PWS_DRAFT_WSTC_Env_Services_01_Dec_2015.docx

Performance Work Statement Environmental Services – White Sands Test Center White Sands Missile Range

C.1 GENERAL INFORMATION

C.1.1 Background

In performing work under this contract, the Contractor shall provide all necessary management, tools, materials, supplies, supervision, transportation, equipment, and labor to accomplish this work, unless specified as government furnished equipment (GFE) in connection with implementing the environmental services contract for the Army Test and Evaluation Command (ATEC) at White Sands Missile Range (WSMR). Work can include, but is not limited to, Resource Conservation and Recovery Act (RCRA) hazardous waste handling and management, solid waste, recycling, hazardous materials, spill response, sampling, remediation, rodent decontamination – a disease vector of Hantavirus, asbestos sampling and abatement, and Petroleum, Oil and Lubricants (POL) management. This contract also includes National Environmental Policy Act (NEPA), Environmental Assessments (EA), Environmental Impact Statements (EIS), Record of Environmental Considerations (REC), archaeological and biological surveys and Integrated Training and Testing Area Management (ITAM) under the Sustainable Range Program. This contract shall conform to Department of Defense (DoD), Army, WSMR, Occupational Safety and Health Act (OSHA), New Mexico Environment Department (NMED) and Environmental Protection Agency (EPA) regulations.

C.1.2 Scope

The Mission of WSMR is that of the largest overland military test range in the United States. The White Sands Test Center is a subordinate organization of the Army Test and Evaluation Command (ATEC) who supports the testing of some of the worlds most advanced sophisticated weapons systems. White Sands Test Center is a Research, Development, Test & Evaluation (RDT&E) agency that organizes and administers the rapidly changing, fast paced test programs on the range. While performing testing at the range, safety is key as well as ensuring compliance to both State and Federal environmental regulations.

This contract shall be available for WSMR Test Center directorates which includes Range Operations Directorate (RO); Survivability, Vulnerability and Assessment Directorate (SV); Systems Engineering Directorate (SE); Information Management Directorate (IM), the Material Test Directorate (MT) and WSMR Test customers requiring environmental support. Other organizations that get support from this contract at this time are PEO-STRI and Defense Threat Reduction Agency. This contract requires a daily presence in order to support the various organizations needs as described in C.5, Specific Tasks.

C.1.3 Objective

The government plans to award a firm fixed price IDIQ type contract. The period of performance will be for 1 Base year plus 4 option years, with the objective of a compliance based contractor. A proactive environmental program is required with zero tolerance to fines, penalties, and/or violations by internal or external inspectors.

C.1.4 WSMR Information

WSMR is located in southern New Mexico and encompasses approximately 2.2 million acres. WSMR is 30 miles east of Las Cruces, NM, and 45 miles north of El Paso, Texas.

C.1.5 Hours of Operation

WSMR currently operates on an alternating compressed work schedule with hours of Monday through Thursday 7:00 AM to 4:30 PM with alternating Friday’s as a Regular Day Off (RDO). The RDO is an eight (8) hour day which allows for a 2 week work period of 80 hrs. Overtime for technicians could be required for some projects, and mission critical related support may require odd hours in support of missions. Flexible work periods can be used to accommodate occasional mission support requirements. Overtime must be approved in advance by the contracting officer or his representative.

C.1.5.1 Federal Holidays. There are 10 recognized holidays by the Federal Government:

C.1.6 Area of Responsibility

The primary area of performance shall be within the designated boundaries of WSMR (3,200 sq miles) see map next page. However, performance may be required in the WSMR Northern Call-up area, Western Call-up area, to include WSMR activities off range in southern New Mexico such as National Forest lands and/or Bureau of Land Management (BLM) lands, Fort Wingate, NM, Green River, UT, other off-range sites in New Mexico, Utah and Idaho.

C.1.7 Road Blocks

Road blocks and evacuations may occasionally impact the range support activities. Access roads to and within the boundaries of White Sands Missile Range are subject to closing for live missile firings or other military operations. Roadblocks are normally one to four hours in duration. This does not relieve the contractor from performance of his/her contractual duties. Occasional rescheduling of work requirements may result due to missile firings or other military operations. It is the contractor’s responsibility to reschedule any and all work requirements due to roadblocks and evacuations. Roadblock information may be obtained by calling (575) 678-1178 or 678-2222.

