Protection Services PWS_9 April 2021.pdf

PERFORMANCE WORK STATEMENT (PWS)

HQ IMCOM

PROVOST MARSHAL/PROTECTION SUPPORT SERVICES

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide Protection services. The

Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the

Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Protection as defined in this Performance Work Statement (PWS) except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract.

1.2 Background: Prior to 2016, the Defense Threat Reduction Agency (DTRA) conducted

80% of IMCOM assessments. Beginning in 2017 DTRA moved to a ‘critical asset’ focus and ceased executing IMCOM assessments. As a result, IMCOM has contracted for this critical function which is funded by Head Quarter Department of Army (HQDA). In 2018, Law

Enforcement added analytics and General Staff Logistics (G4) began their water and housing health protection work. Fire and Physical Security analytics were added in 2019.

1.3 Objectives: The contractor will provide personnel to conduct Protection functions including but not limited to the below:

1.3.1. Higher Headquarters Assessments (HHA) – triennially assess each installation

1.3.2. Knowledge Management – manage the Corrective Action Plans (SIPRNet) and SharePoint pages

1.3.3. Logistics - centralized management and oversight of equipment and vehicles

1.3.4. Health Protection - technical evaluations and recommendations for a wide-range of compliance and human health issues

1.4 Scope: U.S. Army Installation Management Command (IMCOM) provides command oversight and executes Protection functions on all IMCOM installations. IMCOM requires contracted professional, technical, management, and analytical support services to support this mission at all locales. This PWS requires project management and analytical support services to

Headquarters (HQ) IMCOM specifically for the HQ IMCOM Provost Marshal/Protection which includes planning, coordinating, resourcing and executing installation Base Operations protection requirements. In this capacity, Contractors shall coordinate with Army Staff, Army North and

Army Major Subordinate Command counterparts as required, as well as the IMCOM Directorates.

Services include Higher Headquarters Assessments (HHA), Knowledge Management, Training, Law Enforcement, Physical Security and Fire Analytics, Logistic Analysis, Federal Information

Security Modernization Act Compliance, Environmental Engineering, Financial Management and

Health Protection.

1.4.1 Higher Headquarters Assessments (HHA): The contractor shall provide personnel with the subject matter expertise and experience to conduct HHAs relative to IMCOM’s missions and assets. The assessments shall be coordinated with the installations’ staffs. The teams shall conduct an assessment of all components of the installation’s Protection programs using the DoD

Benchmarks, plus applicable Army, Combatant Command (COCOM), Service Component

Command, and IMCOM applicable requirements. The teams shall assess the following Program

Areas: Risk Management, Antiterrorism, Physical Security, Law Enforcement, Emergency

Management, Chemical, Biological, Radiological, Nuclear, and Explosives (CBRNE), Continuity of Operations (COOP), Communications and Network Infrastructure, Cybersecurity and

Supporting Infrastructure.

1.4.2. Knowledge Management: The contractor shall provide assistance with event scheduling that optimizes both installation protection staff and HHA team milestones, data gathering/analysis, and HHA preparation. The contractor shall apply advanced data science techniques to create and maintain a portal using SharePoint or similar technology to allow collaboration within the team, and to provide a single repository for garrison documents that must be reviewed prior to HHA trips. The contractor shall create and maintain a separate portal for classified processing that allows installation protection staffs to identify corrective actions for

HHA findings, HHA team members to validate those corrective actions, and IMCOM staff to approve and track trend analysis. The knowledge manager shall create and maintain collaboration portals on unclassified and classified networks to facilitate information sharing. They shall coordinate with the government to ensure they capture requirements, and to identify desired user interfaces. The knowledge manager shall coordinate closely with all stakeholders to identify required workflows and processes, and ensure those workflows and processes are integrated into collaboration portal design. Conduct education, training, and outreach on collaboration portals with government and other contractor staff. Provide corrective action plan tracker analysis and report installation compliance to the government.

