Tab D HI-2212 FINAL PWS Garrison IT Contract (Jan 2023) v4.docx

Performance Work Statement (PWS) For Information Technology Automation Management Support Services United States Army Garrison-Hawaii (USAG-HI)

DRAFT

1.0. BACKGROUND

This requirement is for the U.S. Army Garrison – Hawaii (USAG-HI). USAG-HI is located at Schofield Barracks (SB), Wheeler Army Airfield (WAAF), Fort Shafter (FS), Helemano Military Reservation (HMR), Aliamanu Military Reservation (AMR) and Tripler Army Medical Center (TAMC) locations on Oahu and Pohakuloa Training Area (PTA) and Kilauea Military Recreation Camp (KMC) on Hawaii and has the mission of providing quality services and infrastructure from the Strategic Support Area for quality of life and mission readiness to Soldier, Civilians, and Families in the Military Ohana Community.

The USAG-HI Information Management Office (IMO) working under the USAG-HI Garrison Commander has the responsibility to provide Automation Management Support Services (AMSS) to all USAG-HI organizations. The sustainment of current and emerging Information Technology (IT) support is a critical enabler to accomplish all USAG-HI missions. With the shortage of IT government personnel, USAG-HI organizations cannot meet the required mission objectives without the use of contract support personnel.

1.1. Place of Performance

Accomplishment of the results contained in this PWS requires work at USAG-HI locations on Oahu and Hawaii and at other various contractor, subcontractor, and Government facilities. Such as Schofield Barracks (SB), Wheeler Army Airfield (WAAF), Fort Shafter (FS), Helemano Military Reservation (HMR), Aliamanu Military Reservation (AMR) and Tripler Army Medical Center (TAMC), Pohakuloa Training Area (PTA), and Kilauea Military Recreation Camp (KMC).

1.2. Period of Performance

Period of Performance is for twelve (12) month base period consisting of a thirty (30) calendar day phase-in period and eleven (11) months’ full performance, followed by four (4) one-year option periods.

2.0. SCOPE

Contractor shall provide System Support Specialists and transportation for delivery of AMSS to USAG-HI including, but not limited to, locations on SB, WAAF, FS, HMR, AMR, TAMC on Oahu and PTA and KMC on Hawaii. Services will be provided for approximately 1500 personnel and shall be focused on multiple areas: Help Desk Operation, Touch Service, Mobile Device, Webmaster/SharePoint Administration, Database Administration, Knowledge Management, Fingerprint Systems, Specialty programs such as Transition Assistance Program, Video Teleconferencing and Virtual meetings. Services will be provided in accordance with (IAW) USARPAC Directive 0001, subject: Information Assurance (IA) and Computer Network Defense (CND) of the Pacific LandWarNet in the United States Army Pacific (USARPAC / United States Army Installation Management Command (IMCOM) / United States Army Garrison, Hawaii (USAG-HI) and other applicable DoD IT-related rules, regulations and policies. For help desk and end user support, there is an average of 700 to 800 tickets monthly. During peak-periods, the help desk and end user support monthly tickets increase by 300 to 350 tickets. For webmaster and database tickets, there is an average of sixty (60) tickets monthly. For video teleconference and audio/visual support, there is an average of twenty-four (24) tickets monthly. For knowledge management and SharePoint administration, there is an average of 175 tickets monthly.

2.1. Phase-In

This requirement includes a 30-day phase-in period. The contractor shall follow the transition plan submitted as part of the proposal and keep the Government fully informed of status throughout the transition period. Throughout the phase-in period, it is essential that attention is given to minimize interruptions or delays to work in progress that would impact the mission. The contractor must plan for the transfer of work control, defining the method for processing and assigning tasks during the phase-in period. During the phase-in period, the contractor shall recruit and hire qualified personnel (including having the required security clearance), to perform the services described within paragraph 3.

The Phase-In period is to allow the Contractor sufficient time to obtain access and any required clearances to be fully operational on the 23rd working day of the contract. No later than fourteen (14) working days after contract award the Contractor shall provide the COR and KO with all employee information required to gain access to the Army Installations on the Islands of Oahu and Hawaii, all employee information credentials to obtain Common Access Cards and any other required documents that attest to the eligibility for access to Government IT systems of all personnel that the contractor will employee for work on this contract. The Contractor shall be fully operational on the 23rd working day after contract award to perform all work described in the PWS. Should the Contractor provide information that results in non-eligibility of any Contractor employee the contractor shall take immediate corrective action to replace the employee with a suitable candidate. Failure to provide suitable personnel for Government employment to include access to Military Installations and Government IT Systems could result in termination of the contract.

