3ID G2 ESS Upgrade PWS_Draft 2.pdf

Performance Work Statement

PERFORMANCE WORK STATEMENT (PWS)

3ID Access Control and Physical Security Upgrades

July 28, 2026

Part 1

General Information

1. General: This is a non-personnel services, firm-fixed-price contract to perform physical security upgrades, access control system (ACS) installations, and intrusion detection system (IDS) reconfigurations across HQ Building 1 and SCIF locations at Fort Stewart, Georgia. The Government shall not exercise any supervision or control over the contract service providers.

Such contract service providers shall be accountable solely to the Contractor, who, in turn, is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other non-personal services to upgrade and reconfigure the access control and intrusion detection systems. This includes installing new badging and SCIF-specific workstations, replacing legacy maglocks with SCIF-compliant electric locking hardware, realigning IDS zones, and performing system programming to ensure the system operates in accordance with all applicable standards and regulations.

1.2 Background: The 3rd Infantry Division (3ID) G2 SCI PM / DIV SSO requires comprehensive physical security upgrades across HQ Building 1 and associated SCIF locations at Fort Stewart, GA. The objective of this project is to separate collateral access administration from SCIF environments, remove legacy magnetic locks (maglocks), and replace them with SCIF-compliant electric locking hardware while preserving system integrity and continuity of operations.

1.3 Scope: The Contractor shall provide non-personal service(s). This PWS covers physical security upgrades across the following areas at Fort Stewart, GA:

1.3.1 Base Project (HQ Building 1):

1.3.1.1 HQ Badging Office: 1 Badging/Monitoring Workstation, 5 RADC, and 10 Entrostar panels centrally located across three floors.

1.3.1.2 Division HQs SCIF: 1 Dedicated SCIF Workstation, 8 PIMs, 1 entry keypad, 1 card reader, and 1 RADC.

1.3.1.3 STO Vault Room 2020: 1 PIM, 1 entry keypad, CRKPs, 1 RADC, and 1

SCIF RSM.

1.3.1.4 Building 254 - Foundry SCIF: Standalone exterior hardened SCIF with tamper-proof vault doors on interior vestibules. Replacement of entry/exit card readers, new RADC, sensors, and SCIF-specific workstation.

1.3.1.5 Building 613 SCIF: Medium-sized SCIF with two access doors in a vestibule configuration. Replacement of entry/exit card readers, new IDS monitoring sensors, SCIF RADC, sensor suite, and workstation.

1.3.1.6 Building 8433 SCIF: Medium-sized SCIF with two access doors in a vestibule configuration. Replacement of entry/exit card readers, new IDS monitoring sensors, SCIF RADC, sensor suite, and workstation.

1.3.1.7 Gate Pedestal Card Reader Replacement (Per Building)

1.3.1.8 Vehicle Sliding Gate & Operator Installation (Per Building)

1.4 Objectives:

1.4.1 Enhance Physical Security: To upgrade the physical security of HQ Building 1 and other optional SCIF locations by installing new, compliant hardware and reconfiguring existing systems.

1.4.2

1.4.3 Modernize Access Control: To replace legacy magnetic locks and sensors with

SCIF-compliant electric locking hardware and high-security switches, ensuring the system meets current standards.

1.4.4

1.4.5 Separate and Secure Systems: To separate the administration of collateral

(lower security) areas from secure SCIF environments by installing dedicated workstations for each, improving overall security management.

1.4.6

1.4.7 Achieve System Compliance: To perform all installations, programming, and reconfigurations to ensure the access control and intrusion detection systems operate in accordance with all applicable standards, such as ICD 705.

1.4.8 The contractor IAW IC Tech Spec Version 1.5.1 Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities - must have Top Secret//SCI Security Level. 1.6.3.1.

1.5 General Information:

1.5.1 Quality Control Plan (QCP): The Contractor shall develop and maintain a QCP to ensure services are performed in accordance with (IAW) this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non -recurrence of defective services. The Contractor's QCP is the means by which it assures that the work provided complies with the requirements of the contract.

The Contractor’s Proposed QCP shall be submitted to the Contracting Officer (KO) through the Contracting Officer’s Representative (COR) for review within 30 days after date of contract award [Deliverable 1].