C.1.8 CONTRACTOR VEHICLES AND VEHICLE REGISTRATION.

C.1.8.1 State Vehicle Registration. Motor vehicles entering WSMR shall have a valid state registration and operators shall possess a valid motor vehicle license and insurance to go with each vehicle per State requirements. Vehicles shall be registered prior to commencement of contract work. State license and registration shall be maintained current during the time the vehicle is in use on this installation.

C.1.8.2 Installation Vehicle Registration. Contractor personnel shall comply with any installation vehicle registration requirements that may be implemented during the life of the contract. Required forms may be obtained through the local Police Desk or on the WSMR Intranet.

C.1.8.3 Vehicle Operation. Contractor personnel operating motor vehicles on the installation shall have a valid state operator’s license for the category of vehicle being operated (Class A, B, C & D) as well as required endorsements, and shall comply with AR 190-5 (Motor Vehicle Traffic Supervision and the Installation Traffic and Mobilization Plan regarding motor vehicle use on the installation).

C.1.8.4 Vehicles. The contractor shall provide all vehicles necessary for the full performance of the PWS. These vehicles shall be able to accommodate and be capable of carrying large loads of containerized hazardous waste selected at the contractor’s discretion. Contractor shall be responsible for all maintenance, fuel, and repair of all vehicles. The contractor shall price all vehicle costs (lease and or purchase costs, operation, fuel, maintenance, depreciation, insurance, etc.) into the firm fixed price CLINs of the contract. Contractor shall be responsible for replacement and upkeep of these vehicles to ensure vehicles are in proper working conditions to meet mission requirements at all times.

C.1.8.5 Vehicle Fuel. The contractor will be responsible for any fuel costs associated with the performance of this contract. When government vehicles were provided on this contract the average number of miles and gallons used over the calendar year 2011 and 2012 is 20919 miles and 1651 gallons of fuel. It is understood that fuel prices are extremely volatile and it is difficult to predict with any reasonable degree of accuracy over an extended period of time. As such, the government and the contractor will meet on an annual basis to review market fuel prices and determine if a contract modification is necessary due to decreases or increases in market fuel prices. All contractor requests for increases to contract costs due to increases in fuel prices shall have a clear, logical rationale with supporting documentation that will provide the Government adequate information to support an increase in fuel prices. The Government reserves the right to reject any request that is not fully supported. Unleaded fuel is available for purchase at the local AAFES gas station on main post only. Diesel fuel is not available for contractor vehicles and should be considered when acquiring vehicles.

C.1.8.6 Contractor Marking of Vehicles. Contractor motor vehicles shall be clearly identified as contractor-operated vehicles to distinguish them from DoD motor vehicles operated by the DoD Components.

C.1.9 Security Requirements

Questions regarding CLASSIFIED information shall be handled through the White Sands Test Center Security (WSTC) Office. Specifically, any entity wanting to ask a question regarding CLASSIFIED information shall send an email to the WSTC Security Office, the Technical POC and the Business POC stating that the entity would like to ask a question regarding CLASSIFIED information. DO NOT EMAIL ANY QUESTIONS THAT MAY CONTAIN CLASSIFIED INFORMATION. The Security POC will contact the entity and arrange for the question pertaining to CLASSIFIED information be asked through a secure method of communication.

C.1.9.1 Access and general protection/security policy and procedures

Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.9.1 (a) Scheduling. Contractors should work closely with the CO and/or the COR who has access to the installation training schedule. Work/deliveries should be scheduled accordingly by the Contractor.

1.9.1 (b) Exercises. Contractors may as part of the exercise be required to provide an accountability of personnel to the CO and/or the COR of numbers of employees on hand and locations.

1.9.1 (c) Unauthorized weapons/firearms. Contractor, contractor employees, all associated sub-contractors, and subcontractor employees are not permitted to bring Privately Owned Weapons/Firearms on the installation.

1.9.1 (d) Search and Seizure. Contractor personnel and property shall be subject to search and seizure upon entering, while on and upon leaving the confines of WSMR and areas the contractor is providing official support duties.

1.9.1 (e) Operational delays as a result of Threat, Disaster, Weather, or Operational Testing. The Senior Mission or Garrison Commander as a result of an increase in threat, disaster, inclement weather or operational testing may require the installation curtail operations, limiting access to essential government employees only, block/restrict movement on major roads on or leading to WSMR, or close the installation. The contractor cannot hold the US Government or the Command at the installation responsible for cost overruns as a result of these operational decisions.

