Attachment_J-1_Performance_Work_Statement.pdf

NASA GLENN RESEARCH CENTER

LEWIS FIELD

AND

PLUM BROOK STATION

PROTECTIVE SERVICES CONTRACT

PERFORMANCE WORK STATEMENT

Table of Contents Chapter 1: General Information

Introduction General Information

1.2.1 Quality Control

1.2.2 Hours of Operation

Security Requirements

1.3.2 Special Qualifications

1.3.3 General Performance Standards

1.3.4 Lautenberg Amendment and Possession of Firearms, Title 18, United States

Code, Section 922(g)(9)

1.3.5 Disqualifying Offenses for Employees

Post Award Conference/Periodic Progress Meetings Contracting Officer Representative (COR) Contractor Management Identification of Contractor Personnel Contractor Travel

1.8.1 Deployment to Other NASA Facilities Preparedness and Response Other Direct Costs

Data Rights Organizational Conflicts of Interest Phase In and Phase Out Periods Pre-Employment Investigation Standards of Conduct Drug Testing and Drug and Alcohol-Free Workforce Requirements Contractor-Furnished Items and Services

1.16.1 General

1.16.2 Top Secret Facility Clearance

Chapter 2: Personnel Security Task Summary Training Requirements and Qualifications

2.3.1 Training Requirements

2.3.2 Qualifications

Performance Objectives

2.4.1 Performance Objective 1: Initiate the Electronic Questionnaire Investigation

Process (e-QIP) for Background Investigations

2.4.2 Performance Objective 2: Process Adjudication Forms and Documentation for

Contractor Personnel

2.4.3 Performance Objective 3: Security Clearance Processing and Validation

2.4.4 Performance Objective 4: Processing of Foreign Nationals (FN) as the GRC

Assistant International Visitor Coordinator

Chapter 3: Physical Security Task Summary Training Requirements and Qualifications

3.3.1 Training Requirements

3.3.2 Qualifications

Performance Objectives

3.4.1 Performance Objective 1: Perform Perimeter Fence Inspections

3.4.2 Performance Objective 2: Prepare Design Basis Threat Report

3.4.3 Performance Objective 3: Process Risk Mitigation Documentation

3.4.4 Performance Objective 4: Photography Support

3.4.5 Performance Objective 5: Training and Education

3.4.6 Performance Objective 6: Construction and Design

3.4.7 Performance Objective 7: Critical Infrastructure Program

3.4.8 Performance Objective 8: Facility Security Manager Program

Chapter 4: Facility Security Assessment Program Task Summary Training Requirements and Qualifications

4.3.1 Training Requirements

4.3.2 Qualifications

Performance Objectives

4.4.1 Performance Objective 1: Perform Facility Security Assessments

4.4.2 Performance Objective 2: FSA Program Documentation

4.4.3 Performance Objective 3: FSA Training

4.4.4 Performance Objective 4: FSA Database Management

Chapter 5: Chemical Facility Anti-Terrorism Standards Task Summary Training Requirements and Qualifications

5.3.1 Training Requirements

5.3.2 Qualifications

Performance Objectives

5.4.1 Performance Objective 1: Perform Vulnerability Assessments

5.4.2 Performance Objective 2: CFATS Program Documentation

5.4.3 Performance Objective 3: CFATS Training

5.4.4 Performance Objective 4: CFATS Database Management

Chapter 6: Locksmith Services Task Summary Training Requirements and Qualifications Performance Objective 1: Perform Locksmith Services

Chapter 7: Security Management Systems (SMS) Program Task System Overview Training Requirements and Qualifications

7.3.1 Training Requirements

7.3.2 Qualifications

General Requirements Performance Objectives

7.5.1 Performance Objective 1: SMS Support Services

7.5.2 Performance Objective 2: ISC Control Panels and SMS Components

7.5.3 Performance Objective 3: Intrusion Detection Panels

7.5.4 Performance Objective 4: Doors

7.5.5 Performance Objective 5: Video Systems

7.5.6 Performance Objective 6: Miscellaneous SMS Hardware and Equipment

7.5.7 Performance Objective 7: Drawings, Configuration and Document Controls ..36

7.5.8 Performance Objective 9: SMS Demonstration and Testing

7.5.9 Performance Objective 10: SMS Programming and Interface Support

Chapter 8: ID Management/Badge Processing Services Task System Overview Training Requirements and Qualifications

8.3.1 Training Requirements

Qualifications Performance Objectives

8.5.1 Performance Objective 1: Badge Enrollment and Issuance Services

8.5.2 Performance Objective 2: Visitor Control Services

Chapter 9: Communications Security Task Summary Training Requirements and Qualifications

9.3.1 Training Requirements

Qualifications Performance Objectives

9.5.1 Performance Objective 1: COMSEC Account Management

9.5.2 Performance Objective 2: COMSEC Material Control

9.5.3 Performance Objective 3: National Security Systems Support

9.5.4 Performance Objective 4: NASA COMSEC Conference Attendance

Chapter 10: Classified Management Control Task Summary Training Requirements and Qualifications

