PWS USAMRIID QA Support 20260423 Final.pdf

PERFORMANCE WORK STATEMENT

CONTRACT W912DY-xx-D-xxxx TASK ORDER W912DY26Fxxxx

U.S. ARMY MEDICAL RESEARCH INSTITUTE

OF INFECTIOUS DISEASES (USAMRIID)

QUALITY ASSURANCE SUPPORT

Ft. Detrick, Maryland 23 April 2026

1.0 GENERAL

1.1 Task Order Title: Quality Assurance Support for Procurement and Installation of Utility Monitoring and Controls / Building Automation Systems / Electronic Security Systems (UMCS / BAS / ESS) at the United States Army Medical Research Institute of Infectious Diseases (USAMRIID), Ft. Detrick, Maryland.

1.2 Responsibility: The contractor shall furnish sufficient technical, supervisory, and administrative personnel to ensure the expeditious accomplishment of the work specified in this Performance Work Statement (PWS). Additionally, the contractor shall furnish all services, materials, supplies, job related equipment, investigations, studies, and travel required in connection with this PWS.

1.3 Direction: The contractor shall accept directions only from the Huntsville Corps of Engineer (CEHNC) Contracting Officer or the duly authorized Contracting Officer’s Representative (COR). The contractor, as an independent contractor and not as an agent of the Government, shall provide the technical assistance necessary to accomplish the tasks under this task order. The activities performed by the contractor shall be limited to those authorized in this Performance Work Statement. Contractor employees must not perform functions or tasks that are considered inherently governmental as defined in the Federal Acquisition Regulation (FAR) at Part 7.5 or perform functions or tasks that are “closely associated with inherently governmental functions”. Furthermore, as proscribed by FAR Part 37.104, the contractor employees must not perform functions or tasks that are personal services or perform authorized functions or tasks in a manner that would be construed to be performance of personal services.

Specifically, the contractor employees must not perform functions or tasks that require relatively continuous supervision, direction and control of a government officer thereby creating the appearance of an employer-employee relationship. The contractor workforce will work with and provide reports/information to Government employees, but under no circumstances will the contractor allow themselves to be under the supervision and control of a Government official or employee. Requests or desires of the Users or Using Agency made directly to the contractor will be immediately brought to the attention of the COR. Any changes to the project scope or other provisions of this PWS must be authorized in writing by the Contracting Officer (KO). The primary POC for this requirement is the CEHNC PM/COR assigned to this contract. All CEHNC coordination and communication should include this PM/COR for situational awareness.

2.0 DESCRIPTION.

2.1 Background: The United States Army Medical Research Institute of Infectious Diseases (USAMRIID) is the Department of Defense’s (DoD) premier institution for defensive research into medical countermeasures against biological warfare and infectious diseases. It is the only DoD laboratory equipped to safely study highly hazardous pathogens that require maximum containment at Biosafety Level 4 (BSL4). The institute conducts research that leads to the development of vaccines, therapeutics, diagnostics, and training programs designed to protect military personnel and civilians.

2.2 Objective: The objective of this project is for the contractor to provide project support services (PSS) to successfully conduct clinical and facilities Quality Assurance (QA) Support assistance for Procurement and Installation of Utility Monitoring and Controls / Building Automation Systems / Electronic Security Systems (UMCS / BAS / ESS) at USAMRIID located at Ft. Detrick, Maryland, as described in Section 2.3 and Attachment 1.

2.3 Scope: The contractor shall furnish all management, labor, supervision, management support, training, local transportation, equipment and materials (except as specified as government furnished) to provide support services as described herein.

Quality Assurance Support: The contractor shall perform onsite Quality Assurance (QA) support services for Procurement and Installation of Utility Monitoring and Controls / Building Automation Systems / Electronic Security Systems (UMCS/BAS/ESS) at USMRIID, Ft. Detrick, Maryland. This requirement is primarily in support of USAMRIID Buildings 8100. This support will include but is not limited to evaluating schedules, work performance quality, safety oversight, coordination effectiveness, perform documentation reviews, and QA duties as identified by the USAMRIID facilities staff for all operations, repair and maintenance work in progress or in planning stages at USAMRIID. The contractor shall coordinate actions daily with the Facility Manager (FM), Project Manager (PM), or staff personnel, as required. The contractor shall attend all meetings relevant to the execution of the operations, repair, and maintenance program. The contractor shall be prepared to provide an oral, weekly report to government officials in order to apprise them of project status as necessary.

