Performance Work Statement 6.12.26.pdf

UNCLASSIFIED

UNCLASSIFIED

Performance Work Statement (PWS) Naval Information Warfighting Development Center (NIWDC)

Information Warfare Team Training Facility (IWTTF) Construction Security Support

1.0 BACKGROUND: The Naval Information Warfighting Development Center (NIWDC) requires the construction of a 7,300 square foot Information Warfare (IW) Team Training Facility (IWTTF). This facility must be built as a Sensitive Compartmented Information Facility (SCIF) in accordance with Intelligence Community Directive (ICD) 705 and its supporting manuals. To ensure the integrity of the facility from groundbreaking to accreditation, the requirement of a dedicated and qualified Construction Security Team (CST) is inherent to this project to provide comprehensive security services throughout all phases of construction.

2.0 SCOPE OF WORK: The ability to provide all necessary personnel, management, and resources to perform full-time construction security services integral to the delivery of a fully accredited SCIF. The primary objective is to prevent and detect unauthorized access, espionage, tampering, and clandestine surveillance of the construction site, materials, and the facility itself. The team shall ensure all activities strictly adhere to the government-approved Construction Security Plan (CSP) and ICD 705.

3.0 PLACES OF PERFORMANCE: Location 1 Primary.

Location 1 – IWTTF Norfolk Construction Site, Joint Expeditionary Base Little Creek – Fort Story (JEBLC-FS), 708 Omaha Beach Rd, VA Beach, VA 23459

4.0 SECURITY REQUIREMENTS:

4.1 General. The Contractor shall be responsible for adhering to all Department of Defense (DOD), DON, and specific NIWDC command instructions, guidance, orders, directives, and supplements relative to performing tasks set forth in this Performance Work Statement (PWS). The Contractor shall not disclose and must safeguard procurement sensitive information, computer systems and data, Privacy Act data, and Government personnel work products that are obtained or generated in the performance of this contract. This includes dissemination of protocols and papers not generally available through the public literature.

Neither the Contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

4.2. Operations Security. All work is to be performed in accordance with DOD and Navy Operations Security (OPSEC) requirements and in accordance with the OPSEC attachment to the DD254.

4.3 Branding. The Contractor SHALL not brand (or make any references to award) on their corporate (private or public facing) web site(s), any information that references any of the following information:

UNCLASSIFIED

Award of Contract Location(s) of performance Duration of performance Type(s) of work performed Government customer name(s) Contract or Contractor personnel end strength(s)

4.4 Clearance. The contractor is responsible for acquiring and maintaining security clearances at the level required under this contract. Contractor personnel shall possess clearances as designated on the Contract Security Classifications Specifications (DD254).

The contractor shall pre-clear new employees prior to starting on the contract and must obtain clearance validation from the command security office to obtain a security badge.

The following shall be considered before assigning any/all proposed Contractor staff as a part of any contract:

Personnel who possess a clearance SHALL currently be fully adjudicated, and eligible for transfer in status, as of proposal date.

The Contractor’s Program Manager(s), and/or Facility Security Officer’s SHALL initiate contact to work with the COR, to develop DD-254 forms, NLT 48 hours before Contractor personnel arrive on-site to start work.

The Contractor’s Program Manager(s), and/or Facility Security Officer’s SHALL ensure that all incoming Contractor personnel have had their Common Access Cards (CAC) from their last job revoked, NLT 48 hours before directing them to contact NAVIFOR Trusted Agents (TA) for issuance of new CAC credentials.

4.4.1 Identification/Badging.

4.4.1.1 Identification. For all services provided under this PWS, the contract employees shall identify themselves as contractor personnel by introducing themselves or being introduced as contractor personnel and displaying distinguishing badges or other visible identification for meetings with Government personnel. Additionally, contractor personnel shall identify themselves as contract employees in telephone conversations and in formal and informal written correspondence.

