DRAFT5_2_2007SectionJ.doc

5_2_2007 Section J

Section J – Attachments

U.S. Department of State (U.S. DoS)

Attachments

Passport Card Personalization and Supply 2Attachment A: Notional DoS Concept of Operations

7Attachment B: Notional DHS Concept of Operations

13Attachment C: Data Format for Passport Card

16ATTACHMENT D: Acronyms and Definition of Terms

20Attachment E: Prime and Subcontractor Related Security Requirements

26Attachment F: Security Requirements for the Card Stock Production Facility

28ATTACHMENT G: PAST PERFORMANCE SURVEY

37ATTACHMENT H: Compliance Matrix

38Attachment I: Description of Pre-Award Solution Testing

38DoS Testing

40DHS Testing

Attachment A: Notional DoS Concept of Operations

Background

In response to the Western Hemisphere Travel Initiative requiring Passports at United States land and sea border crossings, the Department of State (DoS) will start issuing Passport Cards in CY 2008. The Passport Card will provide proof of citizenship and identity for U.S. citizens at Mexican and Canadian land and sea border crossings and provide interoperability with the DHS automated border-crossing identification system including programs such as NEXUS, SENTRI, and FAST.

To support the Passport Card issuance requirements, DoS must deploy a card issuance capability. DoS plans to support two types of card issuance: 1) centralized for most mailed-in applications, and 2) localized production at Passport Agencies to support regional volume, expedite and walk-in traffic issuance requests.

Passport Card Description as Described in Section C The Passport Card will be credit card sized, compatible with ISO 7810 ID-1 specifications and compliant with ICAO 9303 Part 3 Volume 1 recommendations for ID-1 Cards.

Complete Passport Card specifications and graphical concept representations are in Section J, Attachment C.

Issuing Passport Cards

The US Passport application form has been redesigned to allow citizens to apply for a Passport book, Passport Card or both using a single Passport application form. Citizens will apply for Passport Cards using the same application form currently used for traditional Passport books.

Application Processing

Passport Card applications will be processed as Passport applications are now. The major processing steps being: Image Capture, Image Review, Data Entry, Namecheck and Adjudication. Card application records will be kept as Passport application records are, including an electronic abstract of a citizen’s record, linked with the ICC number as described in Section J: Attachment C, being sent to DHS for use at border crossings for authentication and verification.

A high-level workflow model is portrayed in Figure A.1. Passport Card applications can be either mailed or submitted directly to a Passport Agency, or through an Acceptance Facility. Applications submitted to an Agency are adjudicated at the Agency and the Passport Card is produced and issued to the applicant. Applications mailed in or submitted through an Acceptance Facility are sent to a pre-processing facility where they are screened for completeness, partially digitized, cataloged, packaged and sent to a National Center or Passport Agency to be adjudicated and processed.

Figure A-1 - Passport Card Production Workflow Model

When a batch of applications arrives at a Passport Center, the digitized applications are entered into the Travel Document Issuance System (TDIS), and the applications packages are assigned to a Passport Specialist for processing. TDIS assists the Passport Specialist in adjudicating the applications: it records each transaction and it prepares the final approved record that is sent to a print queue for Passport and/or Passport Card personalization.

Passport Card Personalization

Printing the Passport Card (Passport Card production) will be a new process to accommodate the physical characteristics of the card. Most Passport Cards will be personalized centrally at the new DoS Print Center. Regional Passport Agencies will have limited decentralized Passport Card personalization capability.

Personalization Process

Passport Card applications approved during adjudication at Regional Passport Agencies and National Passport Centers are grouped into identifiable batches and put into a TDIS print queue for local personalization or into a TDIS-generated print record to be sent electronically over a secure network connection to the Arkansas Print Center (APC). The operations staff at APC (or Regional Passport Agency) will schedule “Passport Card Batch” card issuance. Batches will be released to the Issuance System for card issuance. The card issuance process will include:

· Passport Card personalization

· Physical assembly of “Batches” for distribution to a Quality Assurance Station

· Passport Card and delivery package coupling

Regional Passport Agency Issuance Facilities

The Passport Card Personalization Station will consist of a TDIS workstation and a Low to Mid Volume card printer/reader. Approved Passport Card Applications will be sent to the personalization queue that is accessible to a Passport Specialist at the Print Station.

Arkansas Print Center (APC)

The APC will be available to provide “personalization services” to all Regional Passport Agencies and National Passport Centers. The process will be patterned after the Centralized Passport Book Print process. The APC will have a fully redundant high-volume issuance system. The system will consist of at least two high volume Card Printers. Each Card Printer will be individually operated by a Passport Processing Employee. Approved Passport and Passport Card Applications will be grouped into “Batches” and scheduled for production.

