RFI_DRAFT_PWS_Physical_Security_Program.pdf

Request for Information (RFI):

CECO-P-RFI-0001

Agency/Office:

United States Army Corps of Engineers (USACE) Physical Security Branch

Location:

Washington, DC

Title:

USACE Physical Security Program Support

Description(s):

HECSA intends to solicit and negotiate Physical Security Program requirements for services beginning 22 September 2018 with a single One-Year Option. It is anticipated that the Contract will be awarded directly to a business registered in the Small Business Administration’s (SBA’s) 8(a) program. Private industry may identify their interest and capability to respond to any future requirements of this nature.

This RFI is for market research and planning purposes only and is not to be construed as a commitment by the Government. This is NOT a Request for Proposal, Invitation for Bid, or an announcement of a solicitation. Response to this RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer if a solicitation is released. There is no bid package or solicitation document associated with this announcement. The purpose of this document is to identify potential sources, conduct market research, and develop a complete requirement. Any requests for a solicitation package will be disregarded. The Government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of preparing submissions in response to this RFI and the Government's use of such information. Submittals will not be returned to the sender.

Submission Requirements: The Government is seeking to identify qualified sources either singularly, or as part of an assembled team under North American Industry Classification System (NAICS) 541690, other Scientific and Technical Consulting Services. Companies are encouraged to respond to this request if they are interested in receiving a future Requests for Proposal (RFP) for the requirement described in the Draft Performance Work Statement (PWS) in Attachment 2.

Background:

The United States Army Corps of Engineers (USACE), Physical Security Branch seeks sources that can provide all necessary personnel (management, supervision, and administrative support), equipment, and services to augment, support and enhance the United States Army Corps of Engineers (USACE) Physical Security Program encompassing a global area of responsibility with strategic management and end user support. The contractor shall provide quality technical, analytical, planning, and administrative support to USACE’s Physical Security mission. The contractor shall have an organization that is able to provide complete and full service to Chief, Physical Security Branch and USACE’s major subordinate commands (MSCs) (a.k.a., nine Divisions, two Centers, five Field Operation Activities (FOAs) etc.) and forty-three

Districts (thirty-eight inside and five outside of the U.S.) located throughout all 50 States, U.S.

Territories, and designated overseas locations. Sources must be able to provide full service to all locations.

Contractor support is required to assist USACE in successfully accomplishing the USACE Physical Security Program mission. Services will be performed at Government and leased facilities throughout the Continental United States (CONUS) and its territories and outside the Continental United States (OCONUS). The contractor shall be required to travel to locations throughout CONUS and OCONUS. Specific place(s) of performance will be detailed in individual task orders. The Physical Security Program contract will incorporate services and support in the following task areas:

Specific Tasks include:

1) The contractor will be responsible for taking current U.S. Army Regulations (AR), pertaining to The Army Physical Security Program and U.S. Army Protection Program (which will be provided by the COR) and develop a USACE Engineering Regulation (ER). This deliverable will be completed by the contractor in two to three phases.

2) Contractor will ensure that all work in development of the ER will be accomplished to comply with the most current version of AR 25-50, Army Preparing and Managing Correspondence; United States Army Training and Doctrine Command (TRADOC) Regulation 25-30, Preparation, Production, and Processing of Army-wide Doctrinal and Training Literature; Department of the Army Pamphlet (DA PAM) 25-40, Army Publishing Program Procedures; and USACE Office Memorandum (OM) 25-1-51, Guidance for Preparation and Processing of USACE Command Publications within USACE.

3) The contractor will be responsible for updating the current Physical Security Program Protection Program Review (PPR) Checklist with current USACE ERs, Policies, Army Physical Security ARs, and any additional USACE Physical Security documents.

4) The contractor will be responsible for developing instructor-led and e-learning courses and workshops (presented in a 1 to 5-day format) to encourage interdisciplinary discussions between students from the architectural, engineering, facility management and security professions, with the end result leading to a Physical Security Professional Certification Program.

5) The contractor shall be able to, as requested and required, design, prepare, and execute a variety of table-top and full scale exercise scenarios that are Interagency organization (e.g., Department of Homeland Security (DHS), Bureau of Reclamation (BOR), and The United States Society on Dams (USSD) etc.), and the U.S. Army exercise and evaluation program compliant. All exercises are to be designed based on the needs of the hosting organization and are to be developed to assess training that was previously conducted.

6) The contractor will, as requested based on necessity, assist organization with training plan development, conduct drills to test the effectiveness of the training, and conduct exercises (table-top or full scale [field evaluations]) to evaluate the overall preparedness of the organization to successfully manage its response to a variety of emergency scenarios.

7) The contractor shall be required to coordinate, conduct and execute Staff Assisted Visits (SAVs) as needed or required at the USACE Division, District, Center, Field Operating Activity (FOA), Laboratories, subordinates (Civil Works Projects, other stand-alone facilities (SAF)) and the 249th Engineer Battalion (Prime Power) (hereafter defined as Div/Center/FOA/Lab/Dist.) Areas of Responsibility (AORs) locations on an as needed and/or required basis prior to the HQUSACE Protection Divisions scheduled Protection Program Review (PPR).

