Attachment 1 SOW.pdf

STATEMENT OF WORK

Statement of Work (SOW) Security Services for

MILCON P351,

Hangar 8 Mods 1/2

26 FEBRUARY 2024

DISTRIBUTION STATEMENT D. Distribution authorized to the Department of Defense and U.S. DoD contractors only (Critical Technology) (9 September 2020). Other requests shall be referred to P351 Site Security Manager

1.0 BACKGROUND AND SCOPE

1.1 Background

MILCON P-351 is a two module two-story aircraft maintenance in support of F-35C Joint Strike Fighter fleet operational squadrons. The Joint Strike Fighter Wing is seeking a Construction Surveillance Technician(CST) team to oversee construction site Special Access Program Facility (SAPF) physical security requirements per the approved Construction Security Plan (CSP). The location and the missions that the structures support create the requirement for a comprehensive system of security protocols known as Security-in-depth (SID). The SID consists of a system of layered and complementary security controls sufficient to reasonably deter and detect unauthorized entry and movement within areas storing or processing sensitive information or assets.

1.2 Scope

The contractor shall provide personnel, transportation, supplies, materials, tools, and other items necessary to perform work as a CST as defined in this Statement of Work (SOW) except for those items specified as government furnished property, equipment, and services. The contractor shall perform to the standards in this contract. There are four SAPF areas the CST will focus on within MILCON P-351: two SAP Storage Rooms (1-102 and 2-102) on first floor, and two SAPF mantraps (1-222 and 2-222) on second floor. Throughout this SOW, these areas will be referred to the “SAPF areas”.

2.0 APPLICABLE DOCUMENTS

Throughout the life of the contract, if any instruction or document is replaced or superseded, the replacement or superseding instruction or document will be updated and applicable in this SOW.

In the event of a conflict between the text of this SOW and the applicable documents cited herein, the COMPACFLT Accrediting Official (AO) shall provide a recommendation to the Contracting Officer. The Contracting Officer’s decision shall take precedence. Nothing in this SOW, however, shall supersede applicable laws and regulations unless an exemption or waiver has been submitted by the AO to the Contracting Officer for security-related requirements.

2.1 CJSFW Construction Security Plan (CSP)

2.1.1 P351 Construction Security Plan

2.2 Technical Specifications for Construction and Management of Sensitive Compartmented

Information Facilities; Version 1.5; IC Tech Spec – for Intelligence Community Directive (ICD) /Intelligence Community Standard (ICS) 705

2.3 DoD 5220.22-M National Industrial Security Program Operating Manual (NISPOM)

2.4 SECNAV M-5510.36B Department of the Navy Information Security Program

3.0 REQUIREMENTS

3.1 Security Services for MILCON P351 (Hangar 8, Mods 1/2)

The contractor shall provide CSTs to provide SAPF security services for MILCON P351 as outlined in Sections 3.1.1 – 3.1.4. The contractor must be a U.S. citizen, be Tier III eligible for a security clearance and be fluent in writing and speaking English to provide detailed reports and complete the analyses of issues, findings, and security situations which require staff action.

Contractor shall be capable of independent decision making, knowledgeable of construction practices, possess a high degree of individual initiative, and be able to function with minimal supervision.

3.1.1 Construction Phase

1. The contractor shall provide roving security services for the SAPF areas in accordance with

ICD 705 by maintaining a Master Access Roster (MAR) of all personnel authorized access to these spaces and ensuing all patrons are free from Personal Electronic Devices (PEDs) while accessing these SAPF areas.

2. The contractor shall perform daily identification checks and searches to ensure all persons entering the four SAPF areas are authorized access to those spaces. Thereafter, a report indicating all findings to include attempted unauthorized site acceses, shall be submitted on a daily basis. (Contract Data Requirements List (CDRL) A001)

3. The contractor shall attend the following meetings (minimum of one contractor representative required): weekly Quality Control/Production meetings, Safety meetings, and other in-person onsite meetings.

4. The contractor shall generate and submit security incident reports to Government SSM/AO(s) in accordance with CDRL A002.

5. The contractor shall assess and report to the Government SSMs regarding compliance with the

MILCON P351 CSP.

6. Log jobsite visitors in a logbook, with an entry and exit time at each SAPF area.

7. Document security violations or deviations from the CSP in the daily activity log and notify the SSM.

8. Ensure access control procedures to the site are implemented.

9. In addition to surveillance of materials, storage and movement activities, the Contractor shall communicate issues for resolution to the SSM and COR.

10. Attend meetings as required and communicate requirements to the COR and SSM.

4.0 PERSONNEL

Key Personnel. The contractor shall provide qualified personnel to perform construction site security services through the life span of the contract for MILCON P351. One Deputy Site Security Project Manager/Key Person shall act as the overall lead, manager and administrator for the contracted effort, serves as the primary interface and point of contact with Government program authorities on security issues, oversees execution of the contract requirements, and manages contractor employment of program/project resources. To ensure rapid response for required and emergent tasking, all contractor personnel shall remain within a local/regional radius of NAS Lemoore for the duration of this contract. The local/regional radius is defined as 150 miles.

