SOW FINAL DRAFT.docx

CUI

STATEMENT OF WORK (SOW)

1. Contracting Officer’s Representative (COR).

a. Primary COR. See Defense Information Technology Contracting Organization (DITCO) Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator See DITCO Additional Text G1 - Points of Contact

2. Contract or Task Order (TO) Title. Resident Engineer/Subject Matter Experts (RE/SMEs) in support of Defense Information Systems Agency (DISA) Voice Services Support of Unified Capabilities (UC), the Ribbon Soft Switch (SS) and Associated Network Components.

3. Background. The Department of Defense (DoD) has installed Wide-Area Network (WANSS) and Enterprise Session Controller (ESCs) at several locations worldwide to provide converged Voice and Video over Internet Protocol (VVoIP), Enterprise Voice over Internet Protocol (EVoIP) and Unified Capabilities (UC) across the DoD Information Networks (DoDIN). Through an ongoing effort, the network infrastructure of DoD’s global information grid (GIG) is converging to the Internet Protocol (IP) standard. Nearly all services and capabilities will leverage a common IP-based communications mode instead of the different and separate modes employed today. DoD’s UC initiative will deliver unified capabilities to warfighters across the globe, including voice, video, instant messaging, chat, unified messaging, presence, and conferencing. The transition to Everything over IP (EoIP) and the deployment of UC represent a substantial and complex transformation that requires the highest levels of expertise at both the military departments’ (MILDEPs’) Base/ Camp/ Post/ Station (B/C/P/S) and DISA’s operations and management centers. To help ensure success and efficient network operations capabilities, operations and engineering staff must have expertise in multiple technologies and disparate vendor products as well as extensive experience with deploying services over IP networks. Based on early observations, the timely and fully successful implementation and operation of this complex and transformational upgrade will demand additional expertise. Within the MILDEPs’ and DISA’s span of control, such expertise is either not present or already fully engaged. In lieu of placing expert resources at each major node in the network, placement at DISA’s central operations management centers would allow the most effective allocation, with the ability to leverage the shared talent and augmentation across all sites and pinpointed or dispatched to specific locations when urgently needed. In the end, these additional resources and the unique expertise they offer will bolster the operations and management of the network and expedite the expansion of new UC services across the DoD.

DISA’s Network Operations (NETOPS) construct aims to holistically manage these assets to provide end-to-end situational awareness and assure service flows in support of the Government’s requirements including specific, dedicated resources required to ensure NETOPS demands can be met.

4. Objectives: The objective is to ascertain direct, on-site resources for all technical aspects (network analysis, management, troubleshooting, optimization, and training activities) related to Ribbon products and their operational integration with other contractor products in the network to deploy a viable system end-to-end. The contractor shall assign two (2) Full-Time Equivalents (FTEs) REs/SMEs to DISA NETOPS Center-CONUS (DNC-C), Scott Air Force Base (AFB), Illinois (IL) to support the operations or engineering staff as a direct, on-site resource for all technical aspects (network analysis, management, troubleshooting, or training activities) related to Ribbon products and their operational integration with other vendor products in the network to deploy a viable system end-to-end. The primary objective of this effort is to perform engineering support services to maintain the Ribbon hardware and software at DISA. Travel may be required to Fort Meade, Maryland to update Lab environment.

5. Scope. Services provided shall include corrective and preventative maintenance, optimization of the operational configuration and support for Ribbon Multiservice Fixed and Mobile Solutions (MFSS) and WANSS equipment installed at the Government’s site.

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this SOW. Surge support over the life of the contract will not exceed 20% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to Federal Acquisition Regulation (FAR) 52.217-8.