2.1.1. Retain Qualified Staff

The Contractor shall provide the full amount of contracted personnel designated for this contract for the entire period of performance. The contractor shall provide a list of all employees within fourteen (14) days of the start of the contract. The Contractor shall “back-fill” vacant position(s) as soon as possible, but no later than (NLT) thirty (30) calendar days after position becomes vacant. If the Contractor fails to back-fill the vacant position(s) with a qualified replacement (based paragraph 3.1.0 to 3.1.6) within thirty (30) calendar days, the Government will issue a Contract Deficiency Report (CDRs). Excessive or consistent failure to maintain required staffing may result in termination. Contractor shall maintain 100% staffing throughout the life of the contract on all positions. Contractors shall submit monthly staffing accountability and qualification reports to the Contracting Officer’s Representative (COR) on the first day of each month.

3.0. GENERAL REQUIREMENTS

3.0.1. Contractor personnel shall keep a daily log of all trouble tickets and provide COR monthly reports of work completed and work pending completion. Reports will be provided on the first work day of each month. Contractor shall propose the work log format for the COR review and approval within 30 calendar days of contract award.

3.0.2. Contractor shall develop a management plan that ensures the effective utilization of all contract staff across the USAG-HI operational footprint. The plan will centralize control of contracted employees to ensure maximum productivity regardless of physical location contract workers are assigned. Management plan will be provided to the COR for review within 30 days of contract awarded. Plan will be updated to reflect mission changes within the USAG-HI organizations.

3.0.3 Contractor personnel will require elevated privileges on Army networks (unclassified and classified). Training and certifications as defined in paragraph 3.1.1, 3.1.2, and 3.1.3 will be maintained to meet elevated privilege requirements.

3.0.4. Contractor personnel shall have excellent customer service skills and the ability to explain solutions to users with a basic working knowledge of computer systems.

3.1.0 Minimum Requirements

3.1.1. Contractor personnel shall be required to maintain a SECRET clearance based on the requirement to transport (on foot only on Wheeler Army Airfield) and maintain computers with access to the classified network and to maintain elevated rights to the unclassified and classified information systems.

3.1.2 Contractor personnel must have at least one (1) year of verifiable related job experience for the functions listed in paragraphs 3.2.0. to 3.5.5.

3.1.3. IAW Department of Defense (DoD) 8570.01-M contractor personnel shall be Security Plus certified within sixty (60) days of contract award. The Contractor shall be responsible for all expenses associated with the certification. All requirements are to run concurrently from contract award and are not to be considered as separate calendar events.

3.1.4. IAW Army Regulation (AR) 25-2 contractor personnel shall ensure that all users have completed an Army IT User Agreement located on https://cs.signal.army.mil/. The Contractor shall also ensure that the contract employees’ Army IT User Agreement and annual Cyber Awareness Training is uploaded into the Army Training and Certification Tracking System (ATCTS).

3.1.5. Contractor personnel shall have the ability to lift/carry up to fifty (50) pounds.

3.1.6. Contractor personnel shall have the ability to work effectively, and contribute positively, as a team member within a fast paced environment.

3.2.0. Help Desk and End User Support Requirements

3.2.1. Contractor personnel shall have knowledge of AR 25-2, Army Cybersecurity, DoD 8500.1 (Department of Defense Information Assurance Policy) and DoD 8500.2 (Department of Defense Information Assurance Implementations).

3.2.2. Contractor personnel shall provide Tier I and II help desk support and desktop touch labor for MS Windows systems.

3.2.3. Contractor personnel shall coordinate with the COR and/or Network Enterprise Center (NEC) to install, configure, troubleshoot, scan, and repair personal computer workstations, classroom workstations, thin client workstations, personal digital assistant (PDA) devices, printers, and operations systems.

3.2.4. Contractor personnel shall coordinate with the COR and/or NEC to load, configure, and troubleshoot software applications unique to the USAG-HI customer.

3.2.5. For standalone networks (non NIPR/SIPR) the Contractor personnel shall administer access controls and lock systems out of the network that are not authorized or moved without coordination and report associated incidents to the COR.

3.2.6. Contractor personnel shall follow system access, operation, maintenance, and disposition policies.

3.2.7. Contractor personnel shall create, remove, or edit user accounts within Active Directory and/or Microsoft Teams.

3.2.8. Contractor personnel shall monitor system performance.

3.2.9. Contractor personnel shall diagnose and repair software or hardware computer problems.

3.2.10. Contractor personnel shall perform software or hardware upgrades.

3.2.11. Contractor personnel shall be required to troubleshoot and configure software to user specifications.

3.2.12. Contractor personnel shall coordinate with the NEC as required to ensure systems are maintained with current anti-virus engines and definitions on all Information Systems. Personnel shall review and verify currency of user accounts, accesses, and logins.

