Request_for_Quotation_AFRICOM_Insider_Threat_Support_-_W91WFU-18-Q-0030_Amdt_0002.pdf

REQUEST FOR QUOTE (RFQ) No. W91WFU-18-Q-0030

Solicitation Title: US AFRICOM Insider Threat Analyst Support

Issuing Office: Department of the Army, 409th Contracting Support Brigade, Regional Contracting Office Stuttgart

Agency Contact: Ms. Olivia Epps, Ordering Contracting Officer, Olivia.f.epps.civ@mail.mil, (+49) 711-729-2939.

Alternate Contact: Mr. David Bremer, Contract Specialist, david.g.bremer.civ@mail.mil, (+49) 711-729-2480

RFQ Issue Date: 23 September 2018

Quote Due Date: 26 September 2018, 2 pm Eastern Time, email quotes to:

Olivia.f.epps.civ@mail.mil and david.g.bremer.civ@mail.mil mailto:Olivia.f.epps.civ@mail.mil mailto:david.g.bremer.civ@mail.mil

1.0. GENERAL INFORMATION

1.1. NAICS Code and Small Business Size Standard: The principal nature of the requirements described in this solicitation is consistent with services performed by industries in the 541990 All Other Professional, Scientific and Technical Services with a small business size standard of $15M.

1.3. Product Service Code (PSC): The services in this solicitation are best represented by PSC Code: R423 – Support – Professional – Professional Intelligence

1.4. Type of Contract: The primary type of contract resulting from this solicitation is:

Hybrid: Firm Fixed Price (labor); Time and Materials (Travel and ODCs)

1.5. Type of Services: The type of services under this solicitation is:

Commercial Items Non-Commercial Items Mix of Both

1.6. Security Clearances:

1.6.1. The clearance level for work performed on this PWS/SOW is: Unclassified Classified Mix of Both

1.6.2. The Facility Clearance Level for this PWS/SOW is: Unclassified Secret Top Secret

1.7. Performance Location(s):

1.7.1. The performance locations for this PWS/SOW are: CONUS OCONUS

Mix of Both – Stuttgart, Germany

1.7.3. The labor will be performed at on a Government Site Contractor Site Mix of Both

1.8. Place(s) of Performance:

1.8.1. The places of performance(s) for this PWS/SOW are:

US AFRICOM Headquarters, Stuttgart Germany, Kelley Barracks

1.9. Period of Performance:

1.9.1. The period of performance for this PWS/SOW is:

The period of performance for this task order is from date of award (estimated at 28 Sep

18) through 1 year thereafter, with 4 (1-year) options that may extend the cumulative term of this task order to 5 years

2.0. CONTRACT LINE ITEMS (CLINS) AND CONTRACT TYPE BY CLIN

CLIN 0001 (Firm Fixed-Price): Base Year – Provide all Insider Threat services supporting the AFRICOM InTP program office. These services are performed OCONUS, on Government site, in Stuttgart, Germany. All PWS requirements apply.

Unit of Issue = Months

Number of Months = 12

Price Per Month = (Offeror to complete)

Total Firm Fixed Price (12 Months): $

CLIN 0002 (Time and Materials): Base Year - Other Direct Costs – Authorized ODCs for this Task Order include costs associated with allowances and benefits outlined the DSSR for the location of Stuttgart, Germany and Defense Base Act (DBA) Insurance.

Total Estimated Cost (NTE):

CLIN 0003 (Time and Materials): Base Year - Travel – Authorized IAW JTR in support of PWS requirements.

CLIN 1001 (Firm Fixed-Price): Option Year 1 – Provide all Insider Threat services supporting the AFRICOM InTP program office. These services are performed OCONUS, on Government site, in Stuttgart, Germany. All PWS requirements apply.

Unit of Issue = Months

Number of Months = 12

CLIN 1002 (Time and Materials): Option Year 1 - Other Direct Costs – Authorized ODCs for this

CLIN 1003 (Time and Materials): Option Year 1- Travel – Authorized IAW JTR in support of PWS requirements.

