Draft_Statement_Of_Work_ATEC_IT_Support_Services.pdf

W91CRB-16-F-0009

P00033

SECTION C – DESCRIPTIONS AND SPECIFICATIONS

PERFORMANCE WORK STATEMENT (PWS) FOR

INFORMATION TECHNOLOGY (IT) SUPPORT TASK ORDER (TO) FOR

UNITED STATES (U.S.) ARMY TEST AND EVALUATION COMMAND (ATEC)

Para # Title

C.1 General C.1.1 Summary C.1.2 Scope C.1.3 Background C.1.4 Installation Information C.1.5 Organizational Conflict of Interest C.1.6 Personnel C.1.7 Hours of Operation C.1.8 Training C.1.9 Certifications C.1.10 Travel/Temporary Duty C.1.11 Safety C.1.12 Security C.1.13 Government Vehicles and Equipment Operations C.1.14 Vehicle Registration C.1.15 Identification of Contractor Employees C.1.16 Quality Control (QC) C.1.17 Quality Assurance (QA) C.1.18 Internal Controls C.1.19 Accounting for Direct and Indirect Charges C.1.20 Items Purchased Under Other Direct Costs (ODCs)

Cost Category C.1.21 Hazardous Material Reporting C.1.22 Interface with Government Operations C.1.23 Business Relations C.1.24 Work Areas C.1.25 Files C.1.26 Accountability of Government-Furnished Facilities/Office

Space/Property/Items C.1.27 Personal/Contractor-Owned Property C.1.28 Developing Code C.1.29 Electronic Invoicing C.1.30 Transition C.1.31 Post Award Conference/Performance Evaluation

Meetings C.1.32 Technical Coordination

C.2 Definitions and Acronyms

C.2.1 Definitions C.2.2 Acronyms

C.3 Government-Furnished Items and Services C.3.1 Government-Furnished Facilities/Office Space C.3.2 Government-Furnished Property/Items C.3.3 Government-Furnished Services

C.4 Contractor-Furnished Items and Services C.4.1 General C.4.2 Contractor-Furnished Facilities/Office Space C.4.3 Contractor-Furnished Items C.4.4 Contractor-Furnished Services

C.5 Specific Tasks C.5.1 General C.5.2 Information Technology Support C.5.3 Logistics C.5.4 Other Support Services

C.6 Regulations

SECTION C.1. GENERAL.

C.1.1. SUMMARY. This is a non-personal services task order (TO) to provide Information Technology (IT), IT logistics, and cybersecurity to support the U.S. ATEC Headquarters (HQs), APG, MD; the Operational Test Command (OTC), Fort Hood, TX;

the Army Evaluation Center (AEC), APG, MD; the U.S. Army Aberdeen Test Center (ATC), APG, MD and potentially other organizations that fall under the purview of ATEC.

Additionally, minimal support is required at Fort Bragg, North Carolina (NC), Fort Huachuca, Arizona (AZ), and Huntsville, Alabama (AL). Minimal support may also be required at other locations throughout the life of this task order. The aforementioned functions may be required at all of these locations or just some of the locations listed above. If a function is required at only one or some of the locations, it will be identified in Section C.5 “Specific Tasks.” The Government will not exercise any supervision or control over the contract service personnel performing services herein. All personnel engaged in performing the services under this TO (i.e., direct labor and subcontracted labor) shall be accountable solely to the contractor whom, in turn is responsible to the Government. As set forth in FAR 7.5, the contractor shall not perform inherently governmental functions. Any effort reflected in the TO may be identified during the TO performance for higher priority, different performance locations, and varied level of intensity. The Government will provide to the contractor’s leaders all workforce prioritization requirements, which may include intermittent/infrequent and fluctuating efforts for IT, IT-associated services, and direct test support. The contractor shall be capable of meeting these requirements by means of increasing, decreasing, or relocating personnel, equipment, and materials at various locations in the continental United States (CONUS) or outside CONUS (OCONUS).

C.1.2. SCOPE. The contractor shall provide all qualified personnel, equipment, tools, materials, supervision, management, and other items/services not otherwise provided as Government-furnished property (GFP) to perform these requirements. The work described herein shall be performed predominantly throughout locations identified in Paragraph C.1 above. This contract could be expected to support up to 4000 IT users at the various locations.

C.1.3. On an intermittent basis, the contractor shall be required to perform non-personal services in support of other Department of Defense (DOD) activities at locations other than the locations identified in Paragraph C.1.1 above.

C.1.4. BACKGROUND.

C.1.4.1. ATEC is one of DOD’s foremost test and training organizations supporting DOD, non-DOD, and commercial materiel developers by testing a broad spectrum of equipment throughout their life cycles, from concept through deployment. As such, ATEC is not a material, item, or system developer. Rather, it provides crucial test support to such developers who are ATEC's primary customers. Task Order support is devoted primarily to support ATEC as it conducts tests and operates and maintains the ranges, facilities, and equipment necessary to perform testing for customers.

C.1.4.2. ATEC’s mission is to plan, conduct, and integrate developmental testing, independent operational testing, independent evaluations, assessments, and experiments in order to provide essential information to decision makers for our Nation's Warfighter.

ATEC provides the most flexible, responsive, innovative, and diverse set of test capabilities, assets, and services throughout the Army for providing test and test support services for authorized customers.

C.1.4.3. To accomplish this, ATEC will:

a. Deliver value-added products and services to its customers;

b. Identify and optimize the process and capabilities essential to providing quality and timely products and services;

c. Provide, develop, sustain, and integrate people, technological capabilities, and procedures; and,

d. Identify, secure, and allocate resources necessary to meet ATEC’s mission requirement through efficient, flexible and responsive management.

C.1.4.4. To successfully support ATEC's mission, ATEC requires the ability to rapidly move, store, and retrieve data from a wide variety of sources and locations in a highly reliable and secure manner. ATEC requires a high level of technical expertise, flexibility, and depth of professional and technical expertise in order to meet its mission goals and objectives. A technical staff capable of modifying and operating sophisticated information management systems in a timely and cost-efficient manner is required to meet the needs of ATEC.

C.1.4. INSTALLATION INFORMATION. Information regarding the locations in Paragraph C.1.1 above can be found at the following websites:

http://www.atec.army.mil, http://www.atc.army.mil, http://www.atec.army.mil/aec, http://www.hood.army.mil, http://www.bragg.army.mil, and http://www.belvoir.army.mil.

C.1.4.1. The contractor shall fully comply with local military installation, city, county, state, and federal laws, regulations, and/or ordinances pertinent to performance of the contractual services required under this TO.

C.1.4.2. The contractor and employees shall observe all rules and regulations issued by the Installation Commanding Officers pertaining but not limited to fire, safety, sanitation, severe weather, admission to the installation, conduct of operations, etc.

C.1.4.3. The contractor shall be in compliance with all Army, federal, state, local, ATEC, OTC, ATC, AEC, APG, Fort Hood, Fort Huachuca, Fort Bragg, or other ATEC locations regulations, policies, and procedures. Compliance shall be required where services are provided under this TO, as they apply to the following: IT, cybersecurity, information security, operational security (OPSEC), physical security, personnel security, public affairs, and foreign disclosure and contact.

C.1.4.4. Smoking. The contractor shall comply with commercial and military installation regulations which establish uniform policies governing smoking in Government facilities.

C.1.4.5. Conservation of Utilities. Contractor personnel shall practice utilities conservation and shall operate under conditions that preclude waste of Government-furnished utilities.

C.1.4.6. Fire Protection. The contractor shall comply with the applicable APG, Fort Hood, Fort Huachuca, Fort Bragg and other military installations’ fire prevention and protection regulations designated as performance locations.

C.1.4.7. Accident Reporting. The contractor shall report all accidents resulting in injury, death, or property damage in accordance with (IAW) the ATEC, ATC, APG, OTC, Fort Hood, Fort Huachuca, Fort Bragg and the regulations of other military installations designated at performance locations.

C.1.4.8. Fraud, Waste, and Abuse. The contractor shall be responsible for maintaining proper conduct and good discipline within contractor occupied work area(s). Contractor personnel shall be encouraged to be alert to and report suspected situations of fraud, waste, and abuse, or other intentionally dishonest conduct against the Government to the Contracting Officer’s Representative (COR).

C.1.5. ORGANIZATIONAL CONFLICT OF INTEREST (OCI).

C.1.5.1. The contractor, to include the prime and all subcontractors, shall remain OCI- free during the entire duration of the TO IAW Title 10, USC Section 2399, and Federal Acquisition Regulation (FAR), Subpart 9.5.

C.1.5.2. In the event that the prime or a subcontractor intends to or becomes involved in development of DOD systems under eventual ATEC test and evaluation (T&E) oversight as part of its Title 10 responsibilities, the contractor shall provide written notification to the COR within three (3) work days of the potential OCI issue. The contractor shall not begin or continue performance once the contractor becomes aware of a 10 USC Section 2399 violation or any other OCI situation without the Contracting Officer’s (KO) approval. The contractor shall own the burden to monitor, report, and resolve any Title 10, USC Section 2399, violations and all potential OCI issues that arise during the performance of this TO.

C.1.5.3. The KO will analyze all potential OCIs and determine if an actual OCI exists and whether an actual OCI can be mitigated. The KO will provide the rationale for an OCI determination and request a mitigation plan when the OCI is of a type that can be mitigated. The KO will evaluate the mitigation plan and either approve or disapprove the mitigation plan.

C.1.5.4. The contractor shall not employ off-duty Government personnel who represent the KO or who perform contract surveillance, nor any other person who is an employee of the U.S. Government or DOD, either military or civilian, if such employment would create a conflict of interest or be contrary to the policies contained in Section I clauses regarding conflicts of interest. The contractor shall not employ any person who is an employee of the Department of the Army (DA), military or civilian, to perform work under this TO without first obtaining approvals required by DOD 5500.7-R and implementing Army regulations. In no event shall such personnel be used in a supervisory capacity in the performance of this TO. In addition, the contractor shall not employ any person who is a family member of either current contractor employees or current ATEC employees

(either military or civilian) without first providing personnel qualifications, supervisory chain, and proposed employment duration to the KO for review and concurrence.

C.1.6. PERSONNEL. The contractor shall provide personnel with the necessary skills to perform the required support and services of this TO. The contractor shall ensure that all personnel employed for this TO are trained and meet the minimum qualifications in Attachment 1 for their job position prior to employment. Personnel performing work under this TO are not considered employees of the Government.

C.1.6.1. Key personnel are those contractor personnel considered to be essential to the successful performance of the TO. This includes certain skilled/experienced professional and/or technical personnel as designated by the Government. Key personnel for this TO are one Program Manager (PM) and Project Managers (one at each additional organization where support is required). The contractor shall provide an onsite PM who shall be physically present at APG, MD during normal duty hours and perform overall management of the contract. The PM shall be the contractor’s primary point of contact (POC) and shall have the authority to act or make decisions on all matters on behalf of the contractor. The contractor shall designate an alternate who shall be authorized to make decisions in the absence of the PM. The alternate shall have full authority to act for the contractor on all contractual matters relating to operations under this TO.

C.1.6.2. At a minimum, all contractor personnel shall have high school diplomas. All contractor personnel shall be able to speak, read, write, and understand English proficiently and be U.S. citizens. All contractor personnel hired to support this TO must be proficient in the use of computers and software required to perform work (e.g., Microsoft Office software). Also, on TO start date, all contractor personnel shall possess the required training, certification(s), and experience IAW Attachment 1.

C.1.6.3. Prior to starting the process to backfill for a vacated position, creating a new position, or increasing labor support, the contractor shall provide the following information to the COR to ensure that the additional support is necessary to support the PWS requirements and that sufficient space is available at the Government site:

Contract Number/Contractor Name; Contract Period of Performance and current year of performance; Labor category and level; Number of employees to be hired and hourly rate; Relevant PWS Task Area(s) employee will support; Description of duties; If backfill, name of employee who departed and date position was vacated; If new contractor position or additional labor support, identify begin and end date of new requirement (NOTE: the begin date is needed but the end date can be indefinite.); If new contractor position or additional labor support, identify if additional space at Government facility will be required; If new contractor position or additional labor support, identify if a contract modification has or will be executed to support the additional support; If no contract modification will be executed, explain why additional personnel are required above that identified in the contract as awarded; and Government technical POC name and phone number (if other than relevant COR).

C.1.6.4. Prior to making an offer to an employee, the contractor shall provide a resume to the COR not later than five (5) calendar days prior to the effective date of employment. Resumes should include the following: current and previous employment history to include employer names, position titles, relevant duties and accomplishments, dates of employment, education, licenses/certifications, and other relevant information.

The COR will review the resume to ensure qualifications and/or experience identified in Attachment 1 have been met. If the qualifications and/or experience have not been met, the resume will be returned to the contractor within two-work days of receipt. In emergency situations and cases of adverse action where five(5) calendar days' notice is not possible, the contractor shall submit the change in writing and resumes to the COR not later than 24 hours after the change is implemented. Key personnel positions shall not be vacant longer than 30 calendar days, unless the KO grants an extension.

C.1.6.5. Contractor personnel working under this TO shall practice high standards of personal hygiene and maintain a clean, neat appearance while on duty. Additionally, contractor personnel shall comply with the dress code applicable for the facility and location being supported.

C.1.6.6. The contractor shall manage its workforce to ensure that excessive turnover does not interfere with mission requirements. The contractor shall track and analyze hiring and termination trends as well as the number of personnel employed by labor category, by location, and by cost center. The contractor shall ensure that all vacancies for non-key personnel are filled within 30 calendar days of notification of the requirement. Any issues outside of the contractor’s control that may delay bringing individuals on board past the 30 calendar day requirement, such as backlog at Defense Security Services, shall be brought to the COR’s attention one week prior to the 30-calendar-day expiration date.

C.1.6.7. The contractor shall ensure that all contractor employees return all Government identification/security badges and permits issued by the Government at the completion of their employment. All Government identification/security badges shall be returned to the Government on the employee’s last day of employment with the Government. If departure is after normal business hours, the contractor Facility Security Officer will collect the badges on the last day of employment and turn the badge(s) in to the Government Security Manager the next work day. Keys will be returned to the issuing key custodian prior to the employee departing the installation. In addition, contractor personnel briefed on Special Access Programs (SAPs) shall contact Government Security personnel to complete a termination briefing prior to termination of employment. The contractor shall develop in- and out-processing procedures and checklists to be used by all contractor employees and shall be completely filled in and signed by designated individuals below on the first and last days of employment. The contractor shall develop an employment/installation clearance procedure and checklist to ensure that an employee has turned in all Government identification/security badges, Government property, and keys before leaving employment on the installation and access to the local area network (LAN)/email has been cancelled. At a minimum, the in/out-processing checklist will contain signature blocks for these Government employees:

COR/ACOR; Technical Monitors (TMs); organization specific Security

Manager; designated IT LAN representative; and the Property Book Officer (PBO) to ensure contractor employees have cleared all aspects of employment at the various locations. Contractor personnel shall not begin or end employment without a completed and signed checklist.

C.1.7. HOURS OF OPERATION. Unless indicated below, contractor operations will be Monday through Friday from 6:00 a.m. to 6:00 p.m. (Eastern Time for MD and Central Time for TX), excluding federal holidays or as directed by the Government. Core staff operations will be on Monday through Friday from 7:30 a.m. to 4:30 p.m. (Eastern Time for MD and Central Time for TX), excluding federal holidays. Additionally, the contractor shall provide minimal staffing coverage from 6:00 a.m. to 7:30 a.m. and 4:30 p.m. to 6:00 p.m. Minimal coverage is defined by the Government as two Full-time Equivalents (FTE) and may change if needed. The Government will approve the contractor’s start/end times and schedule for each employee in order to ensure maximum coverage.

All changes to this schedule must be approved by the Government. To accomplish mission requirements, the contractor may be required to provide services/technical expertise outside of normal duty hours, to include but not limited to, tests, repair of equipment failures, and/or documentation generation, which may include weekends, holidays, and at other times specified by the Government. Support may run sequentially or concurrently, day or night, extended work days, weekend, shift, or in any combination.

C.1.7.1. Alternate Work Schedules (AWS) with Regular Day Off (RDO). To ensure compliance with Section 778.105 of Interpretative Bulletin, 29 CFR (CFR) Part 778, the contractor's base pay-week shall not exceed 40 hours; therefore, the start and end time of the pay week shall be adjusted accordingly. The contractor shall work the schedules IAW the paragraphs below.

C.1.7.1.1. ATEC HQs currently works either the AWS or the regular five, eight-hour days. As directed by the Government, if contractors are working the AWS, RDOs for contractor personnel shall be either the first Friday of the pay period or the second Friday of the pay period provided there is coverage five days per week as depicted below. In a two-week pay period, the work schedule is eight work days of nine hours each, one work day of eight hours, and every other Friday off (RDO) as depicted below:

Option 1:

M

T

W

F

S

Week 1 9 9 9 9 8 Off Off Week 2 9 9 9 9 RDO Off Off

Or Option 2:

M

W

F

Week 1 9 9 9 9 RDO Off Off Week 2 9 9 9 9 8 Off Off

C.1.7.1.2. ATC is currently operating under an AWS and are closed for normal business on the 2nd Friday of the pay period as depicted below; however, RDOs shall be staggered for some personnel due to the requirement to provide limited coverage on the Friday off. In a two-week pay period, the work schedule is eight work days of nine hours each, one work day of eight hours, and every other Friday off (RDO) as depicted below:

Option 1:

M T W T F S S Week 1 9 9 9 9 8 Off Off Week 2 9 9 9 9 RDO Off Off

Or Option 2 for limited coverage:

M T W T F S S Week 1 9 9 9 9 RDO Off Off Week 2 9 9 9 9 8 Off Off

C.1.7.2. At OTC (Fort Hood, Fort Huachuca, and Fort Bragg) the contractor does not work the AWS.

C.1.7.3. The Government has the option to temporarily or permanently change the hours, days of operation, and lunch periods or require additional shifts. Normally, hours of operation for the second and third shifts, if required, are 4:30 p.m. through 12:30 a.m.

and 11:30 p.m. through 8:00 a.m., respectively (including a 30-minute meal period), five days a week, eight hours a day.

C.1.7.4. Contractors shall not work overtime unless pre-approved by the COR/ACOR and TM. The contractor shall submit overtime requests one (1) week in advance if at all possible. In certain situations, as determined by the Government, overtime may be required with as little as a one-hour advance notice. Last-minute overtime requirements will be handled on a case-by-case basis.

C.1.7.5. Federal holidays in each calendar year are identified below. For contractor personnel who work the AWS, the preceding Friday will be considered a holiday when such holidays fall on Saturday; however, if the preceding Friday is an RDO under the AWS, Thursday will be considered the holiday. When such holidays fall on a Sunday, the succeeding Monday is considered a holiday.

□ New Year’s Day, January 1(or observed)

□ Martin Luther King’s Birthday, third Monday in January

□ Washington’s Birthday, third Monday in February

□ Memorial Day, last Monday in May

□ Independence Day, July 4 (or observed)

□ Labor Day, first Monday in September

□ Columbus Day, second Monday in October

□ Veterans’ Day, November 11 (or observed)

□ Thanksgiving Day, fourth Thursday in November

□ Christmas Day, December 25 (or observed)

C.1.7.6. Installation Closures. The contractor shall adhere to curtailing operations of the Government which includes any time when the Government is in a non-operational status for events including, but not limited to, emergency situations, inclement weather, power curtailments, furlough, shutdowns, organization events, and planned training days. Contractors are expected to adhere to the Government curtailment or closure schedule and will not be in a paid status; however, some contractor employees may be required to work during those periods and/or may be required to report to an alternate work site. Only personnel necessary for essential work will be scheduled for duty during these periods. The COR will notify the contractor of the dates of curtailment and closure and of any contractor employees required to work that day. Additionally, local television/radio stations will announce any such delays or closures.

C.1.8. TRAINING.

C.1.8.1. The contractor shall develop a training program to ensure contractor personnel are trained to accomplish the requirements of this TO. Mandatory training for contractor employees is identified in Section C.3. The contractor shall maintain records of all scheduled and completed training which will be available for periodic inspections by the Government. Training does not relieve the contractor from ensuring that contractor personnel are qualified to perform their assigned tasks when they begin employment under this TO.

C.1.8.2. The Government will only reimburse the contractor one time for training in new technologies or unique skills that are required to perform a task of this TO and not for employee’s advancement. Duplication of training costs shall be considered an unallowable cost in accordance with FAR 31.201-6, Accounting for Unallowable Costs.

Additionally, IAW DOD 8570.01-M, IT personnel shall achieve the required baseline and computing environment (CE) certification prior to appointment. All travel, training, and per diem requirements that are to be reimbursed to the contractor must be pre-approved by the TM, COR/ACOR, and the Government Director within 20 work days prior to commencement of training/travel. Any retraining needed due to contract employee departure will be at the contractor’s expense. In addition, copies of training certificates shall be available upon request by the COR/ACOR as proof of training completion prior to reimbursement, as required.

C.1.8.3. The contractor shall cross-train employees through on-the-job-training during duty hours. On the effective date of the contract, the contractor shall provide a list depicting names of the primary and alternate for each functional area.

C.1.8.4. The Government may periodically provide in-service training to contractor personnel on a space-available basis. Upon notification from the COR/ACOR, the contractor shall submit a written request to the COR/ACOR for space for contractor personnel attendance to Government-conducted training.

C.1.9. CERTIFICATIONS.

C.1.9.1. All software developed by the contractor for the Government shall adhere to the code review standards defined in the Defense Information Systems Agency (DISA) "Application Security and Development Security Technical and Implementation Guide”

(STIG).

C.1.9.2. Cybersecurity/Information Assurance (IA)/Information Technology (IT) Certification. Per DOD 8570.01-M and AR 25-2, contractor employees supporting cybersecurity/IT functions shall be appropriately certified upon TO award. This group of people are referred to, IAW DOD 8570.01M, as “IA workforce personnel”. The baseline certifications for the IA workforce personnel must be completed upon TO award.

Appropriate CE certifications must also be achieved if IA Technical (IAT) designation has been applied to the contractor and are prescribed by the customer. The COR/ACOR/TM will ensure all contractor personnel are certified IAW DOD and DA regulations. The DOD organization receiving services may provide additional training on local or system procedures.

C.1.9.3. All personnel holding an approved baseline certification listed in fulfillment of the requirements of DOD 8570.01-M must release their certification information to the DOD through the Defense Workforce Certification Application:

https://www.dmdc.osd.mil/appj/dwc/index.jsp.

C.1.9.4. In addition to the baseline certification requirement for their IA level as appointed by the Government, IA workforce personnel with privileged access must obtain appropriate CE certifications for the operating system(s) and/or security-related tools/devices they support as required by their employing organization. If supporting multiple tools and devices, IA workforce personnel shall obtain CE certifications for all tools and devices they are supporting. At a minimum, IA workforce personnel shall possess a certification, if required, for the tool or device he or she spends the most time supporting prior to working on this TO, such as security functions on a CISCO router.

C.1.10. TRAVEL/TEMPORARY DUTY.

C.1.10.1. Travel to other Government facilities or other contractor facilities may be required to be accomplished at other CONUS/OCONUS locations. All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the Government (subject to local policy procedures), and is on a strictly cost reimbursable basis. The contractor shall have personnel available and ready to travel on the required date. Per diem associated with this temporary duty shall be charged IAW the travel provisions of Volume II of the Joint Federal Travel Regulations shall be reimbursed under the cost category entitled ODCs in Section B.

C.1.10.2. The contractor shall be capable of supporting these efforts at locations other than APG/Fort Hood/Fort Bragg/ Fort Huachuca without drawing from personnel supporting the mission at APG/Fort Hood/Fort Bragg/ Fort Huachuca if requested by the Government. The contractor shall have the capability to support remote efforts using personnel resources in that area.

C.1.10.3. Travel Time Compensation. Exempt and non-exempt employees covered by the Fair Labor Standards Act are described in 5 CFR 551. Contractor employees who travel outside of their normal duty hours shall be paid wages for travel hours under certain circumstances as described in 5 CFR 551.422.

C.1.11. SAFETY. The contractor shall take proper safety and health precautions to protect the work, the employees, the public, and the property of others. The contractor shall develop and implement a safety program for contractor employees in compliance with regulations at all site(s), installation(s), state and federal laws, Occupational Safety and Health Act (OSHA), etc. The contractor shall submit the Safety Plan to the Government for approval 30 days after award of the TO. Revisions shall be submitted 10 days prior to the effective date of the change. The contractor shall:

C.1.11.1. Participate fully in any safety or accident prevention program of any Government installation that the contractor employees may be required to enter during the life of this TO. This includes any required safety training.

C.1.11.2. Exercise care and caution commensurate with the dangers or hazards of the work being performed with due consideration of physical surroundings, equipment, facilities, personnel, and other factors involved.

C.1.11.3. Report immediately to the local commander, or the authorized representative with notification to the COR/ACOR, all accidents involving the contractor and employees, which occur on a Government installation or other premises under the direct control of the Government.

C.1.12. SECURITY.

C.1.12.1. The contractor shall comply with the requirements identified in Contract Security Classification Specification (DD Form 254) (Attachment 2).

C.1.12.2. The contractor shall possess a Top Secret (TS) facility clearance as prescribed by DD Form 254.

C.1.12.3. All contractor employees shall be required to have a favorable National Agency Check with Local Agency Check (NACLC) or higher level investigation completed and possess a minimum of a SECRET clearance. Contractor personnel shall not report to work until, at a minimum, an interim SECRET clearance is granted.

Additionally, all IT contractor personnel who maintain Demilitarized Zone firewalls and all video teleconference (VTC) contractor personnel who work on Communications Security (COMSEC) shall possess a TS clearance. All IT contractor personnel who administer classified systems and/or networks shall possess a favorable Single Scope

Background Investigation (SSBI) and shall be SCI eligible. Contractor personnel who hold a TS clearance may require access to Restricted Data (RD), Critical Nuclear Weapon Design Information (CNWDI), Foreign Government Information (FGI), Formally Restricted Data (FRD) and North Atlantic Treaty (NATO) Information. Contractor personnel may be required to be indoctrinated into SCI to provide support inside an ATEC Sensitive Compartmented Information Facility (SCIF). Additional details on SCI work are contained in the SCI Addendum to the DD Form 254 Contractor personnel, whose security clearances are suspended, shall not be permitted to work under this TO until their security clearance is reinstated.

C.1.12.4. The contractor shall submit a visit authorization request for all contractor employees performing on this TO in the Joint Personnel Adjudication System using the following Security Management Office (SMO) codes: ATEC HQs – W3Q2AA4; ATC – W4QUAA; OTC – W469AA; Fort Huachuca – W46908; and Fort Bragg – W469076.

C.1.12.5. All contractor personnel requiring access to the LAN and other IT systems shall be required to have a favorable National Agency Check with Local Agency Check (NACLC) or higher level investigation completed, the cybersecurity training completion must be recorded in the Army Training and Certification Tracking System (ATCTS) (https://atc.us.army.mil) database, and the Acceptable Use Policy (AUP) document for that location must be signed. In accordance with AR 25-2, contractor personnel without a security clearance shall not have access to the LAN and other IT systems.

C.1.12.6. Contractor personnel who have not received the required security clearance shall not be granted access to classified information nor allowed to perform classified work.

C.1.12.7. All contractor employees shall be registered in the Defense Enrollment Eligibility Reporting System. Once the registration is completed, contractor employees requiring computer access shall be required to apply for a Common Access Card (CAC) using the Trusted Associate Sponsorship System (TASS) at the following web address:

https://www.dmdc.osd.mil/tass. Once that is completed, the COR/ACOR will enter the required information in TASS and then the contractor employee can report to the local badging office to be issued a CAC.

C.1.12.8. Approximately 10% of help desk employees at ATC and 20% of help desk employees at OTC shall support Special Access Programs (SAP). The contractor shall ensure that investigative requirements for personnel supporting SAPs are submitted IAW the TO and AR 380-381. Personnel supporting SAPs shall be subject to random counter-intelligence polygraph examinations. Employees who refuse to sign an agreement to undergo a polygraph examination cannot access SAP information. The costs for travel and examination will be reimbursed to the contractor under the cost category entitled ODCs.

C.1.12.9. Contractor personnel granted a TS clearance or access to SAP information shall make a verbal attestation and execute an Attestation Statement IAW memorandums from the Secretary of Defense, dated February 5, 1999, and the Office of the Assistant Secretary of Defense, dated February 9, 1999. The Government security personnel will witness the execution of the oral and written attestations and maintain the Attestation Statements for contractor personnel.

C.1.12.10. The contractor shall request the appropriate personnel security investigation based upon the IT position designation IAW AR 25-2. The investigations must be favorably completed prior to employees being permitted access to information systems and being placed in an IT position. In accordance with AR 25-1, all employees requesting access to the automated information systems shall be required to sign an AUP. The contractor shall prepare a list identifying the IT positions designations and submit to the designated Government IA Manager (IAM) and the Government Security Manager during transition-in.

C.1.12.11. The contractor shall monitor all adverse information on contractor personnel, such as security violations, arrests, and bankruptcy. The contractor shall inform the Government Security Manager of any denials, suspensions, or revocation of security clearances. Employees may be denied access to restricted areas (RA) or denied access to classified information.

C.1.12.12. Upon entry on the installation, all vehicles and personnel are subject to search and seizure of contraband and/or unauthorized Government property IAW AR 190-5 and AR 190-13. All contractor personnel will comply with the requirements of the installation for entry, exit, and internal control of personnel, materials, and vehicles.

C.1.12.13. Government Identification Badges.

C.1.12.13.1. Restricted Area (RA) Security Badge for APG, Fort Huachuca and Fort Hood. Unescorted access into the APG and Fort Hood restricted areas shall be granted to contractor personnel who possess a security clearance or were the subject of a favorably completed National Agency Check with Inquiries or a NACLC, provided that there has been no break in service beyond 24 months and there is no known adverse information. For the RAs at APG, Fort Huachuca, and Fort Hood, RA security badges will only be issued to contractor personnel IAW APGR 190-4 and OTC Standing Operating Procedure (SOP) G3-9. Photographic security badges will be approved and issued by Government Security personnel to contractor personnel upon written request from the COR and after the investigation or security clearance has been verified by the Government. Contractor personnel shall wear the RA security badge above the waist so it is clearly visible at all times when in the restricted areas at APG/Fort Huachuca/Fort Hood. All forms of Government-furnished identification shall be returned to the Government when the contractor employee no longer performs work under this TO. The contractor is responsible for ensuring compliance by contractor personnel.

Additionally, the OTC Security Office will issue a proximity card to all contractor employees with a number on the back that identifies the person, company name, and clearance level. Lastly, classified work is performed at the Sensitive Compartmented Information Facility (SCIF), motor pool, arms room, and Forward Test Center (FTC) at OTC. These areas are restricted so if the contractor needs access, they shall be escorted throughout the entire visit.

C.1.12.13.2. For non-RAs at APG, Fort Hood, Fort Huachuca, and Fort Bragg, all contractor employees working on this TO will wear Government-furnished identification badges. At ATEC HQs on APG, photographic identification badges will be issued to contractor employees and include a photograph of the employee, employee's name, identification of company, and appropriate code for security clearance access. At OTC on Fort Hood, building badges (proximity cards) will be issued to contractor employees and will be blank on the front of the card but will have a unique number on the back of the card. Contractor personnel shall wear the identification badge above the waist so it is clearly visible at all times when in non-RAs at APG/Fort Hood/Fort Huachuca, Fort Bragg. All forms of Government-furnished identification shall be returned to the Government when the contractor's employee no longer performs work under this TO.

The contractor is responsible for ensuring compliance by contractor personnel.

C.1.12.14. Foreign nationals/immigrant aliens are not authorized to work on this TO.

However, when foreign nationals/immigrant aliens visiting any Army installation or entering designated buildings, the contractor shall comply with AR 380-10 and alert the Government Foreign Disclosure Officer to gain approval prior to the visit. Additionally, the SCIF at OTC is totally off limits to foreign nationals/immigrant aliens.

C.1.12.15. The contractor shall be responsible for safeguarding all Government information and property provided for contractor use. The contractor shall safeguard information and materials designated as classified, unclassified sensitive, For Official Use Only, OPSEC sensitive, Personally Identifiable Information, and Privacy Act Information IAW applicable directives. Where contractor personnel have access to any Government system, they will not disclose any information to any person or entity without explicit authority to do so.

C.1.12.16. The Government may task the contractor, in writing to design, develop, maintain, or operate a system of records on individuals that must be operated in conformance with the Privacy Act of 1974 (5 USC 552a) and OMB Circular No. A-108.

The Government will identify these technical requirements to the contractor, as needed.

C.1.12.17. Proprietary Data Exclusions.

C.1.12.17.1. Contract performance may require the contractor to access data and information proprietary to a Government agency, another Government contractor, or of such a nature that its dissemination or use other than as specified by this TO, or applicable TO, would be adverse to the interests of the Government or others. Neither the contractor, nor contractor personnel, shall divulge nor release data or information developed or obtained during contract performance, except to authorize Government personnel, or upon written approval of the KO. The contractor shall not use, disclose, or reproduce such data, which bears a restrictive legend, except as authorized.

C.1.12.17.2. For the purpose of this requirement, proprietary data does not include data which is a) known to the receiving party at the time of disclosure, b) in the public domain, or c) disclosed to the contractor from another source.

C.1.12.18. The contractor shall immediately report the loss or possible compromise of classified information or material to the Government Security Manager IAW DODM 5200.01-V3, AR 380-5, ATEC Reg 380-5, ATC Reg 380-5, and OTC Policy Memo G6- 2, Cybersecurity for USAOTC.

C.1.12.19. If required and not identified in Section C.3, the contractor shall develop and implement a Government approved security education program to ensure contractor personnel understand and are familiar with security requirements.

C.1.12.20. Physical Security. The Government will provide access control guidance to the contractor within 30 calendar days after TO award. From this guidance, the contractor shall develop internal processes and procedures IAW DOD 5220.22-M and local procedures and guidance. This Access Control Plan shall be provided to the KO within 60 calendar days after award of the TO for review and approval (CDRL A001).

The protection of GFP shall describe and discuss in detail the contractor's requirements and practices for the protection of all Government-furnished property, how inventories will be conducted, and how equipment located in facilities will be protected.

C.1.12.21. All materials produced by the contractor, which will be disseminated outside of ATEC HQs/ATC/AEC/OTC, will be subject to a review by designated Government OPSEC and Security personnel prior to release. This includes all written (hard copy) and electronic materials produced, such as organizational press releases and marketing materials.

C.1.12.22. No news release (including photographs and films, public announcements, denial or confirmation of same) on any part of the subject matter of this TO or any phase of any program shall be made without the prior written approval of the ATEC Public Affairs Officer (PAO).

C.1.12.23. Disclosure of information regarding operations and services of the activity to persons not entitled to receive it or failure to safeguard any classified information that may come to the contractor (or any persons under the contractor's control) in connection with contract performance, will subject the contractor, contractor's agent, or employees, to criminal liability under 18 USC, 793 and 798. Neither the contractor nor the contractor's employees shall disclose or cause to be disseminated any information concerning the operations of the activity which could result in or increase the likelihood of the possibility of a breach of the activity's security or interrupt the continuity of its operations. The contractor shall direct all inquiries, comments, or complaints to the KO arising from matters observed, experienced, or learned as a result of or in connection with the performance of this TO.

C.1.12.24. The contractor shall not use any electrical information processing equipment in its possession for the purpose of processing or transmitting classified information under this TO without the written permission of the KO.

C.1.12.25. Cybersecurity.

C.1.12.25.1. The contractor shall adhere to cybersecurity policies and procedures for each assigned task and area of responsibility. Additionally, the contractor shall perform specific and unique cybersecurity responsibilities at specific location(s) for different missions, IT systems, and software.

C.1.12.25.2. The contractor shall support cybersecurity efforts to achieve and maintain an appropriate level of confidentiality, integrity, authentication, non-repudiation, and availability that reflects a balance among the importance and sensitivity of the information and information assets, documented threats and vulnerabilities, the trustworthiness of users and interconnecting systems, the impact of impairment or destruction to the DOD information system, and cost-effectiveness. By way of example, this may include producing and maintaining network maps, hardware and software lists for networks and standalone units, user lists, participating in scheduled system security evaluations, audits and reviews, etc.

C.1.12.25.3. All contractor employees with access to a Government information system must be registered in the ATCTS at commencement of services and must successfully complete all required training prior to access to the information system and then annually thereafter or as directed by the Government.

C.1.12.25.4. The contractor shall assure all products and solutions developed and administered are compliant with DOD and Army cybersecurity guidelines and regulations by assessing Commercial Off-the-Shelf (COTS) or newly developed software.

C.1.12.25.5. The contractor shall ensure that all personnel, processes, and solutions provided adhere to all cybersecurity requirements provided for federal, DOD and Army IT IAW current policies, procedures, and statutes, including, but not limited to, the following: The Clinger-Cohen Act; The National Security Act; National Security Telecommunications and Information Systems Security Policy No. 11; Federal Information Processing Standards; DODI 8500.01; DODD 8570.01; DOD 8570.01-M;

DODI 8510.01; Security Technical Information Guides; AR 25-1; AR 25-2; etc.

C.1.12.25.6. The contractor shall have access as needed to Government facilities IAW AR 190-51 and other local regulations. The contractor shall develop and implement procedures to ensure that metal and electronic keys received from the Government are accountable, controlled, and safeguarded IAW regulations above. The contractor shall:

C.1.12.25.6.1. Receive a marked set of keys to facilities and equipment from the Government which will be used by the contractor in the performance of this TO.

C.1.12.25.6.2. Be responsible for keys provided to the contractor by the Government.

The contractor shall establish and implement methods of ensuring that keys used for facility access issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons. Keys issued to the contractor by the

Government shall not be duplicated unless approved by the COR/ACOR.

C.1.12.25.6.3. Report any occurrence of duplicated, misplaced, or lost keys to the COR/ACOR within one duty day after discovery of occurrence and submit a written report to the KO/COR/ACOR by close of business (COB) the next duty day. The written report shall provide complete details relating to the duplicated, misplaced, or lost key.

C.1.12.25.6.4. Re-key or replace the affected lock or locks IAW the Government’s direction. The contractor shall reimburse the Government for the replacement of locks or re-keying and all GFP lost or stolen as a result of keys being duplicated, misplaced, or lost by contractor personnel.

C.1.12.25.6.5. Prohibit the use of keys issued by the Government by any persons other than the contractor's designated employees. It is also the responsibility of the contractor to prohibit the opening of locked areas by contractor employees to persons other than those who are specifically authorized in the performance of assigned work areas.

C.1.12.26. Anti-terrorism and OPSEC contract requirements.

C.1.12.26.1. Access, General Protection, and Security Policy and Procedures. This standard language text is for contractor employees with an area of performance within an Army-controlled installation, facility, or area. Contractor primes and associated subcontractor employees shall comply with applicable installation, facility, and area commander installation and/or facility access and local security policies and procedures (provided by Government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, Headquarters Department of the Army (HQDA), and/or local policy. In addition to the changes otherwise authorized by the changes clause of this TO, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

C.1.12.26.2. The contractor shall comply with ATEC’s OPSEC Plan which will be provided to the contractor within the 30 calendar day transition-in period. The contractor shall identify an individual as the OPSEC Coordinator within the 30 calendar day transition-in period who shall be OPSEC Level II certified per AR 530-1.

C.1.3. GOVERNMENT VEHICLES AND EQUIPMENT OPERATIONS.

C.1.13.1. Operation. The contractor shall operate motor vehicles IAW AR 190-5, AR 385-55, AR 600-55, APGR 190-4, APGR 750-2, and OTC SOP G4-4. All personnel operating Government vehicles and Material Handling Equipment (MHE) shall be licensed IAW AR 600-55, TB 600-2, APGR 385-4, and OTC SOP G4-4.