20260107_PWS-ESS.pdf

Page 1 of 30 JAN 2026

PERFORMANCE WORK STATEMENT (PWS)

Electronic Security System Maintenance and Service

Fort Leavenworth, KS

PART 1

GENERAL INFORMATION

1. General: This is a non-personal service contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. The United States (U.S.) Government shall not exercise supervision or control over the Contractor’s employees performing the tasks herein. Such contract employees shall be accountable solely to the Contractor who, in turn shall be responsible to the U.S. Government.

1.1. Description of Services/Introduction: This is a non-personal service(s) contract to provide maintenance and service of an integrated Electronic Security System (ESS) that consists of a Physical Access Control System (PACS), Intrusion Detection System (IDS), and Closed-Circuit Television (CCTV) system for the Combined Arms Center and US Army Garrison at Fort Leavenworth, Kansas.

1.2. Existing Conditions: A list of all equipment to be maintained and serviced is in Attachment 3. The equipment in Attachment 3 is tabulated by customer and includes the complete equipment list. Fort Leavenworth currently uses a locally developed solution for Intrusion Detection Systems (IDS) and Video Detection System. The central software solution is Manitou by BOLD Group. IDS equipment is based on DSC control equipment, SurGard IP receivers, and an AES Wireless Mesh system. The electronic access control solution is C-Cure 9000. Primary controllers are iSTAR ULTRA, PRO, EX, and EDGE with two factor Software House 4200, HID and IDFACTORS card readers. The CGSC is covered by a Lenel ACS system with Veridt readers. All systems together shall be referred to as the Fort Leavenworth Electronic Security System or ESS.

1.3. Scope: The Contractor shall provide Maintenance and Service for the existing ESS system at Fort Leavenworth, KS. The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to perform services as described in the PWS and associated contract documents, except for those items specified in Part 3 Government Property and Services. The Contractor shall perform to the standards and acceptable quality levels identified in this PWS and associated contract documents.

1.3.1. Contractor shall make no public disclosures of work being performed under this contract or subsequently issued Task Orders.

Page 2 of 30 JAN 2026

1.3.2. Video and photographs shall only be taken while in possession of written authorization from the site. Any geotagging features such as Global Positioning System (GPS) or location recording shall be disabled prior to use. Contractor shall surrender any photographic equipment to the site security manager for review prior to departing the site. The Government reserves the right to delete photos deemed to contain sensitive data or images. Conversations and meetings shall not be recorded without expressed consent from all parties involved. Prior to completion of this task order, all video and photos taken shall be turned over to the Government with their associated negatives and all image files shall be deleted from the contractor’s records. Digital photographs shall be submitted to the Government on compact discs or encrypted transmission in Joint Photographic Experts Group (JPEG) format.

1.4. Objective(s): Provide qualified onsite technician (Fort Leavenworth M-F 0800 – 1600 Hours – except Federal Holidays) to provide maintenance and service of an integrated Electronic Security System (ESS) that consists of a Physical Access Control System (PACS), Intrusion Detection System (IDS), and Closed- Circuit Television (CCTV) system to include proposals on ESS equipment that requires repair.

1.5. General Information:

1.5.1. Quality Control Plan (QCP): The Contractor is required to develop, maintain, and implement a Quality Control Plan (QCP) to ensure all services are performed in accordance with this Performance Work Statement (PWS).

The QCP must include procedures to identify, prevent, and ensure the non-recurrence of defective services, serving as the contractor's primary method for guaranteeing compliance.

- The proposed QCP must be submitted to the Contracting Officer (KO), via the Contracting Officer’s Representative (COR), within ten (10) days of the contract award. The Government will review the plan and provide written acceptance or comments within ten (10) days. If revisions are required, the Contractor will have five (5) days to submit a final QCP for acceptance.

- Any future changes to the accepted QCP must be submitted to the KO for review and acceptance at least thirty days before the proposed implementation date.

The same review timeline will apply to all submitted changes.

1.5.2. Quality Assurance: The Government will perform QA of Contractor's performance under this contract using the method of surveillance specified in the Performance Requirements Summary (PRS), which defines how the performance standards will be applied, the frequency of surveillance, and the acceptable quality levels (performance thresholds). The Government will conduct QA inspections on all phases and types of work performed. The Government reserves the right to perform QA inspections at any time.

Page 3 of 30 JAN 2026

1.5.3. Recognized Holidays: Work shall not be performed on U.S. federally recognized holidays unless otherwise directed by the Contracting Officer.

