NPSC ER II Draft PWS.pdf

80GSFC28R0002-SS

NASA Protective Services Contract - East Region

(NPSC-ER) II

DRAFT ATTACHMENT J-01

DRAFT

PERFORMANCE WORK STATEMENT (PWS)

80GSFC28R0002-SS Draft Attachment J-01

TABLE OF CONTENTS

ANNEXES

APPENDICES

INTRODUCTION AND OVERVIEW

1. GENERAL CONTRACT REQUIREMENTS

1.1. Contract Management

1.2. Business Management

1.3. Safety and Health

1.4. Quality Plan

1.5. Environmental Management

1.6. Information Technology (IT)

1.7. Records Management

1.8. Vehicle Management

2. INFOSEC AND COMSEC

3. EMERGENCY MANAGEMENT

3.1. Emergency Preparedness

3.2. Emergency Operations

3.3. Continuity Of Operations (COOP)

3.4. Test, Training and Exercise (TT&E)

4. PROTECTIVE SERVICES COMMUNICATIONS CENTER (PSCC)

5. PHYSICAL SECURITY SUPPORT

5.1. Locksmith Services

5.2. Electronic Security System (ESS) Services

6. SECURITY OPERATIONS

6.1. Security and Security Police Services

6.1.1. Emergency Response Team (ERT) and K9 Operations

6.1.2. Traffic Enforcement

6.1.3. Criminal Violation Enforcement

6.1.4. Investigations

6.2. Weapons Storage Areas (Security Armory)

6.3. Flag Protocol

6.4. Internal Security Education and Training

6.5. NASA Physical Agility Standards for Armed Personnel

7. ICAM

8. RESERVED

ANNEXES

J-01.1 Armstrong Flight Research Center (AFRC) Annex J-01.2 Glenn Research Center (GRC) Annex J-01.3 Goddard Space Flight Center (GSFC)/Independent Verification and Validation

(IV&V) Annex J-01.4 NASA Headquarters (HQ) Annex J-01.5 Langley Research Center (LaRC) Annex J-01.6 Wallops Flight Facility (WFF) Annex

APPENDICES

Appendix 01 Position Table Appendix 02 Deduction Schedule for Non-Conforming Services Appendix 03 Screening Standards for Armed Personnel Appendix 04 Uniforms, Equipment and Grooming Requirements Appendix 05 Vehicle Requirements Appendix 06 Compliance Documents List Appendix 07 Acronyms Appendix 08 Ordering Matrix

INTRODUCTION AND OVERVIEW

National Aeronautics and Space Administration (NASA) requires comprehensive and effective protective services to protect the people, property, operations, and information associated with the NASA mission.

This PWS addresses the scope and requirements for protective services in the following areas:

• Information Security (INFOSEC) and Communications Security (COMSEC)

• Emergency Management

• Protective Services Communication Center (PSCC)

• Physical Security Support

• Security Operations

• Identity Credential and Access Management (ICAM)

The East Region includes NASA HQ (HQ), Goddard Space Flight Center (GSFC), Glenn Research Center (GRC), Langley Research Center (LaRC), Armstrong Flight Research Center (AFRC), and Wallops Flight Facility (WFF), as well as all nearby component facility, Independent Verification and Validation (IV&V), and other areas directed by the Government.

Note: Some tasks in this PWS support all Centers throughout the Agency.

1. GENERAL CONTRACT REQUIREMENTS

The requirements outlined below are applicable to all functions identified in this PWS.

The Contractor is responsible for performing the overall and day-to-day operations of the Protective Services requirements in this PWS. The Contractor shall provide all labor, personnel, uniforms, range facilities (when indicated in Annex), materials, Electronic Controlled Device (ECD) batteries and/or cartridges, equipment (including safety equipment), supplies (including office supplies), transportation (including shipping expenses), supervision, management, and any other items necessary to successfully perform the requirements and task associated with this PWS, at the frequency and hours specified for NASA on a 24-hour, 7 days per week basis, unless otherwise specified or indicated as Government Furnished in this PWS or Annexes. The Contractor is also responsible for purchasing and providing training, non-lethal marking ammunition rounds, duty ammunition and targets for both armed contract personnel and NASA Special Agents. All training and ammunition must comply with NASA Procedural Requirements (NPR) standards and utilize the NASA Standard Target (Form 1832). Range ammunition must meet both range requirements and NASA standards.

The Contracting Officer’s Representative (COR) and the Annex Contracting Officer’s Representatives (Annex COR) (for their respective annex) have been delegated authority by the Contracting Officer (CO) to provide written technical direction to provide clarification of the contract’s general description of the scope of work to include approaches, solutions, designs, refinements or shifts within tasks, or inquiries related to the general tasks and requirements in the PWS and Annexes.

The Contractor shall possess and maintain a Top-Secret facility clearance from the Defense Counterintelligence and Security (DCSA). Employees performing work under this contract shall have been granted personnel security clearance commensurate with the required access identified in Appendix 01, Position Table, prior to working the position, unless otherwise approved in writing by the Annex COR.