3.2.13. Contractor personnel shall patch Information Systems listed on the Information Assurance Vulnerability Alerts (IAVA) received from the NEC. Any system that has not been corrected will be reported to the COR by the end of each week.

3.2.14. Contractor personnel shall coordinate with the COR and/or NEC/ RCC-P to conduct Assured Compliance Assessment Solution (ACAS) and/or Skynet scanning.

3.2.15. Contractor personnel shall make initial contact with the customer within four (4) duty hours of the submission of an IT work order ticket/call with the exception that Command Group tickets/calls are considered priority and shall be responded to within two (2) hours. Touch labor shall occur within two (2) working days of the submission of an IT work order request. Resolution or restoration of capability will be provided within two (2) working days of engagement with the exception of problems pending end user response, and those referred to the NEC or vendor for resolution. Contractor shall proceed with repairs for equipment covered under the manufacturer's warrantee, and advise the Contracting Officer representative (COR) of repairs and replacements not covered under warrantee. USAG-HI IMO will budget and fund for procurement of computer hardware/software needed for repairs and replacement, troubleshooting tools and equipment.

3.3.0. Webmaster and Database Administration Requirements

3.3.1. Contractor personnel shall serve as an alternate/assistance webmaster for the USAG-HI public facing websites and future initiatives for web presence as required by the USAG-HI Public Affairs Office (PAO).

3.3.2. Contractor personnel will post website updates on public facing websites only when submitted on a work order from PAO within two (2) working days of the request. All website requests need to be routed to PAO for approval.

3.4.0. Video Teleconferencing (VTC) and Audio/Visual Support Requirements

3.4.1. Contractor personnel shall provide support, troubleshooting, and maintenance of Conference Room Suites and equipment, to include utilizing Video Teleconferencing (VTC) Audio/Visual (AV), or Microsoft TEAMs. Contractor personnel shall be available in the room or on standby during VTC/Teams meetings. This may require working outside normal duty hours.

3.4.2. Contractor personnel shall perform routine testing and maintenance of VTC equipment no less than twice per month and on the first work day of the week prior to the start of scheduled VTC events. In the event of equipment failure, troubleshooting, diagnosing, resolution and/or restoration will be executed as stated above.

3.4.3. Contractor personnel shall serve as the central point of contact (POC) for VTC scheduling and coordination. All VTC requests and conference room reservations will be submitted on a VTC/conference room reservation ticket by USAG-HI IMO staff to facilitate reservation process and avoid duplication of reservations.

3.4.4. Contractor personnel shall confirm VTC and conference room reservations and schedule the event on conference room calendars within one (1) work day. In the event of equipment failure or to be superseded by the Command Group, contractor shall notify affected VTC requestors by email and phone. In addition, voice contact with the VTC requestor or a staff member of the requestor's office/division is required for changes occurring within twenty-four (24) hours of the scheduled event.

3.4.5. Contractor personnel shall respond to non-emergency VTC problem calls within two (2) duty hours and provide a work around or fix. Contractor shall respond to emergency VTC problem calls (equipment failure) within one (1) duty hour and provide an alternative site, if available, or consult with the VTC requestor to cancel the event or continue with audio teleconference capability only. Resolution and/or restoration of capability shall occur within two (2) working days with the exception of problems that require external support from a VTC service contract.

3.5.0. Knowledge Management/ SharePoint Administration Requirements

3.5.1. Contractor personnel shall act as Assistant Knowledge Manager Officer(s) assuming the responsibilities as outlined in ATP 6-01-1 (FM 6-01.1).

3.5.2. Contractor personnel conduct administration, and assists with the build, design, development, and maintenance of the knowledge management organizational architecture.

3.5.3. Contractor personnel shall perform SharePoint administration functions using SharePoint designer.

3.5.4. Contractor shall manage Portal/SharePoint permissions.

3.5.5. Contractor shall develop and maintain workflows approved by the COR.

3.5.6. Contractor personnel shall manage current SharePoint sites, lists, Web Parts, and Templates.

3.5.7. Contractor personnel shall respond to all routine service requests within four (4) hours of notification and complete all work within eight (8) hours after notification. Complex requirements taking longer than eight (8) hours to complete will be discussed with COR and a reasonable completion date will be established.

4.0 GOVERNMENT FURNISHED EQUIPMENT (GFE)

4.1. The Government will provide office space, supplies, telephone service, workstations, computers, system access, and storage space at the place of performance. The Government property will be used only in performance of this task.

4.2. Government Furnished Equipment

The following Government furnished items will be provided to the contractor as a means to accomplish the requirements of the tasks described in this PWS.

