PWS Draft.pdf

Enclosure 4a, PWS Page 1 of 12 Pages

2015/Version 9

PERFORMANCE WORK STATEMENT (PWS)

2. Contract or Task Order Title. NCTS Naples Telephone Switch Operations & Maintenance

3. Background.

The Government requires support for the operations and maintenance (O&M) of U.S. Navy owned telephone switching systems located at the U.S. Naval Support Activity (NSA) Naples, Italy and under control of U.S. Naval Computer and Telecommunication Station (NCTS) Naples. O&M shall cover regular upgrades and updates to the SL100 switching systems hardware and software components, addition of new features, and identify software is-sues. The management and monitoring system includes diverse telephone switching equipment, switch and inter-site Navy owned trunks and associated peripheral systems including Cable Distribution Frames at all switch locations, Closed Telephone network, Fiber Optic cables, copper cables, Voice Mail Systems, Uninterruptible Power Supply (UPS), and a centralized billing system. The fiber optic system requirements include fiber optic cabling interfaced with telephone and data channels.

The Nortel SL100 End Office (EO) switch is located at NSA Capodichino, Building 440, Room F269 and is subject to availability of engineering and material support during an emergency. The availability of engineering and material support will be on a 24x7 basis and will be required at the same level as needed to work with any other Italian agency in the support of the Telecommunication systems and the resolution of the emergency. The contractor may be required to be a liaison with Italian Civil Protection agency personnel during emergency situations to restore service to the Defense Switched Network (DSN) EO switch.

4. Objectives:

The objectives are to obtain contractor support for Telephone Switch Operations & Maintenance, this includes operation and maintenance support for two Nortel SL-100 EO switches, one Nortel Meridian CS- 1000 Private Branch Exchange (PBX), one Local Session Controller (LSC), two Avaya CM G450 PBXs, one Avaya Aura Automated Call Distributor, one TUMS voicemail system, CAIRS.net and AOR peripheral equipment, four Nortel Option 11C PBXs, with related peripherals, analog, digital, VoIP and IP Trunks and Circuits, internal network, UPS, and all inter-face equipment and associated peripheral equipment.

5. Scope.

The contractor’s duties shall include but are not limited to start, stop, and change service functions to individual subscriber lines and voice mail accounts on the switch in response to official service requests received from the tele-phone maintenance shop. The Onsite Technician shall configure and maintain an Interactive Voice Response System (IVRS) running on the Callegra Call-ware voice mail system, TUMS voicemail system, Avaya Aura ACD PBX, and a separate back up in case of failure of the primary system.

The Response time to complete each service re-quest shall be no longer than one workday from receipt of requirement.

The contractor shall perform network software and hardware installations, system configuration, on-site maintenance, system administration functions within DOD guidelines (8100.4), network monitoring, assignment of authorized groups, and adding or deleting trunks from existing trunk groups and other functions necessary to ensure optimum system functionality to include the maintenance of the closed telephone network.

Page 2 of 12 Pages

The contractor shall be responsible to maintain all software and licensing for the proper operation and integration of Telecommunications equipment listed in the Performance Requirements as applicable to include fiber interfaces and all peripheral systems.

The contractor is required to ensure compliance with all DISA instructions and guidelines located on www.disa.mil. All switch configuration work must be in strict compliance with DISA’s most current version of the DSN Security Technical Implementation Guide (STIG) as applicable.

6. Performance Requirements.

The contractor shall assure the necessary labor, test equipment, tools, spare parts, supervision, and all other components necessary to operate and perform maintenance on the U.S. Navy provided equipment and peripheral systems to the standards detailed in this PWS.

The contractor shall perform (on an on-call basis) all operations and maintenance to the end-to-end system including connectivity between Naples; one Nortel SL-100 EO (CDX), TUMS voicemail system, CAIRS.net System and peripheral equipment, one Nortel Option 11C PBXs, one Avaya Aura ACD PBX, and one Avaya CM G450 PBX all co-located at Bldg. 440 Naval Support Activity (NSA) Capodichino; one Nortel SL- 100 EO, Callware Callegra Voice Mail System, three Nortel Option 11C PBXs, all co-located at Bldg. 2070 NSA Gricignano Support Site; one Nortel CS 1000 PBX, located at Bldg. 719 NSA Gaeta; one Avaya Definity G-3 switch located at the SATCOM facility Bldg. 103 Lago Patria, one Avaya CM G450 PBX located at Bldg. 2049A NSA Warehouse Teverola, and all ancillary systems including A-Law/Mu- Law converters, Spectrum Peripheral Module (SPM) Fiber Multiplexers, UPS, close telephone network, and all interface equipment.

