PWS_Connect Program_final.pdf

Performance Work Statement (PWS)

Defense Suicide Prevention Office (DSPO)

Connect Program for Suicide Prevention

1.0 INTRODUCTION

The Defense Suicide Prevention Office (DSPO) requires a non-personal services Contractor to review, tailor, update, expand, and validate the Connect Program, previously known as the Wingman Guardian Connect Program, for the Department of War (DoW) and all Military Services (Army, Navy, Marine Corps, Air Force, Space Force, National Guard Bureau, and Coast Guard). The Contractor shall validate the implementation of the Connect Program and provide a report that includes evaluation findings and recommendations for sustained program implementation and evaluation.

The Connect Program (Wyman et al 2020; 2022) provides group interactive training for military personnel, followed by text messages and base-wide activities to embed concepts into culture and peer networks. The Connect Program’s interactive group design progresses from individual engagement (e.g., each participant shares career goals and values) to building group-level skills and norms (e.g., mapping group strengths). Specifically, participants learn together about and model skills to each other to grow and sustain “Four Cores” supportive of mental health and essential to job success: Kinship, Purpose, Guidance, and Balance.

2.0 BACKGROUND

The Connect Program, previously known as the Wingman Guardian Connect program, was developed through a 10-year collaboration between the University of Rochester and the Department of Air Force.

The Connect Program significantly reduces suicide risk by strengthening everyday relationships and unit culture that research shows are crucial for preventing suicide. The Connect Program is the only program to hold a Gold-Standard Randomized Controlled Trial (RCT) with 1,500 Air Force personnel (Wyman et al., 2020, 2022) that demonstrated significant reductions in suicide risk, depressive symptoms, and occupational problems.

The Connect Program is a universal upstream program that will target broader populations of military personnel in their natural organization units. The focus on the “Four Cores” address research informed suicide-protective factors that are framed in terms of universally relatable goals of career and relationship success:

(1) Kinship: Strengthening bonds within teams to foster trust, mutual support, and shared sense of responsibility. Encourages a culture where members look out for each other.

(2) Purpose: Reinforcing individual and collective commitment to mission readiness and well-being, ensuring that discussions about challenges align with personal and professional goals.

(3) Guidance: Equipping personnel with tools to recognize challenges, seek support, and provide direction to peers who may be struggling.

(4) Balance: Encouraging proactive management of stress, workload, and personal challenges through structured support and adaptive coping mechanisms.

The Connect Program addresses an urgent need for interventions that are effective in reducing suicide risk across broad military populations–particularly where stigma and concerns about negative career impacts remain major barriers to disclosing suicidal thoughts/behaviors.

The Defense Suicide Prevention Office (DSPO) is the focal point for all suicide prevention strategic development, implementation, centralization, standardization, communication, and evaluation of DoW suicide programs, policies, research, and surveillance activities.

Suicide is now the leading cause of death for Service Members and findings and conclusions of the 2022 independent report by the Suicide Prevention and Response Independent Review Committee (SPRIRC) highlight the urgent need for new population-oriented approaches to reduce these rates. Specifically, military suicide prevention needs new approaches, training, and interventions. SPRIRC Recommendations (2022), specifically named the Wingman Connect program as a ‘point of strength’ in the DoD to significantly reduce suicidal ideation and depression among military personnel (Wyman et al., 2020).

Implementing the Connect Program will provide DSPO with an updated evidence-based, interactive suicide prevention program for the DoW/Military Services that will reduce suicides and increase readiness of the total force by promoting social connectedness and heathy coping skills.

3.0 SCOPE

The Contractor shall provide the personnel, management, and materials necessary to tailor, expand, and validate the Connect Program (Previously known as the Wingman Guardian Connect Program), an evidence-based suicide prevention program that promotes interpersonal relationship skill-building and communication, healthy coping skills, and help-seeking behaviors across all Military Services (Army, Navy, Marine Corps, Air Force, Space Force, National Guard Bureau, and Coast Guard) for the Department of War (DoW). The Contractor shall validate the updates and implementation through program delivery and evaluation. The Contractor shall provide a report that includes evaluation findings and recommendations for sustained program implementation and evaluation. The contractor shall have the technical capability, experience and past performance to achieve the Gold Standard.

The Connect Program (Wyman et al 2020; 2022) provides group interactive training for military personnel, followed by text messages and base-wide activities to embed concepts into culture and peer networks. The Connect Program’s interactive group design progresses from individual engagement (e.g., each participant shares career goals and values) to building group-level skills and norms (e.g., mapping group strengths). Specifically, participants learn together about and model skills to each other to grow and sustain “Four Cores” supportive of mental health and essential to job success: Kinship, Purpose, Guidance, and Balance.

