Attachment 2_Peformance Work Statement (PWS).pdf

PERFORMANCE WORK STATEMENT (PWS)

Page 1 of

UNITED STATES SOUTHERN COMMAND (USSOUTHCOM)

FOR

SUPPORT TO SPECIAL INFORMATION OPERATIONS (SIO)

7 January 2020

PART 1

General Information

1. GENERAL: This is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. The Contractor shall ensure that all contractor employees and subcontractor employees are medically, dentally, and psychologically fit for performance of their duties.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Support to SIO as defined in this PWS except for those items specified as government furnished property (GFP) and government furnished services (GFS). The contractor shall perform to the standards in this contract.

1.2 Background: United States Southern Command (USSOUTHCOM) is one of six geographic Combatant Commands responsible for the command and control of all United States military operations. Commander, USSOUTHCOM (CDRUSSOUTHCOM) is responsible to plan, execute and oversee Guantanamo Bay (GITMO) detention operations in accordance with U.S. law and Department of Defense directives. USSOUTHCOM J3 is the Commander’s lead staff responsible for special information operations throughout the Area of Operations (AOR).

The J3 develops programs, issues appropriate guidance and orders implementing the appropriate directives. All special information programs and guidance are subject to periodic review and evaluation for compliance and efficacy. The J3, via established Joint Staff guidance and directives, implements approval processes for the employment of special information operations. All SIO activities will be under the control of CDRUSSOUTHCOM.

The contractor shall provide support to CDRUSSOUTHCOM’s special information operations mission through staff support as outlined in this PWS.

1.3 Objectives: The Contractor shall possess the expertise, capability, and resources to effectively manage and oversee a sufficient, stable, adaptable and qualified workforce to provide required services in support of USSOUTHCOM’s special information operations including:

1.3.1 Support Special Technical Operations (STO) and Special Access Program (SAP) Systems. This work effort supports the coordination with numerous United States Government (USG) agencies and program offices to ensure local STO and SAP networks, equipment and peripherals are upgraded as required.

1.3.2 Support SAP Program Integration Operations and Security. This work effort involves the planning, execution, monitoring and assessment of SAP integration into operations.

1.3.3 Support SAP Program Integration Intelligence Operations Planning. This work effort involves the research, interpretation and analysis of all source intelligence products in order to support planning and execution of SAP operations.

1.3.4 Support SAP Security Operations and Sustainment. The work effort involves support to all related SAP, Alternate Compensatory Control Measure (ACCM) and STO activities.

1.4 Scope: The Contractor shall provide non-personal services in support of Special Information Operations.

1.5 Period of Performance: The period of performance shall be for a base period of one year with four (4), 12-month option periods. See contract for each performance period.

1.6 General Information:

1.6.1 Quality Control Plan (QCP): The Contractor shall develop, implement, and maintain a QCP and program to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor for its internal use to ensure that it performs and delivers high-quality service. The contractor’s QCP is the means by which the contractor ensures all work complies with the requirements of the contract. The QCP identifies and corrects potential and actual problem areas throughout the entire scope of the contract.

1.6.1.1 The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The QCP shall be submitted within thirty (30) days after date of contract. After acceptance of the QCP, the contractor shall receive the contracting officer’s (KO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation.

1.6.1.2 The Quality Control Plan shall address as a minimum:

1.6.1.2.1 Inspection Program. Included shall be a quality control inspection program covering all general and specific tasks included in the contract scope of work. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis. In developing this inspection program, the Contractor shall identify the key activities and associated characteristics in each process that have a significant influence on specific services and provide for methods for evaluation of the selected characteristics.

1.6.1.2.2 Deficiency Identification. The QCP shall include a method of identifying deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS. This shall contain processes for corrective action without dependence upon USG direction.

1.6.1.2.3 Deficiency Correction. The program shall contain process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.6.1.2.4 Documentation and Enforcement. The QCP shall include a method of documenting and enforcing quality control operations of both prime contractor and subcontractor work; including inspection and testing.