The contractor shall operate and maintain, two Nortel SL-100 EO switches, one Nortel Meridian CS-1000 Private Branch Exchange (PBX), one Local Session Controller (LSC), two Avaya Call Manager (CM) G450 Private Branch Exchanges (PBXs), one Avaya Aura Automated Call Distribution (ACD) system, one Telephony Unified Messaging System (TUMS) voicemail system, CAIRS.net and Area of Responsibility (AOR) peripheral equipment, four Nortel Option 11C PBXs with all related peripherals, analog, digital, VoIP trunks and circuits, internal network, UPS, and all interface equipment and associated peripheral equipment in the manner described in this Performance Work Statement (PWS) to ensure that subscribers have required service available 99.99 % of the time.

The contractor shall be responsible for providing operation and maintenance (O&M) services for any new equipment procured by the telephone office during the term of this contract.

The contractor shall provide maintenance services, but are not limited to, regular inspections, troubleshooting, re-pair, and replacement of defective parts of the Avaya Aura Automated Call Distribution system, as well as maintenance for the associated software licenses, including updates and patches. The contractor shall not be responsible for any add-ons, enhancements, or modifications to the Avaya ACD beyond routine maintenance and support services. This delineation ensures clarity regarding the scope of the contractor's obligations and underscores that any additional functionalities or expansions to the Avaya ACD system fall outside the purview of this O&M contract.

The contractor shall perform regular backups, generate and provide billing reports, and conduct training sessions of the CAIRS.net system.

The contractor shall be responsible for maintaining an on-site pool of spare parts (ex: switch cards, backup devices, etc.), specifically for telephone switches and equipment, which are prone to failure or are deemed critical for system functionality. Should repair parts be unavailable, the contractor shall furnish an interim solution to restore tele-phone service and circumvent system faults. A document will be provided by the U.S. Navy listing high failure items and the list will be provided to the contractor.

The contractor shall assure the presence of qualified and certified technicians who have extensive experience and training on the Avaya/Nortel/Unique product lines, which includes Avaya Call Manager

Page 3 of 12 Pages

(CM) G450, TUMS voicemail system, VoIP Trunks and Circuits, CAIRS.net, OPT 11C, CS-1000 and Nortel SL-100 for a minimum of 40 hours a week to perform maintenance duties, including after hours, weekends, holidays, recall duties as required.

The contractor shall assure a contingency capability to ensure continuity of DSN service in the event of an extended interruption of DSN trunk connectivity on the Defense Information Systems Network (DISN) Multi Level Precedence Pre-emption (MLPP) node which is located in Building 440 in the Technical Control Facility (TCF). In the event DSN service is interrupted from the DISA MLPP node for an extended outage(**), the contractor shall, when directed by the Base Communication Office Leadership (BCO Department Head, BCO Director, BCO LCPO), or other Executive Officer authority, re-route DSN trunks via alternative commercial connectivity to bypass Building 440 until the MLPP service is restored. The contractor’s solution will be reviewed and approved by the BCO Leader-ship and the contractor must perform an annual test of the contingency capability to demonstrate functionality. Testing of the contingency capability will be coordinated with the BCO Leadership and will not interrupt service. A realistic simulation following a written script involving key technicians and supervisors is an acceptable method of conducting the annual requirement. A written report with lessons learned is to be provided to the BCO Leadership within 10 workdays of the test.

Note:

(**An extended outage is defined as any interruption of service to the DISN MLPP node of 48 hours or longer which may be either planned or unplanned.)

The contractor shall assure on-call maintenance support and repair as necessary of the Nortel SL 100 Switching System as listed in paragraph 6. Onsite maintenance shall be performed during normal service hours (0700 to 1600, Monday through Friday). After working hours, a technician shall be available on site within two (2) hours of an emergency and within six (6) hours in all other cases. Restoration of the system may be provided remotely when provided via a public network provider or on site as required. The contractor will be responsible for all isolation, re-placement parts, test equipment, measurement and inspection devices, test apparatus and diagnostic equipment, special tools and any supplies (solder, nuts, bolts, wires, screws, etc.) required.

The contractor shall assure for the elimination of program faults through troubleshooting and software corrections. The contractor shall provide an interim solution, when reasonable and possible, to work around the fault until the software corrections, upgrades, patches or solutions are provided and the fault is corrected.