4.4.1.2 Common Access Card. The Government CAC card serves as the primary method of identification for the Contractor employees, as well as providing the basis of Public Key Infrastructure (PKI) access to the Navy/Marine Corps Intranet (NMCI), and numerous Navy web sites, which may also require PKI access. The COR will assist in providing the Contractor the appropriate documentation for obtaining CAC cards.

4.4.1.3 Facility Badging. Contract personnel shall wear a badge that clearly identifies them as a Contractor employee. The badge will be issued by the COR, via the Special Security Office (SSO), and will contain a personal picture, name of employee, and Contractor’s name. While working on the Government site, Contractor employee badges

UNCLASSIFIED

shall be worn on the outer garment, above the waist, in full view at all times, attached to the outer shirt or jacket pocket by a button or clip or worn around the neck secured by an appropriate identification card lanyard.

4.4.1.4 Return Requirements. All building security identification badges shall be turned into the SSO that issued the credential, and all CAC cards shall be turned into the COR that issued the credential during normal working hours. In the event that the Contractor employee checks out at the end of an evening, or mid shift, then both the building security badge, and the CAC credential, shall be turned over to the Contractor’s Government lead before final departure, as the Contractor shall be required to “read out/be debriefed” regarding their clearance, by the servicing SSO, before their final departure. If the contractor does not “read out/be debrief before final departure the same day the contractor SHALL physically come in during normal working hours on the next SSO work day which is Monday through Friday 0730-1600 (7:30 to 4:00). Ultimately, the Contractor shall be responsible for obtaining any Government issued identification cards from employees who are no longer authorized or no longer have a requirement for access to Government facilities and systems, to include employees whose access has been terminated off of the Government site. Identification cards shall be collected immediately (within one hour) of change of employee status and must be turned over to the respective Command Security Officer COR within two (2) business days.

4.4.1.5 Onboarding Personnel. Contractor awarded this effort shall deliver onboarding Contractor employee/personnel information to the Contracting Officer’s Representative (COR) NLT 48 hours before reporting to place of performance. The Contractor information shall be sent via Signed and Encrypted email, and shall contain the following information, at a minimum, on each incoming Contractor employee/personnel:

Company Name Full Name Date of Birth Position assigned Social Security Number Level of Clearance Email Address Phone Number

5.0 GOVERNMENT FURNISHINGS.

5.1 Government Furnished Information (GFI). GFI will be provided to Contractor employees as needed to complete the tasks set forth in this PWS. The Government will provide the contractor with access to the following information and systems necessary for performance:

Construction site plans and layouts.

Emergency contact lists.

UNCLASSIFIED

Site-specific security policies and procedures.

Access to the construction site for the contractor's personnel, vehicles, and facilities.

Access to classified information must be granted in accordance with the terms and conditions contained in DOD Manual 5220.22-M and DD Form 254 (Contract Security Classification Specification). The Contractor shall comply with all current information assurance awareness, information security policies, procedures, and statutes applicable to DOD information technology; including the July 3, 2007 DOD CIO Policy Memorandum on Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage.

5.2 Government Furnished Equipment (GFE). The Government will not provide any equipment or materials, for the contractor's use in the performance of this contract. The contractor is solely responsible for providing all equipment, materials, and any other items required to perform the work outlined in this PWS. The contractor shall furnish all items necessary to establish and maintain a fully functional and compliant security operation for the duration of the contract period.

5.3 Government Furnished Facilities (GFF): No Government Furnished Facilities (GFF) will be provided. The contractor shall be responsible for providing its own suitable Security Operations Center (SOC), equipment storage, and any other necessary operational facilities.

The location and setup of contractor-provided facilities on the construction site are subject to approval by the Government's Contracting Officer's Representative (COR).

5.4 Government Furnished Services (GFS): The Government will provide for the Secure Storage Area (SSA) Intrusion Detection System (IDS) connection to the base monitoring system. The contractor shall be responsible for arranging and/or funding all other necessary services, including but not limited to, electrical power, water, internet connectivity, and waste disposal for their facilities and operations, as required.