1.6.1.2.5 Trend Analysis. The QCP shall include a method of performing trend analysis and assessments through the use of metrics.

1.6.1.2.6 Surveillance Methods. The QCP shall contain specific surveillance techniques for all contract services.

The surveillance methods shall be comprehensive and adaptable to the reporting system of the plan.

1.6.1.3 Operations Security (OPSEC) SOP/Plan Requirements: The Contractor shall implement and maintain an OPSEC program for preventing the disclosure of critical information or sensitive information which could jeopardize the Government’s ability to execute its mission or to adequately protect its personnel and/or equipment.

The Contractor shall develop an OPSEC Standing Operating Procedure (SOP)/plan within 90 calendar days of after date of contract to the COR and KO to be reviewed and approved by the USG OPSEC Officer on the supporting installation. The SOP must contain a training plan that includes an initial OPSEC brief, continuous awareness, and annual OPSEC training. Awareness/training includes, but not limited to information disclosure via letters, conversations, photographs, resumes, electronic mail (e-mail), Social media/networking sites, disseminationof information and documents disposal. OPSEC Program shall fully comply with the provisions of AR 530-1, Operations Security.

1.6.2 Quality Assurance (QA): The USG shall evaluate the contractor’s performance under this contract in accordance with (IAW) the Quality Assurance Surveillance Plan. This plan is primarily focused on what the USG must do to ensure that the contractor has performed IAW the performance standards and contract quality requirements are met. Contract “quality requirements” means the technical requirements in the contract relating to the quality of the product or service and those contract clauses prescribing inspection, and other quality controls incumbent on the contractor, to ensure the product or service conforms to the contractual requirements. It defines how the performance standards will be applied, the frequency of surveillance, the performance threshold, and deductions, if applicable.

1.6.3 Recognized Holidays: The list below includes all identified Federal Holidays (http://www.opm.gov). Except as otherwise specified, routine work shall not be scheduled on holidays or holidays observed in Lieu thereof.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veterans’ Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business between the hours of 0800-1700, Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons.

The Contractor must, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at Headquarters, USSOUTHCOM, Doral, Florida, 33172.

1.6.6 Type of Contract: The USG anticipates the award of a Firm Fixed Price (FFP) contract with FFP/Not to Exceed (NTE) CLINs for overtime, travel, and training.

1.6.7 Access and General Protection Policy and Procedures:

1.6.7.1 FPCON: In addition to the changes otherwise authorized by the changes clause of the contract, should the US Government Force Protection Condition (FPCON) at any individual installation change, the USG may require changes in contractor security matters or process in accordance with DoDI 2000.16. During FPCONs Charlie and Delta, only contract services that have been deemed “mission essential” by the USG will continue. Contract services will resume when the FPCON is reduced to Bravo or lower.

1.6.7.2 Physical Security: The contractor shall be responsible for safeguarding all USG equipment, information, and property provided for contractor use. At the close of each work period, USG facilities, equipment, and materials shall be secured IAW Army Regulation (AR) 190-13, “The Army Physical Security Program.”

1.6.7.3 Escorts: N/A

1.6.7.4 Personnel Security Clearance Requirements: All contractor personnel performing work under this contract must have an active personnel security clearance at the Top Secret/Sensitive Compartmented Information (TS/SCI) level in the Joint Personnel Adjudication System (JPAS) at time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are IAW with the attached DD Form 254, “Department of Defense (DOD) Security Classification Specification”. The Contractor shall ensure that contractor employees and sub-contractor employees performing services under this contract comply with FAR 52.204-2, Security Requirements when the employee has access to information classified “Confidential,” “Secret,” or “Top Secret.” The Contract will ensure the employee complies with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M), and any revisions to DOD

5220.22-M, notice of which has been furnished to the Contractor.

