Performance Work Statement.docx

DOCX document 80 KB Posted

Attached to
Facilities Related Control Systems
Solicitation number
M6700125ICSOT
Issued by

About this file

This is a Performance Work Statement (PWS) for continued network agnostic ICS/OT solution operations at Marine Corps Base Camp Lejeune, NC Public Works Division. The scope covers Building Automation Systems (BAS), Water & Wastewater, HV SCADA, Metering, Lighting, and other control systems under an existing Risk Management Framework "Type" Authorization to Operate/Connect. The period of performance is one base year plus two 12-month options and a 6-month extension, anticipated to start August-September 2025.

The contractor must provide a minimum of 3 key personnel (Cybersecurity Architect/Senior RMF Lead, Cybersecurity Architect, and Cybersecurity Network Engineer/Firewall) and 6 non-key personnel to support operations, maintenance and administration of ICS/OT systems. Key responsibilities include maintaining RMF compliance, configuring firewalls and VPNs, administering virtualized environments, conducting security assessments, performing data analytics, and collaborating with academia and DoD partners on cybersecurity innovations. Personnel must have Secret clearances and specific certifications like Security+, CISSP, or CASP. The place of performance is primarily at MCB Camp Lejeune with some telework permitted for unclassified work. The contractor must transition within 10 days of award and have 100% staffing by day 11.

View the file

Other files

File Type Posted
Sources Sought RFI.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

PERFORMANCE WORK STATEMENT

1.0 Scope. The G-F Dept., Public Works Division (PWD), Facilities Related Control Systems (FRCS) Cyber Operations Group, has a requirement to continue network agnostic ICS/OT solution operations across the installation. This solution operates under an existing RMF "Type" ATO/ATC covering the architecture and components of the solution and incorporates BAS, W&WW, HV SCADA, Metering, Lighting, and other systems as determined by Marine Corps Base (MCB) Camp Lejeune, NC PWD. This contract aims to ensure continued excellence supporting MCB PWD in current and ongoing operations, A&A process support, and continuous improvements and increased capabilities of the existing solution. The National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) approved approach securely bridges the gap between informational technology (IT) and operational technology (OT) while providing availability, resiliency, and efficiency for all ICS/OT systems. This cost-effective and secure approach seamlessly integrates complex combinations of OT/ IT. The USMC Authorizing Official (AO) issued a "Type" ATO/ATC for this solution to secure all ICS/OT regardless of make or manufacturer in the USMC.

2.0 Period of Performance. The period of performance is for a base year and two 12-month option periods and an optional six-month extension.

The period of performance is TBD, but anticipated to start Aug – Sep 2025 if it is determined there is a need for this requirement.

3.0 Place of Performance. Marine Corps Base Camp Lejeune, NC, other government satellite activities, and contractor facilities. Telework on unclassified systems may be authorized for emergency situations on government provided assets.

4.0 Government Workday, Hours, and Holidays. The Government workday is Monday through Friday, and the workday hours are 0630 to 1700.

4.1 Federal holidays observed by this base are New Year's Day, Martin Luther King, Jr.'s Birthday,
Washington’s Birthday, Memorial Day, Juneteenth National Independence Day, Independence Day, Labor Day,Columbus Day, Veterans’ Day, Thanksgiving Day, Christmas Day, and other specifically designated days that aremutually agreed upon between the Contract Administrator and the Contractor.

4.2 When a holiday falls on a Sunday, the following Monday will be observed as a legal holiday. When a holiday falls on a Saturday, the preceding Friday is observed as a holiday by U.S. Government agencies.

4.3 In the event an Executive Order issued by the President of the United States declares Agencies of the Federal Government closed for a regularly scheduled workday, the Contracting Officer’s Representative or designee will determine and advise the Contractor on whether services are required for that day.

5.0 Installation Closures or Delayed/Reduced Workday.

5.1 Contractor personnel shall be expected to provide limited designated services in event of a closure due to emergency situations or inclement weather emergencies; applicable notifications shall be provided by television/radio announcements, telephone, text, email, verbal means, or MCB information systems (MCB Camp Lejeune Information Systems telephone number for reporting instructions is 910-451-1717). Once the Installation has returned to normal operations, Contractor personnel shall resume full services under normal work hours.

5.2 Under emergencies in which the Installation remains open under reduced but required services, Contractor personnel shall maximize staffing levels of essential personnel based on Government notification, telework may be authorized for non-classified work and communication regarding assessment of safety and practicality of situation. Considerations shall include employee/family member injuries, extensive home damages (to include transportation assets), mass power outages, inaccessible travel routes, school/daycare closures, pandemics etc.

6.0 Security Clearance. Work under this task order maybe classified as secret. The Contractor shall comply with all applicable DoD security regulations and procedures during the performance of this task order. The Contractor shall not disclose and must safeguard procurement sensitive information, computer systems and data, privacy act data, and Government personnel work products, which are obtained or generated in the performance of this task order. The Contractor’s personnel shall have a current secret security clearance or have the capability to obtain/maintain a secret security clearance for the duration of the contract. The Trustworthiness clause is applicable to this task order. DD Form 254 Department of Defense Contract Security Classification Specification is Attachment (1).

