PWS (sources sought draft) - Security Support Services 2027.pdf

Defense Threat Reduction Agency 8725 John J. Kingman Road, Stop 6201

Fort Belvoir, VA 22060-6201

CUI

Performance Work Statement (PWS) Defense Threat Reduction Agency

8725 John J. Kingman Rd. Mailstop 6201 Fort Belvoir, VA 22060-6201

Security Support Services 2027

February 2026

1.0 Introduction

1.1 Mission

The Defense Threat Reduction Agency (DTRA) safeguards the United States and its allies from global Weapons of Mass Destruction (WMD) threats by integrating, synchronizing and providing expertise, technologies and capabilities. J3/5/8 Force Protection (FP) is responsible for Security management for DTRA. DTRA Security programs include Physical, Industrial, Personnel, Operations (OPSEC), Information Security, Science and Technology Protection (S&T), Antiterrorism/Force Protection, Special Access Program (SAP), Insider Threat, Foreign Disclosure (FD), and the Special Security Office (SSO) under Intelligence Community Directives (ICD).

1.2 Background

This is a non-personal services contract to support DTRA, Security and Counterintelligence Division (J3/5/8 FP). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. The contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. Work under this effort may be performed at the DTRA’s locations in Albuquerque (ABQ), New Mexico; Travis Air Force Base, California; Kleber Kaserne, Kaiserslautern, Germany; and primarily, Defense Threat Reduction Agency locations in the National Capital Region (NCR) area. Further, contract support may be required at locations not specified in this Performance Work Statement (PWS).

1.2.1 Germany Status of Forces Agreement (SOFA) and the NATO Supplementary Agreement with Germany for Contractor Employees the Germany Status of Forces Agreement and the NATO Supplementary Agreement with Germany governs the legal status and daily lives of DoW contractors living in Germany. Status of NATO Status of Forces Agreement (SOFA) provides the basis for the hiring of United States citizens for employment in certain overseas positions. Work performed in Germany requires SOFA Status

Accreditation for both the contractor and for individual positions within the contract. Any Subcontractors furnishing employees for employment in Germany will also be required to sign up for SOFA Status Accreditation. The accreditation status is not transferable between positions.

The COR and the Contractor Senior Program Manager will be responsible for receiving and maintaining SOFA Status Accreditation of the contract through the US Army Europe - Department of Defense Contractor Personnel Office at https://www.europeafrica.army.mil/contractor/. Points of Contact and frequently asked questions can be located on the link above. The Contractor Senior Program Manager will provide assistance to employees on an as-needed basis in order for them to access the European Contractor Online Processing System (ECOPS) to apply for, receive, and maintain their SOFA Status.

ECOPS can be accessed at the link above.

Performance Work Statement

Security Support Services 2027

CUI

Positions supplied by this contractor for employment in Germany who will be required to receive and maintain their SOFA accreditation status in order to remain eligible for employment.

1.3 Scope of Work

This PWS covers services for all duties and responsibilities within J3/5/8 FP, to include its geographically separated locations. The contractor shall provide personnel to perform non-personal security support services to assist Government personnel in support of Security services within the NCR and other DTRA locations. The required support services are:

Senior Program Manager/Senior Site Lead Special Security Office (SSO) Support Special Access Program (SAP) Security Foreign Disclosure (FD) Personnel Security (PERSEC) Antiterrorism/Force Protection (AT/FP) Information Security (INFOSEC) Industrial Security (INDSEC) Operations Security (OPSEC) Physical Security (PHYSEC) Physical Security Locksmith Services Escort Services Physical Security/Access Control Support Entry Control Officer (ECO)/Security Guard Services Insider Threat Support (InT) Science and Technology (S&T) Protection Specialist Security Analyst (S&T) Protection S&T OPSEC Specialist Operations Support Specialist Security Specialist (Generalist)

2.0 Applicable Directives

The contractor shall comply with the following directives, publications, and standards to the extent necessary to accomplish the requirements specified in the PWS. The Government will provide all listed publications and forms at the start of the contract period. Publications are current as of February 2026; the Contractor shall monitor updates via official DOW channels and implement changes immediately.

https://www.esd.whs.mil/Directives/issuances/dodd/ https://www.whitehouse.gov/presidential-actions/executive-orders/

2.1 Publications

DoDI 2000.12, DoD Antiterrorism Program Support to Force Protection

DoDI O- 2000.16, Vol 1 DoD Antiterrorism Program Standards

Performance Work Statement

Security Support Services 2027

CUI

DoDI O-2000.16, Vol 2 DoD Force Protection Condition System

DoDI 6055.17, Emergency Management Program

DoDI 2000.26, DoD Use of the Federal Bureau of Investigation (FBI) eGuardian

National Security Decision Memorandum (NSDM) 119

National Disclosure Policy (NDP-1)

Executive Order (EO) 13556

Arms Export Control Act (AECA) of 1976

DoDD 5230.11, Disclosure of Classified Military Information to Foreign Governments and International Organizations

DoDD 5230.20, Visits and Assignments of Foreign Nationals

DoDI 5230.24, Distribution Statements on DoD Technical Information

DoDI 2040.02 International Transfers of Technology, Articles, and Services

32 CFR Part 117 National Industrial Security Program Operating Manual (NISPOM) Rule

Federal Acquisition Regulation (FAR)

DoD 5100.55, United States Security Authority for North Atlantic Treaty Organization Affairs

(USSAN)

USSAN Instruction 1-07, U.S. Implementation of North Atlantic Treaty Organization (NATO) Security Requirements