The Government will review and either notify the Contractor in writing of acceptance of the plan or return their comments to the Contractor within 14 calendar days. If the Government has provided comments, the Contractor shall then have 7 calendar days to submit a Final QCP. After receipt of the Final QCP, the Contractor may receive the Contracting Officer’s acceptance in writing. Any proposed changes to the accepted QCP are required to be resubmitted for acceptance by the Contracting Officer no later than 14 days prior to the anticipated change and before implementation by the Contractor. The timeline noted above will apply for review and acceptance for proposed changes. At a minimum, the QCP must include and answer the following to be acceptable:

(a) A chart showing the organizational structure and lines of authority, the names, qualifications, duties, responsibilities, and classification of each member of the Contractor's Quality Control Team;

(b) How the Contractor will monitor work to ensure performance complies with all deliverables (etc. timelines, deadlines, and goals);

(c) How the Contractor will monitor work to ensure performance complies with all specifications and requirements of the contract, including the contract’s clauses;

(d) How the Contractor will monitor and ensure staff qualifications remain current and valid including Department of Defense (DoD) Contractor Personnel Office (DOCPER) processes/approvals throughout contract performance;

(e) How the Contractor will ensure all keys issued will remain controlled items (Paragraph 1.7 Key Control);

(f) How the Contractor will inventory and track maintenance of all Government Provided Equipment / Materials;

(g) How the Contractor will identify, investigate, and correct any non-conforming performance and prevent similar deficiencies in the future; and

(h) How the Contractor will file and save all Quality Control related documents for the life of the contract plus 5 years.

1.5.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the acceptable quality levels (performance thresholds).

1.5.3 Recognized Holidays: The following provides information on recognized holidays for the purpose of the PWS. If submittal of any documentation (e.g. deliverables, submittals, etc.)

deadlines fall on a holiday, the closest work day prior to the holiday will apply as the deadline for submittal.

1.5.3.1 U.S. Holidays: Work shall not be performed on U.S. federally recognized holidays occurring during the normal workweek unless otherwise directed by the Contracting Officer.

When a U.S. holiday occurs on a Saturday or a Sunday, the holiday is observed on the preceding Friday or following Monday, respectively.

New Year’s Day January 1st M. L. King Memorial Day 3rd Monday in Jan Presidents Day 3rd Monday in February Memorial Day last Monday in May Juneteenth June 19th Independence Day July 4th

Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

1.5.4 Operating Hours: The Government facility office hours, facility operating hours, and the Contractor support hour requirements often coincide, however, they may differ. Please refer to the following.

1.5.4.1 Government Facility Office Hours: The Government facility office hours are 0730 to 1600 hours, Monday through Friday, except U.S. Holidays identified in paragraph 1.5.3.1 above or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

1.5.4.2 Government Facility Operating Hours: The Government facility operating hours occur between the hours of 0730 to 1600 hours Monday through Friday. The Government facility may close due to local or national emergencies, administrative closings, or similar Government directed facility closings and will be communicated by the Contracting Officer or Contracting Officer Representative to the contractor.

1.5.4.3 Contractor Support Hours: The Contractor shall provide support between the hours of 0730 to 1600 hours, Monday through Friday. The Contractor shall always maintain an adequate workforce, for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential.

1.5.5 Training Holidays: The Government has historically granted military personnel training holidays as compensation for time that they spent conducting field training. These are typically combined with regular holiday leave schedules (for example, Christmas half days or day on day off schedules). Training holidays may affect access to military operated facilities. If scheduled work or access to facilities is required, coordination with occupants will be necessary or the work in affected facilities shall be rescheduled after the training holiday.

However, announced training holidays or exodus of military personnel may provide the Contractor with an opportunity for unrestricted access to facilities and areas. The Contractor shall take full advantage of such opportunities by planning maintenance or actions that are better accomplished when such areas are vacant.

1.5.6 Place of Performance: The work to be performed under this contract will be performed at Fort Stewart, Georgia at buildings 1, 254, 613, and 8843.

1.6 Security Requirements: The following information is provided on security related matters.

1.6.1 Security Program: Contractor personnel performing work under this contract must have at least Top Secret/SCI at time of the RFQ response and must maintain the level of security required for the life of the contract. The security requirements are IAW with the DoD Contract Security Classification Specification (DD Form 254), which is currently accessible at the following link: http://www.dtic.mil/whs/directives/forms/eforms/dd0254.pdf

1.6.2 Requirements: Contractor personnel performing work under this contract must have an active personnel security clearance at the level in the Defense Information System for Security (DISS) at time of the RFQ submission and must maintain the level of security required for the life of the contract. The security requirements are IAW the DoD Contract Security Classification Specification DD Form 254. The Contractor shall ensure that Contractor employees and subcontractor employees performing services under this contract comply with FAR 52.204-2 Security Requirements when the employee has access to information classified “Confidential,” “Secret,” or “Top Secret.” The Contractor shall ensure the employee complies with the DoD Security Agreement (DD Form 441), and the NISPOM rule at 32 Code of Federal Regulation (CFR) Part 117, effective 24 Feb 2021. The NISPOM is the National Industrial Security Program Operating Manual to which contractors must implement and comply.