C.1.9.2 Common Access Card (CAC)

Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management

1.9.2 (a) Common Access Card (CAC) Issuance. The contractor, through their human resources or personnel office, will send the government COR a request for a CAC card if required. The application for the CAC card is normally obtained through the Trusted Associate Sponsorship System (TASS) website. The on-line application will be submitted in the TASS by the contractor to the COR. Contractor CAC card and WSMR Network access require an NACI (National Agency Check with Written Inquiries) Investigation using the SF 85P form. The COR will approve the application and process for issuance. In order to acquire the CAC card the contractor employee shall present a current Federal or State photo identification (such as a driver’s license) and proper identification with their social security number. The contractor is responsible for accountability of the CAC card and must return it to the COR upon request or when the employment for an individual ends. Lost CAC cards must be reported to the COR with an account of the circumstances and explanation of actions to prevent reoccurrence prior to issuance of a replacement card.

C.1.9.3 Initial, Annual, and Program Specific Security Training

Government furnished and required security training includes Initial (New Hire) and Annual Information Assurance, iWATCH, Antiterrorism, OPSEC, Threat Awareness and Reporting Program (TARP) Training, and any other command mandated training. These trainings may be tracked or documented using either hard copy sign in sheets, online automated tracking programs, or Common Access Card (CAC) Verification. The method of tracking will be identified to the contractor through the COR prior to start of the training activity. There are program specific trainings in the area of AA&E, INFOSEC, COMSEC and other security disciplines that will be identified and tracked by the program/project manager.

1.9.3 (a) Part and full time permanent employees requiring either WSMR Network access, installation access in excess of six months or both will be required to complete all security mandated trainings which will be assigned and tracked through the ATEC Training Tracker Module (ATTM).

1.9.3 (b) Casual, temporary, and those employees that do not have WSMR Network access will be required to complete all assigned security trainings assigned through the ATTM to those employees identified above. However, the delivery and tracking method will be coordinated by the FSO and the WSTC Industrial Security Officer (ISO). Annually (last week of August) a report of all such employees, identifying the completion date of each training event by each employee will be provided to the WSTC ISO.

1.9.3 (c) New hire security training will be completed by all new hires to the command. For the purposes of security training events a new hire will be defined as an employee that is newly hired to the command or is returning after a break in service/employment in excess of one year. If an employee was previously a service member, civil servant, or employed with another contractor assigned to or contracted by the WSMR/ATEC Command and did not have a break in service in excess of one year they will not be considered a new hire. Coordination between the FSO and ISO to identify and track these personnel is required.

C.1.9.4 Threat Awareness Reporting Program

Per AR 381-12 Threat Awareness and Reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trainer as specified in 2-4b of AR 381-12.

C.1.9.5 Facility Clearance

On site activities performed under the organization's facility clearance shall be governed by the approved DD Form 254 of this contract. Instructions for the safeguarding of classified information will be indicated on the DD Form 254 issued to the contractor with this statement of work. Contractor shall comply with FAR 52.204‐2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with:

(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22‐M); any revisions to DoD 5220.22‐M, notice of which has been furnished to the contractor.

(2) The Contract Security Classification Specification (DD Form 254).

(3) DoD 5200.1, Volumes 1-4. DoD Information Security Program

(4) AR 380-5, Department of the Army Information Security Program

C.1.9.6 Personnel Security Clearances, Investigations and Owning/Servicing Relationships

The contractor shall apply for security clearances for contractor personnel within 10 workdays after contract award for all personnel that are required to perform services at the confidential level or above. Contractor shall initiate security clearance action in accordance with DoD 5220.22.M (National Industrial Security Program Operating Manual (NISPOM). Employees with security clearances must maintain the clearance level throughout the duration of their employment. Personnel who have not received security clearances will not:

• Be granted access to classified information

• Be allowed to perform classified work.

• Be granted access to restricted areas, unless escorted by a person having proper clearance and authorization.

• Handle AA&E material, AA&E keys or AA&E data.

Failure of the contractor to manage or maintain personnel with proper security clearances does not relieve the contractor from providing sufficient personnel with expertise to perform the services required by the Performance Work Statement (PWS).