6.1 Classified Work. All work on classified systems and documents shall be performed only in Government
facilities.

6.2 Unclassified Work. During emergency situations like a pandemic, all Contractor personnel may be required to provide support on unclassified systems via telework. These systems include SharePoint, chat programs, and web conferencing solutions. Contractor personnel may also be required to work on unclassified Information Management/Knowledge Management (IM/KM) Policy, process and automation, collaboration, and Command and Control (C2) documents. Government computer assets, for unclassified work, are used by Contractor personnel if telework is authorized.

7.0 Government Responsibilities. The Government activity will provide adequate working space, all equipment as required (e.g., desk, chair, computer, printer, copier, telephone, etc.). Utilities, janitorial services, and expendable operating supplies for the duration of this purchase order. The contractor shall maintain the assigned office space and work areas in a neat and orderly manner. Contractor shall not remove any government-furnished equipment or supplies from the Government compound without the express written permission. The Government will provide the contractor with all the information needed for performance including desired formats and samples. Information will be provided to the Contractor in appropriate formats. The Government assets are separate from the Contractor provided assets and are not interchangeable.

8.0 Contractor Responsibilities.

8.1 Staffing. An adequate staff is required. Based on past performance, historical data, current mission
requirements, and budgetary restrictions, the Government believes that accomplishment of these supportservicestasks will require a minimum of three (3) key personnel and (6) non-key personnel that are qualifiedpersonnel. The Government has three (3) key billets for full-time personnel, one (1) CybersecurityArchitect/Senior RMF (Lead), one (1) Cybersecuirty Architect, and one (1) Cybersecurity NetworkEngineer/Firewall. The Government has six (6) nonkey billets for full-time personnel. The Contractor shallprovide three (3) personnel for the key billets, and they may propose more or less than the six (6) non-keybillets, as long as the requirements of the PWS are met. There are additional desired certifications listed, butthey are not required to meet the position requirements. Resumes are not required for the billets; the Contractorshall ensure all personnel meet the required qualifications, experience, and certifications for the key billets andnon-key billets.

8.2 Transition. The transition process will be ten (10) days. The key personnel and one contractor employee will start the day after award. The day after the end of the transition period, the awardee shall have 100% of proposed personnel on hand.

8.3 Identification of Contractor Employees. All contractors attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor will wear badges in the performance of this service

8.4 Security Requirements.

8.4.1 The Contractor FSO at the company level and required Contractor personnel performing work under this contract must have a Secret Clearance based on a Tier 3 personnel security investigation. The Contractor shall possess the required clearance prior to the Contractor and Contractor personnel start date and maintain the level of security required for the life of the contract.

8.4.2 The Contractor is responsible for fully supporting the process. Contractor who already maintain the appropriate clearance and already meet all onboarding training requirements ought to receive more favorable consideration for this service. Employees must complete online training within 30 days and in-person training withing 180 days of the employment start date. The Government reserves the right to negotiate a lower labor rate for a Contractor employee when the Contractor employee is not fully onboarded, unless reasonable delays are adequately justified in writing, and performance is unaffected by delays.

8.4.3 The Contractor will access information systems such as the Marine Corps Enterprise Network and data accessed through portals via user accounts and Common Access Cards provided by the government.

8.4.4 The Government will conduct the Security Management onboarding process. This includes the following online training (specific course requirements, titles, and URLS may change):

a. Introduction to Industrial Security (IS011.16)
b. Introduction to Personnel Security (PS113.16)
c. Introduction to Information Security (IF011.16)
d. Introduction to Physical Security (PY011.16)
e. Derivative Classification (IF103.16)
f. Unauthorized Disclosure (UD) of Classified Information & CUI (IF130.16)
g. Insider Threat Awareness Course (INT101.16)

8.4.5 Other Required Courses are as follows:

a. DOD Mandatory Controlled Unclassified Information (CUI) Training (DoD Mandatory ControlledUnclassified Information (CUI) Training (usalearning.gov))
b. Marine NET Cyber Awareness (CYBERM0000) and PII (DONPII010A) training
c. HQMC Security Management Course (in-person, offered quarterly)

8.4.6 Contractors must also provide the following:

a. DISS visit request
b. SF312 (Classified Information Nondisclosure Agreement)
c. DD 2875 (System Authorization Access Request)
8.4.7 Some performance requirements will require that selected Contractor personnel have and maintain
Secret Security eligibility. Both the Contractor FSO at the company level and required Contractor personnelmust be able to have a favorable adjudicated T3 background investigation. The government will initiate the T3investigation with finger print reading. The individual contractor will need to complete the necessarydocumentation after T3 investigation has been initiated. The final DD254 will be included separately via email.

8.4.8 The final DD254 will be included seperately via email.

8.5 Personnel Replacement and/or Absence. The Contractor agrees to assign to the contract personnel as required by the RFQ, to fulfill the requirements of the contract. No substitution of personnel shall be made except in accordance with the information specified herein. The Contractor agrees that during the performance period no personnel substitutions will be permitted without approval of the CLNC PWD Technical Representatives (Director, Maintenance Operations, Public Works, G-F, MCI EAST-MCB, Camp Lejeune, NC) unless such substitutions are necessitated by an individual's sudden illness, death or termination of employment. In any of these events, the Contractor shall promptly notify the Contracting Officer’s Representative (COR) and provide the information required by the following subsections.

