Performance Work Statement.docx

PERFORMANCE WORK STATEMENT (PWS)

FOR

158th Communications Squadron Information Technology Equipment Destruction Services

1.0 General:

1.1 Scope: The contractor shall provide all personnel, equipment, tools, materials, supervision, and quality control necessary, except as specified in Paragraph 3.0 as Government Furnished, to perform Information Technology (IT) Equipment Destruction Services, as defined in this PWS.

1.2 Background: All hard drive sanitization procedures must be accomplished IAW NSA/CSS Policy Manual 9-12 dated 4 December 2020. To prevent unauthorized individuals from gaining access to classified or sensitive information, all Department of the Air Force (DAF) organizations are required to sanitize I.T. equipment and media before its disposal or release to an outside organization. Sanitizing the components using NSA-approved methods of destruction renders target data recovery infeasible. Incineration, smelting, and disintegration are the only approved sanitization methods.

1.3 Period of Performance (PoP): The Period of Performance shall be 1-2 days.

1.4 General Information:

1.4.1 Place and Performance of Services: The place of service shall be at the vendor`s location. The contractor shall provide pick up hard drive materials from the 158th FW installation and transport it to the vendor’s location of service. Pick up services between the hours of 0630-1430 on for the day of the requirement, except on recognized US holidays. The contractor shall always maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the work force are essential.

1.4.1.1 Telework: The Government does not permit the contractor to telework in support of this requirement. In furtherance of Continuity of Operations Planning (COOP), a telework program may be enacted to ensure that the Government's mission-critical operations stay operational during times of national emergency or incidents of national significance. Telework shall be at no additional cost to the Government.

1.4.1.2 Unscheduled gate closures by the Security Police may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

1.4.1.3 The contractor’s employees shall become familiar with and obey the regulations of the installation; including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times and shall be subject to such checks as may be deemed necessary. The contractor shall ensure compliance with all regulations and orders of the installation, which may affect performance. The Government reserves the right to direct the removal of an employee from Government property or revoke access to Government systems for misconduct, security reasons, or any overt evidence of communicable disease. Removal of contractor employees for reasons stated above does not relieve the Contractor from responsibility for total performance of this contract.

1.4.2 Recognized Holidays: The following are recognized United States (US) holidays. The contractor shall not perform services on these days:

1.4.2.1 New Year’s Day: January 1st

1.4.2.2 Martin Luther King, Jr.’s Birthday

1.4.2.3 President’s Day

1.4.2.4 Memorial Day

1.4.2.5 Juneteenth National Independence Day: June 19th

1.4.2.6 Independence Day: July 4th

1.4.2.7 Labor Day

1.4.2.8 Columbus Day

1.4.2.9 Veteran’s Day: November 11th

1.4.2.10 Thanksgiving Day

1.4.2.11 Christmas Day: December 25th

1.4.3 Reserved.

1.4.4 Reserved.

1.4.5 Access and General Protection/Security Policy and Procedures. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the Contracting Officer’s Representative (COR). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the local installation’s Security Forces, Director of Emergency Services or local Security Office. The contractor shall ensure compliance with all personal identity verification requirements as directed by DoD, Headquarters Air Force (HAF) and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

5352.242-9000 Contractor Access to Air Force Installations (OCT 2019)

1. The contractor shall obtain base identification and vehicle passes, if required, for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. Contractor personnel are required to wear or prominently display installation identification badges or contractor-furnished, contractor identification badges while visiting or performing work on the installation.

2. The contractor shall submit a written request on company letterhead to the contracting officer listing the following: contract number, location of work site, start and stop dates, and names of employees and subcontractor employees needing access to the base. The letter will also specify the individual(s) authorized to sign for a request for base identification credentials or vehicle passes. The contracting officer will endorse the request and forward it to the issuing base pass and registration office or Security Forces for processing. When reporting to the registration office, the authorized contractor individual(s) should provide a valid driver s license, current vehicle registration, valid vehicle insurance certificate, and [insert any additional requirements to comply with local security procedures] to obtain a vehicle pass.

3. During performance of the contract, the contractor shall be responsible for obtaining required identification for newly assigned personnel and for prompt return of credentials and vehicle passes for any employee who no longer requires access to the work site.

4. When work under this contract requires unescorted entry to controlled or restricted areas, the contractor shall comply with applicable installation/facility access and local security policies and procedures, which may be obtained from the Contracting Office.

5. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

6. Failure to comply with these requirements may result in withholding of final payment.

1.4.5.1. Reserved.

1.4.5.1.1 Reserved.

1.4.5.1.2 Reserved.

1.4.5.1.3 Reserved.

1.4.5.1.4 Reserved.

1.4.5.1.5 Reserved.

1.4.5.1.6 Reserved.

1.4.5.2 For Contractors that do not require CAC but require access to a DoD Facility and/or Installation. Contractor and all associated sub-contractor’s employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Air Force Instruction (AFI) 10-245, AFI 31-101 and Air Force Manual (AFMAN) 31-113), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative)

1.4.5.3 Antiterrorism Awareness Level I Training (AT Level I). All contractor employees, to include subcontractor employees, requiring access to US Government installations, facilities and controlled access areas shall complete AT Level I training within 15 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. AT Level I may be accomplished by a Level I qualified instructor, completing the Force Protection computer-based training (CBT) course on the Advanced Distributed Learning System (ADLS) or Joint Knowledge Online at http://jko.jten.mil. Tracking for each contractor or subcontractor employee is the responsibility of the Contracting Officer or unit AT Representative. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee to the Contracting Officer within 15 calendar days after completion of training by each employee or subcontractor personnel.

1.4.5.4 Reserved.

1.4.5.5 Communications Security/Information Technology (COMSEC/IT) Security. All communications with DoD organizations are subject to COMSEC review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DoD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations. Therefore, the contractor is advised that any time contractor personnel place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DoD information. The contractor shall abide by all Government regulations concerning the authorized use of the Government's computer network, including the restriction against using the network to recruit Government personnel or advertise job openings.

1.4.5.6 Reserved.

1.4.5.6.1 Reserved.

1.4.5.6.2 Reserved

1.4.5.7 Reserved.

1.4.5.8 Reserved.

1.4.5.9 Reserved

1.4.5.10 Protection of Personally Identifiable Information (PII). The contractor shall protect all PII encountered in the performance of services in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) 224.103 Personally Identifiable Information and Department of Defense Directive (DoDD) 5400.11, Department of Defense Privacy Program, and DoD 5400.11-R. If a PII breach results from the contractor’s violation of the aforementioned policies, the contractor shall bear all notification costs, call-center support costs, and credit monitoring service costs for all individuals whose PII has been compromised.

1.4.5.11 Requirement for OPSEC Training. In accordance with AFI 10-701, Operations Security, OPSEC PMs/Signature Managers/Coordinators will provide OPSEC training or training materials to contract employees within 30 days of employees’ initial assignment to the contract and prior to having access to any critical information (CI) and annually thereafter. General organizational orientations may need to be supplemented by duty-related orientations in the work center targeted toward specific critical information and vulnerabilities associated with the work. Initial training (OPSE 1301 - OPSEC Fundamentals) is located on the ADLS website and refresher OPSEC training is conducted annually (at Commander's Call). The contractor shall submit certificates of completion for each contractor employee to the KO within 15 calendar days after completion of training.

1.4.5.12 OPSEC Plan. The contractor shall develop an OPSEC Plan and provide it to the KO within 15 calendar days of contract award to be reviewed and approved by the responsible Government OPSEC officer, per AFI 10-701, Operations Security. This Plan shall include the Government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. For the contractor to effectively comply with OPSEC provisions of the contract, the organization will provide the following guidance: (1) Organization’s Critical Information; (2) Adversaries’ collection threat information as it applies to the organization’s mission and the contract; (3) Operations Security guidance; and (4) Specific OPSEC measures the organization requires (as appropriate).

1.4.5.13 The Contractor shall require Handling or Access to Classified Information with the sole purpose of incineration. For contracts that require handling or access to classified information, the contractor shall comply with FAR 52.204-2, Security Requirements, including the National Industrial Security Program Operating Manual (DoD 5220.22-M) and applicable updates/changes. This clause involves access to information classified “Confidential/Secret/Top Secret” and requires contractors to comply with a Visitor Group Security Agreement (VGSA) when designated as a Visitor Group (a Visitor Group is defined as 90 consecutive days or more) at all contractor operations located on Air Force/Air National Guard installations in accordance with this PWS. Contract personnel must be entered in the Defense Information System for Security (DISS). A DD 254, DoD Contract Security Classification Specification, is required for all classified contracts. Completion of localized security training (information protection related material) will be accomplished at the Wing/Unit level. Derivative Classification and Marking Classified CBTs may also be required as per assigned duties (i.e., SIPRNet).

