Inactive Total Small Business Set-Aside (FAR 19.5)

We are requesting you provide the following in reference to the PWS: Any information that you are able to do the tasks. Any past performance, within the last 5 years, that you have done the tasks. PER... We are requesting you provide the following in reference to the PWS: Any information that you are able to do the tasks. Any past performance, within the last 5 years, that you have done the tasks. PERFORMANCE WORK STATEMENT (PWS) for 480th Intelligence, Surveillance and Reconnaissance Wing (480 ISRW) Distributed Common Ground System (DCGS) Command, Control, Communications, Computers, and Intelligence (C4I) Information Technology (IT) Missions Systems Services DRAFT: 1 April 2019 ? 1.0 INTRODUCTION AND BACKGROUND 1.1 The AF DCGS weapon system is the Air Force's primary Intelligence, Surveillance, and Reconnaissance (ISR) Processing, Exploitation, and Dissemination (PED) system. AF DCGS provides actionable, multi-discipline intelligence derived from multiple ISR platforms to Combatant Commands (COCOMs), Component Numbered Air Forces (C-NAF), and national command authorities across the globe 24 hours per day/seven (7) days per week. 1.2 Through distributed (reach back and deployed) and collaborative operations, active duty (AD), Air National Guard, Air Force Reserve Center, joint, and coalition units and personnel work as an integrated combat capability, enabling the Air Force to engage in multiple, simultaneous military operations across the globe. 2.0 TASK ORDER OBJECTIVE 2.1 This PWS describes the technical tasks along with the information assurance (IA) and information technology (IT) capabilities. 480 ISRW requires support for these various AF ISR missions. Primary locations are at Joint Base Langley-Eustis (JBLE), Virginia, and Beale Air Force Base (AFB), California. All work will be accomplished CONUS. 2.2 This is a non-personal services contract. The Government will neither supervise contractor employees nor control the method by which the contractor performs the required tasks. The contractor shall manage its employees and guard against any actions that are of the nature of personal services, or give the perception of personal services. The contractor shall notify the Contracting Officer (CO) immediately if they perceive any actions constitute personal services. These services shall not be used to perform any Inherently Governmental Functions. The services described support the Air Force (AF) Distributed Common Ground System (DCGS) Program. 3.0. REFERENCE. U.S. General Services Administration (GSA) One Acquisition Solution for Integrated Services (OASIS) or OASIS Small Business (SB) Indefinite Delivery Indefinite Quantity Contract Pool 1 through Pool 6 as applicable. 4.0 TASK REQUIREMENTS 4.1. C4I IT MISSIONS SYSTEMS SERVICES. 4.1.1. Configuration Management and Engineering Support 10 IS/SCX, JBLE, VA and 548 ISRG, Beale AFB, CA. The contractor shall, in coordination with Government, ensure daily systems integration, support, management, and control of all software, hardware, system, and network configurations associated with the enterprise. The contractor shall: • Provide systems integration management capabilities, planning, and implementation support to the 480 ISR WG and its subordinate active components in accordance with government directives. • Provide support to the Data Center Infrastructure Management (DCIM) process and the Data Center Manager (DCM) in accordance with processes outlined in 480 ISR Wing Supplement to Air Force Instruction (AFI) 17-101, Mission System Data Center Management. • Develop and maintain database documentation to identify, map, account, and record all network and information processing system components, devices, serial numbers, and hardware configurations to the level of data expressed by the local Data Center Manager and in accordance with government directives. • Monitor and ensure system drawings, consisting of the unclassified and classified information technology systems, accurately depict approved configuration. • Distribute, manage, track, and account for all software applications in accordance with licensing and maintenance agreements. (CDRL 001) • Coordinate collaborative activities with 480 ISRW and associated Distributed Ground Station (DGS). • Organize and support all configuration management activities, including but not limited to the following activities: configuration identification, IT equipment management, release management, change control, and configuration audits. Prior to implementation of stated activities, ensure changes are approved and processed to guarantee integrity. (CDRL 002) • Draft, edit, maintain and provide input to configuration management policies for hardware and software; support Government with developing requirements and project scope. (CDRL 003) • Participate in the Configuration Control Board (CCB) and the DCIM Local Data Center Change Advisory Board (LCAB) to include coordinating, scheduling, and facilitating meetings; provide draft agendas and/or meeting minutes for each. (CDRL 004) • Ensure systems are in compliance with established DoD and AF policies and directives. • Participate in operations assessment of existing and future facility requirements relating to impacts on network infrastructure and communications-computer systems. • Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. (CDRL 005) • Submit a Configuration Management Plan as requested by the Government. (CDRL 006) • Minimum Requirements: Shall be DoD 8570 certified, Information Assurance Technical (IAT) II. Shall have five (5) years' experience in maintaining hardware and software configurations, hardware accountability, software and hardware licensing, and maintenance agreement terminology. 