RFI draft PWS CLDJ FORCE PROTECTION ANALYST-PHYSICAL SECURITY ANALYST.pdf

3.0. DESCRIPTION OF SERVICES (PERFORMANCE WORK STATEMENT)

1. Scope. The contractor shall provide on-site force protection and physical security analyst services to the

Camp Lemonnier, Djibouti (CLDJ) Installation Commanding Officer (ICO), CLDJ Installation Security

Officer (ISO), and the CLDJ Antiterrorism Officer (ATO) in support of Force Protection and Physical

Security operations. Support services includes the collection, development, editing, and synthesis of requirements to assist the CLDJ ICO and staff to develop alternative solutions to complex force protection and physical security issues, improve the security operation of organizations operating in the environment, development of security measures associated with safe security operation of a forward deployed military installation, and support efficient and effective operation of security and force management hardware and software systems.

2. Background.

2.1. Commander, Camp Lemonnier, Djibouti (CLDJ) is the Echelon 4 Command within the Commander, Navy Region Europe Africa Central (CNREURAFCENT) for the Commander Navy Installation

Command (CNIC). CNREURAFCENT provides shore support services for US and allied forces operating on Navy installations within the region.

2.2. The N3 Anti-terrorism Department (N3AT) is charged with providing force protection to military forces stationed at CLDJ. As CLDJ is a contingency location, Government Civilian positions are not authorized.

Additionally, most military positions are nine month rotational billets. Therefore, in order to achieve agency goals, the Government seeks a multi-year contracted solution which will provide continuity and technical expertise necessary to augment the Anti-terrorism Force Protection (ATFP) military cadre.

3. Performance requirements. Contractor shall support CLDJ N3AT program areas associated with force protection and physical security. These areas are related to actions taken to prevent or mitigate hostile actions against DOD personnel (including family members), resources, facilities and critical information.

These actions conserve the force’s fighting potential so it can be applied at the decisive time and place.

These actions also incorporate coordinated and synchronized offensive and defensive measures to enable effective employment of the Joint Force, while degrading the opportunities of the enemy. These tasks do not include actions to defeat the enemy or protect against accidents, weather, or disease.

3.1. Task 1 – Force Protection analyst services.

3.1.1. Function as primary support for planning of force protection and CLDJ base protection policies and resources including law enforcement and physical security, and combating terrorism by conducting timely and relevant research of current tactics, techniques, and procedures (TTPs) in each of the aforementioned areas and participating in, at a minimum, weekly briefings with the Installation Security Officer (ISO) and/or Antiterrorism Officer (ATO) on these areas.

3.1.1.1. Coordinate with the Naval Criminal Investigative Service (NCIS) and other intelligence agencies to update information on threats to Navy regions and installations in order to provide weekly updates to the ISO and ATO.

3.1.1.2. Functional Effort Reporting (FER) - Provide support by compiling weekly functional effort reporting statistics (as defined by Commander, Navy Installations) and reporting these same statistics IAW Commander Navy Installation Command requirements

3.1.2. Build Installation Protection Policy, Guidance and Plans Portfolio – compile data and inputs from multiple sources, provide subject matter expertise (SME) to N3AT personnel with drafting policy documents, and facilitate document reviews and creating presentations.

3.1.3. Provide assistance in the conduct of risk assessments and vulnerability assessments pertaining to specific knowledge and experience with DOD requirements. Assists Government personnel to finalize risk assessment and vulnerability assessment final reports.

3.1.3.1. Research terrorist threat data to identify threats posed to U.S. operations and interests.

Incorporates relevant information gained during research and analysis into briefings and products.

3.1.3.2. Develop mitigating solutions for identified threats and advocate implementation of DOD and

DON ATFP programs and objectives.

3.1.4. Assist CLDJ ATFP with the planning, coordination, and execution of NSXOP drills and other security-related training.

3.1.5. Utilize the N3AT chain of command to provide timely and accurate advice on the implementation, coordination and monitoring of CLDJ base performance against mandated, optional, and emergent force protection and physical security requirements.

3.1.6. Identify areas of vulnerability and prepare necessary requests and supporting documentation for security waivers and/or exceptions. Provide support to N3AT staff on the development of policy for submitting waivers/exceptions, and incorporate and maintain a current tracking database for waivers and exceptions in process and for those already approved.

3.1.7. Enterprise Protection Risk Management (EPRM) & Mission Assurance Risk Management System

(MARMS) – Enter installation specific data and vulnerabilities into, and conduct analysis of open vulnerabilities in EPRM & MARMS (or equivalent system currently in use by CLDJ) to inform resource allocation decisions in conjunction with Command Risk-based Investment Model (RBIM).