4.0 REQUIREMENTS The Contractor shall:

4.1 Program Management Support

4.1.1 The Contractor shall provide a Program Manager (PM) to serve as a Point of Contact (POC) in support of the contract.

4.1.1.2 The Contractor shall submit all products/deliverables to the Government for review and approval.

4.1.2 Be responsible for establishing the project team and management infrastructure to ensure mission success and communication clarity.

4.1.3 Be responsible for aligning all personnel and vendors to the mission, objectives, and requirements via a project kickoff meeting.

4.1.4 Establish meeting and communication cadences across responsible teams and contacts.

4.1.5 Conduct an analysis to identify who is Responsible, Accountable, Consulted, and Informed (RACI analysis) for major tasks and outcomes in the project.

4.1.6 Define project scope, desired outcome, and evaluation approach; and provide a succinct Project Charter that can serve as a briefing and transition-in document for project team members and interested parties.

4.1.7 Develop a Project Plan following best practices project management guidelines including identifying the project scope, specifying communications, implementation timeline, and evaluation approach.

4.1.8 Participate in monthly meetings as well as meetings scheduled by and with the COR to discuss status of progress against all deliverables. PM will have personnel associated with active tasks available during a meeting in attendance, either in person or by phone.

4.1.9 Submit a Monthly Status Report (MSR) describing the status of activities during the previous calendar month. Report shall include: Period of report, summary of work performed by PWS paragraph, deliverables open, deliverable assigned date, deliverable due date, revised due date (when applicable due to DSPO priorities), progress toward deliverable, status and planned actions towards deliverables, deliverables provided, project schedules/task lists with priorities (as determined by DSPO), status of deliverables and projects with priorities, and known or anticipated issues, with plans of action. The Contractor shall provide one written Monthly Status Report (MSR) to the COR and Program Manager in electronic format for all tasks assigned by the close of business (COB) of the 10th workday after the month of service.

4.2 Review, tailor, and update the Connect Program for the Department of War (DoW)

4.2.1 Map and identify DoW/Military Services interested parties and relevant policies, initiatives, and Command priorities that are relevant to the Program. Provide environmental scan of policies, initiatives, and Command priorities.

4.2.2 Identify sample population and location for the Connect Program in collaboration with DoW/Military Services stakeholders.

4.2.3 Conduct discovery process to identify and recommend program updates to ensure alignment with DoW/Military Services values, language, and initiatives while ensuring integrity and fidelity to the Connect Program.

4.2.4 Update the Connect Program, to meet DoW/Military Services-specific requirements.

4.2.5 Provide a report for the updated Connect Program based on contents from PWS 4.2.1-4.2.4 and recommend a process for Updating the Program across the DoW.

4.3 Validate the updated program and associate implementation strategy and tools with approximately (400 to 600) DoW/Military Service personnel.

4.3.1 Identify and coordinate with potential DoW/Military Service co-facilitators in preparation for pilot implementation.

4.3.2 Draft and submit PowerPoint brief and letters of support template to the Government to facilitate the Government's review, approval, and clearance processes for implementing the project.

4.3.2.1Upon approval the PowerPoint brief and letters of support will be sent to DoW/Military Service co-facilitators and leaders to foster a strong implementation climate for the Program.

4.3.3 In coordination with DSPO, obtain all necessary approvals from the Military Services, Institutional Review Boards (IRB), and Office of Management and Budget (OMB) for collecting evaluation data from DoW/Military Service personnel. Approval and/or exemptions may or may not be required.

4.3.4 Validate updated program and collect evaluation data from 400 to 600 DoW/Military Service personnel.

4.3.5 Use evaluation data to iteratively refine the program and implementation strategy, tools, and assets to support high-fidelity delivery.

4.3.6 Provide an evaluation report on DoW/Military Service participants’ Connect Program engagement, adoption of skills, and group cohesion and relationships, measure key aspects of implementation quality and support.

4.3.7 Provide implementation strategy report containing metrics and real-time participant evaluation data, feedback, and recommendations based on those findings.

4.4 Develop sustainable evaluation plan and provide recommendations for broader implementation and expansion of the Connect Program for DoW/Military Services.

4.4.1 Provide a sustainable evaluation plan including identified metrics and analytic methodology.

4.4.2 Translate program evaluation findings and learnings into expansion recommendations.

4.4.3 Provide data, analysis, and recommendations for broader implementation and expansion to assist DSPO and DoW/Military Service co-facilitators and leaders in their determination of scope, desired outcomes, and evaluation metrics for DoW/Military Service expansion.

4.5 Transition (Out) of Contract Services

4.5.1 The contractor shall provide a transition plan to ensure minimum disruption to vital Government business. This plan shall address how the Contractor will work with the incumbent and/or successor contractor and Government personnel to ensure that there will be no service degradation during and after the transition-in period for the transition period(s). The transition time is fourteen (14) business days for “Out”. The plan should include a project milestone plan for transition to be updated daily. The plan should also include a daily meeting with the Government COR to review the plan and risk mitigation strategies for any issues or concerns impeding a successful transition. The outgoing contractor shall maintain full responsibility for all contract services during the transition period.

