1CD Access Control Point PWS vs2.1.docx

PERFORMANCE WORK STATEMENT (PWS)

Maintenance of Electronic Security System Fort Hood 1st Cavalry Headquarters (HQ) and Command Operation Facility Killeen, Texas

Part 1 General Information

1. General: This is a non-personal service(s) contract under which the personnel rendering the service(s) are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

1.1 Description of Services/Introduction: This is a non-personal service(s) contract to provide maintenance service to include and upgrades of Electronic Security Systems (ESS) and related security systems for the Fort Hood 1st Cavalry Headquarters and Command Operation Facility and maintenance support warrenty. The ESS consists of Commercial Off-The-Shelf (COTS) EECS, CCTV Cameras, backup power systems, and other security related systems.

1.2 Background: The Headquarters and Command Operations Facility is a three-story, 135,800 gross square foot with an existing open courtyard area, a roof-mounted antenna platform, parking area for tactical vehicle, loading and service areas. The ESS consists of an Electronic Entry Control System (EECS) that is a stand-alone local system, an Intrusion Detection System (IDS) that is fully compatible with and seamlessly integrated into the post wide Integrated Commercial Intrusion Detection System (ICIDS) II, system, and a Closed Restricted Network (CRN) Closed Circuit Television (CCTV) assessment system shall integrate with the EECS. The facility consists of three broad categories of space – administrative, operational, and building support. The building is organized around three (3) security zones based on the relative sensitivity of the operational activities performed within each zone.

The Command Group, Protocol, PAO, G4, G8, G1, Legal SHARP, IG, EO, Chaplain, Safety, Surgeon, Commandant, Honor Guard, Message Center/Distribution Room, Security Office and PR are located within Security Zone 1.

The retention office, G3 AVN, G3 Schools/FID/KMO, G# FUOPS, G5 with ORSA and Red Team, PMO, Protection, DIV Eng, AMD, FIRES, G6, G7, G9, and CBRNE, Team Rooms, Command Briefing Room, Open/Conference Rooms, Language and the Distributed/Compute-Based Training room are located with Security Zone 2.

The G2 Secure Areas and the Operational Center are located within Zone 3. The newly renovated facility includes infrastructure placement, power and empty conduit for communication, to include door elevations for the ESS.

1.3 Scope: The Contractor shall provide non-personal service(s). The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to perform services as described in the PWS and associated contract documents, except for those items specified in Part 3 Government Property and Services. The Contractor shall perform to the standards and acceptable quality levels identified in this PWS and associated contract documents.

1.3.1 Contractor shall provide ongoing maintenance support and upgrades to ESS as described within this PWS.

1.4 Objectives: Reserved

1.5 General Information:

1.5.1 Quality Control Plan (QCP): The Contractor shall develop and maintain a QCP to ensure services are performed in accordance with (IAW) this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor's QCP is the means by which it assures that the work provided complies with the requirements of the contract.

The Contractor’s Proposed QCP shall be submitted to the Contracting Officer (KO) through the Contracting Officer’s Representative (COR) for review within 20 business days after date of contract award

The Government will review and either notify the Contractor in writing of acceptance of the plan or return their comments to the Contractor within 20 business days. If the Government has provided comments, the Contractor shall then have 10 business days to submit a Final QCP. After receipt of the Final QCP, the Contractor may receive the Contracting Officer’s acceptance in writing. Any proposed changes to the accepted QCP are required to be resubmitted for acceptance by the Contracting Officer no later than 10 business days prior to the anticipated change and before implementation by the Contractor. The timeline noted above will apply for review and acceptance for proposed changes. At a minimum, the QCP must include and answer the following to be acceptable:

(a) A chart showing the organizational structure and lines of authority, the names, qualifications, duties, responsibilities, and classification of each member of the Contractor's Quality Control Team;

(b) How the Contractor will monitor work to ensure performance complies with all deliverables (etc. timelines, deadlines, and goals);

(c) How the Contractor will monitor work to ensure performance complies with all specifications and requirements of the contract, including the contract’s clauses;

(d) How the Contractor will monitor and ensure staff qualifications remain current and valid including Department of Defense (DoD) Contractor Personnel Office (DOCPER) processes/approvals throughout contract performance;

(e) How the Contractor will identify, investigate, and correct any non-conforming performance and prevent similar deficiencies in the future.