The Contractor may be requested to deploy personnel Agency-wide and support surges of activities and tasks that are considered above normal workload fluctuations. Special circumstances such as but not limited to launch and landing support for aerospace vehicles, mutual aid to surrounding community, emergency assistance to other NASA Centers, security threats, and special events. The labor and travel costs incurred in support of surge activities shall be processed through the Task Order (TO) funding review and approval process.

The Contractor shall be prepared to implement increased security safeguards and countermeasures in response to elevated threat levels based on the Department of Homeland Security National Threat Advisory System or other credible threat indicators.

Specific requirements for each location may be detailed in the applicable Annex attached to this PWS. All services listed in this PWS shall be provided to each Annex, unless otherwise noted in the Ordering Matrix. Additional requirements, if necessary, are noted in the Ordering Matrix and identified in the appropriate line item within the Annex. The Government may require, and the Contractor shall, perform additional requirements within the scope of services listed in this PWS on an indefinite-delivery indefinite-quantity (IDIQ) basis. Such IDIQ work will be subject to TOs issued in accordance with the ordering procedures specified in the contract. The Contractor shall perform IDIQ work without impact to the requirements described herein and Annexes.

IDIQ TOs may be issued in support of protective services requirements at the locations identified within the East Region as well as at other NASA Centers and facilities.

The Government considers the actions, activities and behaviors described in Appendix 02, Deduction Schedule for Non-Conforming Services, as serious non-conformances requiring immediate corrective action by the Contractor and evaluation by the Government.

The Contractor shall safeguard all Government equipment, information, and property provided for Contractor use.

All positions shall be filled as prescribed in Appendix 01, Position Table. Employees are not permitted to cover more than one post simultaneously, unless approved in writing by the Annex

COR.

All Government-required travel shall be processed through the TO funding review and approval process, except for travel related to NASA Basic Training Standard (NBTS). Training and any associated travel costs for NBTS shall be borne by the Contractor. NBTS training schedules shall be coordinated through NPSTA and approved by the NASA HQ NPSTA Program Manager.

Note: NBTS training is not conducted during the months of November through January.

Unless otherwise specified by the Annex CO or Annex COR, the Contractor shall adhere to established work processes in effect at the time of contract phase-in and full performance, including Post Orders, Standard Operating Procedures (SOP), and Emergency Action Checklists

(EAC).

Business days are defined as Monday through Friday, excluding weekends, and federal holidays.

Business hours are defined as those listed for each position in Appendix 01, Position Table, and shall follow the time zone of the applicable Annex. Hours may not be altered without prior written approval from the Annex COR.

In the event of a Center closure, delayed opening, or early dismissal, the Contractor shall seek technical guidance and follow Annex COR direction regarding post requirements.

1.1. Contract Management

The Contractor shall:

A. Establish, document, and maintain an adequate hierarchical command structure with full authority to meet all requirements of this PWS. The structure may include up to three tiers, consisting of the following ranks: Commander (Site Manager), Captain, and Lieutenant, in accordance with DRD 1.1-1, Management, Staffing, and Continuity of Service Plan. The Contractor shall define staffing levels, procedures, and practices to ensure effective fulfillment of contract requirements by submitting a Protective

Services Staffing Plan in accordance with DRD 1.1-1, Management, Staffing, and Continuity of Service Plan.

B. Designate a Program Manager (PM) which must be physically/geographically located at NASA HQ, who is responsible for the administration of each Annex (through Site Managers (SM) covered by this PWS for the administration and technical supervision of the Contractor’s employees. The PM shall be the primary representative and have full autonomous authority to act on matters pertaining to the services under this contract and Annexes, across all functions and acts as primary interface between the Contractor, the CO, and COR. The PM shall not also serve as a Site Manager. The PM must promptly notify the CO and COR of any situations that may adversely impact the timely and cost-effective delivery of quality products and services under this contract.

C. Require the PM to be available to the CO and COR(s) 24 hours a day, 7 days a week, return calls or messages within 60 minutes, and work from their on-site office each business day, or from one of the locations included in this PWS, unless otherwise approved by the Regional COR.

D. Designate a SM as the single point of contact at each Annex covered by this contract.

The SM must be physically located at the Annex and is responsible for: the administration and technical supervision of Contractor employees, acting as the PM primary representative at the Annex and operating location. The SM serves as the PMs primary representative at the Annex and operating location, with full delegated authority to act on all matters related to the services provided under the applicable Annex. The SM shall also serve as the primary interface with the Annex CO and Annex COR. The SM must promptly notify the Annex CO and Annex COR of any issues or conditions that may adversely affect the timely, cost-effective delivery, or quality of products and services under the Annexes to this contract.

E. Require the SM to be available to the Annex CO and Annex COR 24 hours a day, 7 days a week, and shall return calls and messages within 60 minutes, be physically on-site each business day during the hours designated in the Position Table, unless otherwise approved by the Annex COR.

F. During non-business hours, require the SM to respond to the site within four (4) hours when requested by the Annex COR, or Center Chief of Protective Services (CCPS).

G. Require the PM and SM to participate in meetings to discuss contract and business management as it relates to their Annexes and other contract-related meetings when directed by the CO, COR, or the Annex COR.

H. In the event the PM or the SM is absent for any reason, the Contractor shall submit Letter of Delegation to the COR or Annex COR identifying the designated authority.