The contractor shall be available during times for all on-going issues that arise. Ensures conformance with National Fire Protection Association (NFPA) codes, Biosafety in Microbiological and Biomedical Laboratories

(BMBL), Association for Assessment and Accreditation of Laboratory Animal Care International (AAALAC) standards, Centers for Disease Control and Prevention (CDC) biosafety and biosecurity standards and guidelines, safety standards, and other agency criteria. Coordinates with facility. Gathers input from the facility manager. The contractor shall conduct field surveys to investigate existing layouts and conditions, and reports to the COR or other appropriate Government officials. Coordinates with facility infection control officers to ensure compliance. The contractor shall coordinate with facility safety officers to ensure compliance and with facility safety officers to implement effective safety policies.

The contractor shall report compliance issues to COR or other applicable Government officials for action by the Government. The contractor shall provide timely coordination with laboratory staff to ensure proper reviews and notification of projects and utility outages.

2.3.1 Position Description, Associated Tasks, and Education / Experience requirements described in Attachment 1 of this PWS.

2.4 Period of Performance (PoP): This PWS is for a 12-month base period with one (1) 12-month option period available. Federal Acquisition Regulation (FAR) 52.21708 available at the discretion of the Contracting Officer and as deemed necessary based on requirements.

NOTE: Task orders awarded on the MATOC will not have FAR 52.21708 as an option in year 7 (last year) of the MATOC.

3.0 TRAVEL.

3.1 Travel:

Travel within the local area or place of performance to attend meetings, conferences, seminars, training, or perform work shall be considered a cost of doing business and shall not be separately reimbursed as a travel expense. Local area travel is defined as within the metropolitan area of normal duty location.

There is no travel anticipated outside of the local metropolitan area of normal duty location.

3.2 Other Direct Costs (ODC) Materials. ODC materials, other than service/labor provided under this task order, to include, but not limited to, professional texts/references, manuals, and conference/program preparation materials and technical software programs or subscriptions which are necessary for fulfillment of the requirements of this contract. The contractor shall include ODC in their cost proposal to cover any costs associated with other direct costs. The contractor shall submit to the DHA Program Manager and COR in turn for approval all ODC expenditures with a description of the services/product/etc. and rational for the purchase prior to acquisition. ODC receipts shall be submitted with invoices.

4.0 TASKS & TASK ORDER KEY PERSONNEL

4.1 Quality Assurance Support. (This requirement is for one [1]

FTE)

Contractor provides QA services to USAMRIID sub-laboratory of Defense Health Agency Research & Development-Medical Research and Development Command located at Ft. Detrick, Maryland as identified by the USAMRIID Facilities staff for all operations, repair and maintenance work in progress or in planning stages at USAMRIID.

4.1.1 Associated tasks, duties, and experience requirements are described in Attachment 1.

5.0 STAFFING & PRICING.

5.1 Full Time Equivalent (FTE) Personnel: A Full Time Equivalent (FTE) position is based on the 1,880-1,992 is the average number of work hours in a calendar year. This accounts for eleven (11) federal holidays.

5.2 Staffing: Each staffing requirement will be proposed and filled on an individual basis. The Contractor shall notify the COR/KO if a requirement is not filled within thirty (30) calendar days of the initial award date. The Contractor will provide weekly status updates to the COR/KO regarding the unfilled requirement until it is filled. If a position remains vacant beyond thirty (30) calendar days from the initial award date, that position will not be invoiceable until a qualified candidate fills the vacancy and provides the required services. The Contractor may invoice for the vacant position during the initial thirty (30) day period only if the Government receives the services associated with that position, as confirmed by the customer. The Government will not compensate for services not received.

5.2.1 Vacated Positions During the Period of Performance

(POP): If a position becomes vacant during the POP, the Contractor shall notify the COR/KO within five (5) business days. If the position is not backfilled within thirty (30) calendar days of becoming vacant, the Contractor shall notify the COR/KO for review. The Contractor will provide weekly status updates to the COR/KO regarding the vacant position until it is filled. The Contractor has thirty (30) calendar days from the date a position becomes vacant to backfill the requirement. After this thirty (30) day period, the position will not be invoiceable until a qualified candidate fills the vacancy and provides the required services, as approved by the KO. The Contractor may invoice for the vacant position during the initial thirty

(30) day period only if the Government receives the services associated with that position, as confirmed by the customer. The Government will not compensate for services not received.