The FSO of the parent company will provide the WSTC Personnel Security Manager (PSM) with a list of all personnel, "Owned" or "Serviced" through the Joint Personnel Adjudication System (JPAS) and assigned to this contract within 10 workdays after contract award. A monthly update to the list will be provided to the COR and WSTC PSM by the first Wednesday of each month. The FSO will maintain an "Owning" relationship with all personnel employed by the parent company and a "Servicing" relationship with all subcontractor personnel. These relationships will be maintained for personnel in possession of a security clearance as well as for those personnel that do not have a clearance but have undergone a NACI background check for the purpose of being vetted for CAC issuance.

C.1.9.7 Antiterrorism Requirements

Contractor shall comply with the Antiterrorism/Force Protection (AT/FP) requirements IAW AR 525-13, WSMR Installation AT Plan, WSTC AT Plan, and approved supplemental AT/FP guidance or any AT/FP Plan, Regulation or supplemental guidance that supersedes the above mentioned documents. These requirements include, but are not limited to, annual AT Level 1 training (Via ATEC Training Tracker Module), OCONUS Travel Briefs, preparation of Organizational Consolidated Force Protection, Security, and Evacuation Plans, and the conduct of the WSMR/WSTC Random Antiterrorism Measure Program. These publications may be provided at the contractor’s request.

C.1.9.8 AT Level I Training

All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: http://jko.jten.mil

C.1.9.9 iWATCH Training

The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the appropriate personnel. This training shall be completed within 30 calendar days of contract award and within 15 calendar days of new employees commencing performance with the results reported to the COR NLT 45 calendar days after contract award.

C.1.9.10 Interaction and/or Disclosure with a Foreign Country or Foreign National Personnel

Contractor shall comply with Foreign Disclosure and Contacts with Foreign Representatives IAW AR 380-10, DoD 5230.11, Disclosure of Classified Military Information to Foreign Governments and International Organizations, DoD 5230.20, Visits, Assignments, and Exchanges of Foreign Nationals and WSMR SOP, Foreign National Personnel Visits/Foreign Disclosure. These publications may be provided at the contractor's request. Under no circumstances shall the contractor disclose data or information gathered in the execution of this contract without express written direction or permission from the Government.

C.1.9.11 OPSEC Requirements

Contractor shall comply with the Operations Security (OPSEC) requirements IAW AR 530-1, WSMR OPSEC Standard Operating Procedure (SOP), WSTC OPSEC Plan, US ATEC Policy Bulletin 14-12, and approved supplemental OPSEC guidance or any OPSEC Plan, SOP, Regulation or supplemental guidance which supersedes the above mentioned documents. These requirements include, but are not limited to, annual OPSEC Awareness training, OPSEC review and approval of government/RDT&E information prior to its public release. These publications may be provided at the contractor’s request.

1.9.11 (a) Formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

1.9.11 (b) OPSEC Training. Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter.

C.1.9.12 Physical Protection of Government Facilities and/or Equipment

Contractor shall comply with conventional key and lock requirements under AR 190-51 and WSMR Reg. 190-6 for those facilities, areas, and equipment that are not governed by AA&E or NISPOM Requirements (e.g. office space that does not process or store classified or AA&E material). These publications may be provided at the contractor’s request.

C.1.9.13 Requirement for Unclassified//For Official Use Only (FOUO) Handling Instructions. (If not present on a DD Form 254)

PROTECTING "FOR OFFICIAL USE ONLY" (FOUO) INFORMATION

1.9.13.1 GENERAL:

(a) The "For Official Use Only" (FOUO) marking is assigned to information at the time of its creation in a DoD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

(b) Other non-security markings, such as "Limited Official Use" and "Official Use Only" are used by non-DoD User Agencies for the same type of information and should be safeguarded and handled in accordance with instruction received from such agencies.

(c) Use of the above markings does not mean that the information cannot be released to the public under FOIA, only that the Government must review the information prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions thereof.

1.9.13.2 MARKINGS:

(a) An unclassified document containing FOUO information will be marked "For Official Use Only" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

(b) Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked, "FOUO."

(c) Any "'For Official Use Only" information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer. "This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA. Exemptions apply."

(d) Removal of the "For Official Use Only" marking can only be accomplished by the originator or other competent authority. When the "For Official Use Only" status is terminated, all known holders will be notified to the extent practical.

