Attachment B to

89243221CNE000020

08/06/2024

STATEMENT OF WORK

PERSONNEL SECURITY SUPPORT

Department of Energy

Idaho Operations Office

1. INTRODUCTION

Support is requested for implementation of the Department Of Energy Idaho Operations Office (DOE-ID) Personnel Security Program at the Idaho National Laboratory (INL). The program will be managed in accordance with applicable executive orders, federal regulations, and DOE policies, orders, and directives, under the direction of the DOE-ID Contracting Office Representative (COR) for personnel security and the DOE Security Division Director.

2. BACKGROUND

The INL reports to the DOE Office of Nuclear Energy, Science, and Technology and acts as the lead laboratory for nuclear energy research and development. In addition, scientific and technical work is performed in a number of other DOE areas, and for a number of other government agencies. Work in many of these areas can include classified information pertaining to the defense and security of the United States. Due to the classified nature of this work, personnel working for DOE-ID, DOE-ID contractors, subcontractors, consultants, and State agencies require access authorizations. It is the responsibility of personnel security to ensure that only trustworthy individuals receive or maintain access authorizations to classified materials, information, or facilities.

3. SCOPE OF WORK

At the time of contract award and during subsequent performance, the support services contractor (contractor) shall furnish qualified and skilled personnel to provide the required support services described in this Statement of Work (SOW). DOE-ID COR guidance is available at all times; however, the contractor is expected to work independently on program tasks. DOE-ID COR will provide oversight to ensure program tasks are completed and evaluate task execution against the performance measures. DOE-ID will provide office space, computers, copiers, software, and general office supplies. The contractors’ work area will be co-located with the Personnel Security Files. DOE-ID will maintain control and access to local and government databases, including classified investigative reports. The contractor will be expected to make recommendations regarding access authorizations, but DOE-ID will make final decisions. A “Q” clearance is required to access and process personnel security files in accordance with Defense Counterintelligence and Security Agency (DCSA) requirements.

The personnel security program work involves the processing, analyzing, adjudicating, and communicating with approximately 4,500 clearance holders or applicants, as well as about 440 in the Human Reliability Program. The backgrounds of applicants or incumbents may involve alcohol abuse or dependency, illegal drugs, sex perversion, unreliable and untrustworthy behavior, mental or emotional instability, or other behaviors that can leave someone in a position susceptible to coercion or blackmail. Recommendations made and actions taken by the contractors in these matters play a large part in determining whether an individual is eligible for a clearance.

4. STATEMENT OF WORK

The contractor is responsible for managing resources, costs, and conflicts associated with contractor personnel, and providing overall direction to contractor personnel. The contractor is responsible for providing the deliverables identified in Section 15 TASK DELIVERABLES and ensuring their quality and timeliness. Timeliness is critical in meeting overall program requirements, but quality must also be maintained. The contractor shall provide technical support and expertise in, but not limited to identified program tasks. DOE-ID personnel may perform any or all the tasks, particularly when there are any conflicts with the contractor performing the task.

4.1 ADJUDICATION

Eligibility for access authorization is predicated on individuals meeting personnel security guidelines. Using DOE Order 472.2, the criterion in 10 CFR 710, the Adjudicative Guidelines and Intelligence Reform and Terrorism Prevention Act (IRTPA) guidelines, and other national requirements as primary guidance, or subsequent approved revisions, the contractor shall provide the expertise necessary to make recommendations to DOE-ID officials regarding access approvals. The adjudication task includes numerous functions. Examples are listed below:

• Review and analyze investigative reports

• Identify and evaluate derogatory and mitigating information

• Prepare written Case Evaluation Sheets (CES)

• Prepare Letters of Interrogatory (LOI)

• Schedule and confirm Personnel Security Consultation (PSC) Status

• Conduct in-depth PSC Status

• Prepare written consultation (PSC) Status

• Schedule psychiatric evaluation appointments

• Prepare related correspondence

• Provide necessary case status and progress reports

• Provide recommendations appropriate to each case based on its own merit

• Take necessary actions based on DOE-ID concurrence or non-concurrence with contractor recommendations

The contractor will not adjudicate clearances where there may be a perceived or real conflict of interest (e.g., spouses, relatives, close friends, etc.).

