0804-01 - Alarm Support - SOW Rev1_Redacted.pdf

3.2 The Contractor shall provide preventive, corrective and emergency service to maintain the security system of the Command.

3.3 The Contractor shall perform maintenance and repair actions on the following Lenel ACS and IDS equipment:

• Lenel Server Software (2 each)

• LenelWork Station Software (1 each)

• Electronic Magnetic Locks (37 each)

• Electronic Door Strikes-EOB’s (60 each)

• Electronic Lock Power Supplies (86 each)

• Main Board Control Cabinets (Tamper Switch Alarmed) (11 each)

• Field Control Cabinets (Tamper Switch Alarmed) (52 each)

• REX PIRs-Output Modules (88 each)

• IDS Device Power Supplies (35 each)

• Turnstiles (3 each)

• Keyed Arming Switches (15 each)

• Reader Modules-Input Modules (80 each)

• Door Release Buttons (8 each)

• Batteries (110 each)

• Door Contacts (110 each)

• HID Piv Class SE RPK40 Reader (110 each)

• Communication Modems (4 each)

• Balanced Magnetic Switches (110 each)

• Arming Keypads-IDS Panels (60 each)

• Transducers (20 each)

• Motion Detectors (60 each)

• Indoor Network AI IR Dome, 2.812MM Motorized VF Lens 2MP, (XND-6083RV) (2 each)

• Wave, 1X IP Camera (WAVE-PRO-01) (9 each)

• KBC Networks ESMGS16-P2-RA 16 Gigabit PoE +Gigabit SFP, (M5-MGS16P2RA) (1 each)

• Wave Recording Server (WRT-P-3102W-16TB) (1 each)

• Network PTRZ Dome Camera Multi-Sensor Multi-Directional 4 Senso, (PNM-

9085RQZ1) (3 each)

• 7 Screen w/Touch Button, Hands-Free 1x1 Color VID Set, JO-1MD/JO-DV/PS-1820UL

(1 each)

• 42.5” Monitor, Multi-PC connectivity, (210-BFPO) (2 each)

• Wave Client, (WWT-P-3202W) (2 each)

• PLT SG SS SWT Red GR Led WP CV (AC-MCK62WP) (1 each)

• 2MP Outdoor Vandal Dome, H.265, 2.8mm, SMG-XNV6011 (5 each)

• 2U Wave PoE NVR 8TB Raw, HAN-WRN1610S 8TB (1 each)

• Wave Client, (WWT-P-7201MW) (1 each)

3.4 The Contractor shall provide semi-annual testing of the system in within the period of performance which consists of Semi-Annual IDS and ACS System inspections and testing.

3.5 The Contractor shall provide security software updates that allow the command to be current with all software revisions and advancements as they are made available by manufacturers.

NOTE: Software upgrades typically occur annually, however many times releases occur several times throughout a given calendar year.

3.5.1 The Contractor shall include Lenel Software for Dongles 49338 and 26706.

3.6 The Contractor shall perform a configuration audit to inventory hardware, software, drawings and technical documentation as a function of configuration management in parallel with preventive maintenance.

3.6.1 The Contractor shall review and validate technical drawings as part of the Configuration Audit.

3.7 The Contractor shall validate and maintain an inventory of all system software, license information, versions, system and security patches.

3.8 The Contractor shall provide a means for the Government to place trouble calls with a representative via email or phone number and shall not exceed fifty (50) calls annually.

3.8.1 Trouble calls requiring emergency service, involving conditions which may adversely impact health/safety, security, productivity, or cause greater physical damage if left uncorrected, shall be responded to within four (4) hours of trouble call.

3.8.2 Trouble calls requiring routine service shall be responded to within four (4) hours of trouble call during normal working hours which are Monday through Friday between the hours of 0700 and 1600. Requests for routine service received outside normal working hours shall be responded to the next normal business day.

3.9 The Contractor shall provide troubleshooting, maintenance, repair or replacement on all parts defined above of the Command’s LENEL OnGuard intrusion detection, access control, perimeter and early warning systems, turnstile operation and the associated power and communications infrastructure.

3.10 The Contractor shall provide on-site support that will not exceed fifteen (15) requests annually. On-site support covers those activities not considered life cycle support or maintenance. Replacement of the hardware associated with an access point and other hardware are specified within paragraph 3.3.

NOTE: Hardware can be purchased external of the contract and the Vendor uses locally sourced equipment. The determination is made when an assessment of why the hardware needs to be replaced is made.