4.1.2. C4I Systems Management for 27 IS/SCO, JBLE, VA. The contractor shall, in coordination with the Government, provide operations, maintenance, administration, and technical services for controlling and managing all servers, workstations, peripherals, and associated operating systems and software applications per organizational guidance. 4.1.2.1. Systems Server Administration and Support. The contractor shall maintain systems and applications associated with 27 IS/SCO Network and Communication architecture to include: Oracle/Solaris, Red Hat Linux, Trusted Solaris, and associated ISR applications including but not limited to Unified Collections Operations Reporting Network (UNICORN), Trusted Manager (TMAN), SecureView and Oracle ZFS Storage Appliances. In addition the contractor shall: • Provide Tier 2 support based on industry standards to clients for all system problems and anomalies. Resolve trouble tickets submitted via the electronic problem reports system. • Prepare systems (Windows and/or UNIX mission servers) for security accreditation. • Install, configure, and maintain Red Hat Linux and Solaris operating systems, to include Operating System (OS), application software patches, and service packs. • Perform user account, group, and directory maintenance for clients in coordination with 27 IS Network Security Manager and/or 480 ISR Wing Information System Security Officers (ISSO). Manage user and group policies and rights; conduct auditing for same. • Review security, network, and system auditing and remedy identified and/or reported anomalies in accordance with and within timelines defined in applicable regulations, guidelines, instructions and/or as directed by ISSOs or similar IT security entities (CDRL 007) • Draft, prepare and maintain local Standard Operating Procedures (SOP) and maintain system administrator guides. (CDRL 008) • Analyze and resolve problems associated with Windows and/or UNIX server hardware, operating systems, and applications software while adhering to mandated security requirements and guidelines. • Prepare, test, and implement scripts to simplify system tasks for local use. • Perform system backup and recovery utilizing network backup software. • Maintain SecureView server and workstations. • Support 27 IS Network Security Manager and/or 480 ISR Wing ISSO to identify and resolve security related server and application issues. • Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. (CDRL 005) • Work with military and Government personnel on training for and administration of systems server administration and support. • Minimum Requirements: Shall be DoD 8570 certified, Information Assurance Technical (IAT) II. Shall have five (5) years' experience in administering and managing networked UNIX (Solaris and Red Hat preferred) systems/servers/storage. Shall have three (3) years Microsoft Windows Server 2012 or most current version. 4.1.2.2 System Application Administration and Support 27 IS/SCO, JBLE, VA. The contractor shall, in coordination with the Government, maintain servers and applications to support the 480 ISRW ISR mission requirements and collect, archive and present metrics associated with 27 IS/SCO's operations and production activities. In addition, the Contractor shall: • Test, implement, administrate, troubleshoot, upgrade, and maintain operation of the 480 ISRW ISR virtualization software, Microsoft SQL Server, and Microsoft Windows Server operating systems on all networks, to include but not limited to Non-classified Internet Protocol (IP) Router Network (NIPRnet), Secret Internet Protocol Router Network (SIPRnet), and Langley campus-wide Joint Worldwide Intelligence Communications System (JWICS) at both local and remote locations. • Test, implement, administrate, troubleshoot, upgrade and maintain operation of web based applications utilizing Microsoft Internet Information Services (IIS) to include but not limited to UNICORN and Patriot Excalibur (PEX) on all networks at both local and remote locations. • Administrate, troubleshoot, upgrade, and maintain operations of Information Store (iSToRE) servers on two different networks. • Provide support to 480 ISRW integration activities to identify procedural changes and processes that would enhance the overall environment. • Coordinate with all Program Management Offices (PMOs) for ongoing updates and maintenance of the ISR websites. • Draft, edit, maintain and provide input to local SOPs and system administration guides. (CDRL 008) • Create, develop, upgrade, and maintain SharePoint sites utilizing various SharePoint capabilities such as designer, workflow, query, lists, and other functionality as required. • Maintain applications and Virtual Machines (VMs) in a Cloud Computing