5.5 Government Resources/Facility Access. Access will be granted to Government facilities as required in support of the tasking. Contractor personnel performing work under this contract shall meet all requirements for gaining access to US Government installations.

The Contractor shall:

Conform to all DoD, DoN, and local (base/installation) security instructions (refer to Contractor Unclassified Access to Federally Controlled Facilities, Sensitive Information, Information Technology (IT) Systems or Protected Health Information (July 2013) provided below);

Comply with all applicable federal, state and local laws and ensure performance is secure while protecting material, equipment, and supplies from damage and loss; and

Be responsible for safeguarding all government equipment, information, and property provided for Contractor use.

5.6 Restrictions: Under no circumstances will Contractor-provided personal computers, or any personal electronic devices (e.g., cell phones, tablets, Fitbits), be connected to any Government IT system, including but not limited to the Navy/Marine Corps Intranet

UNCLASSIFIED

(NMCI). Contractor personnel shall not, at any time, access or attempt to access the following from Government IT assets:

o Corporate Email Accounts o Personal Email Accounts o Corporate Portals o Any Social Networking Site o Any Web Based News Site o Any Music Streaming Media Site o Any Web Based site, that does not directly relate to the assigned job, task, or mission

6.0 PRIVACY ACT COMPLIANCE: The Contractor may be in contact with data and information subject to the Privacy Act of 1974 (Title 5 of the U.S. Code Section 552a). The Contractor shall ensure that its employees assigned to this effort understand and adhere to the requirements of the Privacy Act and to Department of Defense and Department of the Navy regulations that implement the Privacy Act. Department of Navy policy and procedures implementing the Privacy Act are detailed in SECNAVINST 5211.5E (Department of the Navy Privacy Act (PA) Program). The Contractor shall identify and safeguard data, information and reports accordingly. In addition, the Contractor shall ensure that Contractor employees assigned to the contract are trained on properly identifying and handling data and information subject to the Privacy Act prior to commencing work.

7.0 GENERAL/ADMINISTRATIVE MATTERS:

7.1 Working Hours. 07:00 – 15:30 Monday – Friday; ad hoc Saturdays 0700-1530, as required by the General Contractor to maintain project schedule.

7.2 Contract Manager. The Contractor shall designate a Contract Manager who shall serve as the Contractor’s central point of contact to the Government. The name of this person and an alternate who shall act for the Contractor when the Contract Manager is unavailable shall be designated in writing to the Technical Point of Contact (TPOC), the COR, and the Task Order Manager (TOM). The Contract Manager or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The Contract Manager shall direct the effort of the contractor personnel and shall report and monitor progress to the COR and TA through direct communication and the contract deliverables. The contractor’s Program Manager may act as the Contract Manager. In addition, Contractor shall submit contact information to the COR for the following:

Facilities Security Officer phone number, and email address Contractor’s Program Manager phone number, and email address

7.3 Coordination Outside NIWDC. This position shall be able to independently participate in conferences, working groups, meetings, war games and other forums. In no case, however, shall the Contractor imply they are “representing” NIWDC or the Government.

All inquiries, comments or complaints arising from any matter observed, experienced, or learned of as a result of or in connection with the performance of this contract, the

UNCLASSIFIED

resolution of which may require the dissemination of official information, shall be directed to the COR and the Contracting Officer (KO).

8.0 SUPPORT SERVICES/QUALIFICATIONS:

8.1 Labor Categories. The following labor category and number of personnel are estimated to accomplish the scope identified in this Performance Work Statement. Refer to Section 12.1 (Labor Category/Personnel Requirements) for details on the expected qualifications for all positions associated with this PWS.