Telephone Switch Operations: The contractor shall provide Onsite Technicians that are certified, trained and qualified operation and maintenance personnel five days a week, Monday through Friday, from 0700 to 1600 (herein after referred to as “working hours”). After working hours, technical support shall respond within two (2) hours of an emergency and within six (6) hours of non-emergency situations that the Government considers operationally important. They are NSA Naples Security Police, Medical, Fire, and Operational Commands.

6.1 Task 1 - Backup and Restore

The contractor shall assure a backup and the restore capability for the Nortel SL-100 system data and all other communications equipment within the PWS in the event of a system failure. The communication equipment consist of the SL-100, TUMS voicemail system, CAIRS.net, Nortel Option 11C PBXs, Avaya Aura ACD, Avaya CM G450 PBX, Avaya Definity G-3, and CS-1000 PBX. The contractor shall provide security patches and software version upgrades for the afore-mentioned systems in support of the PWS.

6.2 Task 2. On-call Support

The contractor shall provide on-call maintenance support and repair all communication equipment which consist of the SL-100, TUMS voicemail system, CAIRS.net, Nortel Option 11C PBXs, Avaya CM G450

Page 4 of 12 Pages

PBX, Avaya Aura ACD, Avaya Definity G-3, CS-1000 PBX, and Spectrum Peripheral Module (SPM) Fiber Multiplexers within the NCTS Naples AOR. The contractor shall be responsible for all fault isolation and shall provide for the elimination of all system faults for the following devices:

1) Two Nortel SL-100 EO switches

2) One Nortel CS-1000 PBX

3) Four Nortel Option 11C PBXs

4) Two Avaya CM G450 PBX

5) One Avaya Aura ACD PBX

6) One Avaya G-3 Definity PBX

7) One CAIRS.net system and AOR peripheral equipment

8) One TUMS voicemail system

6.3 Task 3. Preventive Maintenance Services:

The contractor shall provide Periodic preventative maintenance in accordance with U.S. Government regulations, Standard Operation Procedures (SOP) and the manufacturer’s recommendations and proven industry practices. The contractor shall provide the maintenance and the equipment functional conditions 365 days a year, 24 hours a day.

Corrective maintenance:

a) The contractor shall provide for the Correction of anomalies on the basis of alarm signals or trouble calls.

b) The contractor shall maintain a database of the copper cable plant distribution cables, MDF cross connects numbers assignments per cable pair etc. The BCO will have full access and copies to all databases and records in data format and hard copy red line drawings.

c) The contractor shall maintain equipment maintenance and historical records.

d) Contractor shall not be responsible for any breakage or damage caused by a third party not employed by the contractor.

6.4 Task 4. Intervention Time

The contractor shall respond to an on-call requested by a designated official (BCO Leadership) regardless of the cause of the problem. The contractor shall respond with service technicians who have product-specific and system-specific knowledge. For trouble calls made on weekends and U.S. observed holidays, the contractor will respond and begin corrective action within two (2) hours on major alarms. A major alarm is defined as a service disruption to 25% or more of the circuits along any portion of the link.

Interruption of service to emergency telephone numbers of the NSA Naples security police, medical, fire department, or operational commands, will be treated as a major outage and respond accordingly. The contractor may resolve problems via remote diagnostics when feasible.

6.5 Task 5. Coordination

The contractor shall respond to a maintenance call when notified by the BCO Leadership or persons designated in writing by the BCO Director or BCO Department Head. Precise maintenance call procedures will be defined by the Standard Operation Procedures (SOP) of the BCO department and will be consistent with already established maintenance call procedures for links/trunks of similar nature.

Procedures will be given to the contractor in writing within 30 days of contract award.

6.6 Task 6. Corrective Action

Corrective Action. The contractor shall correct any anomalies on the basis of alarm signals or trouble calls. Additionally, the contractor shall establish, populate, and keep current a database of the Naples cable plant and peripheral equipment which will include at a minimum distribution cables, MDF cross

Page 5 of 12 Pages connects, and number assignments per cable pair with corresponding building distribution jack assignment, analog lines, digital lines, IP lines, and special configuration assignments such as hot lines, ring down, alert systems etc. The contractor shall include fields in the database for equipment connected to inverters. Minimum fields will include equipment (i.e.: SL-100), location (building and room number), power breaker location, and associated power loading of the equipment. The contractor shall make records available to authorized Government personnel. The contractor may establish the database with software of choice. Records will not be provided to unauthorized personnel at any time unless expressly per-mitted on a case basis via written correspondence from the BCO Director or BCO Department Head.