6. Performance Requirements. The contractor shall provide two (2) full-time REs/SMEs to provide engineering assessments of all Ribbon SS hardware, software, protocols, and configurations to satisfy DISA requirements for Ribbon SS services. The REs/SMEs shall participate in program meetings and reviews. Support is required Monday through Friday, excluding holidays observed by the contractor’s company in the region and federal holidays. Upgrade and troubleshooting efforts that require after-hours assistance shall be performed with proper scheduling, when applicable. The weekly work schedule may be adjusted to account for after-hours support requirements maintaining a 40-hour work week. Outside of emergency recovery support, other support activities that require after-hours support shall be on an agreed-to basis. If vacation or training coverage is required, it may be covered remotely by other currently assigned REs/SMEs. The contractor shall provide RE/SME Tier 3 support engineers having:

· Ribbon training/certification.

· Knowledgeable on-loading Ribbon support patches.

· Intimate knowledge of existing DISA Backbone Network and installed equipment.

· Flexible service support approach, in collaboration with other DISA/contractor personnel, to support installed base, through resource sharing, travel, and cross coverage.

· Ribbon trained Tier 3 REs/SMEs to engage with DISA Tier 2 personnel.

· Ability to open Ribbon Service Request (SR) support tickets with Ribbon Support Engineers for problem support.

6.1 Task 1 – Task Management.

6.1.1 Subtask 1. The contractor shall provide a Remote Coverage RE/SME Plan within fifteen (15) business days of task order award. The remote coverage plan shall address how the contractor shall satisfy the key requirements of each RE/SME position during any scheduled absences or gaps to ensure seamless support.

6.1.2 Subtask 2. Tasks performed by the contractor shall be reported by the contractor to the COR in a Weekly Activity Report (WAR). The report shall summarize activities and accomplishments; identify problems encountered or significant changes required; and outline plans for future activities. The contractor shall identify and track interdependencies and schedules for core projects.

6.1.3 Subtask 3. Tasks performed by the contractor shall be reported by the contractor in a Monthly Status Report (MSR). The report shall summarize activities and accomplishments; identifying any problem areas encountered or significant changes; and outline plans for future activities and associated costs.

6.1.4 Subtask 4. The contractor shall coordinate Ribbon Support resources including requirements for “reach-back” into Ribbon business units and other engineering expertise to resolve issues. Participate in DISA Electronic Voice Services (EVS) weekly meetings to identify, explain, and implement solutions to resolve risks, challenges, and make service improvements serving as a liaison for DISA EVS and Ribbon delivery. Upon completion of each “reach-back” to Ribbon business units, an after-action report is required to document the incident and solution.

6.1.5 Subtask 5. The contractor shall provide Travel Authorization Requests to the COR/ Alternate COR (ACOR) prior to any travel occurring for this requirement. The contractor shall provide Trip Reports for all travel to be delivered on the fifth business day following the completion of travel.

6.1.6 Subtask 6. Sub-contractor Management Plan. The contractor shall ensure that they have a successful prime/subcontractor relationship. The contractor shall provide a sub-contractor management plan (slides) and meeting with the Government to review the plan as part of the contract kick-off activities for this effort to demonstrate that a successful prime/subcontractor relationship will be achieved.

6.1.7 Subtask 7. Risk Register. The contractor shall ensure that all risks associated with this project are accurately captured, reported to the Government, and monitored so that the EVS government personnel are able to accurately track in the risk registry. Weekly, the risks’ statuses must be updated and include any additional new risks as they are identified.

6.1.8 Subtask 8. Transition-In (Phase In). The contractor shall develop and execute a Transition-in Plan that describes the procedures and tasks the contractor will execute to ensure its staff is available and on-site, ready to perform, no later than 30 calendar days after the Period of Performance (PoP) start date. All positions must be onboarded at start of the PoP. Fifty percent (50%) total staffing must be completed within two weeks of the start of the PoP and one hundred percent (100%) within thirty (30) calendar days of award.