Services (C2S) Dev/Ops, Amazon Web Services (AWS) or like cloud environment. • Assist with troubleshooting computer systems supporting DCGS-Wide enterprise services and DCGS Operation Center (DOC) Network Management. • Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. (CDRL 005) • Work with military and Government personnel on training for and administration of system application administration and support. • Minimum Requirements: Shall be DoD 8570 certified, IAT II. Shall have five (5) years of experience administering/maintaining Microsoft Windows Server 2012 or most current version, VMware versions 5.x/6.x or most current version and a minimum of one year experience in at least one of the following: Microsoft SQL Server 2012/2014 or most current version, SharePoint 2012/2014 or most current version site maintainer or Microsoft IIS 7.x/8.x or most current version. 4.1.2.3. Client Systems Administration (CSA). The contractor shall, in coordination with the Government, maintain workstations and applications associated with 27 IS/SCO Network and Communication architectures to include Windows Workstations. CSA support shall be provided to facility-wide NIPRnet, SIPRnet, and Langley campus-wide JWICS and NSAnet infrastructures. In addition, the contractor shall: • Provide Tier 1 and Tier 2 support based on industry standards to support clients for all system problems and anomalies. Track, assign, troubleshoot, fix and/or close trouble tickets and new requirements submitted via applicable electronic requirements and problem reports systems. • Prepare member workstations for security accreditation. • Install, configure, test, and maintain Windows operating systems, to include System (OS), and application software patches and service packs on workstations and laptops. • Perform Tier 1 and Tier 2 user account, group, and home directory creation and maintenance for users, workstations, laptops, and member servers, in coordination with 27 IS Network Security Manager and/or 480 ISR Wing ISSO. • Issue new user accounts and certificates on SIPRnet and JWICs as a Trusted Agent (TA). Perform user account troubleshooting to include user Common Access Cards and SIPR Tokens. • Perform printer software configuration and maintenance. • Analyze and resolve problems associated with workstation and member server Hardware, operating systems, applications software, and 27 IS Network Security Manager and/or 480 ISR Wing ISSO identified security related issues while adhering to requirements and guidelines. • Prepare, test, and implement local scripts to simplify system tasks. • Perform local back-up and recovery procedures utilizing and managing media backup storage devices. • Evaluate and recommend improvements to the security configuration of member workstation computer systems by electronic and manual review methods. • Develop SOPs for the installation of new software applications and computer hardware. (CDRL 012) • Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. (CDRL 005) • Work with military and Government personnel on training for and administration of systems applicable to client systems administration. • Minimum Requirements: Shall be DoD 8570 certified, IAT II. Shall have five (5) years' experience in computer/hardware/software troubleshooting and help desk support. Shall have five (5) years hands-on work experience of relevant Microsoft Windows operating platforms. Shall have three (5) years hands-on work experience with relevant Microsoft Office Suite. Shall have three (5) years' experience in imaging workstations and laptops to the current standard desktop configurations (SDC). 4.1.3. Network Infrastructure Management for 27 IS/SCO, JBLE, VA. The contractor shall, in coordination with the Government, provide operations, maintenance, administration, and technical services for controlling and managing all network infrastructure services to include troubleshooting and testing networks, routers, switches, hubs, systems, and other related hardware components. In addition, the contractor shall: • Provide fault isolation and incident resolution support for networks and intelligence analysts (IA) Suites using Government-provided network analysis tools and applications (e.g. SolarWinds, CISCO Works). • Provide technical support in the configuration, optimization, troubleshooting, and software maintenance of IA Suites (firewalls, IDS), routers, switches, servers, workstations, overall network, and long haul communication circuit support. • Provide test and evaluation support for new technology. Prepare reports detailing the results of the test and evaluation including specific recommendations. (CDRL 009) • Provide detailed documentation on all tasked actions that affect the operation of the system environment, to include but not limited to: system trouble calls handled, configuration changes, and new products or solutions. (CDRL 010) • Provide engineer network solutions in an Internet Protocol (IP) and Gigabyte Ethernet (GIG-E) Local Area Network (LAN)/Wide Area Network (WAN) environment. • Design, document, and provide tech-solutions to customers for classified networks. (CDRL 011) • Work with vendors and other military organizations to design possible solutions for classified networks. • Provide