The PM may authorize an SM to act in their absence for a period not to exceed 30 consecutive days and no more than 60 days in a calendar year.

I. Submit to the Annex COR a business continuity plan for all vacant positions in accordance with DRD 1.1-1, Management, Staffing, and Continuity of Service Plan.

J. Provide resumes of any essential personnel being proposed to fill a vacancy that meets PM and SM qualifications.

1. For initial placement of the PM and SMs: Submit resumes 30 calendar days prior to the personnel action for review and concurrence by the COR/Annex COR, CO, and Annex CO. Resumes shall not exceed 4 pages, using no smaller than 12-point Times New Roman.

2. Annex COR may waive time limits at their discretion.

K. Conduct a Semi-Annual Program Senior Management Status Review in accordance with DRD 1.1-2. Submit the Baseline and IDIQ Report in accordance with DRD 1.1-3.

1.2. Business Management

The Contractor shall:

A. Provide a Resource Management Plan in accordance with DRD 1.2-1, Resource Management Status.

B. Notify the Annex COR, Annex CO, and CO of any issues that could impact the successful performance of contract requirements or negatively reflect on the Government or of any situations that may adversely impact the timely and cost-effective delivery of quality products and services under this contract. Participate in periodic meetings scheduled by the Protective Services Office, CO, COR, and/or Annex COR.

C. Provide notice to the Government in accordance with: DRD 1.2-2, Advanced Notification of Workforce Reductions Report and DRD 1.2-3, Strike Contingency Plan.

D. Ensure the proper accountability, control, use, and maintenance of Government Furnished Property (GFP) in compliance with FAR Part 45. GFP includes equipment owned by the Government and delivered to or made available to the Contractor.

E. Serve as the property custodian for all GFP provided or acquired under this contract.

The Contractor’s custodial responsibilities are defined in the Center property requirements and NPR 4200.1, NASA Equipment Management Procedural Requirements, and NPR 4500.1, Administration of Property in the Custody of Contractors, and any identified Center property requirements. Obtain, track, maintain, and provide inventory accountability for all equipment, including all GFP. Submit reports in accordance with DRD 1.2-4, Government Property Management.

F. Utilize the Center Shipping and Receiving Facility, as the receiving agent.

G. Assist the Government in managing and overseeing facilities assigned under this contract and Annexes by identifying and tracking facility requirements, requesting facility services, maintenance, and repairs from the Government, and notifying the Annex COR when a work order is placed for a work area assigned to the Contractor.

H. Provide estimated travel costs, coordinate, and obtain COR approval for Government directed travel. All Government-directed travel shall meet the Government rates for per diem and travel and be conducted and reimbursed in accordance with the Federal Travel Regulations.

I. Provide to the Annex COR ongoing assessment and evaluation to identify protective service weaknesses and vulnerabilities. Recommend appropriate corrective action and participate in After Action Reviews.

J. Maintain awareness of current protective services issues, emerging trends, and technologies. Continuously monitor proposed and implemented changes to all compliance documents including all applicable laws, regulations, policies, and directives. Identify and promptly notify the Annex COR of any impacts to Contractor requirements, processes, and practices. Provide recommendations to the Government on trade-offs for new or changing requirements to minimize cost impacts. Strategies for addressing changes, whether driven by NASA mission adjustments, threat level variations, regulatory updates, budgetary constraints, or other factors, must be coordinated with and approved in writing by the CO and the Annex COR.

K. Ensure contractor deliverables and all associated data only use markings authorized by the contract. “Proprietary” is not an authorized marking for delivered technical data under the contract.

L. Ensure all employees possess and maintain the required National Security Clearance level as specified in Appendix 01, Position Table, prior to performing any work under this PWS. Employees shall have been granted a clearance commensurate with the access requirements identified on the Qualifications Tab of Appendix 01, Position Table, prior to working the position, unless otherwise approved in writing by the Annex COR. The Contractor shall provide evidence of the required clearance or an interim clearance level required for their designated position, prior to the employee beginning work, DRD 1.2-5, Contractor Employee Clearance Document. This requirement does not relieve the Contractor from their performance obligations. For employees working under an interim clearance, the Contractor shall ensure the final clearance is granted within 180 calendar days of employment. If an employee or incumbent requires an exception to the 180-day limit, the Contractor will submit written waiver request to the COR and Annex COR prior to the employee exceeding the 180-calendar day threshold.

Additionally, the Contractor shall immediately prohibit any employee whose clearance had been denied, suspended, or revoked from performing work under this PWS that requires a clearance, until the clearance is restored, or a written waiver is granted by the COR and Annex COR.

1. Report (including self-reporting) any security violation or derogatory information of an employee to the Contractor Facility Security Officer (FSO) and the Annex COR within 24 hours of being notified of such violations. (Security Violations and Derogatory Information are defined in the National Industrial Security Program Operating Manual).

M. Provide the Government, or its authorized representatives who possess the appropriate authority, with immediate access to any site or area where work under this contract is performed for the purpose of audits, assessments, surveillance, inspections, or any other official purpose identified by the Government’s representatives in the performance of their official duties.

N. Manage the total work effort associated with this PWS to ensure timely and adequate completion of all requirements. Included in this function will be a full range of management and administrative duties including program management, phase-in planning, scheduling, report preparation, risk management, establishing and maintaining records, and quality control.