10.3.1 Training Requirements

Qualifications Performance Objectives

10.5.1 Performance Objective 1: Classified Management Control

10.5.2 Performance Objective 2: Security Container Management

10.5.3 Performance Objective 3: Security Incident Inquiries and Reports

10.5.4 Performance Objective 4: Industrial Security Support

10.5.5 Performance Objective 5: Certification & Accreditation Support

10.5.6 Performance Objective 6: Security Education, Training, and Awareness

Coordination and Support

10.5.7 Performance Objective 7: Classified Visit Management

10.5.8 Performance Objective 8: The Contractor shall serve as the Alternate SCI Site

Security Manager/Special Security Representative Chapter 11: Emergency Management

Task Summary Training Requirements and Qualifications

11.3.1 Training Requirements

11.3.2 Qualifications

Performance Objectives

11.4.1 Performance Objective 1: Emergency Response—Emergency Management ..52

11.4.2 Performance Objective 2: Incident Commander (IC)

11.4.3 Performance Objective 3: Emergency Response Equipment

11.4.4 Performance Objective 4: Emergency Communications

11.4.5 Performance Objective 5: Emergency Operations Center

11.4.6 Performance Objective 6: Emergency Preparedness Planning

11.4.7 Performance Objective 7: Exercises

11.4.8 Performance Objective 8: Continuity of Operations (COOP)

Chapter 12: Security Operations Task Summary Training Requirements and Qualifications

12.3.1 Training Requirements

12.3.2 Qualifications

Performance Objectives

12.4.1 Performance Objective 1: Security Operations

12.4.2 Performance Objective 2: Patrol Operations

12.4.3 Performance Objective 3: Manage the Emergency Dispatch Center (EDC)

12.4.4 Performance Objective 4: Resource Protection

12.4.5 Performance Objective 5: Emergency Medical First Responder Program

12.4.6 Performance Objective 6: Elevated/Imminent Threat Condition Support &

Other Emergency Support

12.4.7 Performance Objective 7: Shuttle Service

12.4.8 Performance Objective 8: Event Security Support

12.4.9 Performance Objective 9: Perform Physical Security Checks

Medical Screening Requirements

12.5.1 Medical Examination Requirements for First Responders

Psychological Requirements for First Responders Physical Fitness Requirements

Chapter 13: Canine (K-9) Explosive Detection Team Task Summary Training Requirements and Qualifications

13.3.1 Training Requirements

13.3.2 Qualifications

Performance Objectives

13.4.1 Performance Objective 1: Perform K-9 EDT Operations

13.4.2 Performance Objective 2: Provide EDT Support

13.4.3 Performance Objective 3: EDT Training

13.4.4 Performance Objective 4: Maintain EDT Program Documentation

Chapter 14: Training Program Task Summary Training Requirements and Qualifications Performance Objectives

14.4.1 Performance Objective 1: Firearms Simulation Training

14.4.2 Performance Objective 2: Provide Training

14.4.3 Performance Objective 3: Firearms Range Operations

14.4.4 Performance Objective 4: Training Documentation

Appendix A: Definitions and Acronyms A.1 Definitions A.2 Acronyms

Appendix B: Applicable Documents and Forms B.1 Applicable Documents B.2 Forms

Appendix C: Weapons, Equipment and Uniform Requirements C.1 Weapon Requirements C.2 Intermediate Force Weapon Requirements C.3 Equipment Requirements C.4 Uniform Requirements C.5 Locksmiths, Badging Personnel, Emergency Dispatch Center Personnel, and Security

Management Systems Technicians (Alternate Uniform) C.6 Dress Code

Appendix D: Vehicle Requirements D.1 Vehicle Assignment

D.2 Vehicle Standards D.3 Vehicle Decal Design D.4 GRC Special Vehicles

Appendix E: Deduction Schedule E.1 General

Appendix F: Deliverables F.1 General F.2 List of Deliverables with Definitions and Frequency F.3 Titles of Standard Operating Procedures F.4 Emergency Management Deliverable Documents F.5 SMS Support Services Deliverables:

F.6 ID Management/Badge Processing Services Deliverables:

F.7 Deliverables for Classified, Sensitive and Support Programs

Appendix G: Government Furnished Equipment and Services G.1 General Requirements G.2 Government-Furnished Equipment (GFE) G.3 Government-Furnished Equipment Provided “AS-IS” in Condition and Quantity G.4 Information Technology Support Systems GFE G.5 Telephone and Network G.6 Systems and Support

Chapter 1: General Information Introduction

National Aeronautics and Space Administration (NASA) seeks to implement a strategy for comprehensive and effective security programs for the protection of people, property, operations, and information associated with the NASA mission. The goals of uniformity and interoperability of protective services across the Agency shall be achieved through standardization of requirements such as training, qualifications, and equipment. This Performance Work Statement (PWS) for protective services addresses requirements for both Lewis Field (LF) and Plum Brook Station (PBS) which collectively constitute NASA Glenn Research Center (GRC). GRC shall support this strategy through the acquisition of protective services as described in this PWS.