5.2.2 Listing of Staff. The contractor shall maintain a current listing of staff. The list shall include employee name, position title, and assigned shift if applicable. This list shall be validated by the contractor and provided to the COR within thirty (30) calendar days after award of contract. An updated listing shall be provided monthly in the COR Monthly Report (defined as in Deliverables’ Attachment 2).

5.2.3 Staffing on Multiple PSS Contracts. Please note that if the proposed individual is currently supporting a PSS Task Order to perform a full-time service, then the same individual cannot also be used on another Task Order for additional services if these task orders overlap in time and the combined support is more than a single FTE equivalent. If the offeror intends to remove this individual from a current PSS Task Order for the individual to serve in the new position, then you are to provide a transition plan addressing how you plan to fill the position that will be vacated by the proposed individual.

5.2.4 Resumes. Resumes shall be submitted and reviewed by the COR and KO for all positions required on this task order to ensure they meet the minimum requirements per Attachment 1 of the PWS.

This includes any FTEs for a key personnel position that was not required with the contractor’s proposal, any positions that were approved but vacated after award but prior to the start of the task order, any positions vacated and need to be backfilled during the life of the task order, and any position on an optional CLIN if exercised.

Each position and resume will be reviewed independently on an acceptable timeline for recruiting by the COR and KO. Notification of approval/non-approval shall be provided to the contractor by the KO.

All CLINs are considered priced options and are subject to availability of funds.

6.0 ADDITIONAL REQUIREMENTS.

6.1 Post Award Meeting: Not later than ten 10 working days after award, a kickoff meeting will be held. The intent is to initiate the communication process between the Government and Contractor by introducing key task participants and explaining their roles, reviewing communication ground rules, and assuring a common understanding of subtask requirements and objectives. Anything stated or discussed at this meeting is not contractually binding on either party unless documented by modification to the task order by the ordering officer. The date, time, and location will be mutually agreed upon by both parties.

6.2 Records Management: In the execution of the tasks described throughout this task order the contractor shall be responsible for associated records management. The Contractor shall provide a full range of functional expertise to include all activities related to information management as defined in individual task orders associated with this contract. These activities shall include, but not be limited to creating, capturing, registering, classifying, indexing, storing, retrieving, disposal of records, and development of strategies to manage records.

6.3 Information Security:

Disclosure of Information. In the performance of this contract, the

Contractor may have access to data and information proprietary to a Government agency or to another Government Contractor, or of such nature that its dissemination or use, other than as specified in this contract, would be illegal or otherwise adverse to the interests of the Government or others. The Contractor and its personnel shall not divulge or release data or information developed or obtained under performance of this contract, except to authorize Government personnel or upon written approval of the KO. The Contractor and its Contractor personnel shall not use, disclose, or reproduce proprietary information bearing a restrictive legend, other than as specified in the contract.

***NOTE: If you are awarded this task order, you are precluded from performing any future work that will create a conflict of interest under FAR section 19.5. For example, you are not permitted to perform work under the PWS which you will help draft future work for this task order.

Non-Disclosure Agreement (NDA). Each Contractor employee, including Contractor program management staff, shall sign a NDA (Attachment 8), which certifies that the individual has read the non-disclosure agreement, is familiar with the directives and policies governing the disclosure of procurement sensitive information, and that the individual agrees to fully and completely observe these directives and shall not disclose such information to any unauthorized person, to include the company or affiliates under which the individual is employed, or use any information obtained for private use or gain. The Contractor shall provide the KO or Government designated representative a copy of the signed NDA within 5 workdays of the Contractor employee’s start date. Requiring activity must ensure the NDA has been approved by its supporting Staff Judge Advocate (SJA).

Disclosure of information regarding operations and services of the activity to persons not authorized to receive it, or failure to safeguard any classified information that may come to the Contractor (or any persons under the Contractor’s control) in connection with work under this contract, may subject the Contractor, Contractor’s agent, or employees to criminal liability under Title 18, Sections 793 and 798 of the United States Code. Neither the Contractor nor the Contractor’s employees shall disclose or cause to be disseminated any information concerning the operations of the activity that could result in, or increase the likelihood of, the possibility of a breach of the activities’ security or interrupt the continuity of operations.