Executive Order (E.O.) 13526, Classified National Security Information

Executive Order (E.O.) 12968, Access to Classified Information

Executive Order (E.O.) 13556, Controlled Unclassified Information

DoDI 5200.48, "Controlled Unclassified Information (CUI)," March 6, 2020

DoDI 5200.01, "DoD Information Security Program and Protection of Sensitive Compartmented Information (SCI)," April 21, 2016, as amended

DoDM 5200.01, Volume 1, “DoD Information Security Program: Overview, Classification, and Declassification,” February 24, 2012, as amended

DoDM 5200.01, Volume 2, “DoD Information Security Program: Marking of Information,” February 24, 2012, as amended

DoDM 5200.01, Volume 3, “DoD Information Security Program: Protection of Classified Information,” February 24, 2012, as amended

DoDM 5200.45, "Original Classification Authority and Writing a Security Classification Guide," January 17, 2025

NISPOM

DoDI 5240.26

DoDI 5205.16

EO 13587

DoDI 5240.07

National Security Presidential Memorandum-28, The National Operations Security Program

DoDD 5205.02E, “DoD Operations Security (OPSEC) Program,” June 20, 2012, as amended

DoDI 5200.39, “Critical Program Information (CPI) Identification and Protection Within Research, Development, Test, and Evaluation (RDT&E),” May 28, 2015, as amended

Performance Work Statement

Security Support Services 2027

CUI

DoDI 5230.09, “Clearance of DoD Information for Public Release,” January 25, 2019, as amended DoDI 5230.24, "Distribution Statements on DoD Technical Information," January 10, 2023

DoDI 5230.29, “Security and Policy Review of DoD Information for Public Release,” August 13, 2014, as amended

DoDI 5400.17, "Official Use of Social Media for Public Affairs Purpose," August 12, 2022, as amended DoDI 8170.01, "Online Information Management and Electronic Messaging," January 2, 2019, as amended

DoD Manual 5205.02, “DoD Operations Security (OPSEC) Program Manual,” November 3, 2008, as amended

Security Executive Agent Directive 3

Security Executive Agent Directive 4

Security Executive Agent Directive 5

Security Executive Agent Directive 6

Security Executive Agent Directive 7

Homeland Security Presidential Directive – 12

DoD Manual 5200.02, Procedures for the DoD Personnel Security Program

DoDI 5200.02 - DoD Personnel Security Program (PSP)

DoD Instruction 5200.46, Investigative and Adjudicative Guidance for Issuing the CAC

DoDI 5200.08, Security of DoD Installations and Resources and the DoD Physical Security Review Board DoD 5200.8R Physical Security Program

DoD Manual 5200.08, Volume 3, Physical Security Program (Access to DoD Installations)

DoD Manual 5200.01, Volume 3, Information Security Program (Protection of Information)

42 USC§ 6605, Disclosure of Funding Sources in Applications for Federal Research and Development Awards

42 USC §19232, Malign Foreign Talent Recruitment Program Prohibition

H.R. 4346, The CHIPS and Science Act of 2022

PUBLIC LAW 117-18, SBIR and STTR Extension Act of 2022

Introduction to Fiscal Year 24 Lists Published in Response to Section 1286 of the National Defense Authorization Act for Fiscal Year 2019 (Public Law 115-232), as amended

National Defense Authorization Act for Fiscal Year 2024 - SEC. 1224

NATIONAL SECURITY PRESIDENTIAL MEMORANDUM -33

OUSD (A&S) MEMORANDUM, Policy for Risk-Based Security Reviews of Fundamental Research DODI 5000.83, Technology And Program Protection To Maintain Technological Advantage

DODD 5200.27, Acquisition of Information Concerning Persons and Organizations Not Affiliated with the Department of Defense

DODI 5200.39, Critical Program Information (CPI) Identification and Protection Within Research, Development, Test, and Evaluation (RDT&E)

DoD Instruction 5205.11, Management Administration and Oversight of Special Access Programs of the DoD

Performance Work Statement

Security Support Services 2027

CUI

DoD Directive 5205.07 Special Access Program Policy

US Code Title 10 Section 119, Special Access Programs Congressional Oversight

US Code Title 10 Section 119a, Programs managed under alternative compensatory control measures: congressional oversight

DoD Manual 5205.07, DoD Special Access Program Security Manual

ICD 705 Technical Specifications for Construction and Management of SCIFs

DoDI 5240.05

ODNI-ICD 124, “Electronic Medical Devices,” Technical Amendment, March 14, 2025

ODNI-ICD 700, “Protection of National Intelligence,” June 7, 2012

ICD 701 Unauthorized Disclosures of Classified National Security Information

ODNI-ICD 703, “Protection of Classified National Intelligence, Including Sensitive Compartmented Information,” June 21, 2013

ODNI-ICD 704, “Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information, Technical Amendment,” June 20, 2018

ODNI-ICD 705, “Sensitive Compartmented Information Facilities,” Technical Amendment, February 20, 2024

ODNI-ICPG 704.1, “Personnel Security Investigative Standards for Access to Sensitive Compartmented Information, Technical Amendment,” June 20, 2018

ODNI-ICPG 704.3, “Denial or Revocation of Access to Sensitive Compartmented Information, Other Controlled Access Program Information, and Appeals Processes,” October 2, 2008

ODNI-ICPG 704.4, “Reciprocity of Personnel Security Clearance and Access Determinations, Technical Amendment,” April 6, 2022

ODNI-ICPG 704.5, “Intelligence Community Personnel Security Database Scattered Castles,” February 25, 2020

ODNI-ICS 705-01, “Physical and technical Security Standards for Sensitive Compartmented Information Facilities,” December 14, 2023

ODNI-ICS 705-02, “Standards for the Accreditation and Reciprocal use of Sensitive Compartmented Information Facilities,” March 28, 2022