3.1.8. Assists Region Security Program Directors and Installation Integrators to execute Region programmatic initiatives.

3.1.8.1. Vulnerability Assessment (VA) & Force Protection Resourcing – Assist operational forces with interpretation of security specifications to assist operational forces develop tactics, techniques, and procedures that integrate force protection program initiatives; applies principles of risk-based investment strategies used in conjunction with threat, vulnerability and critically based processes to eliminate program seams and gaps.

3.1.8.2. Performance Metrics/Common Output Levels (COLS) – Recommend to the chain of command improvements to metrics used internal and external to CLDJ performance assessment and resource planning, aligning with CLDJ and higher-level COLS where appropriate.

3.1.9. Apply an understanding of Asymmetric Warfare, Operational Needs Statements, Joint Capability

Integration and Development when conducting analytical functions. Incorporates these principles into analytical products.

3.1.10. Support and assist various antiterrorism, force protection, and threat working groups, as requested.

3.2. Task 2 – Physical Security Analyst services.

3.2.1. Functions as primary support for planning, implementation, and compliance with the Navy Physical

Security Program.

3.2.2. Compile data and inputs from multiple sources, provide subject matter expertise (SME) to N3AT personnel with drafting policy documents, and facilitate document reviews and creating presentations.

3.2.3. Conduct physical security surveys for CLDJ assets IAW DOD and Navy standards.

3.2.4. Unified Facilities Criteria (UFC) – Utilize requirements in the UFC, review and submit recommendations for security and force protection upgrades to existing and new construction.

3.2.5. Serve as a system administrator for physical and electronic key control systems.

3.2.6. Drafts CLDJ Physical Security Plan and implements Physical Security Program IAW DOD and Navy standards.

3.2.7. Develop mitigating solutions for identified physical security vulnerabilities and advocate implementation of DOD and DON physical security programs and objectives.

3.2.8. Utilize the N3AT chain of command to provide timely and accurate advice on the implementation, coordination and monitoring of CLDJ base performance against mandated, optional, and emergent physical security requirements.

3.2.9. Identify areas of vulnerability and prepare necessary requests and supporting documentation for security waivers and/or exceptions. Provide support to N3AT staff on the development of policy for submitting waivers/exceptions, and incorporate and maintain a current tracking database for waivers and exceptions in process and for those already approved.

3.2.10. EPRM & MARMS – Enter installation specific data and vulnerabilities into, and conduct analysis of open vulnerabilities in EPRM & MARMS (or equivalent system currently in use by CLDJ) to inform resource allocation decisions in conjunction with Command Risk-based Investment Model (RBIM).

3.2.11. VA & Force Protection Resourcing – Assist operational forces with interpreting security related specifications in order for operational forces to develop policies that integrate the physical security program efforts throughout the application of risk-based investment strategies used in conjunction with threat, vulnerability and critically based processes to eliminate program seams and gaps.

3.2.12. Functional Effort Reporting (FER) – Provide support by compiling weekly functional effort reporting statistics (as defined by Commander, Navy Installations) and reporting these same statistics IAW

Commander Navy Installation Command requirements.

3.2.13. Performance Metrics/Common Output Levels (COLS) – Recommend to the chain of command improvements to metrics used internal and external to CLDJ performance assessment and resource planning, aligning with CLDJ and higher-level COLS where appropriate.

3.2.14. Apply an understanding of Asymmetric Warfare, Operational Needs Statements, Joint Capability

Integration and Development when conducting analytical functions. Incorporates these principles into analytical products.

3.2.15. Support and assist various antiterrorism, force protection, and threat working groups, as requested.

3.3. Contractor Personnel Requirements.

3.3.1. Contractor shall ensure its personnel possess a valid U.S. State-issued Motor Vehicle Operator

License.

3.3.2. Contractor shall ensure its personnel possess a current and valid U.S. Passport, any country visas and work permits.

3.3.3. BA/BS from an accredited College or University plus 5 years of experience in preventive measures taken to mitigate hostile actions against Department of Defense personnel (to include family members), resources, facilities, and critical information (Force Protection) or protection of personnel, hardware, programs, networks, and data from physical circumstances and events that could cause serious losses or damage to an enterprise, agency, or facility. This includes protection from fire, natural disasters, burglary, theft, vandalism, and terrorism (Physical

Security), or 10 years of experience in Force Protection or Physical Security without a degree.