When a holiday falls on a Saturday, it is observed on the preceding Friday;

when it falls on a Sunday, it is observed on the following Monday. If any submission deadline coincides with an observed holiday, the deadline is moved to the preceding business day.

New Year’s Day January 1st M. L. King Memorial Day 3rd Monday in Jan Presidents Day 3rd Monday in February Memorial Day last Monday in May Juneteenth June 19th Independence Day July 4th Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

1.5.4. Hours of Operation: The contractor is responsible for conducting business between the hours of 0730 to 1630, Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.5.5. Training Holidays: Training holidays, often scheduled around federal holidays, may impact access to military facilities. If scheduled work requires access during these times, the Contractor must either coordinate with facility occupants or reschedule the work. Conversely, these periods can provide an opportunity for unrestricted access to normally occupied areas. The Contractor is expected to take full advantage of these opportunities by proactively planning maintenance or other work that is best accomplished when facilities are vacant.

1.5.6. Place of Performance: The work to be performed under this contract will be performed at government facilities on Fort Leavenworth, KS.

1.6. Security Requirements: The following information is provided on security related matters.

1.6.1. Security Program: Contractor personnel performing work under this contract must have a “Secret Clearance” at time of proposal submission, and must maintain the required security clearance for the life of the contract.

Page 4 of 30 JAN 2026

The security requirements are in accordance with the DoD Contract Security Classification Specification (DD254), available at the following link:

http://www.dtic.mil/whs/directives/forms/eforms/dd0254.pdf

1.6.2. Personnel Security Clearance Requirements: Contractor personnel performing work under this contract must have an active security clearance at the Secret level in the Defense Information System for Security (DISSS) at the time of the proposal submission, and must maintain the required level of security for the life of the contract.

1.6.3. Installation Access: Access to U.S. installations, buildings, and controlled areas is restricted to authorized personnel who meet all security criteria. The Contractor is responsible for ensuring all its employees, and any subcontractor personnel, are aware of and comply with all access requirements. Failure to submit the required documentation or obtain necessary clearances will be grounds for access denial. The Government is not liable for costs or delays resulting from the Contractor's failure to comply with Installation Access Control System (IACS) processing requirements.

Finally, the Contractor must return all installation passes to the issuing IACS office upon contract completion or when an employee no longer requires access. For more detailed information, please see link.

https://home.army.mil/leavenworth/about/visitor-information/gate-information

- Individual Termination or Expiration of Employment: The Contractor shall collect the installation access passes the same day employment of an individual has expired or has been terminated and shall return them to the issuing office within three business (3) days.

- Contract Termination or Cancellation: Upon termination or cancellation of this contract, the Contractor shall collect all outstanding installation access passes and return them to the issuing office within three business (3) days.

- Common Access Cards (CAC) and CAC Log: Eligible contractor personnel— those requiring recurring physical or network access to DoD facilities or systems for six (6) months or more—will be issued a Common Access Card (CAC). The Contractor is responsible for ensuring its employees comply with the following process:

- Sponsorship & Enrollment: A designated Government sponsor will enroll the contractor employee into the Mission Partner Identity, Credential, and Access Management (MP-ICAM) system to be facilitated by the COR.

- Application & Vetting: The employee must use the provided credentials to complete their application in MP-ICAM. A favorably initiated background investigation, including an FBI fingerprint check, is required before card issuance.

http://www.dtic.mil/whs/directives/forms/eforms/dd0254.pdf https://home.army.mil/leavenworth/about/visitor-information/gate-information

Page 5 of 30 JAN 2026

- Issuance: Following application approval, the employee must schedule an appointment at a RAPIDS facility, presenting two forms of valid, unexpired identification (one being a government-issued photo ID) to receive their CAC.

- Retrieval: The Contractor shall retrieve and return all CACs to the designated Government representative within five (5) business days upon contract completion, termination of employment, or if access is no longer required. The Contractor must immediately report any lost or stolen cards.

1.6.4. Background Checks: A favorably adjudicated Investigation is required at the clearance level stated within Section 1.6.1 contained herein this PWS.

The Contractor shall replace the employees in the event of an unfavorable background check within ten (10) business days. Failure or inability of the contractor to comply with a suitable replacement in the prescribed timeframe may subject the Contractor to termination procedures as determined by the Contracting Officer.

1.6.5. Physical Security: The Contractor shall safeguard all Government equipment, information, and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured IAW the Army Physical Security Program (AR 190-13).

1.6.6. Operations Security (OPSEC) Requirements: Contractor personnel shall adhere to facility security policies and restrictions. The Contractor shall immediately report suspicious activities to security personnel. Government issued access badges shall not be worn outside designated facilities where visible to the general public.