ODNI-NCSC Memorandum, “Required Plans of Action for Complying with ICD 705,” NCSC- 24-00157, January 15, 2025 IC Tech Specs for ICD/ICS 705, “Technical Specification for Construction and Management of Sensitive Compartmented Information Facilities,” Version 1.5.1, July 26, 2021

CNSSAM TEMPEST/1-13, “Red/Black Installation Guidance,” January 17, 2014

USDoS, Technical Requirements Steering Committee, “Best Practices Guideline for Architectural Radio Frequency (RF) Shielding,” March 2010, as amended

UFC 3-580-01, “Information and Communications Technology Infrastructure Planning and Design,” November 21, 2024

UFC 4-010-01, “DoD Minimum Antiterrorism Standards for Buildings,” Change 3, May 24, 2024

UFC 4-010-05, “SCIF/SAPF Planning, Design, and Construction,” May 26, 2023

UFC 4-010-06, “Cybersecurity of Facility-Related Control Systems (FRCS),” October 10, 2023

Performance Work Statement

Security Support Services 2027

CUI

UFC 4-020-01, “DoD Security Engineering Facilities Planning Manual, September 11, 2008

UFC 4-021-02, “Electronic Security Systems,” July 28, 2025

UFC 4-141-03, “Command, Control, Computers, Communications, Cyber-Defense, Intelligence, Surveillance, And Reconnaissance (C5ISR) Facilities,” December 9, 2024

DoDI 3305.13, “DoD Security Education, Training, and Certification,” Change 2, September 24, DoDI 5145.03, “Oversight of the DoD Personnel Security Programs,” Change 1, June 19, 2020

DoDI 5200.01, “DoD Information Security Program and Protection of Sensitive Compartmented Information (SCI),” Change 2, October 1, 2020

DoDI 5200.02, “DoD Personnel Security Program (PSP),” Change 3, September 24, 2020

DoDI 5200.39, “ Defense Courier Operations (DCO),” Change 1, November 20, 2017

DoDI 5220.31, “National Industrial Security (INDUSEC) Program (NISP),” May 9, 2023

DoDI 8523.01, “Communication Security,” January 6, 2021

DoDD 5105.21, “Defense Intelligence Agency (DIA),” January 25, 2023

DoDD 5105.62, “Defense Threat Reduction Agency (DTRA),” April 24, 2013, as amended

DoDD 5143.01, “Under Secretary of Defense for Intelligence and Security (USD(I&S)),” October 24, 2014, as amended

DoDD 5210.50, “Management of Serious Security Incidents Involving Classified Information,” Change 2, September 18, 2020

DoDM 5105.21 Volume 1, “Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information Systems Security,” Change 2, October 6, 2020 DoDM 5105.21 Volume 2, “Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security,” Change 2, November 2, 2020

DoDM 5105.21 Volume 3, “Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security, and Special Activities,” Change 2, September 14, 2020

DoDM 5220.32, Volume 1, “National Industrial Security Program: Industrial Security Procedures for Government Activities,” Change 2, December 10, 2021

DoDM 5220.32 Volume 2, “National Industrial Security Program: Procedures for Government Activities Relating to Foreign Ownership, Control, or Influence (FOCI),” Change 2, December 10, 2021

ODNI-SEAD 8, “Temporary Eligibility,” May 8, 2020

US Code of Federal Regulations (CFR), Part 117 of Title 32, “DoD National Industrial Security Program Operating Manual (NISPOM),” December 21, 2020

ODNI Memorandum, ES 2021-01529, "Security Executive Agent Clarifying Guidance Concerning Marijuana for Agencies Conducting Adjudications of Persons Proposed for Eligibility for Access to Classified Information or Eligibility to Hold a Sensitive Position," December 21, 2021

Performance Work Statement

2.2 Changes

The Government will notify the Contractor of additional references or amendments throughout the life of the contract. Supplements issued during the contract period shall be implemented without negotiation.

Any changes in cost levied onto the contractor as a result of a supplemental change should be provided to the KO in writing, along with an updated cost proposal, within 10 calendar days following receipt of a supplemental change notification. If needed, negotiations will be held under the FAR 52.243-2 Changes- Cost-Reimbursement clause. Failure to submit a timely notification of supplement driven cost changes entitles the Government to continued performance at no cost increase (waivable by the KO according to paragraph (c) of the Changes clause). The Onsite Lead shall track publication compliance and report updates/amendments to both the Contractor and the KO/CS via email.

3.0 Performance Requirements

3.1 Senior Program Manager/Senior Site Lead: The contractors shall:

3.1.1 Conduct duties relevant to all security disciplines and counterintelligence functions. Write staff actions/reports and coordinate within organizational and with external entities. Ensure that office staff actions are coordinated in a timely manner meeting all the suspense’s or requesting appropriate extension as necessary.

3.1.2 Keep current on agency mission, new security requirements and how those requirements impact mission. Recommend cost effective means to implement guidance and reduce security risks.

3.1.3 Support the DTRA Security Education, Training, and Awareness (SETA) initiative.

3.1.4 Provide critical substantive review or edit of J3/5/8 FP-related documents, plans, policies, procedures, resource and requirements documents, and agency responses to higher authority for signature by DTRA Director or J3/5/8 FP leadership.

3.1.5 Manage the Enterprise Task Management Software Solution (ETMS2) by coordinating task actions with J3/5/8 FP Personnel as well as other personnel throughout the Agency. As a Subject Matter Expert (SME), advise J3/5/8 FP personnel on how to perform their ETMS2 tasking functions correctly.