1.5.1.1 The Contractor shall inform the COR of issues or potential issues that might affect the performance within 5 business days of identifying those issues. Verbal reports shall be followed up by written reports within 5 business days.

1.5.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the acceptable quality levels (performance thresholds).

1.5.3 Recognized Holidays: The following provides information on recognized holidays for the purpose of the PWS. If submittal of any documentation (e.g. deliverables, submittals, etc.) deadlines fall on a holiday, the closest work day prior to the holiday will apply as the deadline for submittal.

1.5.3.1 U.S. Holidays: Work shall not be performed on U.S. federally recognized holidays occurring during the normal workweek unless otherwise directed by the Contracting Officer. When a U.S. holiday occurs on a Saturday or a Sunday, the holiday is observed on the preceding Friday or following Monday, respectively.

Juneteenth June 19th Independence Day July 4th Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

1.5.2 Operating Hours: Normal business hours are 07:00 AM to 4:00 PM. Any work outside these hours shall be coordinated with the contracting officer through the COR, with the exception of on-call maintenance.

1.5.6 Place of Performance: The work to be performed under this contract will be performed at Fort Hood, TX.

1.6 Security Requirements: The following information is provided on security related matters.

1.6.1 AT Level I: All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, and controlled-access areas shall complete AT Level I awareness training within 10 business days after the contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 10 business days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: http://jko.jten.mil

1.6.2 Installation Access: Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.2.1 Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

1.6.3.1 IWATCH Training: The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 10 business days of contract award and within 10 business days of new employees commencing performance with the results reported to the COR NLT 30 business days after contract award.

1.6.3.2 Individual Termination or Expiration of Employment: The Contractor shall collect the installation access passes the same day employment of an individual has expired or has been terminated and shall return them to the issuing office within 10 business days.

1.6.3.3 Contract Termination or Cancellation: Upon termination or cancellation of this contract, the Contractor shall collect all outstanding installation access passes and return them to the issuing office within 10 business days.

1.6.3.4 Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems: All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.6.3.5 OPSEC: The contractor shall follow 1CD Special Security Office (SSO) SOP for OPSEC. This SOP will be provided upon award.

Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 10 business days of their reporting for duty and annually thereafter.

1.6.3.6 Information Awareness (IA)/Information Technology (IT) Training:

All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions.

Per DoD 8570.01-M , DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.3.7 Threat Awareness Reporting Program: For all contractors with security clearances. Per AR 381-12 Threat Awareness and Reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trainer as specified in 2-4b.

1.7 Post Award Conference/Periodic Progress Meetings: The Contractor shall attend any post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The Contracting Officer, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the Contracting Officer will apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.7.1 The Contractor shall attend, participate in, and furnish input to scheduled and unscheduled meetings, conferences, and briefings that relate to the functions and services herein as required by the Government to provide effective communication and impart necessary information. The Contract Manager or designated representative shall attend meetings as requested by the Government. Meeting attendees shall at times include Contractor managerial, supervisory, and other personnel knowledgeable of the subject matter. Meetings may start or end outside of regular duty hours.

1.8 Identification of Contractor Employees: All Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties must identify themselves, to include proper marking of signature blocks in correspondence, to avoid creating an impression in the minds of members of the public that they are Government officials. The Contractor shall ensure that all documents or reports, produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.15 Data Rights: The Government has unlimited rights to all documents and materials produced under this contract. All documents and materials, to include the source codes of software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership and copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. The contractor shall assert data rights to propertary data and interfaces (hardware and software) IAW DFAR 252.

1.16 Protection of Government and Contract Information: Per Public Use Notice of Limitations stated by Defense imagery Management operations Center and contained at www.dimoc.mil/resources/limitations/ , the Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any hard copy or digital marketing tools to include its company website.