1.9.13.3 DISSEMINATION:

Contractors may disseminate "For Official Use Only" information to their employees and subcontractors who have a need for the information in connection with a classified contract. Contractors must ensure employees and subcontractors are aware of the special handling instructions detailed below.

1.9.13.4 STORAGE:

During working hours, "For Official Use Only" information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after- hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

1.9.13.5 TRANSMISSION:

"For Official Use Only" information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail. DoD components, officials of DoD components, and authorized DoD contractors, consultants, and grantees send FOUO information to each other to conduct official DoD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. To prevent unauthorized disclosure, consider attaching special cover sheets, the location of sending and receiving machines, and whether authorized personnel are around to receive FOUO information. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records "For Official Use Only" and tell the recipient the information is exempt from public disclosure under the FOIA and requires special handling.

1.9.13.6 DISPOSITION:

When no longer needed, FOUO information must be shredded.

1.9.13.7 UNAUTHORIZED DISCLOSURE:

Unauthorized disclosure of "For Official Use Only" information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.

C.1.9.14 CyberSecurity Training / Certification:

1.9.14 (a) CyberSecurity (CS) Training (User Level Access).

(1) All Contractor personnel with access to Government information systems and networks shall successfully complete all required CS awareness training as specified in AR 25-2 and as specified by the Government requiring activity. This includes training mandated in Army CIO / G6 ALARACT message 293/2007, Subject: Implementation of Standard DoD IA Awareness Training, dated 261800Z Dec 07. Training is available at https://ia.signal.army.mil.

(2) Contractor employees and subcontractor employees performing work under this contract who have access to Government information systems and networks shall create a user account and profile in the Army Training and Certification Tracking System website (ATCTS) at https://atc.us.army.mil, in the unit container managed by the COR. Certificate of successful completion of CS training (DoD Cyber Awareness Challenge Training), Acceptable Use Policy (AUP), and DD Form 2875 – System Authorization Access Request (SAAR), shall be uploaded to the ATCTS and provided to the COR for continuous compliance monitoring and reporting.

(3) The Contractor shall ensure that all contractor employees and subcontractor employees requiring CS awareness training, DoD Cyber Awareness Challenge Training, complete the training at the start of work performance on this contract and annually thereafter for the duration of this contract and require employees to maintain their information in a ‘current’ status at the ATCTS website.

(4) The Contractor shall ensure that all contractor employees and subcontractor employees performing work under this contract who have access to Government information systems and networks, upon having completed the above referenced requirements for User Level Access, have been issued common access cards (CAC) and / or SIPR tokens for user authentication. Violations of the individual use of the issued and authorized means of authentication will be treated as a security violation and may terminate the contract.

1.9.14 (b) CyberSecurity (CS) Training / Certification (Technical Level Access).

(1) All Contractor personnel with access to Government information systems and networks shall successfully complete all required CS awareness training, DoD Cyber Awareness Challenge Training, as specified in AR 25-2 and as specified by the Government requiring activity. This includes training mandated in Army CIO / G6 ALARACT message 293/2007, subject: Implementation of Standard DoD IA Awareness Training, dated 261800Z Dec 07. Training is available at https://ia.signal.army.mil.

(2) Contractor employees and subcontractor employees performing work under this contract who have access to Government information systems and networks shall create a user account and profile in the Army Training and Certification Tracking System website (ATCTS) at https://atc.us.army.mil, in the unit container managed by the COR. A certificate of successful completion of CS training (DoD Cyber Awareness Challenge Training), Acceptable Use Policy (AUP), DD Form 2875 – System Authorization Access Request (SAAR)s, Privileged Access Agreement (PAA), Appointment Orders, applicable baseline and computing environment certifications, and continuing professional education credits, as required by DoD 8570.01-M, shall be uploaded to the ATCTS and provided to the COR for continuous compliance monitoring and reporting.

(3) The Contractor shall ensure that all contractor employees and subcontractor employees requiring CS awareness training, DoD Cyber Awareness Challenge Training, complete the training at the start of work performance on this contract and annually thereafter for the duration of this contract and require employees to maintain their information in a ‘current’ status at the ATCTS website.

(4) The Contractor shall ensure that all contractor employees and subcontractor employees performing work under this contract who have elevated access to Government information systems and networks, upon having completed the above referenced requirements for Technical Level Access, have been issued common access cards (CAC) and / or SIPR tokens for user authentication and secondary authentication tokens tied to their technical level permissions. Violations of the use of the issued and authorized means of authentication will be treated as a security violation and may terminate the contract.