8.5.1 If the personnel, for whatever reason, become unavailable for work under the contract for a continuous
period exceeding 14 working days the Contractor shall propose a substitution of such personnel. All proposed
substitutions shall be submitted, in writing, to the COR within 15 days of identification of the need for a
substitute. Each request shall provide a detailed explanation of the circumstances necessitating the proposed
substitution, the Contractor’s shall provide information required by the KO to approve or disapprove the
proposed substitution. All proposed substitutes shall have qualifications that are equal to or higher than the
qualifications of the person being replaced.
8.5.2 The COR shall evaluate the requests for substitution and promptly notify the Contractor, in writing, of
whether the request is approved or disapproved. If the COR determines that suitable and timely replacement of
personnel who have been reassigned, terminated, or have otherwise become unavailable to perform under this
purchase order is not reasonably forthcoming or that the resultant reduction of productive effort would impairthe successful completion of the contract, the contract may be terminated by the KO for cause or for theconvenience of the Government, as appropriate. Alternatively, at the KO's discretion, if the KO finds theContractor to be at fault for the condition, they may equitably adjust (downward) the contract price tocompensate the Government for any delay, loss, or damage as a result of the Contractor's action(s).

9.0 Contractor Tasks.

9.1 Continued operation, maintenance, and administration of the existing ICS/OT solution at FRCS Cyber Operations Group. These systems include but are not limited to BAS, W&WW, HVSCADA, Metering, Lighting, and other ICS/OT systems defined by CLNC PWD, FRCS Cyber Operations Group.

9.2 Conduct inspections/surveys of new and existing sites (buildings and other physical locations for ICS/OT Supervisory controllers) and provide the information to CLNC PWD to add new ICS/OT systems to the existing solution.

9.3 Inspect and assess the Supervisory Controllers to ensure they are correctly installed and configured per applicable DoD, DoN, and USMC requirements.

9.4 Install and maintain a representative model of a correct ICS/OT Supervisory controller installation in the Testbed.

9.5 Configure various Encrypt/Decrypt devices to connect to the firewall over the MCEN with an approved IPSec VPN.

9.6 Configure new Supervisory controllers to transit the MCEN over the approved VPN and successfully connect to the appropriate server.

9.7 Maintain and update all Encrypt/Decrypt devices to ensure these devices continue to meet all operational and Cybersecurity requirements.

9.8 Architect and administer the multiple Nutanix Hyperconverged Virtual environments.

9.9 Administer and maintain all servers and applications for all ICS/OT systems incorporated into the ATO/ATC package, including Testbed, Preproduction, and Production.

9.10 Administer all ICS/OT-related applications, including user administration, training, and documentation.

9.11 Ensure continued compliance with all applicable Cybersecurity requirements, including applying STIGs, patches, updates, and maintaining compliance with the RMF "Type" ATO/ATC.

9.12 Configure all firewalls in accordance with the RMF "Type" ATO/ATC.

9.13 Maintain and update the existing "Type" RMF ATO/ATC utilizing the USMC A&A process. These updates include adding new ICS/OT systems to the current ATO/ATC package determined by CLNC PWD.

9.14 Update and maintain the existing RMF "Type" ATO/ATC ensuring compliance with all USMC A&A requirements and processes.

9.15 Continuously update all policies, procedures, guidelines, checklists, POA&Ms, and other required documentation.

9.16 Upon direction from CLNC PWD Management, assist vendors and contractors with incorporating new H/W and S/W into the RMF "Type" ATO/ATC package.

9.17 Incorporate Cloud and Cloud-based systems and technologies related to CLNC PWD ICS/OT devices into existing or new MCCAST 2.0 packages.

9.18 Support the Regional FRCS Manager with all Cybersecurity and USMC A&A requirements.

9.19 Continually improve and update the solution by continuous process improvement and working with academia, National Labs, and other DoD entities to improve and innovate the solution at CLNC.

9.20 Operate and maintain the exiting Testbed, including testing new devices, verifying patches and updates, testing new configurations, and conducting cybersecurity assessments of all the production environment components.

9.21 Leverage technology to ensure new and innovative ways to improve every aspect of the technical solution.

9.22 Improve efficiencies with the RMF A&A process, including administering an RMF "Type" ATO/ATC within MCCAST 2.0.

9.23 Conduct in-depth data analytics to improve the Cybersecurity, Operational, and cost savings/avoidance of ICS/OT systems deployed on CLNC.

9.24 Apply data analytics to achieve improved system resiliency of ICS/OT devices on CLNC.

9.25 Partner with Academia, Government, DoD, and commercial partners to collaborate on new and innovative approaches to ICS/OT Cybersecurity, efficiency, and resiliency.

9.26 Develop advanced Cybersecurity risk mitigations, including signatures and heuristic-based approaches.

9.27 Develop the criteria for data to be used in graphical displays to support operational, cost savings/avoidance, and resiliency goals.

9.28 Integrate data analytics into graphical displays for operational and management use.

9.29 Collaborate with Academia and other DoD/Government entities to conduct external vulnerability assessments of the solution.

10.0 Performance Requirements.

10.1 The contractor’s personnel shall be capable of communicating (oral and written) fluently in English.

10.2 Contractor personnel that operate motor vehicles shall maintain a valid state driver’s license with all class and commodity endorsements required by Public Law 99-570 and state law for the type of vehicle operated.