CLIN 2001 (Firm Fixed-Price): Option Year 2 – Provide all Insider Threat services supporting the AFRICOM InTP program office. These services are performed OCONUS, on Government site, in Stuttgart, Germany. All PWS requirements apply.

Unit of Issue = Months

Number of Months = 12

CLIN 2002 (Time and Materials): Option Year 2 - Other Direct Costs – Authorized ODCs for this

CLIN 2003 (Time and Materials): Option Year 2 - Travel – Authorized IAW JTR in support of PWS requirements.

CLIN 7500 (Firm-Fixed Price) Contractor Manpower Reporting Application (Base Period)

Total Firm Fixed Price: $

CLIN 7501 (Firm-Fixed Price) Contractor Manpower Reporting Application (Option Year 1)

CLIN 7502 (Firm-Fixed Price) Contractor Manpower Reporting Application (Option Year 2)

3.0. DESCRIPTION OF SERVICES/SCOPE OF WORK

PERFORMANCE WORK STATEMENT (PWS)

United States Africa Command Insider Threat Program Analyst 15 August 2018

Part 1

General Information

1. General: This is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

1.1 Description of Services/Introduction: This is a non-personal services contract to provide Insider Threat Program support to United States Africa Command (USAFRICOM).

The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.2 Background: The USAFRICOM Insider Threat Program (InTP) is the focal point for detecting and mitigating insider threats to USAFRICOM personnel, information, systems, and facilities. USAFRICOM InTP is based at Kelley Barracks, Stuttgart Germany.

1.3. Scope: The Contractor shall provide skilled, experienced, and professional Insider Threat Detection Support, for non-personal services to support the USAFRICOM Insider Threat (InT) Program. The Insider Threat Detect personnel working as part of the Insider Threat Hub will employ various skills and experiences, including but not limited to Insider Threat, Counterintelligence (CI), Law Enforcement (LE), and Computer Network Defense to gather, integrate, and analyze insider threat indicators as authorized from User Activity Monitoring (UAM), LE, CI, HR, and Security and other intelligence sources; Provide timely reporting and referral of insider threat information to enable effective response and mitigation by investigative and command authorities; Interact with and assists CI and Security in support of formal investigations and/or inquiries to resolve InT related matters, employee misconduct, or violations of laws and policies; create case files and ensure personal information is correct, accurate and PII protected; collect and review incoming correspondence, referrals, and other alerts for dissemination; have demonstrated experience with the insider threat detection tools; research applicable policies related to Insider Threat and risk mitigation and maintains a repository of these policies; Produce and disseminate Hub meeting agendas and brief agenda items to AFRICOM officials, as required. Produce and disseminate meeting minutes, identifying due out to Hub members and action elements; Provide written or oral case updates or timelines upon request; Possess the ability to write official memoranda for senior AFRICOM officials. The Contractor shall accomplish these tasks in accordance with EO 13587, DoDD 5205.16, and CNSSD No. 504.

1.4 Objectives: The objective of this requirement is to employ 2 x Full Time Employee (FTE)s to provide analytical training/education, monitor, detect, brief, gather and integrate information to support the USAFRICOM InTP and perform day to day tasks and activities directed by InTP leads.

1.5 General Information:

1.5.1 Quality Control Plan (QCP): The Contractor shall develop and maintain a Quality Control Plan (QCP) to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor's QCP is the means by which it assures that the work provided complies with the requirements of the contract. At a minimum, the QCP must include the following to be acceptable:

a. A chart showing the organizational structure and lines of authority, the names, qualifications, duties, responsibilities, and classification of each member of the Contractor's Quality Control Team.

b. How will the Contractor monitor work to ensure that performance complies with all timelines, deadlines, and goals?

c. How will the Contractor monitor work to ensure that performance complies with all specifications and requirements of the contract, including clauses?

d. How will the Contractor monitor and ensure staff qualifications remain current and valid throughout contract performance?

e. How will the Contractor ensure all keys issued will remain controlled items (Paragraph 1.8 Key Control)?

f. How will the Contractor inventory and track maintenance of all Government Provided Equipment / Materials?

g. How will the Contractor identify, investigate, and correct any non-conforming performance and prevent similar deficiencies in the future?

h. How will the Contractor file and save all Quality Control related documents for the life of the contract plus 5 years.