Desk, office type Office Chair Computer System (Laptop with docking station or desktop) Monitor(s)

GFE will be signed for by the designated contractor representative on standard Army property accountability documents (DA Form 2062). Contractor will conduct monthly inventories of all GFE and provide a report to COR by the first working day of each month.

4.3. All Government-furnished property, information/data, and facilities provided to the Contractor shall be returned to the Government upon completion of this Contract.

5.0. GOVERNMENT RIGHTS

The Government has unlimited rights to all documents/material produced under this contract. All documents and materials shall be Government-owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the COR. All materials supplied to the Government shall be sole property of the Government and may not be used for any other purposes. This right does not abrogate any other Government rights under the applicable Data Rights clause(s).

6.0. ADMINISTRATIVE CONSIDERATIONS

6.1.0. Work Schedule

Normal workdays are Monday through Friday excluding Government holidays listed in para 6.1.1. Contractor personnel work eight (8) hours per day, 40 hours per week. Flextime workers will not start earlier than 0700 and not later than 0900. Core hours of work are from 0900 to 1500 daily. The Contractor will provide services Monday through Friday 0700-1700. All employees are expected to be available during core hours. Short term surge requirements may occasionally occur during activation of the Emergency Operations Center (EOC) for exercises or under other high priority or emergency situations (e.g. fiscal year-end, short-term situations may make performance in excess of eight (8) hours per day, 40 hours per week necessary on occasion, contractor must ensure that they can provide for this type of contingency).

6.1.1. Federal Holidays

New Year’s Day Martin Luther King Jr. Day President’s Day Memorial Day Juneteenth Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day

6.1.2. Employee Absence

The Contractor will ensure there is suitable and qualified personnel (based on paragraphs 3.1.0 to 3.1.6) coverage of AMSS for the USAG-HI organizations when contractor personnel take personal time off (PTO).

6.1.3. COVID 19

The contractor personnel shall follow Center for Disease Control (CDC), USAG-HI guidance, and local policies in regards to COVID-19 quarantine and isolation guidelines.

In the event of quarantine/isolation, the Contractor shall provide a report to the COR within twenty-four (24) hours of notification identifying such personnel. The report shall be in a Memorandum format with the following information about the contract employee included: date time group and location of positive COVID test, summary of incident, name, job title, address, phone number and their quarantine location to the COR.

Contractor shall report whether the CME is using paid leave or in a telework status. Telework requests must be submitted to the COR for approval. Approval must be obtained in writing prior to implementation for telework for contracted employees.

6.2. Non-personal Services

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Contracting Officer (KO) immediately.

6.3.0. Business Relations

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

6.3.1. The Contractor shall maintain their work area in a clean and organized state such as government personnel in the same office building performing similar tasks.

6.3.2. Contractor personnel shall conform to standards of conduct and code of ethics, which are consistent with those applicable to Government employees as provided in the Joint Ethics Regulations 5500.7-R and the Army Civilian Corps new employee handbook. Contractor personnel shall maintain a clean and neat personal appearance, appropriate to the climate and nature of work.

6.3.3. The Contractor shall provide personnel who project a positive Army and USAG-HI image, in appearance, attitude, and conduct. Contractor employees shall at a minimum wear slacks with a belt, collared shirt/blouse, and closed toed shoes while in a duty status. No hats shall be worn indoors unless there is a verifiable medical reason to do so. Contractor staff shall read, write, speak, and understand the English language fluently and maintain good communication skills with USAG-HI organizations.

6.3.4. The Contractor shall participate in maintaining the overall cleanliness of common areas shared with other personnel.

6.4. Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. The contractor must maintain continuity between the support operations at USAG-HI IMO locations on Oahu and Hawaii and the contractor's corporate offices. The Contractor shall assign a project lead responsibility to one of the personnel. The project lead will be the primary person to interact with the Contracting Officer Representative (COR) as PWS tasks are accomplished. The project lead will have oversight responsibility of all contractors.

6.5. Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement. The contractor shall respond to Government requests for contractual actions within time specified. The contractor shall provide a single point of contact by name, email and telephone number; individual must have full contractual authority.

6.6. Subcontract Management

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations.

6.7. Service Contract Reporting (SCR) in the System for Award Management (SAM) Effective in FY20, the Department of Army will no longer require contractors to report into the ECMRA. Contractors will begin reporting manpower data relating to the performance for service/construction contracts into SAM, consistent with existing service/construction contract reporting requirements under FAR Subpart 4.17. SCR is a business process that has been approved by the Army as a means for collecting information on contracts that provide services to the Department of the Army.