4.2 INFORMATION MANAGEMENT

The contractor will provide expertise in the use of DOE-ID personnel security databases and information systems, such as Central Personnel Clearance Index (CPCI), Department of Energy Integrated Safeguards and Security System (eDISS), Clearance Action Tracking System (CATS), Credit Reporting System, and any others that relate to personnel security access authorizations for DOE or the INL. The information management task includes several functions, examples of which are listed below:

• Create and update database records

• Monitor clearance actions and status

• Prepare management, statistical, audit, reconciliation, and ad hoc reports

• Identify clearance holders due for reinvestigation

4.3 RECORDS MANAGEMENT

In accordance with applicable regulations, orders, and policies regarding the management of records, the contractor shall operate and maintain the personnel security files, both paper and electronic files in the possession of DOE-ID. Accurate documentation, marking, control, scanning documents for converting personnel security files or other security paper documents into PDF format, filing, protection, storage, retrieval and destruction of personnel security records are necessary for the successful completion of this task. Some personnel security records may be classified, but all others are treated as unclassified sensitive information, unless officially approved for release.

4.4 TRANSCRIPTION

For recorded Personnel Security Consultations, where a complete paper copy is necessary, the contractor shall provide expertise in the verbatim transcription of the consultations. The transcripts shall be proofread and certified correct in a manner sufficient to meet legal review.

Progress on transcripts shall be tracked so status may be monitored and reported. Some consultations will only require a summary, and in these cases the recordings shall be retained and protected in the same manner as the personnel security file.

4.5 CORRESPONDENCE AND MAIL PROCESSING

In order to determine whether time constraints are being satisfied and to provide the necessary quality, mail and correspondence will require proper processing. The contractor shall provide expertise to prepare draft and final correspondence, including forms, letters, and memorandums, related to personnel security activities. Most documents are available on templates and will be completed in accordance with requirements cited in DOE correspondence manuals and specific form instructions. Satisfactory mail processing will include at a minimum the following functions:

• Receive, time/date stamp, and distribute incoming mail.

• Prepare outgoing correspondence for mailing by ensuring appropriate signatures and attachments, date stamp, copy as required, distribute as appropriate for internal/external delivery.

• Package mail, including classified mail, in accordance with DOE regulations, Privacy Act and classified mail procedures, as required.

• Ensure timely pickup/delivery of Personnel Security related mail to/from the REC IF- 606 INL Administration Building (IAB) and Willow Creek Building (WCB).

4.6 CLEARANCE PROCESSING AND ASSISTANCE

The contractor shall provide expertise allowing them to advise and assist all applicants seeking access authorization, including working with supervisors and program personnel, to ensure the necessary forms are completed and to provide clearance status. This task will include efforts to extend or transfer clearances to or from other DOE, federal agency, or DOE contractor entities.

Review of the adequacy of clearance justifications will initially be appropriately reviewed by trained contractor personnel with input as necessary by DOE-ID. Initial or reinvestigation clearance packages will be reviewed to ensure information is complete and consistent with procedures and policies, and then transmitted to the appropriate investigative agency. Clearance packages must be processed, completed, and transmitted in accordance with DOE, Defense Counterintelligence and Security Agency (DCSA), and Federal Bureau of Investigation (FBI) requirements.

The accuracy and timeliness of all forms are critical for satisfactory completion of this task. Documents include clearance request forms, security questionnaires, fingerprint charts, release forms, and other documents necessary to support the requested action.

Documents may be in paper or electronic form. Coordination and cooperation with investigative agencies and others officially allowed to access personnel security files will be required.

There are times when the contractor will be required to deal with reluctant and/or sometimes emotional individuals may also be stressful. The contractor is expected to deal with these situations in a professional manner.

4.7 PERSONAL IDENTITY VERIFICATION

The contractor will provide expertise in processing the necessary paperwork and fingerprints to meet the requirements of DOE O 206.2, Identity, Credential, and Access Management.

The contractor will be designated as a proxy or authorized representative of the Registrar.