A final QCP shall be submitted to the Contracting Officer (KO) through the Contracting Office’s Representative (COR) for review and acceptance within ten (10) business days after date of contract award. After acceptance of the QCP, the will receive the KO’s acceptance in writing.

Any changes to the accepted QCP will be required to be resubmitted for acceptance within five

(5) business days before implementation.

The Contractor shall inform the COR of issues or potential issues that might affect the performance within two (2) hours of identifying those issues. Verbal reports will be followed up by written reports within five (5) business days.

1.5.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.5.3 Recognized Holidays: US Holidays: Work shall not be performed on U.S. holidays occurring during the normal workweek unless otherwise directed by the KO. When a U.S holiday occurs on a Saturday or a Sunday, the holiday is observed on the preceding Friday or following Monday, respectively. Work will coincide with USAFRICOM Fiscal Year Public, Holiday, and Family Day Schedules.

Host Nation Holidays: Work shall be performed on local Host Nation* holidays occurring during the normal workweek unless otherwise directed by the KO.

* Local host nation holidays occur in the region/state where contract performance takes place.

The US holidays are:

New Year’s Day January 1st M. L. King Memorial Day 3rd Monday in January President’s 3rd Monday in February Memorial Day last Monday in May Independence Day July 4th Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

The German national and local holidays are:

New Year’s Day January 1st Three Kings Day January 6th Good Friday Varies Easter Monday Varies Labor Day May 1st Ascension Day Varies Whit Monday Varies Corpus Christ Varies Day of German Unity October 3rd All Saint Day November 1st 1st Christmas December 25th 2nd Christmas 26th

1.5.4 Hours of Operation: The Contractor is responsible for conducting business, between the hours of 0730 and 1630 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the Contractor will not be reimbursed when the Government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.5.5 Training Holidays: United States Army Europe (USAREUR) has historically granted military personnel Training Holidays as compensation for time that they spent in field training.

These are typically combined with regular holiday leave schedules (for example, Christmas half days or day on day off schedules). Training Holidays may affect access to military operated facilities. If scheduled work or access to facilities is required, coordination with occupants will be necessary or the work in affected facilities shall be rescheduled after the training holiday. However, announced training holidays or exodus of military personnel may provide the Contractor with an opportunity for unrestricted access to facilities and areas. The Contractor shall take full advantage of such opportunities by planning maintenance or actions that are better accomplished when such areas are vacant. Contractors shall work on training holidays unless paid time off is utilized.

1.5.6 Place of Performance: The work to be performed under this contract will be performed at Kelley Barracks, Stuttgart Germany. It is possible the Contractor(s) may be required to travel on official business to CONUS and to locations that reside under the purview of USAFRICOM InTP.

1.6 Security Requirements:

1.6.1 Security Program: Contractor personnel performing work under this contract must have a favorably adjudicated investigation with Top Secret/ Sensitive Compartmented Information (TS/SCI) eligibility at the time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are in accordance with the attached DD254.

1.6.2. Personnel Security Clearance Requirements: Contractor personnel performing work under this contract must have an active personnel security clearance at the TS/SCI level in the Joint Personnel Adjudication System (JPAS) or the DoD System of Record for Security Clearances at time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are In Accordance With (IAW) the attached DD Form 254, Department Of Defense Contract Security Classification Specification. The Contractor shall ensure that Contractor employees and sub-contractor employees performing services under this contract comply with FAR 52.204-2, Security Requirements when the employee has access to information classified “Confidential,” “Secret,” or “Top Secret.” The Contractor shall ensure their employee complies with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M), and any revisions to DOD 5220.22-M, notice of which has been furnished to the Contractor.