1.7. Key Control: The Contractor is responsible for securing all government-issued keys and key cards against loss, misplacement, unauthorized use, or duplication. Key control procedures must be documented in the Contractor's Security and Quality Control Plans. These procedures will ensure keys are returned and lock combinations are changed when an employee no longer requires access. The Contractor must immediately report any lost or duplicated keys to the Contracting Officer. Should a key be lost or duplicated, the Contractor is financially liable for the full cost of re-keying or replacing the affected locks. If a master key is compromised, the government will replace the entire system, and the total cost will be deducted from payments due to the Contractor. Facilities access is strictly controlled. Contractor employees are prohibited from using keys to grant access to any unauthorized individuals.

1.8. Post Award Conference/Periodic Progress Meetings: The Contractor shall attend the post award conference in accordance with FAR Subpart 42.5 to include a monthly workload meeting with the Contracting Officer and/or their designated representative. Contractor shall record meeting minutes and provide to the Government within five (5) business days to the Contracting Officer and

Page 6 of 30 JAN 2026 their designated representative. The contractor shall meet in person and/or MS Teams as designated by the Contracting Officer.

1.9. Key Personnel: All personnel must be U.S. citizens and fluent in English. For individuals designated as key personnel, the contractor must provide current documentation (e.g., certificates, work history) to verify they meet the qualifications for their role. The Government has identified the following as key personnel positions. The required qualifications for each are detailed below.

1.9.1. Program Manager:

The Program Manager (PM) serves as the contractor's authorized representative, holding full authority and responsibility for the performance of all work under this contract. The PM must be reachable by phone or email during standard business hours, as defined in PWS sections 1.54 and 1.55. For all non-duty hours, the unit must utilize a 24/7/365 answering service manned by live personnel to receive and forward messages. The PM is required to ensure response for critical system repairs within two hours of notification, even if off duty hours. While the PM role is not required to be on-site, attendance at monthly progress meetings with the on-site technician is mandatory.

1.9.2. ESS Maintenance and Repair Technician Qualifications:

The Onsite Maintenance and Repair Technician shall be responsible for the installation, testing, troubleshooting, and maintenance of the facility's integrated electronic security systems. This includes Intrusion Detection Systems (IDS), Access Control Systems (ACS), and Closed-Circuit Television (CCTV) systems. The role requires comprehensive technical knowledge of low-voltage electronics, network protocols, and adherence to the highest standards of safety and compliance.

- Contractor Requirements

• Authorized Dealer/Integrator Status: The contractor must be an authorized dealer and integrator for both Software House (C-Cure) and Lenel electronic security systems. This is mandatory to ensure access to direct manufacturer support for advanced troubleshooting and system issues.

- Core Technician Responsibilities and Duties

The technician’s inspection, testing, and maintenance procedures are critical to ensuring system integrity and reliability.

- Intrusion Detection Systems (IDS)

• Conduct comprehensive performance verification, including functional testing of primary and secondary control panels and all annunciation devices (e.g., keypads, strobes).

Page 7 of 30 JAN 2026

• Test primary power systems and perform load tests on all backup batteries.

• Functionally test every detection device, including tamper circuits and panic/duress buttons.

• Test and verify primary and alternate communication paths to the monitoring center.

• Confirm that all system statuses, alarms, and alerts are accurately reported and displayed.

- Access Control Systems (ACS)

• Perform full system diagnostics on the main control panel, door controllers, and any expansion cards.

• Test all system power supplies and conduct load tests on all backup batteries.

• Verify uninterrupted communication between all controllers and the access control server.

- Closed-Circuit Television (CCTV) Systems

• Inspect and verify that all cameras are functioning, powered, and communicating reliably with their monitoring or recording system.

• Clean all camera lenses and protective housings.

• Adjust camera focus and field of view as needed to ensure optimal coverage.

• Verify that central recording systems are operational and functioning to manufacturer's specifications.

- System Restoration and Deficiency Reporting

• Diagnose and resolve circuit issues (e.g., open, short, grounded).

• Report and document any system deficiencies and follow up with necessary repairs or restoration.

- Required Technician Qualifications and Skills

- Experience & Certifications

• Minimum Experience: A minimum of 3 years of hands-on experience installing, troubleshooting, and maintaining IDS, Electronic Access Control (EAC), and IP- Based CCTV systems of comparable complexity to those in use (e.g., C-Cure 9000, Tyco/DSC, Lenel, Mobotix, AXIS).

Page 8 of 30 JAN 2026

• Required Certifications:

o Software House C-Cure 9000 Installer/Maintainer.

o Software House C-Cure 9000 Advanced Integrator.

o Equivalent certification for Lenel system maintenance and sustainment.