6.1.9 Subtask 9. Transition-Out (Phase Out). A transition-out plan is required at least 90 calendar days prior to the end of the contract and developed. The contractor shall create a detailed Transition-out Plan describing the method of transferring responsibility of the SOW requirements. The Transition-out Plan will transition services from this contract to any follow-on contractor and/or Government team. The transition strategy shall provide for completing the transition of all services at the end of the existing contract's PoP. The contractor shall coordinate service transition with any follow-on contractor and/or Government team to prevent service disruption during the transition. The contractor’s Transition-out Plan shall:

The contractor shall meet with the Government no later than 120 calendar days before the end of the contract PoP to begin planning the transition strategy. The contractor shall provide a written Transition-out Plan within 90 calendar days prior to the end of contract PoP. If the Government notifies the contractor that it will not exercise an optional period, the contractor shall work with the Government to perform all transitions activities from the day of notification.

The contractor shall conduct a joint inventory with Government personnel of all Government Furnished Property. The contractor shall deliver to the Government COR a final inventory of all Government Furnished Property no later than 90 calendar days before the end of contract PoP. Refer to section 11 requirements.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer (KO); 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.2 Task 2. Sustainment Tasks

6.2.1 Subtask 1. The contractor support shall include remote and on-site activities. The contractor shall act as the liaison between Government operations personnel and contractor customer support, including the service account management team and engineering staff. After Action Reports shall be provided after each liaison coordination/interaction to document each situation and solution.

6.2.2 Subtask 2. The contractor shall provide on-going knowledge transfer and mentoring of Ribbon products to operations personnel (DISA and MILDEP) through various on-the-job activities such as one-on-one mentoring, real-time instruction, and product workshops. Support will also include configuration and operational best practices and guidance.

6.2.3 Subtask 3. The contractor shall customize the on-the-job training to satisfy the Government’s specific requirements, such as training manuals, that incorporate actual customer network configurations or general operations training for a particular network element.

6.2.4 Subtask 4. The contractor shall provide real-time, detailed status updates on issues impacting network components, including Ramp Status Reports.

6.2.5 Subtask 5. The contractor shall provide network change support for deployment-related hardware, software, or configuration events as part of the Weekly Status Report, which shall include:

· On-going Ribbon and related application upgrades and tech refreshes.

· Evaluating the potential impact of proposed scheduled upgrades and changes.

· Reviewing and making recommendations on implementation best practices and procedures.

· Collaborating with DISA personnel to assist in resolving Ribbon hardware, software, and configuration issues.

· Supporting scheduled and unscheduled activities and events.

6.2.6 Subtask 6. The contractor shall provide planning, designing, engineering, and operational subject matter expertise for the Ribbon-related products and software deployed within DISA’s EVS network. The contractor shall collaborate with EVS Tier II and Tier III to implement best practices, integration testing, and troubleshooting.

6.2.7 Subtask 7. The contractor shall provide technical, engineering, and program support to DISA and MILDEPs for the operation and maintenance of the Ribbon System.

Deliverables:

6.2.5 6.2.6, and 6.2.7

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.3 Task 3. Operations, Administration, Maintenance, and Provisioning (OAM&P) Tasks

6.3.1 Subtask 1. The contractor shall analyze, review, and recommend system and component configurations. The contractor’s optimization service shall include network improvement planning. This support includes the review and assessment of DISA’s EVS hardware and software deployments, as well as providing best practice recommendations and guidance for on-going improvement.

6.3.2 Subtask 2. The contractor shall work collaboratively with Government stakeholders and other DISA contractors to help in evaluating network traffic flow as it relates to EVS deployments. The contractor shall make recommendations for improvements based on findings.

6.3.3 Subtask 3. The contractor shall provide engineering and consultation services, to assist in evaluating current EVS deployments. The contractor shall provide on-going recommendations for improvement and assist with executing these improvements.

6.3.4 Subtask 4. The contractor shall test all deployment of new Ribbon related EVS hardware and software. Testing will take place in DISA provided test labs at Fort Meade, MD. The contractor shall develop and provide test plans including test results for these actions.