1.6.3 Installation Access: Access to U.S. installations and controlled areas is limited to personnel who meet security criteria and are authorized by Host Nation law to work in that country. Failure to submit required information/data and obtain required documentation or clearances in accordance with Army in Europe Regulation (AER) 190-16 (AER 190-16) Installation Access Control, will be grounds for denying access to U.S. installations and controlled areas. The Contractor shall ensure that any subcontractors used in performance of this contract complies with these requirements and that all employees, of both the Contractor and any subcontractor utilized by the Contractor, are made aware of and comply with these requirements. Should anything in this paragraph conflict with AER 190-16, the regulation takes precedent.

The Contractor shall be aware of and comply with the requirements associated with Installation Access Control. The Government is not liable for any costs associated with performance delays due solely to a firm’s failure to comply with Installation Access Control System (IACS) processing requirements.

The Contractor shall return installation passes to the issuing IACS office when the contract is completed or when a Contractor employee no longer requires access.

AER 190-16 can be found on the following website:

http://www.eur.army.mil/aepubs/publications/AER190-16.pdf?publisheddate=20170427

1.6.4 Background Checks: – U.S. and Host Nation Contractors. The Contractor shall provide an installation pass log within (30) business days after contract award. The pass log shall be updated as employees are added or removed and submitted to the COR within five (5) business days after changes.

http://www.eur.army.mil/aepubs/publications/AER190-16.pdf?publisheddate=20170427

1.6.5 Common Access Cards (CAC): The Contractor shall submit the Trust Associate Sponsorship System (TASS) registration request (provided by the COR) to the COR within fifteen (15) calendar days after award (unless circumstances require otherwise and as directed by the KO)

1.6.5.1 The Contractor shall submit a CAC log within thirty (30) calendar days after contract award and within five (5) calendar days after changes have been made (unless circumstances require otherwise and as directed by the KO). The COR will provide format and content for the log during the post award meeting. Note - CACs are Government property and must be accounted for.

1.6.6 Physical Security: The Contractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured IAW AR 190-13, “The Army Physical Security Program.”

1.6.7 Operations Security (OPSEC) Requirements: Contractor personnel shall adhere to facility security policies and restrictions. If applicable, Government issued access badges shall not be worn outside designated facilities where visible to the general public. The Contractor shall immediately report suspicious activities to security personnel.

1.6.8 Employment Eligibility: Contractor shall ensure that all contractor employees and sub-contractor employees performing services under this contract have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify. Contractor shall ensure that all contractor employees and sub-contractor employees who reside in the U.S. performing services under this contract have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify.] Personnel that have not met the employment eligibility requirement on this website are not authorized to perform services under this contract. Verification of the eligibility check will be made available to the KO or COR upon request. This requirement is not in lieu of and does not relieve the Contractor from the I-9 Employment Eligibility Verification Forms for employment of personnel.

1.7 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any incidents of lost or duplicate keys/key cards to the KO. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the KO, re-key or replace the affected lock or locks;

however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of http://www.uscis.gov/e-verify http://www.uscis.gov/e-verify persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the KO. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.8 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the KO will apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.9 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies;

coordinate availability of Government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.10 Key Personnel: The Contractor shall identify a Point of Contact by name who will provide day to day interaction on behalf of the contractor with the government. The POCshall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The POC shall be available from 0800 to 1630, Monday thru Friday except Federal holidays or when the Government facility is closed for administrative reasons.

1.11 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed. Contractor personnel identification shall be easily identifiable through the display of badges IAW AER 27-715 Contractor Identification.

1.12 Contractor Travel: Contractor shall be required to travel CONUS or OCONUS during the performance of this contract to support USAFRICOM area of responsibility (AOR) cases, attend meetings, conferences, and training. The Contractor may be required to travel to off-site training locations and to ship training aids to these locations in support of this PWS.

Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR 15 business days prior to scheduled travel. The Contractor and sub-contractors shall be required to comply with all training and deployment requirements, country clearances as required in the Foreign Clearance Guide, https://www.fcg.pentagon.mil/.