3.1.6 Develop Standard Operating Procedures (SOPs) for ETMS2 and Staff Office duties. SOPs should cover all responsibilities associated with the Operations and Staff contracted position and updated as needed. Develop and deliver training and briefings to other support personnel when necessary.

3.1.7 Provide a continuity book containing all pertinent information to sustain operations during any exigencies. Include all reference materials such as current DTRA and J3/5/8 FP policies, doctrines, and instructions.

3.1.8 Participate in Staff Assistance Visits (SAV) to other inter-agency elements, as needed.

Review relevant documentation, develop and prepare presentations and briefings as needed during the visits.

3.1.9 Provide support to J3/5/8 FP. Assist with the updates and revisions of current J3/5/8 FP policies, instructions, and memorandums.

Performance Work Statement

Security Support Services 2027

CUI

3.1.10 The Senior Site Lead, known throughout this PWS as the Program Manager (PM), conducts duties and responsibilities normally associated with an on-site program manager.

3.1.10.1 Primary Point of Contact (POC) for all personnel actions, such as timely recruiting, retention, hiring replacements, and compliance with contractual agreements.

3.1.10.2 Provide up to 20 percent on duty time on-site as program manager duties that support the contract or contractor employees.

3.2 Special Security Office Support: The contractor shall:

3.2.1 Support the SSO by providing services for the receipt, accountability, transmission, reproduction, storage, safeguarding, and destruction of Sensitive Compartmented Information (SCI) and collateral classified information, records and reports (SCI Information Security) and by processing verifications of authorized personnel for access to appropriate material and caveats of SCI.

3.2.2 DTRA HQ Sensitive compartmented information facilities (SCIF)s will, at a minimum, be accessible during core hours for the Main SCIF (Rm B1900); Joint Operations Center (JOC) (Rm B1260); and Defense Logistics Agency (DLA) (Rm 3539). The B2 SCIF (Rm B2648) will be accessible weekdays between 0700 and 1600. Access to the CI Office SCIF (Rm B1200) will be limited to authorized personnel and accessible during core hours. Agency Command SCIF (Rm 4250) will require support staff with Senior level support experience.

Exceptions may include Federal holidays or days when the DTRA facilities are closed. Other situational occasions may allow for contractor open/close access outside core hours for escort duties (not to exceed an 8-hour workday).

3.2.3 Screen visitors and control access to all SCIFs using a local database, Defense Information System for Security (DISS), and the Scattered Castles database.

3.2.4 Develop and/or modify the SSO SOP and Emergency Action Plan (EAP) as needed.

3.2.5 Submit weekly and monthly roll-up work accountability reports.

3.2.6 Conduct all required SCIF inspections, response tests and Intrusion Detection System (IDS) tests.

3.2.7 Conduct SCI indoctrinations and debriefings within established timelines.

3.2.8 Conduct classification marking reviews of all material leaving the SCIF and provide advice and guidance on the marking of SCI material.

3.2.9 Enter approved equipment being introduced to a SCIF into the equipment log.

3.2.10 Ensure that any equipment that is being removed from a SCIF has been properly sanitized and approved by the SSO Information Assurance Manager (IAM).

3.2.11 Process SCI permanent certifications (inbound and outbound) within established timelines.

Performance Work Statement

Security Support Services 2027

CUI

3.2.12 Issue courier cards, courier briefings, and prepare commercial airlines authorization letters.

3.2.13 Assist with the management of the foreign travel reporting program for the SSO.

3.2.14 Assist with the management of the contractor SCI nomination program for the SSO.

3.2.15 Coordinate meetings and conferences held in the SCIFs.

3.2.16 Provide administrative data entry.

3.2.17 Provide files and record maintenance.

3.2.18 Provide internal mail distribution.

3.2.19 Provide Defense Courier Service (DCS) package pickup.

3.2.20 Track completion rates of the required annual SCI refresher training(s).

3.2.21 Prepare Fixed Facility Checklists (FFC) and TEMPEST Addendums and modify as needed for each DTRA SCIF.

3.2.22 Required skills for contractor SCIF personnel: The contractor personnel shall:

3.2.22.1 Possess integrated security services skill sets in the following areas: SSO operations; SCIF operations; SCI Personnel Security; SCI Information Security; SCI Physical Security;

SCI TEMPEST actions and procedures; and SCI Industrial Security. The contractor shall have recent, in-depth, government/contractor SSO operations experience, and recent, in-depth SCIF operations experience.

3.2.22.2 Provide mid-level contractor personnel that are thoroughly familiar with DoDM

5105.21 Volumes 1-3, to administer the receipt, control, and accountability of SCI. Be familiar with the ICDs 703, 704, 705, and 706, Intelligence Community Standard (ICS) 705-1 and 705-2, for construction, accreditation, and technical requirements for SCIFs. Support delivery of services for SCIFs and perform the day-to-day SCI security oversight functions for the SSO and subordinate SCIFs.

3.2.22.3 Possess strong customer service skills to handle customer’s questions, complaints, and requested support in a professional, personable and courteous manner. Areas of expertise shall include computer operations, SCIF procedures, use of secure telephones, removal of classified information, indoctrinating personnel, accepting security clearances from external agencies, and day-to-day SCIF operations.

3.2.23 Maintain the Support Program Communication Security (COMSEC) account by ensuring accountability of Crypto material, key, and key-loading equipment, as applicable

3.2.24 Maintain Crypto-cleared personnel and adhere to all applicable COMSEC regulations and guidelines, as applicable.

3.2.25 Be prepared to receive, stage, transport, store, safeguard, install, initialize, and operate Cryptographically Controlled Items (CCI), COMSEC equipment, and associated Key Material

Performance Work Statement

Security Support Services 2027

CUI

(KEYMAT) of the relevant types required for the Support Program including but not limited to Secure Telephone Equipment (STE), KG-175A etc., as applicable.