SAM portal to SCR will allow industry to report all manpower data into a single Federal-wide portal, removing duplicative requirements, one for DoD and another for the rest of the Federal Government, which requires the same data elements to be reported for service/construction contracts performed for both DoD and Federal civilian agencies that essentially perform the same function. The outcome will be a process that is less burdensome on both industry and Government while improving data integrity and accuracy.

The reporting period for contractors in SAM generally is open from mid-October to mid-December for reporting against the prior government fiscal year. SAM will only enable reporting for entities with contracts that meet the SCR thresholds Contractors must have an entity registered in SAM, an individual SAM user account with the Entity Administrator, Entity Registration Representative or Reporter roles for that entity and one or more contracts awarded to that entity, which meet the SCR reporting thresholds. For further information go to http://sam.gov

Detailed descriptions of Reporting Thresholds are available in the Service Contracting Reporting guidebook located at: https://dodprocurementtoolbox.com/sitepages/service-contract-report-sci

6.8. Travel/ Temporary Duty (TDY)

Travel to other government facilities or other contractor facilities on Oahu and/or Hawaii may be required and locations will be specified in the PWS. All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the government (subject to local policy procedures), and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs (subject to local policy & procedures; may reference FAR). This will support an average of four TDY occurrences annually.

7.0. SECURITY REQUIREMENTS

The contractor shall ensure that all assigned personnel understand applicable Security policies and directives. Personnel who knowingly violate security policies or directives are subject to immediate removal from any work relating to this contract.

7.0.1. All contractor personnel assigned to this task order shall be US citizens and shall be required to obtain a SECRET security clearance within ninety (90) days of hire and maintain an active SECRET clearance throughout the contract duration. Approved Interim clearances will be acceptable until the final clearance is adjudicated. The contractor shall ensure that classified data is handled in accordance with appropriate Army and DOD security regulations. Information classified up to SECRET will be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort. Services associated with this requirement require handling of classified “SECRET” material. Contractor shall submit to the KO and the COR a listing of employees indicating the level and date clearance was obtained. DD Form 254 is provided for types of classified documents or events that may be encountered during the performance of this contract.

7.0.2. Visitor Group Security Agreement: The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this contract or Task Order. The Agreement will outline responsibilities in the following areas: Contractor security supervision; Standard Practice Procedures; access, accountability, storage, and transmission of classified material; marking requirements; security education; personnel security clearances; reports; security checks; security guidance; emergency protection; protection of government resources; DD Forms 254; periodic security reviews; and other responsibilities, as required.

7.0.3. Facility Clearance

The Contractor shall possess or obtain a clearance at the classification level of “SECRET” within ninety (90) calendar days after award. The Contractor shall follow the Facility Clearance procedures outlined in the DD Form 254. Application for facility clearance shall be made to the KO who will process the application in accordance with the National Industrial Security Program Operating Manual (NISPOM) Chapter 2.

7.1. Physical Security

The contractor shall be responsible for safeguarding all Government equipment, information, and property provided for contractor use.

7.2. Installation Security

The contractor shall abide by and cooperate with Force Protection measures that are implemented on the military installation. USAG-HI has 100% controlled access to the installation and security personnel are located at the access points of the post. Personnel entering the installation are required to have proper identification and may be subject to vehicle inspection procedures. At times of increased security alerts, access control measures may be increased or access may be restricted completely.

Contractor and all associated sub-contractors’ employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures provided by appointed COR. The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce shall comply with all personal identity verification requirements as directed by DOD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the changes clause of this task order, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

8.0. SPECIAL QUALIFICATIONS/TRAINING

8.1. OPSEC Training

Per AR 530-1, Operations Security, new contractor employees shall complete Level I OPSEC training NLT thirty (30) calendar days after TO/employee start. All contractor employees shall complete annual OPSEC awareness training and provide a certificate of completion to the appointed COR within thirty (30) calendar days of contract award or newly reporting contractor staff.

8.2. Information Assurance (IA)/Information Technology (IT) baseline certification Per DoD 8570.01-M, DFARS 252-239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification must be completed within 60 days upon contract award.

8.3. Skillport CIO/G-6 NETCOM IA - MD 100 Windows 10

To obtain elevated privileges to unclassified and classified systems, CIO/G-6 NETCOM IA-MD 100 Windows 10 needs to be completed within sixty (60) days upon contract award online at: https://usarmy.skillport.com/skillportfe/custom/login/usarmy/login.action

8.4. Cybersecurity Fundamentals

To obtain elevated privileges to unclassified and classified systems, Cybersecurity Fundamentals training needs to be completed within 30 days upon contract award online at: https://cs.signal.army.mil/

8.5. Cyber Awareness training

All contractor employees and associated sub-contractor employees must complete the DoD Cyber Awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within 30 days of appointment to IA/IT functions.