1.6.3 Installation Access: Access to U.S. installations, buildings and controlled areas is limited to personnel who meet security criteria and are authorized. Failure to submit required information/data and obtain required documentation or clearances will be grounds for denying access to U.S. installations, buildings and controlled areas. The Contractor shall ensure that any subcontractors used in performance of this contract complies with these requirements and that all employees, of both the Contractor and any subcontractor utilized by the Contractor, are made aware of and comply with these requirements.

The Contractor shall be aware of and comply with the requirements associated with Installation Access Control. The Government is not liable for any costs associated with performance delays due solely to a firm’s failure to comply with Installation Access Control System (IACS) processing requirements.

The Contractor shall return installation passes to the issuing IACS office when the contract is completed or when a Contractor employee no longer requires access.

1.6.3.1 Installation Pass Log: In addition, the Contractor shall provide the Contracting Officer, via the COR, with an Initial Installation Pass Log within 3 days after contract award [Deliverable 2]. The log shall be updated as employees are added or removed. The Updated Installation Pass Log shall be current and available at any time upon request by the Government and submitted to the COR within five (5) days of any changes to the log.

1.6.3.2 Individual Termination or Expiration of Employment: The Contractor shall collect the installation access passes the same day employment of an individual has expired or has been terminated and shall return them to the issuing office within 2 days.

1.6.3.3 Contract Termination or Cancellation: Upon termination or cancellation of this contract, the Contractor shall collect all outstanding installation access passes and return them to the issuing office within 2 days.

1.6.4 Physical Security: The Contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, or when the SCIF is unoccupied, contractor personnel shall ensure all Sensitive Compartmented Information (SCI) is secured in General Services Administration http://www.dtic.mil/whs/directives/forms/eforms/dd0254.pdf

(GSA)-approved security containers (closed storage) and that all government facilities, equipment, and materials are properly secured. If the Contractor is issued physical keys or key cards for secure areas, the Contractor shall establish strict key control procedures to ensure keys are not duplicated, misplaced, or used by unauthorized persons. The Contractor shall immediately report any occurrences of lost keys, key cards, or compromised access PINs to the Contracting Officer and the local Security Officer (SOAt the close of each work period, Government facilities, equipment, and materials shall be secured IAW the Army Physical Security Program (AR 190-13).

1.6.5 SCIF Access and Entry Procedures: Contractor personnel will require access to a Government-accredited Sensitive Compartmented Information Facility (SCIF) to perform duties related to this PWS. Entry into the SCIF is strictly controlled and limited to authorized, properly cleared personnel with a verified need-to-know. The Contractor shall ensure employees adhere to all local Access Control System (ACS) protocols, which may include biometric verification, PIN access, and badge display. Authorized contractor personnel who permit another individual to enter the SCIF shall verify the individual's authorized access.

Uncleared personnel or personnel without SCI access require continuous escort by an SCI-indoctrinated individual and must sign the visitor log.

1.6.6 Prohibited Items and Technical Security: The introduction of unauthorized electronic devices or prohibited materials into the SCIF is strictly forbidden. Contractor personnel are subject to random inspections to ensure no prohibited items are brought into the secure area

• Prohibited items include, but are not limited to:

• Personal electronic devices (PEDs), including smartphones, tablets, and smartwatches.

• Cameras, audio, or video recording equipment.

• Wireless transmission devices (Bluetooth, Wi-Fi capable devices).

• Unauthorized USB drives or removable storage media.

• Firearms, explosives, or illicit drug

1.6.7 Operations Security (OPSEC) Requirements: Contractor personnel shall adhere to facility security policies and restrictions. The Contractor shall immediately report suspicious activities to security personnel. The contractor shall comply with all applicable security regulations, including AT Level Training (within 30 days of start), local iWATCH briefings, annual Level I OPSEC training, and DoD Cyber Awareness Challenge compliance [Deliverable 3].