1.13 Other Direct Costs: Authorized ODCs for this Task Order include costs associated with allowances and benefits outlined the DSSR for the location of Stuttgart, Germany and Defense Base Act (DBA) Insurance.

1.14 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the KO. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.15 Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply, and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

The use of propaganda violates DOD Commercial Use of Imagery Guidelines stated at (http://www.dimoc.mil/).

The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.15.1 Non-Disclosure Statements: The Contractor shall provide signed non-disclosure statement(s) to the Government prior to commencement of work under the contract.

Disclosure of information by Contractor personnel may result in Contractor personnel removal from performance of duties under this contract. The Contractor shall provide a copy(s) (for each employee) of the non-disclosure statement within five (5) business days after contract award.

1.16 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation https://www.fcg.pentagon.mil/ http://www.dimoc.mil/ services which may create a current or subsequent OCI as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.17 Phase In Period: The period between Contract award and Contract start date will constitute the phase-in period. During the phase-in period, the Contractor shall prepare to assume full responsibility for all areas of operation in accordance with the terms and conditions of the PWS. The Contractor shall take all actions necessary for a smooth transition of the Contracted operations. This period shall be fifteen (15) calendar days from Contract award.

The Government will make all facilities and equipment accessible to the Contractor for a maximum of five (5) work days prior to the Contract start date for site familiarization and planning. During the phase-in period, the Contractor shall at a minimum:

a) Obtain all required certifications, licenses, permits, and clearances necessary to perform required tasks to include installation passes and Department of Defense Risk Management Framework (RMF).

b) Develop and submit any required deliverables.

c) Attend post-award meetings as required.

d) Accomplish any necessary training.

Phase Out Period: Phase Out will occur during the last Fifteen (15) days of contract performance. The Contractor shall take the necessary steps to ensure a smooth and orderly transfer of performance responsibility to a successor. The Contractor shall correct or replace, as determined by the COR any damage to Government owned property caused by employee negligence or mistake, intentional or otherwise. The Contractor shall fully cooperate with the successor contractor and the Government so as not to interfere with their work or duties. This shall include formal coordination with the Government and incoming contractor staff and management; delivery of copies of existing policies and procedures; delivery of required metrics and statistics, and migration of databases (if required).

1.18 Safety: Contractor shall comply with Occupational Safety and Health Administration (OSHA), National Electrical Safety Code and National Electrical Code (NEC)/National Fire Protection Association (NFPA) NFPA 70 codes.

1.18.1 Safety Plan and Program: Reserved

1.19 Environmental Compliance: The Contractor shall keep the work area clean and dispose of any waste and excess debris, in accordance with Host Nation laws/codes, at the end of each work day.

1.20 Environmental Compliance Plan and Program: Reserved

1.21 Required Training:

1.21.1 Anti-Terrorism (AT) Level I Training: The Contractor shall complete AT Level I Training within (30) calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or thirty (30) calendar days after employment of new personnel. Contractor personnel travelling overseas shall complete area of responsibility (AOR) specific AT awareness training for U.S. based Contractor employees and associated sub-Contractor employees. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR (or to the KO, if a COR is not assigned) within thirty (30) calendar days after completion of this training by all employees and subcontractor personnel. AT Level I awareness training is available at https://jkodirect.jten.mil. Contractor personnel must complete refresher training every twelve (12) months except AOR specific AT Level I training which shall be completed as required by local AT policies

If training cannot be conducted on the website, the Contractor shall coordinate with the COR who will contact the local AT Officer at their assigned location for classroom training. Contractor personnel completing training in the classroom will receive a certificate or the training attendance roster signed by the AT Officer. Verification of the training shall be provided to the COR within ten (10) calendar days after completion of the training.

1.21.2 OPSEC Training: Contractor employees, including subcontractors, shall complete Level I OPSEC training within thirty (30) calendar days of employment under this contract.