(5) DFARS clause 252.239-7001 (Cyber Security Contractor Training and Certification) applies to this contract. This contract is subject to the mandates of DoD 8570.01-M, which establishes baseline technical and management CS skills for personnel performing CS functions within DoD. Functions spanning multiple levels require certification of the highest-level functions. Contractor personnel performing functions in multiple categories or specialties shall hold certifications appropriate to the functions performed in each category or specialty.

(6) The Contractor shall ensure its IT (CS) workforce members have the baseline certifications corresponding to their IT (CS) functions, as defined in Chapters 3, 4, 5, 10, and 11, and Appendix 3 of DoD 8570.01-M at work performance start date. Contractors will obtain all required Computing Environment (CE) certificates within 6 months of being engaged. The IAT Level I baseline certification is the minimum requirement for unsupervised privileged access. The Contractor shall ensure that all employee certifications remain active and are renewed prior to expiration.

(7) The Contractor shall ensure that all employees CS certifications are released to the Department of Defense through the Defense Workforce Certification Application at https://www.dmdc.osd.mil/appj/dwc/index.jsp.

(8) Table 1 reflects the Personnel Security (IT Level) and CS Workforce Specialty requirements, aligning the CS functional responsibilities and access levels to the contract tasks, in accordance with DoD 8570.01-M.

Table 1. Information Technology (IT) Access and CS Certification Requirements.

(IAW AR 25-2)

Minimum Security Clearance

(9) All personnel responsible for implementing the IAVM process will join the Army IAVM Community Group on Army Knowledge Online (AKO) or current notification group to receive vulnerability and patching messages.

(10) The interim assignment of contractor personnel fulfilling IT positions will be restricted and implemented only upon documentation in the Risk Management Framework (RMF) Security Authorization Package (SAP) and acceptance of the Authorizing Official (AO) and the Contracting Officer evaluations on a case‐by‐case basis.

(11) Contractor personnel occupying an IT position will be subject to a periodic reinvestigation according to existing contract, labor relations, or personnel security policy.

(12) Contractors supporting CS functions will meet the background investigation requirements in accordance with AR 25‐2 (see Table 2 and Table 3).

Table 2. Investigative levels for users with privileged access (IT‐I) to ISs

Privileged access — IT‐I 1

CTR

Conditions or examples

SSBI

With CIO/G‐6 written approval, contractors may continue as CS personnel until replaced

SSBI

Contractor may not fill MSC, installation, or post ISSM position

SSBI

Contractor may not fill MSC, installation, or post ISSO/ISNO/ISNE position (if created)

Table 3. Investigative levels for users with limited privileged access (IT‐II) to ISs

Limited privileged access — IT‐II 1

(see note 2)

Supervisor of IT I or IT II positions

Notes:

1. Investigative levels are defined in DOD 5200.2‐R. FN refers to all individuals who are non‐U.S. citizens, including U.S. military personnel, DOD civilian employees, and contractors.

2. FN — under the immediate supervisor of a U.S. citizen.

(13) Contractor personnel supporting CS functions in accordance with DoD 8570.0‐ M shall provide verification to the Defense Eligibility Enrollment System (DEERS). In addition, all contractor positions supporting CS functions will be assigned a CS workforce Category, Specialty and IT Level code in the contract. These codes must be identified by the contractor to Defense Manpower Data Center (DMDC). Contractor personnel must also have their CS certification and function level documented in DMDC supported applications. They will also register for an ATCTS account in accordance with current guidelines.

(14) Non-Government-owned Computing Systems or Devices: The Contractor shall comply with AR 25-1 and AR 25-2. The Contractor shall not install or connect non-Government-owned computing systems or devices to Government networks without the COR's coordinating and obtaining proper authorization from the appropriate Command or Local level Information Systems Security Manager (ISSM), ensuring that all software has a Government Certificate of Networthiness. The non-Government-owned computing systems or devices include, but are not limited to, personal or Contractor-owned thumb drives (e.g., memory sticks, flash drives, Universal Serial Bus (USB) drives, jump drives, pen drives), removable or external hard drives, Personal Digital Assistants (PDA), PC Cards / Express Cards, MP3 players, cell phones, digital media, floppy disks, compact disc (CD) / digital video disk (DVD) burners, optical recordings, photo flash cards, laptops, cameras or any devices that can store data.