O. Ensure all employees are medically, physically, and psychologically fit for duty in accordance with this PWS and Appendix 03, Screening Standards for Armed Personnel. For any medical absence of five consecutive working days or more, ensure employees are medically cleared to return to work through a licensed medical professional (Nurse Practitioner, Physician Assistant or Medical Doctor).

P. Upload initial and revised documentation (i.e., DRDs) to the Government-provided electronic collaboration platform (SharePoint) for the review and resolution of comments, in accordance with DRD 1.2-6, Standard Operating Procedure (SOP). Once finalized and approved, documents shall be converted to PDF and uploaded to the collaboration platform for official use. The CO, COR, and Annex COR shall have access to the PWS deliverables stored on the Government collaboration platform.

Q. Maintain and update SOP’s and EAC’s, for specific Annexes and contract operations in accordance with DRD 1.2-6, SOP. When warranted, develop and maintain new processes for improved effectiveness and efficiency. Coordinate with the Annex COR for all proposed content changes or new processes.

R. Conduct annual reviews of the center security requirement documents and propose revisions to the Annex COR for approval.

S. Submit its Standards of Conduct policy to maintain professional employee conduct, ethics, and integrity (reference FAR 3.1002).

T. Implement and enforce a standard dress code policy in accordance with Appendix 04, Uniforms, Equipment and Grooming Requirements, ensuring that all personnel performing work under this PWS comply with the uniform requirement for the position that they are working in. Reference to Appendix 01, Position Table, to determine the applicable uniform type for each position.

U. Provide a Work Control Plan with processes to track and report all PWS work activity, including subcontractors in accordance with DRD 1.2-7, Self-Assessment and Metrics Report.

V. Perform work in such a manner that causes minimal or no interruption to/or interference with site operations.

W. Comply with Agency Standards as outlined in the applicable attachments.

X. Provide a Training Plan in accordance with DRD 1.2-8, Training Plan.

Y. All personnel performing work under this contract are strictly prohibited from releasing, disclosing, or sharing any internal information, reports, logs, videos, photographs, audio recordings, or similar materials related to law enforcement or security operations, either internally or externally, unless they have received explicit written authorization from their respective centers CCPS or their designee. This requirement applies to all forms of communication and media, and is not limited to the items listed above.

1. Unauthorized disclosure of such information may result in disciplinary action, up to and including prosecution.

2. Written authorization must specify exactly what information may be released, the intended recipient(s), and detail any requirements for redaction or removal of sensitive or personal details prior to release. All personnel must be made aware of and adhere to these restrictions as a condition of their employment or contract performance.

1.3. Safety and Health

The Contractor shall:

A. Serve as an advocate for safety by establishing and maintaining a comprehensive safety and health plan for this PWS, including subcontractors, in accordance with DRD 1.3-1, Safety and Health Plan. Ensure compliance with applicable Federal, state, local, NASA, and Center safety and health laws, regulations, policies, directives, and industry standards. Maintain awareness of proposed and implemented changes to those requirements. Provide timely notification to employees regarding any changes or modifications to policies, procedures, or systems designed to control exposure to safety and health hazards.

B. Conduct frequent safety and health inspections of all Contractor occupied spaces considering the risk of the operations. The Contractor shall document and report all safety and health findings and track to closure, in accordance with DRD 1.3-2, Safety Measures and Mishaps Report. Notify the Annex COR of safety and occupational health concerns.

C. Reserved.

D. Provide the authorized Government representatives, immediate access to personnel and sites or areas where work under this contract is being performed to complete safety, health, and mission assurance audits, assessments, surveillance, inspections, and investigative activities. Provide all audit, assessment, surveillance, inspection, and investigation records to such Government representatives upon request.

E. Prepare for and participate in internal or external audits as requested (e.g., Institutional Safety Program Audit (ISPA), Quality Audit, Assessment, and Review (QAAR), and Voluntary Protection Program (VPP). Review Annexes for Center specific VPP requirements.

F. Comply with NPR 8621.1, NASA Procedural Requirements for Mishap and Close Call Reporting, Investigating, and Recordkeeping; and applicable Center requirements as defined in the Annexes in the event that any activity during the performance of this contract results in a NASA mishap or close call. The Contractor shall use the NASA Mishap Information System (NMIS) to electronically report mishaps, close calls, and hazards as defined by NPR 8621.1, NASA Procedural Requirements for Mishap and Close Call Reporting, Investigating, and Recordkeeping. The Contractor shall encourage all employees located onsite to report hazardous conditions and situations which, if not corrected, have the potential to result in an injury to personnel or damage to equipment/property. Contract personnel may also report concerns anonymously about hazards through the NMIS.

G. Support Center safety and health meetings including working groups and panels, as indicated in the Annexes. The Contractor shall participate in safety and health meetings including working groups and panels as requested.

H. Reserved.

I. Provide reporting of safety and health measures and mishaps in accordance with DRD 1.3-1, Safety and Health Plan.

J. Appoint, in writing to the COR, at least one safety and health representative for each Annex to support Center requirements.