The Contractor shall not release any information (including contact lists, photographs, files, public announcements, statements, denials, or confirmations) on any part of the subject matter of this contract, or any phase of any program hereunder, without the prior written approval of the KO. Any documentation showing individuals’ names or other personal information shall be controlled and protected.

Contractor personnel are prohibited from releasing any personal or medical/patient information to include patient/person-level content with personal health information during the course of this contract.

Information shall be treated in accordance with the following: Other Military Health Services, DHA-FE, federal, and state laws shall also be applicable.

Contractor Key Personnel Replacement: The Contractor shall notify the Government of any key personnel changes. For temporary and/or permanent replacement of Key Personnel, the Contractor shall provide a resume for each individual to the KO. Resumes shall be provided at least two weeks (or as mutually agreed upon) prior to making any permanent personnel changes. The Government reserves the right to disapprove any changes that are not in the best interest of the Government.

6.4 Installation Access and Physical Security: The contractor shall ensure the following pass and identification items required for contract performance are obtained for employees:

NOTE: CONTRACTOR MUST HOLD A SECRET CLEARANCE AS

A CONDITION OF CONTRACT AWARD TO ENSURE IMMEDIATE

MISSION SUPPORT AND MUST MAINTAIN A SECRET

CLEARANCE THROUGHOUT THE ENTIRETY OF THE

CONTRACT TO INCLUDE BASE AND OPTION YEARS.

Common Access Card (CAC). Each contractor employee requires a CAC and shall have it in his/her possession at all times while working on any government installation and shall surrender the CAC at the end of his/her employment under this contract or when the CAC expires, whichever occurs first. All contractor employees shall have an active favorable SECRET (Tier 3) / NACI and meet the requirements of DoDM 1000.13-M-VI, January 23, 2014. As a condition of employment, contractor personnel must be able to obtain a CAC within 120 days of hire. The COR shall be kept abreast of issues dealing with the CAC process. The contractor’s security officer shall ensure timely notification of all hires to the COR and provide necessary documentation to the respective security office.

The loss of any pass and identification items shall be reported as soon thereafter as possible to the issuing activity and the COR.

The contractor shall retrieve all identification media from employees who depart for any reason before the contract expires (e. g., terminated for cause, retirement) and return such media to Pass and Identification section for proper disposition.

Contractor personnel shall report to the COR and DHA Program Manager any information or circumstances of which they are aware may pose a threat to the security of DoD personnel, contractor personnel, and resources. Contractor employees shall be briefed by security manager upon initial on- base assignment and as required thereafter.

6.4.1 Contractor shall comply with DoD 8570.1M, Information

Assurance Workforce Improvement Program, dated December 19, 2005, Change 4 November 10, 2015, DoDI 8500.2, Information Assurance (IA)

Implementation dated February 6, 2003, DFARS 252.204- 7012 and DoDD 5200.2 DoD Personnel Security Program dated April 3, 2017.

The Contractor shall arrange for entry into restricted areas, base entry, vehicle passes, and other requirements in conjunction with notification of the Government security activity.

All Contractor employees requiring access to the Government unclassified computer network shall have a valid SECRET (Tier 3) / National Agency Check with Inquiries (NACI) verified through Joint Personnel Adjudication System (JPAS). No Contractor employee will be provided access to unclassified computer network or its inherent capabilities (i.e., internet access, electronic mail, file and print services, etc.) without a valid NACI.

The Contractor shall be aware of and abide by all Government regulations concerning the authorized use of the Government’s computer network including the restriction against using the network to recruit Government personnel or advertise job openings.

6.5 Personnel Appearance and Conduct:

Personnel Conduct. The KO or designated Government representative may require the Contractor to remove from the job site any Contractor employee working under this contract for reasons of misconduct, security violations, or found to be or suspected to be under the influence of alcohol, drugs, or other incapacitating agent.

The Installation Commander has the authority to bar individuals from the installation. Such removal from the job site or dismissal from the premises shall not relieve the Contractor of the contract requirements.

Personal Appearance. Contractor employees shall practice high standards of personal hygiene and maintain a clean, neat appearance while on duty.

6.6 Government’s Liability: The government shall not be liable for any injury to the contractor’s personnel or damage to the contractor’s property unless such injury or damage is due to negligence on the part of the government and is recoverable under the Federal Torts Claims Act, or pursuant to other federal statutory authority.