1.7 Post Award Conference/Periodic Progress Meetings: The Contractor shall attend any post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The Contracting Officer, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the Contracting Officer will apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise theGovernment of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.7.1 The Contractor shall attend, participate in, and furnish input to scheduled and unscheduled meetings, conferences, and briefings that relate to the functions and services herein as required by the Government to provide effective communication and impart necessary information. The Contract Manager or designated representative shall attend meetings as requested by the Government. Meeting attendees shall at times include Contractor managerial, supervisory, and other personnel knowledgeable of the subject matter.

Meetings may start or end outside of regular duty hours.

1.8 Contracting Officer’s Representative (COR): Refer to Part 2 of this PWS for the definition of a COR. As determined by the Contracting Officer, a COR will be appointed and identified by letter of designation, a copy of which will be provided to the Contractor by the Contracting Officer. The designation letter states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is not authorized to obligate the Government. If the work is not written in the contract, the COR is not authorized to request new work. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract, perform inspections necessary in connection with contract performance, maintain written and oral communications with the Contractor concerning technical aspects of the contract, issue written interpretations of technical requirements, including Government drawings, designs, specifications, monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies, coordinate availability of Government property, and coordinate site entry of Contractor personnel.

1.9 Key Personnel: The Contractor shall provide a Program/Contract Manager who shall be responsible for the performance of the work. The name of this person and an Alternate Program/Contract Manager, who shall act for the Contractor when the Program/Contract Manager is absent, along with a Curriculum Vitae (CV) for each of these individuals, shall be provided in writing to the Contracting Officer no later than 5 days after contract award [Deliverable 4]. The Contract Manager and Alternate Contract Manager shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract.

Qualifications for all key personnel are listed below:

1.10 Identification of Contractor Employees: All Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties must identify themselves, to include proper marking of signature blocks in correspondence, to avoid creating an impression in the minds of members of the public that they are Government officials. The Contractor shall ensure that all documents or reports, produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.12.1 Contractor workspace (staging site, on-site office, desk or work area, etc.) shall contain a sign signifying the space is occupied by Contractor employee(s) to ensure that Government employees and the public know that they are not Government employees. The proposed sign shall be submitted to the Contracting Officer via the COR for review and acceptance 30 calendar days after contract award [Deliverable 5]. Workspace sign location shall be coordinated with the COR. Contractor employees shall identify themselves by name and company affiliation when answering the telephone, presenting briefings, conducting or attending meetings, and seminars. All Contractor correspondence (written, facsimile, and email display) shall include their company name. Requirements for Contractor vehicles is addressed under Part 4 paragraph 4.4.

1.12.2 Contractor Identification Badges: Contractor personnel shall be easily identifiable through the display of badges IAW Contractor Identification (AE Reg. 27-715). (For services at Child, Youth, and School Services where children are present, recommend personnel wear identification when children are present.)

1.13 The Government has unlimited rights to all documents and materials produced under this contract. All documents and materials, to include the source codes of software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership and copyright belonging exclusively to the Government.

These documents and materials may not be u sed or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.14 Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. The Contractor and Contractor personnel, shall not divulge or release data or information developed, or obtained under performance of this PWS, except to authorized Government personnel or upon written approval of the Contracting Officer. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.15 Protection of Government and Contract Information: Per Public Use Notice of Limitations stated by Defense imagery Management operations Center and contained at www.dimoc.mil/resources/limitations/ , the Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any hard copy or digital marketing tools to include its company website.

1.16 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCI as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI 7 calendar days [Deliverable 6]. The Contractor’s OCI Mitigation Plan will be determined to be acceptable solely at the discretion of the Contracting Officer. In the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

http://www.dimoc.mil/resources/limitations/

1.17 Safety: The following provides information pertaining to Safety and Accident Prevention :

1.17.1 Safety Laws and Regulations: The Contractor shall comply with FAR 52.236-13, Accident Prevention (November 1991), the references contained therein (e.g. U.S. Army Corps of Engineers Safety and Health Requirements Manual (EM 385-1-1)).

The requirements under FAR 52.236-13 and specifically of the EM 385-1-1 include, but are not limited to the following:

(a) Before initiation of work at the job site, an Accident Prevention Plan, written by the Contractor for the specific work and hazards of the contract and implementing in detail the pertinent requirements of EM 385-1-1; will be reviewed for acceptance by designated Government personnel [Deliverable 7]. Specific requirements for development of the Accident Prevention Plan are found in 01.A and Appendix A of EM 385-1-1. EM 385-1-1 is available online at www.usace.army.mil.