Upon receipt of a batch of approved applications from Adjudication, the Passport Processing Employee will set-up the Issuance System to personalize the approved applications within the batch. When the Passport Processing Employee executes the personalization command, the card feeder will automatically place a card in the print mechanism and initiate the following process that will be repeated until each application in the Batch is processed:

· Retrieve application record

· Read the ICC number or Card number and write to the application data record

· Personalize the Passport Card using the application data record

· Automated Quality Assurance performed (optional)

· Automated Card Delivery performed (optional) Passport Card Inventory Control

DoS utilizes a highly secure physical and workflow environment for Passport book personalization. This includes a secure vault for storing Passport books and printing consumables/supplies. It also includes a secure printing room with limited physical access, and limited logical access to printing workstations, where authorized staff check books out, personalize books, and return unused book inventory. The TDIS systems tracks this inventory in real-time against each employee, and the Passport Agency will not allow any personalization staff to leave without a clean report of their book assignments. The control over blank Passport Card stock and issued Passport Cards will follow the same internal controls scenario as for Passport books.

Passport Card Quality Control

High Volume Personalization Capability (Centralized):

The Offeror may submit an automated QC function that performs the following printing and packaging process:

· Make available following data via Printer SDK, to enable TDIS verification for QC:

· Read and provide MRZ data

· Read and provide ICC number

· Verify that the information on the distribution package matches the information on the Passport Card (part of the Card Delivery verification system – match Card to TDIS record prior to printing/affixing mailing label)

· Match Passport Cards with Passport Books when both are being issued

· Secure the Passport Card and mailing envelope for mailing

Low to Mid Volume Personalization Capability (Decentralized):

The Quality Assurance Station will be equipped with a TDIS Workstation, an OCR Reader and an RFID Reader. Upon receipt of the bundled package, the Quality Assurance Specialist will:

· Read the MRZ and call up the TDIS record

· Read and validate the ICC number against the TDIS record

· Match the personal information on the Passport Card to the TDIS record

· Verify that the information on the distribution package matches the information on the Passport Card

· Match Passport Cards with Passport Books when both are being issued

· Secure the Passport Card and mailing envelop for mailing

Expected Passport Card Demand A recent survey commissioned by CA/PPT reports that the number of new Passport applications from those citizens who frequently cross U.S. land borders can be expected to be 4.5 to 6.5 million during the first two years of issuance. From this, CA/PPT anticipates initial demand of Passport Card applications to be approximately 5 million during the first two years of issuance. After the initial surge new Passport Card applications can be expected to level off to perhaps 1-to-2 million new applications in the fifth year and beyond. In the year replacement Passport Cards will start to be issued a steady-state level of 2-to-4 million Passport Cards produced per year can be expected.

Facilities The physical requirements for Passport Card printing devices can be found in Section C.7.2.

The Decentralized local Passport Agency environments are comprised of typical office space environments with secured Print Rooms for Passport Book personalization. It is expected that those rooms – or a similar addition to each Agency supporting Passport Card production, would be modified to accept the Passport Card equipment and supplies. Each Passport Agency has technicians dedicated to deploy hardware and would likely be trained to accommodate Passport Card printing as well. In most or all cases, the Agency will have more than one Passport Card printer for redundancy in case of service or outage.

The APC, originally designed to manage many Passport printer devices, will be expanded to accommodate larger high-volume Passport Card personalization equipment. Due to the high-volume requirements and complexity of these systems, it is expected that options for dedicated on-site support be available from the Offeror to support continuous operations.

Staff and shift requirements will be adjusted to handle higher initial Passport Card volume expectations – and be scaled back accordingly as volume settles to a longer-term sustained level. This will reduce the risk of over-deploying personalization equipment and physical resources up front – and also narrow the support focus for the Offeror to a relatively low number of sites and equipment.

Attachment B: Notional DHS Concept of Operations

Background

More than 85 percent of all entries to the U.S. occur at land border ports of entry (POEs). There are several individual land border POEs where the number of persons processed annually exceeds the total for all sea and air POEs combined. Travelers can enter land border POEs on foot, by car, bus, truck, or other forms of transportation (e.g., snowmobile and rail). Vehicle lanes are usually segregated for the different transportation modes (e.g., for pre-screened travelers enrolled in trusted traveler programs, vehicles, buses, and/or truck/cargo). Due to the volume of entries at land borders, a major challenge facing the CBP Officers that are involved in the inspections process is the quick and accurate processing of travelers seeking to enter the U.S. Currently at a land border POE, there are numerous valid documents in thousands of different formats that a traveler can use to request admission to the U.S. Recognizing each document, determining its validity, finding the necessary information to determine admissibility, and using it in the inspection of a traveler can increase processing time required to admit a traveler into the U.S.

There is a marked difference between an inspection conducted at an air or sea POE and the inspection conducted at a land border POE. Because of their varied statuses, divergent points of origin, unfamiliarity with requirements and regulations, and the greater potential risk to the U.S., most applicants for admission at seaports and airports receive a more comprehensive inspection that includes pre-screening via advance information available through the carriers. In contrast, the great majority of persons arriving at land border POEs are residents of the border area who cross frequently and are familiar with requirements concerning their entry into the U.S. and receive an inspection that currently includes more limited data systems checks due to the considerations of traffic flow and the unavailability of advance information (except for those enrolled in trusted traveler programs). The vast majority of border traffic is made up of U.S. citizens and permanent residents who leave and reenter the U.S. multiple times daily, visa-exempt aliens who make multiple entries throughout the course of a year, and aliens who hold non-immigrant visas or border crossing cards and commute back and forth daily or weekly from Canada or Mexico.