6.7 Task 7. Equipment Support:

The Statement of Requirements for two Nortel SL-100 EO, one Nortel CS-1000 PBX, four Nortel Option 11-C PBX, one Avaya G-3 Definity PBX, and one Avaya CM G450 PBX.

The contractor shall provide full maintenance support for the following Government owned equipment:

1) Two Nortel SL-100 EO switches

2) One Nortel CS-1000 PBX

3) Four Nortel Option 11C PBXs

4) Two Avaya CM G450 PBX

5) One Avaya Aura ACD PBX

6) One Avaya G-3 Definity PBX

7) One CAIRS.net system and AOR peripheral equipment

8) One TUMS voicemail system

6.7.1 Subtask 1 - The contractor shall provide support for the operation and maintenance for Spectrum Peripheral Module (SPM) Fiber Optic multiplexers located in buildings 440 and 442 at Capodichino and building 2070 at Gricignano NSA Support Site. The contractor shall provide qualified operators and technicians for the fiber optic multiplex equipment and will program circuit restoration priorities in accordance with Government direction.

The equipment and locations are listed as follows:

Location for Maintenance and Operation Specific Equipment NSA Capodichino Bldg. 440 One One Nortel SL-100 EO 80144 Naples, Metropolitan City of Naples One Avaya CM G450 PBX One Nortel Option 11C PBX One TUMS voicemail system One Avaya Aura ACD PBX One Cairs.net system

NSA Gricignano Support Site Bldg. 2070 One Nortel SL-100 EO 81030 Gricignano di Aversa, Province of Caserta Three Nortel Option 11C PBX One Callegra Callware One Cairs.net peripheral equipment

NSA Gaeta Bldg. 719 One Nortel CS-1000 PBX Via Calegna, 28, 04024 Gaeta LT One Cairs.net peripheral equipment

NSA Warehouse Teverola bldg. 2049A One Avaya CM G450 PBX

SATCOM Lago Patria Bldg. 103 One Avaya G-3 Definity PBX Via Madonna del Pantano, 80014 Lago Patria One Cairs.net peripheral equipment

Page 6 of 12 Pages

6.7.2 Subtask 2 - The contractor shall assure the presence of at least one Nortel/Avaya qualified technician for a minimum of 40 hours a week to perform maintenance duties, and after hours, weekends, holidays, recall duties as required. The contractor shall provide full maintenance support for the Avaya CM/Nortel PBX equipment for trunk group route reconfiguration and maintenance to switch database. The contractor shall provide qualified technicians for all Nortel SL-100 switches, CS-1000 PBX, OPT-11 PBX, Avaya Aura ACD PBX, TUMS voicemail system, and CAIRS.net.

6.8 Task 8. Upgrades

6.8.1 Subtask 1 - The contractor shall provide information on a quarterly basis about any new technical developments on the systems, i.e.: new hardware and software releases, upgrades, patches, recommendations, as well as preliminary plans for upgrades.

6.8.2 Subtask 2 - The contractor shall provide and perform software releases, upgrades, and patches as required for the systems and will be carried out only after coordination with the proper Government representative consisting of the BCO Director and/or BCO Department Head.

6.9 Task 9. – Naples Switching Environment

6.9.1 Subtask 1 - Maintenance Records. The contractor shall establish, populate and keep current a database of cable, equipment, and number assignment records in English and provide updated copies of records to authorized DOD personnel upon request. Additionally, the contractor maintain maintenance records for any preventative or demand maintenance performed on switches and peripheral systems.

Records shall clearly indicate spare part re-placement with specific identifying data, where applicable, for all maintenance actions. Maintenance history records shall be made available to authorized DOD personnel. Records shall not be provided to unauthorized personnel at any time unless expressly permitted on a case basis via written correspondence from the BCO Leadership.

6.9.2 Subtask 2 - Training and Access. The contractor shall assure personnel have the training for the Nortel SL-100, Avaya CM G450 PBX, TUMS, and CAIRS, in order to perform switch maintenance, configuration upgrades and changes. Government Authorized DoD personnel will be allowed access to the Nortel SL-100 switch, TUMS voicemail system, CAIRS.net, Avaya CM G450 PBX, Nortel Option 11C PBX, Avaya G-3 Definity PBX, Avaya Aura ACD PBX, and Nortel CS-1000 PBX. All upgrades and configuration changes to the switching equipment shall be coordinated with the BCO Leadership prior to work being performed. The contractor shall allow and collaborate with authorized Government personnel access to the Nortel SL100, TUMS voicemail system, CAIRS.net, Avaya CM G450 PBX, Nortel Option 11C PBX, Avaya G-3 Definity PBX, Avaya Aura ACD PBX, and Nortel CS-1000 PBX equipment for trunk group route reconfiguration and maintenance to switch database.