The DOE-ID support contractor will maintain certain roles and responsibilities. The responsibilities of this function are outlined in the DOE Order and local procedures and are based on Homeland Security Presidential Directive 12. Satisfactory performance of the Personal Identity Verification process will include at least the following:

• Assist applicants with proper completion of the required Electronic Questionnaires for

Investigations Processing (e-QIP)

• Review investigations processing forms for accuracy and completeness

• Verify an applicant’s current background investigation status

• Code and submit the applicant’s investigations processing forms to investigative agency

• Create and update database records

• Monitor the progress of an applicant’s background investigation

• Adjudication of background investigations to include processing and preparing Letters of Interrogatory.

• Recommend badge issuance, denial or revocation

Prepare HSPD-12 denial packages

• Interface with Sponsor and badge issuer

• Provide Status Reports

Administrative tasks will require general office skills. Primary adjudication tasks will require expertise in identifying and resolving issues associated with access to classified information.

Adjudicators must attend and complete DOE-mandated National Training Center adjudication courses to be fully qualified as DOE adjudicators. They must also take the annual recertification course to maintain their certification. A working knowledge of 10 CFR Part 710 criterion and the Adjudicative Guidelines for access authorizations is necessary.

Sound judgment shall be used in applying the criterion and making consistent objective determinations. Demonstrated oral and written communication and analytical skills are required to resolve concerns, conduct personnel consultations, testify in hearings, and complete defensible case evaluations. Experience in clearance processing is necessary to understand the relevance of investigative information and the potential for pressure, coercion, or exploitation of individuals with access authorizations.

4.8 TRAVEL COORDINATION

The contractor will coordinate federal travel as described in the Federal Travel Regulation (FTR) in support of the Security Division, including backup for travel for the office of Nuclear Energy (NE). This includes:

• Travel preparation (scheduling flights, booking hotels, arranging for rental cars, etc.), travel alteration, and travel voucher processing.

• Provide on-call support outside of normal work hours for urgent travel needs.

• Provide basic project and program management support ensuring compliance with FTR, DOE guidelines and requirements including performing comprehensive reviews of submitted travel for accuracy, compliance, and completeness, and ensuring all travel actions are completed in a timely manner.

• Manage traveler profiles in Concur including new account creation and maintaining updated traveler profiles and preferences.

• Coordinating traveler accommodation requests and maintain traveler’s files during and after travel is complete.

• Assist staff in travel related financial processes through Citi Bank, including managing accounts, reconciling transaction reports, processing travel card applications, and resolving relevant issues locally and through communication with Citi Bank staff.

4.9 DIVISION SUPPORT

Program Management, Security Operations, Material Control & Accountability, Emergency management, Classification, and Classified Cybersecurity and Operational Security

• Administrative support, to include correspondence, scheduling/deconflicting of meetings and classified conference rooms, and weekly reports utilizing appropriate government systems/databases

• Data entry of Security forms (FDAR/CSCS) utilizing appropriate government systems/databases

• Data entry of security surveys, findings, corrective actions and updates, and closures utilizing classified government systems/databases

• Maintain proficiency and required training for access to government information systems/databases, to include travel as required

• Report/document formatting and editing in accordance with DOE-ID processes and procedures

• Records Management Coordinator

• Emergency Management rosters and notices

• Additional security related tasks on an ad hoc basis to support special tasks or assignments as authorized by CO/COR

5. SECURITY CONSIDERATIONS

An active DOE “Q” security clearance or the ability to obtain and maintain a “Q” clearance is necessary to provide adequate service. The work will be performed in a limited access area and strict control of all personnel security files is required to comply with the Privacy Act of 1974.

Upon the receipt of a Contract, all contractor personnel must sign a Conflict Of Interest/Non- Disclosure Agreement (COI/NDA). The signed COI/NDA’s must be emailed to the DOE-ID COR and the Contract Specialist within one week of the receipt of the new Contract. The requirement for a signed COI/NDA also applies to all new hires.