Under WHTI, the issuance of a new travel document for U.S. Citizens, the RFID enabled Passport Card, will facilitate travel by reducing processing time for legitimate carriers of the card. This card will be issued by the Department of State. RFID Passport Cards will provide automated capabilities for Officers to determine the identity and citizenship, as well as the admissibility of travelers entering the United States, with the goal of expediting the inspection process at Vehicle Primary and at sea ports of entry.

Current Land Border POE Operational Challenges

Current operational challenges for the CBP Officer at land border POEs include the following:

· CBP Officers must perform a rapid inspection at Primary, typically with no advanced information in either paper or electronic formats (excluding trusted traveler programs).

· CBP Officers must perform both traveler and vehicle primary inspections in about 60 seconds, frequently requiring the inspection of multiple travelers entering the U.S. in a single vehicle. (Average of 3 travelers per vehicle)

· While about 40% of current traveler data is being queried at Vehicle entry, the current Vehicle Primary application was designed primarily to capture data on the vehicle, and to refer vehicles/travelers for secondary inspection.

Vehicle Entry

The entry process takes place at designated entry points, specifically at inspection booths located at land border POE vehicle lanes or during secondary inspection. Inspections are composed of both primary and secondary inspections. Primary inspections are required of all commercial, vehicular, and pedestrian traffic; secondary inspections are more detailed and are performed upon referral.

At vehicle Primary, vehicle license plate information is captured, recorded, and queried using the Treasury Enforcement Communication System (TECS). License Plate Readers (LPRs) are installed at the majority of the land border POEs and designed to automatically capture and transmit license plate data to TECS. In the event that a land border POE is not equipped with LPRs, or an LPR misreads the license plate, the Officer must manually enter license plate information. Pre-positioned antenna detect the presence of RFID enabled travel documents such as Passport Cards and transmit the occurrence to TECS where data about the traveler is retrieved, collected, queried, and distributed to the CBP Lane Officer.

Travelers in vehicles are required to:

· Present identity and citizenship and admissibility related travel documentation.

· Declare the intent and purpose of travel.

· Make an oral customs declaration for any merchandise.

CBP Officers review identity and citizenship and admissibility travel documents presented by the travelers, confirm the citizenship of the travelers, conduct an interview of each traveler to elicit the necessary information to make an admission determination and to determine compliance with immigration, customs, and other laws, and perform an inspection of the vehicle. The Officer must then make a determination whether the vehicle and its occupants should be admitted to the U.S. or referred to Secondary for further processing.

For travelers approaching the vehicle primary inspection the Primary RFID enabled Passport Cards will be read automatically, passively and remotely before the vehicle reaches the inspection booth, with minimal participation from travelers. The initial read of a RFID enabled Passport Card signal will be recorded as a “reported admission.” The system will automatically associate all travel card data with the license plate data captured as the vehicle approaches. Upon capture of the data, biographic queries will automatically be performed based on the persons to whom the Passport Cards were issued and the results of the queries will be available for display to the CBP Officer, along with any ATS/L risk score. Additionally, the CBP Officer may access the crossing history for both travelers and vehicles.

To expedite the inspection process, as the vehicle approaches the primary booth, the traveler data for all RFID-enabled scanned Passport Cards associated with a vehicle will be displayed on the CBP Officer’s screen for that lane, sorted in priority order of importance based on the results of the watch list queries. Any non-prioritized traveler data will be displayed in alphabetical order. The application will support up to 15 travelers per vehicle. Information on vehicles in queue may be displayed on the primary screen (based on the configuration of the vehicle entry lane and the location of the LPR). Such advance notification to CBP Officers would enable the highlighting of vehicles of potential interest and serve to enhance POE security, and to facilitate the processing of legitimate travelers.

Based upon the results of the advance information presented and the overall inspection of the vehicle and traveler(s), the vehicle and traveler(s) will either be released or referred to Secondary for a more detailed inspection and appropriate action.

Vehicle Entry Process under WHTI

Under WHTI, the infrastructure at land POEs will have to be upgraded to support the use of the Gen 2 RFID Passport Card and other RFID-enabled travel documents as they are issued. This upgrade will involve several modifications. First, Gen 2 readers will have to be acquired for every inbound vehicle primary lane. These Gen 2 readers must be backwards compatible with Gen 1 RFID cards to ensure that the cards of travelers enrolled in the Customs Trusted Traveler Program (NEXUS, SENTRI and FAST systems) will continue to be supported at vehicle primary. Two Gen 2 readers will be placed in each inbound vehicle primary lane. The first reader will enable the pre-read of RFID cards before the vehicle arrives at the inspection booth. The second reader will be placed at the inspection booth to ensure that the CBP Officer can read any card(s) that were not detected at pre-read staging.