OPSEC Level I training is available at http://www.cdse.edu/catalog/elearning/GS1(30).html.

Contractor personnel must complete refresher training every 12 months. If training cannot be conducted on the website, the Contractor shall coordinate with the COR who will contact the local OPSEC Officer at their assigned location for classroom training. Contractor personnel completing training in the classroom will receive a certificate or the training attendance roster signed by the OPSEC Officer. Verification of the training shall be provided to the COR within ten (10) calendar days after completion of the training.

1.21.3 iWATCH Training: The Contractor and all associated subcontractors will brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training will be completed within thirty (30) calendar days after the contract is awarded and within thirty (30) calendar days after new employees commence contract performance, with the results reported to the COR within ten 10 calendar days after the contract is awarded. Training slides can be found on the Army OneSource we site:

http://www.myarmyonesource.com/familyprogramsandservices/iwatchprogram/default.aspx.

1.21.4 Information Assurance (IA) Training: Contractor employees, including subcontractors, requiring access to Government information systems shall complete the DOD IA Cyber Awareness Training. Information Assurance, within thirty (30) calendar days of employment. Training is available at https://ia.signal.army.mil/DoDIAA/default.asp. All Contractor personnel and subcontractor personnel performing services under this contract with access to a Government information system must be registered in the Army Training Certification Tracking System (ATCTS), the web address is https://atc.us.army.mil/iastar/index.php. Contractor personnel must complete refresher training every twelve (12) months. The Contractor shall submit (to the COR) a training certificate for each employee that has access to the Government network within ten (10) calendar days of completion.

https://jkodirect.jten.mil/ http://www.cdse.edu/catalog/elearning/GS130.html http://www.myarmyonesource.com/familyprogramsandservices/iwatchprogram/default.aspx https://ia.signal.army.mil/DoDIAA/default.asp https://atc.us.army.mil/iastar/index.php

1.21.5 Personally Identifiable Information (PII): Contractor employees, including subcontractors, performing services under this contract with access to Government information shall complete identifying and safeguarding PII, within thirty (30) calendar days of employment.

Contractor personnel must complete refresher training every twelve (12) months. The Contractor shall submit a certificate to the COR within five (5) calendar days after competition.

Training is available at http://iatraining.disa.mil/eta/piiv2/launchPage.htm.

1.21.6 Threat Awareness and Reporting (TARP): Contractor employees, including subcontractors, performing services under this contract with access to Government installations shall complete TARP training, within thirty (30) calendar days of employment.

Contractor personnel must complete refresher training every twelve (12) months. The Contractor shall provide the COR a copy of the training certificate(s) within five (5) calendar days after competition. Training is available at http://iatraining.disa.mil/eta/piiv2/launchPage.htm.

1.22 Authorized to Perform Services in Germany: Contractors performing services in the Federal Republic of Germany (FRG) shall comply with German law. The Contractor shall determine whether performance requires registration with German authorities or authorization to do business in Germany and, if so, shall comply with all requirements. Whether or not registration or authorization to do business is required, the Contractor also shall determine what documents or authorization its employees and any subcontractor employees must possess to work in Germany. The Contractor shall ensure affirmatively that its employees and subcontractor employees possess such documents or authorizations.

Contractor employees who:

(a) are not nationals of Germany or other European Union countries, and

(b) are not members of the force, the civilian component or their dependents, and

(c) do not have assimilated status under Articles 71, 72, or 73 of the Supplementary Agreement to the NATO SOFA shall possess work and residence permits.

By acceptance of and performance under this contract and any task orders or delivery orders issued hereunder, the Contractor affirms that it has complied with the requirements above.

Compliance with this clause and German law is a material contract requirement.

Noncompliance by the Contractor or Subcontractor at any tier shall be grounds for issuing a negative past performance evaluation and terminating this contract, task order, or delivery order for default.

