Security_Requirements.pdf

1.0 SECURITY CLEARANCES

1.01 Document Handler Technicians and other contractor personnel as specified by the Government, shall obtain and maintain at a minimum a security clearance level of SECRET to work on this requirement. Clearances shall be maintained for the duration of this procurement.

1.02 A list of personnel and their security clearances on file shall be delivered to the Contracting Officer’s Representative (COR) no later than 10 business days following award and shall be updated with the monthly personnel listing deliverable.

2.00 SECURITY

2.01 Contents. The (2.00) series paragraphs are organized as shown below.

Paragraph (2.01) – Contents Paragraph (2.10) – Security Requirements Specification Paragraph (2.15) – Security Clearances Paragraph (2.20) – General Security Procedures Paragraph (2.30) - Special Considerations Paragraph (2.40) – Information Protection Paragraph (2.50) – Operations Security (OPSEC) Paragraph (2.60) – “For Official Use Only (FOUO)” Information Paragraph (2.70) – (Reserved) Paragraph (2.80) – (Reserved) Paragraph (2.90) – (Reserved) Paragraph (3.0) – Training Requirements

2.10 Security Requirements Specification

2.10a This procurement does not require access to communications security (COMSEC) equipment.

2.10b This procurement does not require access to intelligence information (INTEL).

2.10c This procurement does not require access to Sensitive Compartmented Information (SCI).

2.10d This procurement does not require access to North Atlantic Treaty Organization (NATO) information.

2.10e This procurement does not require access to the Secure Internet Protocol Router Network (SIPRNET).

2.10f This procurement does not require access to Operations Security (OPSEC) Sensitive information.

2.10g This procurement does not require access to Foreign Government Information

(FGI).

2.15 Security Clearances.

2.15a Contractor personnel shall obtain and maintain at a minimum a security clearance level of SECRET to work on this requirement. Clearances shall be maintained for the duration of this procurement.

2.15b A list of personnel and their security clearances on file shall be delivered to the COR no later than 10 business days following award and shall be updated with the monthly personnel listing deliverable.

2.20 General Security Procedures

2.21 Contractor personnel shall comply with all DoD, DoN, NAVSEA, NSWC, local Navy installation and NSWC PHD security instructions, policies, procedures and guidance as they apply to the contractor both on and off Government property at NSWC PHD, remote sites or travel destinations.

2.22 The contractor shall ensure that their personnel comply with all applicable DoD, DoN, NAVSEA, Naval Base Ventura County, NSWC, local Navy installation and NSWC PHD security instructions, policies, procedures and guidance both on and off Government property at NSWC PHD, remote sites or travel destinations, to include following established check-in and check-out procedures of all contractor personnel occupying Government facilities or otherwise requiring physical access to Naval Base Ventura County, and NSWC PHD. The provisions of paragraph (2.24) below apply to check-out procedures.

2.23 Location of Work. The Government shall provide a place for contractors to have access to an NGEN (NMCI) computer. Work performance at NSWC PHD, 4363 Missile Way, Port Hueneme, CA in Bldg. 1462. All other work will be performed in and around all other PHD buildings located at NBVC, Port Hueneme CA.

2.23 The standard hours of operation will be 0600-1800 Pacific time, Monday-Friday.

2.23a Contractors shall not be present in Government facilities unless Government personnel are physically present at all times to carry out security-related functions.

2.23b Provision will be made by the Government to allow necessary building, site, and facility access for contractor personnel on weekends and Federal holidays when necessary for this requirement.

2.24 Contractors requiring routine or repeated access to Naval Base Ventura County (NBVC) under this procurement may participate in the RAPIDGate program at their discretion as an alternative to securing daily base passes. Note that Common Access Cards (CACs) will not be issued to contractor personnel merely to allow convenient access to NBVC as an alternative to securing daily base passes or participating in the RAPIDGate program.

2.25 Hours of operation may be altered at no notice as necessitated by Force Protection posture or as a result of severe weather, disaster, fire, facility condition, security incident or other similar emergency or event.

2.26 Extraordinary Leave Days and Excused Leave for Government Personnel 2.26a If an extraordinary day off or leave, wherein Federal employees are excused from work with pay on what would be a normal work day without charge to leave, is granted to Federal employees by the direction of the President or an agency head, such as has occurred periodically on what would have been normal work days adjacent to major Federal holidays or on the occasion of Presidential funerals or national days of mourning, the contractor shall continue to provide contracted services in accordance with the requirement until and unless necessary access to Government buildings, ships, sites and other facilities is precluded due to absence of Government personnel.