Once land POEs are enabled with technology to read the RFID Passport Card, the actual arrival of a vehicle at vehicle primary will be similar to the current process. As a vehicle approaches the Inspection booth, it will be required to pause at the stop sign located in front of the booth. When stopped, the pre-read of RFID enabled cards will occur. CBP anticipates that there will be a maximum of 15 cards in a vehicle (this number will support the number of travelers found in a larger van). Vehicles will remain stopped at the stop sign until the CPB Officer in the booth waves them forward. Depending on the traffic at a POE when the vehicle approaches a stop sign, CBP anticipates that a vehicle will be traveling no faster than 10 miles per hour when passing the RFID card pre-readers.

Figure B.1 Land POE Entry Process

Implementation of the Passport Card solution will enable three modes of cross-border travel, depending on the document held by the traveler and the travel privileges associated with that individual. The entry processes associated with the three different modes are depicted in Figure B.1.

Standard

· All travelers holding standard travel documents (e.g., passports) use the standard mode.

· CBP Officers process travelers at primary inspection by visually examining their travel documents or swiping MRZ-enabled documents. Additional checks are performed at primary or the traveler is referred to secondary inspection.

Facilitated

· U.S. citizens holding an RFID-enabled Passport Card without Trusted Traveler privileges cross the land border in this mode.

· CBP Officers process travelers based on a remote read of the Passport Card to pre-position traveler information on Officers’ screens to facilitate inspection and travel. RFID technology enables pre-positioning of the data and is not intended to change the current thoroughness of the inspections process.

Trusted Traveler

· U.S. citizens holding an RFID-enabled Trusted Traveler card (NEXUS and SENTRI) cross the land border in the express entry mode.

· CBP Officers process travelers based on a remote read of the Trusted Traveler Card to enable expedited verification of citizenship that facilitates rapid travel. TECS queries will be run to ensure that no changes have occurred to change the traveler’s Trusted Traveler status.

Entry Process at Sea Ports of Entry under WHTI

Under current processing, the arrival of a traveler at a U.S. seaport of entry mirrors the arrival of a traveler at a U.S. airport of entry. Upon arrival of a commercial ship, CBP will have already performed pre-arrival processing of the arriving travelers by using the ship’s manifest. At seaport arrival, travelers line up either on the ship or in the terminal, just as they would in an airport, to be inspected by a CPB Officer. Because of the availability of the ship’s manifest and the orderly process in which arrival is done at a U.S. seaport of entry, the use of RFID technology is not cost effective. Therefore, in the seaport arrival process, CBP Officers will continue to process travelers by swiping the MRZ portion of the traveler’s document.

Summary of Benefits

The deployment of RFID enabled cards provides the following benefits:

· Identification and processing of U.S. citizens is facilitated for bearers of the Passport Card that is vetted using the same strict scrutiny for book passports.

· The software application at primary inspection is traveler-centric rather than solely vehicle-centric at the land border ports of entry. It provides additional necessary information in real-time for use by the CBP officer to make admissibility determinations.

· Additional real-time data for use during vehicle entry inspection will support the identification, determination of citizenship and possible inadmissibility of travelers seeking to enter the U.S.

· Additional enforcement tools to the CBP Officer, including the performance of an automated watch list check upon a RFID Passport Card read. Each travel document read recorded as a potential entry event to be used in conjunction with other data systems to provide a more complete picture of border crossing activity.

· The additional information provided to CBP Officers to identify travelers attempting to enter the United States using counterfeit or altered travel documents or imposters using valid travel documents should be detained and apprehended for law enforcement purposes.

Attachment C: Data Format for Passport Card Passport Card ICC Data Schema

The unique identifier of each card to be electronically written shall be fixed by the manufacturer and shall comply with EPCglobal Tag Data Standards Version 1.3.

The GID-96 is a 96-bit construct that is autonomous of any particular identity scheme.

Class Serial Number

(Binary

Value) 268,435,456 (Decimal

Capacity) 16,777,216

(Decimal

Capacity) 68,719,476,736 (Decimal Capacity)

The Passport Card ICC number using the GID-96 data scheme would consist of the following information elements and corresponding values:

· Header: [Binary value indicating that GID-96 data schema is being used.]

· General Manager Number: [Reserved for future use]

· Object Class: [Reserved for future use]

· Serial Number Code/Serial Number: a unique number from one to sixty-eight billion plus assigned to each Passport Card manufactured.

Department of Homeland Security (DHS) requests that the value in the Reserved for Future Use (RFU) fields, General Manager Number and the Object Class, be initialized to zeros (0). DHS will work with the Offeror and either the International Organization for Standardization (ISO) or EPCglobal so that the range of numbers used will uniquely identify the DoS Passport Card. DHS’s RFID equipment will be designed to filter all other Gen 2 RFID numbers from operational needs. DHS requests Offerors to suggest a logical and economical solution for the numbering range that will be used to uniquely identify the DoS Passport Card.