PART 2

DEFINITIONS & ACRONYMS

2. Definitions and Acronyms

2.1 Definitions: Although not inclusive of every term used within this PWS, the following provides a list of definitions used throughout this PWS and commonly used in the acquisition field.

Contracting Officer – means a person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Contracting Officer's Representative (COR) – As defined in DFARS 202.101, means an individual designated and authorized in writing by the Contracting Officer to perform specific technical or administrative functions. DoD Instruction (DoDI) 5000.72, Part II Definitions states the following when defining a COR: “Defined in subpart 202.101 of Reference (f). Any individual delegated responsibilities pursuant to subpart 1.602-2 of Reference (e), regardless of local terminology, must be certified in accordance with this instruction. For example, local terminology can be COR, Contracting Officer’s technical representative, technical point of contact, technical representative, alternate COR, administrative COR, assistant COR, line item manager, task order manager, quality assurance personnel, quality assurance evaluator, or COR management.” In addition, Army Regulation 70-13, Chapter 2, paragraph 2-2g, states, in part, the following when providing other surveillance support personnel to assist the COR when needed, “…These other surveillance support personnel may serve as on-site representatives of the COR in performance of actual contract surveillance if they meet all COR requirements and have been appointed by the Contracting Officer as alternate CORs.”

Contractor – means a supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Defective Service – means a service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable – means anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Government Property - means all property owned or leased by the Government.Government property includes both Government-furnishedand Contractor-acquired property. Government property includes material, equipment, special tooling, special test equipment, and real property. Government property does not include intellectual property and software.

Physical Security – means that part of security concerned with physical measures designed to safeguard personnel; to prevent unauthorized access to equipment, installations, material, and documents; and to safeguard against espionage, sabotage, damage, and theft.

Quality Assurance – (or Government contract quality assurance) means the various functions, including, inspection, performed by the Government to determine whether a Contractor has fulfilled the contract obligations pertaining to quality and quantity.

Quality Assurance Surveillance Plan (QASP) – means the key Government-developed surveillance process document, and is applied to Performance-Based Service Contracting (PBSC). The QASP is used for managing Contractor performance assessment by ensuring that systematic quality assurance methods validate that Contractor quality control efforts are timely, effective, and are delivering the results specified in the contract or task order. The QASP directly corresponds to the performance objectives and standards (i.e., quality, quantity, timeliness) specified in the Performance Work Statement (PWS). It provides specific details on how the Government will survey, observe, test, sample, evaluate, and document Contractor performance results to determine if the Contractor has met the required standards for each objective in the PWS. The QASP, with very few if any exceptions, is an internal to Government document.

Quality Control – means all necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.2 Acronyms: Although not inclusive of every term used within this PWS, or that may be included in an acquisition, the following provides a list of acronyms commonly used in the acquisition field.

USAG United States Army Garrison

UOM Unit of Measure

PART 3

GOVERNMENT PROPERTY (GP) AND SERVICES

3. Government Property and Services

3.1 Services: The Government will provide escorts for contracted personnel.

3.2 Facilities: The Government will provide access to the necessary facilities.

3.3 Utilities: Reserved

3.4 Equipment: The Government will provide access to the necessary information systems.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. Contractor Furnished Property and Services

4.1 General: The Contractor shall provide the necessary equipment and personnel required that are not listed under Part 3 of this PWS.

4.2 Secret Security Clearance: Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); (2) any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.The Contractor’s employees, performing work in support of this contract shall have been granted a Secret from the Defense Industrial Security Clearance Office. Contractor personnel who will be accessing the Secret Compartmentalized Information Facility (SCIF) are the only people that shall require a secret clearance. The DoD Contract Security Classification Specification (DD 254) is provided as an attachment in the basic contract.

PART 5

SPECIFIC TASKS

5.1 Basic Services: The Contractor shall provide services to provide software updates to the existing ESS system.

The contractor shall deliver and install additional card readers IAW attachment 1 Layout plan.

Final equipment locations / placement for each piece of equipment shall be approved by the Government prior to commencement of any work (Examples include but are not limited to:

camera placement (height and angle), cable runs, equipment enclosures, etc).