1.6.7.4.1 The contractor shall follow DOD Federal Acquisition Regulation Supplement (DFARS) clause 252.223- 7004, Drug-free Work Force; and local USSOUTHCOM policies regarding drug testing. The contractor shall conduct drug tests, ensuring all top secret cleared contractor employees are tested at least once per year, each year of the contract, as well as when there is a reasonable suspicion that an employee uses illegal drugs. The drug testing shall be at the contractor’s expense. Positive drug test results shall be made available to both the KO and COR within 24 hours of known test results. Records of drug testing shall be made available to the COR.

1.6.7.5 Background Checks: The Contractor shall ensure contractor employees and subcontractor employees performing services under this contract have passed a security check conducted by the Host Nation Police Department of their residence or the State Police Department of their U.S. residence. Security checks that have been completed as part of a personnel security clearance background investigation, or a previous background check that was a condition of employment, meet this requirement. Documentation of these checks will be made available to the KO or COR upon request. The USG retains the right to exclude any employee from performance of duties under this contract if a background security check reveals an employee is a security risk. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. If the USG determines additional background checks are required, at a minimum, and upon request from the USG, the Contractor shall provide to the KO or COR, the following information on any contractor or subcontractor employee performing services under this contract:

Full birth name Married name (if applicable) SSN or local equivalent (ID card number) Date of birth Place of birth (city, country)

1.6.7.5.1 Background Check Notification Requirements: If a background check on any employee or subcontractor employee performing services under this contract, whether the check was conducted as a condition of employment or as part of the contract with the USG, reveals any information from any source (including host country law enforcement) of criminal activity by Contractor employees, subcontractors, or subcontractor employees, the Contractor shall immediately notify the KO and COR of that information. The Contractor shall make notification of:

(1) Traffic violations, other than parking, will be reported to the KO or COR only if the contract is for drivers for the USG;

(2) Any suspicious activity by Contractor employees, subcontractors, or subcontractor employees the Contractor believes may pose a risk to U.S. or host nation national security or imminent risk of deadly bodily harm to any person; and

(3) Any actions taken against Contractor employees, subcontractors, or subcontractor employees pursuant to this requirement.

1.6.7.5.2 Remedies. In addition to other remedies available to the USG, the Contractor’s failure to comply with the requirements of this paragraph my result in requiring the Contractor to remove a Contractor employee or employees from the performance of the contract.

1.6.7.5.3 Subcontracts. The Contractor shall include the substance of this paragraph and the preceding paragraph in all subcontracts.

1.6.7.6 Uncleared Contractor Common Access Card (CAC) Credentialing and Access Procedures

1.6.7.6.1 Contractor Common Access Card (CAC) Eligible Requirements: Before CAC issuance, the Contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The Contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DOD facility and access, via logon, to DOD networks on-site or remotely; (2) Remote access, via login, to a DOD network using DOD-approved remote access procedures; or (3) Physical access to multiple DOD facilities or multiple non-DOD federally controlled facilities on behalf of the DOD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.7.6.1.1 Federal Installation/Facility Access: Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The employee performing services under this contract shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, Security Office or the host nation equivalent.

1.6.7.6.2. Contractor Non CAC Eligible Requirements for DOD Facility and Installation Access: Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations. The employee performing services under this contract shall provide all information required for background checks to meet installation access requirements to the installation Provost Marshal Office, Director of Emergency Services, or Security Office.

1.6.7.7 Employment Eligibility: The Contractor shall ensure that all Contractor employees and sub-contractor employees performing services under this contract in the U.S. or its territories have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify. Personnel that have not met the employment eligibility requirement on this website are not authorized to perform services under this contract. Verification of the eligibility check will be made available to the KO or COR upon request. This requirement is not in lieu of and does not relieve the Contractor from the I-9 Employment Eligibility Verification Forms for employment of personnel.

1.6.7.8 Access to Government Information Systems: All Contractor employees and subcontractor employees performing services under this contract who have access to a government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services and must successfully complete the DoD Information Assurance Awareness training prior to access to the information system and then annually thereafter.