Work under this Firm Fixed Price (FFP) contract shall be performed in and around the Lewis Field (LF) located at 21000 Brookpark Road, Cleveland, Ohio 44135 and the Plum Brook Station (PBS) located at 3899 E. Scheid Road, Sandusky, Ohio 44870 and other areas directed by the Government and allowed by law, with primary duties generally performed at LF and PBS.

Subcontractors shall be accountable solely to the Contractor who, in turn is responsible to the Government.

The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to perform comprehensive security services as defined in this PWS except for those items specified as government-furnished equipment (GFE) and services. The Contractor’s performance shall meet or exceed the standards in this contract.

A primary and alternate Contracting Officer Representative (COR) shall be appointed to provide Government surveillance of services provided at GRC. Additional alternate CORs may be appointed to provide Government surveillance of services provided at the Center.

General Information

1.2.1 Quality Control

The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure that defective services do not recur. The Contractor’s quality control program is the means by which the Contractor ensures itself that the work complies with contract requirements. The Quality Control Plan (QCP) shall be delivered within 60 calendar days after contract award. After acceptance of the QCP, the Contractor shall receive the COR’s acceptance in writing of proposed changes to his quality control system.

1.2.2 Hours of Operation

The Contractor is responsible for conducting business for the hours required for each task.

Unless otherwise stated, services provided by armed, uniformed Security Officers shall be provided 24 hours a day, 7 days a week (24/7). Business hours are from 7:30 A.M. to 4:00 P.M., Monday through Friday, excluding Federal holidays. Unless otherwise stated, services shall be provided during business hours by non-uniformed and alternate uniformed personnel. Deviated schedules shall be only be approved by the COR, in advance.

The Contractor shall not be reimbursed when the Government facility is closed on Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS.

Noncritical position employees (unarmed) shall not work in excess of the following maximum work times:

12 consecutive hours (16 consecutive hours in emergency situations with approval)

60 hours during a 7 day work week

7 consecutive days without at least one full day off

240 hours during a 4 week period

2,500 hours during a rolling 12-month period

Critical position employees (armed) shall not work in excess of the following maximum work times:

12 consecutive hours (16 consecutive hours in emergency situations with approval by a supervisor capable of evaluating the human factors risk level for the critical role. Only during a Center or program declared emergency may 16 consecutive hours be exceeded with high level of designated approval).

60 hours during a 7 day work week*

7 consecutive days without at least one full day off* (deviations may be pre-approved at a high level for up to 18 consecutive days with 2 full days off required after the extension period)

240 hours during a 4 week period*

2,500 hours during a rolling 12 month period*

A critical position is one in which the worker's job performance can directly impact ground safety, flight safety, or mission success. Further information on critical positions can be found in NASA Procedural Requirement (NPR) 1800.1C. All other positions are considered to be noncritical.

The Contractor shall monitor off-duty employment to mitigate potential conflicts with full duty performance in support of the contract.

* Preapproval is required for deviations by a designated supervisor after consideration of human factor safety issues for the critical position.

Security Requirements Personnel performing work under this contract shall possess the appropriate personnel security clearance when required and identified. Not all tasks covered under this PWS require a personnel security clearance. Contractor personnel shall possess a current personnel security clearance based on the sensitivity of the position, which they occupy and at least equal to the highest classification of information to which they shall have access. The security requirements are in accordance with the Department of Defense Contract Security Classification Specification DD Form 254, which shall be issued upon award.

1.3.1.1 Physical Security

The Contractor shall be responsible for safeguarding all Government equipment, information, and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured.

1.3.1.2 Key Control

The Contractor shall establish and implement methods for making sure all keys and key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. Note: All references to keys include key cards. Keys issued to the Contractor by the Government shall not be duplicated. The Contractor shall develop procedures covering key control that shall be included in their QCP including turning in keys by their employees who no longer require access to locked areas. The Contractor shall immediately report occurrences of lost or duplicate keys to the COR.

If the Contractor duplicates or loses keys other than master keys, the Contractor shall re-key or replace the affected lock or locks upon direction of the Contracting Officer. However, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the Government replaces locks or re-keys, the total cost of re-keying or replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. If a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

The Contractor shall prohibit the use of Government issued keys by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or other personnel who are authorized entrance by the COR.

1.3.1.3 Lock Combinations

The Contractor shall ensure that all lock combinations are not revealed to unauthorized persons.

The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations and incorporate these procedures into their QCP.

1.3.2 Special Qualifications

The Contractor is responsible for ensuring all employees complete all required NASA training and maintain local training files and databases during execution of this contract and provide a quarterly training compliance report to the COR.