3.3.4. Specifically, the contractor employee must possess the following skills, knowledge, experience and/or abilities:

3.3.4.1. 2-years managing DOD physical security or AT/FP programs in East Africa.

3.3.4.2. 5-10 years managing security programs in international, restrictive, and hostile environments.

3.3.4.3. Experience operating in a joint, multi-service environment and managing joint service installation security departments.

3.3.4.4. A working and functional knowledge of military staff functions and finished staff work.

3.3.4.5. A working and functional knowledge of military chain of command.

3.3.4.6. Preparation of Vulnerability Assessments, Risk Assessments, Criticality Assessments, Threat Probability Assessments, and Physical Security Surveys.

3.3.4.7. Management of Physical Security and Antiterrorism/Force Protection Programs.

3.3.4.8. Preparation of Pre-Planned Responses, Standard Operating Procedures, and Post Orders.

3.3.4.9. Identification and protection of Mission Essential Vulnerable Areas (MEVA).

3.3.4.10. Management and proficiency of the Enterprise Protection Risk Management (EPRM) program and Mission Assurance Risk Management Service (MARMS).

3.3.4.11. Development of compound defense plans.

3.3.4.12. Participation or management of Antiterrorism Training Teams (ATTT).

3.3.4.13. Conduct or preparation for Joint Staff Integrated Vulnerability Assessments (JSIVA), Command Assessment and Readiness Training (CART) inspections, Installation

Protection Assessment Cells (IPAC) and the associated maintenance of POAMs to track and resolve discrepancies.

3.3.4.14. Knowledge of industry standard intrusion detection, surveillance, and access control

(i.e. DBIDS, etc.) systems.

3.3.4.15. Budget Development, Operational Management, and Personnel Management.

3.3.4.16. Preparation of Individual Antiterrorism Travel Plans (IATP) Individual Force

Protection Plan for military and civilian personnel traveling to other countries.

3.3.4.17. Proficient use of PC’s and related software packages such as: Microsoft Windows, Office Suite, Internet, Excel, Word and Power Point.

4. Deliverables and reports.

4.1. Contractor shall submit a Monthly Status Report (MSR) to the COR no later than the 10th of each month in electronic format (such as Microsoft Word), transmitted electronically via email. Contractor shall include in the MSR, at a minimum, the following information.

4.1.1. List of assigned open projects, status, anticipated completion date, issues, and foreseeable challenges.

4.1.2. Contractor personnel absences for the month completed and known anticipated personnel absences for the up-coming month.

4.1.3. Contractor shall include in the October and November MSRs the status of ECMRA completion.

4.2. Contractor shall submit POAMs within five days of project assignment.

5. Enterprise-Wide Contractor Manpower Reporting Application (ECMRA).

5.1. The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for Navy via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

W, Lease/Rental of Equipment;

X, Lease/Rental of Facilities;

Y, Construction of Structures and Facilities;

D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications

Transmission (D304) and Internet (D322) ONLY;

S, Utilities ONLY;

V, Freight and Shipping ONLY.

5.2. The contractor is required to completely fill in all required data fields using the following web address:

https://www.ecmra.mil.

5.3. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://www.ecmra.mil.

6. General Requirements:

6.1 Security and other access requirements. Security requirements will be in accordance with the attached

DD 254 and SUPTXT204-9400(1-17). Contractor personnel providing support under the contract shall have a current adjudicated Secret investigation. Contractor personnel must be eligible to receive a government courier card issued by the Command Security Manger in performance of duties. Contractor personnel must obtain clearance eligibility through the contractor's Facility Security Officer (FSO) prior to the order's period of performance start date. The FSO shall send a visit request (VAR) for individuals who are supporting the specified contract via Joint Personnel Adjudication System (JPAS) prior to the start date of contract to SMO 3049B6.

6.2 Contractor will establish a Synchronized Personnel Operational Tracker (SPOT) account, and Contractor personnel will Login to SPOT at https://spot.dmdc.mil/privacy.aspx, enter all required information, and submit a new Letter of Authorization (LOA) request to the COR. After review and approval of the request by the COR and KO, the COR will provide the LOA to Contractor personnel via Email.

6.3 Contractor shall comply with all host-nation laws, international agreements between the US Government and host nations.

6.4 Non-disclosure and non-use of data or information.

6.4.1 Data/Information: Each Contractor personnel performing work under this PWS shall sign Attachment 03 and submit to the COR. All data or information obtained, received, or learned by the Contractor and its personnel as a result of performance of this order shall be deemed to be “sensitive” and/or “proprietary” whether or not such data/information is so designated or marked. The Contractor and its personnel shall restrict access to data/information obtained, received, or learned as a result of performance of this order to the minimum number of Contractor personnel for performance of this order. No one who prepares offers, proposals, bids, and/or quotations for Government and/or non-Government procurements shall be involved in direct performance of this order. The Contractor shall ensure that each of its personnel who obtains, receives, or learns data/information as a result of performance of this task order understands and complies with this “Non-Disclosure and Non-Use of Data/Information” performance element.