1.6.7.9 Key Control: N/A

1.6.7.10 Lock Combinations: N/A

1.6.8 Post Award Conference/Contract Periodic Progress Meetings: The Contractor shall attend the post award conference convened by the contracting activity or contract administration office IAW Federal Acquisition Regulation (FAR) Subpart 42.5. The KO, COR, with other USG personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the KO will apprise the contractor of how the USG views the Contractor's performance and the Contractor will apprise the USG of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: ensure the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.10 Key Personnel: The following personnel are considered key personnel by the government: The STO and SAP Systems Support, SAP Integration OPS and Security Support, SAP Integration Intel. OPS Support and SAP Security OPS Security OPS and Sustainment. Key personnel functions are listed in part (5) of the PWS. Resumes for all key personnel shall be made available to the Government upon request. When there is employee turnover the Contractor shall provide resume of new personnel to the COR ten (10) days before new personnel commence performance under the contract. The Contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the Contractor when the manager is absent shall be designated in writing to the Contracting Officer. The Contract Manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract.

Qualifications for all key personnel are listed below:

1.6.11 Special Qualifications or Certifications: The Contractor shall possess the special qualifications listed within Part 5 of the PWS and highlighted below:

1.6.11.1 Knowledge of the Federal Enterprise Architecture (FEA) and the DoD Enterprise Architecture framework (e.g., Secret Internet Protocol Router Network (SIPRNet) Nonsecure Internet Protocol (IP) Router Network, NIPRNet and Joint Worldwide Intelligence Communications Systems (JWICS) networks), and the Information Technology (IT) rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.

1.6.11.2 Knowledge of basic Microsoft office software applications (e.g., Word, PowerPoint, Excel, Access).

1.6.11.3. Special Skills Required for Support Special Technical Operations (STO) and Special Access Program (SAP) Systems. Must possess a minimum of five (5) years support experience in various aspects of IT systems and security (ie: help desk, system administration, project management, knowledge management), a minimum of three

(3) years of experience managing IT life cycle and maintenance programs (ie: upgrades, Defense Conference System, inventory) and a minimum of one (1) year relevant experience working in a joint/CCMD environment supporting various IT networks. Lastly, within three months of the date of contract, a DoD 8570 Certification is required, (CompTIA Network+ and/or Security+ certification).

1.6.11.4. Special Skills Required for Support SAP Program Integration Operations and Security. Must possess Introduction to SAP Security (SA101.01) course and shall possess a minimum of one (1) year experience as a Combatant Command or Service Headquarters SAP security lead. Must possess a thorough understanding of the Military Decision Making Process (MDMP), the Joint Operations Planning and Execution System (JOPES) / Adaptive Planning and Execution (APEX) processes, familiarity with Inter-agency coordination and bi-lateral cooperation agreements. In addition, must possess a minimum of three (3) years working in a joint/CCMD level and a thorough understanding of Program Access Requests, SAP records management, security violation procedures and TS document processing.

1.6.11.5. Special Skills Required for Support SAP Program Integration Intelligence Operations Planning. Must possess a minimum of five (5) years experience of SAP in joint/combined operations, a minimum one (1) year of SAP practical/applied experience at the Joint/Combatant Command (CCMD) level and a minimum of five (5) years experience in intelligence processing and planning. In addition, must have a thorough understanding of the Military Decision Making Process (MDMP), the Joint Operations Planning and Execution System (JOPES) / Adaptive Planning and Execution (APEX) processes, familiarity with Inter-agency coordination and bi-lateral cooperation agreements. Last, must have attended a joint and/or service level SAP/TS planner’s training course w/certification.

USSOUTHCOM AOR experience preferred.

1.6.11.6. Support SAP Security Operations and Sustainment. Must possess Introduction to SAP Security (SA101.01) course and shall possess a minimum of three (3) years experience as a Combatant Command or Service Headquarters SAP security manager. Must possess experience in the daily oversight and execution of all SAP and Focal Point activities. Experience in the preparation of AMHS messages and working with counterintelligence, human intelligence and other intelligence professionals is highly desirable. Lastly, must be willing to submit to randomly selected CI scope polygraph testing and additional security screeing, as required.