8.6. Threat Awareness Reporting Program

In accordance with AR 381-12, paragraph 1-10, all DA contract employees possessing a security clearance shall receive annual Threat Awareness and Reporting Program (TARP) training instructed by a Certified Instruction (CI) agent or other trainer as specified in AR381-12, paragraph 2-4b. Training shall be accomplished annually during the organization's scheduled TARP training session. In those instances, where live training is not possible, CI units may, in coordination with appropriate commanders, develop alternative means to conduct threat awareness training and meet the requirements of AR 381-12. Certificates of completion shall be provided to the COR within thirty (30) calendar days of TO award/effective date or thirty (30) days of new employee hire date.

8.7. iWatch Training The Contractor and all associated sub-contractors shall brief all employees on the local iWatch program (training standards provided by the requiring activity ATO). The local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed NLT thirty (30) calendar days after contract is awarded or employees start. Certificates of completion shall be provided to the COR.

8.8. AT Level 1 training

In accordance with (IAW) Army Regulation 525-13, paragraph 5-19, all prospective contractors shall undergo a verification process to determine the trustworthiness and suitability prior to being granted access to federal property. Limited access with escort may be granted (at the installation’s discretion) for an interim period while investigations are being conducted. In accordance with AR 25-2 and Homeland Security Presidential Directive 12 (HSPD-12), Installation Security Office will submit all background investigations on prospective contractors requiring Common Access Cards (CAC) network access. Upon notification, the Provost Marshal Office will conduct background checks on all other contractor personnel when there isn’t a requirement for CAC and/or IT requirements in the contract. All contractor personnel assigned to this contract shall complete the “Anti-Terrorism Level 1 Training” (AT Level I Training) provided on-line at https://jkodirect.jten.mil NLT thirty (30) calendar days after TO/employee start, and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee. The Certificate of completion shall be provided thru the COR to the unit/activity security manager. (Reference Department of the Army, US Army Contracting Agency, SFCA-CO, and 5 Sep 07, subject: Incorporation of Anti-Terrorism Measures into the Contracting Process and AR 525-13, Antiterrorism).

8.7. Army Training Certification Tracking System (ATCTS)

All contractor personnel are required to register for contractor employees who require access to government information systems. All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the Cyber Awareness prior to access to the IS and then annually thereafter.

8.8. Local Area Network (LAN) Access

Access to the LAN is required in order to perform the requirements of this PWS Contractor personnel shall obtain a Common Access Card (CAC) and complete initial and annual Cyber Awareness training before being permitted to access the Local Area Networking (LAN). Contractor personnel shall not connect personal devices or Contractor or commercially provided equipment to the network. All devices connected to the network shall be managed under strict Cyber Security standards as prescribed by AR 25-2 (available online). The Network Enterprise Center (NEC) retains sole administrator authority over devices connected to the network. Access to network resources are granted on a “least-needed” basis, therefore only minimal services will be provided to Contractor personnel unless explicitly granted through individual contracts/task orders. Common services include physical connectivity, user-id, and use of shared services related to work (i.e., printers, shared files, and public folders). The Contractor is subject to all access policies, particularly the IT User Agreement and AR 25-2. Therefore, the contractor shall not load any software or make any changes to computer configurations. All requests for changes or problem reports must be submitted to the NEC through the work order process. Department of Defense (DOD) computer systems, including Contractor furnished devices connected to the LAN, may be monitored for all lawful purposes. Contractor use of the DOD computer systems, authorized or unauthorized, constitutes consent to monitoring.

8.9 Security Awareness Training

All contractor personnel assigned to this contract/task order shall complete the Contractors Security Awareness Training NLT thirty (30) calendar days after TO/employee start and then annually afterwards. A record on completion shall be provided thru the COR to the unit/activity security manager. (Reference AR 530-1, Operations Security (OPSEC), Chapter 4).

a. Contractor personnel will have routine and unavoidable access to proprietary information which they are required to protect. Personnel applied to the tasks in this PWS may not work on other tasks for the contractor or for any other agency without a formal written request and written consent granted by the KO.

b. Uses and Safeguarding of Information. Information from the sam.gov secure web site is considered to be proprietary in nature when the task order number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contract or name and contract/task order number associated with the data.

c. Privacy Act. All contract personnel assigned to this task will have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements.

8.10 Derivative Training

In order to gain Classified Network access, all contractor employees and associated sub-contractor employees must complete the Derivative training. Training needs to be completed within 30 days upon contract award online at: https://securityawareness.usalearning.gov/derivative/index.htm

9.0. KEY PERSONNEL

Experienced professional and/or technical personnel are essential for successful accomplishment of the work performed under this contract. These “key personnel” are identified as all personnel performing requirements in the contract. The contractor shall not remove or replace personnel without written notification to the Contracting Officer (KO) and Contracting Officer Representative (COR) and receipt of concurrence/approval of replacements by COR within fourteen (14) days of a vacancy. Personnel replacements shall meet or exceed the qualifications required for these key personnel as required by the PWS.