(b) Before beginning each activity involving a type of work presenting hazards not experienced in previous project operations or where a new work crew or subcontractor is to perform work, activity hazard analysis (AHA) shall be prepared by the Contractor performing the work activity (See paragraph 01.a.09 of EM 385-1-1);

(c) The Contractor shall require subcontractors to submit their plan of operations showing methods they propose to use in accomplishing major phases of work;

(d) The Contractor shall discuss the plans in conferences convened by the Contracting Officer prior to starting work on each major phase of operation. Plans shall include all pertinent information such as layout of haul roads, access roads, storage areas, electrical distribution lines, methods of providing minimum exposure to overhead loads, and methods of access to work areas. The plan for accomplishing the initial work phase shall be submitted within fifteen

(15) calendar days after award of the contract [Deliverable 8]. Plans for subsequent major phases of work shall be submitted no later than fifteen (15) calendar days prior to initiation of work on each major phase; and

(e) In all areas where construction, demolition, alteration, building, or similar related activities take place, the Contractor shall have the following minimum personal protective clothing and equipment requirements in place for any person working on or visiting the site:

(i) Short sleeve shirt;

(ii) Long trousers;

(iii) Steel-toed safety boots; and

(iv) Hard hat.

1.17.1.1 In addition to other requirements for accident prevention specified in this contract, the Contractor shall comply with all Federal and State requirements governing safety and health protection on construction sites and other applicable occupational safety codes, conditions of the work described by the design, technical proposal, operational activities of the Government or others in the area of the work, identification of the coordinator, and implementation of all other accident http://www.usace.army.mil/ prevention provisions of this contract.

1.18 Required Training: The following provides information on training requirements.

1.18.1 Anti-Terrorism (AT) Level I Training: All Contractor employees, including subcontractor employees, who are employed under the contract, shall complete AT Level I Training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel [Deliverable 3]. Contractor personnel travelling overseas shall complete area of responsibility (AOR) specific AT awareness training for U.S. based Contractor employees and associated subcontractor employees. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR (or to the Contracting Officer, if a COR is not assigned) within 30 calendar days after completion of this training by all employees and subcontractor personnel. AT Level I awareness training is available at https://jkodirect.jten.mil. Contractor personnel shall complete refresher training every twelve (12) months except AOR specific AT Level I training which shall be completed as required by local AT policies

If training cannot be conducted on the website, the Contractor shall coordinate with the COR who will contact the local AT Officer at their assigned location for classroom training.

Contractor personnel completing training in the classroom will receive a certificate or the training attendance roster signed by the AT Officer. Verification of the training shall be provided to the COR within 7 calendar days after completion of the training.

1.18.2 OPSEC Training: All Contractor employees, including subcontractors, shall complete Level I OPSEC training within 30 calendar days of employment under this contract Verification of the training shall be provided to the COR within 7 calendar days after completion of the training [Deliverable 3]. OPSEC Level I training is available at http://www.cdse.edu/catalog/elearning/GS130.html. Contractor personnel must complete refresher training every 12 months Verification of the training shall be provided to the COR within 7 calendar days after completion of the training.

If training cannot be conducted on the website, the Contractor shall coordinate with the COR, who will contact the local OPSEC Officer at their assigned location for classroom training.

Contractor personnel completing training in the classroom will receive a certificate or the training attendance roster signed by the OPSEC Officer. Verification of the training shall be provided to the COR within 7 calendar days after completion of the training.

1.18.3 iWATCH Training: The Contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days after the contract is awarded and within 30 calendar days after new employees commence contract performance, with the results reported to the COR within 7 calendar days after the contract is awarded and within 7 calendar days after new employees commence contract performance [Deliverable 3]. Verification of the training shall be provided to the COR within 7 calendar days after completion of the training. Training slides can be found on the Army OneSource we site:

http://www.myarmyonesource.com/familyprogramsandservices/iwatchprogram/default.aspx

1.18.4 Information Assurance (IA) Training

https://jkodirect.jten.mil/ http://www.cdse.edu/catalog/elearning/GS130.html http://www.myarmyonesource.com/familyprogramsandservices/iwatchprogram/default.aspx

1.18.4.1 All Contractor employees, including subcontractors, requiring access to Government information systems shall complete the DoD IA Cyber Awareness Training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel [Deliverable 3]. Verification of the training shall be provided to the COR within 7 calendar days after completion of the training.