1.6.12 IA/IT Training Certification: All Contractor employees and subcontractor employees supporting IA/IT functions must be certified upon contract award as directed in DoD 8570.01-M, DFARS 252.239.7001, and AR 25-

2. Baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.13 Identification of Contractor Employees: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as USG employees. This identification includes meeting attendance, answering USG telephones, email communications, and working in other situations where Contractor status is not obvious. Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc. Contractor personnel will be issued a USSOUTHCOM picture identification badge which shall be worn and visible at all times during duty hours. All Contractor personnel shall comply with all applicable Federal, DoD, Command, and Unit security procedures, measures, requirements, regulations, and directives. USG issued identification remains the property of the Government and shall be returned to the issuing office or other designated Government personnel upon transfer or departure of Contractor personnel from HQ USSOUTHCOM.

1.6.13.1 Badging of Contractor Employees: If required by the Government, contract personnel and all associated subcontractors employees accessing U.S. facilities or activities, shall present a valid picture ID provided by the Government while accessing Government owned or contracted facilities and shall adhere to facility security policies and restrictions. If applicable, Government issued access badges will not be worn outside designated facility where visible to the general public.

1.6.14 Contractor Travel: Contractor shall be required to travel during the performance of this contract to attend meetings, conferences, and training. The Contractor may be required to travel to off-site training locations in support of this PWS. Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government pre-approval/authorization and notification to the COR ten (10) days prior to travel. The Contractor, in coordination with the Government, shall make necessary travel arrangements. Travel vouchers should be submitted within ten (10) days after completion of travel.

1.6.14.1 The Contractor shall be responsible for all travel expenses. The Contractor shall be responsible for all Contractor personnel leave expenses for the duration of the contract.

1.6.14.2 Other Direct Cost (ODC): Other Direct Cost includes travel. These cost must be pre-approved by the Contracting Officer.

1.6.15. Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply, and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.6.15.1 Advertisement and Social Media: The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The use of propaganda violates DoD Commercial Use of Imagery Guidelines stated at (http://www.defenseimagery.mil/products/DODimagery/commercialuse.html). The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.6.15.2 At no time will the Contractor or associated sub-contractor employees transmit government documents or information using methods that do not meet the security requirements specified in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" such as personal electronic mail accounts, public digital data storage sites (cloud storage), social media

Page 10 of platforms or instant messaging. Approved government sites such as DoD SAFE and can be accessed at https://safe.apps.mil, or All Partners Access Network (APAN) at https://community.apan.org/ , or other transmission means determined by the government must be used.

1.6.16 Organizational Conflict of Interest (OCI) Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.17 General Training Requirements:

1.6.17.1 Anti-Terrorism (AT) Level I Training: The Contractor shall complete AT Level I Training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR or KO within 10 calendar days after completion of training by all employees and subcontractor personnel. For Common Access Card (CAC) holders, AT Level I awareness training is available at https://jkodirect.jten.mil, course number “JS-US007-14”. For non-CAC holders, AT Level I awareness training is available at http://jko.jten.mil/courses/atl1/launch.html (this standalone version is intended for non-CAC users without a JKO account only). Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local AT Officer at their assigned location for classroom training by a Level 2 trained AT Officer and a copy of either the training certificate or the training attendance roster signed by the AT Officer will be maintained by the Contractor.

Verification of the training will be provided to the COR or KO within 10 calendar days after completion of the training.

1.6.17.2 OPSEC Awareness: If the Contractor, or a subcontractor, or employees of either disclose any information that disrupts or harms the Government's operations or activities, then the Government retains the right to exclude any employee from performance of duties under this contract. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. By way of example, personnel shall not sketch or take photos of government facilities or activities, unless related to service to be provided. All government paper products and removable digital storage material that is received, generated, or stored during the contract will be destroyed completely when no longer needed to preclude recognition of information.