The Contractor shall obtain licenses or certifications required to successfully fulfill the contract requirements. NASA Federal standards prevail over state standards.

c. Best practices and prevailing industry practices shall be considered as the minimum acceptable standard if NASA or state standards are not established.

d. The Contractor shall ensure all employees understand and comply with approved standard operating procedures (SOPs).

1.3.3 General Performance Standards

Contract employees must be able to:

Coordinate and communicate with community partners across GRC and other Federal Agencies to support the mission.

Perform in a fast-paced environment with a small group of highly trained professionals.

Recognize and report problems.

Consistently maintain composure in different environments and difficult situations.

Be reliable, reasonable, and dependable in fulfilling obligations.

Cooperate with colleagues and clients, be pleasant to others on the job, display good-nature, and have a cooperative attitude.

Travel to attend conferences and meetings with community partners as directed by this PWS.

Complete required NASA IT Security training before being granted access to IT electronic systems.

Contract employees must possess the following:

Knowledge of relevant security systems and equipment, policies, procedures, and strategies to promote effective local security operations for the protection of people, data, property, and institutions.

Knowledge of principles and processes for providing customer service. This includes customer needs assessment, meeting quality standards for services, and evaluation of customer satisfaction.

Ability to communicate orally to convey information effectively and listening to give full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.

Ability to identify information by categorizing, estimating, recognizing differences or similarities, and detecting changes in circumstances or events and inspecting equipment to identify the cause of errors or other problems or defects.

Knowledge and experience in the operation of telecommunications systems like phones, faxes, including radio communications.

1.3.4 Lautenberg Amendment and Possession of Firearms, Title 18, United States Code, Section 922(g)(9)

The Contractor is responsible for conducting the appropriate criminal background checks to ensure all employees meet the legal requirements to perform as Security Officers. All armed Contractor personnel employed under this contract must be legally authorized to carry, possess, train with, and employ firearms and ammunition. The Lautenberg Amendment prohibits any person convicted of a crime of domestic violence from possessing firearms. No individual convicted of a felony crime shall be employed under this contract.

1.3.5 Disqualifying Offenses for Employees

Contractor personnel employed under this contract shall not be under indictment or convicted with any disqualifying offense or violation identified under the Ohio Revised Code (ORC) 4765-10-03.

Post Award Conference/Periodic Progress Meetings The Contractor shall attend post award conferences convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart

42.5. The COR and other Government personnel shall meet periodically with the Contractor to review the Contractor's performance. The COR shall apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise the Government of problems being experienced. Both parties shall take appropriate action to resolve outstanding issues.

Contracting Officer Representative (COR) The COR monitors all technical aspects of the contract and assists in contract administration and is authorized to perform the following functions: ensure that the Contractor performs the technical requirements of the contract; perform inspections in connection with contract performance: maintain written and oral communications with the Contractor; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the Contracting Officer (CO) and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel.

The CO issues a letter of designation to the COR and sends a copy to the Contractor, which states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

Contractor Management The Contractor shall provide a Contract Program Manager who shall be responsible for the performance of the work. The Contractor shall provide for a designated authority who shall act for the Program Manager in the absence of the Program Manager. The name of the designated authority shall be communicated to the COR / ACOR at the time that designated authority is designated. The designated authority’s primary duties shall not be impacted while acting on behalf of the Program Manager. The Program Manager or designated authority shall have full authority to act for the Contractor on all contract matters. The Program Manager or designated authority shall be on-site during business hours.

Identification of Contractor Personnel All contract personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties, are required to identify themselves as such to avoid creating an impression that they are Government officials.

They must also ensure that all documents or reports produced by the Contractor are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

Contractor Travel The Contractor shall be required to travel within GRC and throughout the continental U. S.

(excludes Alaska and Hawaii) during the performance of this contract to attend meetings, conferences, and training as identified within each task. The Contractor may be required to travel to off-site training locations and to ship training aids to these locations in support of this PWS.

The Contractor is responsible for all cost associated with travel unless otherwise specified by the Government.

1.8.1 Deployment to Other NASA Facilities Preparedness and Response The Contractor shall have the capability to support emergency operations to deploy personnel

Agency-wide to support unforeseen incidents and emergencies such as aircraft crashes, environmental and weather disasters, and incidents of national significance, terrorist incidents, and other catastrophic events that require security or protective services. The Contractor shall have the capability to deploy within 12 hours of notification.

Although the Contractor shall have the capability to respond to emergency operations within the FFP portion of the contract, additional costs to support contingency operations shall be covered either through a contract change clause or by the CO issuing a Task Order.

The Contractor shall maintain a roster of current deployable Contractor employees and be prepared to deploy a five-person security team from the Contactor’s staff consisting of one security supervisor and four Security Officers. This team shall be capable of performing security duties for a period of 7 calendar days or until relieved, but not to exceed 30 calendar days. The Contractor’s security team shall be ready for deployment within 12 hours of notification by the COR. The Contractor shall keep staff to cover security positions at GRC and minimum staffing requirements should not be impacted by deployment.