(15) Protection of Sensitive Unclassified Data / Personally Identifiable Information (PII): The Contractor shall ensure any sensitive information, including, but not limited to, Personally Identifiable Information (PII) and For Official Use Only (FOUO), proprietary, and Law Enforcement (LE) Sensitive information residing on Mobile Computing Devices (MCD) or other external media, is protected in accordance with current Data at Rest (DAR) guidelines and requirements. The Contractor shall use an authorized, approved, and prescribed DAR solution. The MCDs include, but are not limited to, laptop, netbook, notebook, or tablet computers, and Blackberry or equivalent devices. External media include optical disk media such as CDs, DVDs, USB drives (also referred to as flash or thumb drives) (when authorization to use them is restored), floppy disks, and other portable digital storage devices. Guidance for protecting DAR information appears in DoD Policy Memorandum, 3 Jul 07, subject: Encryption of Sensitive Unclassified Data-at-Rest on Mobile Computing Devices and Removable Media and in DoD Component implementing instructions.

C.1.10 Fire Protection

When fire protection is not available from other sources, the Government will provide fire protection services from the local installation. Contractor shall be responsible for disseminating emergency phone numbers to the contractor’s employees. (678-1234 from a cell phone and 911 from the land line.) Contractor shall comply with the local fire prevention and protection requirements of WSMR and AR 420-1 (Army Facilities Management).

C.1.11 Unexploded Ordnance Policy

The contractor must comply with the current Unexploded Ordnance Policy (UXO). See www.wsmr.army.mil.

C.1.12 Interface with Government Operation

Performance of work by contractor personnel shall not interfere with regularly scheduled Government operational activities.

C 2.0 Work Management

2.0 Contractor Representative

The contractor shall notify the Contracting Officer (KO) on all matters that may affect the terms of the contract. The KO is the only person that has the authority to act or make decisions on matters pertaining to the contract. The contractor shall provide the name, address, and telephone number for the contract POC to the Contracting Officer within 5 working days after contract award. The Contracting Officer shall be notified verbally, and in writing of changes as they occur.

C.2.1 Minimum Personnel Qualifications

C.2.1.1 Contractor personnel are required to be knowledgeable and experts in the field of Integrated Training (and Testing) Area Management (ITAM), Resource Conservation and Recovery Act (RCRA), Archaeology and National Environmental Policy Act (NEPA). Contractor personnel shall have appropriate degrees to meet the contract objectives. Personnel shall possess the training, certifications and licenses in order to perform under this contract.

C.2.1.2 Certain experienced professional and/or technical personnel are essential for successful accomplishment of the work to be performed under this contract. Such personnel are defined as “Key Personnel”. These persons shall submit resumes for evaluation. The contractor agrees that such personnel shall not be removed from the contract work or replaced without compliance to the following:

(a) If one or more of the key personnel, for any reason, becomes or is expected to become unavailable for work under this contract for a continuous period exceeding 30 work days, or is expected to devote substantially less effort to the work than indicated in the proposal or initially anticipated, the contractor shall, subject to the concurrence of the Contracting Officer or his designated representative, promptly replace personnel with personnel of equal ability and qualifications.

(b) All requests for approval of substitutions hereunder must be in writing and provide a detailed explanation of the circumstances necessitating the proposed substitutions. The request must contain a resume for the proposed substitute, and any other information requested by the government. The Contracting Officer shall promptly notify the contractor of approval or disapproval in writing.

C.2.1.3 If the Contracting Officer determines that suitable and timely replacement of Key Personnel who have been reassigned, terminated or have otherwise become unavailable for the contract work is not reasonably forthcoming or that the resultant reduction of productive effort would be so substantial as to impair successful completion of the contract, the Contracting Officer may terminate the contract for default or for the convenience of the Government, as appropriate, or make an equitable adjustment to the contract to compensate the Government for any resultant delay, loss or damage.

C.2.1.4 The following functional areas are identified as Key Positions. More than one functional area may be covered by the same individual provided sufficient expertise and training in multiple disciplines can be established.