6. ENVIRONMENTAL, SAFETY AND HEALTH CONSIDERATIONS

10 CFR 851, Worker Safety and Health Program, applies. The contractor can apply to use DOE Federal Employee Occupational Safety and Health (FEOSH) program or develop its own Worker Safety and Health Program (WSHP). Either of these must be approved by DOE-ID COR prior to the contractor beginning work on site. The work will be performed in an office environment or on-site facilities. Environmental, Safety or Health training may be required. Normal safety precautions are expected to maintain a safe working environment and all personnel are responsible for reporting any unsafe work activities.

7. M&O CONTRACTOR INTERFACE

The DOE-ID Management & Operating (M&O) contractor is responsible for the safe conduct of operations at the INL, and within other facilities it occupies or controls. Contractors performing work at the INL, or other M&O contractor-controlled facilities, must abide by M&O procedures that apply to their work activities. Contractors will develop interface agreements with the M&O, subject to DOE-ID approval, on matters not governed by tenant manuals or area procedures, or on matters where deviation from the tenant manual or area procedures is necessary. INL contractors will also work cooperatively with the M&O to clearly: 1) define, demarcate and document work control boundaries; 2) define and document work control boundary roles and responsibilities; and, 3) define and document practices and procedures applicable at work control interface points with the M&O contractor.

While DOE-ID has responsibility for oversight of contractors that have contracts with DOE- ID, the M&O also has the authority at the INL, as well as at other facilities it occupies or controls, to stop work it determines to be unsafe to workers, the public or environment, to protect property, or when such work conflicts with other activities. DOE-ID will resolve disagreements or disputes between its contractors and the M&O.

8. TRAVEL/WORK LOCATION

The work environment is largely sedentary and is primarily conducted in an office setting in the Idaho Administrative Building (IAB), located at 785 DOE Place, Idaho Falls, ID. Much of the workspace is an open cubicle environment with accompanying noises and distractions.

There may be some travel to the site associated with Personnel Security Consultations and administrative reviews and it is usually local travel by personal vehicle. Regular trips to the Willow Creek Building to collect or deliver Personnel Security related mail is required throughout the week. Contractor employees will also be expected to sometimes attend required training courses, which may require travel. Additionally, employees may be asked to participate in surveys, audits, and peer reviews on behalf of DOE. Any DOE-ID COR directed travel for consultations that is more than a total of 25 miles round trip will be reimbursed at the current Standard Mileage Rates. If the DOE-ID COR directed travel requires air fare or overnight accommodations, reimbursement will be in accordance with the Federal Travel Regulations. Travel, outside of the local area for training may be required.

9. HOURS OF OPERATION/WORK SCHEDULE

Support coverage shall be provided under this contract between the core hours of 7:00 a.m. to 4:30 p.m. Monday through Friday. Support coverage is not required on U.S. Federal holidays or days when Federal Holidays are observed or specified at http://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/federal-holidays/ and Federal snow and/or other dismissal days are included. Contractor personnel may be allowed to work an Alternate Work Schedule (AWS) between the hours of 6:00 a.m. and 6:00 p.m. Monday through Friday with exceptions approved by the COR on a case-by-case basis. The AWS must be requested in advance, in writing and pre-approved in writing by the DOE-ID COR prior to starting the AWS. The following choices for an AWS may be approved:

1. A 5/4 9-Day Workweek Schedule – Must work eight 9-hour workdays and one 8-hour workday for a total of 80 hours in a biweekly pay period.

2. A 4-Day Workweek Schedule - Must work 10 hours per workday, 40 hours per week, and 80 hours per biweekly pay period.

3. A 5-Day Workweek Schedule – Must work 8 hours per workday, 40 hours per week, and 80 hours per biweekly pay period.

Under extenuating circumstances, a temporary change to an approved AWS must be requested in advance, in writing and pre-approved in writing by the DOE-ID COR prior to the start of temporary change in schedule. This temporary change shall not increase contract cost.

Actual working schedules will be mutually agreed upon between the contractor’s team leader and DOE-ID COR based upon workload needs and coverage. At least one support person must be available during lunch break (between 11:00 a.m. to 1:00 p.m.) Monday through Friday to assist customers.

Any overtime must be pre-approved in writing by the DOE-ID COR prior to the overtime occurring. Overtime is authorized in accordance with the contract line item pricing schedule subject to the requirements of contract clause FAR 52.222-2 Payment of Overtime Premiums.