Other Direct Costs The Contractor shall be responsible for the cost of office supplies, replacement toner or ink, paper, or other office support supplies. This includes travel and conference fee costs throughout the contract life, reproduction, shipping expenses associated with training activities and visits to Contractor facilities, and rent for suitable training venues when necessary.

Data Rights The Government has unlimited rights to all documents and materials produced under this contract. All documents and materials including the source codes of any software produced under this contract shall be Government owned and are the exclusive property of the Government with all rights and privileges of ownership and copyright. These documents and materials may not be used or sold by the Contractor without written permission from the CO. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose.

Organizational Conflicts of Interest Contractor and Subcontractor personnel performing work under this contract may receive, have access to, or participate in development of proprietary or source selection information (e.g., cost or pricing information, budget information or analysis, specifications or work statements, etc.) or perform evaluation services, which may create a current or subsequent Organizational Conflict of Interest (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the CO immediately whenever it becomes aware that such access or participation may result in actual or potential OCI and shall promptly submit a plan to avoid or mitigate any such OCI to the CO. The Contractor’s mitigation plan shall be determined to be acceptable solely at the discretion of the CO. If the CO determines that any such OCI cannot be satisfactorily avoided or mitigated, the CO may request other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements to prevent OCI.

Phase In and Phase Out Periods The Contractor shall have personnel on board, during the 60 calendar day phase in and phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements to commence full performance of services on the contract start date.

Pre-Employment Investigation The Contractor shall ensure that no employee has a felony conviction.

No employee may have a misdemeanor conviction that reflects on the individual’s suitability.

Persons convicted of, or under indictment for, a misdemeanor crime of domestic violence are prohibited from employment as an armed Security Officer.

All contract employees must meet the requirement of position-risk determination and NASA access suitability. The Contractor is required to conduct a pre-employment suitability investigation for all individuals and for existing employees with expiring investigations. The investigation shall include the following:

1. Search of police files in the area of residence for a period of five years.

2. Conduct inquiries of former employers for a period of five years.

3. Research information that may reflect on the suitability of the employee to perform security duties under this contract.

Standards of Conduct The Contractor shall maintain a level of professionalism that prevents a lack of professionalism which includes, but is not limited to, sleeping, listening to/utilizing unauthorized electronic devices, watching television, reading books, newspapers and other material not connected with official duties (e.g., post orders), misuse of Government property, theft, unreasonable delays or failure to carry out assigned tasks, conducting personal affairs during duty hours and refusing to render assistance or cooperate in upholding the intent of worksite security or failure to cooperate in quality assurance and/or safety inspections or other investigations conducted by the Government.

Each Contractor employee shall adhere to general standards of conduct that reflect honorably upon themselves, their employer, NASA, and the Federal Government.

The Contractor shall develop a Standards of Conduct SOP for all contract employees to include special details concerning armed Security Officers.

Drug Testing and Drug and Alcohol-Free Workforce Requirements The Contractor shall comply with federal policies on drug-and alcohol-free work places and NASA FAR Supplement Subpart 1823.5, Drug-Free Workplace. The Contractor shall

Institute and maintain a program for achieving a drug- and alcohol-free workforce.

Provide a minimum of pre-employment, reasonable suspicion, random, post-accident, and annual testing of Contractor employees in sensitive positions for use, in violation of applicable law or Federal regulation, of alcohol or a controlled substance.

Establish its testing and rehabilitation program in cooperation with other Contractors or organizations.

Submit the plan for drug testing and rehabilitation to the CO for approval and concurrence by the COR.

Conform to the Mandatory Guidelines for Federal Workplace Drug Testing Programs published by the Department of Health and Human Services (59 FR 29908, June 9, 1994) and the procedures in 49 CFR part 40, Procedures for Transportation Workplace Drug Testing Programs, in which references to “DOT” shall be read as “NASA.”

The Contractor shall use the split sample method of collection in accordance with these documents.

Contractor-Furnished Items and Services

1.16.1 General

The Contractor shall furnish all supplies, equipment, facilities, and services required to perform work under this contract that are not listed as GFE or Government-furnished services (GFS) in this PWS.

1.16.2 Top Secret Facility Clearance

The Contractor shall possess and maintain a Top Secret facility clearance from the Defense Security Service. The Contractor’s employees, performing work in support of this contract shall have been granted the personnel security clearance commensurate with the required access identified in this PWS.

Chapter 2: Personnel Security Task

The Contractor shall provide support to the Personnel Security Program.

Summary This effort includes, but is not limited to, background investigations, adjudications, foreign national (FN) access management (FNAM), and identity management.

Training Requirements and Qualifications

2.3.1 Training Requirements

Contractor personnel shall complete the following NASA computer-based training courses upon assignment or no later than 60 calendar days and prior to performing associated duties.