4.6 Participate in a Post-Award Conference

4.6.1 This meeting shall provide an introduction between the Contractor personnel and Government personnel who will be involved with the contract. The meeting shall provide the opportunity to discuss technical, management and security issues. The Post Award Conference will aid both the Government and Contractor in achieving a clear and mutual understanding of all requirements and identify and resolve any potential issues. The Contractor shall be prepared to discuss any items requiring clarification and gather information as necessary to support each deliverable. The Contractor shall provide a written summary of the Post-Award Conference five (5) business days after meeting. The Post-Award Conference will take place approximately five (5) business days after award.

4.7 Section 508 Requirements

4.7.1 The Contractor shall ensure all Electronic and Information Technology, as defined at FAR 2.101, supplied under this contract, shall conform to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C

794) and the Architectural and Transportation Barriers Compliance Board’s (U.S. Access Board) information and communication technology (ICT) accessibility standards at 36 CFR 1194.1 for final Government deliverables. The following standards have been determined to be applicable to this contract:

E204, “Functional Performance Criteria”

E205, “Electronic Content”

E207, “Software”

E208, “Support Documentation and Services”

4.7.2 Section 508 compliance for deliverables includes:

4.7.3 Any outreach and engagement materials to include Contractor-produced content produced in any format that could be placed on a website or online application or intended for electronic distribution, unless otherwise directed by the Government; or any contractor-produced content written, created, or produced for any communications materials intended for public or internal use; to include reports, documents, charts, posters, presentations (such as MS PowerPoint) or video material that could be placed on a Government website or online application, a Government-funded website or online application.

4.7.4 Section 508 compliance for new documents and products. The Contractor shall coordinate the development of all new electronic media unless otherwise directed by the Government to ensure it is Section 508 compliant, including all electronic documents (Word, PowerPoint, Excel, and PDFs), audio, video, and website and online applications.

4.7.5 Section 508 compliance for legacy documents and products. The Contractor shall identify DSPO legacy content that is not Section 508 compliant, propose a timeline to make all designated legacy content Section 508 compliant.

4.7.6 Make certain all Electronic and Information Technology, as defined at FAR 2.101, supplied under this contract, conform to the Architectural and Transportation Barriers Compliance Board Electronic and Information Technology Accessibility Standards (36 CFR§1194). The applicable standards are available at https://www.accessboard.gov/ict/. The following standards have been determined to be applicable to this contract:

5.0 DELIVERABLES

The Contractor shall provide deliverable(s) in a format mutually agreed upon by the Government and the Contractor. All deliverables will be reviewed for timeliness, accuracy, and format. If a deliverable due date falls on a weekend or holiday, the Contractor shall submit the deliverable on the last workday prior to the due date. In fulfillment of this effort, the Contractor shall provide the following deliverables to the

COR.

Deliverable PWS Paragraph Delivery Date Method Delivered to

Provide RACI analysis 4.1.5 NLT 30 days after award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide a Project Charter 4.1.6 NLT 30 days after award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Develop a Project Plan 4.1.7 NLT 30 days after award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Monthly Status Report 4.1.9 On 10th calendar day of each month for the previous month. If the 10th falls on a weekend or holiday, submit report on the first business day after the weekend/holiday.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide environmental scan of policies, initiatives, and Command priorities.

4.2.1 NLT 180 days after

award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Update the Connect Program to meet DoW/Military Service-specific requirements.

4.2.4 NLT 240 days after

award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide a report for the Updated Connect Program.

4.2.5 NLT 270 days after

award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Submit PowerPoint brief and letters of support template to the Government.

4.3.2 NLT 270 days after

award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Obtain all necessary approvals from the Military Services, Institutional Review Boards (IRB), and Office of Management and Budget (OMB).

4.3.3 NLT 360 days after

award.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Validate updated program and collect evaluation data from 400 to 600

4.3.4 NLT 300 days after

Option Year 1.

Contractor Determined.

COR

DoW/Military Service personnel.

Provide evaluation report on DoW/Military Service participants’ Connect Program engagement.

4.3.6 NLT 360 days after

Option Year 1.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide implementation strategy report.

4.3.7 NLT 120 days after

Option Year 2.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide a sustainable evaluation plan.

4.4.1 NLT 210 days after

Option Year 2.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Provide data, analysis, and recommendations for broader implementation and expansion.

4.4.3 NLT 270 days after

Option Year 2.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Transition Out Plan 4.5.1 NLT 14 business days prior to contract expiration.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

Post-Award Conference written summary.

4.6 NLT 5 business days

after Post-Award Conference.