2.26b If the contractor personnel are unable to conduct their work at an assigned Government work place due to an extraordinary day off or excused leave for Government employees, the contractor or any subcontractors may, at their discretion, continue work at another appropriate facility if possible or else grant paid or unpaid leave to its affected employees in accordance their company policies or any collective bargaining agreement (CBA) that may apply. Whether contract payments will be made for time not worked will depend upon the terms and conditions of this contract, including the pricing mechanisms contained within the contract.

2.26c If the use of alternative facilities will raise the costs of performing the requirement beyond the prices contracted with the Government under this requirement, the contractor shall first notify the contracting officer and request authorization to proceed. The contractor is not authorized to purchase or rent alternative facilities to accommodate extraordinary leave without such advance authorization from the contracting officer.

2.26d Estimated Extraordinary Leave and Excused Leave. For information purposes only, the granting of one extraordinary leave day per year is typical, normally adjacent to the Christmas Holiday, and instances of granting 59 minutes of administrative leave to Government personnel typically occurs two to three times per year.

2.27 Contractor personnel shall comply with all DoD, DoN, NAVSEA, Naval Base Ventura County (NBVC), NSWC, local Navy installation, and NSWC PHD security instructions, policies, procedures and guidance as they apply to the contractor both on and off Government property at NSWC PHD, remote sites or travel destinations, to include following established check-in and check-out procedures of all contractor personnel occupying Government facilities or otherwise requiring physical access to Naval Base Ventura County and PHD NSWC.

2.28 Common Access Cards (CACs)

2.28a CAC issuance is at the discretion of the Government. The Government reserves the right to change the criteria for CAC issuance at any time without notification to the contractor. The contractor is responsible for ensuring the return of all CACs issued their employees to Naval Base Ventura County Security upon contractor employee separation, the expiration of this procurement and the termination of this procurement as required in paragraph (2.24) below. Reports of the status of contractor personnel occupying NSWC PHD facilities and of the return of CACs shall be made in accordance with paragraphs [94.30c(1)] and [94.30c(2)] respectively, of the applicable Performance Work Statement.

2.28b CACs will normally be issued only to individual contractor personnel who are assigned to this requirement and who meet at least one of the three following criteria:

2.28b(1) The individual requires access to multiple DoD facilities or access to multiple non-DoD Federal facilities on behalf of the Department on a recurring basis for a period of up to 6 months.

2.28b(2) The individual requires both physical access to a DoD facility and access, via logon, to a DoD network. Access to a DoD network must require the use of a computer with a Government controlled configuration located in a DoD facility or use of a DoD approved remote access procedure.

2.28b(3) The individual does not require remote access to DoD networks that use only the CAC logon for user authentication.

2.28 Government Facilities. The provisions of paragraph (91.32) of the applicable Performance Work Statement apply to contractor personnel working at Government facilities.

2.29 Rescission of Access to Government Facilities

2.29a Access to Government facilities is at the discretion of the Government. The Government reserves the right to rescind access by contractor personnel to Government facilities at any and all times and without presenting reason.

2.29b In each instance when contractor employees depart Naval Base Ventura County at the end of their employment with the company or firm, at the end of the POP of this procurement, upon their transfer to another procurement, and upon being denied access to Government facilities for whatever reason, the contractor shall ensure the prompt return to the Government of all of the following materials in the possession of that employee:

2.29b(1) Government-owned keys to desks, offices, etc.

2.29b(2) Common Access Cards (CACs), except for CACs issued to retired military personnel and retired civil servants on that basis

2.29b(3) Base Passes, except for passes issued to retired military personnel and retired civil servants on that basis

2.29b(4) Base stickers for the employee’s vehicles, except for stickers issued to retired military personnel and retired civil servants on that basis

2.29b(5) GFE and Government Furnished Information (GFI), with special attention to IT equipment, Critical Information (CI), and Critical Program Information (CPI)

2.29b(6) Courier pass, if issued to the departing employee

2.29c In executing the provision, the contractor may collect the materials listed in that paragraph and return them to the custody of an appropriate Government employee or direct the contractor employee to surrender these items at the Naval Base Ventura County Security Office, whichever is appropriate to the circumstances. In all cases the contractor shall follow current Naval Base Ventura County and NSWC PHD Security instructions appropriate to the circumstances.