6.9.3 Subtask 3 – Telephone Closed Network. The contractor shall perform all maintenance and maintain parts on the closed telephone network for the DSN. Specifically, to consider the whole set of data switches and terminals needed for the administration of the DSN EO, and interconnected PBXs.

6.9.4 Subtask 4 - Access to facilities. The contractor shall coordinate all site activity schedules with the BCO Leadership who will arrange for clearance and access to the facilities involved. The contractor shall provide all documents required by Italian and US authorities for site access. The BCO Leadership shall assure that a complete safe-ty briefing is provided for each location and that all installation passes and other required paperwork are properly issued to the contractor.

6.9.5 Subtask 5 – Safety. The contractor shall comply with all applicable safety laws and regulations. The safety aspects shall include consideration for the safety of personnel during system/subsystem operation and maintenance and all other aspects of the PWS. The safety of the equipment shall not be compromised, nor shall hazardous conditions be created during equipment malfunction or failure.

Adequate grounding, shielding, guards, safety interlocks and warnings (in English and Italian languages) for the protection of operator/maintenance personnel from electrical and mechanical hazards shall be used in operating and maintaining the equipment.

Page 7 of 12 Pages

7. Performance Standards.

Performance Standard Acceptable Quality Level (AQL) Methods of Calculation

6.1 Database Backups on

Telephony Equipment located at JFC, Gaeta, Capodichino, and Gricignano

Contractor will be expected to perform this AQL on a daily, weekly, monthly basis in accordance to applicable Technical manuals.

Contractor will keep backups stored in secure safe located on site. COR will verify contractor is within the Performance Standard compliance by Periodic Inspection.

6.4 Task 4 – Intervention

Time

Response times for interventions calls should occur within the following timeframes:

2 hours: during normal duty hours

2 hours: weekend and U.S.

holidays and 25% (major alarm)

6 hours: after working hours and non-emergency

100% Inspection

6.3 Task 3 – Preventive

Maintenance

Standard practices set forth by manufacturer technical manuals

Routine inspection by the customer

6.8 Upgrades Quarterly or according to

manufacturer’s policy and procedures

Periodic Inspection

* Duty Hours: 07:00-16:00 Monday-Friday including one hour for lunch

8. Incentives.

This PWS does not contain any incentives – positive or negative. Both positive and negative performance will be documented in past performance reports database, Contractor Performance Assessment Reporting System - CPARS, as appropriate and will be taken into consideration for follow-on work.

9. Place of Performance.

The Onsite Technician will perform their duties and maintenance as stated in this PWS at the Government facilities and sites:

• NSA Capodichino Bldg. 440 o 80144 Naples, Metropolitan City of Naples

• NSA Gricignano Support Site Bldg. 2070 o 81030 Gricignano di Aversa, Province of Caserta

• NSA Gaeta Bldg. 719

• Warehouse Teverola Bldg. 2049 A o Via Della Stazione Sona Industrial Norte, Aversa 81031

• SATCOM Lago Patria Bldg. 103 o Via Madonna del Pantano, 80014 Lago Patria

Secondary Place of Performance – Contingency Only. As directed by the COR, the Onsite Technician shall continue performance in emergency or mission essential conditions. Contractor employees may be

Page 8 of 12 Pages required to work at home, another approved activity within the local travel area or at the contractor's facility in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, Base exercises, etc.). Any equipment such as laptops or phones provided to contractor personnel shall be returned at the termination of the engagement or at another time mutually agreeable to both parties. Contracting Officer Representative (COR) approval is required. To the extent possible, the contractor shall use best efforts to provide the same level of support in contingency situations, as stated in the PWS. The contractor shall account for the whereabouts of their personnel should this information be requested by the COR.