9.1. All vacancies that occur after award of this contract shall be identified and notification sent to the Contracting Officer and the COR as soon as these vacancies are known. The Contractor shall “back-fill” vacant position(s) as soon as possible, but no later than 30 calendar days after position becomes vacant. If the Contractor fails to back-fill the vacant position(s) with a qualified replacement within thirty (30) calendar days, the Government will issue Contract Deficiency Report (CDRs). Contractor shall maintain 100% staffing throughout the life of the contract on all positions. Contractors shall submit monthly staffing accountability and qualification reports to the COR on the first (1st) duty day of each month. CONTRACTOR SHALL NOT INVOICE FOR LABOR THAT IS NOT PROVIDED. All requests for approval of replacement contractor personnel due to vacancies during performance under this contract shall be in writing to the KO and the COR, and must be accompanied by the candidate by name, qualification documents, and any other information to make the determination that the candidate is qualified (resumes, record briefs, etc.). The KO or COR will provide concurrence in writing to the contractor prior to any performance by the identified replacement under this contract.

10.0. IDENTIFICATION OF CONTRACTOR EMPLOYEES

10.1. Contractor shall provide each employee with an identification (ID) badge made of nonmetallic material, easily readable and including employee's name, service provider's name, functional area of assignment and recent color photograph of the employee. Personnel shall wear the ID badge at all times when performing work under this contract at a government site, including while attending government meetings and conferences that may take place outside the government facility. Unless otherwise specified in the contract, each contractor employee shall wear the ID badge in a conspicuous place on the front exterior clothing and above the waist except when safety or health reasons prohibit such placement.

10.2.0. Contractor shall identify themselves as contractors on all correspondence (including email) and when answering the telephone.

10.2.1. The Contractor is required to have CTR displayed in his/her official government email address and to create an automated email signature block with the name of the contracting agency and CTR displayed when sending, replying to, or forwarding emails. This allows the recipient of the Contractor's email to readily identify the sender as a contract employee.

11.0 COMMON ACCESS CARDS (CACs) FOR CONTRACTOR PERSONNEL

The Contractor is responsible for ensuring that employees performing services on the contract who require access to the Army network obtain a Common Access Card (CAC). Failure to obtain a CAC will not relieve the Contractor from performing contract requirements. The CAC must be returned to the COR when the employee’s employment is terminated or the contract expires.

11.1. When contractor performance is required on Government installation(s)/location(s), contractors shall ensure CACs are obtained by all contract employees who meet one or both of the following criteria:

11.1.1. Require long-term logical access to Department of Defense computer networks and systems in either unclassified environment, or classified environment where authorized by governing security directives.

11.1.2. Perform work on a long-term basis, which requires the use of a CAC for installation entry control or physical access to facilities and buildings.

11.2.0. The Contractor shall ensure compliance with the provisions set forth below. For purposes of FAR Clause 52.204-9, the Government will designate a Trusted Agent (TA), and the Contractor shall designate a Facility Security Officer (FSO), for this contract. The Government reserves the right to amend or supplement these provisions pursuant to the Changes clause in the contract.

11.2.1. The FSO shall provide the following information to the TA for every Contractor employee requiring access to the Army network for input into the TAAS System:

- Last Name

- First Name

- Middle Name

- Social Security Number

- Date of Birth

- Email address (may be either the email address of the incoming individual or the FSO)

11.2.0. Contractors and their employees shall use the following procedures to obtain CACs:

11.2.1. Prior to the Applicant contacting a trusted agent (TA) to request a government credential, he or she must first be vetted through his or her employer using the DoD-approved process and the process outlined in the following documents:

- Federal Information Processing Standards Publication 201-1, “Personal Identity Verification (PIV) of Federal Employees and Contractors”

- DoD Regulation 5200.2-R, “Personnel Security Program”

- Department of Defense Manual (DoDM) 1000.13, Volume 1—"DoD Identification (ID) Cards: ID Card Life-Cycle"

- Homeland Security Presidential Directive-12 (HSPD- 12), “Policy for a Common Identification Standard for Federal Employees and Contractors”

11.2.2. Contractors shall provide a listing of their employees that will require a CAC to the contracting officer. The listing will contain the following information in order for a CAC application to be created in the Trusted Associate Sponsorship System (TASS): last, middle, and first names; Social Security Number; Date of Birth; email address; the contract number; and the contract end date. The contracting officer will provide a copy of the list to the Government representative in the local organization designated to authorize issuance of contractor CACs (i.e., Trusted Agent (TA)). The TA will then create a CAC application in the TASS.