8) The contractor shall be required to coordinate, organize and dispatch an element on short notice to, conduct and execute Physical Security Inspections, Physical Security Surveys and Protection Program Reviews (PPR) as needed or required at the USACE Division, District, Center, Field Operating Activity (FOA), Laboratories, subordinates (Civil Works and like Projects, other stand-alone facilities (SAF)) and the 249th Engineer Battalion (Prime Power) Areas of Operation locations.

9) The contractor shall be prepared to attend meetings, conduct Business Case Analysis (BCA), and provide Course of Action (COA) plans all on an as needed and/or required basis.

10) Surge and Sustainment (S&S) coverage: The Contractor shall be capable of providing surge support for limited duration requirements that cannot be accomplished by on-site personnel. Examples of surge support include, but are not limited to, Physical Security Inspections, Physical Security Surveys and Protection Program Reviews (PPR), contingency operations support, or exercise support. The contractor must be able to respond to unexpected surge requirements with adequate numbers of qualified employees, even when the workload volume is at levels not seen before and with very little advance notice. (The Government shall provide the Contractor 15 to 30 day notification of surge support requirements including locations, durations, specific services required, suggested number of personnel, and any other surge unique information. The Contractor shall determine and provide any additional task order costs to the Government.) The Contracting Officer (CO) shall approve any additional costs prior to the contractor executing a surge support requirement.

11) Homeland Security Presidential Directive 12 (HSPD-12) vetting of personnel entering/visiting USACE facilities: The contractor shall provide equipment, software, and services to support the USACE, Physical Security Branch implement a National Crime Information Center (NCIC) vetting system. The Operational Protection Division, Physical Security Branch HSPD-12 Vetting System must be capable to provide the appropriate vetting of all guests, visitors, and contractors who require access to the USACE Stand Alone Facilities (SAF’s) throughout USACE Division, Center, Field Operating Activities (FOAs), Laboratory or Districts nationwide. The required end state is the development of a process that allows the USACE Physical Security Branch to leverage commercial resources that are available to the Law Enforcement Community to complete the required vetting of all USACE guests, visitors, and contractors through the NCIC and the Terrorist Screening Database (TSDB) systems, in a manner that supports directives (HSPD-12, HQDA EXORD 033-15, Directive-Type Memorandum (DTM) 09-12, and others).

12) The contractor shall be able to provide Architectural-Engineer (A-E) services associated with the physical security program and/or other protective programs for the US Army Corps of Engineers (USACE) and/or Department of the Army (DA) and/or Department of Defense (DoD) and/or other Federal agencies throughout the continental United States (CONUS) and outside the continental United States (OCONUS that will consist of architectural and engineering analyses, architectural and engineering studies and reports on existing, or proposed new, physical security and other protective program measures and development of policy, criteria, requirements, guidance, guide specifications, methodologies.

13) The contractor shall be able to establish an Intrusion Detection System (IDS) tracking data base for USACE. This data base will be used to determine status of all systems, track their life cycle replacement time frames, and certify systems are operational. The end state to this task to is transform current system into an enterprise system across all USACE assets.

14) The contractor shall be required to coordinate and attend meetings with interagency organizations (e.g., Department of Defense, (DOD) and associated military services(Army, Navy, Air Force, Marines) Department of Homeland Security (DHS), Nuclear Regulatory Commission (NRC), Bureau of Reclamation (BOR), Federal Emergency Management Agency (FEMA), National Protection Policy Division (NPPD), Federal Energy Regulatory Commission (FERC), Tennessee Valley Authority (TVA), Department of the Interior (DOI), and Environmental Protection Agency (EPA).

Associated federal bodies such as the Dams Sector Coordinating Council (DSCC), Levee Subsector Coordinating Council (LSCC), Interagency Security Committee (ISC), Combatting Terrorism Technical Support Office (CTTSO), Technical Security Working Group (TSWG) and The United States Society on Dams (USSD) etc.), in support of the USACE physical security program. These meetings will be within CONUS. This will assist USACE when dealing with issues that involve multiple agencies and will allow organization to rectify issues in a timely manner.

Facility and Personnel Requirements:

Personnel must pass background security checks performed by the U. S. Government.

Instructions:

After review of the attached Performance Work Statement, interested parties should submit a response in Microsoft Word and Adobe PDF Format. All information will be UNCLASSIFIED material only. Any company proprietary information must be marked appropriately. Information should not exceed 10 one-sided 8 ½ x 11 pages, with one inch margins, and font no smaller than 12 point. Respondents should include as part of their submission:

1. Company name, address, phone number; a point of contact with email address; Data Universal Numbering System (DUNS) Number; and small business status, if applicable, including status as a small disadvantaged business, 8(a) business, woman-owned small business, HUBZone small business, veteran-owned small business, and/or service-disabled veteran-owned small business.