- Technical Knowledge & Expertise

• Access Control Systems: Possess comprehensive knowledge of all system components, including panels, power supplies, I/O devices, readers, and locking mechanisms. Must understand credential authentication technologies.

• Intrusion Detection Systems: Demonstrate a complete understanding of DSC Commercial IDS solutions and a wide variety of detection sensors (e.g., PIR Motion, Balanced Magnetic Switches, etc.).

• Network & Communication: Must be able to troubleshoot industry-standard communication protocols (SIA & Contact ID) over IP and Wireless Mesh (AES) networks.

- Core Skills & Abilities

• Electrical & Power: Proficient in low-voltage power connections, understanding electrical units (volt, ohm, amp), and applying circuit principles. Capable of calculating system current draw and required backup power.

• Cabling & Installation: Skilled in installing and terminating low-voltage cables, with knowledge of plenum/non-plenum types. Able to read blueprints and proficiently use tools like tone generators, probes, and crimpers.

• Troubleshooting: Expert use of testing equipment, including multimeters, to diagnose and resolve circuit faults.

- Safety & Compliance

• Standards: The technician shall have relevant experience with UL 2050 installation standards for IDS and an understanding of life safety requirements as they apply to electronic access control.

• Worksite Safety: All work shall adhere to OSHA standards for worksite safety, including the safe use of ladders, scaffolding, and hand/power tools.

Page 9 of 30 JAN 2026

1.10. Identification of Contractor Employees: Contractor personnel must clearly identify themselves in all professional interactions to avoid being mistaken for Government officials. This requires stating their name and company affiliation when answering phones or attending meetings, and ensuring all correspondence, reports, and email signatures are marked with the company name to reflect their contractor status.

1.10.1. Contractor Workspace: To include offices, desks, and staging areas, must feature a sign indicating the area is occupied by contractor employees.

The design for this sign must be submitted to the Contracting Officer or their designated representative for approval within ten calendar days of the contract award, with the final placement coordinated with the COR.

1.10.2. Contractor Identification Badges: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as Government employees. This identification includes meeting attendance, answering Government telephones, email communications, and working in other situations where Contractor status is not obvious.

Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc. The Government will provide access badges with limited access privileges to DES facilities.

1.11. Contractor Travel: Not Applicable.

1.12. Other Direct Costs (ODCs): Not Applicable.

1.13. Data Rights: The Government has unlimited rights to all documents and materials produced under this contract. All documents and materials, to include the source codes of software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership and copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.14. Advertisement and Social Media:The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.15. Cybersecurity: At no time will the Contractor or associated sub-contractor employees transmit government documents or information over using methods

Page 10 of 30 JAN 2026 that do not meet the security requirements specified in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" such as personal electronic mail accounts, public digital data storage sites (cloud storage), social media platforms or instant messaging.

Approved government site(s) such DOD SAFE – https://safe.apps.mil/security.php

1.16. Non-Disclosure Agreement (NDA): The Contractor shall provide signed non-disclosure agreements to the Contracting Officer or their designated representative no later than ten (10) days prior to commencement of work under the contract. Disclosure of information by Contractor personnel may result in removal of Contractor personnel from performance under this contract. The Contractor and Contractor personnel, shall not divulge or release data or information developed, or obtained under performance of this PWS, except to authorized Government personnel or upon written approval of the Contracting Officer. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.17. Organizational Conflict of Interest (OCI): Should any contractor or subcontractor personnel encounter proprietary or source selection information that could create an Organizational Conflict of Interest (OCI), as defined in FAR Subpart 9.5, the Contractor must notify the Contracting Officer (KO) immediately. Upon notification, the Contractor must promptly submit an OCI Mitigation Plan for review. The KO has sole discretion to determine the acceptability of the mitigation plan. If the KO determines that an OCI cannot be satisfactorily avoided or mitigated, they may impose other remedies as necessary, including prohibiting the Contractor from participation in future related contracts.

1.18. Phase In /Phase Out Period (PIPO): To minimize decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the thirty (30) day phase in/ phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date. During the phase out period, the outgoing contractor shall ensure the facility is cleared of all Contractor owned equipment and office supplies, cleaned and approved by the COR.