Microsoft Office (Word, Excel, PowerPoint, etc.)

COR

5.1

The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via the System for Award Management (SAM) (https://sam.gov) in accordance with DFARS 252.204-7023.

6.0 CONTRACTOR TRAVEL

Contractor costs for Government authorized travel are anticipated for this requirement. All travel shall be approved in advance by the COR or CO. Contractor payment claims shall include applicable documentation to support actual costs incurred (e.g. airfare and hotel/lodging receipts). No fee or G&A will be allowed, only actual costs will be reimbursed. Failure to provide appropriate documentation may result in a loss of reimbursement of travel expenses. Local Travel. Local travel to attend meetings or events may be required at no cost to the Government. Travel within the National Capital Region commuting vicinity is considered a cost of doing business and shall not be separately reimbursed.

7.0 RECORDS MANAGEMENT

7.1 Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

7.2 In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C.

chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

7.3 In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

7.4 Defense Human Resources Activity and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of Defense Human Resources Activity or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Contracting Officer’s Representative (COR). Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must report to the COR and the Defense Human Resources Activity Component Records Management Officer at dodhra.mc-alex.dhra-hq.mbx.records@mail.mil so DHRA may report promptly to NARA in accordance with 36

CFR 1230.

7.5 The Contractor shall immediately notify the COR upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know in accordance with all applicable privacy, security, and information protection policies. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the COR. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to DHRA control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the COR. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (7.4).

7.6 The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts. The Contractor (and any sub-contractor) is required to abide by Government and Defense Human Resources Activity guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

7.7 N/A

mailto:dodhra.mc-alex.dhra-hq.mbx.records@mail.mil mailto:dodhra.mc-alex.dhra-hq.mbx.records@mail.mil

7.8 The Contractor shall not create or maintain any records containing any non-public Defense Human Resources Activity information that are not specifically tied to or authorized by the contract.

7.9 The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

7.10 The Defense Human Resources Activity owns the rights to all data and records produced as part of this contract. The contractor shall not include any contractor markings on deliverables created under the contract. All deliverables under the contract are the property of the U.S. Government for which Defense Human Resources Activity shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest. The contractor shall not use or disclose any data or deliverables under this contract for any purposes other than performing the contract, unless expressly approved by the Government.

8.0 SECURITY

8.1 Personnel Security. Overarching security requirements are unclassified. Contractor and subcontractor personnel require unclassified access to DoD network(s), and Government Furnished Equipment (GFE). Contractor and subcontractor personnel must obtain, DoD credentials, (also known as the Common Access Card (CAC)) for physical and logical access to federally controlled facilities and DoD Information Systems (IS) containing Personally Identifiable Information (PII) or Controlled Unclassified Information (CUI).

8.1.1 The Contractor and Subcontractor personnel on this contract will be designated performing in noncritical-sensitive positions with unclassified access. Personnel assigned to this contract are required to obtain and maintain a Tier 3 background investigation (BI) and adjudication or suitability determination. This designation aligns with investigative requirements outlined by Defense Counterintelligence and Security Agency (DCSA) and is in accordance with the DoD Personnel Security Program, as defined in DoDI 5200.02, DoDM 5200.02. Specifically, Title 32, Code of Federal Regulations Part 156 applies to unclassified contracts, and Part 117 applies to contracts covered by the National Industrial Security Program (NISP).

8.1.2 No employee may perform under this contract or have access to DoD information or systems under this contract until they have completed a Tier 3 or higher Tier background investigation (BI) that meets the requirement or be in the process of a Personnel Security Investigation (PSI) with a minimum of interim eligibility approval.

8.2 Security Clearances. N/A

8.3 Staffing. Contractor personnel requiring access to DHRA-sponsored resources (e.g., DHRA-sponsored credentials, DoD networks, DoD IT systems, DoD Information Systems (IS), CUI/PII data, or federally controlled facilities) must be citizens of the United States. This citizenship requirement also applies to personnel assigned to or working on the contract at any remote site.

8.4 Onboarding. All Contractor personnel working on behalf of DHRA contracts, regardless of their access level, must be processed using the DHRA onboarding system (EAFi or DoD Service Center).

They must also provide a completed Defense Logistics Agency Headquarters (DLAH) Form 1728, Request for HQC Contractor Badge and/or Information Technology (IT) Access, using a secure method (e.g., encrypted email or DoD SAFE). The DHRA Security and DLA Personnel Security

(PERSEC) offices will then validate that the contractor meets DoD background investigation requirements.

8.5 Listing of employees & Clearance Documentation. The Contractor shall maintain a current listing of employees. Within 10 calendar days of contract award, the Contractor shall provide the COR with a list of all personnel assigned to the contract or task order. The personnel list must include the following information: contract number, contract expiration date, employee information (full legal names), DHRA center/office, location of performance, clearance level needed (e.g., Top Secret, Secret, Confidential or None [for unclassified access]), and IT access needed (e.g., privilege, authorize or other). The Contractor shall provide the COR and DHRA Security with an updated list whenever personnel status or information changes.