1. Accessing Electronic Questionnaires for Investigations Processing (e-QIP)

2. E-QIP for Program and Business Managers

3. Initiating Requests in e-QIP

4. Reviewing and Approving Requests in e-QIP

5. Solutions to Common Issues in e-QIP

6. Identity Management and Account Exchange (IdMAX) Identity Credential and Access Management (ICAM) Overview Training

7. IdMAX ICAM Requestor and Sponsor Role Training

8. Contractor personnel supporting adjudications shall complete the Office of Personnel Management (OPM) Essentials of Suitability Adjudication Program training upon assignment or no later than 60 calendar days or first available course.

2.3.2 Qualifications

Contractor personnel supporting background investigations and adjudications shall possess and maintain a Top Secret personnel security clearance prior to performing associated duties.

The Contractor shall hire personnel who are trained on the procedures to process and complete the investigative questionnaires.

The Contractor shall remain knowledgeable of the process for how permanent employees, temporary employees, remote users, FNs, tenants, or visitors gain access to the Center.

Contractor personnel shall be proficient with computer systems with one-year experience with Microsoft Office and be proficient with the e-QIP system.

Performance Objectives

2.4.1 Performance Objective 1: Initiate the Electronic Questionnaire Investigation

Process (e-QIP) for Background Investigations

The Contractor shall

Initiate background investigations using the OPM (e-QIP) system for both civil servant and Contractor personnel within three business days of notification from the Government Personnel Security Specialist, unless notified the background investigation is considered a priority case. Priority background investigations shall be initiated within one business day.

The Contractor shall complete all the necessary functions in the OPM e-QIP system to include completing the Agency Use Block form to ensure the proper investigation type and accounting information is initiated.

Be knowledgeable of the different types of forms utilized during the investigative process.

The forms include, but are not limited to Standard Form (SF) 86, SF 85, SF 85P, and Official Form (OF) 306.

Advise civil servants and Contractor personnel on the proper procedures for completing investigative questionnaires to minimize the OPM rejection rate including collection and incorporation of supporting data. Contractor personnel shall send a high priority e-mail to those individuals whose background investigation is initiated with specific instructions and the timeline for completing the background investigation process within one business day.

Interview applicants to resolve issues that arise as part of the background investigation process.

Upon the applicant completing the background investigation process, review the applicants’ background investigation documentation to ensure it is completed properly and according to OPM standards. Submit all completed background investigation documents with a rejection rate of less than ten percent to the Personnel Security (PERSEC) Specialist.

Search all applicable databases, to include but not limited to the National Crime Information Center (NCIC), OPM Personnel Investigations Processing System, Immigration and Naturalization Service, Security/Suitability Investigations Index and Defense Central Index of Investigations, and determine if reciprocity can be granted for civil servant and Contractor personnel that have been previously investigated. The Contractor shall provide supporting documentation that shows the investigation was performed and the results. The Contractor shall obtain copies of previous investigations to support the adjudication process.

Verification of a current background investigation shall be conducted within two business days of notification of a new hire Contractor through the OPM Central Verification System for reciprocity prior to a new e-QIP initiation.

Track all background investigations returned by OPM for discrepancies and shall ensure all necessary corrections are made by the OPM due date or within five business days.

Provide assistance and guidance to various contract company human resource representatives and facility Security Officers as they request access to the Center’s physical and logistical resources.

Manage personnel security records including, but not limited to, requests for access, copies of completed investigative questionnaires, releases of information and any supporting data, results of database searches, and adjudication process results. Records shall be maintained as hardcopy files and stored in the personnel security file room so that immediate access is available, and kept current as long as the person has access to GRC. Once the person no longer requires access, the files are to be maintained for two years. If after the two-year period, the person does not require access; all material in the file shall be destroyed.

Personnel security files that contain Personal Identifiable Information (PII) shall be treated in accordance with PII regulations.

Maintain an electronic database / spreadsheet of all personnel security-related activities to track civil servant and Contractor personnel as they proceed through the investigation process. The Contractor shall ensure the data contained in the electronic database is accurate and complete. The Contractor shall immediately resolve data discrepancies discovered and update the e-QIP tracker.

2.4.2 Performance Objective 2: Process Adjudication Forms and Documentation for Contractor Personnel

The Contractor shall process investigative forms, prepare documentation for adjudication, conduct database inputs and queries, receive and process documentation from other agencies, manage personnel security records and identity management, provide metrics, and support reviews to evaluate quality of services provided.

The Contractor shall complete all adjudications and associated documentation and provide the recommendation within 15 business days from receiving the completed background investigation to the PERSEC Specialist for final review and concurrence.

2.4.3 Performance Objective 3: Security Clearance Processing and Validation The Contractor shall

Support initial security clearance background investigations, the annual security clearance revalidation process and the reinvestigation of security clearances held by civil servants including completing documentation and providing a security clearance briefing and debriefing.