1.19. Safety: The Contractor shall execute all work in accordance with the latest OSHA standards and must develop a comprehensive Accident Prevention Plan (APP). This plan must include a detailed Activity Hazard Analysis (AHA) for all contract activities. The Contractor is also responsible for verifying all installation-specific requirements for emergency procedures. The completed APP must be https://safe.apps.mil/security.php

Page 11 of 30 JAN 2026 submitted for Government review and acceptance at least twenty-one (21) days prior to the start of any work. The Contractor must ensure the APP remains current, covering all subsequent proposals and contract modifications. If any new work is not covered by the accepted plan, an addendum must be submitted and accepted before that work can begin.

1.20. Required Training: The following provides information on training requirements.

1.20.1. Anti-Terrorism (AT) Level I Training: All Contractor employees, including subcontractor employees, who are employed under the contract, shall complete AT Level I Training within thirty (30) days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or within thirty (30) days after employment of new personnel. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR within five (5) days after completion of this training by all employees and subcontractor personnel. AT Level I awareness training at https://jkodirect.jten.mil. Contractor personnel shall complete refresher training every twelve (12) months.

1.20.2. OPSEC Training: All Contractor employees, including subcontractors, shall complete Level I OPSEC training within thirty (30) days of employment under this contract. Verification of the training shall be provided to the COR within five (5) days after completion of the training. OPSEC Level I training is available at http://www.cdse.edu/catalog/elearning/GS130.html. Contractor personnel shall complete refresher training every twelve (12) months.

1.20.3. iWATCH Training: The Contractor and all subcontractors must view available iWATCH program training, utilizing training standards provided by the requiring activity ATO. This training will inform employees about suspicious behaviors and how to report them to the COR. Training for all employees must be completed within 30 days of contract award, and for new employees within 30 days of commencing work. Verification of training completion and reporting of results must be provided to the COR within five days thereafter. https://www.mepcom.army.mil/Home/Contractors/

1.20.4. Cyber Awareness Training: All Contractor employees, including subcontractors, requiring access to Government information systems shall complete the DOD IA Cyber Awareness Training. All employees working information technology (IT)/IA functions must comply with DOD and Army training requirements per DOD Directive (DODD) 8570.01, Information Assurance Training Certification and Workforce Management, DOD 8570.01-M, Information Assurance Workforce Improvement Program, and AR 25-2, Information Assurance, within 30 days of employment.

https://cs.signal.army.mil/login.asp https://jkodirect.jten.mil/ http://www.cdse.edu/catalog/elearning/GS130.html https://www.mepcom.army.mil/Home/Contractors/ https://cs.signal.army.mil/login.asp

Page 12 of 30 JAN 2026

1.20.5. Personally Identifiable Information (PII): Contractor employees, including subcontractors, performing services under this contract with access to PII and Government information shall complete “Identifying and Safeguarding PII” within 30 calendar days of employment. Contractor personnel shall complete refresher training every twelve (12) months from initial completion. The Contractor shall provide the COR a copy of the training certificates for its employees no later than five (5) days after completion. https://securityawareness.dcsa.mil/piiv2/index.htm

1.20.6. PDREP Online Overview: Contractor familiarization overview of Product Data Reporting and Evaluation Program (PDREP) – Corrective Action Request (CAR) System. CARs formerly Nonconformance Reports (NCR)) are used for managing contractual nonconformances. Nonconformance occurs when a contractor fails to meet contract requirements or specifications. The COR will verbally notify the contractor and document in Product Data Reporting and Evaluation Program (PDREP) each time nonconforming service or supplies have been identified and request the contractor to correct the defect to conform with contract requirements.

Vendor overview at the following link – https://www.pdrep.csd.disa.mil/pdrep_files/reference/guides_manuals/pdf/CAR.pdf https://securityawareness.dcsa.mil/piiv2/index.htm https://www.pdrep.csd.disa.mil/pdrep_files/reference/guides_manuals/pdf/CAR.pdf

Page 13 of 30 JAN 2026

PART 2

DEFINITIONS & ACRONYMS

2. Definitions and Acronyms

2.1. Definitions: Although not inclusive of every term used within this PWS, the following provides a list of definitions used throughout this PWS and commonly used in the acquisition field.

Adjust – Performing the necessary modifications to return the performance of the part to within the stated acceptable range.

Corrective Action Request (CAR) System – CAR formerly Nonconformance Reports (NCR) are used for managing contractual nonconformances on ACC administered contracts. Nonconformance occurs when a contractor fails to meet contract requirements or specifications. The COR will verbally notify the contractor and document in Product Data Reporting and Evaluation Program (PDREP) each time nonconforming service or supplies have been identified and request the contractor to correct the defect to conform with contract requirements. Resolution of nonconformance identified at the subcontractor level shall be addressed with the prime contractor. CARs are issued, processed, and closed IAW ACC Acquisition Instruction (AI) 46-2 and FAR subpart 46.407

Check – To observe a system or its components for satisfactory operating performance, condition, and accuracy as compared to its designed operating parameters and to repair all deficiencies discovered.

