PERFORMANCE WORK STATEMENT.docx

PERFORMANCE WORK STATEMENT (PWS)

FOR ON-SITE SHREDDING

Part 1, General

Part 2, Definitions, Abbreviations, and Acronyms

Part 3, Government-Furnished Property

Part 4, Contractor-Furnished Property

Part 5, Requirements

Part 6, Applicable Publications

Technical Exhibit 1 (Performance Requirements Summary)

Technical Exhibit 2 (Location Spreadsheet)

1.0 General

1.1 Scope: The contractor shall provide all personnel, equipment, tools, materials, supervision, and quality control necessary, except as specified in paragraph 3 as Government furnished, as defined in this PWS, to provide GA Army National Guard On-Site Shredding Services.

1.2 Background: Crosscut shredding of critical/sensitive DOD information is required per AR 380-5. Shredding on-site saves the government dollars, reducing labor hours spent shredding via smaller less efficient shredders. Shred boxes let the employee put the critical information in a secure place to be shredded later. In addition to time savings, commercial larger shredders will provide the appropriate document via certified cross-cut.

1.3 Period of performance: The period of performance shall be 1 Base Year of 12 months and 4 option years.

1.4.1 Place and Performance of Services. The Contractor shall provide services within core operating hours, which are 0900-1500, Monday thru Friday, except on recognized Federal holidays or when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings. The Contractor shall, at all times, maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential. The Contractor will not subcontract any work to be performed under this contract to a subcontractor.

1.4.2 Recognized Holidays: The following are recognized Federal holidays. The Contractor shall perform services on the Federal observance of these days:

· New Year’s Day (January 1)

· Martin Luther King, Jr.’s Birthday (3rd Monday in January)

· Washington's Birthday (President’s Day) (3rd Monday in February)

· Memorial Day (last Monday in May)

· Juneteenth National Independence Day (June 19)

· Independence Day (July 4)

· Labor Day (1st Monday in September)

· Columbus Day (2nd Monday in October)

· Veterans Day (November 11)

· Thanksgiving Day (4th Thursday in November)

· Christmas Day (December 25)

1.4.3 Quality Control (QC): The Contractor shall develop and maintain an effective QC Plan (QCP) to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non- recurrence of defective services. The Contractor’s QCP is the means by which it assures itself that its work complies with the requirements of the contract. As a minimum, the Contractor shall develop QC procedures that address the areas identified in Technical Exhibit 1, Performance Requirements Summary. After acceptance of the QCP, the Contractor shall obtain acceptance in writing from the Contracting Officer (KO) for any proposed changes to its QCP.

1.4.4 Quality Assurance (QA). The Government shall evaluate the Contractor’s performance under this contract in accordance with the QA Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and acceptable quality level(s) (defect rate(s)).

1.4.5 Installation Access and Security Requirements. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the COR. The contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office. The contractor shall ensure compliance with all personal identity verification requirements as directed by Department of Defense (DoD), Headquarters Department of Army (HQDA) and/or local policy (see PWS 6.0). Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

1.4.5.1 The contractor shall obtain an Army Knowledge Online (AKO) email address for each applicant, including subcontractors, who may be deployed or require logical access to a Government computer network. Note: If employees of a contractor lose the privilege to access AKO, they lose the ability to renew their CAC. Therefore, it is critical that contractor employees maintain their AKO accounts.

1.4.5.2 For contractors that do not require a CAC, but require access to a DoD facility or installation: Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05), and applicable installation, facility and area commander installation/facility access, and local security policies and procedures. (provided by a Government representative).

1.4.5.3 Awareness Training (AT) Level 1: All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level 1 training within 30 calendar days after contract start date and within 30 calendar days of new employees commencing performance. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee to the COR (if no COR is assigned, delete “to the COR” and replace with “to the KO”) within 15 calendar days after completion of training by each employee or subcontractor personnel. AT Level 1 awareness training is available at the following website: https://jko.jten.mil/courses/atl1/launch.html.

1.4.5.4 iWATCH Training: The contractor and all associated subcontractors with an area of performance within an Army-controlled installation, facilities or area shall brief all employees on the local iWATCH program (training standards provided by the requiring activity Antiterrorism Officer (ATO)). This local developed training shall be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR or the KO. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance. The contractor shall report completion for each contractor employee and subcontractor employee to the COR, (if no COR is assigned, delete “to the COR” and replace with “to the KO”) within 15 calendar days after completion of training.

1.4.5.5 Complete initial and/or annual Information Assurance (IA) training as defined in the IA Best Business Practices (BBP) training (https://atc.us.army.mil/iastar/docs/Training_BBP.pdf).