1.6.17.3 Information Assurance (IA)/Information Technology (IT) Training: All Contractor employees and subcontractor employees requiring access to Government information systems must complete the DoD IA awareness training before issuance of network access and annually thereafter. All employees working IA/IT functions must comply with DoD and Army training requirements in Per DoD 8570.01, DOD 8570.01-M, and AR 25-2, within 30 days of employment. Training is available at https://ia.signal.army.mil/DoDIAA/default.asp.

1.6.17.4 Information Assurance(IA)/Information Technology(IT) Training ( As determined by AT/OPSEC Review):

N/A

1.6.17.5 Threat Awareness Reporting Program (TARP Training) (As determined by AT/OPSEC Review: NA

1.6.17.6 iWATCH Training: The Contractor will ensure that all Contractor employees and sub-contractor employees performing services under this contract have been briefed on the iWATCH Program, or equivalent for their supporting DoD Agency, within 30 days of employment under the contract. The Contractor will coordinate with the

Page 11 of supporting DoD Agency AT Officer through the COR or KO for the briefing. This training will be updated as required by the supporting installation AT policies. A copy of the training attendance will be maintained by the Contractor and made available to the COR or KO upon request.

Page 12 of

1.6.17.7 OPSEC Training: All Contractor employees and sub-Contractor employees performing services under this contract will complete Level I OPSEC training within 30 calendar days of employment under this contract. OPSEC Level I training is available at https://jkodirect.jten.mil, course number “EUC-ECJ6-110-N-LB”. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local OPSEC Officer at their assigned location for classroom training by a Level 2 trained OPSEC Officer and a copy of either the training certificate or the training attendance roster signed by the OPSEC Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or KO upon request.

1.6.18 Transition: The Contractor shall follow the transition plan submitted as part of the proposal and keep the Government fully informed of status throughout the transition period. Throughout the 15 day phase-in/phase-out period, it is essential attention be given to minimize interruptions or delays to work in progress that would impact the mission. The Contractor must plan for the transfer of work control, delineating the method for processing and assigning tasks during the phase-in/phase-out periods.

Page 13 of

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. Definitions:

2.1.1 Area of Responsibility. The U.S. Southern Command (USSOUTHCOM) area of responsibility (AOR) includes the geographic areas of Antigua and Barbuda, Argentina, Aruba, Barbados, Belize, Bolivia, Brazil, British Virgin Islands, Cayman Islands, Chile, Colombia, Costa Rica, Cuba, Curacao, Dominica, Dominican Republic, Ecuador, El Salvador, Falkland Islands, French Guiana, Grenada, Guadeloupe, Guatemala, Guyana, Haiti, Honduras, Jamaica, Martinique, Mayotte, Montserrat, Nicaragua, Panama, Paraguay, Peru, Saint Barthélemy, Saint Martin, Saint Kitts and Nevis, Saint Lucia, Saint Vincent and the Grenadines, Saint Maarten, Suriname, Trinidad and Tobago, Turks and Caicos Islands, Uruguay, and Venezuela.

2.1.2. Contractor. The total contractor organization or a separate entity of it; such as an affiliate, division, or plant that performs its own purchasing.

2.1.3. Contracting officer (KO). A person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings.

2.1.4. Contracting officer’s representative (COR). An individual designated and authorized in writing by the contracting officer to perform specific technical or administrative functions.

2.1.5. Defective Service. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.6. Deliverable. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.7. Key Personnel. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.8. Local National. For the purpose of this clause or provision, a local national (LN) is defined as any person who is performing services under a contract and is a resident of any country within the USSOUTHCOM AOR.

2.1.9. Performance Work Statement (PWS). A statement of work for performance-based acquisitions that describes the required results in clear, specific, and objective terms with measurable outcomes.

2.1.10. Physical Security. Protection of the perimeter area, government property, and assets that prevent the loss or damage of Government property.

2.1.11. Quality Assurance. The various functions, including inspection, performed by the government to determine whether a Contractor has fulfilled the contract obligations pertaining to quality and quantity.