6.3.5 Subtask 5. As part of Ribbon services, the contractor shall provide high level and low-level design documentation, configuration documentation, guidance, and best practices that will optimize the services. These Optimization Services should be delivered to the Government via updated existing design documents to include configuration updates, guidance, and best practices to be implemented.

6.3.6 Subtask 6. The contractor shall provide on-going review and assessment of current Ribbon architecture, topology, operations, and network management. The contractor reviews shall be focused on the following:

· Analysis of impact of new requirements on the existing Ribbon infrastructure.

· Review of feature selection and configuration.

· Review of Ribbon security considerations providing best practices.

· Review of Ribbon Network Management tools and practices.

· Report describing the design with recommendations.

6.3.7 Subtask 7. The contractor shall ensure processes are in place to update configuration management data and maintain documentation for projects involving the Soft Switch Back Bone (SSBB) to ensure accuracy and completeness.

6.3.8 Subtask 8. The contractor shall demonstrate proper methods for customer self-service and global administrators to perform provisioning and configuring of the Voice Services network and end points, including network element facilities, services, and connections for end-to-end service delivery on operational networks.

6.3.9 Subtask 9. The contractor shall demonstrate how performance and capacity information is collected, what it represents, and how to interpret the data to proactively address network integrity and utilization. This should be delivered via the Ramp Status Reports for the systems.

6.3.10 Subtask 10. The contractor shall provide analysis, assessment, and configuration testing support of hardware and software.

6.3.11 Subtask 11. The contractor shall provide support to DISA and MILDEP personnel in installing patches and upgrades on the SSBB suite of equipment in accordance with the Information Assurance Vulnerability Alert directives issued by US Cyber Command (USCYBERCOM), In Accordance With (IAW) MILDEP and DISA program office directives.

Recommendations from 6.3.1, 6.3.2, 6.3.3, and 6.3.11, should be included in an Implementation Plan to the Government.

6.3.12 Subtask 12. The contractor shall monitor and evaluate the current software version on the infrastructure, and propose and design an upgrade path to maximize the available feature set and future capability, which shall include:

· Proactive Software Recommendation Reports.

· Software Upgrade Strategy Reports.

· Quarterly Reports and Reviews.

· Information Assurance Vulnerability Alerts (IAVAs)

6.3.13 Subtask 13. The contractor shall provide a capabilities review that includes support for planning, analysis, engineering, and subsequent deployment of approved hardware and software affecting the SSBB, as follows:

· Design Support

· Assist in integrating technical requirements and design goals into the overall SSBB design while transferring design knowledge to the customer’s team, which include:

· Design Reviews, focused on the following:

· Review of customer’s design requirements, priorities, and goals

· Analysis of impact of new requirements on infrastructure

· Review of architecture and topology

· Review of feature selection and configuration

· Review of security considerations and providing best practices

· Report describing the design with recommendations

· Providing ongoing incremental design and architectural consultation

· Provide ongoing information on design related Ribbon security alerts that may impact key collaboration products

· IP Voice Service Change Support

· Provide network change support for deployment-related hardware, software, or configuration events which include:

· On-going Ribbon and related application upgrades

· Evaluate the potential impact of proposed scheduled upgrades and changes

· Review and make recommendations on implementation best practices and procedures

· Coordinate with DISA personnel to assist in resolving Ribbon hardware, software and configuration issues

· Support will consist of scheduled and unscheduled activities

· Improvement Plan Support

· Provide continued focus on areas of potential improvement, which include:

· Quarterly Improvement Plans incorporating recommendations from assessments, operational support best practices and continuous learning services

· Documented improvement project plans

· Provide assistance implementing approved plans and optimization approaches

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.4 Task 4. Troubleshooting Tasks

6.4.1 Subtask 1. The contractor shall perform troubleshooting and work with the appropriate DISA or MILDEP operations and support centers to troubleshoot IP networks affecting the SSBB Ribbon components.