Contracting Officer – means a person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Contracting Officer's Representative (COR) – A Contracting Officer's Representative (COR) is an individual formally designated in writing by the Contracting Officer to perform specific technical or administrative contract-related functions. This title applies to any person delegated these duties, regardless of local terminology (e.g., Task Order Manager, Quality Assurance Evaluator), and all must be certified. While other personnel can assist the COR, they may only act as an on-site "alternate COR" if they meet all COR requirements and are formally appointed by the Contracting Officer.

Contractor – means a supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contractor-acquired Property - means property acquired, fabricated, or otherwise provided by the Contractor for performing a contract and to which the Government has title.

Page 14 of 30 JAN 2026

Defect – Any nonconformance of a unit of service with specified requirements.

Deficiency List – List or report of deficiencies noted on an inspection.

Deliverable – means anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Electronic Security Systems (ESS) – Electronic security systems consist of access control systems (card reader systems), closed-circuit television (CCTV) system, intrusion detection systems, transmission media systems, and provision of local or regional dispatch centers (also known as security command centers). Electronic security systems are one part of an overall physical security plan.

Government-furnished Property – As reflected in FAR 52.245-1, Government-furnished Property “means property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract

Government Property - means all property owned or leased by the Government.Government property includes both Government-furnishedand Contractor-acquired property. Government property includes material, equipment, special tooling, special test equipment, and real property. Government property does not include intellectual property and software.

ICIDS – Integrated Commercial Intrusion Detection System; generation is DA Approved system.

Incidental Property – Property provided to the Contractor and not considered Government Furnished Property or Contractor Acquired Property.

Inspect – To conduct a close, thorough, and critical appraisal of the systems, equipment, components, and services covered by this contract and to provide detailed written reports on the conditions observed.

Install or Installation – Act of assembling and integrating, and testing that results in a fully functional system. (e.g. installation is testing or other validation methods to ensure functionality for OEM standards).

Lead Time – The total time from the receipt of a work requirement by the contractor until the work must be completed.

Page 15 of 30 JAN 2026

Maintain – To furnish necessary resources including repairs to keep systems and components operating in a safe, effective, and reliable manner, to extend its useful life, and to minimize unscheduled downtime.

Occupied – A facility is occupied if it contains personnel, equipment, or any other Government-owned/supported property.

Operate – To furnish all labor to systematically ensure that systems and equipment are properly performing their intended and designed functions and are functioning safely, effectively, and efficiently for reliable, trouble free service.

Operation – To adjust, control or guide a specific thing so as to produce a specific performance or result in accordance with a specific operating procedure.

Operational Maintenance – Routine, recurring maintenance required whenever systems or components are operating to ensure that such operation is safe, efficient, and effective and that the operation will not result in damage or accelerated deterioration of the system or component.

Patch – A patch is a piece of software designed to update a computer program or its supporting data, to fix or improve it. This includes fixing security vulnerabilities and other bugs, with such patches usually called bugfixes or bug fixes, and improving the usability or performance.

Patch Management – Is the process of using a strategy and plan of what patches should be applied to which systems at a specified time.

Property Administrator - means an authorized representative of the Contracting Officer appointed in accordance with agency procedures, responsible for administering the contract requirements and obligations relating to Government property in the possession of a Contractor.

Performance Requirements Summary – Identifies the key service outputs of the contract that will be evaluated by the Government to assure contract performance standards are met by the Contractor.

Physical Security – means that part of security concerned with physical measures designed to safeguard personnel; to prevent unauthorized access to equipment, installations, material, and documents; and to safeguard against espionage, sabotage, damage, and theft.

Preventive Maintenance (PM): Inspection and testing of required systems and components on a recurring schedule in an effort to reduce system failures and maintain those systems operational. Preventative maintenance aids in reducing major repairs, reduces cost, and keeps systems operational. PM inspection points and follow on repair efforts shall be systematically recorded.

Page 16 of 30 JAN 2026

Project Work: Projects are those that in general are related to small system installation projects, equipment removal or adding sensors/devices/components for any of the ESS which are easily achievable and does not impact the daily scheduled maintenance requirements

Protection: means unintended/unauthorized disclosure, or exposure of any drawing, specification, or program language associated with a component, sub-system, system, software, or hardware that would potentially pose a security threat to the system or the protected asset.

Provide: Furnish, install, test, inspect and make ready for use.