timelines and cost estimates for the new installation of local and remote networks to accommodate voice, video, and data. • Configure, troubleshoot, and maintain Voice over Internet Protocol (VoIP) phones and Video Teleconferencing (VTC) equipment. Create Virtual Local Area Networks (VLANs), Configure Quality of Service (QOS), and port-security in a voice network infrastructure. Video traffic shall be separated from other types of data to ensure high quality of service to video customers. • Create network infrastructure to support real-time (RT) and near real-time (NRT) high bandwidth video feeds. • Administer and manage Microsoft Windows Server Dynamic Host Configuration Protocol (DHCP) scopes, General Dynamics Encryption Manager (GEM-X), SolarWinds, Cisco Works, Cisco Access Control Server (ACS) Identity Services Engine (ISE) and similar technologies. • Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. (CDRL 005) • Work with military and Government personnel on training for and administration of network infrastructure management. • Minimum Requirements: Shall be DoD 8570 certified, IAT II. Shall have five (5) years' experience with configuration and management of Cisco Routers and Switches, Marconi/Ericsson Asynchronous Transfer Mode (ATM) devices, Juniper WAN Accelerators, FASTLANE (FAST Local Area Network Encryption) and Tactical Local Area Network Encryption (TACLANE) devices. Shall have five (5) years' experience administering IP protocol network to include VoIP, VTC, and fiber optic technologies. 5.0 Contract Data Requirements Lists (CDRL) and Other Deliverables. 5.1 The Contractor shall provide task order deliverable(s) in a format mutually agreed upon by the Government and the Contractor. The ACC AMIC Advisory and Assistance Services Division (AMIC/PKA) does not require copies of listed deliverables. All deliverables will be reviewed for timeliness, accuracy and format. If a deliverable due date falls on a weekend or holiday, the Contractor shall submit the deliverable on the last work day prior to the due date. See Table 1 for CDRL and Deliverable examples. Table 1 - CDRL and Deliverables Data Item Number Data Item Description PWS Paragraph Delivery Schedule 001 Distribute, manage, track, and account for all software applications in accordance with licensing and maintenance agreements 4.1.1 Monthly 002 Ensure configuration changes are approved and processed to guarantee integrity 4.1.1 Within 30 Days 003 Provide input to configuration management policies for hardware and software; support Government with developing requirements and project scope 4.1.1 As required and within 10 days of request. 004 Provide draft agendas and/or meeting minutes 4.1.1 Two days before meeting and within 5 days of meeting completion 005 Attend meetings, on-site conferences, teleconferences and briefings as requested by Government. Provide meeting minutes or reports. 4.1.1, 4.1.2.1, 4.1.2.2, 4.1.2.3, 4.1.3 Within 5 days if requested or upon request 006 Submit a Configuration Management Plan 4.1.1 Within 14 days of PoP start and update quarterly. 007 Review security, network, and system auditing and remedy identified anomalies. 4.1.2.1 When identified and within 30 days after solution is reached. 008 Draft, prepare and maintain local Standard Operating Procedures (SOP) and maintain system administrator guides. 4.1.2.1, 4.1.2.2 When an SOP is required and within 10 days of request. 009 Prepare reports detailing the results of the test and evaluation 4.1.3 Within 3 working days, if requested 010 Provide detailed documentation on all tasked actions 4.1.3 Upon request or by the end of the work week (annotated within appropriate document, format, and/or trouble ticket) 011 Design, document, and provide tech-solutions to customers for classified networks 4.1.3 Upon request and by agreed upon completion date of customer 012 Schedule and attend PMRs at times mutually agreed upon with the Government. 4.1.2 Semi-annually or as requested by Government 013 Organizational Conflict of Interest (OCI) Mitigation Plan 5.1.1 Within 30 calendar days of award 014 Hiring Status Report (HSR)/Personnel Roster 5.1.2 1st Friday after award then every Friday until all positions are filled, or as requested by the CO 015 Monthly Status Report 5.1.3 First work day after the 10th of each month 016 Trip reports shall be submitted at the TO level for all trips for approval by the CO and COR. 5.1.4 within 5 working days of trip return, when tasked 017 Quality Control Plan (QCP) 5.1.5 Within 30 calendar days of award 5.1.1 Organizational Conflict of Interest (OCI) Mitigation Plan. The Contractor shall provide a plan that describes the processes and procedures they will implement to avoid or mitigate any actual or perceived OCI. The plan shall outline how the Contractor evaluates, mitigates (where necessary), and reevaluates any potential or perceived conflicts between this TO and other work performed by the Contractor or team members. (CDRL 013) 5.1.2 Hiring Status Report (HSR)/Personnel Roster. The Contractor shall provide an HSR every Friday, starting with the first Friday after contract award, until all positions are filled, or as requested by the Ordering Contracting Officer (OCO). The HSR shall contain, as a minimum, the name, security clearance and adjudication date, for each new hire. The Contractor shall provide a Hiring Status Report (HSR) until all positions are filled. The last HSR provided shall also contain the number of incumbent offers and acceptances. After TO start the HSR will become the Personnel Roster. (CDRL 014) 5.1.2.1 Personnel Roster: The contractor shall maintain a current listing of employees. The list shall include the employee's name and level of security clearance. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the Sponsoring Agency's Security Manager. An updated listing shall be provided when an employee's status or information changes. Note: the government may require a contractor's DoD Electronic Data Interchange (EDI) number or social security number for some transactions, i.e., verifying clearances in JPAS, processing visitor requests, etc. 5.1.2.2 Notice of Impending Hire. For SCI positions, the Contractor shall deliver an electronic notice of impending hire once the decision is made to select an individual to fill an open position. Notice shall be sent to OCO/CM to be forwarded to the cognizant requirement owner and security office. The notice will have the following attached: - Selectee's qualification summary for review by the COR to ensure compliance with the PWS 5.1.2.3 The contractor shall utilize encrypted email or password protected files protect Personally Identifiable Information (PII) in accordance with the Privacy Act Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations. 5.1.3 Monthly Status Report. The contractor shall provide status reports for the duration of the effort. The report shall summarize accomplishments during the reporting period. The report shall also include planned versus actual task completion, anticipated activity (including anticipated Contract Data Requirements List (CDRL) deliveries) for the next reporting period, lessons learned, risks, significant accomplishments, training completed, certifications or security clearances expiring, pending or lapsed and mitigation plan, and outstanding issues and recommendations. (CDRL 015) 5.1.4 Trip Report. Following official travel, the contractor shall prepare a trip report detailing the purpose of the trip, the individuals contacted, any agreements that were reached during the trip or any other significant issues that were identified during the travel. The contractor shall provide this trip report to the COR within five (5) days after the completion of travel. (CDRL 016) 5.1.5 Quality Control Plan (QCP). The Contractor shall develop a Quality Control Plan (QCP) that demonstrates how the Contractor shall maintain an inspection system acceptable to the Government, covering the services for this requirement. The QCP shall demonstrate the Contractor's documented processes and procedures to monitor and control the objectives in the Services Summary, Internal Staffing, Subcontractor relationships (if applicable), Contractor and subcontractor invoicing, and Government issued non-conformances. The QCP shall be submitted to the Ordering Contracting Officer (OCO) for acceptance no later than 30 calendar days after award. Updated versions of the QCP shall be submitted to the OCO for acceptance no later than 10 calendar days of implementation by the Contractor. Below is what it should include as a minimum. (CDRL 017) 1. Introduction/Purpose 2. Management Structure 3. Contractor Key Personnel/Roles & Responsibilities 4. Process and Procedures for the Performance Objectives in the Services Summary 5. Internal Staffing procedures 6. Subcontractor Relationships (if applicable) 7. Contractor and Subcontractor invoicing 8. Government issued Minor and Major Non-Conformance 9. Deliverables 10. Summary 5.1.7 PROGRAM MANAGEMENT. 5.1.7.1. General Requirements. The contractor shall identify a Program Manager. This PM shall be the primary representative responsible for the successful completion of all work awarded under this contract. The PM shall participate in all Program Management Reviews. 5.1.7.1.1. The contractor shall provide qualified and fully trained personnel to perform the required services from contract start until completion. 5.1.7.2 The contractor shall notify the Contracting Officer (CO) of all direction received from Government personnel they consider to be outside the scope of PWS requirements prior to performing the work. 5.1.7.2. Program Management Review (PMR). The contractor shall schedule and attend PMRs at times mutually agreed upon with the Government. The CO, Contracting Officer's Representative (COR), and other Government personnel, as appropriate, shall meet periodically with the contractor to review performance. PMRs shall be held at least semi-annually; however, the Government reserves the right to conduct PMRs more frequently as needed. The Government and the contractor shall develop an agenda in advance of the PMR as directed by the Government, either in-person or electronically, which shall include, at a minimum, status, and feedback on performance standards, overall contract performance, and all other significant events. The contractor shall document the meeting and provide the minutes to the CO and COR. (CDRL 012) 6.0 GOVERNMENT FURNISHED PROPERTY / DATA. 6.1 Government Furnished Equipment (GFE). The Government shall provide office space, office supplies, computer equipment, computer software, and access to military Local Area Network (LAN) services (unclassified and classified) e-mail and internet access and other standard office equipment necessary to support the Contractor. The contractor may not be the sole user of furnished computer equipment; therefore, coordination with other contractors and administrators may be necessary. The Government will furnish appropriate User Identification and passwords for shared resources. The contractor will be provided access to Government electronics, such as unclassified, collateral, and Sensitive Compartmentalized Information (SCI) e-mail and fax machines, in support of this requirement. 