3.2.26 SSO Support required training within 6 months of hire:

- DIA Joint Military Intelligence Training Center, SCI Security Officials Course, or similar Special Security Officer (SSO) course (training curriculum approved by the Agency

SSO).

- ODNI-NCSC Personnel Security Adjudications Course (PSAC)

- ODNI-NCSC Sensitive Compartmented Information Facility Course (SCIF)

- ODNI-NCSC Special Security Officers Course (SSOC)

- Intro to Industrial Security (CDSE_IS011.16)

- Information Security (INFOSEC) Awareness-Initial and Intro to INFOSEC

(CDSE_IF011.16)

- DCSA-CDSE, Introduction to National Security for Security Practitioner (CDSE

PS113.16)

- DCSA-CDSE Introduction to Physical Security (CDSE PY011.16)

- SCI Security Refresher (CDSE SCI100.16)

3.3 Special Access Program (SAP) Security Support: The contractor shall:

3.3.1 Assist in writing and implementing SAP security policy, SOPs, Concepts of Operations (CONOPS), and Transportation Security Plans (TSPs) and advise and assist PM in the development of Security Classification Guides (SCGs) for all SAPs, to include those complex in nature. Personnel performing this duty must possess strong writing skills.

3.3.2 Advise senior officials on a broad range of program security issues including system threat vulnerability assessments, system security requirements, architectures, and security risk mitigation plans.

Assist clients in researching and defining security problems. Personnel performing this duty must possess strong oral communication skills, the ability to relate to a diverse customer base, and general knowledge of DoW operations. Must be capable of operating in the NCR and other locations as required.

3.3.3 Monitor assessment and authorization process for program areas and Information Technology systems.

3.3.4 Assist in developing and administering a SAP security awareness education program that includes annual refresher training and utilizes continuing education tools such as newsletters, pamphlets, and briefings, etc.

3.3.5 Provide support for all DTRA SAPs, Compartments, Sub-Compartments and Projects. This includes coordination for all DTRA personnel requiring access to other federal agency’s SAPs (Program Access Requests), developing Co-Use Agreements (CUA), Memorandum of Agreement (MOA), and Memorandum of Understanding (MOU). Facilitates Special Access Program Nomination Process (SAPNP) reviews for all personnel submitted for access to SAPs, Compartments, Sub-Compartments, and Projects.

3.3.6 Develop all SAPF accreditation documentation for each SAPF and organize its tabbed binder. Additionally electronic sources and data should be filed within a defined graphic user interface database.

3.3.7 Assist in the inspection of SAPFs under DTRA control to ensure compliance with established applicable documents as listed in Section 5.0. This will be done on an annual basis or as

Performance Work Statement

Security Support Services 2027

CUI

requested by the government. Must possess the ability to document the results of the inspection in writing and effectively present briefings of a visual and oral nature regarding those results.

3.3.8 Interface with personnel at the OSW level related to security matters and be capable of explaining the reason security actions were taken or are about to be taken in support of the program.

3.3.9 Assist in conducting core compliance inspections at program locations and assisting in “get well” processes following those inspections with security shortfalls, deficiencies or significant findings or an unsatisfactory rating.

3.3.10 Provide direct support to the DTRA Alternative Compensatory Control Measure program through validation of need-to-know, scheduling briefings, submitting accesses and other tasking as required by policy.

3.4 Foreign Disclosure (FD) Support: The contractor shall:

3.4.1 Prevent collection of Classified Military Information (CMI) and Controlled Unclassified Information (CUI) about U.S. personnel and activities by adversary. Prevent unauthorized disclosure of CMI/CUI to foreign nationals and Governments and international organizations. Safeguard export-controlled technology, information, and material from unauthorized entities. Assist in the development of FD policies and procedures. Assist in the development of FD processes and procedures to address DTRA mission, travel, and foreign visitors to DTRA facilities. This includes assisting with reviews of internal processes and information.

3.4.2 Develop and present FD presentations to a diverse audience.

3.4.3 Provide specialized staff support to the J3/5/8 FP, to include but not limited to processing J3/5/8 FP related documentation, tasks specifically focused on the Agency FD Program and support activities associated with the National Disclosure Policy-1 (NDP-1).

3.4.3.1 Perform independent analysis and evaluation of current DTRA policies and procedures to determine compliance with national and DoW policies and requirements.

3.4.3.2 Update and/or revise current DTRA and J3/5/8 FP policies and guidance for FD.

3.4.3.3 Support the DTRA Security Awareness Program by providing FD and Foreign Visit training, briefings, articles, and other products.

3.4.3.4 Draft, write or edit FD related documents, plans, policies, procedures, resource and requirements, and Agency responses to higher authority for signature by DTRA Director, Deputy Director, or Chief, J3/5/8 FP.

3.4.3.5 Write FD articles for posting on the DTRA net or DTRA Newsletters/Portal, as directed.

3.4.3.6 Develop familiarity with the Arms Export Control Act of 1976 and the International Traffic in Arms Regulations (ITAR) to ensure protection of military technology and export-controlled material.

3.5 Personnel Security (PERSEC) Support: The contractor shall:

Performance Work Statement

Security Support Services 2027

CUI

3.5.1 Process personnel to determine the appropriate Suitability requirement, security clearance, and/or SCI eligibility prior to granting access to DTRA facilities and information. In addition, support the DTRA Personnel Security (PERSEC) Program includes:

3.5.1.1 Request/Review/Initiate/Track Suitability requirement and Personnel Security Background Investigations.

3.5.1.2 Provide accurate and analytical establishment, maintenance, review, receipt, accountability, transmission, reproduction, storage, safeguarding, and destruction of collected personal history, case files, data entry, records, files, and reports according to PERSEC policy and procedures.