1.4.5.6 Protection of Personally Identifiable Information (PII). The contractor shall protect all PII encountered in the performance of services in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) 224.103 Personally Identifiable Information and Department of Defense Directive (DoDD) 5400.11, Department of Defense Privacy Program, and DoD 5400.11-R. If a PII breach results from the contractor’s violation of the aforementioned policies, the contractor shall bear all notification costs, call-center support costs, and credit monitoring service costs for all individuals whose PII has been compromised.

1.4.5.7 OPSEC Training: In accordance with AR 530-1, Operations Security, new contractor employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty and annually thereafter. The contractor shall submit certificates of completion for each contractor employee to the COR within 15 calendar days after completion of training. Level 1 OPSEC training is available at https://securityawareness.usalearning.gov/opsec/index.htm.

1.4.5.8 OPSEC SOP/Plan. The contractor shall develop an OPSEC Standard Operating Procedure (SOP)/Plan and provide it to the COR within 90 calendar days of contract award to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This SOP/Plan shall include a process to identify the Government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. The contractor shall implement OPSEC measures as required by the Government. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor shall ensure this individual becomes OPSEC Level II certified within 90 days of appointment as OPSEC coordinator in accordance with AR 530-1. Contractor shall provide a copy of the certification to the COR NLT 15 days after completion.

1.4.5.9 Threat Awareness and Reporting Program (TARP). Per AR 381-12, Threat Awareness and Reporting Program (TARP), contractor employees with security clearances must receive annual TARP training by a counterintelligence (CI) agent or other trainer as specified in Chapter 2 Threat Awareness and Education, Section II, paragraph 2-4b. The contractor shall identify annual TARP training, personnel trained, and date of training within 15 days of training completion.

PART 2

DEFINITIONS, ABBREVIATIONS, AND ACRONYMS

2.0 Definitions, Abbreviations, and Acronyms.

2.1 Definitions

2.1.1 Contractor: A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.2 Defective Service: A service output that does not meet the standard of performance associated with the PWS.

2.1.3 Deliverable: Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.4 Key Personnel: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.5 Physical Security: Actions that prevent the loss or damage of Government property.

2.1.6 Quality Assurance: The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.7 Quality Assurance Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.8 Quality Control: All necessary measures taken by the Contractor to ensure that the quality of a product or service shall meet contract requirements.

2.1.9 Subcontractor: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 Abbreviations and Acronyms.

ACoE. Army Community of Excellence AEI. Army Enterprise infrastructure AFARS. Army Federal Acquisition Regulation Supplement AGR. Active Guard/Reserve APD. Army Publishing Directorate AQL. acceptable quality level AR. Army Regulation ARB. Automated Records Branch ARNG. Army National Guard ASVAB. Armed Services Vocational Aptitude Battery AT. anti-terrorism ATAG. Assistant Adjutant General (Army or Air) ATCTS. Army Training and Certification Tracking System CAC. common access card Cdr. commander CE. Contractor Employee CFP/M/E. Contractor-furnished property/materials/equipment CFR. Code of Federal Regulations CMRA. Contractor Manpower Reporting Application COI. Center of Influence COMSEC. communications security CONUS. contiguous United States (excludes Alaska and Hawaii) COR. contracting officer’s representative COTS. commercial, “off the shelf” CSM. command sergeant major (see also SGM) CVS. Contractor Verification System CY. calendar year DA. Department of the Army DANTES. Defense Activity for Non-Traditional Education Support DD. Department of Defense (forms) DEERS. Defense Enrollment Eligibility Reporting System DEPCO. deputy commanding officer DFARS. Defense Federal Acquisition Regulation Supplement DISA. Defense Information Systems Agency DoD. Department of Defense (organization) DoDI. Department of Defense Instruction DoDM. Department of Defense Manual e-QIP. Electronic Questionnaires for Investigations Processing ESO. (1) Education Services Office (2) Education Services Officer FAR. Federal Acquisition Regulation FBI. Federal Bureau of Investigation FEMA. Federal Emergency Management Agency (see also GEMA) FIPS. Federal Information Processing Standards Publication FPCON. force protection condition FRAGO. fragmentary order FTS. full-time support FY. fiscal year G-1. Deputy Chief of Staff, Personnel GAARNG. Georgia Army National Guard GEMA. Georgia Emergency Management Agency (see also FEMA) GFEBS. General Fund Enterprise Business System GFP/M/E/S. Government-furnished property/materials/equipment/services GIMS. Guard Incentive Management System GIS. government information system HIPAA. Health Insurance Portability and Accountability Act HQDA. Headquarters, Department of the Army HSPD. Homeland Security Presidential Directive IA. information assurance IAW. in accordance with ID. Identification IM. Incentive Manager IOT. in order to IP. internet protocol iPERMS. Interactive Personnel Electronic Records Management System IPR. in-progress review IS. information system (see also GIS) IST. (1) Incentives Support Team (2) interstate transfer ISR. inter-service recruit IT. information technology JTR. Joint Travel Regulation KO. contracting officer LAN. local area network MACOM. major command (see also MSC) MEPS. military entrance processing station MSC. major subordinate command (see also MACOM) NACI. National Agency Check with Inquiries NCO. non-commissioned officer NCOIC. non-commissioned officer in charge NET. not earlier than NGB. National Guard Bureau NGPEC. National Guard Professional Education Center NLT. not later than NOBE. Notice of Basic Eligibility NO-VAL. no validated pay OCI. organizational conflict of interest ODC. other direct cost(s) OIC. officer in charge OPM. Office of Personnel Management OPORD. operations order OPSEC. operational security PII. personally identifiable information PIPO. phase in/phase out PIV. personal identity verification PMO. Provost Marshal's Office POC. point of contact POP. period of performance PRS. performance requirements summary PSIP. Personnel Security Investigation Portal PWS. performance work statement QA. quality assurance QASP. quality assurance surveillance plan QAW. quality assurance worksheet QC. quality control QCP. quality control plan R&R. Recruiting and Retention (organization) RAPIDS. Real-Time Automated Personnel Identification System RCAS. Reserve Component Automation System RRNCO. Recruiting and Retention Non-Commissioned Officer SA. system administrator SGM. sergeant major (see also CSM) SIDPERS. Standard Installation/Division Personnel System SSN. social security number TA. (1) trusted agent (2) tuition assistance TAG. The Adjutant General TASS. Trusted Associate Sponsorship System TE. technical exhibit TEB. transferability of education benefits TF. task force TRICARE. Military Health Care System USC. United States Code USD(I). Under Secretary of Defense for Intelligence VO. Verification Officer VTC. virtual teleconference WARNO. warning order