6.7 Section 508 Compliance: The industry partner shall support the government in its compliance with Section 508 throughout the development and implementation of the work to be performed. Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S. Code. 794d) and implemented by 36 Code of Federal Regulations (CFR) 1194, requires that when federal agencies develop, procure, maintain, or use electronic information technology, federal employees with disabilities have access to and use of information and data that is comparable to the access and use by federal employees who do not have disabilities, unless an undue burden would be imposed on the agency. Section 508 also requires that individuals with disabilities, who are members of the public seeking information or services from a federal agency, have access to and use of information and data that is comparable to that provided to the public who are not individuals with disabilities, unless an undue burden would be imposed on the agency. For additional Section 508 information, the industry partner should review the following websites:

http://www.section508.gov http://www.access-board.gov/508.htm http://www.w3.org/WAI/Resource

6.8 Data Rights: All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

Engineering support contractors shall file all work assignment information in the organizational structure defined by the engineering government staff. In addition to this information being shared, the organization file structures are being optimized, and contractors will need to make sure their information is aligned appropriately. Contractors will be expected to share, update, and contribute to the engineering team resources library at a level commensurate to the experience and role on the team.

6.9 Service Summary (SS): The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

6.10 Deficiencies: A deficiency is any Government identified non-compliance with the SS or other contract requirements that specifies that an activity or action did not take place or did not take place to the standards of timeliness or quality required.

6.11 Deficiency Resolution: The Contractor shall take immediate action to correct all Government reported deficiencies and to prevent recurrence of the deficiency.

6.12 Corrective Action Report (CAR): A CAR or electronic equivalent will be initiated by the DHA Program Manager, COR or KO when contract requirement deficiencies are found, and subsequent corrective action are to be taken.

6.13 Quality Control Plan:

Quality Control Plan (QCP). The contractor shall submit a QCP ten

(10) business days after contract award to the DHA Program Manager.

Quality Assurance. Work and documentation produced by the contractor personnel will be reviewed. Only the COR, with agreement of the DHA PM/POC, may accept or reject deliverables provided by the Contractor.

The contractor shall provide on-site quality review services to measure the effectiveness of their QC system at 120 days following the approval of the QC Plan and provide the quality review to the COR and KO. The intent is to determine the effectiveness of the plan in providing quality support to the customer.

6.14 Non-Personal Services: The Government will neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception of personal services. If the contractor feels that any actions constitute, or are perceived to constitute personal services, it shall be the contractor’s responsibility to notify the contracting officer immediately. The contractor shall not be used for the performance of inherently governmental functions as stated in FAR 7.503.

All decisions relative to programs supported by the contractor shall be the sole responsibility of the Government.

6.15 Contractor Identification / Requirements:

Contractor personnel shall be required to wear company identification badges so as to easily distinguish themselves from Government employees (e.g., corporate identification badges, Government issued identification that reflects Contractor status, etc.). These badges must be conspicuously displayed at all times when working with Government personnel. Identification badges must be displayed above the waist to allow for easy identification as a Contractor employee or authorized subcontractor performing work for the Contractor. Badges shall be worn at all times when Contractor employees are co-located on a Government installation or when on temporary duty (TDY) working with other Government personnel. Subcontractor employees’ identification badges shall identify their respective prime Contractor.

When conversing with Government personnel during business meetings, over the telephone or via electronic mail, support Contractor personnel shall identify themselves as such to avoid any perception that they may be Government employees and to avoid situations arising where sensitive topics might be better discussed solely between Government employees. Electronic mail signature blocks and business cards shall identify Contractor/company affiliation. Documents or reports produced by Contractors shall be suitably marked as Contractor products or Contractor participation appropriately disclosed.

Contractor personnel shall be occupying co-located space. Each cubicle must be clearly identified with Contractor supplied signs, name plates or other identification, indicating that these work areas are occupied by Contractor personnel. Remote support may be authorized on a case-by-case basis with approval from appropriate Government officials.

Contractors, including subcontractors at all tiers, shall provide for a clear distinction from Government personnel. Contractor employees shall not act, advertise, or presume to be Government employees, agents, or representatives. Contractor employees are required to appropriately identify themselves as contractor employees at all times, including in telephone conversations, formal and informal written correspondence, paper and electronic; and in any other situation where their actions could be construed as acts of Government officials unless, in the judgment of the Government, no harm can come from failing to identify themselves. Contractor employees shall be introduced as contractor personnel and display distinguishing visible identification at all times whether in conversations, meetings, and other forms of communication with Government personnel.