2.1.12. Quality Assurance Surveillance Plan (QASP). A plan describing how the agency will survey, observe, test, sample, evaluate and document the Contractor’s performance in meeting critical performance standards identified in the contract.

2.1.13. Quality Control (QC). Tasks performed by the Contractor to improve the quality of the organization’s output.

2.1.14. Shall. Imperative.

Page 14 of

2.1.15. Subcontractor. Any supplier, distributor, vendor, or firm that furnishes supplies or services to or for a prime contractor or another subcontractor.

2.1.1.6. Work Day. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.1.7. Work Week. Monday through Friday, unless specified otherwise.

2.2 Acronyms:

AFFSSIR Armed Forces Repository of Specimen Samples ALMS Army Learning Management System ANSI American National Standards Institute AOR Area of Responsibility AR Army Regulation ATCTS Army Training Certification Tracking System AT Anti-Terrorism CAC Common Access Card CCMD Combatant Command CFR Code of Federal Regulations CI Counter Intelligence CLIN Contract Line Item Number CMDO Command Military Deception Officer CMR Contract Manpower Reporting CONPLAN Concept Plan CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative DD Form 254 Department of Defense Contract Security Requirement List DoD Department of Defense DODD Department of Defense Directive DODI Department of Defense Instruction FAR Federal Acquisition Regulation FCG Foreign Clearance Guide FY Fiscal Year GFE Government Furnished Equipment GFP Government Furnished Property GFS Government Furnished Services IA Information Assurance IAW In Accordance With IO Information Operations IT Information Technology JPAS Joint Personnel Adjudication System JTR Joint Travel Regulation KO Contracting Officer LN Local National LOA Letter of Authorization NCIC-III National Crime Information Center Interstate Identification Index NIST National Institute of Standards and Technology ODC Other Direct Costs OCI Organizational Conflict of Interest OCONUS Overseas Continental United States ODC Other Direct Costs OSHA Occupational Safety and Health Administration OPSEC Operation Security PIPO Phase In/Phase Out PRS Performance Requirements Summary

Page 15 of

PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan QCP Quality Control Program RA Requiring Activity SAPSM Special Access Program Security Manager SBI Special Background Investigation SOP Standard Operating Procedures SPOT Synchronized Predeployment and Operational Tracker TCN Third Country National TE Technical Exhibit TSDB Terrorist Screening Data Base USAG United States Army Garrison U.S.C. United States Code USG United States Government USNB United States Naval Base USSOUTHCOM United States Southern Command

THIS SECTION INTENTIONALLY LEFT BLANK

Page 16 of

PART 3

Government Furnished Equipment (GFE), Government Furnished Property (GFP), and Government Furnished

Services (GFS)

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services: The Government will provide all Contractor personnel with initial orientation / familiarization training on organizational structure and processes, workflow, and product formats.

3.2. Utilities The Government will provide all utilities in the facilities used for the performance of this contract and will be available for the Contractor’s use in the performance of tasks outlined in this PWS. The contractor shall instruct employees in utilities conservation practices. The Contractor shall be responsible for operating under conditions that preclude the waste of utilities.

3.3 Equipment The Government will provide furnished work space within Government facilities for Contractor personnel to include desks and chairs; access to Government networks (i.e., JWICS, SIPRNet, NIPRNet and desktop computers, telephones, copier, and other basic consumable/expendable office supplies required to complete the tasks described in this PWS. Contractor shall be required to sign for serial number items from the local Property Book Officer (PBO) or hand receipt holder

3.4 Materials: The USG will provide access to all necessary documentation required for performance of this contract. The USG will provide the Contractor with MIL access for manuals, texts, briefs, office supplies and other materials associated with the support requirements. Standard Operational Procedures, regulations, manuals, texts, briefs and other materials associated with the project and the hardware/software noted throughout this PWS.