8.6 Access to Sensitive Information. To the extent that the work under this contract requires the Contractor to have access to DoD sensitive information, the Contractor shall, upon receipt, treat such information as sensitive and safeguard it from unauthorized use and disclosure. The Contractor shall not appropriate such information for its own use or disclose such information to third parties unless specifically authorized by the Government in writing.

8.6.1 The Contractor shall only allow access to sensitive information to those employees who need it to perform services under this contract and who have acknowledged that it shall be used solely for that purpose. The Contractor shall prevent its employees from discussing, divulging, or disclosing any sensitive information to any person or entity except those within the Contractor’s organization directly performing the contract.

8.7 Operations Security (OPSEC) Requirements. The Contractor is not required to develop an OPSEC Plan. However, the Contractor shall comply with DoD Directive 5205.02E and the requiring activity's OPSEC program. Contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter.

The Contractor shall maintain all OPSEC training records and shall provide copies to the COR upon request.

8.8 Information Technology (IT) Investigation Requirements. N/A

8.9 Personal Identifiable Information (PII) and Tier Investigations. All personnel supporting this contract must protect PII data according to the Privacy Act of 1974. Personnel requiring access to Information Technology (IT) or access to DoD Information Systems that contain military active duty, guard, or reservists’ PII or information pertaining to Service members that are otherwise protected from disclosure, where such access has the potential to cause serious damage to national security, must be vetted accordingly and protect the data. Background Investigations (BI) levels required for each job function or necessary access include, but are not limited to, the following:

8.9.1 Tier 5/Tier 5R for Special-Sensitive/Critical-Sensitive – High Risk: All personnel with administrative capabilities in a system storing PII, personnel security investigations, or adjudication determinations require a Tier 5 (T5) BI.

8.9.2 Tier 3/Tier 3R for Noncritical-Sensitive – Moderate Risk: All personnel with the ability to aggregate or extract military PII en masses from an automated records repository require, at a minimum, a favorably adjudicated Tier 3 (T3) BI or equivalent.

8.9.3 Tier 1 for Non-Sensitive – Low Risk: All Personnel whose access to military PII is limited to data entry or singular search capability require, at a minimum, a favorably adjudicated Tier 1 (T1) BI.

8.9.4 The Contractor shall report any privacy breach immediately to the DHRA Privacy Office and secondly to the COR.

8.10 Controlled Unclassified Information Requirements for DoD Contractors. The following procedures will be used to protect Controlled Unclassified Information (CUI) documents and materials:

8.10.1 HANDLING: Access to CUI material shall be limited to those employees needing the material to perform their duties. The CUI marking is assigned to documents and material created by a DoD User Agency. CUI is not a classification but requires extra precautions to ensure it is properly safeguarded and disseminated and is not released to the public without government authorization.

8.10.2 MARKING: The Contractor shall mark unclassified documents containing CUI as follows:

“CUI" at the top and bottom of each page, include the CUI warning box, and the CUI Designation Indicator Block as required in DoDI 5200.48.

8.10.2.1 Mark other records such as computer print outs, photographs, films, tapes, or slides in accordance with DoDI 5200.48 so the receiver or viewer knows that it contains CUI material.

8.10.2.2 Mark a message containing material in accordance with DoDI 5200.48. Unclassified messages containing CUI material must show the abbreviation (CUI) before the text begins.

8.10.2.3 Ensure documents transmitting CUI material call attention to any attachments containing

CUI.

8.10.2.4 CUI material released to a contractor by a DoD user agency must have the following statement on the front page or cover:

THIS DOCUMENT CONTAINS CUI MATERIAL AND MUST BE REVIEWED BY A

GOVERNMENT REPRESENTATIVE UNDER THE REQUIREMENTS OF DODI 5200.48, DODI

5230.09, and DODI 5230.29.

8.10.3 STORAGE: The Contractor shall, place CUI material in an out-of-sight location during normal work hours, if the work area is accessible to persons who do not have an authorized government purpose for access to the material. After normal duty hours, the Contractor shall store CUI material to prevent unauthorized access by filing it with other unclassified records in unlocked files or desks when internal building security is provided and the file is marked as CUI. When there is no internal security, locked buildings or rooms usually provide adequate after hours protection. For additional protection, store CUI material in locked containers such as file cabinets, desks, or bookcases.