Labor Categories Clearance Location Number of Personnel

Site Security Manager (SSM)

TS 1 1

Construction Surveillance

Technician (CST) Lead

TS 1 1

Construction Surveillance

Technician (CST)

TS 1 3

Cleared American Guard (CAG) Lead

SECRET 1 1

Cleared American Guard (CAG)

SECRET 1 2

TOTAL 8

8.2. Placement of Personnel. During the first 90 days of performance, the Contractor shall make no substitutions of SSM or CST Lead unless the substitution is necessitated by illness, death, or termination of employment. The Contractor shall notify the COR within 15 calendar days after the occurrence of any of these events and provide any necessary information. Due to the integrated nature of the work and the security clearance requirements, the Contractor shall advise the Government on all changes to personnel during the performance of this effort. Ideally, a minimum of two-week notice shall be given prior to personnel changes being made by the Contractor and emphasis will be placed on a thorough and complete turnover from one member to the other whenever possible. A face-to-face turnover is optimal.

9.0 REQUIRED DUTIES/DELIVERABLES: The contractor shall perform the duties and deliverables as defined in the three task areas below. Deliverables shall be provided to the COR. All final deliverable submissions shall remain the property of the U.S. Government.

All revisions will be due in the specified timeframe as identified by the Government. All methodologies and recommendations SHALL be reviewed and approved by the Government prior to submission/implementation.

UNCLASSIFIED

9.1 Task I. Site Security Manager (SSM). Responsible for the comprehensive implementation, management, and oversight of the government-approved Construction Security Plan (CSP) for an ICD-705 project. This individual serves as the primary on-site authority for all construction security matters and is the main liaison between the government's Accrediting Official (AO), the construction contractor, and the security team.

The SSM is charged with ensuring the full integrity of the SCIF from groundbreaking through final inspection and accreditation.

Responsibilities include, but not limited to:

Manage all aspects of the construction security program and ensure strict adherence to the CSP and ICD-705 standards;

Direct and supervise the team of Construction Security Technicians (CSTs) and Cleared American Guards (CAGs);

Conduct security training and awareness briefings for all site personnel;

Oversee all access control, screening, and escorting procedures;

Maintain all security documentation, including daily activity logs, incident reports, visitor logs, and inspection records;

Document security violations or deviations from the CSP and notify the AO within 3 business days;

Lead initial response efforts for any security incident or breaches and report findings and recommendations to AO immediately for further action;

Receive CST and CAG reports on suspicious activities, security anomalies, or potential violations and make recommendations immediately to the AO for investigation and resolution;

Conduct daily, random, and end-of-day security inspections to identify and mitigate vulnerabilities.

9.2 Task II. Construction Surveillance Technician (CST) Lead/Alternate SSM. The Lead Construction Surveillance Technician serves as the senior on-site technical expert for the CST and is the designated alternate for the Site Security Manager (SSM). This individual shall provide day-to-day leadership and mentorship to the CSTs and shall formally assume all duties and responsibilities of the SSM in their absence.

Perform all duties of a Construction Surveillance Technician.

Manage shift schedules and post assignments for the CST.

Provide on-site leadership, guidance, and mentorship to the CST team.

Assist the SSM in developing and implementing the Construction Security Plan (CSP).

Review daily reports from other CSTs for accuracy, completeness, and clarity before submission to the SSM.

Serve as the acting SSM as required, assuming all authority and responsibilities of the role to ensure continuous on-site management coverage.

UNCLASSIFIED

9.3 Task III. Construction Surveillance Technician (CST). Responsible for the hands-on execution of the CSP. CSTs work under the direction of the SSM to prevent and detect unauthorized access, espionage, and the introduction of technical surveillance devices during SCIF construction. Their primary role involves the constant observation and inspection of construction material and activities, as well as the escorting of un-cleared personnel within the secure perimeter.

Provide constant escort and monitoring for all uncleared construction workers, visitors, and delivery personnel within the site boundaries;

Conduct inspections of all materials, tools, and equipment entering the secure area;

Observe construction to ensure it aligns with approved plans and does not introduce vulnerabilities;

Identify and immediately report any suspicious activities, security anomalies, or potential violations to the SSM for investigation and resolution;

Assist in maintaining security logs and records;

Conduct random and end-of-day inspections of tools, equipment, and debris.