K. Comply with additional safety and health requirements identified in the Center Annexes.

L. Provide reporting of Hazardous Items purchased in accordance with DRD 1.3-3, Hazardous Item Procurement Report.

1.4. Quality Plan

The Contractor shall:

A. Develop and Implement a Quality Management System (QMS) that is compliant with the ANSI, International Organization for Standardization (ISO), American Society for

Quality (ASQ) 9001-2015, QMS – Requirements, and develop a Quality Management Plan in accordance with DRD 1.4-1, Quality Management Plan.

1. Implement the QMS at contract start to identify, prevent, and ensure that defective services do not occur.

2. Continually improve the QMS throughout the life of the contract and update the quality management plan accordingly. The Contractor shall submit all proposed QMS changes to the COR for review and acceptance in writing prior to implementation.

3. Assess potential sources of supply to determine the risk of receiving nonauthentic parts.

B. Assess potential sources of supply to determine the risk of receiving nonauthentic parts. When feasible, obtain supplies through an Original Component Manufacturer (OCM)/Original Equipment Manufacturer (OEM), or through an OCM/OEM authorized distributor chain.

1. Note: OCM/OEM authorized distributor chain (e.g., franchised distributors), and authorized aftermarket manufacturers are considered to have low risk of supplying nonauthentic parts.

C. Mitigate risks of procuring counterfeit parts from sources other than OCM/OEM or authorized suppliers. If suspect or counterfeit parts are furnished under this agreement and are found on the site, such items shall be impounded by site.

D. Notify NASA Office of Protective Services (OPS) and Safety and Mission Assurance (S&MA) personnel of nonconforming products or failures that affect safety, security, reliability, or functionality, in accordance with DRD 1.4-1, Quality Management Plan.

E. Identify a point-of-contact to support the Center Government-Industry Data Exchange Program (GIDEP) Coordinator, and the Contractor shall:

1. Participate in the GIDEP in accordance with:

a. NPR 8735.1, Exchange of Problem Data Using NASA Advisories and the

GIDEP

b. KDP-KSC-P-2102, GIDEP Evaluation-Disposition Process

2. Review and disposition GIDEP Notices and NASA Advisories in the NASA Advisories, Notices, and Alerts Distribution and Response Tracking System to determine if they affect the Contractor's products or services provided to the Government.

3. Respond by documenting whether GIDEP Notices and NASA Advisories affect the Contractor's products and services provided to the Government.

4. Notify the Government if GIDEP Notices and NASA Advisories affect the subcontractor's products and services provided to the Government. For GIDEP Notices and NASA Advisories that affect the Contractor's products and services provided to the Government, the Contractor shall take action to eliminate or mitigate any negative effect and inform the Government of such actions to ensure GIDEP Notices and NASA Advisories adhere to closed-loop reporting.

5. Generate GIDEP Notices in accordance with the GIDEP Operations Manual and GIDEP Requirements Guide whenever failed or nonconforming items, available to other buyers, are discovered.

1.5. Environmental Management

The Contractor shall:

A. Ensure that all contract operations, activities, and assigned systems, facilities, and equipment are in compliance with federal, state, and local environmental laws, regulations, ordinances, executive orders, permits, and licenses as well as all NASA environmental policy, plans, and requirements documents, including the most recent versions of the following documents:

1. NASA Policy Directive (NPD) 8500.1, NASA Environmental Management

2. NASA Procedural Requirement (NPR) 8510.1, NASA Cultural Resources Management

3. NPR 8530.1, NASA Sustainable Acquisition

4. NPR 8553.1, NASA Environmental Management System

5. NPR 8570.1, NASA Energy Management Program

6. NPR 8580.1, Implementing the National Environmental Policy Act and Executive Order 12114

B. Appoint, in writing to the COR, at least one environmental representative for each Annex to support Center requirements.

C. Implement internal policies, procedures, and oversight as necessary to ensure environmental compliance (reference DRD 1.3-1, Safety and Health Plan).

D. Participate in regulatory agency inspections and NASA internal inspections, audits, and Environmental and Energy Functional Reviews when requested by the Government.

Provide Government personnel or authorized Contractor representatives with access to Contractor sites and work areas to conduct surveillance activities and to ensure compliance with environmental laws, regulations, and permits. Implement corrective actions for findings and deficiencies identified by the Government. Submit written corrective action plans and finding closure documentation when requested by the Government.

E. Ensure that environmental regulatory agency interactions or correspondence relating to NASA activities or contract activities are performed by or coordinated through the applicable Center Environmental Office.

F. Respond to environmental data calls regarding contract operations and activities, and Contractor-assigned systems, facilities, and equipment when requested by the Government. Submit responses in the format outlined in the data call. Examples include, but are not limited to, environmental compliance records, regulatory agency requests for information, hazardous and controlled waste site information, waste management training records, air emission source inventories, storage tank inventories, and chemical usage and storage records.

G. Comply with additional environmental requirements identified in each Annex.

H. Perform environmental reviews of Protective Services operations at each Annex including hazardous and controlled waste management requirements.

1. Ensure that all employees who are responsible for hazardous waste management activities receive annual hazardous waste training and where applicable, have job descriptions that meet the requirements of 40 CFR 265.16, Personnel Training.