PART 3

GOVERNMENT-FURNISHED PROPERTY

3.0 Government-Furnished Property, Materials, Equipment, and Services (GFP/M/E/S). NA

PART 4

CONTRACTOR-FURNISHED PROPERTY

4.0 Contractor-Furnished Property, Materials, and Equipment (CFP/M/E). Except for those items specifically stated to be government-furnished in part 3, the contractor shall furnish everything required to perform these services, as indicated in paragraph 1.1 (Scope). The Contractor will supply a minimum of forty-four (44) secure consoles (95 Gallons) that contain a wide, beveled feed slot and internal security plate, to ensure that no one can remove documents after they are deposited.

PART 5 REQUIREMENTS

5.0 Requirements. The contractor will supply a minimum of forty-four (44) secure consoles (95 Gallons) that contain a wide, beveled feed slot and internal security plate, to ensure that no one can remove documents after they are deposited. The Contractor arrives at the agreed upon locations, with shredder, between the hours of 0700 and 1500hrs, every four weeks, to collect and cross-cut shred documents, on-site.

5.1 Once on site, a designated DOD employee, will escort the contractor in the retrieval of the bags to be shredded from the secure consoles.

5.1.2 The DOD employee will witness the shredding at the contractor’s truck on-site.

SUBMITTAL: The contractor will provide the escort with a destruction certificate.

5.2 Performance Standard: The Secure Collection Boxes must be shredded before overflowing, and certificate of destruction received before leaving the facility.

5.2.1 The shredding product will shred the items to a fine shred (about the size of a paper clip).

5.2.2 Contractor Manpower Reporting Application (CMRA).

The Contractor shall report all Contractor labor hours required for performance of services provided under this contract for the GAARNG via a secure data collection site. The Contractor shall completely fill in all required data fields using the CMRA website, <http://www.ecmra.mil>. Reporting inputs shall be for the labor executed during the period of performance during each Government FY, which runs from October 1 through September 30. While inputs may be reported throughout the FY, all data related to a given FY shall be reported not later than the end of the month following the close of that FY (October 31). Contractors may direct questions to the help desk at <http://www.ecmra.mil>.

6.0 Essential Forms and Publications. Where necessary, specific applicable chapters, paragraphs, subparts, clauses, etc., are identified within the relevant clauses of this ontract.

PART 6

APPLICABLE PUBLICATIONS

DD Form 441, OMB No. 0704-0194, Department of Defense Security Agreement http://www.dtic.mil/whs/directives/forms/efor ms/dd0441.pdf

National Institute of Standards and Technology Pubs http://www.nist.gov/publication-portal.cfm

NIST Special Publication 800-88, Revision 1, Guidelines for Media Sanitation http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf

U.S. law, the Health Insurance Portability and Accountability Act (HIPAA) of 1996, PL 104-191 http://www.hhs.gov/ocr/privacy/hipaa/admini strative/statute/hipaastatutepdf.pdf

TECHNICAL EXHIBIT 1

Performance Requirements Summary (PRS)

Performance Objective

Task

Performance standard (AQL)

Method of Surveillance

POC

5.0-5.6

Once every four weeks

COR

TECHNICAL EXHIBIT 2

Location Spreadsheet (Locations are subject to add, change or update)

TOTAL 44