9.4 Task IV. Cleared American Guard (CAG) Lead. Serves as the on-site shift supervisor for the CAG team, responsible for the direct oversight of all access control operations. This individual acts as the primary point of contact between the Site Security Manager (SSM) and the guard force, ensuring all security procedures are implemented correctly and consistently.

Perform all duties of a Cleared American Guard.

Manage shift schedules and post assignments for the CAG team.

Provide on-the-job training, direction, and mentorship to junior CAGs.

Serve as the primary on-site responder for any security incidents or alarms at the access control points, and escalate to the SSM as required.

Conduct quality control reviews of all access control logs and vehicle inspection reports to ensure accuracy and completeness.

Report directly to the SSM on guard force status, equipment readiness, and any security issues.

9.5 Task V. Cleared American Guard (CAG). Responsible for ensuring the physical and security integrity of a classified facility during the construction phase, in strict accordance with the project's Construction Security Plan (CSP) and ICD-705 requirements.

Enforce all security procedures outlined in the ICD-705 and site-specific Construction Security Plan (CSP).

Staff all vehicle and pedestrian entrances to the construction site or secure area.

UNCLASSIFIED

Screen all workers, vehicles, and equipment entering or exiting the site.

Verify credentials and enforce entry/exit procedures for all personnel.

Deny the introduction of prohibited materials, including explosives, weapons, and personal electronic devices, as specified by the SSM.

Conduct random inspections of all site areas to ensure no prohibited materials have been brought onto the site.

Inspect vehicles and materials entering the secure perimeter.

Conduct roving patrols of the construction site and facility.

Bring any suspicious materials or incidents to the immediate attention of the SSM.

9.6 Task VI. The Contractor shall furnish, install, monitor, and maintain an Intrusion Detection System (IDS) for the Secure Storage Area (SSA) shipping container (CONEX) to ensure the secure storage of inspected construction materials in strict accordance with ICD/ICS 705 Technical Specifications.

Requirements:

Procure and install an IDS on the SSA CONEX box prior to the staging of any inspected SCIF construction materials.

Ensure the IDS is actively monitored 24/7 by an Accrediting Official (AO)-approved dispatch center, security element, or guard force capable of immediate notification to the Site Security Manager (SSM) or response force.

Conduct and document a joint functional test of the IDS alongside the SSM and/or Construction Surveillance Technician (CST) prior to operational use to verify alarm triggering and signal transmission.

Provide on-call maintenance for the IDS throughout the construction project, resolving any system faults or hardware failures.

Ensure all IDS hardware, installation methods, and monitoring protocols strictly adhere to current ICD 705 guidelines and do not interfere with the AO-approved high-security padlock system.

Remove all IDS equipment and restore the site upon completion of the SCIF construction phase and final removal of secure materials.

9.7 Reports, Data, and Deliverables. All contract deliverables shall be submitted to the COR and Technical Assistant (TA). All written deliverables or other written communication between the Contractor and the COR (or designee, i.e. SSO) shall be delivered via paper and/or electronic copy. All deliverables shall meet professional standards and the requirements set forth in contractual documentation herein. The Government and the Contractor shall jointly establish due dates specific to individual work products (ex., reports, course-related material, presentations, analysis, etc.) to support this TO.

9.8 Weekly Activity Report. The Weekly Activity Report shall be submitted not later than five business days after end of the week reported on. The report shall contain the following information at a minimum:

UNCLASSIFIED

Specific NIWDC goal the task supports.

Task status (include originator/customer, personnel assigned to complete, location, goal/end-state, estimated completion date, percent complete.

Tasks completed (Number of vehicle inspections, personnel escorted, material inspected, etc.)

Security Issues or Violations observed and action(s) taken; include status.

Personnel issues

Upcoming events

10.0 PERSONNEL REQUIREMENTS:

10.1 Site Security Manager.

Clearance: Must possess and maintain an active TS clearance, at a minimum.

Experience:

A minimum of eight (8) years of experience in a government, industrial, or military security field.