1.4.5.14 Reserved.

1.4.6 Physical Security. The contractor shall safeguard all Government property provided for contractor use. At the close of each work period, Government facilities, equipment and materials shall be secured.

1.4.6.1 Reserved.

1.4.6.1.1 Reserved

1.4.6.1.2 Reserved

1.4.6.1.3 Reserved.

1.4.6.2 Reserved.

1.4.7 Special Qualifications: The contractor shall ensure all employees possess all required licenses for operating high temperature certified destruction used in the performance of this contract. Approval by the Department of Navy. This does not include education or other qualifications for the position in which the contractor employee is performing, dress codes, or other information. (NOTE: The Government does not provide training to contractors. Contractors must ensure that any personnel performing under a contract are fully trained, licensed, certified, and otherwise qualified to provide services.)

1.4.8 Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the KO in accordance with FAR 42.5. The KO, COR and other Government personnel, as appropriate, may meet periodically with the contractor to review the contactor’s performance. At these meetings, the KO will apprise the contractor of how the Government views the contractor’s performance and the contractor shall apprise the Government of problems, if any, being experienced. The contractor shall resolve outstanding issues raised by the Government. Contractor attendance at these meetings shall be at no additional cost to the Government.

1.4.9 Contract Manager (CM): The contactor shall designate a CM who shall ensure performance under this contract. The name of this person, and an alternate who shall act for the contractor when the CM is absent, shall be designated in writing to the KO. The CM or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The CM shall work through the KO, to resolve issues, receive technical instructions, and ensure adequate performance of services. The CM shall ensure that contractor employees do not perform any services outside the scope of the contract without an official modification issued by the KO. The CM shall ensure contractor employees understand that services performed outside the scope of the contract are performed wholly at the expense of the contractor.

1.4.10 Identification of Contractor Employees: All contractor personnel attending meetings, answering Government telephones and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression that they are Government employees. The contractor shall ensure that all documents or reports produced by contractor personnel are suitably marked as contractor products or that contractor participation is appropriately disclosed. The contractor’s status as a “contractor” shall be predominantly displayed in all correspondence types (to include signature blocks on e-mail) and dealings with Government or non-Government entities. Contractor personnel shall wear identification badges distinguishing themselves as such. The badges shall have the company name, employee name and the word “contractor” displayed.

1.4.10.1 The contractor shall retrieve all identification media (including vehicle passes) from its employees who depart employment for any reason. The contractor shall return all identification media (i.e., badges and vehicles passes) to the KO within 14 days of an employee’s departure.

1.4.11. Combating Trafficking in Persons: The United States Government has adopted a zero-tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the United States Government’s zero tolerance policy, the actions that will be taken against employees for violations of this policy. The contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at FAR 22.17.

1.4.12 Reserved.

1.4.13 Reserved.

1.4.14 Organizational Conflicts of Interest (OCI): The contractor and subcontractor personnel performing services under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs, as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO. In the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.4.15 Reserved.

2.0 Definitions and Acronyms:

2.1 Definitions:

2.1.1 Contractor: A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.2 Defective Service: A service output that does not meet the standard of performance associated with the PWS.

2.1.3 Deliverable: Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.4 Key Personnel: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.5 Physical Security: Actions that prevent the loss or damage of Government property.

2.1.6 Quality Assurance: The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.7 Quality Assurance Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.8 Quality Control: All necessary measures taken by the Contractor to ensure that the quality of an end product or service shall meet contract requirements.

2.1.9 Subcontractor: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 Acronyms:

3.0 Government Furnished Property, Material, Equipment and Services (GFP/M/E/S): The Government will provide the property, material, equipment, and/or services listed below solely for the purpose of performance under this contract.

3.1 Property: The Government will furnish the necessary workspace for the contractor to perform services outlined in this PWS to include desk space, telephones, computers and other items necessary to maintain an office environment.

3.2 Reserved.

3.3 Reserved.

3.4 Services: The government will supply two couriers to safeguard materials and observe the incineration process.

3.5 Utilities: Reserved

4.0 Contractor Furnished Property, Materials, and Equipment (CFP/M/E)

4.1 General: Except for those items specifically stated to be Government-Furnished in Paragraph 3.0, the contractor shall furnish everything required to perform these services as indicated in Paragraph 1.1.