(1) Program Manager

(2) NEPA Practitioner**

(3) Archaeologist*

(4) Hazardous Waste/Resource Conservation and Recovery Act

*Archaeology: All Principal Investigators must meet the qualifications for Archaeologists contained in the Secretary of the Interior Standards and Guidelines for Archaeology and Historic Preservation (48 CFR 44720-44726) or the New Mexico Administrative Code Qualification for Archaeological, 4.10.8.10. This states that the individual must have a graduate degree in archaeology or anthropology and a minimum of 30 months of full-time professional experience. It is also required for the archaeologist to maintain a registry with the state of New Mexico and maintain an ARMS (Archaeological Resources Management System) account.

**The National Environmental Policy Act (NEPA) can be filled with any discipline such as environmental engineering, biologist, archaeologist, geologist or ecologist as long as the individual has three years of experience in the NEPA field. Army experience is preferred, but not necessary.

C.2.2 Quality Control

The contractor shall implement a complete quality control program that identifies potential and actual problem areas in performing the required services. A Quality Control Plan (QCP) shall be part of the contractor Work Plan.

C.2.2.1 The Quality Control Plan shall:

· Be structured to assure independence from any other parts of the contractor’s organization.

· Have direct accountability to contractor top management.

· Address overall project management and administration.

· Be a comprehensive program to plan and deliver quality services.

· Cover all services, prioritize services, and concentrate on the most important services.

· Describe a method of identifying deficiencies and address processes for corrective actions.

· Establish an inspection system for all services.

· Contain specific quality control techniques for contract services.

· Include a customer complaint feedback system.

· Require documentation of all inspections and corrective actions.

· Describe methods of direct and indirect communications.

C.2.2.2 Quality Assurance

Contractor performance will be monitored by the Government using a Quality Assurance surveillance plan (QASP). Acceptance will be determined by the standards found in the Performance Requirements Summary (PRS). See TE (Technical Exhibit) 1.

C.2.3 Safety

The contractor shall develop and implement a safety plan with standard operating procedures (SOP’s) for this contract. This shall be a part of the contractor’s deliverable Safety plan under the Work Plan.

C.2.3.1 Regulations: The contractor shall comply with the Occupational Safety and Health Act (OSHA); Federal, Army and Local Safety Regulations; 29 CFR, WSMRR 385-18, AR 190-5, ATEC Regulation 385-1, and OSHA Voluntary Protection Plan (VPP) It is the contractor’s responsibility to be aware of all applicable regulations involved during the execution of this contract. The contractor shall provide safety training as required by OSHA to all of its employees covered under this contract.

C.2.3.2 Accident Reporting: The contractor shall maintain an accurate record of accidents. All accidents shall be reported to the Contracting Officer, the Contracting Officer Representative, and the WSMR Safety Office without delay. Contractor shall provide “OSHA Form 300A, Summary of Work Related injuries and Illness” through the Contracting Officer to Installation Safety Office after each incident and an annual report, NLT 01 Feb of following year. A detailed accident report shall be submitted as well.

C.2.3.3 First Aid: During activities that the contractor shall be performing under this contract, long days and remote sites are normal operations. Standards for medical services and first aid will be required, IAW 29 CFR 1926.50.

C.2.4 Reporting

C.2.4.1 Real – Time Cost Support (is there a new standardized MICC statement/system)

Contractor shall establish and maintain a financial tracking system that is compatible with the current Government financial system (Enterprise; Standard Operations and Maintenance Army Research (SOMARDS); Contractor Information Management System (CIMS), and General Fund Enterprise Business System (GFEBS. In the event the Government’s financial system changes during the life of the contract, the contractor system shall continue to be compatible. Contractor shall provide a weekly cost file that identifies, by category of each employee, all hours (regular and OT) and dollars for all work performed on a weekly basis. The Government will provide the format for this report. This file must be compatible with our financial system and allows for rapid charges to customer accounts. The report is due no later than 5 calendar days after the weekly reporting period’s cutoff date. The weekly files will add to the total submitted on the payment voucher. The contractor shall be responsible for providing cost transfer data from a carrier fund cite established within the funding lines on this contract to multiple fund cites provided by the government.

C.2.4.2 Contractor Manpower Reporting

“The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address “https://cmra.army.mil.

The required information includes: (1) Contracting Office, Contracting Officer, Contracting Officer’s Technical Representative; (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Estimated direct labor hours (including sub-contractor); (6) Estimated direct labor dollars paid this reporting period (including sub contractor); (7) Total payments (including subcontractor); (8) Predominant Federal…