Passport Card Layout

This defines the contents and data format for the Passport Card. The Passport Card is formatted according to specifications for TD-1 size travel documents, as described in ICAO Document 9303, Part 3, Volume 1. The card contains both eye readable and machine readable information. For machine reading, information corresponding to personal data is printed in the Machine Readable Zone (MRZ), which is the 23 mm high blank area on the card lower back.

Figure 1: Front of Card artwork, showing tactile Great Seal and OVD Eagle/Shield security feature locations

Figure 2: Card front background color guide

Figure 3: Card back artwork, showing “PASSsystem” (in color shifting ink) location and which will include a unique preprinted card number and 3 of 9 1D bar code, and room for the MRZ.

Figure 4: Card back background color guide

Figure 5: an example of the card front, personalized

Figure 6: an example of the card back, personalized

ATTACHMENT D: Acronyms and Definition of Terms

ACRONYMS

ANSI

American National Standards Institute

APC

Arkansas Passport Center

ASTM

American Society for Testing and Materials

BCC

Border Crossing Card

BPC

Book Print Center

BVS

Biometric Verification Station

CA

Consular Affairs

CBP

Customs and Border Protection

CCTV

Close Circuit Television

CLINS

Contract Line Item Numbers

CVR

Constant Variation Ratio

DHS

Department of Homeland Security

DoS

Department of State

DS

Diplomatic Security

EPC

Electronic Product Code

FAR

Federal Acquisition Regulation

FAST

Free and Secure Trade Program

FFP

Firm Fixed Price

GID

General Identifier

IAW

In Accordance With

ICAO

International Civil Aviation Organization

ICC

Integrated Contactless Circuit

IEC

International Electrotechnical Commission

INCITS

International Committee for Information Technology Standards

IRTPA

International Reform and Terrorism Prevention Act 2004

ISO

International Standards Organization

LPR

License Plate Reader

MS

Microsoft

MRZ

Machine Readable Zone

NEXUS

A joint customs and immigration program for trusted travelers that both the Canadian and US Governments have implemented.

OCR

Optical Character Recognition

OVD

Optically Variable Device

PASS

People Access Security Service

PCS

Print Contrast Signal

PM

Preventative Maintenance

POE

Port of Entry

QA

Quality Assurance

RF

Radio Frequency

RFI

Request for Information

RFID

Radio Frequency Identification

RFP

Request for Proposal

RM

Remedial Maintenance

SDK

Software Development Kit

SENTRI

Secure Electronic Network for Travelers’ Rapid Inspection

TD

Travel Document

TDIS

Travel Document Issuance System

TECS

Treasury Enforcement Communication System T&M

Time and Materials

USB

Universal Serial Bus

USPS

United States Postal Service

UV

Ultra Violet

VIZ

Visual Inspection Zone

WHTI

Western Hemisphere Travel Initiative

DEFINITION OF TERMS

Card Stock: A TD-1 size material that is input into a personalization printer to produce a Passport Card.

Optional: A term that indicates items, features or services that the Offeror has the choice to bid.

Passport Card: A TD-1 size document bearing information about the holder.

Passport Card Personalization Unit for a Centralized (High Volume) Print: An integrated solution that facilitates the issuance of a Passport Card at a centralized print facility to produce large volumes of Passport Cards as described in section J: Attachment A: Notional DoS Concept of Operations. The solution will consist of a printer that personalizes card stock to produce a Passport Card. The solution can include any additional equipment or capabilities that the Offeror believes would further facilitate the efficient and secure issuance of the Passport Card at a centralized print facility including inventory control, quality control, and Passport Card delivery. The Card Personalization Unit for a centralized (high volume) print facility must integrate into the current Passport environment.

Passport Card Personalization Unit for a Local (Low to Mid Volume) Issuance Agency: An integrated solution that facilitates the issuance of a Passport Card at a local (Low to Mid Volume) issuance agency as described in Section J, Attachment A: Notional DoS Concept of Operations. The solution will consist of a printer that personalizes card stock to produce a Passport Card. The solution can include any additional equipment or capabilities that the Offeror believes would further facilitate the efficient and secure issuance of the Passport Card at a local issuance agency. The Card Personalization Unit for a local (Low to Mid Volume) issuance agency must integrate into the current Passport environment.

Passport Card Personalization: A process in which a printer shall add specific applicant data on card stock that has been preprinted with artwork. For additional information, see Section J: Attachment C, Data Format for Passport Card.

Mandatory: A term that indicates items or services the Offeror must bid.

Attachment E: Prime and Subcontractor Related Security Requirements

This contract does not require access to U.S. Government classified information. However, it does require diligence on the part of Offerors to provide adequate and appropriate controls over the security of the production facilities that will produce the Passport Card Stock that will be manufactured under the terms of the contract as well as the employees who will work in areas of production, inventory control, shipping, quality control, distribution and accounting for products and components in the aforementioned areas.