2.30 SPECIAL CONSIDERATIONS

2.31 Emergency Operations. The provisions of paragraph (91.40) of the applicable Performance Work Statement apply to emergency operations under conditions of heightened security and Anti-Terrorism Force Protection posture.

2.32 Isolated Personnel Reporting, NOT USED

2.33 Safety

2.33 Safety

2.33a Contractor personnel shall comply with all applicable DoD, DoN, OSHA, NAVSEA, NBVC, local installation and NSWC PHD safety instructions, policies, procedures and guidance while on Government property at NSWC PHD, remote sites or travel destinations. The contractor shall request clarification of safety procedures and guidance from a Government safety observer or manager, a responsible Government employee in any case where ambiguity or confusion may arise.

2.33b Contractor personnel shall immediately report all unsafe working conditions to a responsible Government employee.

2.33c The contractor shall immediately notify Code 104 ACIO/Information Technology Division Manager of any serious contractor personnel injuries or deaths sustained in the performance of this requirement. Minor injuries not requiring immediate medical attention shall be reported to Code 104

ACIO/Information Technology Division Manager by the following business day. Notification shall be made by any practical, reliable means available to the contractor. The contractor shall cooperate with all official investigations of injuries and deaths. However, nothing in this paragraph shall be so interpreted as to deprive any person of due process or other civil rights.

2.34 Environmental Protection and Compliance

2.34a Compliance with Environmental Management System:

i. The contractor shall be subject to NSWC PHD Environmental Management Systems.

ii. Contractors working under this contract shall conform to all operational controls identified in NSWC PHD Environmental Management Systems and provide monitoring and measurement information necessary for the Government to address environmental performance relative to the goals of NSWC PHD Environmental Management Systems.

2.34b EPCRA Section 304:

i. The contractor shall provide verbal notification to the SUPERVISOR/COR/ENVIRONMENTAL OFFICER, immediately after initial applicable notifications have been made in accordance with local regulations, when an accidental chemical or hazardous substance exceeding the minimal reportable quantity is released in a Government facility. This verbal notification shall be followed by a written notification to the NSWC PHD COR, SUPERVISOR and ENVIRONMENTAL OFFICER within 24 hours.

2.40 Information Protection

2.41 Contractor personnel granted access to the NGEN/NMCI network will be required to complete Navy Information Assurance (IA) or comparable training, at the Government’s discretion, and complete and sign appropriate IA forms required to be granted continued access to Government information technology networks.

2.42 Contractor personnel occupying NSWC PHD facilities, and contractor personnel who routinely visit NSWC PHD facilities, may, at the Government’s discretion, be required as a condition of access to said facilities to sign a Certificate of Non-Disclosure (CND), also referred to as a Non-Disclosure Agreement (NDA), to protect classified and unclassified Government financial and other business sensitive information they may become aware of through proximity to Government personnel, information and spaces.

Contractor personnel may, at the Government’s discretion, be required to sign a CND (or NDA) to protect financial and other proprietary information pertaining to other contractors if the completion of the tasking in this PWS necessitates access to such information. If required, the COR shall issue CNDs/NDAs to the contractor, who will return signed CNDs/NDAs to the COR within three business days.

2.70 (Reserved)

2.80 (Reserved)

2.90 (Reserved)

3.0 Training Requirements

3.01 The contractor shall comply with all of the security requirements outlined and referenced in the Department of Defense Contract Security Classification Specification, DD Form 254 and its attachments.

3.02 The contractor shall require all prime contractor and subcontractor personnel performing this requirement to successfully complete the following training at the frequency listed in paragraphs (3.02a) and (3.02b) below and maintain currency of training for the duration of the Period of Performance:

3.02a Basic Training Specified of All Requirements TRAINING FREQUENCY OPSEC Once per fiscal year and Information Awareness Once per calendar year

3.02b Specialized Training Required for this Requirement TRAINING FREQUENCY Anti-Terrorist Force Protection Once per calendar year

3.02c Specialized Training Required for this Requirement TRAINING FREQUENCY Foreign National Counterintelligence Training Once per calendar year

3.03 The contractor shall maintain a list of personnel who have completed the training specified in paragraph (3.0) above. This list shall be submitted with a letter certifying that the list is current, complete, and accurate as of the date of submission. The list and certification shall be submitted to the COR with a copy to the Contracting Officer, within 5 days after receipt of order and quarterly thereafter. When there are any changes to contractor’s personnel and when it is specifically requested by the COR or Contracting Officer, the list and certification shall be provided within 5 days from the date of the request.