The contractor shall ensure that all transportation methods to and from the work location, required by its employees in the performance of this contract are made available. Parking permits, passes, tolls and fees for privately owned vehicles are responsibility of the contractor. The contractor shall provide computer (laptop) and cell phone.

6.16 Duty Hours:

The Government work hours under this contract shall coincide with the local operating hours of each facility.

Subject to prior approval by supported facility POC’s, variations in work schedule are acceptable when the total hours per week are not exceeded and no obligation is incurred that would require contract personnel to be paid overtime.

Contractor employees' work may be interrupted or delayed due to safety or security drills, exercise participation, special events, training or actual emergencies. Contractor employees shall participate in all safety and security training or drills.

The Contractor will maintain a staff fill rate of 95% or greater and will notify the DHA Program Manager and COR five days prior to vacancies.

The Contractor will provide appropriate equipment for the Government to communicate with the contractor during duty hours and emergencies. Contractor also needs to provide their employees the ability to be monitor their email when they are not present at their government assigned duty stations.

The primary place of performance is at the USAMRIID, Ft. Detrick – Building 8100. Additional work may be performed at other sites within the local commuting area.

6.17 Holidays: Recognized holidays for employees covered by the Service Contract Act (SCA) are outlined in the applicable wage determination and will be provided at the task order level. Unless otherwise specified in the individual task orders/wage determinations, contractor employees will not be required to work on the following Holidays:

New Year’s Day; Dr. Martin Luther King, Jr.’s Birthday; President’s Day; Memorial Day; Juneteenth, Independence Day; Labor Day;

Columbus Day; Veteran’s Day; Thanksgiving Day; Christmas Day

6.18 Conflict of Interest:

The Contractor shall not employ, hire, or contract with employees of the United States Government or the DoD, either military or civilian, if such employment would create a conflict of interest. The Contractor shall not employ any person who is an employee of the DoD, unless such person receives prior approval, inwriting, from the KO. The Contractor shall ensure that its employees receive training, with periodic refresher training, on how to avoid organizational conflicts of interest.

If outlined in the contract, Contractor employees may be required to have access to or participate in the development of proprietary information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.). The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential Organizational Conflict of Interest (COI) and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO, and in the event the KO unilaterally determines that any such COI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the COI.

6.19 Task Order Completion / Closeout Plan: The contractor shall complete a task closeout plan. This shall include formal coordination with Government staff and management. It shall also include delivery of copies of existing policies and procedures, and delivery of required metrics and statistics. This transition plan shall include, but is not limited to:

Coordination with Government representatives.

Review, evaluation and transition of current support services.

Transition of project data collected, analyzed or created.

Applicable Government-approved training and certification process.

Transfer of hardware warranties and software licenses.

Transfer of all necessary business and/or technical documentation.

Transfer of compiled and uncompiled source code, to include all versions, maintenance updates and patches.

Training and orientation to introduce Government personnel, programs, and users to the Contractor's team, tools, methodologies, and business processes.

Disposition of Contractor purchased Government owned assets, including facilities, equipment, furniture, phone lines, computer equipment, etc.

Transfer of Government Furnished Equipment (GFE) and Government Furnished Information (GFI), and GFE inventory management assistance.

Debriefing and personnel out-processing procedures required.

Turn-in of all government keys, ID/access cards, and security codes.

6.20 AT –OPSEC Requirements:

1) AT Level I training. This standard language is for contractor employees with an area of performance within a DHA-controlled installation, facility, or area. All contractor employees, including subcontractor employees, requiring access to DHHQ, Direct Reporting Markets (MTFs), Small Markets and Stand Alone (SSO) facilities and controlled access areas, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 05 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: https://jkosupport.jten.mil/html/COI.xhtml?

course_prefix=JS&course_number=-US007

2) Access and general protection/security policy and procedures.

This standard language is for contractor employees with an area of performance within a DHA controlled installation, facility, or area.