6.4.2 Subtask 2. The contractor shall diagnose and isolate faults and remedy Ribbon and equipment failures.

6.4.3 Subtask 3. The contractor shall assist with communication, consultation, coordination, escalation, and leadership to address major problems.

6.4.4 Subtask 4. As part of on-going troubleshooting and remediation efforts, the contractor shall provide input and feedback to DISA and contractor operations personnel so that Remedy tickets escalated from Tier II can be created and updated.

6.4.5 Subtask 5. The contractor shall monitor and support the network for problem identification, analysis, and resolution. This shall require interfacing with the DISA Tier II personnel, site (MILDEP) operators, the Government, network operations, and installation maintenance personnel.

6.4.6 Subtask 6. Support network problem identification, analysis, and resolution. This shall require interfacing with the DISA Tier II personnel, site (MILDEP) operators, the Government, network operations, and installation maintenance personnel.

6.4.7 Subtask 7. As part of on-going troubleshooting and remediation efforts, the contractor shall provide input and feedback to DISA and contractor operations personnel to assist in expeditious problem resolution. The contractor shall raise concerns and drive awareness to the proper DISA management team as needed.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.5 Task 5. Informal Training/Mentoring Tasks

6.5.1 Subtask 1. The contractor shall provide hands-on skills transfer to any Government stakeholder, military personnel, and contractor personnel and participate in on-going customer communications to include conference calls, voice and email traffic. These skills shall be transferred via Informal Hands-On training.

6.5.2 Subtask 2. The contractor shall transfer knowledge to the Government’s employees via hands-on technical network assistance. The knowledge transfer shall focus on the day-to-day activities, installation, and troubleshooting of Ribbon equipment. The knowledge transfer is intended to augment formal training.

6.5.3 Subtask 3. The contractor shall provide informal training in network surveillance, fault management, and troubleshooting network topology, including standard network configurations; security and protection schemes; signal flow; call flow; protocol inter-networking (where applicable); network expansion; new service integration; software upgrade planning; and implementation procedures. This training should include training materials specific to the task requirements of 6.5 Subtasks 1, 2, and 3.

6.5.4 Subtask 4. The contractor shall coordinate with the proper DISA personnel on requirements for knowledge transfer and mentoring on Ribbon solutions deployed.

6.5.5 Subtask 5. The contractor shall coordinate with Government or contractor personnel involved in the detection, diagnosis, and resolution of incidents or events on SSBB elements and equipment to assist in fault resolution.

6.5.6 Subtask 6. The contractor shall include informal technical update trainings on topics that are mutually agreed upon and relevant to Ribbon products and technologies.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

7. Performance Standards.

Contain required information 90% accurate/error free, and delivered on time.

Minimum Acceptable:

Contain required information, 85% accurate/error free, and delivered on time.

100% Inspection

95% of all survey respondents are Satisfied.

Minimum Acceptable:

90% of all survey respondents are Satisfied.

At least two (2) Government personnel must complete and return surveys for the results to have at least a 90% confidence factor with a 5% error rate.

Contain required information 90% accurate/error free, and delivered on time.

Minimum Acceptable:

Contain required information, 85% accurate/error free, and delivered on time.

100% Inspection

90% of all reviewed documentation is complete, on-time, and without errors.

Minimum Acceptable:

80% of all reviewed documentation is complete, on-time, and without errors.

Periodic Inspection

90% of all reviewed documentation is complete, on-time, and without errors.

Minimum Acceptable:

80% of all reviewed documentation is complete, on-time, and without errors.

Periodic Inspection

Within 24 hours 95% of all incidents are for action.

Minimum Acceptable:

Within 24 hours, 80% of all incidents are referred for action.

Random Sampling

100% pass rate of all new hardware and software tested in DISA Security Technical Implementation Guide (STIG) production environment.

Minimum Acceptable:

90% pass rate of all new hardware and software tested in DISA STIG production environment.