Initiate and complete a Classified Information Non-Disclosure Agreement, conduct a security clearance briefing or debriefing, update the NASA Clearance Tracking System, and update the employee’s investigative review sheet within five business days after submission of the applicant’s background investigation to OPM or upon notification of the applicant retiring or termination of NASA employment.

Support development and maintenance of personnel security records.

d. Conduct background investigations, citizenship and security clearance verifications, and validation requests within five business days of receiving the request from the PERSEC Specialist or other government or private agencies.

2.4.4 Performance Objective 4: Processing of Foreign Nationals (FN) as the GRC Assistant International Visitor Coordinator

The Contractor shall

Support the GRC FNAM program by functioning as the Assistant International Visitor Coordinator (IVC). Contractor personnel performing functions as the assistant IVC shall possess and maintain a Secret personnel security clearance.

Coordinate and work with the Center FNAM requestors and sponsors to process all FN access requests for onsite visitors, offsite visitors meeting with NASA GRC organizations, and facilitate Center to Center visit requests.

Process access requests through the NASA IdMAX system and review all FN visitor access control plans to ensure the requirements for each visit are captured and accurate.

Complete the database checks through Visual Compliance, I-94, Systematic Alien Verification for Entitlements (SAVE), NCIC, Federal Bureau of Investigations File, National Criminal History Check (NCHC), and GRC Counterintelligence Office checks for each FN access request.

Review each FN access request record for accuracy and forward the record to the GRC Export Control Office for approval for all non-designated country FN visitors and to the HQ NASA Office of International and Interagency Relations (OIIR) Office for FN visitors who are from designated countries.

Transmit final approval in the NASA IdMAX system. The Contractor shall generate and distribute a Gate Memorandum (memo) to the respective LF or PBS Main Gate Badging Office and the FN visit host upon receiving approval from Export Control or OIIR.

Conduct and develop training for FN Access Management Requestors and Sponsors and review and update SOPs as needed.

Ensure all Center organizational escorts are properly trained using the SATERN platform.

The Contractor shall conduct escort briefings for all non-tenant organizations.

Chapter 3: Physical Security Task

The Contractor shall provide support to the Physical Security Program.

Summary The Physical Security Program implements security measures designed to deny unauthorized access to facilities and resources and to protect personnel from damage or harm. The Facility Security Assessment (FSA) Program, the Chemical Facility Antiterrorism Standards (CFATS) Program, and Locksmith Services covered in chapters 4, 5, and 6 are subsets of the Physical Security Program.

Training Requirements and Qualifications

3.3.1 Training Requirements

Contractor personnel shall have completed the following within the last five years:

United States Army Corps of Engineers (USACE) Security Engineering Course

USACE Electronic Security Systems Design Course

Interagency Security Committee (ISC) Risk Management Process Training Program

3.3.2 Qualifications

Contractor personnel shall

Possess a minimum of five years of experience performing a combination of vulnerability assessments, physical security inspections, and physical security surveys.

Be certified from a 40-hour instructor led course of instruction, which specializes in security or physical security. Technical experience with intrusion detection systems, Closed Circuit Television (CCTV), and physical access control systems is preferred. The Government reserves the right to review the program of instruction to determine acceptance as an industry recognized security or physical security course.

Must be proficient with windows-based programs including the Microsoft Office Suite.

Possess critical thinking skills, and use logic and reasoning to identify strengths and weaknesses of solutions, conclusions or approaches to problems.

Must be able to provide written and oral presentations.

Performance Objectives

3.4.1 Performance Objective 1: Perform Perimeter Fence Inspections The Contractor shall perform quarterly assessments of the LF and PBS perimeter and submit work orders and a formal report which details a full inspection of the perimeter and all fences and gates including supporting lighting, barriers, CCTV within one week of completion to document actions performed. The report shall include descriptions, data, and photographs of deficiencies, and the status of all work orders submitted to the maintenance Contractor.

3.4.2 Performance Objective 2: Prepare Design Basis Threat Report The Contractor shall develop, update, and prepare as necessary a Design Basis Threat (DBT) for the Center annually or in in conjunction with updates to the ISC. The Contractor shall use all available resources and coordinate with the NASA GRC Physical Security Program Manager, Counterintelligence/Counterterrorism (CI/CT) Office, and local law enforcement. The Contractor shall submit the DBT to the NASA Physical Security Program Manager for acceptance.

3.4.3 Performance Objective 3: Process Risk Mitigation Documentation The Contractor shall

Develop, coordinate, and document risk mitigation for security assessment findings and observations.

Prepare GRC Form 1600, Request for Exception or Waiver to Security Program Requirement Instructions, to identify and document risk of noncompliance with security requirements, in coordination with the NASA Physical Security Program Manager and facility management or owner personnel.

Develop a Plan of Action and Milestones in conjunction with GRC Form 1600 risk waiver for each issue of noncompliance and update as necessary until corrected or a waiver is approved in coordination with the NASA Physical Security Program Manager and facility management or owner personnel..