5.1.1 Maintenance Support: The Contractor shall provide all the necessary software lifecycle updates and patches. The Contractor shall respond within 24 hours after receiving a request and the ESS shall be restored to proper operating condition within the same 24 hours. If the warranty call requires new parts or component replacement, then the time shall be extended to 72 hours.

5.1.1.1 Software Interoperability: The software used by the contractor shall be interoperable with the Lenel software system. The software must be able to communicate with Lenel in order to communicate with other agencies on the installation.

5.2 Tasks: Tasks consist of the following:

5.2.1 Performance Verification Test (PVT): Contractor shall schedule a PVT.

Contractor shall notify the COR, in writing, at least five (5) business days in advance of Contractor’s intent to perform the PVT.

5.2.2 Training. Contractor shall perform Operator’s Training II, System Manager Training, and Maintenance Personnel Training with the following requierments:

a. A maximum of 5 personnel shall attend the Operator’s Training and System Manager Training. A maximum of 3 personnel shall attend the Maintenance Personnel Training.

b. All training shall be coordinated with the COR.

c. Operator’s Training II shall include database entry, alarm reporting and monitoring, reports generation, and diagnostics.

d. Maintenance training shall include the following:

(1) Physical layout of each piece of hardware.

(2) Troubleshooting and diagnostics procedures.

(3) Component repair and/or replacement procedures.

(4) Calibration procedures

(5) Maintenance procedures and schedules to include system testing after repair.

e. The Contractor shall provide a copy of the written training roster after all of the training listed within 5.2.2 is complete.

5.2.3 Cybersecurity Requirements: The contractor shall ensure that the software updates score no higher than 3.49 on the Common Vulnerability Scoring System (CVSS) in DoDI 8531.01 in order to operate on the network. The contractor shall ensure that future system updates are updated IAW CVSS network scoring requirements in DoDI 8531.01. The contractor shall coordinate with the COR to stay up to date on updated network requirements.

5.2.4 Warranty: The Contractor shall provide their Industry standard warranty over the course of 5 years starting from the award of this contract.

PART 6

APPLICABLE PUBLICATIONS

6. Applicable Publications (Current Editions): The following publications, manuals, regulations, etc. are mentioned in this PWS and are listed below.

PART 7

ATTACHMENT AND TECHNICAL EXHIBIT LISTING

7. Attachment and Technical Exhibit List

7.1 Technical Exhibit A – Performance Requirements Summary

7.2 Technical Exhibit B – Deliverables Schedule

7.3 Attachment 1 – Layout Plan

TECHNICAL EXHIBIT A

Performance Requirements Summary (PRS)

Threshold

Respond within 24 hours to requests for support unless new parts or components are needed, then it’s 72 hours.

Surveillance Random Surveillance Corrective action plan will be required.

Surveillance Random Surveillance Re-install patches and updates to ensure interoperability.

5.2.1 Performance Verification Test (PVT): Contractor shall schedule a PVT.

Contractor shall notify the COR, in writing, at least five (5) business days in advance of Contractor’s intent to perform the PVT.

System locks/unlocks doors as intended.

Schedule at least five business days in advance with COR.

Surveillance Random Surveillance Re-install faulty components.

5.2.2 Training. Contractor shall perform Operator’s Training II, System Manager Training, and Maintenance Personnel Training No less than 2 personnel and no more than five personnel for operators training.

No less than 1 person and no more than 3 personnel for maintenance training.

Surveillance Random Surveillance Re-teach the course.

Surveillance Random Surveillance Apply necessary patches and updates within 72 hours to comply with cybersecurity requirements.

TECHNICAL EXHIBIT 2

Deliverables Schedule

Copies Medium/Form at Submit To

5.2.2 The Contractor shall provide a copy of the written training roster after all of the training listed within 5.2.2 is complete.

notification to the COR

each occurrence of damage to Government property or an accident resulting in death, injury, occupational disease, or adverse environmental impact. Provide a completed copy of required Accident

Investigation Reports to the CONTRACTING

OFFICER within three calendar days of each occurrence.

Mar 23