3.5.1.3 Coordinate with the appropriate agencies for reciprocal recognition of existing investigations and adjudications using consistent PERSEC standards prior to initiating new investigations.

3.5.1.4 Review and process of hiring nomination packages to determine they are complete, detect anomalies, and process for designated position sensitivity levels.

3.5.2 Develop and deliver PERSEC briefings and debriefings.

3.5.3 Develop and/or modify all PERSEC step-by-step processes and SOPs for Government PM/COR approval.

3.5.4 Conduct continuous review of PERSEC reportable items. Accurately establish, manage, administer, monitor, release, and place into historical DTRA personnel DISS and local Security Database records. Immediately report to the Government PM/COR if/when potential derogatory information becomes known on personnel that affects their continued eligibility to sensitive and classified positions.

3.5.5 Develop, review, and maintain PERSEC In/Out Processing Center administration duties.

Accurately review all PERSEC In and Out Processing prior to allowing access to DTRA facilities and local area networks.

3.5.6 Develop, review and maintain step-by-step processes for visitor services and SOPs for Government PM/COR approval.

3.5.7 Process requests for visit authorizations (inbound and outbound), confirm access for conferences within established timelines, and prepare access control rosters.

3.5.9 Process clearances for Agency Sponsored conferences and events. Issue conference badges to individuals with the assistance of Access Control, if needed.

3.5.10 Identify and ensure visitors are properly cleared with a need-to-know prior to granting access to DTRA facilities or local area networks by issuance of the appropriate DTRA badge, Common Access Card (CAC) or identification.

3.6 Antiterrorism/Force Protection (AT/FP) Support: The contractor shall:

3.6.1 Develop, present and facilitate AT/FP training as directed. Conduct Annual Antiterrorism Level I Awareness training. Maintain statistical data on training activities at the HQ and subordinate locations.

3.6.2 Monitor the Agency’s overseas travelers to ensure all AT/FP requirements are met.

Performance Work Statement

3.6.3 Review Vulnerability Assessments (VAs) according to DoDI-O 2000.16, Volume 1. .

Identify relevant risks to DTRA assets and personnel specified in the VAs.

3.6.4 Identify the potential terrorist threats to DTRA personnel and assets to assist in developing an effective antiterrorism program. Support the AT/FP Program by aiding in developing, presenting, and updating threats analysis. This includes providing the factors of terrorist operational capability, activity, intentions, and operating environment that commanders at all levels understand the threat and can assess their ability to prevent, survive, and prepare to respond to an attack.

3.6.5 Support situational awareness through an analytical AT/FP approach that includes reviewing intelligence and open-source information; recommending AT/FP informational, instructional and decision briefings; and preparing advisories to increase AT/FP awareness within the workforce.

Prepare and deliver situational awareness support through analytical AT/FP program assistance.

3.6.6 Draft and develop AT/FP plans and procedures critical to deterrence, detection, defense, and response to terrorist incidents. Interpret higher level AT/FP policy and guidance; develop and implement DTRA specific AT/FP policy and guidance; and review internal and external AT/FP plans. Plans drafted by the AT/FP team will include the following key elements, as directed by DoDI-O 2000.16, Volume 1:

3.6.6.1 Terrorism Threat Assessment

3.6.6.2 Vulnerability Assessment

3.6.6.3 Risk Assessment

3.6.6.4 AT Physical Security measures

3.6.6.5 Terrorist Incident Response measures

3.6.6.6 Terrorist Consequence Management measures

3.6.7 Participate in AT/FP Working Groups/Committees to recognize terrorist patterns and share information. Recommend various papers and document outcomes/highlights of information shared in these working groups/committees.

3.6.8 Complete Antiterrorism Level II course and demonstrate experience in AT/FP as listed above, in 3.6.6. Maintain AT Level II certification IAW DoDI-O 2000.16, Volume 1.

3.6.9 Develop, present, and update threat analysis that includes the factors of terrorist operational capabilities, activities, intentions, and operating environment.

3.6.10 Prepare and deliver situational awareness briefings. Briefing should include the review of intelligence and open-source information and recommendations for AT/FP actions to appropriate leadership to mitigate risk; the development of AT/FP informational, instructional, and decision briefings;

and advice to leadership to maintain the appropriate AT/FP awareness level within the workforce.

3.6.11 Participate in DTRA specific Emergency Management (EM) and Force Protection (FP) incident response requirements and assist with planning and execution of EM and FP exercises.

3.7 Information Security (INFOSEC) Support: The contractor shall:

Performance Work Statement

3.7.1 Provide support with the execution of the Agency’s Information Security Program (ISP), which includes the classification/declassification program and Security Education, Training, and Awareness (SETA).

3.7.2 Develop and prepare draft SOPs, which incorporate specific implementing guidance, requirements, and all essential guidance to ensure standardization throughout the agency. The essential elements will be outlined and approved by the Government Project Officer (PO). Each SOP will be revised and reviewed annually to ensure it is up to date and reflects current policies. Final SOPs will be delivered in hard copy and in an electronic format. The Government will provide resources data as required.

3.7.3 Provide support to the Agency Automatic Declassification Program. Establish contacts and display proven ability in the Automatic Declassification community.

3.7.4 Provide support to the Agency Mandatory Declassification Program. Establish policies and procedures for processing mandatory declassification review requests.

3.7.5 Support the Force Protection department by providing ISP support Agency wide.

3.7.6 Develop, coordinate, and implement Force Protection policies and report any failures to comply with policy to the company PM and/or Government PM/COR.