Personnel. The contractor shall ensure that all personnel working on this contract whether at the contractor or subcontractor’s facility or at Government site meet the requirements of the ICD 705.

All work whether performed at the contractor facility or Government site will be performed by a U.S. company using U.S. persons (an individual who has been lawfully admitted for permanent residence as defined in 8 U.S.C. § 1101(a)(20) or who is a protected individual as defined by Title 8 U.S.C. § 1324b (a)(3)). The CJSFW security team and AO are authorized and intend to randomly inspect the compliance of this requirement. This requirement can be inspected by the review of access logs, personnel listings, and random inspection of credentials on-site in the controlled areas.

Contractor personnel must be able to obtain base access. The contractor shall submit the Department of the Navy Local Population ID Card/Base Access Pass Registration form (SECNAV 5512/1 – April 2014) requesting base access passes for its employees to the COR. The COR will coordinate with the base pass office to assist with contractor personnel receiving base passes. The contractor shall be responsible for all passes issued to its employees under this contract. The contractor shall return all applicable base passes to the Pass and Identification Office upon termination of employment of an individual, or upon completion/termination of this contract. The contractor shall submit a listing of any employees terminated to the Contracting Officer within 7 calendar days of the effective date of termination. All base access expenses incurred are the responsibility of the contractor and will not be reimbursed by the Government.

4.1 Recognized Holidays

New Year’s Day Labor Day Martin Luther King, Jr. Day Columbus Day Washington’s Birthday Verterans Day Memorial Day Thanksgiving Day Junteenth National Independence Day Christmas Day Independence Day

Hours of Operation: The contractor is responsible for conducting business during construction hours Monday – Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed closings.

Work hours are 0700-1900 PST Mon-Fri with exception of government holidays. Occasional weekend / after hour will be required with at least a two days notice before hand.

5.0 CDRLs (CONTRACT DATA REQUIREMENTS LIST)

Specific items of meeting minutes, briefing material, certification/data reports, a security plan, technical reports, and an Operations Security (OPSEC) Plan shall be provided in accordance with the applicable CDRLs.

Table 1. CDRL List.

CDRL

ITEM

DESCRIPTION

Due

A001 Contractor's Progress and Status Report 1000 every Thursday

A002 Accident Incident Report 72 hours after incident A003 Security Plan 45 DAC

6.0 SECURITY

6.1 Personnel Security

Personnel Security. Contractor personnel performing work under this contract must be a United States Citizen or a U.S. person (an individual who has been lawfully admitted for permanent residence as defined in 8 U.S.C. § 1101(a)(20) or who is a protected individual as defined by Title 8 U.S.C. § 1324b (a)(3)). All contractor personnel with access to unclassified information systems, including email, shall have, at a minimum, a favorable Tier 3 (T3) investigation. Contractor shall be eligible for a security clearance. Contractor personnel shall become thoroughly knowledgeable of security procedures and the level of security required in various parts of the facility under construction. Contractor personnel shall be fluent in writing and speaking English to provide detailed reports and complete the analyses of issues, findings, and security situations which require staff action. Contractor shall have thorough knowledge of common construction practices.

Contractor personnel shall be capable of independent decision making, possess a high degree of individual initiative, and be able to function with minimal supervision.

6.2 Operations Security (OPSEC)

Operations Security. The contractor shall comply with the OPSEC requirements outlined within the DD Form 254. The Contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified activities, information, equipment, and material used or developed by the contractor and any subcontractor during performance of the contract. The contractor shall be responsible for the subcontractor implementation of the OPSEC requirements. The OPSEC program shall be in accordance with DoD and DON operations security (OPSEC) requirements, to include:

1) Assignment of responsibility for OPSEC direction and implementation

2) Planning guidance for the use of the OPSEC Process to identify vulnerabilities and apply applicable countermeasures (Contact NAWCWD Industrial Security Office for a current OPSEC Annex and CI Guide)

3) Establishment of OPSEC education and awareness training

4) Provisions for management, annual review, and evaluation of OPSEC programs

5) Oversight for accountability of OPSEC requirements to subcontractors

6.3 Public Disclosure of Information

Public Release. Disclosure of information is covered by DFARS 252.204-7000 Disclosure of Information, incorporated in Section I of the contract. Concerning subsection (a)(2), “information otherwise in the public domain” is information officially released into the public domain, e.g., via Distribution Statement A, and does not include information in the public domain that has not been officially released. For disclosure of unclassified information that has not been officially released, the contractor must seek specific approval from the Contracting Officer, with approval from the NAWCWD Public Affairs Office (PAO).