4.2 Reserved.

4.3 Reserved.

5.0 Requirements: The contractor shall provide services with the primary purpose of destroying computer storage devices and peripherals, to render unreadable. The Government shall provide transportation of equipment from the 158th FW to the contractor’s facility for the purpose of incineration.

5.1 Incinerate: The Contractor shall incinerate to Department of Navy Standards in accordance with NSA/CSS Policy Manual 9-12 approved procedures. Incineration shall occur at a minimum temperature of 670 degrees Celsius for a minimum of one hour.

5.1.1 Certification of destruction: Upon completion the Contractor shall provide a Certificate of Destruction after completion and inspection of destroyed equipment.

6.0 Applicable Publications: Publications applicable to this PWS are listed below:

Publication (Chapter/Page)

Federal Acquisition Regulation https://www.acquisition.gov/?q=browsefar

Defense Federal Acquisition Regulation Supplement http://www.acq.osd.mil/dpap/dars/dfarspgi/current/index.html or https://www.acquisition.gov/dfars

Joint Travel Regulation (JTR) https://www.defensetravel.dod.mil/site/travelreg.cfm

DoDM 1000.13-M-V1 DoD Identification (ID) Cards (Enclosure 2, paragraph 3.b) 01/23/2014 (Change 1: 07/28/2020) http://www.esd.whs.mil/Directives/issuances/dodm

Federal Information Processing Standards (FIPS) Publication 201-2 Personal Identity Verification (PIV) of Federal Employees and Contractors (paragraph 9) August 2013 http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.201-2.pdf

https://www.esd.whs.mil/Directives/issuances/dodm/

DoDI 5200.46 DoD Investigative and Adjudicative Guidance for Issuing the Common Access Card (CAC) 09/09/14 (Change 1: 05/04/2018) https://www.esd.whs.mil/Directives/issuances/dodi/

Homeland Security Presidential Directive (HSPD)-12 Policy for a Common Identification Standard for Federal Employees and Contractors 08/27/2004 https://www.dhs.gov/homeland-security-presidential-directive-12

DoDI 5400.11 Department of Defense Privacy and Civil Liberties Programs 01/29/2019 https://www.esd.whs.mil/Directives/issuances/dodi/

DoD 5400.11-R Department of Defense Privacy Program 05/14/2007 https://www.esd.whs.mil/Directives/issuances/dodm/

DoDD 8140.01 Cyberspace Workforce Management

10/05/2020 https://www.esd.whs.mil/Directives/issuances/dodd/

DoD 8570.01-M Information Assurance Workforce Improvement Program 12/19/2005 (Change 4: 11/10/2015) https://www.esd.whs.mil/Directives/issuances/dodm/

DoD 5220.22-M National Industrial Security Program Operating Manual (NISPOM) 02/28/2006 (Change 2: 05/18/2016) https://www.esd.whs.mil/Directives/issuances/dodm/

AFI 10-245

Antiterrorism 03/28/2013 (Certified current 03/30/2017) https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

AFI 31-101

Security Forces Standards and Procedures 08/18/2020 https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

AFMAN 31-113

Security Forces Standards and Procedures 03/05/2013 Change 1:

12/02/2015 https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

AFPD 17-1

Information Dominance Governance and Management 04/12/2016 https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

AFMAN 17-1301

Computer Security (COMPUSEC) 02/12/2020 https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

AFI 10-701

Operations Security 7/24/2019 (Change 1:

06/09/2020) https://www.e-publishing.af.mil/Product-Index/#/?view=pubs&orgID=10141&catID=1&series=-1&modID=449&tabID=131

6.1 Applicable Forms: Forms applicable to the PWS are listed below:

DD 441

Department of Defense Security Agreement Feb 2020 http://www.dtic.mil/whs/directives/forms/dd/ddforms0001-0499.htm

DD 250

Material Inspection and Receiving Report

TECHNICAL EXHIBIT 1

Performance Requirements Summary (PRS)

This PRS includes performance objectives the Government will use to determine contractor performance and will compare contractor performance to the Acceptable Quality Level (AQL).

5.1 Incinerate

5.1.1 Certificate of Completion

TECHNICAL EXHIBIT 2

Deliverables Schedule

1.4.5.11 OPSEC

Training Certificates

TECHNICAL EXHIBIT 3

Estimated Workload Data

This information is provided for historical background only. It is not a guarantee of workload quantities.

Ver. October 2022