3.11 The Contractor shall coordinate all work through the onsite Security Officer.

3.12 The Contractor shall utilize and adhere to approved/established electrical tag-out procedures, as required.

3.13 The Contractor shall properly dispose of all trash and debris in designated containers.

3.14 The Contractor shall forward visit requests to the Security Office via email or phone. The Security Office handles all security clearance badges for visitors into secure spaces. Access to spaces will be necessary to accomplish above tasking.

3.15 The Contractor shall notify the onsite government representative within forty-eight (48) hours in advance of any routine work to be performed that may produce excessive noise, excessive dust, possible irritating/harmful/strong acrid odor or hazardous fumes/vapors.

3.16 The Contractor shall post adequate/visible signs of hazardous materials and have on hand copies of all required Material Data Safety Sheets (MSDS) for all work that requires the use of hazardous materials.

3.17 The Contractor shall coordinate all work with the technical point of contacts (TPOCs) identified below.

4.0 DELIVERABLES

4.1 The Contractor shall provide data IAW CDRL A001.

4.2 The Contractor shall provide data IAW CDRL A002.

5.0 TEST AND ACCEPTANCE

5.1 Test and acceptance for corrective/remedial maintenance shall be the completeness of the work order.

5.2 Test and acceptance for emergency maintenance shall be the completeness of the work order.

5.3 Test and acceptance for preventive maintenance shall be the accuracy and completeness of the Preventive Maintenance Plan which follows:

Action Frequency Remarks

Test Security Sensors Annually Notify the TPOC before any sensor tests are performed

Physically Inspect and Clean Devices

Annually Check perimeter doors for corrosion to wiring or access control/alarm equipment

Test Alarm System Annually

Test the connection to the Regional Dispatch Center

Check for Software Updates Annually Access control software updates required to communicate with field devices and Regional Dispatch Center

Action Frequency Remarks Check and replace back up batteries

Annually Maintain inventory of batteries for this purpose

Check bearings in turnstiles for proper lubrication, performance and alignment

Annually Notify the TPOC if any part of the mechanism requires replacement

5.4 Test and acceptance for configuration audits shall be the accuracy and completeness of data deliverables and installed equipment audits.

5.5 Test and acceptance for on-site support shall be quality of install work, operational test, and government satisfaction.

6.0 SECURITY

6.1 The Contractor shall possess and maintain a SECRET Facility Clearance as verified within the National Industrial Security System (NISS). No safeguarding of classified material is required at the

Contractor facility. All work performed under this effort shall be unclassified but may include Controlled Unclassified Information (CUI) requiring protection per DoD 5200.48.

6.2 Contractor personnel involved in the performance of this task are required to be U.S.

Citizens and possess a SECRET clearance in order to work unescorted in classified spaces.

6.3 Refer to DD 254 for specific security requirements.

6.4 Electronic Spillages: Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc). The Contractor's performance as it relates to ES will be evaluated by the Government. ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor. NSWCDD Security will be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254. NSWCDD Security will identify the Contractor facility and contract number associated with all electronic spillages that involve the Contractor. NSWCDD Security will notify the Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean-up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up.

The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

6.5 Portable Electronic Devices (PEDs): Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes. Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non- Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use PersonalWearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker. Personnel requiring the use of Medical Portable Electronic

Devices (MPEDS) must submit Form NSWCDD 5239/1 for SCIF authorization to the SCIF authorizations to the Special Security Officer (SSO). For SAFF, authorizations follow the guidance provided by the Government Special Access Program Security Officer (GSSO).

Authorizations for use in SAPFs that are co-utilized within NSWCDD SCIFS require coordination between both the GSSO and SSO. For authorizations to use MPED in Collateral Classified spaces, submit form to the Special Programs Branch, Code 1053. PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch. This approval will be granted using the TARIS form and action tracker process. Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.”

6.6 Navy-issued peripheral: Government procured headsets with or without microphones must be wired, use either a 3.5 millimeter (mm) audio jack or universal serial bus (USB) port, cannot contain active-noise cancelling functionality and may be used on systems and may be used on systems of classification up to and including collateral Top Secret. The headsets are considered unclassified when unplugged, and must be unplugged when not in use within classified spaces or when classified discussions are taking place in unclassified spaces.

6.7 Government procured Bluetooth earbuds and headsets that do not require a USB dongle or any other physical connection to enable wireless connectivity are allowed for use on government issued tablets, phones, and personal devices in telework environments or unclassified general office space where no classified discussion are occurring. Web cameras may only be used on systems at the classification level of the space. For example, in a collateral