1.4.3. Training: The contractor shall design, prepare and deliver antiterrorism officer and other training courses as required. The contractor shall also play a key role in design, planning, and execution of periodic HQ IMCOM protection workshops. The contractor shall seek new methods and tools to continuously improve training/exercise products and planning, shall fully document lessons learned and create after-action reports, and shall provide training/exercise capabilities at locations other than Fort Sam Houston as required. The training analyst shall design, validate and deliver Protection training and exercises at Fort Sam Houston and other locations as required. The training shall consist of facilitated platform instruction, guided discussions, and/or field training and Table Top Exercise (TTX/Command Post Exercise (CPX) scenarios and incorporate advanced technologies such as virtual, interactive, and immersive capabilities. The training analyst shall schedule and coordinate training locations and make all logistics arrangements for the training location. The training analyst shall coordinate closely with the government on timing, content, and duration of periodic Protection conferences and workshops. The training analyst shall coordinate participation by government and industry subject matter experts, VIP attendees, and guests. The training analyst shall prepare and produce training materials, design and deliver end of course tests and other feedback instruments, gather after-action comments and feedback, and prepare after action reports (AAR) products for the government.

1.4.4. Logistics Analysis: IMCOM provides centralized management and oversight of equipment and vehicle types for which standardization is desirable or required. Logistics analysis ensures optimal life cycle management.

1.4.5. Law Enforcement: Army installations report crime and incident data to HQ IMCOM, which must be analyzed and filtered for trend analysis and decision making. Systems that rely on network connectivity such as E-911 and computer aided dispatch must be accredited prior to allowing them to connect to the network.

1.4.6. Environmental Engineering: Non-kinetic threats and hazards such as industrial chemicals and materials present specific challenges to installation protection staffs and complicate Protection planning efforts. Commercial and residential encroachment affects Army training/operations and range utilization.

1.4.7. Financial Management: Manage financial execution of programs (Army Compatible Use

Buffer (ACUB) and Conservation Reimbursable and Fee Collection Program that fall outside of traditional execution (ACUB funds are direct from Office Secretary of Defense to Cooperative

Agreements and do not have the traditional tracking / accounting procedures associated with

Operations and Maintenance Army accounts). Includes documenting accounting procedures and auditing programs in order to ensure program execution meets audit readiness standards.

1.5. Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and four (4) 12-month option years.

1.6.General Information

1.6.1. Quality Control: The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The Quality Control Plan (QCP) shall be delivered to the COR and CO within 30 days of contract award. In the event revisions are required the Contractor shall return the revised QCP within five (5) working days of receipt of notification to revise. After acceptance of the quality control plan, the Contractor shall receive the

CO’s acceptance in writing of any proposed change to his Quality Control system. The

Contractor shall provide the COR a monthly report due the first business day of each month outlining records of inspections, noted discrepancies and the corrective measures taken to prevent future reoccurrences. The Contractor shall update the QCP as required and provide copies to the

COR and CO.

1.6.2. Quality Assurance: The government shall evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3. Recognized Federal Holidays Services are performed on Fort Sam Houston, TX and off site as needed. The core working hours are between 0700 -1530, non-core hours are between 0600 -

1600, Monday through Friday, excluding federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. List of recognized Federal Government holidays are as follows:

New Year’s Day

Dr. Martin Luther King’s Birthday

Presidents Day

Memorial Day

Independence Day

Labor Day

Columbus Day

Veterans Day

Thanksgiving Day

Christmas Day

1.6.3 Hours of Operation: The contractor is responsible for conducting business, between the core working hours of 0700 -1530, non-core hours are between 0600 - 1600, Monday through Friday, excluding federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The

Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.6.4. Place of Performance: The work to be performed under this contract will be performed at

Fort Sam Houston and at the Contractor’s off site facilities (by exception with COR approval) as well as various CONUS and OCONUS temporary duty locations.

1.6.5 . Type of Contract: Firm Fixed Price.