1.23 Electromagnetic Compatibility Directive: The Contractor certifies that all electrical and electronic equipment and/or appliances furnished are in compliance with the Electromagnetic Compatibility Directive 2004/108/EC. For radio transmitting and telecommunication devices furnished in the Federal Republic of Germany, the Contractor certifies that all such items have been approved by the Bundesamt fuer Zulassungen. Any penalties for noncompliance imposed by the Government of the European country where the equipment or appliances are delivered or product liability claims caused by interference generated by furnished appliances or equipment are solely the responsibility of the Contractor.

1.24 Notice to Proceed: Reserved

http://iatraining.disa.mil/eta/piiv2/launchPage.htm http://iatraining.disa.mil/eta/piiv2/launchPage.htm

1.24 Conventional Forces Europe (CFE) Treaty Verification Inspection: Contractor-owned or controlled structures and containers located on U.S. Government installations are subject to short-notice inspections by CFE treaty inspection teams. The Government will endeavor to provide the Contractor as much notice as possible in the event of such inspections. The contractor shall provide access to such structures and containers at the request of the Government. The Contractor shall report such inspections to the KO through the COR in writing within ten (10) calendar days of completion of the inspection. Contractor-owned or controlled structures and/or containers on U.S. installations may have to be inspected to comply with the CFE treaty even if Contractor personnel are unavailable to provide access. Any costs borne by the Contractor or any impact on contract performance as a result of the inspection will be a matter of negotiation between the Contractor and the KO.

PART 2

DEFINITIONS & ACRONYMS

2 Definitions and Acronyms:

2.1 Definitions:

Contractor - A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contracting Officer - A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note:

The only individual who can legally bind the Government.

Contracting Officer's Representative (COR) - An employee of the U.S. Government appointed by the KO to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable - Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Key Personnel - means certain skilled experienced professional and technical personnel who are essential for successful Contractor accomplishment of the work to be performed under this contract.

Physical Security - Actions that prevent the loss or damage of Government property.

Quality Assurance - The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

Quality Assurance Surveillance Plan (QASP) - An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

Quality Control - All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Subcontractor - One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Work Day - The number of hours per day the Contractor provides services in accordance with the contract.

Work Week - Monday through Friday, unless specified otherwise.

2.2 Acronyms:

ACOR Alternate Contracting Officer's Representative AER Army Europe Regulation AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation CCE Contracting Center of Excellence CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DPW Department of Public Works DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense FAR Federal Acquisition Regulation FGS Final Governing Standards HIPAA Health Insurance Portability and Accountability Act of HQDA Headquarters Department of the Army IACS Installation Access Control System InTP Insider Threat Program KO Contracting Officer LNSP Local national Screening Program MSDS Material Safety Data Sheets OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs OSHA Occupation Safety and Health Administration NATO North Atlantic Treaty Organization NITTF National Insider Threat Task Force PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program SIPRNET Secret Internet Protocol Router Network

SCI Sensitive Compartmented Information SSO Security Site Officer TASS Trust Associate Sponsorship System TE Technical Exhibit Top Secret TS USAG United State Army Garrison United States Army Europe USAREUR United States European Command USEUCOM SOFA Status Of Forces Agreement

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3 Government Furnished Items and Services:

3.1 Services: N/A

3.2 Facilities: The Government will provide physical workspace in which the contractor will conduct all work and daily activities.

3.3 Utilities: The Government will provide access to water, sewer, and utility power, access to associated networks and location for the work to take place. The Contractor shall instruct employees in utilities conservation practices. The Contractor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish cleaning vehicles and equipment.

3.4 Equipment: The Government will provide all necessary equipment for the contractor to conduct daily tasks, to include: computers, desk, chair, telephones and all peripheral equipment to supplement the computer (this includes all necessary hardware and software), electronic mail (E-mail) account. The Government will consider items not listed on this contract on a case by case basis. As deemed necessary by the government, certain contract personnel will be provided cellular phones and service to be used during travel to perform official duties. The contractor shall not use property provided by the government for any purpose other than in the performance of this contract.