8.10.4 TRANSMISSION: CUI documents and materials may be transmitted via first class mail, parcel post or, for bulky shipments, fourth class mail. Within the CONUS discussion of CUI material on the telephone is authorized if necessary for the performance of the contract and no alternative is available. Electronic transmission of CUI (voice, data, or facsimile) should be by using approved and secure communications systems whenever practical. If there is a fax transmission, the sender must ensure the intended receiver is available to receive it or a cover sheet will be used to allow carrying it to the final recipient to avoid unauthorized disclosure of the CUI.

8.10.5 RELEASE: CUI material shall not be released outside of the contractor’s facility except to the representative of DoD or DHRA.

8.10.6 DESTRUCTION: When the CUI material no longer meets the threshold for safeguarding and dissemination, the Contractor shall immediately decontrol it, process it through the records management process, and destroyed by the approved methods identified in DoDI 5200.48 to preclude its disclosure to unauthorized individuals by rendering it unreadable, indecipherable, and irrecoverable.

8.11 Position of Trust (POT) Requirements. The Contractor shall provide the COR with a list of personnel requiring unclassified access no later than five business days after contract award and within three business days of any change.

8.11.1 Reciprocity Consideration. In accordance with DoD standards outlined in Executive Order E.O

13488, existing Personnel Security Investigations (PSIs) for contractor personnel will be validated or assessed for reciprocity. Contractor personnel shall provide additional information if requested by the DHRA and DLA Security office for DCSA re-adjudication or eligibility assessments. PSI equivalency will be determined according to the investigative alignments provided by DCSA. Reciprocity considerations include verifying any break in federal service (e.g., U.S. Military, U.S. Civilian or U.S. Contractor) exceeding 24 months since the last favorable investigation.

8.11.2 Government Responsibilities. The Government is responsible for funding Contractor personnel

PSIs or sponsoring a DoD-determined equivalent background check when eligibility is required for Position of Trust without access to classified information. The Contractor shall ensure the COR and Government Security Office are informed of Contractor personnel requiring sponsored PSIs.

8.11.3 Tier Application Requirements. DCSA offers three-tier Personnel Security Investigations (PSI):

Tier 5 (High Tier), Tier 3 (Moderate Tier) and Tier 1 (Low Tier). Contractor personnel requiring a Tier PSI shall provide an FBI fingerprint check, proof of U.S. Citizenship, and a Personnel Security Questionnaire (PSQ). The Standard Form (SF) SF86 must be used for High or Moderate Tiers, and SF85 for Low Tier, using the National Background Investigation Services (NBIS) electronic Application (eApp). Contractor personnel shall provide all requested information pursuant to the Privacy Act of 1974 when requested by the Government. The Government Security Office will provide instructions, specific to the individual case and designated Tier, on how to access the NBIS system. For information, visit NBIS website at https://www.dcsa.mil/is/nbis/

8.11.4 Interim Determinations. DLA Security will assess each Tier PSI application package, including FBI fingerprint check results, Proof of U.S. Citizenship, and PSQ for interim eligibility. The Contractor shall not assign personnel to duties supporting the Government contract before interim approval is granted. To maintain interim Position of Trust eligibility, personnel must:

8.11.4.1 Comply with all personnel security requirements specified by DHRA and DLA Security;

8.11.4.2 Obtain and maintain favorable FBI fingerprint results.

https://www.dcsa.mil/is/nbis/

8.11.4.3 Comply with all investigative and adjudicative requirements, including responsiveness to time-sensitive requests (e.g., interviews, additional information, or clarification) from DHRA or DLA Security, a DCSA investigator, or the adjudicative agency.

8.11.4.4 Obtain and maintain favorable eligibility for the Tier background investigation.

8.11.5 Continuous Vetting (CV) for Positions of Trust. In accordance with the DoD Continuous

Evaluation (CE) Program and Trusted Workforce 2.0, all personnel must comply with Continues Evaluation (CE) enrollment and re-enrollment requirements upon request to maintain their eligibility.

8.12 Controlled/Restricted Areas. The Contractor shall comply with local procedures for entry to all DoD/DHRA controlled or restricted areas where Contractor personnel will be working.

8.13 Physical Security. The Contractor shall safeguard all Government property and controlled forms provided for Contractor use and shall adhere to the Government property requirements outlined in this contract. At the conclusion of each workday, all Government facilities, equipment, and materials must be secured.

8.14 Pass and Identification Items. The Contractor shall ensure that all necessary passes and identification items required for contract performance are obtained for employees and non-government owned vehicles.