10.3 A Secret Security Eligibility is required for this position. See Section 8 and related subsections.

10.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract is for six (6) full time support services as follows:

One (1) Cybersecurity Architect/Senior RMF Lead
One (1) Cybersecurity Engineer/Firewall SME
One (1) Cybersecurity Architect
Six (6) Non-Key Billets

11.0 Personnel education/experience/credentials/qualifications.

11.1 Cybersecurity Architect/ Senior RMF Lead

• Master’s Degree or 20 years C&A/A&A experience.
• Certified USMC Validator.
• Experience with USMC “Type” accreditations (ATO/ATC) for large architectures
• Experienced with writing custom Cybersecurity policies for ICS/OT devices and systems
• Expert in the USMC A&A process to include MCCAST 2.0, RMF, DFIA, and CNSSI 1253.
• CNSS 4011, 4012, 4015, 4016A (Required).
• IAM Level 3 (CISSP Desired),
• Experience creating/managing POAMs.
• Experience with DISA STIGs.
• Experience interpreting/implementing standards and policies in accordance with NIST 800-53/DoDI8510.01
• Experience with vulnerability/risk analysis.
• Experience conducting compliance assessments/validations as well as conceptualizing and implementingsecurity systems and architectures.
• Expert in the creation and editing of White Papers, Briefs, Training Materials, and other documentationrelated to the technical solution developed at CLNC.
• Professional Certifications (Required):
- CompTIA Security+ or
- CompTIA CASP or
- Certified Information System Security Professional (CISSP)
• ICS CERT Training (Desired): - Introduction to Control Systems Cybersecurity (101)
- Intermediate Cybersecurity for Industrial Control Systems (201)
- Intermediate Cybersecurity for Industrial Control Systems (202)
- ICS Cybersecurity (301)

11.2 Cybersecurity Engineer/Firewall SME

• Knowledgeable in securing multiple operating systems and other networked devices using appropriate DISASTIG’s and SRG’s
• Experience with creating and maintaining PKI (Public Key Infrastructure) to be used for secure IPsec VPNconnections
• Experience with Palo Alto firewalls in an ICS/OT environment
• Expert in Raspberry PI security and configuration or equivalent device
• Knowledgeable of FIPS 140-2 IPSec configurations including encryption types, key generation/storage, andconfiguring tunnels in a Hub-and-Spoke architecture
• Experience with building, securing, and accrediting Linux servers and devices
• Expert in writing policies and procedures for the secure configuration, installation, and management offirewalls and Encrypt/Decrypt devices on the MCEN in support of the ICS/OT “Type” ATO/ATC
• Professional Certifications (Required)
- CompTIA Security+ or
- CompTIA CASP or
- Certified Information System Security Professional (CISSP)
- ICS-VLP Certificate 100W
• Professional Certifications (Desired):
• ITILv4 Foundations
• ICS-VLP Certificate 210W-01 – 10
• RMF Training (USMC specific)

11.3 Cybersecurity Architect

• Master’s Degree or 20 years C&A/A&A experience.
• Certified USMC Validator.
• Experience with USMC “Type” accreditations (ATO/ATC) for large architectures
• Experienced with writing custom Cybersecurity policies for ICS/OT devices and systems
• Expert in the USMC A&A process to include MCCAST 2.0, RMF, DFIA, and CNSSI 1253.
• CNSS 4011, 4012, 4015, 4016A (Required).
• IAM Level 3 (CISSP Desired),
• Experience creating/managing POAMs.
• Experience with DISA STIGs.
• Experience interpreting/implementing standards and policies in accordance with NIST 800-53/DoDI8510.01
• Experience with vulnerability/risk analysis.
• Experience conducting compliance assessments/validations as well as conceptualizing and implementingsecurity systems and architectures.
• Expert in the creation and editing of White Papers, Briefs, Training Materials, and other documentationrelated to the technical solution developed at CLNC.
• Professional Certifications (Required):
- CompTIA Security+ or
- CompTIA CASP or
- Certified Information System Security Professional (CISSP)
• ICS CERT Training (Desired): - Introduction to Control Systems Cybersecurity (101)
- Intermediate Cybersecurity for Industrial Control Systems (201)
- Intermediate Cybersecurity for Industrial Control Systems (202) - ICS Cybersecurity (301)