3.5 Property Management: Reserved

3.6 Materials: Reserved

3.7 Training: The Contractor, including performing services under this contract shall attend the follow training:

a) USAFRICOM Newcomer’s Course and any AFRICOM training required to keep personnel aware of standards and changes within AFRICOM policies.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. Contractor Furnished Items and Responsibilities:

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

4.2 Facility Clearance: The Contractor shall possess and maintain a FINAL Top Secret clearance from the Defense Security Service IAW DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM) and AR 380-49, Industrial Security Program. The Contractor's employees, performing work in support of this contract shall possess Top Secret/ Sensitive Compartmented Information (TS/SCI) clearance. The DD 254, Department Of Defense Contract Security Classification Specification is provided as an attachment in the basic contract.

4.3 Materials: Reserved

4.4 Equipment: Reserved

PART 5

SPECIFIC TASKS

5. Specific Tasks: The Contractor shall provide non-personal services to support the USAFRICOM InTP Hub to include gathering, integrating, and analyzing insider threat indicators as authorized from UAM, cybersecurity, LE, CI, personnel security (PERSEC), HR, and other intelligence sources; Providing timely reporting and referral of insider threat information to enable effective response and mitigation by investigative and command authorities; Interact with and assists Security and CI in support of formal investigations and/or inquiries to resolve InT related matters, employee misconduct, or violations of laws and policies. The Contractor shall accomplish these tasks in accordance with EO 13587, DoDD 5205.16, and CNSSD No. 504.

Table 5.0-001 Education and Experience Requirements (Acronyms are called-out in respective PWS sections)

PWS # EDUCATION* MIL/DOD CIV/DOD

CONTRACTOR**

SYSTEMS/TOOLS

EXPERIENCE (MIN 3 years each at the user level)***

5.1 Min: Associates

OR experience

Or Min 3 yrs at a corps-level, service component, Major Command (MAJCOM), Combatant command (CCMD), or other higher level HQ with 5 yrs similar experience or DoD experience

Primary experience utilizing UAM software, behavioral analytics software/applications

*Education must be from an accredited College or University or in lieu of Associates degree, experience as articulated below.

** Experience: 5 years’ experience as a Military Member, DoD Civilian, or Contractor supporting the Department of Defense or Military in Intelligence, Security, or related field.

*** System Tools: Operator level experience with, Forcepoint UAM, Palantir, TAC, JWICS applications, analytical tools, Microsoft office, word, power point, access, excel or similar systems; experience on different systems may occur simultaneously.

5.1 Basic Services: The Contractor shall provide support for USAFRICOM InTP thru the daily or Adhoc tasks provided by the Insider Threat Hub. The specialist will leverage experience, training, and education to monitor, detect, and analyze potential threats to USAFRICOM personnel, information, systems, and facilities. The contractor shall follow all USAFRICOM policies, directives and procedures per US Africa Command Instruction (ACI).

5.2 Task Heading:

5.2.1 Improve Security Posture: Support efforts in carrying out and performing the tasks to improve the security of classified networks and the responsible sharing and safeguarding of classified information.

5.2.2 Aggregate Data: Gather, integrate, and analyze insider threat indicators as authorized from UAM, cybersecurity, LE, CI, PERSEC, HR, and other intelligence sources. Employ insider threat detection and correlation processes/tools in the conduct of analysis and assessments to develop a comprehensive picture of potential insider threats. Use a variety of databases (conducts database checks) pertaining to UAM, cybersecurity, LE, CI, PERSEC, HR, and other information to conduct research and analysis regarding employees whose behavior may potentially pose a risk. A weekly activity report of the above actions shall be submitted to the COR.

5.2.3 Recommend Improvements: Develop recommendations to improve overall functions, operations, and performance of the InT Hub to develop and refine the Hub’s standard operating procedures. Collaborate with the command security manager, InT chairperson, and senior official to prioritize and improve insider threat detection and indicator identification.

5.2.4 Inform the Hub: Brief products, assessments, and recommendations to Hub leadership and other entities as directed on a regular basis and in accordance with Hub…