subcontractors. The contractor’s QCP will set forth the staffing and procedures for self-inspecting the quality, timeliness, responsiveness, customer satisfaction, and other performance requirements in the PWS. The contractor shall develop and implement a performance management system with processes to assess and report its performance to the designated government representative. The contractor’s QCP will set forth the staffing and procedures for self-inspecting the quality, timeliness, responsiveness, customer satisfaction, and other performance requirements in the PWS. This QASP enables the government to take advantage of the contractor’s QC program.

8.3.2 The government representative(s) shall monitor performance and review performance reports furnished by the contractor to determine how the contractor is performing against communicated performance objectives. The government will make determination regarding incentives based on performance measurement metric data and notify the contractor of those decisions. The contractor will be responsible for making required changes in processes and practices to ensure performance is managed effectively.

8.4 ROLES AND RESPONSIBILITIES

8.4.1 The Contracting Officer

The contracting officer (PCO) is responsible for monitoring contract compliance, contract administration, cost control, and for resolving any differences between the observations documented by the Contracting Officer's Representative (COR)/Task Order Manager (TOM) and the contractor. The PCO will designate in writing the COR/TOM as the government authority for performance management. The number of additional representatives serving as technical inspectors depends on the complexity of the services measured, as well as the contractor’s performance, and must be identified and designated by the PCO.

8.4.2 The Contracting Officer’s Representative

The Contracting Officer’s Representative (COR) is designated in writing by the PCO to act as his or her authorized representative to assist in administering a contract. COR/TOM limitations are contained in the written appointment letter. The COR/TOM is responsible for technical administration of the project and ensures proper government surveillance of the contractor’s performance. The COR/TOM is not empowered to make any contractual commitments or to authorize any contractual changes on the government’s behalf. Any changes that the contractor deems may affect contract price, terms, or conditions shall be referred to the PCO for action. The COR/TOM will have the responsibility for completing QA monitoring forms used to document the inspection and evaluation of the contractor’s work performance. Government surveillance may occur under the inspection of services clause for any service relating to the contract.

8.4.3 IDENTIFICATION OF REQUIRED PERFORMANCE STANDARDS/QUALITY LEVELS

The required performance standards and/or quality levels are included in the PWS and in Attachment 1, “Performance Requirements Summary Table.” If the contractor meets the required service or performance level, it will be rated as SATISFACTORY on the annual Contractor Performance Assessment (CPAR) report. If the contractor exceeds the service or performance level, it is eligible to receive an EXCELLENT on the annual CPAR report. Failure to meet the required level of quality, will result in an UNSATISFACTORY rating in the annual CPAR.

8.5 METHODOLOGIES TO MONITOR PERFORMANCE

8.5.1 Surveillance Techniques

In an effort to minimize the performance management burden, simplified surveillance methods shall be used by the government when appropriate to evaluate contractor performance. The primary methods of surveillance are:

· Random monitoring, which shall be performed by the COR/TOM.

· 100% Inspection – Each month, the COR/TOM, shall review the generated documentation and enter summary results into the Surveillance Activity Checklist (attached).

· Periodic Inspection – COR/TOM typically performs the periodic inspection on a monthly basis.

8.5.2 Customer Feedback

The contractor is expected to establish and maintain professional communication between its employees and customers. The primary objective of this communication is customer satisfaction. Customer satisfaction is the most significant external indicator of the success and effectiveness of all services provided and can be measured through customer complaints.

Performance management drives the contractor to be customer focused through initially and internally addressing customer complaints and investigating the issues and/or problems but the customer always has the option to communicate complaints to the PCO and/or COR/TOM, as opposed to the contractor.

Customer complaints, to be considered valid, must set forth clearly and in writing the detailed nature of the complaint, must be signed, and must be forwarded to the COR/TOM. The COR/TOM will accept those customer complaints and investigate.

Customer feedback may also be obtained either from the results of formal customer satisfaction surveys or from random customer complaints.

8.5.3 Acceptable Quality Levels

The acceptable quality levels (AQLs) included in Attachment 1, Performance Requirements Summary Table, for contractor performance are structured to allow the contractor to manage how the work is performed while providing negative incentives for performance shortfalls. For certain critical activities such as those involving onsite attendance and operations, the desired performance level is established at 100 percent. Other levels of performance are keyed to the relative importance of the task to the overall mission performance at NSWCCD Security Division (105).

8.6 QUALITY ASSURANCE DOCUMENTATION

8.6.1 The Performance Management Feedback Loop

The performance management feedback loop begins with the communication of expected outcomes. Performance standards are expressed in the PWS and are assessed using the performance monitoring techniques shown in Attachment 1.

8.6.2 Monitoring Forms

The government’s QA surveillance, accomplished by the COR will be reported using the monitoring forms in Attachments 2. The forms, when completed, will document the government’s assessment of the contractor’s performance under the contract to ensure that the required results quality levels are being achieved. The COR will retain a copy of all completed QA surveillance forms.

8.7 ANALYSIS OF QUALITY ASSURANCE ASSESSMENT

8.7.1 Determining Performance

Government shall use the monitoring methods cited to determine whether the performance standards/service levels/AQLs have been met.