Contractor and all associated sub-contractors’ employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, DHHQ and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

2a. For contractors requiring CAC. Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with DHA-AI 5200.04. The contractor employee will be issued a CAC only if duties involve one of the following: (1) both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

2b. For contractors that do not require CAC but require access to a DoD facility or installation. Contractor and all associated sub-contractors’ employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

3) AT Awareness Training for Contractor Personnel Traveling Overseas. This standard language requires U.S.-based contractor employees and associated subcontractor employees to make available and to receive Government-provided area of responsibility (AOR) -specific AT awareness training as directed by DHA-AI 078.

Specific AOR training content is directed by the combatant commander, with the unit ATO being the local point of contact.

4) iWATCH/Suspicious Activity Reporting Training. This standard language is for contractor employees with an area of performance within a DHA-controlled installation, facility, or area. The contractor and all associated subcontractors shall brief all employees on the local Suspicious Activity Training program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 5 calendar days of new employees commencing performance, with the results reported to the COR NLT 30 calendar days after contract award.

5) Service Training Certification Tracking System (STCTS) registration for contractor employees who require access to government information systems. All contractor employees with access to a government information system must be registered in the STCTS at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

6) For contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per DHA-AI 5200.03.

7) For contracts that require OPSEC Training. Per DHA-AI 5200.03, Operations Security, the contractor employees must complete Level I

OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter

8) For Cyber Awareness (Information Assurance (IA)/information Technology (IT) training. All contractor employees and associated subcontractor employees must complete the DoD Cyber Awareness training before issuance of network access and annually thereafter.

All contractor employees working IA/IT functions must comply with DoD requirements DoD 8570.01 and DoD 8570.01-M within 6 months of appointment to IA/IT functions.

DoD Cyber Awareness Challenge Training is available at the following website:

https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf?ORG=NAV SEA, DOD Course US1364-22 DOD Cyber Awareness Challenge 2022.

Information assurance (IA)/information technology (IT) training to (https://cs.signal.army.mil)

9) For Cyber (Information assurance (IA)/information technology (IT) certification. Per DoD 8570.01-M, DFARS 252.239.7001, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

10) Controlled Unclassified Information (CUI).

Per DoD Instruction 5200.48, Controlled Unclassified

Information (CUI), all personnel within a DoD organization --i.e., military members, DoD civilians, and on-site support contractors --must complete CUI training initially within thirty

(30) calendar days of reporting for duty and thereafter once every 365 calendar days. The training is located at DoD CUI Training: https://www.cdse.edu/Training/eLearning/IF141/

DFARS clause 252.204-7012, which requires the contractor to comply with NIST 800-171. Also include DFARS provision 252.204-2019 into solicitations. Acquisition officials should follow procedures outlined in DFARS 204.73 and verify vendors have an adequate NIST SP 800-171 summary assessment score within the Supplier Performance Risk System (within PIEE). If the score doesn't show a medium- or high-level assessment with a score of 110 or better (as described in the "NIST SP 800-171 DoD Assessment Methodology"), include clause 252.204-7020 and obtain the vendor's "system security plan" and "plan of action" for NIST SP 800-171 verification and assurance by Army security officials.

11) Threat Awareness Reporting Program. For all contractors with security clearances. Per DHA-AI 097, Insider Threat Program, contractor employees must receive annual Insider Threat Awareness training within 30 days of initial employment, and refresher training annually either through instructor-led or computer-based. All contractors shall comply with applicable installation, facility, and area commander installation / facility policies and procedures for Threat Awareness Reporting.

12) Contract Employee Identification. All Contractor employees shall wear a Contractor furnished identification badge, which shall be visible on the outside of their clothing whenever on the installation property. The identification badge shall include, as a minimum, the employee’s name, employee’s signature, a recent photograph of the employee, and the name of the Contractor.

13) Damage or Loss of Contractor’s Supplies and Personal Property. The Contractor is responsible for his/her supplies, materials, and equipment and the personal property of his/her employees from loss, damage, or theft while on government property.

14) As-Built Drawings, Floor Plans, and Project Submittals. The Contractor shall not distribute, publish, or share the facility's As-Built Floor Plan Drawings, or project submittals with any third party except for subcontractors with a legitimate need-to-know and shall return all hard copies of the drawings to the MRDC G9 Office and/or to permanently delete all digital copies of the documents, including any e-mails containing such documentation upon completion of this order.