2. Allow NASA environmental personnel full access to conduct internal inspections of all facilities, systems, materials, records, and waste for compliance with environmental laws, regulations, and permits. Violations, findings, or deficiencies identified in the inspection shall be reported to the Annex COR and immediately corrected.

3. Incorporate sustainable elements and practices in operations in accordance with

TBD.

4. Respond to data calls (e.g., chemical usage and storage, pollution prevention, and sustainable practices).

I. Take measures to prevent the release of hazardous materials to the environment and report hazardous materials spills and releases immediately in accordance with Center procedure.

J. Coordinate with appropriate agencies/wildlife services for any dangerous animals/reptiles (e.g. rabid coyotes, poisonous snakes, alligators) or hurt animals at Center. The Contractor will document the incident to include disposition of the animal.

1. For onsite employee safety concerns related to unsafe animal behavior or immediate threats, refer to NPR 1600.1 Appendix H, Section H.2 Discharge of Firearms, H.2.2 Exceptions.

1.6. Information Technology (IT)

The Contractor shall:

A. Obtain all IT products and services needed to process NASA data. Ensure all IT products and services direct charged to the contract are approved through OCIO’s Commercial IT Request (CITR) Application. This includes, but is not limited to, FITARA, Supply Chain Risk Management (SCRM), IPv6, and 508 compliance. No purchases of commercial IT products or services should be made prior to coordination and approval by the OCIO. Contractor shall report purchases monthly utilizing DRD

1.6-1, CITAR.

1. This contract shall only be used to purchase software, software maintenance, hardware, or hardware maintenance necessary for the performance of this contract. NASA shall own the license(s) or subscriptions for any software or applications purchased. All hardware shall be titled to NASA.

B. Comply with the information security requirements of NPD 2810.1, NASA Information Security Policy; NPR 2810.1, Security of Information and Information Systems; and the IT Security Handbooks identified in Appendix 06, Compliance Documents List.

C. Comply with information protection requirements in accordance with NPD 1382.17, NASA Privacy Policy; NPR 1382.1, NASA Privacy Procedural Requirements; and the IT Security Handbooks identified in Appendix 06, Compliance Documents List. Assess all information collections to ensure compliance with Federal regulations and privacy protection requirements using the NASA-provided assessment tool, Risk, Information Security Compliance System (RISCS). Access to RISCS may be granted through a NASA Access Management System request.

D. Manage information security and implement security controls in accordance with NPR

2810.1 and DRD 1.6-2, Security Requirements for Unclassified IT Resources.

E. Ensure successful completion of the following for all Contractor personnel:

1. NASA Information Security Awareness and Privacy Training.

2. Other IT Security Training, as required by the Government and provided in the System for Administration, Training, and Educational Resources for NASA

(SATERN).

3. NASA IT User Agreement.

F. Provide support to Office of the Chief Information Officer (OCIO) for Contractor IT security incidents or investigations.

1. Notifications: Upon discovery of an incident involving Sensitive But Unclassified (SBU)/Controlled Unclassified Information (CUI), Personally

Identifiable Information (PII), or Export Control information, within one hour notify the Security Operations Center (SOC) followed by the Chief Information Security Officer (CISO) and the Annex COR.

2. Response:

a. Submit an encrypted email with the initial assessment of event impacts and plan for mitigation within eight (8) hours after acknowledgement after notifying the SOC, CISO and Annex COR.

b. Provide continued support and status until the incident is resolved.

G. Protect all sensitive information in accordance with NPR 2810.7, Controlled Unclassified Information.

H. Encrypt sensitive information (e.g., SBU/CUI, PII, Export Control) at the file and electronic mail levels using a Government-approved solution.

I. The contractor shall ensure that all products, platforms, services, and communications delivered as part of this work statement that are Information and Communication Technology (ICT) or contain ICT, conform to the Revised Section 508 of the Rehabilitation Act Standards, 36 C.F.R. § 1194.1 and Apps. A, C and D. The Standards may be found at https://www.access-board.gov/ict/.

J. Comply with NPR 2810.2, Possession and Use of NASA Information and Information Systems Outside of the United States, by getting OCIO approval before taking any electronic devices outside the U.S. and Territories, including any personal devices that includes NASA data.

K. Comply with NPD 2540.1, Acceptable use of Government Furnished Information Technology Equipment, Services, and Resources. The Government will provide the end user devices needed in the performance of this contract through NASA's mandatory End User Device contract, as identified in the NFS Companion Guide, Enterprise Procurement Strategies, PSL A.102-2, IT Services.

L. Comply with the Use of the Personally Owned Device memorandum and ensure that all IT devices have an approved Authorization to Operate (ATO) from a NASA Authorizing Official (AO) prior to the use of the IT device to store, process, or transmit NASA data. A Personally Owned Device includes but is not limited to a mobile phone, tablet, computer, Universal Serial Bus (USB) drive, external drives, Internet of Things (IoT) device, wearable technology, or any other device that is capable of connecting to a NASA's network or systems, or storing or processing NASA data and does not have a valid ATO from a NASA AO, regardless of who provided or owns the device

M. For a FIS that uses Internet Protocol, the contractor shall provide full feature functionality in both dual stack (IPv4 and IPv6) and IPv6-only environments in compliance with the NIST USGv6 Testing Program as described in NIST SP-500-267, NIST SP-500-273, and NIST SP-500-281.

https://www.access-board.gov/ict/

N. The contractor shall integrate records management and preservation considerations into the design, development, enhancement, and implementation of electronic information systems in accordance with NPR 1441.1, NASA Records Management Program Requirements.