1.18.4.2 All Contractor employees, including subcontractors, working information technology (IT)/IA functions shall comply with DoD and Army training requirements per Information Assurance Training Certification and Workforce Management DoD Directive (DoDD) 8570.01, Information Assurance Workforce Improvement Program DoD 8570.01-M, and InformationAssurance AR 25-2 within thirty (30) calendar days of employment. Training is available at https://ia.signal.army.mil/DoDIAA/default.asp .

1.18.5 Personally Identifiable Information (PII): Contractor employees, including subcontractors, performing services under this contract with access to PII and Government information shall complete “Identifying and Safeguarding PII” within 30 calendar days of employment[Deliverable 3]. Contractor personnel shall complete refresher training every twelve

(12) months from initial completion. The Contractor shall provide the COR a copy of the training certificates for its employees no later than five (5) days after completion. Training is available at http://iatraining.disa.mil/eta/piiv2/launchPage.html https://ia.signal.army.mil/DoDIAA/default.asp http://iatraining.disa.mil/eta/piiv2/launchPage.html

PART 2

DEFINITIONS & ACRONYMS

2. Definitions and Acronyms

2.1 Definitions: Although not inclusive of every term used within this PWS, the following provides a list of definitions used throughout this PWS and commonly used in the acquisition field.

Contracting Officer – means a person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Contracting Officer's Representative (COR) – As defined in DFARS 202.101, means an individual designated and authorized in writing by the Contracting Officer to perform specific technical or administrative functions. DoD Instruction (DoDI) 5000.72, Part II Definitions states the following when defining a COR: “Defined in subpart 202.101 of Reference (f). Any individual delegated responsibilities pursuant to subpart 1.602-2 of Reference (e), regardless of local terminology, must be certified in accordance with this instruction. For example, local terminology can be COR, Contracting Officer’s technical representative, technical point of contact, technical representative, alternate COR, administrative COR, assistant COR, line item manager, task order manager, quality assurance personnel, quality assurance evaluator, or COR management.” In addition, Army Regulation 70-13, Chapter 2, paragraph 2-2g, states, in part, the following when providing other surveillance support personnel to assist the COR when needed, “…These other surveillance support personnel may serve as on-site representatives of the COR in performance of actual contract surveillance if they meet all COR requirements and have been appointed by the Contracting Officer as alternate CORs.”

Contractor – means a supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contractor-acquired Property - means property acquired, fabricated, or otherwise provided by the Contractor for performing a contract and to which the Government has title.

Day – means, unless otherwise specified, a calendar day.

Defective Service – means a service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable – means anything that can be physically delivered, but may include non -manufactured things such as meeting minutes or reports.

Government-furnished Property – As reflected in FAR 52.245-1, Government-furnished Property “means property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract

Government Property - means all property owned or leased by the Government.Government property includes both Government-furnishedand Contractor-acquired property. Government property includes material, equipment, special tooling, special test equipment, and real property. Government property does not include intellectual property and software.

Property Administrator - means an authorized representative of the Contracting Officer appointed in accordance with agency procedures, responsible for administering the contract requirements and obligations relating to Government property in the possession of a Contractor.

High Level Objective (HLO) – means a key overarching result-based objective for a project necessary to achieve the project’s vision. HLOs are similar to Level 2 in a Work Breakdown Structure. Each HLO may contain several statements to flesh out the areas necessary to meet the objective.

Physical Security – means that part of security concerned with physical measures designed to safeguard personnel; to prevent unauthorized access to equipment, installations, material, and documents; and to safeguard against espionage, sabotage, damage, and theft.

Quality Assurance – (or Government contract quality assurance) means the various functions, including, inspection, performed by the Government to determine whether a Contractor has fulfilled the contract obligations pertaining to quality and quantity.

Quality Assurance Surveillance Plan (QASP) – means the key Government-developed surveillance process document, and is applied to Performance-Based Service Contracting (PBSC). The QASP is used for managing Contractor performance assessment by ensuring that systematic quality assurance methods validate that Contractor quality control efforts are timely, effective, and are delivering the results specified in the contract or task order. The QASP directly corresponds to the performance objectives and standards (i.e., quality, quantity, timeliness) specified in the Performance Work Statement (PWS). It provides specific details on how the Government will survey, observe, test, sample, evaluate, and document Contractor performance results to determine if the Contractor has met the required standards for each objective in the PWS. The QASP, with very few if any exceptions, is an internal to Government document.