1.6.6 . Security Requirements: Key personnel are required to have an active TOP SECRET clearance. All other contractor personnel performing work under this contract must have a

SECRET clearance for duty in the PMP at time of the proposal submission, and must maintain the level of security required for the life of the contract. G4 personnel will maintain a SECRET clearance as directed by the COR ICW the G4 government lead. The security requirements are in accordance with the attached DD254.

1.6.6.1 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.6.2 Key Control. The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.6.2.1. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the

Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor.

In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.6.2.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.6.3 Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s QCP.

1.6.7. Special Qualifications. The Contractor shall ensure employees have all required professional certifications/licenses (current and valid) for each applicable occupation category before commencement of work. The COR may waive some qualifications based on experience.

FOR EXAMPLE if a contractor is hired and does not have AT LEVEL II but has a class date to attend.

Below lists the SKILLS/ STAFF QUALIFICATIONS/CERTIFICATIONS:

The PROJECT MANAGER (PM) is designated as key personnel and it is required that the

PM has the following qualifications:

- Current Project Management Institute (PMI) Project Management Professional, Program

Management Professional (PgMP), or Defense Acquisition Workforce Improvement Act

(DAWIA) Level III Program Management certification, or degree in Project Management from an accredited institution.

- Possess an active Top Secret (TS) clearance at proposal submission.

- Experience planning, directing, coordinating, and managing the contractor’s proposed methodologies and approach for a project or program similar in size, scope, and complexity to this contract.

- Experience managing performance-based projects and/or programs with multiple OCONUS performance locations.

- Experience with Status of Forces Agreements (SOFA) requirements, regulations, and processes within the IMCOM Area Of Responsibility (AOR).

Higher Headquarters Assessments (HHA) Qualifications:

Risk Management/Antiterrorism

Former position or 10 years’ experience as installation or equivalent Antiterrorism Officer (ATO), Antiterrorism (AT) Level II, Protection Assessment experience in concert with (ICW) Prevent, Protect, Mitigate, Respond and Recover (P2MR2) / Security Engineer. Electronic Security

Systems course is desirable

Security Ops (LE)

Former position or 10 years’ experience in installation or equivalent LE, AT Level II, Protection

Assessment experience ICW P2MR2

Security Ops (PS)

Former position or 10 years’ experience in installation or equivalent PS, Conventional Physical

Security Course, AT Level II, Security Engineer and Electronic Security Systems, Protection

Emergency Management (EM)

Former position or experience as an installation or equivalent EM, AT Level II, Protection

Fire and Emergency Services (F&ES)

Former position or experience as an installation or equivalent F&ES and

Protection Assessment experience ICW P2MR2

Information Operations/Cyber

AT Level II, Protection Assessment experience ICW P2MR2

Infrastructure Engineer

AT Level II, Horizontal or vertical Engineering experience, Protection Assessment experience

ICW P2MR2

Security Engineer

AT Level II, Security Engineer and Electronic Security Systems, Protection Assessment experience ICW P2MR2

Additional Protection Team Qualifications:

Project Lead:

DoD experience

Protection assessment experience

Installation Antiterrorism Officer or equivalent experience

Education/training/certifications:

Master’s degree – any discipline

Project Management Professional or degree in Project Management

Associate Business Continuity Planner

CompTIA Security+

Antiterrorism Officer (ATO) Level II or similar certification/experience

USACE SET training

Communications/Cyber lead:

Protection assessment experience

Installation Antiterrorism Officer or equivalent experience

Education/Training/certifications:

Master’s Degree – any discipline

Project Management Professional or degree in Project Management

ATO Level II or similar certification/experience

USACE SET training

CompTIA Security+

Emergency Management lead:

Protection assessment experience

Expert knowledge (>10 yrs) of COOP/contingency planning

Expert knowledge (>10 yrs) of exercise planning/execution

Education/Training/Certifications:

Bachelor’s degree – any discipline

FEMA PCP or similar certification/experience

Associate Business Continuity Planner or similar certification/experience

Risk Management/AT Lead:

Expert knowledge (>10 yrs) of installation risk management program leadership

Expert knowledge (>10 yrs) of Protection compliance assessment

Bachelors degree– any discipline

ATO Level II or similar certification/experience

Infrastructure Engineering Lead:

DoD experience engineering related Expert knowledge of managing construction/engineering projects

Expert knowledge of Protection compliance assessment

Bachelors Degree in Engineering or related field

Engineering/construction management training or similar certification/experience

Project Management Professional or degree in Project Management

Training/Exercise Lead:

DoD Experience

Military training center leadership experience (>10 years)

Instructional systems development experience (>10 years)

Installation Protection compliance assessment experience

Fire & Emergency Services Lead:

DoD fire & emergency services experience (>10 years)

Installation protection program compliance inspection/assessment experience (>10 years)

Bachelors degree – any discipline

Firefighter II or similar certification

Fire Officer IV or similar certification

Fire Inspector II or similar certification

Fire Instructor II or similar certification

Telecommunications II or similar certification

HAZMAT certified or similar certification

NIMS/ICS trained or similar certification

Law Enforcement Analyst Lead:

DoD law enforcement/investigative experience (>10 years)

Protection program compliance assessment experience or similar certification/experience

Formal law enforcement/investigative training course completion

ATO Level II training or similar certification/experience

Physical Security Lead:

DoD physical security experience

Experience (>10 years) supervising DoD Military Police plans and operations at the installation level

Protection compliance assessment/inspection experience

DoD Physical Security formal course completion or similar certification/experience

DoD military police formal training or similar certification/experience

Law Enforcement Branch Support

Law Enforcement Lead/Logistics:

Civil/military operations experience (>10 years)

Law enforcement experience (>10 years)

Expert knowledge of planning experience (>10 years)

Logistics experience (>10 years)

DoD formal military police training or similar certification/experience

Law Enforcement Lead/Crime Analyst:

DoD experience (>10 years)

Law enforcement experience (>10 years)

Experience with Data Base Management Systems

DoD Antiterrorism training or similar certification/experience

DoD electronic system security training course or similar certification/experience

DoD Physical Security training course or similar certification/experience

Law Enforcement Lead/ ALECP analyst:

DoD experience (>10 years)

Logistics experience (>10 years)

Training experience (>10 years)

Law Enforcement Lead/EMASS-JSLEVES analyst:

DoD law enforcement experience (>10 years)

Police equipment experience (>10 years)

Installation antiterrorism officer or similar certification/experience

Education/Training/Certification:

ATO Level II training or similar certification/experience

Formal installation risk management training or similar certification/experience

Knowledge Management Lead: (>10 years)

Industry experience in knowledge Management related field.

SharePoint developer experience in a DoD environment

Experience creating knowledge management solutions for DoD clients

Data science experience

Experience with Python data science tool

Installation protection program assessment experience or similar certification/experience

2 years college (any field)

Formal Microsoft SharePoint 2013 training & certification

G4 Environmental Qualifications

Project Lead: (>10 years)

Industry/DoD Experience

Experience in Strategic Communication, Congressional/Legislative Affairs and Regulatory

Analysis

Bachelor’s Degree – any discipline

Project Management Professional (PMP) or degree in Project Management

Environmental Analyst: (>10 years)

Industry/DoD Experience

Experience in Environmental Liabilities, Environmental Compliance and Environmental

Restoration

Data Analyst: (>10 years)

Industry/DoD Experience as a data analyst

Experience in environmental, health, and safety analysis

Strategic Communications Lead: (>10 years)

Industry/DoD Experience as a communications lead

Experience in strategic communications, stakeholder/client relations and public affairs.

Business Process Engineer: (>10 years)

Industry/DoD Experience as a business process engineer

Biologist: (>10 years)

Industry/DoD Experience as a biologist

Experience in quality assurance, environmental chemistry, risk assessment/risk management, and incremental sampling methodology

Hazardous Waste Operations and Emergency Response Standard HAZWOPER

Civil Engineer: (>10 years)

Industry/DoD Experience as a civil engineer

Experience in water resources and land development

Licensed Civil Engineer

1.6.8 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, will meet periodically, quarterly at a minimum, with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9 Contracting Officer Representative (COR): The (COR) will be identified by separate letter.