2. A summary of the company's past performance in providing services similar to those identified in the attached Draft PWS during the past five years, including any on-going contracts.

Include Contracting Activities/Agencies, Contract Numbers, Contract Value, Contract Period of Performance and a Point of Contact at the Contracting Activity who can verify the information you provided.

3. A completed Questionnaire, provided as Attachment 2 in this notice.

Interested parties must submit a capability statement and/or questions in response to this sources sought announcement by email only to eric.p.thor@usace.army.mil no later than April 25, 2018. No phone calls shall be accepted regarding this sources sought notice.

Point of Contact:

Eric Thor Contract Specialist eric.p.thor@usace.army.mil

Contracting Office Address:

7701 Telegraph Road Alexandria, VA 22315-3860

U.S. Army Corps of Engineers

USACE

Physical Security Program Support Performance Work Statement

1.0 SCOPE.

The contractor shall provide quality technical, analytical, planning, and administrative support to USACE’s Physical Security mission. The contractor shall furnish and make available all personnel, supplies, equipment, materials, data, facilities, utilities and services necessary to execute and develop the deliverables as outlined in this Performance Work Statement (PWS).

All contractor personnel shall possess extensive knowledge, experience, training, expertise and a thorough understanding of Department of Defense (DoD) and Department of the Army (DA) Physical Security policies to accomplish the requirements listed in Sections 2.0 and 3.0.

Contractor personnel performing the duties associated with development of the deliverables in this PWS shall also possess a thorough understanding and possess technical experience in the use of Microsoft Office products. The contractor shall also be responsible for developing all deliverables defined in Section 4.0.

2.0 PERFORMANCE REQUIREMENTS.

2.1 Program Management.

The contractor shall efficiently and effectively manage their performance under this contract to ensure all the necessary technical, business, and administrative planning; organizing;

managing; coordinating; and tracking (e.g., cost, schedule, deliverables, etc.), performance management, risk management, component procurement management, system engineering management, resource management, data management, and subcontract management required to perform all the activities successfully as required in this PWS. The contractor shall provide sufficient personnel, both in number and qualifications, to perform work described herein. The contractor’s Program Manager is the Government’s primary point of contact (POC) for work to be performed under this contract. The Program Manager shall keep the USACE Contracting Officer (KO) and Contracting Officer’s Representative (COR) informed of any potential problems and provide recommendations on solutions for Government consideration.

The contractor shall ensure that deliverables are completed in a thorough and timely manner.

The requirements in performing this contract demand that the contractor's technical, analytical, and administrative support and the level of expertise, experience, and demonstrated performance of contractor personnel involved in the execution and development of each deliverable must be at the highest level in providing a quality product.

The contractor shall provide sufficient oversight and supervision of this contract, and associated contractor, and any subcontracted staff in order to ensure all contract employees are functioning within their designated labor categories/disciplines and at acceptable levels of performance, performing their assignments related to each deliverable are completed in a timely manner and honoring all reporting requirements.

The contractor shall designate, by name, a Program Manager and an alternate, who shall act for the contractor when the Program Manager is absent, and provide a copy of the designation letter to the KO/COR no later than (NLT) fourteen (14) calendar days after contract award. The contractor’s Program Manager or alternate shall have full authority to act for the contractor on all contract matters relating to operation of this contract.

The responsibilities of the contractor’s Program Manager shall include, but are not limited to, the following:

Planning and coordinating all activities to support the PWS requirements, Maintaining close communication and coordination with the Government for the duration of the contract, including reporting of any and all problems encountered in executing this contract, Coordinating all deliverables with the Government as stated in the PWS requirements, Ensuring that all contract PWS requirements are met, Providing administrative support, supervision, and management of all contractor personnel, equipment, and materials, Ensuring that all the contractor’s Quality Control Standards required, and approved by

USACE, are met as specified by this contract, thus assuring all aspects of this contract will be completed to the satisfaction of the USACE, Will report all Contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract to the HQUSACE, Operational Protection Division via the secure data collection website: http://www.ecmra.mil. The Contractor will be required to completely fill in all the website’s required data fields.

Reporting inputs will be for the labor executed during the period of performance during each Government FY, which runs October 1 through September 30. While inputs may be reported any time during the FY, all data will be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk at help desk at:

http://www.ecmra.mil.

2.1.1 Monthly Situation Report (SITREP).

The contractor’s Program Manager shall submit a monthly Draft SITREP, for Government review and comment, to the COR NLT the 5th day of each month. The contractor is not responsible for setting up and coordinating the Government review and comment period.

The Government will have five (5) Federal Government work days to review the Draft monthly SITREP, and provide comments to the Contractor’s Program Manager. The Contractor will submit the Final SITREP in Microsoft Word and Adobe .pdf formats to the COR, with comments resolved to the satisfaction of the Government, NLT seven (7) calendar days after contractor’s receipt of the Government’s review comments. The SITREP shall address each on-going work effort separately and, at a minimum, include: a summary of operations and activities, significant accomplishments, lessons learned, completed travel, travel 30-60-90 calendar days out, and outstanding issues/challenges.

2.2 USACE Physical Security Program.

2.2.1 Revise and Update Physical Security Program Plans.

The contractor shall be responsible for reviewing existing physical security plans, comparing them to current policy and requirements (e.g., Executive Orders (E.Os), DoD Requirements, DA Regulations, USACE policy, and industry best practices) and provide recommended changes to mitigate the contractor identified Physical Security Program Plan gap(s) at the following eight (8) locations:

USACE Finance Center (UFC), Millington, TN, Headquarters, Engineering Research and Design Center (ERDC), Vicksburg, MS, USACE Logistic Activity (ULA), Millington, TN, Humphreys Engineer Center Support Activity (HECSA), Alexandria, VA, Army Geospatial Center (AGC), Alexandria, VA, ERDC, Construction Engineering Research Laboratory (CERL), Champaign, IL, ERDC, Cold Regions Research and Engineering Laboratory (CRREL), Hanover, NH Washington Aqueduct, Washington, DC

Existing Physical Security Program plans will not be provided to the contractor until after award of the contract. The focus of the contractor’s review and plan update work effort will be towards Command policy at a facility level vice a regional level review. This will be conducted within the month designated.

The contractor shall be required to travel to the USACE locations identified above to evaluate and assess each location’s Physical Security Program documents. Each Physical Security Program Plan review site visit will be approximately four (4) Federal work days in length, where approximately two (2) Federal days are for travel, one (1) day each, are dedicated to travel and two (2) days being on-site. The contractor shall submit separate Draft Physical Security Program Plans for each location, with recommended changes/revisions for Government review and comment, NLT (Based on contract award date). The contractor is not responsible for setting up and coordinating the Government review and comment period. The contractor shall submit a Final Physical Security Program Plan for each location, with comments adjudicated to the satisfaction of the Government, fourteen (14) calendar days after contractor’s receipt of the Government’s review comments. Under no circumstances shall the contractor provide any Physical Security plan or site specific information to any other Command, or persons, outside that of the USACE entity being reviewed.

2.2.2 Staff Assisted Visit (SAVs) Reports.

The contractor shall be required to coordinate, conduct and execute SAVs as needed and/or required at the following USACE Respective Division or District Areas of AOR. The frequency of the SAVs will be on an as needed and/or required basis with designated dates and times being identified by USACE Physical Security Branch prior to the Division/District scheduled Protection Program Review (PPR).

The USACE Division/District Areas of Responsibility (AORs) locations:

a. Great Lakes and Ohio River Division Districts

Buffalo, NY Chicago, IL Detroit, MI Huntington, WV Louisville, KY Nashville, TN Pittsburgh, PA

b. Mississippi Valley Division Districts

St. Paul, MN

Rock Island, IL Memphis, TN Vicksburg, MS New Orleans, LA

c. North Atlantic Division Districts

Baltimore, MD Concord, MA (New England District)

New York, NY Norfolk, VA Philadelphia, PA Wiesbaden, Germany (Europe District)

d. Northwestern Division Districts

Kansas City, MO Omaha, NE Portland, OR Seattle, WA Walla Walla, WA

e. Pacific Ocean Division Districts

Anchorage, AK Honolulu, HI Pyeongtaek, South Korea (Camp Humphreys) (Far East District) Kanagawa Prefecture, Sagamihara, Japan (Camp Zama) (Japan Engineer District)

f. South Atlantic Division Districts

Charleston, SC Jacksonville, FL Mobile, AL Savannah, GA Wilmington, NC

g. South Pacific Division Districts

Albuquerque, NM Sacramento, CA Los Angeles, CA San Francisco, CA

h. Southwestern Division Districts

Fort Worth, TX Galveston, TX Little Rock, AR Tulsa, OK

i. Transatlantic Division District

Winchester, VA (Middle East District)

The contractor shall conduct Physical Security SAVs in support of the U.S. Government PPRs based on contract award date. The contractor will not be provided the most recent site specific PPR Physical Security information until after award of the contract. The contractor shall be limited only to the details associated with the complexity of the elements encompassing theUSACE Physical Security Program Physical Security PPR provided checklist. The SAV’s objective is for the contractor to assess the current Physical Security Program condition since the last PPR was conducted, document existing conditions and remaining deficiencies in a SAV report thus enabling the Division/District approximately ten plus/minus (10+/-) months to mitigate and/or fix the identified deficiencies prior to the next scheduled PPR.

The contractor shall be required to coordinate, travel to and execute SAVs at the locations identified above. The purpose of the onsite portion of this effort is to evaluate and assess each location’s Physical Security PPR documents and have in depth discussions with the Division/District Physical Security Officer (PSO). Each SAV site visit will be approximately five

(5) federal calendar days in length, where approximately two (2) federal calendar days, one (1) day each, are dedicated to travel and three (3) federal calendar days being on-site. The contractor shall submit a separate Draft SAV report to the COR for each identified location, with recommended courses of actions (COAs) to assist the Division/District PSO in mitigating the identified deficiencies. An appendix to the SAV report shall include Draft waiver and deviation documents for each deficiency that is determined by the Division/District PSO as the Commander’s preferred COA, where the waiver and deviation documents could be pulled out of the report and staffed thru the assessed Command (e.g. ready for the Commander’s signature) with little to no reworking. It is not the contractor’s responsibility to staff the waiver or deviation documents through the Division or District, nor obtain any Commander’s signature.

The contractor shall develop and submit to the COR a Draft SAV report for each identified location, for Government review and comment, NLT thirty (30) calendar days after the site visit has been completed. The contractor is not responsible for setting up and coordinating the Government review and comment period. The Physical Security SAV report format will be the same as the Physical Security section of the PPR report format to be provided by the USACE Physical Security Branch. The contractor shall submit the Final SAV report, with comments adjudicated to the satisfaction of the Government, NLT fourteen (14) calendar days after contractor’s receipt of the Government’s review comments. Under no circumstances shall the contractor provide any SAV report, or site specific information, to any other Command, or persons, outside that of the USACE entity being reviewed.

2.2.3 Army Physical Security Inspections

The contractor shall be responsible for using the DA’s Security Management System CounterMeasures (SMS(CM)) to coordinate, execute and complete PSIs reports as needed or required based on Task Orders issued, and associated site specific SMS(CM) electronic files.

Physical Security Inspections shall be conducted at USACE locations within the Continental United States, (CONUS), or lower 48 states. The Government will provide the contractor the physical security inspection(s) site locations as needed or required based on Task Orders issued throughout the period of performance of the contract. The contractor shall be required to travel to each of the locations. Each physical security inspection site visit will be approximately three (3) calendar days in length, where approximately two (2) calendar days, one (1) day each, are dedicated to travel and one (1) calendar day being on-site.

The contractor shall also be responsible under this effort for assessing USACE Civil Works Project (e.g., typically dam sites) assets (e.g., spillway, powerhouse, navigation lock, etc.) IAW the “USACE Engineering Regulation, Supplement to AR 190-51”.

The contractor shall develop, with input from the USACE Division, Center, Field Operating Activities (FOAs), Laboratory or District PSO, a physical security inspection Work Plan for completing all physical security inspections.

The contractor shall submit the Draft physical security inspection Work Plan, for Government review and comment, based on Task Orders issued, fifteen (15) calendar days after the list of physical security inspection locations have been provided to the contractor. The contractor is not responsible for setting up and coordinating the Government review and comment period.

The contractor shall submit the Final physical security inspection Work Plan, with comments adjudicated to the satisfaction of the Government, fifteen (15) calendar days after contractor’s receipt of the Government’s review comments. The contractor shall ensure the physical security inspection Work Plan schedule reflects submission of a Draft physical security inspection report NLT twenty-one (21) calendar days after the site visit has been completed. No work on the physical security inspections can be undertaken by the contractor until the contractor’s physical security inspection Final Work Plan has been reviewed and approved by the Government.

The contractor’s Work Plan shall, at a minimum, include: overall schedule, separate schedule for each Div/Center/FOA/Lab/Dist physical security inspection, names of contractor(s) going to each physical security inspection location, and detailed instructions on how the contractor will inform the Government on changes (i.e. schedule change, Contractor point of Contact (POC) change, etc.) the contractor needs to make, if any, once the Final physical security inspection Work Plan has been approved.

The contractor shall, at a minimum, undertake: setting up and populating the site/asset specific SMS(CM) data file, coordinating/lead execute the physical security inspection site visit, inspecting and assessing the site/asset per the SMS(CM) generated checklist, inputting physical security inspection site inspection results in SMS(CM), conducting and completing a site specific SMS(CM) risk assessment, and preparing a Draft SMS(CM) report for each location, for Government review and comment, and Final SMS(CM) report for the Commander’s signature.

The Proposed contractor is not responsible for staffing or coordinating a Final physical security inspection report for the Commander’s signature.

The contractor shall ensure each SMS(CM) physical security inspection report reflects: the address of the Div/Center/FOA/Lab/Dist as the preparing agency, the Div/Center/FOA/Lab/Dist Commander is listed as the name and rank of the unit/activity commander, the local Div/Center/FOA/Lab/Dist PSO is listed as the inspector, and the local Div/Center/FOA/Lab/Dist Commander is listed as the approving authority. Under no circumstances shall the contractor provide any physical security inspection or site specific information to any other Command, or persons, outside that of the USACE entity being inspected.

2.2.4 Obtain Data and Populate USACE’s Department of Army Security Guard and Contract Security Guard Programs (DASG) and Arms, Ammunition and Explosives (AA&E) Programs Tracking tools.

The contractor shall be responsible for obtaining site specific AA&E and DASG/CSG data from each of USACE’s Div/Centers/FOA/Lab/Dist and populating the HQUSACE’s DASG/CSG tracking tools (aka Excel Spreadsheet with the most recent data from each of USACE’s Div/Centers/FOAs/Labs/Dist).

The contractor shall populate the existing tracking tools with Div/Center/FOA/Lab/Dist data provided thru contractor, initiated and developed data call methods which shall undergo a Government review and comment period.

Contractor modifications to the existing DASG/CSG tool (aka Excel spreadsheet) will at a minimum include: Type of Guards (DASG/CSG), Company Name, Location, Armed/Not Armed, Cost of Initial Contract, Annual Contract Renewal Costs, Contract Number, Number of Access Control Points, POC responsible for Guards, and Current Operational Status.

Only Government reviewed and approved data collection methods can be used by the contractor for data collection. The contractor will not be required to do any travel or on-site activities for this deliverable. The AA&E and DASG/CSG reporting tools, populated with Div/Center/FOA/Lab/Dist data via contractor generated data calls, will be provided to the COR, on a date to be determined, based on Task Order(s) issued.

2.2.5 Modify existing USACE AA&E Tracking tool to support Electronic Security Systems (ESS) Data fields.

The contractor shall be responsible for modifying the existing USACE AA&E tracking tool to accommodate entry of ESS data (e.g. Intrusion Detection System (IDS), Electronic Entry Control Systems (EECS), Closed-Circuit Television (CCTV) systems, Automated Entry Control, etc.) for AA&E sites that have ESS. The contractor shall also be responsible for obtaining site specific AA&E ESS data from each of USACE’s Div/Centers/FOA/Lab/Dist and populating the contractor modified AA&E tracking tool with ESS data from each of USACE’s Divs/Centers/FOAs/Labs/Dists. However, contractor data collection method(s) and overall schedule shall reflect contractor coordination with each Division, where the Division would be responsible for and have ample time to obtain and compile each of subordinate command’s (aka District) data.

Contractor modifications to the existing AA&E tool (aka Excel spreadsheet) will at a minimum include: Type of ESS, Manufacturer, Location, Date of Installation, Cost of Initial Construction, Maintenance Agreement Holder (if present), Annual Maintenance Costs, POC responsible for ESS, and Current Operational Status.

The contractor shall populate the contractor modified tracking tool with Div/Centers/FOA/Lab/Dist data provided thru contractor, initiated and developed data call methods which shall undergo a Government review and comment period. Only Government reviewed and approved data collection methods can be used by the contractor for data collection. The contractor will not be required to do any travel or on-site activities for this deliverable.

2.2.6 Physical Security Training Program Modules.

The contractor shall be responsible for developing a USACE Physical Security Branch “Physical Security Training Program” with courses that teaches the USACE Physical Security Officers (PSOs) a basic understanding of design principles which include the integration of security countermeasures in the process. Provide training in a variety of security disciplines that focus on the fundamentals of security engineering design, physical security concepts and standards.

Provide training that also focuses on countermeasures, planning, implementation and Antiterrorism which ultimately leads to the deterrence and prevention of criminal activity and the reduction of the effects of a terrorist act on inhabited facilities and critical infrastructure.

The contractor shall be responsible for developing a USACE “Physical Security Certification Program (bootcamp)” to certify that personnel are capable of applying the philosophies and principles they have learned when developing plans for the renovation of existing facilities or when designing new ones; as well as, incorporating sound and robust security principles in creating a “culture of security” in their business model. The program should utilize SPED and CDSE training packages towards the training development. The students will use this training towards the Army’s required SPED certifications. .

The contractor shall design, prepare, and execute a variety of table-top and full scale exercise scenarios that are interagency organizations (e.g., Department of Homeland Security (DHS), Bureau of Reclamation (BOR), Federal Emergency Management Agency (FEMA), National Protection Policy Division (NPPD), Federal Energy Regulatory Commission (FERC), Tennessee Valley Authority (TVA), Department of the Interior (DOI), and Environmental Protection Agency (EPA). Associated federal bodies such as the Dams Sector Coordinating Council (DSCC), Levee Subsector Coordinating Council (LSCC), Interagency Security Committee (ISC), Combatting Terrorism Technical Support Office (CTTSO), Technical Security Working Group (TSWG) and The United States Society on Dams (USSD) etc.), and the U.S. Army exercise and evaluation program compliant. All exercises are to be designed based on the needs of the hosting organization and are to be developed to assess training that was previously conducted.

The contractor shall be responsible for developing training workshops to be presented in a one

(1) to five (5)-day format to encourage interdisciplinary discussions between students from the architectural, engineering, facility management and security professions.

a) Courses are to be conducted in a methodical and sequential order as each course can build on the information developed in a previous course.

b) Courses need to ensure current DoD, U.S. Army and USACE regulatory requirements are covered, so that the facilitators are giving the latest information about what is happening within the USACE security engineering industry.

c) Course curriculum needs to provide professional and skilled systems integration support for total network physical security solutions. Physical security products and services need to focus on the implementation of total security management solutions in the areas of: intelligence, surveillance, and reconnaissance technology; chemical, biological, and nuclear services;

systems engineering services; intelligent transportation and traffic management systems;

communications systems; and management of enterprise-level systems deployment, facilities, operations, maintenance, critical infrastructure (Dam Sector: Security awareness and protective measures) and training.

The contractor shall develop a Draft course curriculum and submit it to the COR, for Government review and comment, (Based on contract award date). Once the course curriculum has been approved by the Government, the contractor shall be required to develop and submit Draft course content to the COR, for Government review and comment, (Based on contract award date) The contractor is not responsible for setting up and coordinating the Government review and comment period. Draft course content will be expected to leverage technology, graphics and video for a creative solution that is not merely a PowerPoint training session. The contractor shall submit Final course content, with comments adjudicated to the satisfaction of the Government, NLT twenty-one (21) calendar days after contractor receipt of the Government’s review comments.

Additional information regarding Training Program Modules is found below in Appendix A.

2.2.7 Architectural-Engineer (A-E) Services Associated with the Physical Security Program.

The contractor shall be responsible for providing to USACE Architectural-Engineer Services, as needed or required based on Task Orders issued, to support the Evaluation/Assessment of access control points (ACP) and entry control facilities (ECF), Physical security program and other protective program measures, and conduct inspections and/or surveys, and/or staff assisted visits (SAVs) and/or analysis and/or assessments of the physical security program and other protective program requirements/measures at existing, or proposed new, facilities.

2.2.8 Homeland Security Presidential Directive 12 (HSPD-12) vetting of personnel entering/visiting USACE facilities located throughout all fifty (50) States

The contractor shall demonstrate capability to develop and modify access control system software from user defined requirements that is associated with DoD utilized access control systems, database management, and identity management systems, e.g. Army Installation Entry (AIE), Defense Biometric Identification System (DBIDS), etc. and be able to develop/define system software interface requirements and solutions, Contractor must be capable of implementing Army projects, with an understanding of the U.S. Army NIPRNET system communication requirements and capabilities. Contractor must have a familiarity with different sources of DoD personnel vetting data e.g., Defense Enrollment Eligibility Reporting (DEERS), Interoperability Layer Service (IoLS), etc. Contractor must have an understanding of the development of middleware software designed to exchange information between multiple disparate systems and software development risk mitigation techniques. Contractor shall demonstrate the ability and show experience supporting DoD Risk Management Framework (RMF) efforts. Contractor shall demonstrate experience and expertise developing, delivering and maintaining DoD and Army Standard net-centric solutions and web based services.

Contractor shall demonstrate experience developing and maintaining software in accordance with Institute of Electrical and Electronics (IEEE)/Electronic Industries Alliance (EIA) Standard (STD). 12207 - Software Lifecycle Process.

Development of USACE Physical Security Branch HSPD-12 Vetting System that uses vetting from NCIC and TSDB for all guests, visitors, and contractors. Including those who will be granted access to USACE Facilities or provided a government issued DBIDS or CAC card, located throughout all 50 States.

Development of instant access background vetting system that utilizes a USACE Division, Center, Field Operating Activities (FOAs), Laboratory or Districts, Originating Agency Identifier (ORI) to ensure all personnel who enter the USACE facilities located throughout all 50 States are appropriately screened prior to entry.

Development of report database that captures the status, findings, and quantifiable data of all results of NCIC searches of personnel looking to access USACE facilities located throughout all 50 States.

Development of system that validates all “hits” for people who are found to have an active warrant for arrest within the NCIC database.

Perform name-based commercial, criminal, and/or Federal Bureau of Investigations III background checks (where applicable) on guests, visitors, and contractors/subcontractors to USACE facilities for the purpose of determining fitness for access.

Perform corporate-based background checks on Prime and Subcontractor companies for the purpose of determining the suitability of allowing their personnel access to USACE facilities located throughout all fifty (50) States.

Track the ingress and egress of daily guests, visitors, and contractors to identified USACE facilities, including the ability to issue passes to guests, visitors, and contractors.

Evaluate program statistical data gained from the program to validate that the screening criteria provided for vetting is appropriately identify those people who need to be excluded and granted entry into USACE SAFs.

Develop peripheral kits for fixed and non-fixed locations to be used at USACE SAFs nationwide and be Wi-Fi enabled to include: Identification (ID) Scanner and Human Input Device (HID) Scanner, camera, web-cam, wearable badge printer, and badges. All Peripheral equipment (mobility kit) must be approved to operate on the USACE network. Only DoD or USACE approved equipment already on USACE network is authorized for use.

Performance by cloud computing services and mobile application for usage on Android and iOS Support.

Perform appropriate training of personnel who will be delivering oversight to the system.

Development of Concept of Operations (COP) plan that has the capacity to expand the system to other USACE Districts.

Operating Constraints: Must use USACE Division, Center, Field Operating Activities (FOAs), Laboratory or Districts ORI; must have approved access to work within the Criminal Justice Information System (CJIS); must be able to provide instant background checks for guests, visitors, and contractors/subcontractors; provide driver license checks; leverage ORI to retrieve warrants as listed within NCIC for any individual requesting access to USACE facilities; must have technical support capabilities (remote and on-site as needed).

3.0 SECURITY REQUIREMENTS.

3.1 Facility and Personnel Security Clearances.

The contractor must have a Facility Clearance (FCL) at the SECRET level (In accordance with the National Industry Security Program Operating Manual (NISPOM) DoD 5220.22-M and AR 380-49) prior to contract award. The contractor personnel performing work under this contract must have the required security clearance, per AR 380-67, at the SECRET level at the time of contract award. Security Clearances and FCL requirements are required to be maintained for the life of the contract in accordance with the DD Form 254 attached to the contract.

The contractor shall employ, in the performance of this contract, personnel who fully qualify, possess, and retain the proper security clearances to perform the work assigned under this contract. All contractor personnel must be able to obtain and retain a security clearance at the SECRET level as required and or needed based on the contract needs. If a security clearance is needed, it will be granted as an interim or final security clearance, prior to commencing performance on this contract.

The contractor will ensure that contractor employees possess the required security clearance in advance of their assignment to the location where their work is to be performed. Contractor employees will not report for work until their security clearance has been formally validated by the supporting Activity Security Manager (ASM).

Contractor personnel may require access to classified information and classified computer systems at the SECRET level at various USACE/government locations and activities. Tasks performed will adhere to security guidance contained in the PWS and the DD Form 254, Contract Security Classification Specification. Classified access authorization will be identified in the specific PWS.

The contractor will ensure that contractor employees generate, safeguard, reproduce, disseminate, and control all government information (classified and unclassified) in accordance with DoD, Army, USACE, and local security policies and procedures, and security classification guides.

The contractor will not reproduce classified materials without the written permission of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original.

The contractor will not destroy any classified material without advance approval of the releasing agency.

The contractor is required to coordinate and process all hired contractor employee actions through the CO or designated representative. No contractor employee will commence work on the contract until all security requirements have been met and the KO/COR has notified the contractor of a report date.

The contractor, as designated by the government representative on an as needed basis, will ensure that hired contractor employees promptly complete the required actions to facilitate their access to government facilities at locations where employees will be performing their work.

These include, but are not limited to a Government issued contractor Common Access Card (CAC), etc. The contractor will ensure that each hired contractor employee’s security clearance and investigation data is entered and maintained in the DoD Joint Personnel Adjudication System

4.0 REQUIRED DELIVERABLES

The Government will perform a quality assurance (QA) review of the contractor’s work to evaluate content, determine adequacy, and confirm that proper criteria, regulations, laws, codes, principles and professional procedures have been used. The Government will also review the work of the contractor for each deliverable defined in the PWS and provide comments via use of USACE’s DrChecks comment system. The USACE COR, or other designated representative (i.e. Command Physical Security Program Manager), shall be responsible for setting up all the necessary DrChecks accounts, file structure and reviewers permissions associated with the Government’s review and comment period of each of the contractor’s deliverables.

The contractor shall be responsible for accessing DrChecks comments, providing responses to comments, adjudicating Government comments to the satisfaction of the Government, and incorporating all the necessary changes into the Draft deliverables. Once the Final deliverables are received by the Government, a back check will be undertaken by each USACE reviewer to ensure the comment has been properly addressed and incorporated by the contractor. The comment will only be closed out by a USACE reviewer if the Government approved change(s) have been incorporated to the satisfaction of the Government. If the Government approved change(s) have not been incorporated by the contractor to the satisfaction of the Government, the Final deliverable will be rejected and the contractor will have to resubmit the deliverable until the Final deliverable reflects the Government agreed upon change(s).

The contractor shall perform duties to develop the deliverables as specified by the PWS and DD 1423 Contract Data Requirements List (CDRL), and provide consultation, facilitation, survey, and analysis services within the scope of this PWS.

The contractor’s Program Manager shall be responsible for providing the deliverables to the COR, via email, for Government review and comment unless otherwise stipulated in this PWS.

Microsoft Office version 7.0 or newer shall be used for all deliverables. Unless otherwise stipulated in the PWS:

Draft deliverables shall be Microsoft Word files, Draft deliverables shall undergo a Government review and comment period, Final deliverables shall be Microsoft Word and Adobe Acrobat files, Final deliverables shall incorporate Government comments to the satisfaction of the

Government (see Government comments discussion above), and Presentations shall be in a Microsoft PowerPoint.

4.1 PROGRAM MANAGEMENT

PWS

Paragraph Product Number

Program Manager, and Alternate, Designation Letter

1 Final

Monthly Situation Report (SITREP) 12 Draft/12 Final

4.2 USACE PS Programs

PWS

Paragraph Deliverable Number

Updated Physical Security Program Plans 8 Draft/8 Final

Staff Assisted Visits (SAVs) Reports based on number of Task Orders issued (Draft/ Final)

Physical Security Inspections (PSI) Work Plan

1 Draft/1 Final

Physical Security Inspections (PSI) Reports/Electronic Files

Populate USACE’s Department of Army Civilian Police and Security Guard (DACP/DASG) and Arms,…