Quality Control – means all necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Statement – means the specific results-based activities required to satisfy HLOs. A statement contains a result, the context of the statement, and the required action(s). Statements focus on “what” is to be accomplished; however they are not prescriptive in describing “how” the outcome is to be achieved. Each HLO may have several statements to flesh out the areas necessary to meet the objective. Statements are similar to Level 3 in a Work Breakdown Structure.

Subcontractor – means one that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Work Day - The number of hours per day the Contractor provides services in accordance with the contract.

Work Week - Monday through Friday, unless otherwise specified.

2.2 Acronyms: Although not inclusive of every term used within this PWS, or that may be included in an acquisition , the following provides a list of acronyms commonly used in the acquisition field.

ACOR Alternate Contracting Officer's Representative AE Army in Europe ATO Authority to Operate AFARS Army Federal Acquisition Regulation Supplement AHA Activity Hazard Analysis AOR Area of Responsibility AR Army Regulation AT Anti-terrorism ATCTS Army Training Certification Tracking System CAC Common Access Card CCE Contracting Center of Excellence CFE Conventional Forces Europe CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer’s Representative COTS Commercial-Off-the-Shelf CR Card Reader CRKP Card Reader Keypad DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DoD Department of Defense FAR Federal Acquisition Regulation FRG Federal Republic of Germany GFP Government Furnished Property

HLO High Level Objective ICIDS Integrated Commercial Intrusion Detection System IAC Installation Access Control IACO Installation Access Control Office ICIDS Integrated Commercial Intrusion Detection System ID Identification IDS Intrusion Detection System PIM Panel Interface Module POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program RA Requiring Activity RADC Regional Access Control Device RMF Risk Management Framework RSM Remote Security Module SAP Special Access Program SCIF Sensitive Compartmented Information Facility SMS Security Management System TE Technical Exhibit

PART 3

GOVERNMENT PROPERTY (GP) AND SERVICES

3. Government Property and Services: N/A

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. Contractor Furnished Property and Services

4.1 General: The Contractor shall furnish all equipment, software, materials, tools, and labor required to complete the installations as explicitly detailed in Attachment A: Bill of Materials, including but not limited to workstation hardware, RADCs, PIMs, Entrostar panels, and SCIF-compliant locks that are not listed under Section 3.

4.2 Secret Facility Clearance: The Contractor shall possess and maintain a facility clearance from the Defense Security Service IAW DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM) and AR 380-49, Industrial Security Program. The Contractor’s employees, performing work in support of this contract shall have been granted a Top Secret/SCI from the Defense Industrial Security Clearance Office. The Facility Security Clearance must match the highest security clearance required for personnel. The DoD Contract Security Classification Specification (DD 254) is provided as an attachment in the basic contract.

4.3 Materials: N/A

4.4 Background Checks): The Contractor shall provide Background Checks in accordance with this PWS and as determined by the Government.

PART 5

SPECIFIC TASKS

5.1 Basic Services: The Contractor shall provide services for the badging and monitoring station, zone realignment, dedicated SCIF workstation, STO Vault room, backup system review, SCIF perimeter doors, and other additional tasks.

5.2 Tasks: Tasks consist of the following:

5.2.1 Badging and Monitoring Station (Collateral System): The contractor shall install a new badging/monitoring workstation in the HQ Badging Office to control collateral ACS/IDS zones separate from the SCIF. The system shall manage approximately 9 IDS monitor-only doors, 16 controlled doors (replacing maglocks, including double-door combinations), 7 IDS zones, and supporting 5 RADC and 10 Entrostar panels centrally across three floors.

5.2.2 Zone Realignment: The contractor shall disconnect Buildings 611 and 728A IDS from the SCIF and reconnect them to the collateral ICIDS system via fiber routed to Comm Room 2027. Programming shall be completed to transfer the IDS zones to be monitored by the collateral ICIDS upgrade.

5.2.3 Dedicated SCIF Workstation (Division HQs's SCIF): The contractor shall install a dedicated SCIF-specific workstation to administer all SCIF-monitored zones. The contractor shall replace eight (8) PIMs, one (1) entry keypad, one (1) card reader at the SCIF entry door, and the RADC in the associated Comm Room. The contractor shall remove the maglock at the SCIF entry and retrofit the door with compliant electric locking hardware.

5.2.4 STO Vault Room 2020: The contractor shall upgrade this single-zone SCIF, to include the replacement of one (1) PIM, one (1) entry keypad, CRKPs, RADC, and SCIF RSM, ensuring standardization and compliance with ICIDS SCIF design standards.