Periodic Inspection

90% of all reviewed documentation is complete, on-time, and without errors.

Minimum Acceptable:

80% of all reviewed documentation is complete, on-time, and without errors.

Periodic Inspection

Process should allow for 95% of configuration updates within the configuration management documentation.

Minimum Acceptable:

Process should allow for 90% of configuration updates within the configuration management documentation.

Periodic Inspection

95% of all reviewed documentation is complete, on-time, and without errors.

Minimum Acceptable:

85% of all reviewed documentation is complete, on-time, and without errors.

Random Sampling

Direct and resolve 99% of any detected incidents impacting SSBB and associated components.

Minimum Acceptable:

Same as Target Criteria.

Random Sampling

Contain one (1) monthly training session.

Minimum Acceptable:

Conduct one (1) quarterly training session.

Random Sampling

8. Place of Performance.

Mission Location: The contractor shall assign two (2) FTEs REs/SMEs to DISA Global Operations Center (DGOC), 5534 Pryor Drive, Scott AFB, IL 62225 with occasional travel to DISA Headquarters Lab, 6910 Cooper Ave, Fort Meade, Maryland, 20755.

Place of Performance: Alternative work sites allow for regular telework or remote work flexibilities. Regardless of where work is performed, the contractor shall ensure that work is completed effectively and that mission needs and requirements are met, without degradation of services. Also, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. The contractor shall propose on-site rates for all work performed at an alternative work site. Incidental charges incurred while working at an alternative work site (e.g., electricity, internet) are not allocable to the contract and shall not be billed to the Government.

Local travel to and around the mission location may be required throughout the PoP; this travel will not be reimbursed. Long distance travel within contiguous United States (CONUS) or outside of the contiguous United States (OCONUS) may be required to support the requirements of this SOW. Long distance travel within CONUS must be pre-approved in writing by the COR prior to the contractor incurring the cost in support of this contract.

NOTE 1: Some sites may have Contingency Of Operations (COOP) locations. When site is operationally relocated to a COOP location, contractor personnel shall also relocate. It is estimated that COOP will be executed on a quarterly basis for up to one week.

Secondary Place of Performance – Contingency Only. As determined by the COR, contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, Government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed Government facility. The contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the SOW. In the event the services are impacted, reduced, compromised, etc., the KO or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

9. Period of Performance.

The base PoP is July 15, 2026 to July 14, 2027

Option Year 1: July 15, 2027 – July 14, 2028 Option Year 2: July 15, 2028 – July 14, 2029 Option Year 3: July 15, 2029 – July 14, 2030 Option Year 4: July 15, 2030 – July 14, 2031

Recognized Federal Holidays: The contractor is not required to perform services on Federal Holidays (as specified on the U.S. Office of Personnel Management website), unless otherwise specified by the COR.

Unplanned Federal Government Closure: In the event an authorized official, by either executive or legislative order, declares Federal offices closed (treated as a holiday for pay and leave purposes), the order only applies to Federal employees (unless otherwise stated in the order).

10. Security Requirements.

This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point of Contracts providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this SOW must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

1. DISA End User Access Agreement, 11 February 2021

1. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

1. DISA Instruction 240-110-8, Information Security

1. DISA Instruction 240-110-36, Personnel Security

1. DISA Instruction 240-110-38, Industrial Security

1. DISA Instruction 240-110-43, Insider Threat Program

1. DISA Instruction 630-230-19, Cybersecurity

1. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

1. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

1. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

1. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24 February 2021

1. Security Executive Agent Directive 4, National Security Adjudicative Guidelines, 8 June 2017

1. DoDM 5400.07, Freedom of Information Act Program

1. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

1. DoD Instruction 8510.01, “Risk Management Framework for DoD Systems,” July 19, 2022

10.1 Facility Security Clearance. Work performed under this contract/order is up to the Secret level. Therefore, the company must have a final Secret Facility Clearance from the Defense Counterintelligence and Security Agency (DCSA) Facility Clearance Branch.