The Bureau of Diplomatic Security (DS), U.S. Department of State, reserve the right and authority to conduct periodic inspections of contractor facilities and to perform background investigations on the company and its management in terms of its affiliations with persons or organizations that are inimical to the security interests of the United States, as well as background investigations of company employees and inspection of contractor facilities that are necessary to ensure proper compliance with the terms of the contract. The particular area of security interest under this contract relates to the manufacturing facilities and its employees who will be involved in the fabrication of offered inlays and/or the fabrication of those inlays into the offered Passport Card Stock material. Those facilities and employees require security investigations and inspections. Specifically, the USG is interested in the security of facilities and employees working at production facilities where Passport Card Stock are assembled. It is not the intention of the DS to monitor and inspect the facilities and employees of RFID chip and antenna suppliers or inlay substrate providers that will provide commercially offered chip and antenna components and inlay substrates to fabricators of the Passport Card Stock. It is expected that chip, antenna, adhesive, reader, and inlay substrate providers will provide proper security controls and accountability of their product and components in terms of accepted industry standards for those products and components.

All security requirements apply to the prime contractor and any sub-contractors that are involved in the production/fabrication of offered Passport Card Stock.

The successful firm(s) will be required to meet the following security specifications:

I. U.S. FIRMS

A. Facility Security Requirements for U.S. Firms

(l) A U.S. firm which possesses a Secret facility security clearance issued by the Defense Security Service (DSS) in accordance with the National Industrial Security Program Operating Manual (NISPOM) meets the security requirements for the contractor facilities described above.

(2) A U.S. firm which does not possess a Secret facility security clearance issued by DSS will be required to comply with the following:

a) The contractor must be organized and existing under the laws of any of the fifty states, the District of Columbia, or Puerto Rico, and be located in the U.S. and its territorial areas or possessions.

b) The contractor must have a reputation for integrity and lawful conduct in its business dealings. The contractor and its key managers must not be barred from participating in U.S. Government contracts.

c) The contractor shall provide appropriate information to DS to enable DS to conduct a Facility Corporate Check.

d) The contractor must not be under foreign ownership, control or influence (FOCI) to such a degree that contract performance would be inconsistent with the national interest. The contractor shall complete a SF 328, Certificate Pertaining to Foreign Interests, so DS can evaluate any Foreign Ownership, Control or Influence (FOCI).

e) Specifically designated key management officials will be required to complete Standard Forms 85P and 85PS and appropriate fingerprint cards so DS can conduct a Moderate Risk Public Trust (MRPT) and credit check. Personal interviews of the individuals will also be conducted if deemed necessary by the Bureau of Diplomatic Security. The officials must favorably pass the MRPT and be determined eligible for contract award.

f) If the contractor is part of a multiple facility organization, the home office facility must meet the above security requirements for contractor facilities.

g) If the contractor is part of a parent-subsidiary relationship, the parent and subsidiary must meet the above security requirements for contractor facilities, unless DS determines excluding the parent from this process is consistent with the National interest.

B. Personnel security investigations of contractor personnel (other than key management officials) employed by U.S. Firms Following are personnel security investigative requirements for contractor personnel who are involved in the:

(1) Management, design, production, spoilage, control and distribution of card material

(2) Enforcement of the security plan for ensuring secure manufacturing, storage and shipment of cards

a) Contractor personnel who possess Secret personnel security clearances issued by the Defense Security Service (DSS) meet this requirement.

b) Contractor personnel who do not possess Secret security clearances issued by the Defense Security Service (DSS) must be approved by Diplomatic Security (DS) prior to contract performance. They will be required to submit the following completed documentation for each contractor employee. DS reserves the right and authority to conduct any additional investigations as they deem necessary to determine eligibility for contract performance

· Standard Form 85P (Questionnaire for Public Trust Positions)

· Standard Form 85P-S (Supplemental Questionnaire for Selected Positions)

· FD-258 Fingerprint cards (two each, per person) (provided by DOS)

· DS-4002 (Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act) (provided by DS)

Prior to assignment to this contract, the contractor must contact Ms. Glenn Chilton, DS/IS/IND, 571-345-3021 and provide specific employee information. The information will be used to establish a link to the Electronic Questionnaires for Investigations Processing (eQIP) website for access. Once the link is established, the employee will fill out the SF-85P and SF-85PS online and submit. The employee will also need to print out the required release forms, fill them out, sign and date and submit to the company Facility Security Officer (FSO) along with a signed DS-4002 (Disclosure and Authorization Pertaining to Consumer Reports) and two (2) FD-258 Fingerprint cards. These forms and a request letter on company letterhead should be forwarded to the Industrial Security Division, Bureau of Diplomatic Security, 1801 North Lynn Street, SA-20, 13th Floor, Rosslyn, VA 22209-2008. The US Postal Service should not be utilized to send any of this information to DS/IS/IND.