The COR monitors all technical aspects of the contract and assists in contract administration The

COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including

Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and facilitate site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates.

The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.10 Key Personnel: The follow personnel are considered key personnel by the government:

Project Manager and Alternate Project Manager. The contractor shall provide a project manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The project manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The project manager or alternate shall be available between 0600 to 1600, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons. Qualifications for all key personnel are listed below:

1.6.10.1 Project Manager: The Project Manager (PM) and Alternate Project Manager is designed as key and it is required that the PM has the following qualifications:

Current Project Management Institute (PMI) Project Management Professional, Program

Management Professional (PgMP), or Defense Acquisition Workforce Improvement Act

(DAWIA) Level III Program Management certification, or degree in Project Management from an accredited institution.

Possess an active Top Secret (TS) clearance at proposal submission.

1.6.11 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractors working on-site (HQ IMCOM Campus) are required to obtain and wear the HQ IMCOM badge (key card) in the performance of this contract.

1.6.12 Contractor Travel: Contractor will be required to travel CONUS and OCONUS during the performance of this contract to conduct assessments, attend meetings, conferences, and training.

Contractor will be authorized travel expenses consistent with the substantive provisions of the

Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR.

1.6.13 Other Direct Costs (ODCs): ODCs may include but not be limited to equipment/supply purchases. ODC requests shall be submitted to the COR for approval at least five days prior to requested purchase date for routine requests.

1.6.14 Data Rights : The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government.

These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.15 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR

Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The

Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the

Contracting Officer and in the event the Contracting Officer unilaterally determines that any such

OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may effect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.16 PHASE IN /PHASE OUT PERIOD : To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the 30 day phase in/ phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date.

1.7 PERSONNEL:

The Contractor shall provide experienced and fully trained personnel to perform the required services. See paragraph 1.6.7, Skills/Staff Qualifications/Certifications for a full list.

The Government and the Contractor understand and agree that the services to be delivered are non-personal services and both parties recognize and agree that no employer- employee relationships exist between the Government and the Contractor and/or between the Government and the

Contractor’s employees. Contactor personnel performing under this contract shall not be placed in a position where they are employed by a Federal Officer or are under the supervision, direction, or evaluation of a Federal Officer, military or civilian.

Contractor personnel shall conform to standards of conduct and code of ethics, which are consistent with those applicable to Government employees as provided in the Joint Ethics

Regulation 5500.7.R. Contractor personnel shall present a neat professional appearance and be easily identified. This shall be accomplished by wearing appropriate badges that contain the company name and employee’ name. Contractor personnel shall conform to the HQ IMCOM dress policy.

1.7.1. Contractor personnel will obtain vehicle pass for access to the military installation and

Common Access Cards (CAC) for computer access, if applicable. Contractor must obtain

SIPRNET token to perform classified HHA, CIRM and Protection tasks.

1.7.2. Common Access Card (CAC) Turn-In. Upon completion of the contractor’s employment or termination of the contract itself and to prevent delay in payment to the Contractor, the vendor’s

Program Manager will ensure CACs are turned in to the Trusted Agent (TA). Revoked or terminated government credentials must immediately be returned to government personnel as government property.

1.7.3. Antiterrorism (AT) Awareness Training. All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a

COR is not assigned, within 05 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website:

http://jko.jten.mil.

1.7.4.. AT Awareness Training for Contractor Personnel Traveling Overseas. All US based contractor employees and associated sub-contractor employees are required to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit AT Officer (ATO) being the local point of contact.

1.7.5. Access and General Protection/Security Policy and Procedures. Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation

Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.7.6. Common Access Card (CAC) Issuance. Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3)

Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

Critical Infrastructure Risk Management (CIRM) analysis work may require TOP SECRET clearance due to the nature of work performed. The majority of CIRM work performed and CIRM asset reporting will be conducted on SIPRNET.