15) Unescorted and Escort Required Access to Bldg. 8100. All personnel walking to/from and entering Bldg. 8100 will either need to be escorted, at all times by an approved Unescorted person, or be approved for Unescorted access by receiving a favorable adjudication from the National Crime Information Center Interstate Identification Index (NCIC-III), and Terrorist Screening Database (TSDB), a minimum T3 security investigation, and complete USAMRIID Form 23 – Request for Access to Non-Containment Areas, and USAMRIID Form 42 – Request for USAMRIID Identification Badge.

6.21 Employee Annual Training Requirements: All contractors must complete designated annual General Military Training (GMT) to comply with DoD, Local installation and Local Command Activity requirements/processes/ awareness. Required training courses are as follows, but are not limited to:

DoD Cyber Awareness Challenge V3 Anti-Terrorism Level 1 Combating Trafficking In Persons (CTIP) HIPAA, PPI & Privacy Act Counter-Intelligence and Reporting Unauthorized Disclosure

The DHA-FE Program Manager or designated government representative(s) will inform contractor personnel of timeframe when training must be submitted for completion. Training shall be completed within 30 calendar days of contract award and within 30 calendar days of new personnel commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training.

6.22 Safety Requirements: The contractor shall be required to comply with all federal, state and local SOH requirements, to include OSHA standards and EM 385-1-1 (whichever is the most stringent) other measures as necessary. Also, the contractor is required to conform to installation safety requirements.

6.23 Citizenship Status: All proposed personnel to perform services under this requirement / task order, must be a current citizen of the United States of America.

6.24 Proprietary Information: Performance may require the contractor to access data and information proprietary to a government agency or of such nature that its dissemination or use other than as specified in this PWS would be averse to the interests of the Government or others. The contractor shall not divulge or release data or use information developed or obtained under performance of this PWS, except to authorized Government personnel or upon written approval of the COR. Contractor personnel shall not use, disclose, or reproduce proprietary data that bears a restrictive legend and individuals shall sign a non-disclosure agreement. The contractor shall turn over all generated artifacts, products and data other than are specified in this PWS to the COR at the completion of this contract and it shall become the property of the Government.

6.25 Contracting Officer Authority: The Contracting Officer (KO) is the only person authorized to direct changes in any of the requirements under this contract and notwithstanding any provisions contained elsewhere in this contract, the said authority remains solely with the KO. In the event that the contractor effects any such changes at the direction of any person other than the KO, the change will be considered to have been made without authority and is solely the risk of the contractor.

6.25.1 The Contracting Officer’s Representative (COR) is the Government employee tasked with the day-to-day operation of the contract but is not authorized to make changes or issue funds.

6.26 Monthly Reports: The contractor shall provide a Monthly Activity Report to the on-site Government Representative and the COR that identifies significant accomplishments, current or future problems, action taken to correct such identified problems and recommendations for process improvements.

6.27 Invoicing: All invoices shall be submitted using Form ENG93.

They shall be submitted monthly with the Progress Report that shall include the status of the project expressed on a percentage basis of the total amount of work completed. All invoices shall be signed by DHA POC and submitted to the CEHNC COR for payment at CEHNC- PSS@usace.army.mil.

6.28 Government Furnished Support & Property Use:

General: The Government will provide facilities, equipment, utilities, services, and materials as set forth herein.

Equipment and Facilities: The Government shall provide the contractor with access and use of necessary internet connectivity.

The Government shall provide workspace, furnishings and supplies to perform the required services equal to that of similar employees in the same work location.

Telephone and Fax Service: The Government shall provide local, commercial long distance and DSN telephone and fax service.

The Government shall provide utilities support.

The contractor shall not use property or services provided by the

Government for any purpose other than the performance of this contract.

Sponsorship of contractor to attain CAC card for access to applicable Government service for period of contract.

Maintain ISSA agreement between DHA and other Government organizations for applicable service access, licensing, necessary accounts and system support. ISSA will be maintained by DHA.

6.29 Contractor Manpower Reporting Requirements:

The Contractor shall report all contractor labor hours (including subcontractor labor hours) required for performance of services provided under this PWS via a secure data collection site. The contractor is required to completely fill in all required data fields at http://www.sam.gov.

Reporting Period: Reporting inputs will be for the labor executed during the PoP for each government fiscal year (FY), which runs 1 October through 30 September. While inputs may be reported any time during the FY, all data shall be reported no later than 31 October of each calendar year. Contractors may direct questions to the Contractor Manpower Reporting Application (CMRA) help desk.

Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor’s name and contract number associated with the data.

User Manuals: Data for…