11.4 Non-Key Billets. Collectively, the other service support will meet the following requirements:

• Experienced in the use and administration of Nutanix Hyperconverged virtualized environments in supportof EMCS servers and applications.
• Experience in the use of SQL and Microsoft Sever software (current versions).
• Experience in Marine Corps Certification and Accreditation Support Tool (MCCAST V2).
• Networking experience in a DoD environment
• Knowledgeable of electrical and mechanical trades and code requirements.
• Knowledge of TCP/IP, information security/authorization profiles, or security administration of Unix orWindows network/systems
• Experience with HBSS
• Experience with Automated Metering systems
• Knowledge of the USMC DEVSECOPS policy and its applicability to support ICS/OT systems/operations
• Knowledgeable of electrical and mechanical trades and code requirements.
• Experience installing Metasys on servers and building graphics/trends/alarms/scheduling.
• Experience in ICS control systems -Metasys, Niagara AX platform, Alerton, Honeywell, Trend, KMC, andAmerican Automatrix and Loytec.
• Experience in BACnet/MSTP, BACnet over IP, N2 and LON.
• Experience in preforming software security updates, system patches, software patches, and version upgradeson Metasys, Niagara, Itron, and Honeywell software products.
• Experience installing software and maintaining Itron Fixed-Network meter data collection systems.
• Expert in the USMC A&A process to include MCCAST 2.0, RMF, DFIA, and CNSSI 1253.
• Experience creating/managing POAMs.
• Experience with DISA STIGs.
• Experience interpreting/implementing standards and policies in accordance with NIST 800-53/DoDI8510.01
• Experience with vulnerability/risk analysis.
• Professional Certifications (Desired):
• ITILv4 Foundations
• ICS-VLP Certificate 210W-01 – 10
• RMF Training (USMC specific)
• CCENT or CCNA
• Sec+
• CISSP
• Microsoft Certifications

11.5 The contractor shall act and dress professionally at all times. Professional dress is defined as clothing that is neat, clean, and in good repair. Clothing that exposes cleavage, midriff or undergarments is not professional dress.

11.6 Contract services require travel throughout Camp Lejeune and Marine Corps Air Station, New River, NC and their satellite activities located within 50 miles of the Camp Lejeune main gate. Travel between the different locations is considered inherent to the support services detailed in the PWS and will not be reimbursed.

11.7 The Contractor shall be responsible for obtaining all necessary licenses and certifications and for complying with all applicable Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and make them available to the Government upon request.

12.0 Deliverables.

12.1 Develop a bi-monthly FRCS Status Report. The FRCS Status Report shall include details on the work performed during the period of performance such as: number of buildings integrated, status of on-going integration efforts, commissioning and re-commissioning efforts, load shedding efforts, FRCS software and technological news, necessary training, and other pertinent information.

12.2 Provide daily reports and alarms generated through FRCS system and monthly reports of identified issues/corrections through the commissioning and re-commissioning process to PWD Operations and Design staff. The support personnel shall assist in the development of work request and project documentation and assist in the identification of FRCS maintenance priorities from these reports.

12.3 Steward and provide their expertise/ assistance with system integration during the design process, prior to Beneficial Occupancy Date (BOD), and during the BOD process.

12.4 Test and inspect the building DDC/ HVAC system for proper interoperability of data sharing, alarm and event management, trending, scheduling, and device naming into FRCS. Provide the government a list of discrepancies for corrective action required by installing contractor prior to BOD.

12.5 Maintain the master FRCS Network Data spreadsheet, which includes BBMD addressing, network IP assignments, and BACnet instance numbers.

12.6 Attend and prepare necessary materials for PWD’s Monthly Energy Meetings and other periodic FRCS related meeting as required.

13.0 Essential Services. All services provided under this contract have been determined essential in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) Clause 252.237-7023 Continuation of Essential Contractor Services (Oct 2010) and DFARS Provision 252.237-7024 Notice of Continuation of Essential Contractor Services (Oct 2010). The Contractor shall provide plans described in the clause and provision.

14.0 Contract Performance in a Crisis Situation.

14.1 The Contractor shall provide contract support in a crisis situation as directed by the KO. This support
shall be in accordance with the applicable DoD and USMC policies and procedures established for Contractor
support during the crises in effect at the time of the occurrence.
14.2 The Government will facilitate the establishment of required lines of communication to allow the
Contractor to communicate with locations necessary to perform the requirements of the PWS.
14.3 Per MCO P12304.1 Contractor Engineering and Technical Services Personnel Manual (CETS MAN),
DoD Instruction 3020.37, Continuation of Essential DoD Contractor Services During Crises, and DoD
Instruction 1000.1, Identity Cards Required by the Geneva Conventions, the Government will supply the
Contractor with the appropriate and necessary credentials and status for performance of the contract in a crisis
situation, to include consideration of applicable matters of international law and treaties. Contractor personnel
in a crisis situation theater shall comply with the conduct requirements of the CETS MAN and the cognizant
Commander’s regulations and orders pertaining to non-combatant personnel. The Contractor personnel shall
report to the COR.
14.4 Contractor personnel will provide technical input and analysis for Government contingency plans
when directed by the COR or the KO.
14.5 Contractors shall request guidance from a Government media operations center if and/or when
reporters approach them seeking interviews or information about their participation in the Government’s
mission/operation.
14.6 The Contractor shall take all necessary administrative actions required to prepare its personnel for a
crisis situation.

14.7 Definitions of Terms.

(1) Contractor personnel: Includes all agents, personnel, and subcontractors of the prime Contractor.

(2) Crisis Situation: Per DoD Instruction 3020.37, crisis situation means any emergency so declared by the
National Command Authority or the overseas combatant commander, whether or not U.S. Armed Forces
are involved, minimally encompassing civil unrest or insurrection, civil war, civil disorder, terrorism,
hostilities build-up, wartime conditions, disasters, or international conflict presenting a serious threat to
DoD interests.
14.8 To the extent the Contractor is unable to obtain or retain the services of qualified personnel to perform
in a crisis situation, the contract shall not be terminated for default. Every reasonable effort shall be made by
the Contractor to provide uninterrupted services of qualified personnel.