1.7.7. Access to a DoD facility or installation. Contractors require access to military installations and will conform to all entry requirements. Installations may differ on some requirements.

1.7.8. iWATCH Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity

ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 5 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

1.7.9. Access to Government Information Systems. All contractor employees with access to a government information systems must be registered in the ATCTS (Army Training Certification

Tracking System) at commencement of services, and must successfully complete the DOD

Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.7.10. OPSEC Standing Operating Procedure/Plan. Not applicable.

1.7.11. OPSEC Training. Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. OPSEC Awareness for Military Members, DoD Employees and Contractors is available at the following website:

http://cdsetrain.dtic.mil/opsec/index.htm.

1.7.12. Cyber Awareness (Information assurance (IA)/information technology (IT)) training. All contractor employees and associated sub-contractor employees must complete the DoD Cyber awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in

DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions. DoD Cyber Awareness Challenge Training is available at the following website:

https://ia.signal.army.mil/DoDIAA/

1.7.13. Cyber (Information assurance (IA)/information technology (IT)) certification. Per DoD

8570.01-M, DFARS 252.239.7001 and AR 25-2, the contractor employees supporting Cyber

(IA/IT) functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.7.14. Contractors authorized to accompany the force. Not applicable.

1.7.15. Antiterrorism/Force Protection for Defense Contractors Outside the US. For Contract

Requiring Performance or Delivery in a Foreign Country, DFARS Clause 252.225- 7043, Antiterrorism/Force Protection for Defense Contractors Outside the US. The clause shall be used in solicitations and contracts that require performance or delivery in a foreign country. This clause applies to both contingency and non-contingency support. The key AT requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor’s compliance with combatant http://cdsetrain.dtic.mil/opsec/index.htm https://ia.signal.army.mil/DoDIAA/ commander and subordinate task force commander policies and directives.

1.7.16. Handling and/or access to classified information. Contractor shall comply with FAR

52.204-2, Security Requirements. Contractors providing CIRM support may require a TOP

SECRET clearance due to the sensitive nature of work performed.

1.7.17. Threat Awareness Reporting Program. Per AR 381-12 Threat Awareness and Reporting

Program (TARP), contractor employees must receive annual TARP training by a

Counterintelligence agent or other trainer as specified in 2-4b of AR 381-12.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The

Government does not have privity of contract with the subcontractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12. WORK WEEK. Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

AR Army Regulation

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer Representative DA Department of the Army DD254 Department of Defense Contract Security Requirement List

DFARS Defense Federal Acquisition Regulation Supplement

DOD Department of Defense FAR Federal Acquisition Regulation KO Contracting Officer

OCI Organizational Conflict of Interest

OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC

Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control

QCP Quality Control Program

TE Technical Exhibit

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3 GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services: Not applicable

3.2. Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

3.3. Utilities: The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish cleaning vehicles and equipment.

3.4. Equipment: The Contractor will have access to scanners, fax machines and printers.

3.5. Materials: The Government will provide materials as required to execute the program.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4 CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1. General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS. This includes mobile wireless connection devices also known as MiFi devices (two per HHA team) capable of

CONUS/OCONUS connectivity.

4.2. Secret Facility Clearance: The key personnel shall possess and maintain a TOP SECRET clearance and the other contractor personnel shall possess and maintain a SECRET facility clearance from the Defense Security Service. G4 contractor personnel shall possess and maintain a

SECRET clearance as needed. The Contractor’s employees, performing work in support of this contract shall have been granted a SECRET security clearance from the Defense Industrial

Security Clearance Office. The DD 254 is provided as Attachment [Insert the attachment number].

4.3. Materials: The Contractor shall issue employees badges that clearly identify the employees by picture, name, and name of company.

4.4. Equipment: The Contractor shall furnish any other equipment deemed necessary to execute the program that is not listed under Part 3 of this PWS.