3.5 Common Access Card (CAC): The Government will provide eligible contractor personnel who are authorized access to Government networks with a CAC. Eligible contractor personnel with USSOUTHCOM J39 approval may apply for government network access (NIPR, SIPR, and JWICS) through the HQ USSOUTHCOM Network Accounts Helpdesk.

PART 4

Page 17 of

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS.

4.2 Facility Security Clearance: The Contractor shall possess and maintain a TS/SCI facility security clearance from the Defense Security Service. The Contractor’s employees, performing work in support of this contract, shall have been granted a TS/SCI personnel security clearance from the Defense Industrial Security Clearance Office. The DD Form 254 is provided as Attachment

Page 18 of

PART 5

SPECIFIC TASKS

5. Specific Tasks: The Contractor shall provide non-personal services in support of Special Information Operations.

Specific task are listed below:

5.1. Basic Services. The Contractor shall provide services for USSOUTHCOM Special Information Operations for a total of 60 months and must maintain the standards listed within the PWS.

5.2. Special Technical Operations (STO) and Special Access Program (SAP) Systems Support. The Contractor shall support and coordinate with numerous government agencies and program offices to ensure the local STO and SAP networks, equipment, and peripherals are upgraded as required. This includes both new upgrades and equipment no longer in use requiring preparation for removal, sanitization, shipping to a destruction facility and documentation for the entire life cycle. The contractor shall interact with customers to provide and process information in response to inquiries, concerns and requests about IT products and services. Must track problem resolution efforts to ensure customer issues are properly addressed. The contractor shall coordinate with the DoD user community to collect customer requirements and resolve operational issues in a timely matter. The contractor shall provide customers with product and IT service support to include project coordination, Sharepoint Portal Management, Alternative Compensatory Control Measures (ACCM) database maintenance and Access Control Lists (ACLs). The contractor shall create, maintain and administer user accounts with the appropriate STO/SAP access levels. The contractor shall help establish/enforce policies, procedures and IT implementation guidance. The contractor shall serve as the liaison between USSOUTHCOM STO customers and IT project managers for new configuration requirements and application or hardware upgrades.

5.2.1. Special Requirements. This position shall require the individual to be on-call 24/7/365 and work non-standard shifts to include overtime and provide surge support, as required.

5.3. SAP Program Integration Operations and Security Support. The contractor shall support the planning, execution, monitoring and assessment of SAP integration into operations which includes but is not limited ot the following: supports the drafting of CONOPs for proposed and approved SAP activities and provides specific implementation recommendations for approval at the Flag Officer level. Assists in the development and implementation of processes and procedures for the assessment of SAP activities and the development of key briefings to Flag Officer for command decisions. Supports initial and annual refresher training for USSOUTHCOM staff in relation to Program Integration SAPs, assists the USG in conducting annual related security inspections and establishes annual security events calendar in accordance with DoD SAP directives.

5.3.1. Special Requirements. This position shall require the individual to be on-call 24/7/365 and work non-

5.4. SAP Program Integration Intelligence Operations Support. The Contractor shall support the research, interpretation and analysis of all source intelligence products in order to support planning and execution of SAP operations. The contractor shall assist the Program Integration SAP planning efforts working in coordination with operations, intelligence and counterintelligence planners internal and external to the command, as required. The contractor shall review SAP plans and activities to identify information gaps and intelligence shortfalls and supports the formulation of intelligence collection and analysis requirements to close all gaps and shortfalls. The contractor shall support the SAP Program Integration Operations with all related SAP programs.

Page 19 of

5.4.1. Special Requirements: This position shall require the individual to be on-call 24/7/365 and work non-

5.5. SAP Security Operations and Sustainment Support. The work effort involves support to all related SAP, Alternate Compensatory Control Measure (ACCM) and STO activities. The Contractor shall provide support to SAP and ACCM security while maintaining support for the writing, staffing, publishing and maintaining of all SAP security instructions applicable to USSOUTHCOM. The contractor shall support USSOUTHCOM SAP Security Manager (SAPSM) in the execution of applicable SAP and ACCM annual component Security Review Staff Assistance Visits.