15.0 Government Facilities/Work Spaces.

15.1 Facilities OSHA Compliance. Government facilities have been inspected for compliance with the Occupational Safety and Health Act (OSHA). No hazards have been identified. Should a hazard be subsequently identified, the Government corrects OSHA hazards according to base-wide Government developed and approved plans of abatement taking into account safety and health priorities. A higher priority for correction will not be assigned to the facilities provided hereunder merely because of this contracting initiative. The fact that no such conditions have been identified does not warrant or guarantee that no possible hazard exists. The facilities as furnished will be adequate to meet the responsibilities of the Contractor. Compliance with OSHA and other applicable laws and regulations for the protection of employees is exclusively the obligation of the Contractor. Further, the Government will assume no liability or responsibility for the Contractor's compliance or noncompliance with such requirements, with the exception of the aforementioned requirement to make corrections according to approved plans of abatement subject to base-wide priorities.

15.2 Facilities Modifications. Before any modification of the facilities, performed by the Contractor at its own expense, the Contractor must furnish the Contracting Officer documentation describing, in detail, the modification requested. No alterations to the facilities shall be made without the specific written permission from the Contracting Officer. In the case of alterations necessary for compliance with OSHA, such permission shall not be unreasonably withheld. The Contractor shall return the facilities to the Government in the same condition as received, fair wear and tear and approved modifications excepted.

15.3 Facilities Restrictions. These facilities shall only be used in performance of this contract.

15.4 Facilities Maintenance. The Contractor is responsible for keeping the facilities occupied and surrounding areas in a clean and orderly condition.

15.5 Facilities Vacate. All Contractor's property, equipment, and supplies shall be removed within 48 hours of contract expiration or termination.

15.6 Contractor Workspace. The Government will provide adequate workspace, all equipment as required (e.g., desk, chair, computer, printer, copier, telephone, etc.), utilities, janitorial services, and expendable operating supplies for the duration of this contract. The contractor shall maintain the assigned office space and work areas in a neat and orderly manner. The Contractor shall not remove any government-furnished equipment or supplies from the Government compound without the express written permission.

17.0 Liability, Automobile and Workman’s Compensation Insurance.

The Contractor shall comply with provisions and requirements as contained herein.

17.1 Required Insurance (IAW FAR 28.306 (b) the Contractor shall maintain insurance in the minimum amount
specified below and as required by FAR 52.228-5, Insurance – Work on a Government Installation”, at its own
expense, procure and thereafter maintain the following kinds of insurance with respect to performance under this
contract.
17.1.1 Workmen’s Compensation and Employers Liability Insurance. As required by law except that if
this contract is to be performed in a state which does not require or permit private insurance, then compliance
with the statutory or administrative requirements in any such state will be satisfactory. The required
Workmen’s Compensation insurance shall extend to cover Employer’s liability for accidental bodily injury or
death and for occupational disease with a minimum liability limit of $100,000.
17.1.2 General Liability Insurance. Bodily injury liability insurance, in the minimum limit of $500,000 per
occurrence shall be required on the comprehensive form of the policy.
17.1.3 Automobile Liability Insurance. This insurance shall be required on the comprehensive form of the
policy and shall provide injury liability and property damage liability covering the operation of all
automobiles used in the connection with the performance of the contract. At least the minimum limits of
$200,000 per person and $500,000 per occurrence for bodily injury and $20,000 per occurrence for property
damage shall be required.

18.0 Certificate of Insurance Required. In accordance with the clause entitled “Insurance-Work on a Government Installation” (FAR 52.228-5), the Contractor shall furnish to the KO, a certificate or written statement of insurance prior to commencement of work under the contract. The contract number shall be cited on the certificate.

19.0 Non-personal Service Statement. Contractor employees performing services under this order will be controlled, directed, and supervised at all times by management personnel of the contractor. Contractor management will ensure that employees properly comply with the performance work standards outlined in the performance work statement. Contractor employees will perform their duties independent of, and without the supervision of, any Government official or other Defense Contractor. The purchases, duties, and responsibilities set forth in the purchase order may not be interpreted or implemented in any manner that results in any contractor employee creating or modifying Federal policy, obligating the appropriated funds of the United States Government, overseeing the work of Federal employees, providing direct personal services to any Federal employee, or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the Federal Acquisition Regulation (FAR). The Government will control access to the facility and will perform the inspection and acceptance of the completed work.

20.0 Contractor’s Unauthorized Work Performance. The contractor shall not perform work that deviates from contract requirements and specifications. If the contractor deviates from contract requirements and specifications without approval of the CONTRACTING OFFICER, such deviation shall be at the risk of the contractor and any cost related thereto shall be borne by the contractor.

21.0 Non-Disclosure Agreements. All Contractors receiving access to Government data or data from another Contractor through this contract must provide a signed non-disclosure agreement prior to commencing work. The original agreement shall be submitted to the KO and a copy shall be submitted to the COR. All non-disclosure agreements shall be signed by all Contractors involved in this effort and returned within five (5) business days after receipt of award or within five (5) business days of onboarding of new incoming contractor. “Business day” as used in the context of this paragraph means normal Government working hours between the hours of 0900 and 1500, Monday to Friday, excluding weekends and observed holidays as described above.