Quality Assurance – (or Government contract quality assurance) means the various functions, including, inspection, performed by the Government to determine whether a Contractor has fulfilled the contract obligations pertaining to quality and quantity.

Quality Assurance Surveillance Plan (QASP) – means the key Government-developed surveillance process document, and is applied to Performance-Based Service Contracting (PBSC). The QASP is used for managing Contractor performance assessment by ensuring that systematic quality assurance methods validate that Contractor quality control efforts are timely, effective, and are delivering the results specified in the contract or task order. The QASP directly corresponds to the performance objectives and standards (i.e., quality, quantity, timeliness) specified in the Performance Work Statement (PWS). It provides specific details on how the Government will survey, observe, test, sample, evaluate, and document Contractor performance results to determine if the Contractor has met the required standards for each objective in the PWS. The QASP, with very few if any exceptions, is an internal to Government document.

Quality Control – means all necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Repair: The restoration of a failed or failing piece of equipment or real property facility (or component thereof) to such condition that it may be effectively used for its designated purpose, by overhaul, overlay, reprocessing, or replacement of constituent parts or materials which have been damaged by action of the elements or wear and tear in use.

Response Time (Response): The total time from the receipt of a work requirement by the Contractor until the Contractor is onsite and begins to perform the work requirement. The response times indicated herein are a standard for performance on which the Government will evaluate the Contractor.

Risk Management Framework (RMF): The selection and specification of security controls for an information system is accomplished as part of an organization-wide information security program that involves the management of organizational risk---that is, the risk to the organization or to individuals associated with the operation of an

Page 17 of 30 JAN 2026 information system. The management of organizational risk is a key element in the organization's information security program and provides an effective framework for selecting the appropriate security controls for an information system---the security controls necessary to protect individuals and the operations and assets of the organization.

Security Sensitive: Information relating to detailed Electronic Security systems drawings, specifications, or account information. Detailed to a level that could provide sufficient information that would allow a criminal or terrorist element to disable, defeat, or otherwise negatively impact the Electronic Security Systems architecture.

Scheduled Maintenance (SM): Maintenance activities performed on a recurring basis in accordance with predetermined frequencies.

Scheduled Service Call: Any call responded to during normal duty hours.

Security Technical Implementation Guide (STIG): Is a methodology for standardized secure installation and maintenance of computer software and hardware. These guides, when implemented, 'lockdown' common and typically permissive software to further reduce vulnerabilities. The term was coined in 1998 by DISA which creates configuration documents in support of the United States Department of Defense (DoD).

The implementation guidelines include recommended administrative processes and span the devices' lifecycle. STIG scanning software is used to implement/validate proper configuration.

Service Order – Service document that identifies repair, materials and a detailed write up of work completed. This service order requires time sensitive submission and Government signature for acceptance of work. It is used to validate work completed for the monthly billing cycle.

Statement – means the specific results-based activities required in the context of the statement, and the required action(s). Statements focus on “what” is to be accomplished; however they are not prescriptive in describing “how” the outcome is to be achieved. Each HLO may have several statements to flesh out the areas necessary to meet the objective. Statements are similar to Level 3 in a Work Breakdown Structure.

Subcontractor – means one that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Unscheduled Service Calls – An onsite response to a designated location, within an allotted timeline, for services that require immediate attention.

Vandal Resistant – To provide above normal protection to an asset or process that will provide some mitigation against acts of vandalism.

Weather Tight – A condition which provides protection and prevents wind, rain, and snow from entering any structure.

Page 18 of 30 JAN 2026

Work Day – The number of hours per day the Contractor provides services in accordance with the contract.

2.2. Acronyms: Although not inclusive of every term used within this PWS, or that may be included in an acquisition, the following provides a list of acronyms commonly used in the acquisition field.

ACOR Alternate Contracting Officer's Representative

AFARS Army Federal Acquisition Regulation Supplement

AHA Activity Hazard Analysis

AOR Area of Responsibility

AR Army Regulation

AT Anti-terrorism

CAC Common Access Card

CFR Code of Federal Regulations

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer’s Representative

DA Department of the Army

DD254 Department of Defense Contract Security Requirement List

DFARS Defense Federal Acquisition Regulation Supplement

DMDC Defense Manpower Data Center

DoD Department of Defense

FAR Federal Acquisition Regulation

GFP Government Furnished Property

HIPAA Health Insurance Portability and Accountability Act of 1996

IAC Installation Access Control

IACO Installation Access Control Office

IGE Independent Government Estimate

Page 19 of 30 JAN 2026

IT Information Technology

JTR Joint Travel Regulation

JPAS Joint Personnel Adjudication System

KO Contracting Officer

OCI Organizational Conflict of Interest

OCONUS Outside Continental United States (includes Alaska and Hawaii)