10. Period of Performance.

Base Year: September 17, 2024 – September 16, 2025 Option Year 1: September 17, 2025 – September 16, 2026 Option Year 2: September 17, 2026 – September 16, 2027 Option Year 3: September 17, 2027 – September 16, 2028 Option Year 4: September 17, 2028 – September 16, 2029

11. Security Requirements. This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point Of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this PWS must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement, 11 February 2021

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

i. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

k. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24

February 2021

l. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

11.1 Facility Security Clearance. Work performed under this contract/order is up to the Secret level and will require Secret Compartmental access eligibility for some personnel. Therefore, the company must have a final Secret Facility Clearance from the Defense Counterintelligence and Security Agency Facility Clearance Branch.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

11.3 Investigation Requirements. All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum

Page 9 of 12 Pages investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for a current PR.

11.3.1 The contractor is required to have personnel cleared with an interim or final Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel is replaced during performance of the contract, replacement personnel should also have interim or final clearance Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization Letters (VAL). Visit requests shall be processed and verified through the DISS to Security Management Office (SMO) DKABAA10 and SMO DKADA. DISS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the COR/ACOR specified in DITCO Additional Text G1 - Points of Contact.

Primary COR: Brandon Rivera Phone Number: +39 081-568-2729 Email: Brandon.a.rivera18.mil@us.navy.mil

*Prior coordination with the DISA COR should be made via email to ensure the VAL/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

11.4.1 VAR Package. VARs must be received via email and require pre-approval from the assigned DISA COR five business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed-up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. Contractor VAL signed by the Contractor Facility Security Officer (FSO)

If DISS is not available, the VAL must contain the following information on company letterhead

• Company name, address, telephone number, facility security clearance

• CAGE CODE

• Contract/Order Number

• Name, SSN, date and place of birth, and citizenship of the employee intending to visit

• Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

• Name of COR/Alt COR

• Dates or period the VAL is to be valid

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the PWS/TO/Sub for all employees leaving the contract/task order/subcontract.

11.4.2.3 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information.

“For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive

(SEAD) 4.

Page 10 of 12 Pages

The VTN must contain the following information on company letterhead

• Company name, address, telephone number, facility security clearance

• CAGE CODE

• Contract/Order Number

• Name, SSN, date and place of birth, and citizenship of the employee

• Name of COR/Alt COR

• Termination Date

• Reason for Termination

*Any VAL/VAR submitted without the above information will be denied.*

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-1235 or via mail at:

Defense Information Systems Agency Defense Information Systems Agency ATTN: MP61, Industrial Security ATTN: MP62, Personnel Security Command Building Command Building 6910 Cooper Ave. 6910 Cooper Ave.

Fort Meade, MD 20755-7088 Fort Meade, MD 20755-7088

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

Name: Richard Munn Phone: +39 081-568-2440 E-mail: Richard.e.munn.civ@us.navy.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

Page 11 of 12 Pages

11.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government/Contractor facility. Contractor shall have access to generate and handle classified material only at the location(s) listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.1, Vol. 3, Vol. 4, Information Security, DOD 5400.7-R, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19. Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Other Pertinent Information or Special Considerations

12.1 Inspection and Acceptance Criteria. Inspection of all work performance, reports and other deliverables under this contract shall be performed by the COR. Additionally, acceptance of all work performance, reports and other deliverables under this contract shall be performed by the COR.

12.1.1 Scope of Inspection. All deliverables will be inspected for content, completeness, accuracy and conformance to PWS and contract requirements by the COR. The scope and nature of this inspection will be sufficiently comprehensive to ensure the completeness, quality and adequacy of all deliverables. The Government requires a period not to exceed fifteen (15) work days after receipt of final deliverable items for inspection and acceptance or rejection.

12.2 Contractor Qualifications. The contractor shall keep current all licenses, permissions and Government of Italy (GOI) approvals. The contractor shall possess host nation Nulla Osta Sicurezza (NOS) certification and provide all personnel, equipment, tools, materials, infrastructure, supervision and all other components necessary to maintain, monitor, repair, replace and test the systems that are to be fully operational and integrated with U.S. Navy- provided communication equipment and systems to the standards detailed in this PWS.

12.3 Employee Conduct. Contractor’s employees shall comply with all applicable Government regulations, policies and procedures (e.g., fire, safety, sanitation, environmental protection, security, flag

Page 12 of 12 Pages officer courtesy, “off limits” areas, wearing of parts of military uniforms, and possession of firearms) when visiting or working at Government facilities.

12.4 Individual Logistical Support (ILS). The Government will authorize ILS for contractor personnel while performing under this contract. The Government will register contractor personnel in all required systems to obtain ILS. The Government will not be responsible if, any of all contractor personnel assigned to this contract is denied ILS for reasons beyond the Government control.