6.4.2 Non-Use of Data/Information: The Contractor and its personnel shall use data/information obtained, received, or learned as a result of performance of this order only in direct performance of this order and for no other purpose. The Contractor and its personnel shall not use or consider such data/information in the preparation of any offer, proposal, bid, and/or quotation for any Government and/or non-Government procurement. The Contractor and its personnel shall take all steps to prevent use of such data/information except as specifically permitted herein.

6.4.3 In the event that the Contractor and/or its personnel will obtain, receive, or learn data/information of parties other than the Customer as a result of performance of this contract, the Contractor shall execute an

Attachment 03 with each such entity. The Contractor shall provide such executed non-disclosure/non-use agreement with an entity to the COR prior to the Contractor and/or its personnel having access to the data/information provided by the entity.

6.4.4 Requirement to Disclose Data/Information: If the Contractor receives a court order requiring disclosure of data/information obtained, received, or learned as a result of performance of this order, or if the

Contractor believes disclosure of such data is otherwise required by law or regulation, the Contractor shall contact the COR immediately and fully inform the COR of the court order, or other requirement prior to any disclosure of data/information.

6.4.5 Exception: This “Non-Disclosure and Non-Use of Data/Information” condition does not apply to data/information which the Contractor can demonstrate was obtained, received, or learned in a way other than as a result of performance of this order.

6.5 Travel. Travel requirements will be limited to U.S. Navy facilities or the United States. Contractor travel shall be consistent with the amounts and limitations specified in Federal Acquisition Regulation 31.205-

46 and the current Joint Travel Regulations (JTR), as they are amended from time to time and the limitation of funds specified for travel in this task order. When travel is required, it shall be pre-approved by the COR and will be reimbursed at cost, without additional burden with all amounts substantiated as part of the monthly invoice.

6.6 Replacement personnel. The contractor shall notify the COR of personnel changes with at least 30 days advance notice to prevent an interruption in services. The Contractor shall provide a phase-in plan that details how changes in personnel will be phased to provide continuity of quality of service and adherence to all performance requirements herein.

7. Hours of operations.

7.1 Normal business hours of operation are 8:00 A.M. through 5:00 P.M., Monday through Friday, and 8:00

A.M. through 1:00 P.M. Saturday, excluding Federal Holidays. Facilities may close due to local or national emergencies, administrative closings, or other Government directed closings. Contractor access to Government facilities during closures is not permitted.

7.2 If a Federal Holiday falls outside of normal business hours, it may be observed on an adjacent weekday.

Performance of work will not occur on Federal Holidays or observances thereof. Federal Holidays:

New Year’s Day 1 January

Dr. Martin Luther King’s Birthday 3rd Monday in January

President’s Day 3rd Monday in February

Memorial Day 5th Monday in May

Independence Day 4 July

Labor Day 1st Monday in September

Columbus Day 2nd Monday in October

Veteran’s Day 11 November

Thanksgiving Day 4th Thursday in November

Christmas Day 25 December

7.3 Requirements Specific to Performance at CLDJ.

7.3.1 The contractor must comply with AFRICOM theater clearance requirements as identified at:

http://www.africom.mil/TheaterClearanceCoordCenter/tcccMain.asp

7.3.2 Compliance with the theater clearance requirements is the sole responsibility of the contractor.

http://www.africom.mil/TheaterClearanceCoordCenter/tcccMain.asp

7.3.3 No permanent change of station (PCS) costs (i.e. house-hold-goods, vehicle shipment, etc.) will be paid for relocation of any employees to or from CLDJ. A one-time transportation cost of contractor personnel to report to CLDJ initially will be provided.

7.3.4 No on-base housing is available in Djibouti. Suitable off-base housing and all other living costs will be the responsibility of the contractor. The Contractor shall price these associated costs separate from the basic services required under this contract.

7.3.5 Any taxes or other access issues are the responsibility of the contractor.

8. Attachments.

01 – DD 254 Department of Defense Contract Security Classification Specification

02 – SUPTXT204-9400(1-17) Contractor Unclassified Access to Federally Controlled Facilities, Sensitive Information, Information Technology Systems, or Protected Health Information

03 – Non-disclosure Agreement