ODC Other Direct Costs

OEM Original Equipment Manufacturer

OPSEC Operations Security

PA Property Administrator

PII Personally Identifiable Information

PIPO Phase In/Phase Out

POC Point of Contact

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QAP Quality Assurance Program

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Program

RA Requiring Activity

SIGE Safety and Health Protection Plan

TE Technical Exhibit

USAG United States Army Garrison

UOM Unit of Measure

Page 20 of 30 JAN 2026

PART 3

3. GOVERNMENT PROPERTY (GP) AND SERVICES

3.1. Utilities – The Government will provide all utilities in the facilities (water, sewer, electricity, local area network (LAN) connectivity, HVAC). These utilities will be available for the Contractor’s use in performance of the tasks outlined in this

PWS.

3.2. Facilities – The Government will provide office space with a storage for performance on this contract. No modifications or alterations to the office space is permitted without prior approval by the government.

3.3. Computer Workstation – The Government will provide one Government computer work station located in building to be determined. The intended use for this work station is for electronic correspondence between the Government and the Contractor to include receiving / processing service tickets and access to system reports required for diagnostic purposes.

3.4. Equipment Delivery and Secure Storage – The Government will provide storage area for bench stock parts to streamline scheduled maintenance of the ESS system. Contractor shall be responsible for the preparation and delivery of all required installation materials and equipment, and shall perform loading, unloading, packing, unpacking, inventory, and inspection of said equipment at each site. The Contractor shall also be responsible for proper (i.e., secure, weather protected) storage of all materials and equipment under its cognizance during performance of this contract. The purpose of this provision is to ensure that materials and equipment do not become unusable as a result of inadequate or inappropriate handling or storage.

Page 21 of 30 JAN 2026

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. Contractor Furnished Property and Services

4.1. General – The Contractor shall furnish all personnel, equipment, supplies, transportation, tools, materials, supervision, and other items necessary to perform services as described in the PWS and associated contract documents, except for those items specified in Part 3 Government Property and Services.

4.2. Materials – The Contractor’s technician will have access to a workstation which includes at a minimum a computer, printer, and telephone. Contractor shall provide all other supervision, labor, personnel, equipment, materials and supplies required to complete the tasks listed in this PWS.

4.3. Vehicles and Equipment – The Contractor must provide and maintain all necessary vehicles and equipment, which must be clearly marked with the company's name and kept in a professional condition. All vehicles and equipment must comply with relevant safety and environmental regulations, and any unsafe items must be removed and replaced. The use of government-provided vehicles, tools, or parts for the Contractor's equipment is prohibited.

4.4. Organization – The contractor shall be responsible for cleaning up their office workspace and areas of work conducted not otherwise covered under the Custodial contract. Contractor is responsible to secure all tools and materials at the close of business. Contractor shall protect all materials from exposure to the elements. This requirement applies to all job areas.

4.5 Insurance – A Certificate of Insurance (COI) shall be provided to the Contracting Officer (KO) as evidence of liability insurance coverage for work on a Government installation. The COI must reference the contract number and include an endorsement for 30-day written notice to the KO prior to cancellation or material change.

Page 22 of 30 JAN 2026

5. Specific Tasks

PART 5

SPECIFIC TASKS

5.1. Task #1 – EQUIPMENT INVENTORY

5.1.1. Deliverable – Fluctuations in the quantity of the equipment to be serviced throughout each of the option years could result in a reduction through attrition or gain because of added coverage areas and new equipment. Contractor shall provide to the Government an updated consolidated list of equipment that captures increase and decrease of equipment (Equipment Deviation List). The Government may use this list to modify the preventive maintenance requirements for the next option year.

5.1.2. Standards – Provide the updated equipment list (include replacements / additions / removed items) to the Contracting Officer and their designated representative the last Wednesday of each month and conduct quarterly review with the Contracting Officer Representative (COR). Equipment updates shall contain Building number, location in building, item description, quantity, serial numbers as applicable with any necessary equipment notes.

5.2. Task #2 – Processing Warranty Equipment

5.2.1. Deliverable – All equipment eligible for warranty repair will be notated on the equipment list to include the date remanded for Warranty repair or replacement and disposition (e.g. onsite repair, pending delivery, repair completed, etc). For equipment currently under warranty, the contractor shall make coordination for onsite warranty repairs as available. For equipment required to be sent to the OEM, contractor is to provide suspected faulty equipment information to the end user of the equipment and shipping procedures.