3.7.7 Collaborate with DTRA Directorates and Field Offices, and with the Chief of Security, and/or government PM to develop, coordinate and publish DTRA security procedures and documents.

3.7.8 Provide recommendations and options for intra- and inter-Agency coordination to the Chief of Security and/or government PM.

3.7.9 Develop and conduct ISP training presentations and briefs.

3.7.10 Develop ISP products for the SETA program.

3.7.11 Review all Agency Security Classification Guides (SCGs) for administrative and formatting purposes in coordination with responsible Directorate or Field Office PM and Security Manager to ensure SCGs are reviewed and updated every five years IAW Vol 1 of DoDM 5200.01 prior to the DTRA Original Classification Authority (OCA) signature.

3.7.12 Conduct security classification marking review on DTRA Form 58 packages prior to release from Agency.

3.7.13 Support DTRA’s Security program by conducting Preliminary Inquiries.

3.7.14 Conduct annual Staff Assistance Visit (SAV) at Agency HQ, and at each of the major Field Offices (Kleber, Kirtland AFB, and Travis AFB), as needed.

3.8 Industrial Security (INDSEC) Support: The contractor shall:

3.8.1 Maintain and update directives, instructions, and SOPs for the management and execution of the Agency’s Industrial Security program and NATO program which incorporate specific implementing guidance, requirements, and all essential guidance to ensure standardization throughout the

Performance Work Statement

Security Support Services 2027

CUI

Agency. Each SOP and Instruction will be reviewed and updated annually to ensure currency and relevancy.

3.8.2 Process Contract Security Classification Specification, DD Form 254, in support of the Agency’s Industrial Security Program. Coordinate with the contracting office to close out DD Form 254s.

3.8.3 Support Agency-wide Security efforts.

3.8.4 Prepare presentations and briefings when required.

3.8.5 Demonstrate thorough knowledge of 32 CFR Part 117 (previously known as the NISPOM), and USSAN 1-07.

3.8.6 Draft policy documents and revise current policies based on newly issued policy documents.

3.9 Operations Security (OPSEC) Support: The contractor shall:

3.9.1 Protect the Agency’s critical information by implementing all aspects of DoD Directive 5205.02E, DoD Operations Security (OPSEC) Program, and DoD 5205.02M, DoD Operations Security (OPSEC) Manual. I

3.9.2 Conduct security reviews of Agency documents being considered for public release through the Agency’s Public Affairs Office.

3.9.3 Develop and maintain the Agency’s OPSEC Directive and Instruction.

3.9.4 Develop OPSEC plans in support of various programs, tests, and exercises sponsored and supported by the Agency.

3.9.5 Conduct face-to-face OPSEC training for new Agency personnel. Also, provide custom-tailored OPSEC training throughout the Agency as requested.

3.9.6 Conduct OPSEC assessments of sub-components.

3.9.7 Coordinate and support OPSEC surveys conducted by third-party organizations, such as the Joint Information Operations Warfare Center and the 1st Information Operations Command.

3.9.8 Coordinate with Program Protection Office to assist in the identification of Critical Program Information (CPI), Critical Technical Information (CTI), and Program Protection Plans (PPP).

3.9.9 Develop task-specific presentations and briefs.

3.9.10 Develop products for the SETA program.

3.9.11 Support Agency-wide Security efforts.

3.9.12 Support DTRA’s Security program by conducting Preliminary Inquiries.

3.9.13 Demonstrate knowledge of and the ability to implement the Six-Step OPSEC Process.

Performance Work Statement

Security Support Services 2027

CUI

3.9.14 Support DTRA FDO and Public Affairs by reviewing information submitted to both offices to identify any OPSEC concerns.

3.9.15 Provide Security support to Research, Development, Test, and Evaluation (RDT&E) efforts facilitated by DTRA, as applicable.

3.10 Physical Security / Locksmith Services: The Contractor shall:

3.10.1 Establish and implement a key control method ensuring all keys/key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the contractor by the Government shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Government PM or COR.

NOTE: In the event keys, other than master keys are lost or duplicated, the contractor shall upon direction of the PM/COR, re-key or replace the affected lock of locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. If the Government performs replacement of the locks or re-keying, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due to the contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payments due to the contractor.

NOTE: Locksmith may be called to provide services across several different DTRA locations.

3.10.2 Prohibit the use of Government issued keys by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the PM/COR.

3.10.3 Maintain Locksmith GSA certification with a GSA Safe Inspection certification for the duration of this contract. Additionally, maintain the following certifications as appropriate:

3.10.3.1 LKM10K Certification

3.10.3.2 S & G 2890B Certification

3.10.3.3 KabaX10 Locks

3.10.3.4 S & G 2740 Locks

Note: All locks listed above require recertification each time a new version of the lock is released.

Therefore, the Agency Locksmith will only be required to maintain certification on locks in use at DTRA facilities.

3.10.4 Install, repair, and maintain door locks, cipher locks, electromechanical locks, drill and repair Government safes (including security containers) and perform combination changes including cutting and maintaining keys.

Performance Work Statement

Security Support Services 2027

CUI

3.10.5 Maintain accountability of all security containers; maintain the Agency’s work order database and coordinates all locksmith related work orders with the affected customer.

3.10.6 Provide full time locksmith support during Agency work hours as stated in Section 4.2.

Provide 24-hour emergency on-call locksmith services with a recall time for the following situations:

SCIF/SAP and Open Storage Perimeter Doors will have a 4-hour response time. SCIF/SAP Interior doors will have a 12 to 24-hour response time. Unclassified office spaces and safe Lockouts will be addressed the next duty day.