Upon receipt of the investigative paperwork, DS will conduct a background check, provided the individual is a U.S. citizen. A personal interview will also be conducted if deemed necessary by DS. Those personnel who successfully pass this check will be authorized contract performance while their MRPTs are pending. Those who do not pass the preliminary check will not be approved for performance until their MRPT is favorably adjudicated. Non-U.S. and dual national citizens are not authorized for contract assignment until the MRPT is completed and favorably adjudicated by DS/SI/PSS, unless an exception is granted by DS/IS/IND. Additionally, non-U.S. citizens who do not have Social Security Numbers will have to submit hardcopies of the SF-85P and SF-85PS, as they cannot access eQIP without a Social Security Number.

Approvals granted by DS are valid for ten years. All personnel performing on the contract requiring such approval will need to re-submit necessary paperwork 30 days prior to the expiration date of the approval for continuous uninterrupted performance on the contract. At this time, the contractor will be required to submit appropriate documentation to allow DS to determine continued eligibility for contract performance. An unfavorable result of this check may require the contractor employee to be removed from their position pending re-adjudication of the approval.

DS’s determination of eligibility or ineligibility for contract performance will be provided to the Contracting Officer’s Representative and Facility Security Officer. If an unfavorable determination is made, the contractor employee will not be authorized to perform on the contract.

II. FOREIGN FIRMS

A. Facility Security Requirements for Foreign Firms

(l) A foreign firm must not be under foreign ownership, control or influence (FOCI) by another foreign entity to such a degree that contract performance would be inconsistent with the U.S. Government's National interest. Foreign firms must execute forms similar to the U.S. Government's Certificate Pertaining to Foreign Interests, SF 328, so the U.S. Government can evaluate any foreign ownership, control or influence.

(2) A foreign firm incorporated and operating in a country with which the U.S. has an industrial security agreement and which possesses a facility security clearance issued by their parent government meets the facility security requirements. This facility security clearance must be certified to the U.S. Government by the foreign government. The U.S. government also reserves the right to conduct other appropriate local checks consistent with U.S. national interest.

(3) Foreign firms will be subjected to, as a minimum, the following investigative inquiries by the American Embassy located in the host country:

a) Specifically designated key management officials will be required to complete the following to permit appropriate background investigations as deemed necessary by DS:

· Completed Standard Form 85P - (Questionnaire for Public Trust Positions)

· Completed Standard Form 85P-S - (Supplemental Questionnaire for Selected Positions)

· FD-258 Fingerprint cards (two each, per person) - (provided by DS)

· DS-4002 (Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act) (provided by DS)

b) A personal interview by the Regional Security Officer (RSO) or Post Security Officer (PSO)

c) Appropriate host government and post records checks

d) Local police checks

e) Verification of personal data

f) Verification of educational and professional qualifications or trade certification or accreditation

g) Assessment of performance, reliability and integrity by checking with previous customers and identified references

h) Determination of any pending legal actions against the contractor

(4) The contractor must have a reputation for integrity and lawful conduct in its business dealings. The contractor and its key managers must not be barred from participating in its Government contracts.

(5) Additionally, the U.S. Government reserves the right to request that the contractor's government provide a security assurance of the firm.

B. Personnel security investigations of contractor personnel (other than key management officials) employed by foreign firms

(l) Following are personnel security investigative requirements for foreign national contractor employees assigned to this contract, who are involved in the:

a) Management, design, production, control and distribution of Passport Card Stock; and

b) Enforcement of the security plan for ensuring secure manufacture, storage and shipment of materials

Personnel will be required to complete the following forms and forward to DS/IND:

· Standard Form 85P (Questionnaire for Public Trust Positions)

· Standard Form 85P-S (Supplemental Questionnaire for Selected Positions)

· FD-258 Fingerprint cards (two each, per person) (provided by DOS)

· DS-4002 (Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act) (provided by DS)

The RSO reserves the right and the authority to conduct the following checks:

· A personal interview by the RSO or PSO

· Appropriate host government and post records checks

· Verification of personal data

· Foreign government records of individuals who have an affiliation with subversive activities

· Verification of educational and professional qualifications or trade certification or accreditation

· Assessment of performance and reliability by checking with previous employers and identified references

· A credit check

· A review of records of appropriate agencies at the U.S. Embassy (RSO, LEGATT, DEA, Customs, MLCO)

Attachment F: Security Requirements for the Card Stock Production Facility The Contractor shall provide a secure production facility for the fabrication, storage and transport of the offered U.S. Passport Card Stock. The facility must meet the following minimum requirements that will be verified by preliminary and ongoing site inspections by the Bureau of Diplomatic Security (DS), U.S. Department of State.

· The Facility shall have uniformed guard(s) on duty, twenty-four (24) hours a day, seven (7) days a week.

· The facility shall have duress alarms strategically placed (including vaults) throughout the facility along with passive infrared motion sensors providing intrusion detection capability throughout the facility. All doors and windows will be alarmed with balanced magnetic switch contacts and monitored 24/7 by an accredited local alarm company.