6.2 Government Provided Data. The Government will provide access to relevant Government organizations, information and documentation, manuals, texts, briefs, and associated materials as required and available relative to assigned contract responsibilities. Access will be granted to classified networks as needed and in accordance with applicable governing security directives. 7.0 DATA. The Government has unlimited rights to all deliverables of this task order to include intellectual property rights. 8.0 OTHER DIRECT COSTS (ODC). 8.1 Travel. Travel shall be required to travel CONUS only. All travel performed by the contractor during this effort shall comply with FAR 31.205-46 and provisions of the current Joint Travel Regulations (JTR). Wherever possible, contractor shall have identical travel and lodging arrangements as Government travelers. When Government and contractor travel is coincident (same dates, same destinations, same travel objective), Government personnel will obtain rental car and miscellaneous supplies, when arrangements are the same. All travel shall be coordinated and pre-approved by the COR in writing. Costs for travel shall be billed on a strictly cost reimbursable basis IAW the terms and conditions of this contract. Trip reports shall be submitted at the TO level for all trips for approval by the CO and COR. (CDRL 013) 9.0 SECURITY. The Contractor and all Contractor personnel shall abide by all AF and local rules, procedures and standards of conduct. A Department of Defense Contract Security Classification Specification (DD Fm 254) is required for access to classified material. The Contractor shall also perform in accordance with the Compliance with National Industrial Security Program Operating Manual (NISPOM--DoD 5220.22M). 9.1 Visitor Group Security Agreement (VGSA). The contractor shall enter into a long term VGSA with the host base Information Protection Office if contract performance is on base for 90 days or more. This agreement shall outline how the contractor integrates security requirements for contract operations with the Air Force to ensure effective and economical operation on the installation. The agreement should address: 9.1.1 Security support provided by the Air Force to the contractor to include storage containers for classified information/material, use of base destruction facilities, classified reproduction facilities, use of base classified mail services, security badging, base visitor control, investigation of security incidents, base traffic regulations, the use of security forms, and conducting inspections required by DoD 5220.22-R, Industrial Security Regulation, and Air Force Instruction 16-1406, Air Force Industrial Security Program. 9.1.2 Security support requiring joint Air Force and contractor coordination includes packaging classified information, mailing and receiving classified materials, implementing emergency procedures for protection of classified information, security checks, and internal security controls for protection of classified material and high value pilferable property. 9.1.3 On base, the long term visitor group security agreement may take the place of a Standard Practice Procedure (SPP). 9.2 Security Clearances. All personnel performing on this PWS shall be U.S. Citizen and shall have final US Government issued Top Secret/ Sensitive Compartmentalized Information (TS/SCI) security clearance with a current National Agency Check (NAC). The contractor shall follow the security requirements outlined in the contract DD Form 254, Department of Defense (DoD) Security Classification Specifications. The contractor shall be subject to random drug testing. If work identified at the TO level requires access to NSA systems, the contractor may be required to take a Counter Intelligence (CI) polygraph test. The contractor shall comply with agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive-12 (HSPD- 12), Office of Management and Budget (OMB) Memorandum M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number 201. The contractor shall comply with Operations Security requirements contained in AFI 10-701 and local supplements to AFI 10-701, to include all current Critical Information (CI) listings. 9.2.1 Clearance Requirement. If access to classified information is a requirement at the Contractor's facility, a SF 312 Non-Disclosure Agreement (NDA) initiated by the company's Facility Security Officer (FSO) is required. The Contractor must possess or obtain a facil...