8.15 DoD Credentials/Common Access Card (CAC). Contractor personnel must comply with DODM 1000.13, DoD Identification (ID) Cards: ID Card Life-Cycle and Homeland Security Presidential Directive 12 (HSPD-12) Personal Identity Verification (PIV) issuance requirements when recurring physical access to federally and non-federally controlled facilities or logical access (e.g., DoD networks, CUI/PII data, IT/Information Systems) on behalf of the DoD is required. To Request access to DoD resources (such as DoD facilities, DoD IT/Information Systems), personnel must obtain a CAC or PIV and maintain a ready status. CAC Applicants supporting this contract must meet the following requirements:

8.15.1 Execute, and obtain/maintain a favorable FBI National Criminal History Check (fingerprint check).

8.15.2 Possess a Tier 3 or higher BI to meet the access or sensitivity requirements for the role or job;

8.15.3 Be prepared to provide two forms of identification (I-9 documents);

8.15.4 Provide proof of U.S. Citizenship.

8.16 Key Control/Access Badge Control. The Contractor shall establish and implement methods of making sure all keys/badges issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The Contractor shall not duplicate any keys issued by the Government.

8.16.1 Prohibited Use. The Contractor shall prohibit the use of keys issued by the Government by anyone other than the Contractor’s employees. Contractor employees shall not open locked areas to permit the entrance of anyone other than Contractor employees engaged in the performance of contract work requirements in those areas.

8.17 Conduct while on Government Installations. The Contractor shall not assign work or direct its employees to access government information, systems, or installations unless the employees possess and maintain the required background investigation, clearances, and authorizations.

8.18 Weapons, Firearms, and Ammunitions. Contractor employees are prohibited from possessing weapons, firearms, or ammunition, either in their possession or within their contractor-owned vehicle or privately-owned vehicle, while on any government installation.

8.19 Reporting Requirements. The Contractor shall ensure their personnel are aware of the requirement to report to their supervisor and site security office any information or circumstance they are aware of that may pose a threat to the security of government or contractor personnel, resources, or information.

8.20 Government Furnished Equipment (GFE). The Contractor shall establish and implement procedures to protect Government Furnished Equipment (GFE), including laptops and data processing devices, from lost, misplacement, unauthorized use, and connection of unauthorized external devices. The Contractor shall report any lost GFE to the COR within two (2) hours of discovery. If GFE is lost, the Contracting Officer may direct the Contractor in writing to replace the equipment at no additional cost to the Government; otherwise, the Government may replace the equipment and deduct the cost from the Contractor’s monthly payment.

8.21 Lock Combinations. N/A

8.22 Offboarding. Coordination with COR. The Contractor shall coordinate the removal of personnel from work under this contract with the COR upon any of the following occurrences: contract completion, personnel relocation, retirement, resignation, termination, inability to meet contract expectations, or violation of DHRA security policies. In addition, if any Contractor personnel supporting this contract are unable to obtain or maintain the required security clearance or eligibility, the Contractor shall immediately notify the COR. The Contractor shall remove the individual from roles performed under this contract and replace them with a qualified individual possessing the necessary knowledge, skills, and abilities (KSAs) to perform the services. When offboarding personnel, the Contractor shall:

8.22.1 Utilize DHRA’s employee termination checklists, and notification systems, ensuring all relevant parties are informed of the individual’s departure.

8.22.2 Retrieving Identification Media. The Contractor shall ensure that all identification media, including vehicle passes and credentials (e.g., CACs, badges, identification cards) is retrieved and returned to the COR, their local Installation Access Control Office, or the Government Security Office.

8.22.3 Ensure issued tokens are returned to the appropriate Certificate Authority (CA) or the respective issuing authority.

8.22.4 Provide an updated list of personnel to the COR within three (3) business days of any change.

9.0 Cybersecurity

9.1 Cyber Incident Reporting. In addition to DFARS 252.204-7012, the Contractor shall notify the

DMDC Incident Response (IR) team by emailing an initial cyber incident report to dodhra.dodc-mb.dmdc.list.ir-team@mail.mil, the Contracting Officer, and the COR within one hour of discovering any cyber incident. The Contractor shall follow up with a supplemental report every 24 hours until the incident is closed.

9.2 Information System Security. The Contractor shall implement IS security protections that are appropriate for the confidentiality, integrity, and availability needs of the contract. The protections must include the administrative, technical, and physical safeguards necessary to protect all nonpublic Government data.

10.0 GOVERNMENT FURNISHED PROPERTY/EQUIPMENT/INFORMATION

(GFP/GFE/GFI): No GFE will be provided.

11.0 PLACE OF PERFORMANCE

Contractors will be working in Contractor’s facility.

12.0 QUALITY CONTROL

The contractor shall implement and maintain a Quality Control Plan (QCP) to ensure work performed conforms to the scope of work and meets the requirements under this PWS. The QCP shall, at a minimum provide a method for performing inspections; identifying, correcting and preventing problems/defective service; addressing customer complaints, and improving the quality of services over the life of the contract.

13.0 QUALITY ASSURANCE

13.1. The Government reserves the right to perform inspections and surveillance to evaluate the Contractor’s compliance to the contract terms and performance of the requirements in the PWS.