O. Use of Artificial Intelligence (AI) During Contract Performance

1. The contractor must disclose any potential or intended use of Artificial Intelligence (AI) technologies, tools, or systems in the performance of this contract. If it is unknown at the time of contract award whether AI will be used, the contractor must provide written notice to the Government prior to the deployment of any AI systems during contract performance. If AI technologies are introduced after the commencement of contract performance, the contractor must notify the contracting officer in writing prior to the release or deployment of any AI component, capability, or system in the NASA environment.

2. The Government reserves the right to review, approve, or disapprove the proposed use of AI technology in the performance of this contract. The contractor must obtain written approval from the contracting officer before implementing AI systems.

3. If any subcontractor intends to use AI technologies in the performance of work under this contract, the contractor must ensure that similar notification and disclosure requirements apply to all subcontractors. The contractor is responsible for collecting the notification and disclosure requirements from subcontractors and submitting them to the Government.

1.7. Records Management

The Contractor shall:

A. Maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law, including but not limited to, the Federal Records Act (44 U.S.C. Chapters. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, as well as NASA records policies (NPD 1440.6, NASA Records Management Program, and NPR 1441.1, NASA Records Management Program Requirements).

B. Ensure that NASA-owned/Contractor-held records are segregated from contractor-owned records and from non-record materials and report holdings of NASA records.

C. Immediately notify the CO Annex CO and NASA Records Officer upon discovery of any inadvertent or unauthorized removal, defacing, alteration, or destruction of Federal records. Destruction of Federal Records is expressly prohibited unless in accordance with records retention schedules or as directed by the CO and Annex CO.

D. All Contractor employees assigned to this contract who create, work with, or otherwise handle Federal Records are required to complete mandatory NASA-provided records management training. Ensure that training has been completed according to agency policies, including initial training and any required annual or refresher training.

E. Incorporate the substance of this clause, its terms and requirements including this paragraph, in all subcontracts under this contract, and require written subcontractor acknowledgment of same.

F. Develop, implement, and maintain a Records Management Program Plan in accordance with the following DRDs:

1. DRD 1.7-1, Records Management Program Plan

2. DRD 1.7-2, File Plan

3. DRD 1.7-3, Contract Records Closeout Plan

1.8. Vehicle Management

The Contractor shall:

A. Perform vehicle management functions in accordance with NPR 6200.1, NASA Transportation and General Traffic Management; NPD 6000.1, Transportation Management; Center requirements; and NASA Official Fleet Management Handbook.

B. Operate and maintain all General Services Administration (GSA) leased vehicles.

There is no Government-furnished facility for maintaining the Contractor-provided vehicles.

C. Ensure all drivers have and maintain proper state licenses with applicable endorsements for equipment they operate and are insured under the Contractor’s insurance for operating a motor vehicle for the duration of their employment.

D. Input the required fleet data into the Federal Automotive Statistical Tool (FAST) for any GSA-leased and Government-furnished vehicles annually, as scheduled by the NASA Agency Transportation Manager.

E. Comply with the vehicle manufacturer’s normal service schedule for all Government furnished vehicles and take full advantage of manufacturer warranty repairs when applicable.

F. Provide a Vehicle Utilization Plan, in accordance with DRD 1.8-1, Vehicle Utilization Plan.

G. Reserved.

H. Provide gate vehicles, patrol vehicles, technical support vehicles, and other necessary vehicles to support the security requirements and conditions as required in the Annexes, to include, but not limited to the following: security patrols; locksmiths;

electronic security support; perimeter fence inspections; K-9 and emergency response vehicles to provide services. All vehicles are to be properly marked and outfitted in accordance with the requirements of Appendix 05, Vehicle Requirements.

I. Vehicles (both Contractor owned and GSA) are authorized to go off NASA property while traversing to authorized locations or in an emergency. All GSA-leased and NASA-provided vehicles shall be used for official Government business only.

J. The Contractor is responsible for the fuel costs for all Contractor-provided vehicles unless noted in the Annex as Government provided.

K. Notify the Annex COR within one hour of any GSA-leased or NASA-provided or Contractor-provided vehicle that has been damaged or placed out of service for any reason.

L. Notify the Annex COR immediately when a traffic accident involves members of the Contractor staff. The Annex COR will advise the Contractor as to investigative responsibility.

2. INFOSEC AND COMSEC

INFOSEC and COMSEC concern the safeguarding and transmission of Classified National Security Information (CNSI) in accordance with Federal law, including but not limited to, EO 13526, Classified National Security Information; the National Industrial Security Program Operating Manual, Information Security Oversight Office; and NPR 1600.6, NASA Communication Security. Some of these tasks require a Top Secret/Sensitive Compartmented Information (TS/SCI) and COMSEC briefing

The Contractor shall:

A. Review and provide input for SATERN Security Education and Training courses for both clearance holders and non-clearance personnel at the individual Centers in accordance with NPR 1600.1, NASA Security Program Procedural Requirements and NPR 1600.2, NASA Classified National Security Information (CNSI). Required training/briefings include but are not limited to new employee initial security orientation, initial and refresher training for cleared personnel, classified custodian briefing, derivative classifier training, material/training to meet triennial security training for all non-cleared personnel, and security awareness information/products, as needed. Topics for briefings and/or training include, but are not limited to, classification management, CUI/SBU/FOUO and Special Access Programs. The Security Training Program shall meet NPR 2190.1, NASA Export Control Program.