22.0 CONTRACTING OFFICER’S REPRESENTATIVE. In order to expedite the administration of this contract, the following delineation of duties is provided. The names, addresses, and phone numbers for these offices or individuals are included elsewhere in the contract award document. The office or individual designated as having responsibility should be contacted for any questions, clarifications or information regarding the administration of this function assigned.

** The name of the COR for this contract will be provided at the time of contract award.

In the absence of the COR named above (due to reasons such as leave, illness, or official travel), all responsibilities and functions assigned to the COR shall be the responsibility of the COR’s supervisor, acting on behalf of the COR.

22.1 The Contracting Officer’s Representative (COR), TBD AT TIME OF AWARD, is responsible for interface with the contractor and performance of duties set forth below. It is emphasized that only the Contracting Officer (KO) has the authority to modify the terms of the contract. In no event will any understanding, agreement, modification, change order, or other matter deviating from the terms of the basic contract between the contractor and any other person be effective or binding on the government. If in the opinion of the contractor an effort outside the scope of the contract is requested, the contractor shall promptly notify the PCO in writing. No action may be taken by the contractor unless the PCO has issued a contractual change. The COR duties are as follows:

22.1.1 Technical Interface.

22.1.1.1 The COR is responsible for all Government technical interface concerning the contractor and furnishing technical instructions to the contractor. These instructions may include: technical advice/recommendations/clarifications of specific details relating to the technical aspects of the contract requirements; milestones to be met within the general terms of the contract or specific subtasks of the contract; or, any other interface of a technical nature necessary for the contractor to perform the work specified in the contract or order. The COR is the point of contact through whom the contractor can relay questions or problems of a technical nature to the PCO.

22.1.1.2 The COR is prohibited from issuing any instruction which would constitute a contractual change. The COR shall not instruct the contractor how to perform. If there is any doubt whether technical instructions contemplated fall within the scope of work, contact the PCO for guidance before transmitting the instructions to the contractor.

22.1.1.3 When, in the opinion of the contractor; the COR request effort outside the existing scope of the contract, the contractor shall promptly notify the Contracting Officer in writing. No action shall be taken by the contractor under such direction until the Contractor Officer has issued a modification to the contract (or delivery order) or has otherwise resolved the issue.

22.1.2 Contract Surveillance.

22.1.2.1 The COR shall monitor the contractor’s performance and progress under the contract. In performing contract surveillance duties, the COR should exercise extreme care to ensure that he/she does not cross the line of personal services. The COR must be able to distinguish between surveillance (which is proper and necessary) and supervision (which is not permitted). Surveillance becomes supervision when an individual goes beyond enforcing the terms of the contract. If the contractor is directed to perform the contract services in a specified manner, the line is being crossed. In such a situation, the COR’s actions would be equivalent to using the contractor’s personnel as if they were government employees and would constitute transforming the contract into one for personal services.

22.1.2.2 The COR shall monitor the contractor’s performance to see that inefficient or wasteful methods are not being used. If such practices are observed, the COR is responsible for taking reasonable and timely action to alert the contractor and the PCO to the situation.

22.1.2.3 The COR will take timely action to alert the PCO to any potential performance problems. If performance schedule slippage is detected, the COR should determine the factors causing the delay and report them to the PCO, along with the contractor’s proposed actions to eliminate or overcome these factors and recover the slippage. Once a recovery plan has been put in place, the COR is responsible for monitoring the recovery and keeping the PCO advised of progress.

22.1.2.4 If the Contractor Performance Assessment Reporting System (CPARS) is applicable to the contract, the COR is responsible for completing a Contractor Performance Assessment Report (CPAR) in the CPARS Automated Information System (AIS). The initial CPAR, under an eligible contract, must reflect evaluation of at least 180 days of contractor performance. The completed CPAR, including contractor comments, if any, (NOTE: Contractors are allowed 30 days to input their comments) should be available in CPARS AIS for reviewing official (PCO) review no later than 270 days after the start of contractor performance. Subsequent CPARS covering any contract option periods should be ready at 1-year intervals thereafter.

22.1.3 Invoice Review and Approval/Inspection and Acceptance.

22.1.3.1 The COR is responsible for all quality assurance of services performed and acceptance of the services or deliverables. The COR shall expeditiously review copies of the contractor’s invoices or vouchers, certificate of performance and all other supporting documentation to determine the reasonableness of the billing. In making this determination, the COR must take into consideration all documentary information available, and any information developed from personal observations.

22.1.3.2 The COR must indicate either complete or partial concurrence with the contractor’s invoice/voucher by executing the applicable certificate of performance furnished by the contractor.

22.1.3.3 The COR will provide the RCO with copies of acceptance documents such as Certificates of Performance.

22.1.3.4 Upon completion of all services under the contract, the COR shall work with the Contractor to obtain and execute a final invoice no more than 60 days after completion of the contract performance. The COR shall ensure that the invoice is clearly marked as a “Final Invoice.”

22.1.4 Contract Modifications.

22.1.4.1 The COR is responsible (if necessary) for developing the statement of work for task orders, change orders, or modifications and for preparing an independent government cost estimate of the effort described in the proposed statement of work.

22.1.4.2 The COR shall provide available and relevant Past Performance information with each request for new Task Orders.