11.2.3. Once the TA has created the CAC application, a temporary login/password will be generated in TASS. The TA will notify each contractor employee when his/her application is created and will securely distribute the login/password to that contractor employee. Each contractor employee shall then enter the TASS web site using the temporary login/password and complete the CAC application and submit it back to the TA. Once the Applicant has logged in for the first time, he or she has 30 days to complete the application process.

11.2.4. Once the TA approves the application, the Applicant has ninety (90) days to obtain a government credential from a RAPIDS Issuing Facility. To locate a RAPIDS Issuing Facility, Applicants can use the RAPIDS Site Locator (RSL) at http://www.dmdc.osd.mil/rsl/. The Find Sites details page on the RSL website includes information on making appointments. Some RAPIDS Issuing Facilities use an electronic appointment scheduler. In those cases, the Scheduling URL is listed on RSL Find Sites details page. At the RAPIDS Issuing Facility, an operator verifies and updates the DEERS data with the Applicant data and status of the card.

11.3. While visiting or performing work on Government installation(s)/location(s), contractor employees shall wear or prominently display the CAC as required by the governing local policy.

11.4.0. During the performance period of the contract, the contractor, or contractor employee as appropriate, shall:

11.4.1. Within seven (7) working days of any changes to the listing of the contract personnel authorized a CAC, provide an updated listing to the contracting officer who will provide the updated listing to the TA (who will create new CAC applications or revoke those for employees no longer performing on the contract as appropriate);

11.4.2. Contractors must return the government credential to the issuing agency as soon as one of the following occurs, unless otherwise determined by the service or agency:

- When credential is no longer needed for contract performance

- Upon completion of employment

- Upon contract completion or termination

11.4.3. Report lost or stolen CACs immediately to the TA.

11.5. The KO may delay final payment under the contract if the Applicant (Contractor) fails to comply with these requirements.

12.0. ACCESS TO ARMY INSTALLATIONS – PERSONNEL and VEHICLES

The Government recognizes the important roles companies like you play in our day-to-day operations. That is why USAG-Hawaii is enhancing the current access control solution called the Automated Installation Entry (AIE) Program. This program supports the security requirements while offering a streamlined access procedure for vendors, contractors, sub-contractors, suppliers and service providers. This program is available to new and existing personnel who require access to USAG-Hawaii and are not authorized to receive a Department of Defense CAC and desire a streamlined entry into the installation. Sponsorship and participation at each USAG-Hawaii location (e.g., Schofield Barracks, Wheeler Army Airfield, Fort Shafter, Tripler Army Medical Center, Pililaau Army Recreation Center and Pohakuloa Training Area) is required.

AIE Credential holders may access the installation through any of the USAG-Hawaii Gates that size allows and will only be subject to random inspections.

Companies that choose not to participate in the AIE Program will have limited access through the Schofield Barracks Lyman Gate, Fort Shafter’s Buckner Gate and Tripler Army Medical Center Main Gate. All employees will be required to go through the inspection area and will be subject to the standard access control procedures, security screenings, and/or vehicle inspections.

Key Dates*

Effective 26 December 2021, RAPIDGate badges will no longer be authorized for long term access.

Effective 26 December 2021, the only long-term Contractor credential available for access is the AIE Credential. The only other valid pass available for access is a seven (7) day pass.

*Access control changes can occur at any time due to security requirements

Companies that service USAG-Hawaii facilities may initiate enrollment in the AIE Program by contacting the Contracting Officer’s Representative (COR).

If you have questions regarding the AIE Program at USAG-Hawaii, please contact Security Branch Operations, at 808-656-0232.

· AIE Program Enrollment Process for Background Check and Process to obtain AIE Badge

Enroll your company by contacting the COR who will be the Sponsor. The COR will provide the excel spreadsheet for the list of contractor employee information. The following information is required from the contractor: last name, first name, date of birth, status, social security number, company name, and contract number. The COR will complete the Sponsor information and provide the list to the Directorate of Emergency Services (DES) Access Control Division. The DES will conduct the background check to vet personnel prior to arrival to pick up their AIE Badge, and will ensure a more efficient process while saving time.

The AIE Program performs background screening and credentialing.

DES will contact the COR (Sponsor) once the background checks have been validated to schedule a time for the contractor employees to go to one of the registration locations and complete the process to obtain the AIE Badge.

Contractor employees should bring an acceptable form of identification (see List A and List B) to the appointment. Upon arrival, a photo will be taken to complete the process.