Overtime must be billed on the invoice as a separate line item.

10. BUDGET REPORTING

The contractor shall provide budget tracking and reporting for their own staff necessary to meet DOE-ID contracting requirements.

11. AUDIT SUPPORT

On a periodic basis, DOE HQ or DOE-ID may assess the personnel security program to ensure compliance with applicable orders, regulations, and procedures. The contractor will provide expertise in the conduct of these audits or program reviews and provide the necessary support.

To prepare for these assessments, on an annual basis, the contractor will perform an annual assessment that demonstrates compliance and identifies areas for improvement. A copy of the self-assessments shall be provided to the DOE-ID COR within annual of completion if the assessment. The contractor will also assist in DOE-ID annual external audits, surveys and inspections of the M&O in support of the federal oversight role.

12. PROCEDURE MANAGEMENT

The contractor shall provide expertise to develop, revise, and maintain personnel security procedures related to the tasks associated with program tasks. New procedures will be developed as necessary or existing procedures revised when regulations and orders are changed. At a minimum, procedures shall be reviewed by the contractor for compliance annually or upon receipt of authorized changes in regulations or orders.

13. HUMAN RELIABILITY PROGRAM

The contractor shall provide expertise to evaluate personnel security files of participants in the Human Reliability Program (HRP). For newly designated HRP personnel, an initial review will be performed. An annual review will be performed by the contractor on all HRP participants.

Prior to the end of the month in which an annual HRP certification is due, the contractor will provide a Case Evaluation with a recommendation to the DOE-ID Personnel Security Team Lead / HRP Certifying Official.

14. SPECIAL PROJECTS

The contractor may be assigned additional personnel security related tasks on an ad hoc basis to support special tasks or assignments. These may consist of meetings with DOE- HQ or other DOE field sites to discuss changes in policies or procedures, to attend training, or to assist in peer reviews at other locations. Only the Contracting Officer or the COR can provide direction to the contractor regarding these additional ad hoc work efforts. If a special project is required that is not within the SOW, the contractor must have advance written approval from the CO and will be reimbursed on a time and materials basis.

15. TASK DELIVERABLES

Deliverables include, but are not limited to, those items listed in the Table of Deliverables below:

DELIVERABLE STANDARD/TIMEFRAME

Case Evaluation Sheet (CES) � No issues - process within IRTPA timeframes.

� With issues - process within IRTPA timeframes For reinstatement requests where supplemental investigation is required, process within normal time frames from receipt of investigation.

Within 5 days of receipt or conclusion of any other actions where a CES is required (i.e. PSC, LOI response, psychiatric evaluation, new derogatory, reinstate, extension, security evaluation for HRP, etc.).

Personnel Security Consultations � Schedule within 20 working days of DOE-ID Approval.

� Within 5 days of DOE approval if a high-risk security concern.

PSC Summary � Within 5 workdays of PSC

PSC Transcript (when required) � Within 15 workdays of PSC

Letter of Interrogatory (LOI) � Within order timeframes

Investigation Request � Within 10 working days of receipt of clearance package for initial grant requests.

� Within 10 working days of receipt of clearance package for reinvestigation and reinstatement requests (where required).

� Within 5 working days after Registrar approval for Identity Verification investigations.

Investigative Report � Complete process and assign within 2 workdays of receipt.

Identity Verification Investigative Report

� Complete process and make initial recommendation within 7 workdays of receipt for issue cases.

� Complete Process and make initial recommendation within 5 workdays of receipt of clean cases.

(Security clearance cases take priority and these timeframes may be waived by DOE-ID)

Clearance Reinstate Requests � Complete process within 5 workdays of DOE-ID approval (excluding file transfer time).

Clearance Extension Requests

(INL)

� Send request within 5 workdays of DOE-ID approval (excluding verification time).

� Extend within order timeframes

Clearance Downgrades � Complete process within 2 workdays of DOE-ID Approval/notification.

Clearance Continuations � Complete process within 1 workday of DOE-ID Approval.