· The facility shall provide 24-hour automated access control to all secure production and storage areas. Preference is for electronic, automated access control mechanisms that control and record access to secure areas by entry location and time periods. Procedures shall be in place so all access attempts are monitored, and rejected attempts are recorded and investigated to determine the reasons for unauthorized access attempts to a restricted area.

· There shall be a system and entry design in place, which only admits authorized employees to the restricted production and storage areas.

· There shall be adequate color closed circuit TV (CCTV) cameras located inside and outside the facility, recording on a continual 24/7 basis. Full perimeter CCTV coverage is required, to include all entry/exit gates, and all perimeter entry/exit doors and loading docks. All videotapes/hard drives must be retained for a minimum of three (3) months. Digital Video Recording (DVR) devices are preferred over conventional VCR CCTV recording.

· All visitors shall be required to provide picture identification and sign a visitor’s registry log prior to entry into the facility. Visitors must be escorted at all times by a cleared company employee.

· The Contractor shall ensure that visitors not associated with the Contractor will not be admitted to secure production or storage areas where the deliverables are being manufactured under the scope of this procurement without prior approval of the U.S. Department of State.

· No personal items (purses, lunches, coats, cell phones, pagers, laptops, etc.) will be allowed in the secure production and storage areas.

· DS reserves the right to periodically inspect the contractor production and storage facilities by on-site visits—announced or unannounced.

· The Offeror is responsible for submitting a comprehensive security plan to DS detailing exactly how it will meet all physical, procedural and industrial security requirements listed in this RFP prior to award of contract.

· In addition, the manufacturer’s security policy must address such items as:

· Trusted Physical working areas

· Material & asset identification

· Secure Storage

· Secure site information system

· Access control & password management

· Information & material protection and scrap management

· Safe transport of all goods and materials

· Trusted human resource management

ATTACHMENT G: PAST PERFORMANCE SURVEY

PAST PERFORMACE SURVEY

CONTRACT INFORMATION

· Contractor:

· Contract Number:

· Type of Contract: (check all that apply) i.

( ) Negotiated ( ) Sealed Bidding

ii. ( ) Competitive ( ) Non-Competitive iii.

( ) Firm-Fixed-Price ( ) Cost-Plus-Fixed-Fee

( ) Time-and-Materials ( ) Labor Hour

( ) Indefinite Quantity ( ) Requirements

Other: ______________________________

· Please complete the following:

Period or Performance: ______________ to ________________

Initial Contract Value:

Current (or Completed) Contract Value

· Brief description of requirement:

· Complexity of effort:

( ) Difficult ( ) Routine

Please provide the following information (to assist us in tracking responses received and resolving any conflicts in the evaluation process if necessary):

Name of Evaluator: ______________________________________

Telephone Number: ______________________________________

Facsimile Number: ______________________________________

Organization/Office Symbol: ______________________________

Mailing Address: ________________________________________

Position Title/Grade: _____________________________________

Length of involvement with contract: ________________________

Degree or extent of involvement with contract: ________________

Thank you in advance for completing this survey. THIS INFORMATION WILL BE PROTECTED IN ACCORDANCE WITH FAR 15.1004 (e).

SCORING CRITERIA

EXCEPTIONAL – Indicates the Contractor’s performance within the area of evaluation clearly and consistently significantly exceeds contractual requirements.

GOOD - Indicates the Contractor’s performance within the area of evaluation clearly and consistently exceeds contractual requirements

ACCEPTABLE – Indicates no problems in area of evaluation or has only minor problems for which solutions were satisfactory.

MARGINAL – Indicates problems in area of evaluation for which solutions were marginally satisfactory.

UNACCEPTABLE – Indicates serious problems in the evaluation area. The Contractor is/was in danger of being unable to satisfy contractual requirements and timely recovery is not likely or did not occur.

I. QUALITY OF PRODUCT/SERVICE

1a.

Quality and reliability of delivered equipment

Please circle the appropriate rating below or check if N/A

(a) Exceptional

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable

Response: [

Remarks:

1b. Quality of expendable supplies and materials

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

1c.

Quality and timeliness of maintenance services performed

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

1d. Quality of technical support provided

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

II. TIMELINESS OF PERFORMANCE

2a.

Ability of Contractor to deliver equipment according to delivery schedule

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

2b.

Ability of Contractor to provide sustained on-time delivery of expendable supplies and materials.

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

2c.

Responsiveness and flexibility in reacting to changes.

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

2d.

Responsiveness/capability to meet surge/short term requirements

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

III. PRICE/COST CONTROL

3a.

Quality, completeness, and accuracy of price/cost proposals

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

3b. Ability to process contract changes at reasonable cost.

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

3c.

Ability to perform within negotiated costs/prices

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

3d.

Accuracy and completeness of vouchers/invoices

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

IV. BUSINESS RELATIONS

4a.

Ability to effectively manage contract

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

4b.

Ability to protect, account for, and securely deliver controlled equipment, supplies and materials.

(b) Very Good

(c) Satisfactory

(d) Marginal (e) Unsatisfactory (f) Not Applicable Response: [

Remarks:

4c.

Ability to choose and mange…