SOW_HDL_Assessment_240314.docx

UNCLASSIFIED

NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY

Office of Contract Services/MS S84 7500 GEOINT Drive Springfield, Virginia 22150-3164

STATEMENT OF WORK

Leadership Assessment (HDL)

(U) Overview: 14 March 2024 National Geospatial Intelligence Agency (NGA) Culture and Leadership Excellence (HDL) is focused on advancing NGA culture through leadership excellence and integrating elements of empathy, inclusion, and psychological safety through learning opportunities, partnerships, and use of technology. The office develops values-based leaders who create a culture where people thrive.

(U) Scope:

Under this Statement of Work (SOW), NGA/HDL will procure a web-based assessment platform for personnel to complete assessments; coaches able to manage the assessment; access, view, download personnel and coach reports. The assessment platform will be used in a wide variety of coaching and development situations and work settings, focusing on the impact of emotional intelligence. Personnel will access and input data into the tool via the web-based platform. The tool will evaluate and generate an assessment to the person inputting the data and the coach. The coach will use the assessment to begin the process of developing a leadership development curriculum.

(U) Characteristics:

The Assessment Tool will enable personnel and coaches to tailor their sessions by providing the following:

· Individual, 360, and leadership assessment instruments;

· Assessment measures, scores, and reports five (5) elements and applicable sub-elements of Emotional Intelligence: Self-expression, Interpersonal, Decision Making, Stress Management; and Self-perception.

· Personnel reports presenting results in a clear and useable format without requiring in-depth knowledge of Emotional Intelligence concepts;

· Coaches report including deeper analysis of personnel results as well as inconsistency index, positive and negative impression index, omitted items, response distribution, and confidence intervals;

· Assessment presenting data reliability, data validity, and norm groups used in the instrument analysis and reporting; and

· Familiarization training or briefing on web-based platform, Emotional Intelligence model, Assessment reports for personnel and coach.

(U) Deliverables:

The web-based platform will provide:

· Online access for a minimum of two concurrent HDL employees to assign an assessment instrument to select personnel and coach

· Online access for the personnel being assessed to complete the assessment tool, save, print, and disseminate generated report

· Ability for HDL to monitor the number of assessments available and used, by name and date

· Tools to assess Individual, 360, and leadership assessment instruments

(U) Period of Performance:

The period of performance for this contract is a 12-month base year, with two (2) option years.

(U) Place of Performance:

The Contractor will deliver a web-based platform at contractors facility and accessed virtually.

(U) Security Information:

Unclassified Work Performance Security Requirements Uncleared Contractor personnel are authorized to work on this contract at the Unclassified level, with access up to DoD Controlled Unclassified Information (CUI) at the Contractor site without the requirement of a security clearance.

Uncleared Personnel Security Requirements Any Contractor personnel working with CUI information must receive a favorable HSPD-12 and/or HSPD-12 Tier 1 adjudication prior to accessing CUI information. Contractor personnel who require access to CUI for 60 days or less must receive a favorable HSPD-12 adjudication. Contractor personnel who require CUI access for more than 60 days must receive a favorable HSPD-12 Tier 1 adjudication. NGA will sponsor the HSPD-12 and HSPD-12 Tier 1 background investigation for Contractor personnel as needed.

Foreign nationals are not permitted to perform unclassified work under the terms of this contract without prior written approval from the Contracting Officer (CO) or the COR. Should NGA identify the use of unauthorized personnel, the CO may direct the Contractor, at its own expense, to remove and replace any unauthorized Contractors, Subcontractors, or other personnel performing on the contract. Such action may be taken at the NGA's discretion without prejudice to its rights under any other contract provision, e.g., termination for default.

Uncleared Contractor personnel visiting NGA facilities or other sites may receive the appropriate visitor badge and be escorted, as appropriate. The Contractor will return the visitor badge at the end of each visit day.

Physical Security Requirements Contractor personnel are forbidden from bringing prohibited or unauthorized items into any NGA installation or other secure facility covered under this contract. These items include weapons, cell phones, cameras, two-way pagers, laptops, recording devices of any kind, flash drives, or any other removable media. Exceptions may be granted by NGA Security upon the Contractor’s request. If granted, Contractor personnel must bring documentation showing approval prior to entering with the item(s). Violations may subject the Contractor and its offending personnel to civil and/or criminal liability IAW applicable laws and regulations governing access to secure Government facilities.

Information Security Requirements NGA must have the sole authority to determine whether, and to what extent, protected information must be provided to the Contractor under the terms of the contract. The Contractor must not access, download, print, or further disseminate any unclassified information outside the execution of the defined contract requirements without the guidance and written permission from the COR.

When the Contractor receives protected information under the terms of this contract, the Contractor will comply with all applicable NGA, DoD, and IC information security policies for the proper marking, handling, processing, storing, and safeguarding of unclassified and CUI material. The Contractor will ensure that document markings are given the lowest possible security classification to maximize dissemination while still maintaining the information’s confidentiality and integrity as necessary.

Access to CUI will be pursuant to DFARS clause 252.204.7012. The prime contractor must include this clause, including paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support or for which subcontract performance will involve covered defense information, including subcontracts for commercial items, without alteration, except to identify the parties. The Contractor must determine if the information required for Subcontractor performance retains its identity as covered defense information and will require protection under this clause. Contractor personnel must not release any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless the COR has given prior written approval or in performance of a project that has been scoped and negotiated by NGA.

NGA will assess and authorize Contractors to process unclassified information on government-owned information systems, conduct oversight of such information system processing, and provide information system security guidelines IAW with FAR clause 52.204-21 and other information system security control policies, standards, and procedures. Contractor will be responsible for executing specific provisions under the contract for the accreditation of classified information systems, and upon request, must provide the COR a written statement confirming accreditation compliance with the minimum information systems requirements established in the DD254. The Contractor must include the substance of FAR clause 52.204-21 in subcontracts under this contract (including subcontracts for the acquisition of commercial products or commercial services, other than commercially available off-the-shelf items), in which the Subcontractor may have federal contract information residing in or transiting through its information system.

In accordance with FAR Part 4.7 and FAR clause 52.215-2, the Contractor may retain one archival copy of any Government-furnished information provided to the Contractor during the course of performance of the contract, subject to Contractor following relevant data safeguarding practices and CUI restrictions. The disposition of such Government-furnished information is otherwise solely at the discretion of the Government. As directed by the NGA CO or COR, the Contractor will destroy or return to NGA all Government-furnished information upon contract termination or when no longer required for contract performance.

Cybersecurity Requirements The Contractor must, at a minimum, implement 10 U.S.C. Sections 391 and 393 along with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” requirements.

If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor must require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline (https://www.fedramp.gov/resources/documents/) In the event that the Contractor discovers a cyber incident that affects a covered Contractor information system or covered defense information residing therein, or that affects the Contractor’s ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor must —

1. Notify the DoD Cyber Crime Center (DC3) and the COR in writing within 72 hours of incident discovery

1. Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review must also include analyzing covered Contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor’s network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor’s ability to provide operationally critical support.

In the event the Contractor discovers and isolates malicious software in connection with a reported cyber incident, the Contractor must submit the malicious software to DC3 in accordance with instructions provided by the COR. The Contractor should NOT send the malicious software to the COR image1.jpeg