Grant Clearance � Complete process within order timeframes

Revoke Credential � Complete notifications to badging authority within 1 hour.

Deny Credential � Complete process within 1 workday of DOE and/or Appeals Board decision.

Discontinuance of Investigation � Process within order timeframes

Clearance Cancellations � Process within 1 workday of receipt

Clearance Terminations � Process within order timeframes

Derogatory Reports � Assign within 2 days of receipt, this includes uploading documents to the CATS system.

If substantial, report to DOE-ID oversight immediately.

Administrative Review (AR) � Complete AR package within 10 workdays of DOE- ID Approval.

Identity Verification Appeal � Complete appeals package within 3 workdays of notification of appeal.

Forward package to applicant and appeals board members within 5 workdays of notification of appeal.

Data Report on Spouse/Cohabitant � Process within 5 workdays of request

Reciprocity Requests � Verify other government agency clearance and request any investigative reports within order and SEAD time requirements.

Status Queries to Investigative Agencies

� Process within 2 workdays of request

Personnel Security File (PSF) Transfers

� Transfer within 4 workdays of request

External Extension Requests � Process within 2 workdays to include upload of paper file to CATS system.

Combine Files Request � Within 2 workdays of file receipt

Duplication of PSFs � Within 2 workdays of request

Name Changes � Process within 2 workdays of request

Mail Processing � Date stamp and distribute same day of receipt

Cases Submitted for Investigation Report

� Weekly – if requested by DOE

Investigations Received Report � Weekly – if requested by DOE

Overdue LOI Response Report � Weekly – if requested by DOE

Consultation List � Weekly – if requested by DOE

Administrative Review List � Weekly – if requested by DOE

Letter of Interrogatory List � Weekly – if requested by DOE

Psychiatric Evaluation Appointments

� Bi-weekly if required

Suspense/Hold Cases Report � Monthly – if requested by DOE

Security Investigations Budget Report

� Monthly or as required

Ad Hoc Reports � As required

Monthly status report � No later than the 10th of each month, provide to designated COR:

The monthly report shall include:

- the complete contract number

- As a minimum a breakout of monthly costs detailing:

- Individual labor hours and their fully burdened costs

- What task is correlated to the individual labor hours

Computer Database oversight � Provide enough knowledgeable to staff to operate all computer databases in use by Personnel Security.

IRTPA requirements � Track timeliness of investigations/adjudications to ensure IRTPA requirements consistently met and provide statistics when requested.

Contractor Self-Assessment Report � In accordance with SOW, Item 11, annual basis within 30 days of completion of self-assessment.

Contractor Employee OCI/NDA � One (1) Week after receipt of Contract or new hire has been processed.

16. Quality of Deliverables:

All deliverables are expected to meet all the requirements and guidance furnished by the award and the COR. All deliverables should be spell-checked, grammatically correct, in a professional looking format, and without any corporate tags (e.g., headers, footers, stationery, etc.). Re-work of deliverables due to errors of this nature (rather than changes) shall be done at no additional charge to DOE. The degree of sophistication of the final product should be coordinated with the COR. Deliverables should be furnished using appropriate software compatible with the Microsoft Office suite in use by DOE (e.g., Word, Excel).

17. APPLICABLE DIRECTIVES

DOE O 470.4B Safeguards and Security Program DOE O 471.3 Identifying and Protecting OUO Information DOE O 475.1 Counterintelligence DOE O 472.2 Personnel Security DOE M 475.2B Identifying Classified Information DOE O 206.2 Identity, Credential, and Access Management 10 CFR 710 Criteria and Procedures for Determining Eligibility for Access to Classified

Matter or Special Nuclear Material 10 CFR 707 Workplace Substance Abuse Programs 10 CFR 851 Worker Safety and Health Program 10 CFR 712 Human Reliability Program E.O. 12968 Access to Classified Information E.O. 12958 Classified National Security Information E.O. 13381 Strengthening Processes Relating to Determining Eligibility for Access to

Classified National Security Information

Atomic Energy Act of 1954, as amended Adjudicative Guidelines for Determining Eligibility for Access to Classified Information Intelligence Reform and Terrorism Prevention Act