PART 5 SPECIFIC TASKS

5.1. Basic Services. The contractor shall provide services for Protection.

5.2. The contractor will provide personnel to conduct Protection functions including but not limited to the below:

5.2.1. Higher Headquarters Assessments (HHA)

The contractor shall provide personnel with the subject matter expertise and experience to conduct HHAs relative to IMCOM’s missions and assets. The assessments shall be coordinated with the installations’ staffs. The teams shall conduct an assessment of all components of the installation’s Protection programs using the DoD Benchmarks, plus applicable Army, Combatant command (COCOM), Service Component Command, and IMCOM applicable requirements. The teams shall assess the following Program Areas: Risk Management, Antiterrorism, Physical

Security, Emergency Management, Chemical, Biological, Radiological, Nuclear, and Explosives

(CBRNE), Continuity of Operations (COOP), Communications and Network Infrastructure, Cybersecurity, Supporting Infrastructure and Operations Security (OPSEC).

5.2.2. Knowledge Management

The contractor shall provide assistance with Protection event scheduling that optimizes both installation protection staff and HHA team milestones, data gathering/analysis, and HHA preparation. The contractor shall apply advanced data science techniques to create and maintain a portal using SharePoint or similar technology to allow collaboration within the team, and to provide a single repository for garrison documents that must be reviewed prior to HHA trips. The contractor shall coordinate closely with all stakeholders to identify required workflows and processes, and ensure those workflows and processes are integrated into collaboration portal design. Shall coordinate with the government to ensure they capture requirements, and to identify desired user interfaces. The contractor shall create and maintain collaboration portals on unclassified and classified networks to facilitate information sharing that allows installation protection staffs to identify corrective actions for HHA findings, HHA team members to validate those corrective actions, and IMCOM staff to approve and track trend analysis. Conduct education, training, and outreach on collaboration portals with government and other contractor staff. Provide corrective action plan tracker analysis and report installation compliance to the government.

5.2.3. Training/Exercises

The contractor shall design, prepare and deliver Protection training. The contractor shall also play a key role in design, planning, and execution of periodic HQ IMCOM protection workshops. The contractor shall seek new methods and tools to continuously improve training/exercise products and planning, shall fully document lessons learned and create AAR, and shall provide training/exercise capabilities at locations other than Fort Sam Houston as required.

The training shall consist of facilitated platform instruction, guided discussions, and/or field training and TTX/CPX scenarios and incorporate advanced technologies such as virtual, interactive, and immersive capabilities. The contractor shall schedule and coordinate training locations and make all logistics arrangements for the training location. The contractor shall coordinate closely with the government on timing, content, and duration of periodic Protection conferences and workshops. The contractor shall coordinate participation by government and industry subject matter experts, VIP attendees, and guests. The contractor shall prepare and produce training materials, design and deliver end of course tests and other feedback instruments, gather after-action comments and feedback, and prepare AAR products for the government.

5.2.4. Logistics Analysis

The contractor shall assist the government with centrally-managed Protection equipment programs through close coordination with government staff. They shall accurately document program details, life cycle management issues, equipment locations and reliability information, maintenance agreements or contracts, and issues or concerns elevated from the installations or noted by HHA team members or other stakeholders during assessments and other activities.

Logistics analysts shall stay abreast of vendor developments and improvements; make functional presentations during conferences and workshops internal and external to IMCOM; participate in update briefings; and make course of action recommendations to the government.

5.2.5. Law Enforcement

The contractor shall gather computerized crime and incident statistical information from installations, regions and other stakeholders, create tools and products to enable them to parse the data, analyze and draw crime and incident conclusions from the data, present their analysis to the government both linguistically and numerically, and make course of action recommendations to reduce or eliminate crime and incidents. They shall also conduct risk management framework analysis related to networked law enforcement systems such as E-911 and computer aided dispatch, gathering artifacts, threat and vulnerability assessments, and preparing recommendations for the network accrediting official (AO) to make informed authority-to-connect decisions. The contractor shall also research vendor solutions for centrally managed end items such as special-purpose vehicles, biometric systems, non-lethal weapons and other equipment, making course of action recommendations to the government.

In addition this includes assessing and analyzing the overall physical security, operations, and information security of the organization; access control to high…