B. Serve as the primary liaison for SATERN Security Education and Training courses, ensuring accurate training, and timely updates of training records for both clearance holders and non-clearance holders within the SATERN system. Maintain, review, and provide input for the training program that ensures all personnel granted a security clearance are trained to comply with EO 13526 Classified National Security Information. Additionally, track the completion to ensure clearance holders remain in compliance with the training

C. Ensure the proper safeguarding and storage of all levels of classified documents and COMSEC materials in approved storage containers and devices, in full compliance with all applicable policies, procedures, and security directives.

D. Provide COMSEC services in accordance with Presidential Decision Directives and applicable Committee on National Security Systems (CNSS) Directives, Instructions, Manuals, Advisories, as well as NASA policies and procedures governing intelligence, security, technology protection, and operations security to support Annex requirements.

E. Support COMSEC voice and Secure Terminal Equipment (STE) or updated versions.

F. Review and provide input for the annual COMSEC training. Additionally, track, and administer for the training for both civil servants and participating contractors.

G. Report any COMSEC violations in writing to the NASA Central Office of Record within two hours.

H. Attend the annual NASA COMSEC Conference and NASA COMSEC Office of Record training and certification. If it is determined by the Annex COR that in-person attendance is required, travel will be processed through the TO funding review and approval process.

I. Provide COMSEC support for all dignitary/Very Important Person (VIP) visits and meetings, ensuring compliance with applicable security policies, procedures, and communication security requirements.

J. Ensure the destruction of CUI/SBU/For Official Use Only (FOUO) material used/ held by OPS, (this includes all forms of media and is not limited to paper, all types of film and memory storage devices) in accordance with NPR 2810.1, Security of Information and Information Systems, the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-88, Revision 1, Guidelines for Media Sanitization and National Archives and Records Administration (NARA) CUI Notice 2019-03, Destroying Controlled Unclassified Information (CUI).

1. Provide destruction services for sensitive and classified waste in accordance with the applicable Annex SOP, including the secure pick-up, storage, transport, and destruction of all sensitive and classified documents.

K. Require SPOs to respond immediately to any alarm associated with a NASA Sensitive Compartmented Information Facility (SCIF) and conduct an initial assessment of the area to identify if penetration has occurred. Maintain a continuous presence until the SCIF custodian arrives to assess the situation. Ensure a response by the SCIF custodian in accordance with Intelligence Community Directive (ICD) 705, Sensitive Compartmented Information Facilities and SOPs.

3. EMERGENCY MANAGEMENT

Emergency Management personnel shall operate under the following four tenets of Emergency Management framework as described below and in each annex: Emergency Preparedness, Emergency Operations, Continuity of Operations, and Test, Training and Exercise. Additionally, the Comprehensive Emergency Management Plan (CEMP) provides detailed guidance through its Annexes, describing the four phases of emergency management: preparedness, response, mitigation, and recovery. These frameworks ensure a holistic approach to emergency management, integrating proactive planning, operational readiness, continuity strategies, and rigorous testing and training to maintain organizational resilience.

The Contractor shall:

A. Provide a comprehensive emergency management service that complies with National Fire Protection Association (NFPA) 1660 Standard for Emergency, Continuity, and Crisis Management: Preparedness, Response, and Recovery; NFPA 1561 Standard on Emergency Services Incident Management System and Command Safety; NFPA 1550 Standard for Emergency Responder Health and Safety; NPR 8715.2, NASA Emergency Management Program Procedural Requirements; and Emergency Management Center plans.

B. Periodically review and provide recommendations to the EM for updates to the CEMP.

The Plan shall be implemented within four hours of activation as directed by the OPS Emergency Manager (EM). Sustain the mission essential operations for up to 30 days utilizing existing and available field infrastructure where practical.

C. Upon request from Annex COR, send personnel to attend a local, state, or Federal emergency management conference, NASA emergency management meeting, and utilize the information obtained from the conference to update the training provided to NASA and other onsite contractors. Requests to send personnel to such a conference or training will be processed through the TO approval process.

D. Ensure all personnel supporting emergency management under this PWS obtain and maintain all required training and certifications.

E. Ensure Emergency Management personnel respond to emergencies not requiring activation of the Emergency Operations Center (EOC) activation.

F. Prepare and deliver comprehensive After-Action Reviews (AAR) for incidents when requested by the EM or Annex COR. Document all lessons learned in accordance with applicable guidance and reporting requirements. Provide mitigation recommendations for each of the lessons learned to support continuous improvement and enhanced operational readiness.

G. Provide recommendations for and implement a Lessons-Learned Program and Corrective Action Plan (CAP) consistent with best practices to identify shortfalls, weaknesses, and failures identified during the post-event evaluation, to be provided to the…