3.10.7 The contractor shall perform preventive maintenance on all doors and high security locks once every six months after TOA (Task Order Agreement). Repairs may take place, in real time, when a problem is identified during the scheduled preventive maintenance visit or when scheduled with the COR or TPOC (Technical Point of Contact). The locksmith shall be stationed at the DTRA HQ facility and shall support the other local DTRA facilities.

3.10.8 Conduct annual GSA container inspections/inventories at Agency HQ, and NCR locations. Conduct GSA container inspection and inventory at other Agency locations, as needed.

3.10.9 Support open storage accreditation and re-accreditation inspections when required.

3.10.10 Assist with processing of DTRA Form 3s and DTRA Form 4s, as other duties allow.

3.11 Escort Services: The contractor shall:

3.11.1 Provide Escorts for un-cleared technicians (and general facility), carpet cleaning, canteen, and cafeteria personnel as required.

NOTE: Must maintain the confidentially of all official business conducted while performing their official duties. Must not allow un-cleared personnel to remove anything other than trash from an office space without prior approval from the space occupant or a supervisor.

3.11.2 Read and adhere to DTRC Physical Security SOP #3, Escort Procedures.

3.11.3 Provide Additional Escort Services as follows:

3.11.3.1 Security Escort (SE) shall accompany un-cleared personnel within DTRA spaces. SE will announce any un-cleared personnel when entering a controlled access area or area where classified is readily visible or actively being used/displayed/processed.

3.11.3.2 Exercise good judgment at all times and provides effective, appropriate actions to counteract potential security infractions.

3.11.3.3 Comply with government regulations and procedures.

3.11.3.4 Report to COR any improper or suspicious behavior/activity within the work areas, courtyards, or in DTRA parking lots.

3.11.3.5 Comply with DTRA security policies at all times.

3.11.3.6 Notify the Site Lead of any concerns, questions, events, incidents, etc.

Performance Work Statement

3.11.3.7 Maintain positive visual control of escorted personnel at all times in all locations.

3.11.3.8 Challenge person(s) in possession of prohibited items to ensure only authorized items are brought into DTRA spaces.

3.11.3.9 Notify FP Security Division of the complete details for any security incidents, events, or occurrences within one hour.

3.11.4 Comply with the following Emergency Procedures:

3.11.4.1 Be thoroughly familiar with DTRA directives as required and ability to implement them in particular during emergencies (fire, bomb threat, medical etc.). Take appropriate actions per type of emergency.

3.11.4.2 Ensure all escorted personnel have exited DTRA spaces during an emergency unless the situation presents an unsafe environment to do so.

3.11.4.3 Notify the COR regarding emergency situations as soon as possible after the emergency situation ends.

3.11.4.4 Follow the instruction of the Emergency Control Officer, On-scene Commander, or emergency response personnel.

3.11.4.5 Maintain poise and self-control at all times.

3.11.5 SE should meet the following physical requirements:

3.11.5.1 Able to stand and walk for extended periods of time.

3.11.5.2 Able to function in all types of weather environments.

3.11.5.3 Able to remain alert and focused at all times while on duty.

3.11.5.4 Able to perform all necessary physical duties unaided (i.e., walking, standing etc.).

3.11.5.5. Able to communicate and report clearly in all conditions.

Note: For Escort positions, adequate personnel shall be available to cover for times when personnel are not available due to sick time, vacations, or other situations. The contractor must fill a vacant post within 2 hours of notification.

Note: For ABQ, the Branch Chief (or his/her appointee) will serve as the on-site PM and report issues/problems to the COR.

3.12 Physical Security/Access Control Support (Front Lobby/SSO): The contractor shall:

3.12.1 Answer telephone calls, greet customers (both visitors and permanent parties), respond to security emails, take messages, and route calls to a responsible Security Team Lead.

Performance Work Statement

Security Support Services 2027

CUI

3.12.2 Inventory and ensure all badges are present and/or accounted for at the beginning and end of each tour of duty and maintain a record of all badges issued. Immediately notify the PM/COR and team lead of badges that are not accounted for. Possess a general knowledge of Microsoft Office (Word, Excel, PowerPoint, Access, and Outlook) programs and databases in order to perform the varied administration duties required by the Security Division.

3.12.3 Process all visiting customers to the DTRC. Ensure that all visitors entering the DTRC are in possession of a valid DTRA security access badge. Verify the visitor’s identification from a picture ID, validate visitor clearance status and process badges utilizing the automated security database, Defense Ready, and if applicable, call the SSO in less than five (5) minutes, except in unusual circumstances.

Whenever a security clearance cannot be validated, the visitor shall be added to the system and issued an “Escort Required” badge.

3.12.4 Contact visitor’s DTRA sponsor to inform sponsor of the visitor entering DTRA facilities.

3.12.5 Brief sponsors of visitors issued “Escort Required” badges, on their responsibilities as escorts for un-cleared personnel.

3.12.6 Verify all badges are properly turned in or invalidated when the individual no longer is granted or needs access. All turn-ins must be annotated in the security database(s) or the proper badge log.

3.12.7 Maintain accurate forms, databases and logs for all daily visits and badge inventories.

Compose, edit and prepare memorandums, reports, forms, and other security-related material as required for final review by Security Team Lead.

3.12.9 Validate all requests are current in DefenseReady prior to issuing a badge. Issue appropriate badge for the security clearance level.

3.12.10 Maintain the confidentiality of all official business conducted while performing duties in support of this contract.

3.12.11 Process incoming Visitor Access Requests (VARs).

3.12.12 Assist PERSEC with granting badges for Agency Sponsored conferences and events, as needed.