3.4.4 Performance Objective 4: Photography Support

The Contractor shall photograph facility conditions for use in reports, training, and education.

3.4.5 Performance Objective 5: Training and Education

The Contractor shall

Develop, review, and conduct training in support of the Physical Security Program.

Provide staffing and when necessary develop topics for security awareness events in conjunction with other Center-level events. Support shall not exceed five events per calendar year during typical business hours.

3.4.6 Performance Objective 6: Construction and Design

The Contractor shall

Review drawings, blueprints, and project requirement documents to determine compliance with security requirements.

Participate and attend meetings in support of construction projects or design reviews.

Provide formal reports with comments, observations, justifications, and where appropriate, citations of security compliance or reference documents.

3.4.7 Performance Objective 7: Critical Infrastructure Program

Support the review of GRC’s infrastructure or facilities and make formal recommendations to add, delete, or confirm NASA critical infrastructure (NCI) in support of NASA and GRC’s mission annually or as directed.

Participate and attend meetings.

Provide formal reports with comments, observations, justifications, and where appropriate, citations of security compliance or reference documents.

Develop and process formal requests for changes to the NCI program, to add, modify, or delete assets.

3.4.8 Performance Objective 8: Facility Security Manager Program The Contractor shall

Provide support to the Facility Security Manager (FSM) Program.

Develop and provide training as necessary to FSMs, facility managers, and building managers.

Review facility security plans (FSPs) for compliance and content, and assist with the development, preparation, and update of FSPs.

Update the FSP template as necessary when new requirements are identified.

Organize, participate, and attend meetings as necessary.

Chapter 4: Facility Security Assessment Program Task

The Contractor shall support the FSA Program.

Summary The FSA Program evaluates the Center and facilities to identify vulnerabilities and ensure compliance with NPR 1620.3A, NPR 1620.2A, and ISC Risk Management Process for Federal Facilities: An Interagency Security Committee Standard, (with Appendixes) requirements.

Training Requirements and Qualifications

4.3.1 Training Requirements

Contractor personnel shall complete the following training upon assignment and no later than 60 calendar days or first available course:

IS-890a, Introduction to the ISC.

IS-891, ISC: Facility Security Level Determinations for Federal Facilities (FOUO).

IS-892, Physical Security Criteria for Federal Facilities (FOUO).

IS-893, Facility Security Committees.

Contractor personnel shall complete the following training within the last five years:

USACE Security Engineering Course

USACE Electronic Security Systems Design Course

ISC Risk Management Process Training Program

4.3.2 Qualifications

Contractor personnel shall

Possess a minimum of five years of experience performing a combination of vulnerability assessments, physical security inspections, and physical security surveys.

Be certified from a 40-hour instructor led course of instruction, which specializes in security or physical security. Technical experience with intrusion detection systems, CCTV, and physical access control systems is preferred. The Government reserves the right to review the program of instruction to determine acceptance as a qualified security or physical security course.

Must be proficient with the Microsoft Office Suite.

Possess critical thinking skills, and use logic and reasoning to identify strengths and weaknesses of solutions, conclusions, or approaches to problems.

Must be able to provide written and oral presentations.

Performance Objectives

4.4.1 Performance Objective 1: Perform Facility Security Assessments The Contractor shall perform FSAs or vulnerability assessments and prepare formal reports and documentation.

Facilities rated Level I and II shall be subject to an initial FSA and every five years thereafter unless program or mission changes. There are currently 274 facilities at these levels.

At a minimum, facilities rated Level III, IV, and V shall be subject to an initial FSA and every three years thereafter unless program or mission changes. There are currently 57 facilities at these levels.

4.4.2 Performance Objective 2: FSA Program Documentation

The Contractor shall

Prepare formal FSAs in accordance with the NPR and ISC schedules within 30 calendar days of previous facility assessment.

Assist with the development and preparation of risk mitigation waivers or exceptions as documented on GRC Form 1600, GRC Request for Exception or Waiver to Security Program Requirement Instructions.

Complete NASA Form 1805, Facility Security Level (FSL) Determination Matrix, for each facility or building in conjunction with the FSA unless program or mission changes require more frequent reevaluation.

4.4.3 Performance Objective 3: FSA Training

The Contractor shall provide training required by NASA in support of the FSA Program.

4.4.4 Performance Objective 4: FSA Database Management

The Contractor shall

Perform tasks as required through Web-based databases and update information using eRoom or SharePoint interface hosted on a GFE Web-based site.

Update spreadsheets monthly to ensure information is current.

Coordinate with other NASA organizations as necessary to ensure that the database information is current.

Update passwords as necessary to maintain access.

Chapter 5: Chemical Facility Anti-Terrorism Standards Task

The Contractor shall support the CFATS Program including the tasks under 6 CFR Part 27, Chemical Facility Anti-Terrorism Standards.

Summary The CFATS program identifies and regulates…