A minimum of two (2) years of direct experience supporting Intelligence Community Directive (ICD) 705 series construction projects is required.

Three (3) or more years is highly desired.

Demonstrated ability to lead a security team is required. Prior formal supervisory experience is highly desired.

Must possess a comprehensive understanding of the ICD 705, Intelligence Community Standard (ICS) 705-1, and the associated IC Tech Specs.

Experience contributing to or managing a Construction Security Plan (CSP) is required.

Must be proficient in reading and interpreting construction blueprints and project schedules.

Education:

A High School Diploma or GED is required.

A Bachelor’s degree from an accredited university in Security Management, Criminal Justice, or a related field is highly desired and may be substituted for two (2) years of the general security eight (8) year experience requirement.

Certification:

Must possess a valid, current Site Security Manager (SSM) certification from a government-approved training course.

10.2 Construction Surveillance Technician Lead.

Clearance: Must possess and maintain an active TS clearance, at a minimum.

Experience:

A minimum of five (5) years of experience in a government, industrial, or military security field.

A minimum of two (2) years of direct, hands-on experience as a CST supporting Intelligence Community Directive (ICD) 705 construction projects.

UNCLASSIFIED

Demonstrated leadership aptitude and experience mentoring junior personnel.

Must be an expert in reading and interpreting construction blueprints, diagrams, and project schedules.

Must possess an expert-level understanding of the ICD 705, Intelligence

Community Standard (ICS) 705-1, and the associated IC Tech Specs.

Education:

A High School Diploma or GED is required.

Certification:

Must possess a valid, current Construction Surveillance Technician (CST) certification from a government-approved training course.

Possession of a valid, current Site Security Manager (SSM) certification from a government-approved training course, is highly desired.

10.3 Construction Surveillance Technician.

Clearance: Must possess and maintain an active TS clearance, at a minimum.

Experience:

A minimum of five (5) years of experience in a government, industrial, or military security field.

Demonstrated experience observing, documenting, and reporting on activities is required.

Must be capable of reading and interpreting construction blueprints, diagrams, and project schedules.

Must have a working knowledge of the ICD 705 series directives.

Education:

A High School Diploma or GED is required.

Certification:

Must possess a valid, current Construction Surveillance Technician (CST) certification from a government-approved training course.

10.4 Cleared American Guard Lead.

Clearance: Must possess and maintain an active SECRET clearance, at a minimum.

Experience:

A minimum of three (3) years of experience working as a security officer, or in a U.S. military or law enforcement role.

A minimum of one (1) year of experience in a supervisory or team lead capacity is required.

Demonstrated expertise in managing physical access control systems, screening procedures, and inspection protocols.

Must possess excellent communication, leadership, and conflict resolution skills.

Education:

A High School Diploma or GED is required.

Certification:

Must possess a valid, current Cleared American Guard (CAG) certification from a government-approved training course.

UNCLASSIFIED

10.5 Cleared American Guard.

Clearance: Must possess and maintain an active SECRET clearance.

Experience:

A minimum of three (3) years of experience working as a security officer, or in a U.S. military or law enforcement role.

Demonstrated experience in implementing access control procedures and protocols is required.

Experience conducting inspections of personnel, bags, and vehicles.

Must possess strong communication and interpersonal skills, and the ability to work effectively as part of a team.

Education:

A High School Diploma or GED is required.

Certification:

Must possess a valid, current Cleared American Guard (CAG) certification from a government-approved training course.

11.0 Labor Category/Personnel Requirements. Based upon the estimated annual hours for each labor category, a total of 8 personnel are recommended.

Labor Category/ Description

Clearance Level

Knowledge Level

Govt Proposed Staffing

Expected Annual Total

Hours Site Security Manager TS 8 1

2,080

Construction Surveillance

Technician Lead

TS 6 1 2,080

Construction Surveillance Technician

TS 5 3 2,080

Cleared American Guard Lead

S 4 1 2,080

Cleared American Guard

S 3 2 2,080

Table 2. Table of Personnel Requirements