22.1.4.3 The COR shall review and evaluate the contractor’s proposal and furnish comments and recommendations.

22.1.5 Administrative Duties.

22.1.5.1 The COR is responsible for taking appropriate action on technical correspondence pertaining to the contract and for maintaining files on each contract. This includes all modifications, government cost estimates, contractor invoices/vouchers, certificates of performance, DD 250 forms and contractor’s status reports.

22.1.5.2 The COR shall maintain files on all correspondence relating to the contractor performance, whether satisfactory or unsatisfactory, and on trip reports for all government personnel visiting the contractor’s place of business for the purposes of discussing the contract.

22.1.5.3 The COR must take prompt action to provide the PCO with any contractor or technical code request for change, deviation or waiver, along with any supporting analysis or other required documentation.

22.1.6 Security. The COR is responsible for ensuring that any applicable security requirements are adhered to.

22.1.7 Standards of Conducts. The COR is responsible for reading and complying with all applicable agency standards of conduct and conflict of interest instructions.

22.1.8 Written Report/Contract Completion Statement.

22.1.8.1 The COR is responsible for timely preparation and submission to the PCO, of a written, annual evaluation of the contractor’s performance. The report shall be submitted within 30 days prior to the exercise of any contract option and 60 days after contract completion. The report shall include a written statement that services were received in accordance with the Contract terms and that the contract is now available for close- out. The report shall also include a statement as to the use made of any deliverables furnished by the contractor. For contracts where delivery orders are issues, one consolidated report which addresses all actions under the contract may be submitted.

22.1.8.2 If the Contractor Performance Assessment Reporting System (CPARS) is applicable to the contract, the COR is responsible for completing a final Contractor Performance Assessment Report (CPAR) in the CPARS within 30 days of contract completion.

22.1.9 The COR is responsible for providing necessary assistance to the Contracting Officer in de-obligations by verifying all service invoices and payments are accurate and paid, international service invoices are proper and accurate, and assisting in performing contract close-out in accordance with FAR 4.804, Closeout of Contract Files.

23.0 Quality Assurance Monitoring.

23.1 The contractor is responsible for maintaining the acceptable quality level of performance as required by the
PRS during vacation periods for support personnel. The determination of how to do that is the Contractor’sresponsibility.
23.2 The COR will conduct an initial review of the Contractor’s quality control process to verify its adequacy.
During the course of service performance, the COR will monitor the process for managing performance in aquality, timely, complete, safe, and cost-efficient manner. Level of surveillance will initially be set to assure theCOR that requirements of the PWS are being met and that a process exists and is in place to ensure quality. If,during the course of this surveillance, the COR discovers the service provider is not complying with theestablished level of quality, the COR may increase the level of surveillance. If performance exceeds theestablished level of quality, the COR may decrease the level of surveillance. All documents to support methods ofsurveillance shall be filed in a Quality Assurance file for the contract.

12.1 The Government will evaluate the Contractor’s performance each time service is performed by appointed personnel, known as Contracting Officer Representatives (COR) or Task Order Manager (TOM), to monitor performance to ensure services are received. The COR will also evaluate the Contractor's performance through scheduled on-site inspections of the Contractor's quality control program. The COR may inspect each task as scheduled or increase the number of quality control inspections if deemed appropriate because of repeated failures discovered during quality control inspections. Likewise, the Government may decrease the number of quality control inspections if merited by performance. The Government will periodically inspect the environmental condition of selected buildings to ensure compliance with regulatory standards.

23.3 The Contractor shall conduct internal reviews of program performance by using the approach and benchmarks delineated in the QCP. The Contractor shall provide the results of these evaluations to the Government quarterly. The Government will be responsible to perform periodic Quality Assurance inspections on work accomplished by any technician.

23.4 The Contractor shall conduct internal reviews of program performance by using the approach and benchmarks delineated in the QCP. The Contractor shall provide the results of these evaluations to the Government quarterly. The Government will be responsible to perform periodic Quality Assurance inspections on work accomplished by any technician.

23.5 A file of all quality control inspections, and any corrective actions required shall be maintained by the Contractor and made available to the Government when requested.

24.0 Quality Assurance Surveillance Plan.

24.1 Quality Assurance Surveillance Plan (QASP). The government shall monitor Contractor(s) performance in accordance with the Quality Assurance Plan (QASP). The COR will evaluate the contractor's performance by using a QASP and Performance Requirement Summary Objectives to assure services meet contract requirements. The Government's QASP is not a substitute for Quality Control by the contractor. This QASP is intended to provide the Government’s Contracting Officer’s Representative (COR) an effective and systematic method of surveillance for each service in the PWS.

24.2 Purpose. This QASP has been developed to provide the standard of surveillance for monitoring contractor services in support of this contract. The COR will be appointed at the time of award and COR contact information will be provided. The COR will supervise the performance of Quality Assurance Evaluators (QAEs) and will use this QASP to ensure the standards of the contract are being met. The QASP will be applied in the administration of the EMCS support service contract to ensure Performance Work Statement (PWS) services meet the Government’s technical requirements for quality and completeness at the cost and within the timeframes established by the contract.

24.3 Performance Standards. The QASP provides a systematic method to evaluate the service the contractor is required to furnish.

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .