21R0003 P00006.pdf

W91QEX21R0003

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this Amendment is to address the follow ing updates: the threshold for consideration has been reduced from $5,000,000 to $3,500,000; the removal of the w ord "approximately" from Section L and Section M; and, the incumbent for both the current contract and for the additional in scope of w ork has been provided. The new Closing Date for proposals is 22 April 2021 at 3:00 p.m. (Eastern Standard time). The point of contact for this action is Frances A. De Gori, frances.a.degori.civ@mail.mil.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 63

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 12-Apr-2021

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W91QEX21R0003

X 9B. DATED (SEE ITEM 11)

05-Feb-2021

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

12-Apr-2021

CODE

410TH CSB RCO MIAMI

9301 NW 33RD ST

DORAL FL 33172

W91QEX 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

SUMMARY OF CHANGES

The purpose of this Amendment is to address the following updates:

1. The threshold for consideration has been reduced from $5,000,000 to $3,500,000. Thus, Sections L and M were update to reflect this change.

2. The removal of the word "approximately" from Section L and Section M.

3. The incumbrent for current contract is True Information Assurance, LLC, Contract

#W91QEX-16-F-0003). CLIN’s 0002, 1002, 2002, 3002 and 4002 are additional in-scope work from Contract #140D0420C0076. That incumbent is Taurean Agile Cyber Defense.

4. The new Closing Date for proposals is 22 April 2021 at 3:00 p.m. (Eastern Standard time). As a result of this delay, the Period of Performance has been adjusted as well. Please see Section F – Deliveries or Performance. We have 30 days for Phase In/Out and 8 Months for the Base Period totaling 9 Months.

SECTION B - SUPPLIES OR SERVICES AND PRICES

CLIN 0001

The pricing detail quantity has decreased by 1.00 from 9.00 to 8.00.

CLIN 0002

CLIN 0004

CLIN 0005

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

The following have been modified:

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS) UNITED STATES SOUTHERN COMMAND

(USSOUTHCOM) FOR SECURITY SERVICES SUPPORT

9 April 2021

Part 1

General Information

1. GENERAL: This is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. The Contractor shall ensure that all contractor employees and subcontractor employees are medically, dentally, and psychologically fit for performance of their duties.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Security Services Support as defined in this PWS except for those items specified as government furnished property (GFP) and government furnished services (GFS). The contractor shall perform to the standards in this contract.

1.2 Background: Security Service supports USSOUTHCOM’s collateral and SCI security programs, including but not limited to administrative, personnel, physical, information, and industrial security functions within the headquarters (HQ) and throughout USSOUTHCOM’s area of responsibility (AOR) which includes Central and South America, the Caribbean and the adjacent waters of the Pacific and Atlantic Oceans and the Gulf of Mexico. These programs are designed to protect the command’s people, information, property and operations from acts of espionage, sabotage, terrorism, workplace violence, and other criminal acts; as well as, acts of negligence affecting the command’s security posture. The contractor shall provide support to USSOUTHCOM’s mission as outlined in this PWS. The current incumbent for the existing contract is True Information Assurance, LLC (Contract #W91QEX-16-F-0003). Additional in scope of work is incorporating Contract #140D0420C0076 (awarded to Taurean Agile Cyber Defense).

1.3 Objectives: The Contractor shall have the expertise, capability, and resources to effectively manage and oversee a sufficient, stable, and qualified workforce; and the resources to furnish all the following support services using a cost effective approach that enhances USSOUTHCOM’s ability to achieve its national defense mission.

1.4 Scope: The scope of this contract covers the entire spectrum of non-inherently governmental services and solutions associated with supporting USSOUTHCOM as required by this Performance Work Statement (PWS). The contractor shall provide security service support operations needed to support USSOUTHCOM. It is foreseeable that changes in security requirements, software, and systems will occur during the performance period of this contract. The Contractor and their workforce must have the ability to successfully adapt to these changes and accomplish all performance requirements in a timely and responsive manner.

1.5 Period of Performance: The Period of Performance shall be a base period of nine (9) months (that includes a month Phase In/Out Period as well) from date of contract execution and four (4), twelve (12) month Option Periods.

1.6 General Information:

1.6.1 Quality Control Plan (QCP): The Contractor shall develop, implement, and maintain a QCP and program to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor for its internal use to ensure that it performs and delivers high-quality service. The contractor’s QCP is the means by which the contractor ensures all work complies with the requirements of the contract. The QCP identifies and corrects potential and actual problem areas throughout the entire scope of the contract.

1.6.1.1 The contractor shall develop and implement procedures to identify, prevent, and ensure no recurrence of defective services. The QCP shall be submitted within thirty (30) days of contract award. After acceptance of the QCP, the contractor shall receive the contracting officer’s (KO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation.

1.6.1.2 The Quality Control Plan shall address as a minimum:

1.6.1.2.1 Inspection Program. Included shall be a quality control inspection program covering all general and specific tasks included in the contract scope of work. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis. In developing this inspection program, the Contractor shall identify the key activities and associated characteristics in each process that have a significant influence on specific services and provide for methods for evaluation of the selected characteristics.

1.6.1.2.2 Deficiency Identification. The QCP shall include a method of identifying deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS. This shall contain processes for corrective action without dependence upon Government direction.

1.6.1.2.3 Deficiency Correction. The program shall contain process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions.

The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.6.1.2.4 Documentation and Enforcement. The QCP shall include a method of documenting and enforcing quality control operations of both prime contractor and subcontractor work; including inspection and testing.

1.6.1.2.5 Trend Analysis. The QCP shall include a method of performing trend analysis and assessments through the use of metrics.

1.6.1.2.6 Surveillance Methods. The QCP shall contain specific surveillance techniques for all contract services.

The surveillance methods shall be comprehensive and adaptable to the reporting system of the plan.

1.6.1.3 Inspection System: The contractor shall develop, implement and maintain a system to inspect the services to ensure compliance with PWS requirements, and applicable laws and regulations. The contractor shall specify a scheduled frequency of inspections, the titles of the individuals who shall do the inspection, and their organizational placement.

1.6.1.4 Deficiency Prevention: The contractor shall identify and prevent defects in quality of products and services performed before the level becomes unacceptable. The Quality Control Plan shall be designed to intercept inferior services before they are provided to the Government.

1.6.1.5 Inspection Files: The contractor shall document all inspections conducted, and the necessary corrective and preventive actions taken. This documentation shall be kept on site and made available to the Government throughout the contract performance period and for the period after contract completion until final settlement of any claims under this contract.

1.6.1.6 Complaints: The contractor shall document all customer complaints and report the complaint to the COR within one workday after receipt of complaint. The contractor shall use electronic mail or other written memoranda as notification. Each customer complaint reported to the COR shall have a scheduled completion date subject to COR approval. The Quality Control Plan shall be updated, at no additional cost to the Government, as required to preclude a recurrence of the complaint.

1.6.1.7 Operations Security (OPSEC) SOP/Plan Requirements (As determined by AT/OPSEC Review): The Contractor shall implement and maintain an OPSEC program for preventing the disclosure of critical information or sensitive information which could jeopardize the Government’s ability to execute its mission or to adequately protect its personnel and/or equipment. The Contractor shall develop an OPSEC Standing Operating Procedure (SOP)/plan within 90 calendar days of contract award to the Contracting Officer Representative (COR) or Contracting Officer (KO) to be reviewed and approved by the Government OPSEC Officer on the supporting installation. The SOP must contain a training plan that includes an initial OPSEC brief, continuous awareness, and annual OPSEC training. Awareness/training includes, but not limited to information disclosure via letters, conversations, photographs, resumes, electronic mail (e-mail), Social media/networking sites, dissemination of information and documents disposal. OPSEC Program shall fully comply with the provisions of AR 530-1, Operations Security.

1.6.2 Quality Assurance (QA): The government shall evaluate the contractor’s performance under this contract in accordance with (IAW) the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed IAW the performance standards and contract quality requirements are met. Contract quality requirements” means the technical requirements in the contract relating to the quality of the product or service and those contract clauses prescribing inspection, and other quality controls incumbent on the contractor, to ensure the product or service conforms to the contractual requirements. It defines how the performance standards will be applied, the frequency of surveillance, the minimum acceptable defect rate(s), and deductions, if applicable.

1.6.3 Recognized Holidays: Contractor is not required to perform work on the following holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business between the hours of 0600- 1800 Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.6.4.1 Surge Capability: For Physical Security and Information Security, the Contractor shall provide a surge capability (overtime for 250 hours per year or extra personnel not to exceed two (2) Security Support personnel for surge over 20 days) to support any unforeseen world events or exercises that may require temporary alteration of standard duty hours. Government estimates are based on historical data for emergencies and exercises supporting USSOUTHCOM. The Contractor shall obtain preapproval from the COR prior to any surge hours being worked. This surge capability will be anything above the standard operating hours as outlined in paragraph 1.6.4. The information provided in Technical Exhibit (TE) 1, about the number of actions and estimated hours, is for reference only and not the official work load per task. For short duration surges (less than 20 days), the contractor shall seek remedy by increasing personnel work hours. For longer term surges, the contractor will be given guidance to increase for Physical Security and Information Security Specialist from the COR.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at HQ USSOUTHCOM, 9301 NW 33rd Street, Doral, FL 33172.

1.6.6 Type of Contract: The government will award a Firm Fixed Price contract to include Other Direct Costs (ODC), which shall be for travel and other directly related costs.

1.6.7 Access and General Protection Policy and Procedures:

1.6.7.1 FPCON: In addition to the changes otherwise authorized by the changes of clause of contract, should the US Government Force Protection Condition (FPCON) at any individual installation change, the Government may require changes in contractor security matters or process in accordance with DoDI 2000.16. During FPCONs Charlie and Delta, only contract services that have been deemed “mission essential” by the Government will continue. Contract services will resume when the FPCON is reduced to Bravo or lower.

1.6.7.2 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured IAW Army Regulation (AR) 190-13, “The Army Physical Security Program.”

1.6.7.3 Personnel Security Clearance Requirements: Contractor personnel performing work under this contract must have an active personnel security clearance at the Top Secret (Interim Top Secret are acceptable) clearance based upon a Tier 5 investigation completed within the past five (5) years, and shall also be determined eligible for access to Sensitive Compartmented Information (SCI) level in the DoD personnel security system of record (i.e. JPAS, DISS, etc.) at time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are IAW with the attached DD Form 254, "Department of Defense (DOD) Security Classification Specification". The Contractor shall ensure that contractor employees and subcontractor employees performing services under this contract comply with FAR 52.204-2, Security Requirements when the employee has access to information classified "Confidential," "Secret," or "Top Secret."

The Contract will ensure the employee complies with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M), and any revisions to DOD 5220.22- M, notice of which has been furnished to the Contractor.

1.6.7.3.1 The contractor shall follow DOD Federal Acquisition Regulation Supplement (DFARS) clause 252.223-7004, Drug-free Work Force; and local USSOUTHCOM policies regarding drug testing. The contractor shall conduct drug tests, ensuring all top secret cleared contractor employees are tested at least once per year, each year of the contract, as well as when there is a reasonable suspicion that an employee uses illegal drugs. The drug testing shall be at the contractor’s expense. Positive drug test results shall be made available to both the KO and COR within 24 hours of known test results. Records of drug testing shall be made available to the COR.

1.6.7.4 Background Checks: The Contractor shall ensure contractor employees and subcontractor employees performing services under this contract have passed a security check. Security checks that have been completed as part of a personnel security clearance background investigation, or a previous background check that was a condition of employment, meet this requirement. Documentation of these checks will be made available to the KO or COR upon request. The Government retains the right to exclude any employee from performance of duties under this contract if a background security check reveals an employee is a security risk. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. If the Government determines additional background checks are required, at a minimum, and upon request from the Government, the Contractor shall provide to the KO or COR, the following information on any contractor or subcontractor employee performing services under this contract:

• Full birth name

• Married name (if applicable)

• SSN or local equivalent (ID card number)

• Date of birth

• Place of birth (city, country)

1.6.7.4.1 Background Check Notification Requirements: If a background check on any employee or subcontractor employee performing services under this contract, whether the check was conducted as a condition of employment or as part of the contract with the Government, reveals any information from any source (including host country law enforcement) of criminal activity by Contractor employees, subcontractors, or subcontractor employees, the Contractor shall immediately notify the KO and COR of that information. The Contractor shall make notification of:

(1) Traffic violations, other than parking, will be reported to the KO or COR only if the contract is for drivers for the Government;

(2) Any suspicious activity by Contractor employees, subcontractors, or subcontractor employees the Contractor believes may pose a risk to U.S. or host nation national security or imminent risk of deadly bodily harm to any person; and

(3) Any actions taken against Contractor employees, subcontractors, or subcontractor employees pursuant to this requirement.

1.6.7.4.2 Remedies. In addition to other remedies available to the Government, the Contractor’s failure to comply with the requirements of this paragraph my result in requiring the Contractor to remove a Contractor employee or employees from the performance of the contract.

1.6.7.4.3 Subcontracts. The Contractor shall include the substance of this paragraph and the preceding paragraph in all subcontracts.

1.6.7.5 Uncleared Contractor Common Access Card (CAC) Credentialing and Access Procedures:

1.6.7.5.1 Contractor Common Access Card (CAC) Eligible Requirements: Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DOD facility and access, via logon, to DOD networks on-site or remotely; (2) Remote access, via logon, to a DOD network using DOD-approved remote access procedures; or (3) Physical access to multiple DOD facilities or multiple non- DOD federally controlled facilities on behalf of the DOD on a recurring basis for a period of 6 months or more.

At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.7.5.1.1 Federal Installation/Facility Access: Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The employee performing services under this contract shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, Security Office or the host nation equivalent.

1.6.7.5.1.2 Contractor Non CAC Eligible Requirements for DOD Facility and Installation Access: Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations. The employee performing services under this contract shall provide all information required for background checks to meet installation access requirements to the installation Provost Marshal Office, Director of Emergency Services, or Security Office.

1.6.7.6 Employment Eligibility: The Contractor shall ensure that all Contractor employees and sub-contractor employees performing services under this contract in the U.S. or its territories have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify. Personnel that have not met the employment eligibility requirement on this website are not authorized to perform services under this contract. Verification of the eligibility check will be made available to the KO or COR upon request. This requirement is not in lieu of and does not relieve the Contractor from the I-9 Employment Eligibility Verification Forms for employment of personnel.

1.6.7.7 Access to Government Information Systems: All Contractor employees and subcontractor employees performing services under this contract who have access to a government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services and must successfully completed the DoD Information Assurance Awareness training prior to access to the information system and then annually thereafter.

1.6.7.8 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. Contractor shall not duplicate keys provided by the Government. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas.

1.6.7.8.1 The Contractor shall report any occurrences of lost or duplicate keys/key cards to the KO and the COR (and physical property manager, if applicable) within two (2) hours or the next business day if after hours [time period may be changed to match local policies and guidance] and to request key or lock(s) replacement.

This notification and request for key(s) and lock replacement shall be submitted in writing. The total cost of the replacement may be at the Contractor’s expense.

1.6.7.8.2 Only authorized Contractor personnel shall use Government issued key(s) and/or key card(s).

Contractor personnel shall follow security access requirements when entering secure areas. Contractor shall receive appropriate security clearance approval to allow visitor(s) access in secure areas.

1.6.7.9 Lock Combinations: The Contractor shall establish and implement methods to ensure all lock combinations are protected from unauthorized persons. The Contractor shall ensure lock combinations are changed when personnel with access to the combinations no longer have a need to know IAW local security policies and procedures, DoDR 5200.08, and DoDI 5200.08. These procedures shall be included in the Contractor’s QCP.

1.6.8 Post Award Conference/Contract Periodic Progress Meetings: The Contractor shall attend the post award conference convened by the contracting activity or contract administration office IAW Federal Acquisition Regulation (FAR) Subpart 42.5. The KO, COR, with other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the KO will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: ensure the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.9.1 The COR retains all inherent government functions. The assigned COR will convey government product tasking to the Contractor’s on-site Program Manager, ensure the Contractor’s products meet government requirements, and accept on behalf of the government, products delivered by the Contractor. The

COR or designated technical task manager will address work schedules, project scheduling, and task management through the Contractor’s on-site Program Manager.

1.6.9.2 Product tasking and acceptance of delivery by the government will follow existing SOUTHCOM Security administrative processes and procedures and may be either verbal or written. The COR, in coordination with the Chief of Security, will determine and establish suspense dates for draft and final products at the time each product or project is tasked to the Contractor. Products shall be delivered in soft or hard copy, as determined by the government, using USSOUTHCOM, DoD, and other prescribed standard formats. Product or task acceptance by the government may be either verbal or written. Products delivered by the Contractor that are determined to be incomplete by the government, will be returned to the Contractor with guidance for product changes, additions, deletions, corrections, or modifications.

1.6.9.3 All products shall be drafted using established government organizational processes that include coordination with various command and staff elements, as well as other U.S. national agencies. The government will provide all contractor personnel with initial orientation training on organizational processes and product formats.

1.6.10 Key Personnel: The follow personnel are considered key personnel by the government: On-site Program Manager, Physical Security Specialist (personnel operating the LENEL access control system), Physical Security Hardware Specialist, Information Technology/Information System Specialist, Personnel Security Specialist, and Information Security Specialist; each shall have 5 years minimal of experience.

Exception to the five years require prior approval by the COR. The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. Qualifications for all key personnel are listed below.

1.6.11 Special Qualifications or Certifications: The Contractor shall possess the special qualifications listed below.

1.6.11.1 All contractors shall have knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks), and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.

1.6.11.2 All contractors shall have knowledge of governing laws, regulations, precedents, and directives governing DoD security programs (e.g. information, personnel, physical, industrial, etc.).

1.6.11.3 All contractors shall have general knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies.

1.6.11.4 All contractors shall be proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).

1.6.11.5 All contractors shall have a working knowledge working with using Records Message Traffic (RMT) and the Automated Message Handling System (AMHS).

1.6.11.6 A minimum of two (2) Information Security contractors shall be certified to operate destruction equipment, including a Security Engineered Machinery (SEM) Model 23/5 disintegrator.

1.6.11.7 All Personnel Security contractors shall be proficient using personnel security processing tools, including the DoD personnel security system of record (e.g. JPAS, DISS, etc.) and Electronic Questionnaires for Investigations Processing (e-QIP).

1.6.11.8 A minimum of five (5) Physical Security contractors, including Hardware Specialists, and IT/IS Specialist, shall obtain the “Lenel Certified Professional (LGE-Core, LGE-Access, and LGE- Enterprise)” level within 120 days after contract award. The Government will only fund the travel for the Lenel certification at the Lenel Certified Professional level. The remaining Physical Security Contractors shall have the necessary experience to properly operate the LENEL access control system.

1.6.11.9 Physical Security Hardware Specialists must be able to lift 50lbs and climb a ladder, be familiar with UL Standards, and possess an Associate’s degree or five (5) years of specialized experience. Responsible for the ESS and CCTV network maintenance which shall include the sustainment and maintenance of all ESS and CCTV network infrastructure from base provided communication infrastructure demarcation point to all ESS and CCTV downstream devices as well as the contractor leased lines. The contractor shall assist in the troubleshooting of failures due to issues caused by others.

1.6.11.10 IT Specialist shall have experience in: Windows Server operating systems (Windows 2012 Server, etc.) as well as experience with Unix/Linux administration; administering core network services (DNS, DHCP, etc.); “Virtualization” i.e. Hyper-V; “Database” i.e. SQL; Network Storage Server i.e. NETAPP;

Network/Server monitoring verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups; performing daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary significant experience in Windows Server operating systems (Windows 2012 Server, etc.) as well as experience with Unix/Linux administration; be an experienced Cisco Certified Network Associate (CCNA) and possess an Associate degree or (5) years specialized experience.

1.6.11.11 Information Assurance Specialist shall have sufficient expertise to obtain system accreditation through the DoD Information Assurance Risk Management Framework (RMF) package requirements and possess an Associate degree or (5) years specialized experience.

1.6.11.12 IA/IT Training Certification (As determined by AT/OPSEC Review): All Contractor employees and subcontractor employees supporting IA/IT functions must be certified upon contract award as directed in DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2. Baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.12 Identification of Contractor Employees: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as Government employees. This identification includes meeting attendance, answering Government telephones, email communications, and working in other situations where Contractor status is not obvious. Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel will be issued a USSOUTHCOM contractor picture identification badge which shall be worn and visible at all times while in Government facilities. All Contractor personnel shall comply with all applicable Federal, DoD, Command, and Unit security procedures, measures, requirements, regulations, and directives. Government issued identification remains the property of the Government and shall be returned to the issuing office or other designated Government personnel upon transfer of Contractor personnel from

USSOUTHCOM.

Appearance of Personnel. The Contractor shall ensure that Contractor personnel present a neat and professional appearance at all times. This includes shirts with sleeves (short or long sleeves), pants or skirts (no shorts), safety gear in designated areas as required by Occupational Safety and Health Administration (OSHA) requirements and Army regulations. Offensive pictures, sayings, tank tops, tee shirts, and spandex or similar fabric worn as outerwear are strictly prohibited.

1.6.12.1 Badging of Contractor Employees: If required by the Government, contract personnel and all associated subcontractors employees accessing U.S. facilities or activities, shall present a valid picture ID provided by the Government while accessing Government owned or contracted facilities and shall adhere to facility security policies and restrictions. If applicable, Government issued access badges will not be worn outside designated facility where visible to the general public.

1.6.12 Contractor Travel: The Contractor may be required to travel from USSOUTHCOM to other destinations worldwide. The Government will provide verbal or written notice of travel as soon as practicable, and identify specific objective(s) of the travel. The Contractor, in coordination with the Government, shall make necessary travel arrangements and be responsible for obtaining passports and visas for Contractor personnel. The Government will provide Contractor personnel with documentation indicating the Contractors’ travel on behalf of the Government, and will obtain country clearances in accordance with established DoD and Department of State procedures. Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires the Government approval/authorization and notification to the COR 10 days prior to travel.

1.6.13 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose.

This right does not abrogate any other Government rights.

1.6.14 Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply, and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.6.14.1 Non-Disclosure Statements: The Contractor shall provide signed non-disclosure agreements to the Government prior to commencement of work under the contract. Disclosure of information by Contractor personnel may result in Contractor personnel removal from performance of duties under this contract.

1.6.14.2 Advertisement and Social Media: The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The use of propaganda violates DOD Commercial Use of Imagery Guidelines stated at (http://www.defenseimagery.mil/products/DODimagery/commercialuse.html). The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.6.14.3 At no time will the Contractor or associated sub-contractor employees transmit government documents or information using methods that do not meet the security requirements specified in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" such as personal electronic mail accounts, public digital data storage sites (cloud storage), social media platforms or instant messaging.

Approved government sites such as U.S. Army Aviation and Missile Research Development and Engineering Center (ARMDEC) Safe Exchange at https://safe.amrdec.army.mil/SAFE/About.aspx , or All Partners Access Network (APAN) at https://community.apan.org/ , or other transmission means determined by the government must be used.

1.6.14.4 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.15 Phase-in/Phase-Out (PIPO) Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the 30 day phase in/ phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services at the end of the phase-in period.

1.6.16 Training Requirements:

1.6.16.1 Anti-Terrorism (AT) Level I Training: The Contractor shall complete AT Level I Training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR or KO within 10 calendar days after completion of training by all employees and subcontractor personnel. For Common Access Card (CAC) holders, AT Level I awareness training is available at https://jkodirect.jten.mil, course number “JS-US007-14”. For non- CAC holders, AT Level I awareness training is available at http://jko.jten.mil/courses/atl1/launch.html (this standalone version is intended for non-CAC users without a JKO account only). Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local AT Officer at their assigned location for classroom training by a Level 2 trained AT Officer and a copy of either the training certificate or the training attendance roster signed by the AT Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or KO within 10 calendar days after completion of the training.

1.6.16.2 OPSEC Awareness Training: If the Contractor, or a subcontractor, or employees of either disclose any information that disrupts or harms the Government's operations or activities, then the Government retains the right to exclude any employee from performance of duties under this contract. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. By way of example, personnel shall not sketch or take photos of government facilities or activities, unless related to service to be provided. All government paper products and removable digital storage material that is received, generated, or stored during the contract will be destroyed completely when no longer needed to preclude recognition of information.

1.6.16.3 Information Assurance (IA) Training: Contractor employees, including subcontractors, requiring access to Government information systems shall complete the DOD IA Cyber Awareness Training. All employees working information technology (IT)/IA functions must comply with DOD and Army training requirements per DOD Directive (DODD) 8570.01, Information Assurance Training Certification and Workforce Management, DOD 8570.01-M, Information Assurance Workforce Improvement Program, and AR 25-2, Information Assurance, within 30 days of employment. Training is available at https://ia.signal.army.mil/DODIAA/default.asp or http://jko.jten.mil. All Contractor personnel and subcontractor personnel performing services under this contract with access to a government information system must be registered in the Army Training Certification Tracking System (ATCTS). Contractor personnel must complete refresher training every 12 months.

1.6.16.4 Threat Awareness Reporting Program (TARP Training): Within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract and require a security clearance, shall complete TARP training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the Government Representative within 10 calendar days after completion of training by all employees and subcontractor personnel. TARP training is available at the Army Learning Management System (ALMS) https://www.lms.army.mil/. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local Counter Intelligence (CI) Officer at their assigned location for classroom training and a copy of either the training certificate or the training attendance roster signed by the CI Officer will be maintained by the Contractor. Verification of the training will be provided to the Contracting Officer (KO) or Contracting Officer Representative (COR) within 10 calendar days after completion of the training.

1.6.16.5 iWATCH Training. The contractor and all associated sub-contractors shall…