10.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by DCSA.

10.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

10.3 Investigation Requirements. All personnel requiring Top Secret and SCI access under this contract/order shall undergo a favorably adjudicated Tier 5 (T5) investigation (formerly known as a Single Scope Background Investigation (SSBI)) as a minimum requirement. Enrollment into Continuous Evaluation current within 5 years and reflected in Defense Information System for Security (DISS), would meet the requirement for a current Periodic Reinvestigation (PR).

10.3.1 All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for a current PR.

10.3.2 The contractor is required to have personnel cleared with an interim or final Top Secret or Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel should also have interim or final clearance Top Secret or Secret (as specified in the table located in section 11.2).

10.4 Visit Authorization. Visit requests shall be processed and verified through the DISS to Security Management Office (SMO) DKABAA10. (Include other DISS SMO codes as applicable. A complete list of DISA DISS SMO codes can be found at https://dod365.sharepoint-mil.us/Sites/DISA-Security/SitePages/Industrial-Security.aspx). DISS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the COR/ACOR specified in SOW Section 1.0.

*Prior coordination with the DISA COR should be made via email to ensure the Visit Authorization Letter (VAL)/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

10.4.1 VAR Package. VARs must be received via email and require pre-approval from the assigned DISA COR five business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed-up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

1. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

1. DISS verification of Visit Authorization by Security Manager

1. (See NOTE below) Contractor VAL signed by the contractor Facility Security Officer (FSO)

NOTE: In addition to submission to DISS, a VAL must be submitted to the COR and the VAL must contain the following information on company letterhead:

· Company name, address, telephone number, facility security clearance

· Commercial And Government Entity (CAGE) CODE

· Contract/Order Number

· Name, Social Security Number (SSN), date and place of birth, and citizenship of the employee intending to visit, email address, and phone number

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

· Name of COR/ACOR

· Dates or period the VAL is to be valid (i.e., Start date / End date)

10.4.2 VTN Package. The contractor FSO will forward a VTN letter to the DISA COR identified in the SOW TO/Sub for all employees leaving the contract/task order/subcontract.

10.4.2.1 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

1. Allegiance to the United States

1. Foreign Influence

1. Foreign Preference

1. Sexual Behavior

1. Personal Conduct

1. Financial Considerations

1. Alcohol Consumption

1. Drug Involvement and Substance Misuse

1. Psychological Conditions

1. Criminal Conduct

1. Handling Protected Information

1. Outside Activities

1. Use of Information Technology

Other actions:

• Incidents involving violence in the workplace or harassment.

• Misuse of time.

• Inspector General or General Counsel related inquiries.

• Failure to comply with security policies and procedures.

• Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

· Date contractor Common Access Card was collected

· Name of COR/ACOR

· Termination Date

· Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied.*

10.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-4039 or via mail at:

Defense Information Systems Agency

Defense Information Systems Agency

ATTN: J-16, Industrial Security

ATTN: J-16, Personnel Security

Command Building

Command Building

6910 Cooper Ave.

6910 Cooper Ave.

Fort Meade, MD 20755-7088

Fort Meade, MD 20755-7088

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at: To be completed at time of award.

Name:

Phone Number:

E-mail:

10.6 Information Security and other miscellaneous requirements.

10.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

10.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

10.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

10.6.4 The contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

10.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

10.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

10.6.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

10.6.5.3 If a contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the KO finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the KO can make such a request on behalf of the Government. Removal of the contractor employee shall not negatively impact contract performance.

10.6.6 Contractor personnel will generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government and contractor facility. Contractor personnel will have access to, generate, and handle classified material up to CONFIDENTIAL/ SECRET level only at the Government location (Ref: Block 8 Place of Performance on DD254) and listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 1, DoD Information Security Program: Overview, Classification, and Declassification; DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDM 5200.01, Vol.