13.2. Contract Discrepancy Report (CDR). In the event of unsatisfactory contractor performance, the COR or CO will issue a CDR that will explain the circumstances and findings concerning the incomplete or unsatisfactory service. The contractor shall acknowledge receipt of the CDR and respond in writing as to how he/she shall correct the unacceptable performance and avoid a recurrence. The Government will review the contractor's corrective action response to determine acceptability and will use any completed CDR as part of an overall evaluation of Contractor performance when determining present or future contractual actions.

14.0 ORGANIZATIONAL CONFLICTS OF INTEREST

The Contractor acknowledges that it is familiar with FAR Subpart 9.5, Organizational and Consultant Conflicts of Interest, and agrees to avoid, neutralize or mitigate such conflicts of interest in accordance with the principles set forth in the FAR. If the performance requires the Contractor (to include subcontractors) to supply technical support related to systems or projects with which the Contractor is already directly concerned, either by prime or subcontract, the Contractor shall immediately inform the Contracting Officer. The PWS may be withdrawn if a conflict is found. The Contractor shall not undertake performance of any PWS requirements which requires it to supply technical support regarding such systems until the notice is given, and written consent to proceed is issued by the Contracting Officer.

15.0 APPLICABLE DOCUMENTS

Document Web link

Defense Strategy for Suicide Prevention https://www.dspo.mil/Portals/113/Documents/TAB%20B%20- %20dssp_final%20USD%20PR%20signed.pdf

Department of Defense Instruction (DoDI) 6490.16, Defense Suicide Prevention Program https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/d odi/649016p.pdf?ver=2020-09-11-122632-850

Department of Defense Instruction (DoDI) DoDI 6400.09, DoD Policy on Integrated Primary Prevention of Self-Directed Harm and Prohibited Abuse or Harm https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/d odi/640009p.pdf?ver=2020-09-11-104936-223

16.0 PERFORMANCE REQUIREMENT SUMMARY (PRS)

16.1 Purpose. The PRS lists performance objectives for the required services the Government will surveil.

The absence of any contract requirement from the PRS shall not detract from its enforceability nor limit the rights or remedies of the Government under any other provision of the contract including the clauses entitled “Inspection of Services” or “Inspection” or “Default” in the contract.

16.2 Components. The PRS states the performance objective (required service), and threshold (performance standard, accept and reject points (if applicable)) in either a qualitative or quantitative fashion for each critical success factor.

Performance Objective PWS paragraph Performance Standard/Acceptable Quality Level

Provide high quality deliverables that contain only minimal errors or require minimal corrections.

All Tasks Performance is acceptable when there are no more than two instances per month where a deliverable contained errors that required more than four iterations to get to a final product.

Develop and submit all required deliverables on time

All Tasks Performance is acceptable when there are no more than four instances per quarter of deliverable did that was not received on time.

17.0 Mandatory Training Requirements:

Contractor employees performing under this contract shall complete the following mandatory trainings within 30 calendar days of reporting for duty and annually thereafter when applicable. Refer to the COR/Government point of contact for the websites/links to the specific training identified below. They will provide a sheet with the Mandatory Training Website/links. The Contractor shall provide a copy of its employee(s)’ training certificates to the COR/Government point of contact to meet the mandatory training requirements.

1. OPSEC Awareness for Military Members, DoD Employees and Contractors IAW DoDM 5205.02, “DoD Operations Security (OPSEC) Program Manual”, dated October 29, 2020.

https://securityawareness.dcsa.mil/opsec/index.htm

2. Unauthorized Disclosure of Classified Information and Controlled Unclassified Information IAW

DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020.

https://securityawareness.dcsa.mil/disclosure/index.html https://www.dspo.mil/Portals/113/Documents/TAB%20B%20-%20dssp_final%20USD%20PR%20signed.pdf https://www.dspo.mil/Portals/113/Documents/TAB%20B%20-%20dssp_final%20USD%20PR%20signed.pdf https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/649016p.pdf?ver=2020-09-11-122632-850 https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/649016p.pdf?ver=2020-09-11-122632-850 https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/640009p.pdf?ver=2020-09-11-104936-223 https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/640009p.pdf?ver=2020-09-11-104936-223 https://securityawareness.dcsa.mil/opsec/index.htm https://securityawareness.dcsa.mil/disclosure/index.html

3. DoD Mandatory Controlled Unclassified Information (CUI) Training, Executive Order 13556, Controlled Unclassified Information and DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020. https://securityawareness.dcsa.mil/cui/index.html

4. Insider Threat Awareness IAW DoDD 5205.16, “The DoD Insider Threat Program”, dated

August 28, 2017. https://securityawareness.dcsa.mil/itawareness/index.htm https://securityawareness.dcsa.mil/initialorientation/index.htm

5. Privacy Act and Personally Identifiable Information IAW DoDI 5400.11, “DoD Privacy and Civil…