5.2.5 Backup System Review: The contractor shall review and update DAQ licensing for two

(2) backup workstations to ensure redundancy, validity, and continued secure system operation.

5.2.6 SCIF Perimeter Doors: The contractor shall perform specialized locksmith work on all SCIF exterior doors to adapt existing doors and frames to compliant electric locking hardware.

5.3 Additional Tasks: Other SCIFs and Gates:

5.3.1 Building 254 (Foundry SCIF) Upgrade: The contractor shall replace current maglocks with SCIF-compliant electric locks. Additional work shall include replacement of entry/exit card readers, installation of a new RADC, sensors, and a SCIF-specific workstation. All communications back to the system controller shall be verified and validated.

5.3.2 Building 613 SCIF Upgrade: The contractor shall replace entry and exit card readers, retrofit all SCIF doors with electric locking hardware, install new IDS monitoring sensors, and install a SCIF RADC, sensor suite, and workstation.

5.3.3 Building 8433 SCIF Upgrade: The contractor shall replace entry and exit card readers, retrofit all SCIF doors with electric locking hardware, install new IDS monitoring sensors, and install a SCIF RADC, sensor suite, and workstation.

5.3.4 4A - Gate Pedestal Card Reader Replacement (Per Building): The contractor shall replace vehicle gate and pedestrian gate card readers, pedestals, and cabling as necessary to verify and correct RADC communication links and functionality. The contractor shall install new weather shields over the pedestal card readers to ensure environmental protection and performance. Existing foundations shall be re-used for pedestal installation. This work applies to Building 1 HQ and Building 8433.

5.3.5 4B - Vehicle Sliding Gate & Operator Installation (Per Building): The contractor shall remove existing swing gates and individual swing gate operators. The contractor shall install a new 24-foot sliding chain-link vehicle gate, gate operator, and system controls. The contractor shall install entry and exit safety ground loops for closing the gate after entry/exit of a vehicle is permitted. This work applies to Building 1 HQ and Building 8433.

5.4 Out of Scope Items:

5.4.1 Replacement of the Main Lobby entry doors and the removal of the optical turnstiles located in the HQ are completely excluded from this scope of work and will be performed under separate government-funded initiatives. Other deficiencies in the Government's physical space will only be addressed as they relate to Division HQ's SCIF and the SCIFs included in this upgrade.

PART 6

APPLICABLE PUBLICATIONS

6. Applicable Publications (Current Editions): The following publications, manuals, regulations, etc. are mentioned in this PWS and are listed below.

6.1.1 Department Of Defense Contract Security Classification Specification (DD Form 254)

6.1.2 Department of Defense Security Agreement (DD Form 441)

6.1.3 National Industrial Security Program Operating Manual (DoD 5220.22-M)

6.1.4 Installation Access Control (AE Reg 190-16)

6.1.5 The Army Physical Security Program (AR 190-13)

6.1.6 Contractor Identification (AE Reg 27-715)

6.1.7 U.S. Army Corps of Engineers Safety and Health Requirements Manual (EM 385-1-1)

6.1.8 Information Assurance Workforce Improvement Program (DoD 8570-M)

6.1.9 Information Assurance Training Certification and Workforce Management Directive (DoDD 8570.01)

6.1.10 Information Assurance (AR 25-2)

6.1.11 Policies and Procedures for Property Accountability (AR 735-5)

6.1.12 ICD 705 – SCIF Physical and Technical Security Standards

6.1.13 UL 2050 – National Industrial Security Systems

6.1.14 AR 25-50 – Preparing and Managing Correspondence (Military Time & Active Voice

Standards)

PART 7

ATTACHMENT AND TECHNICAL EXHIBIT LISTING

7. Attachment and Technical Exhibit List

7.1 Technical Exhibit A – Performance Requirements Summary

7.2 Technical Exhibit B – Deliverables Schedule

7.3 Attachment 1 – Bill of Materials

TECHNICAL EXHIBIT A

Performance Requirements Summary (PRS)

Performance Objective

Standard Performance Threshold

Method of Surveillance

HQ Building 1 Installation

Complete all base installation and programming tasks per PWS Section 5.1.

100% compliance with ICD 705 and manufacturer guidelines.

100% COR

Inspection and system validation.

Option SCIF Upgrades

Complete installation and programming tasks for Buildings 254, 613, and 8433.

100% compliance with ICD 705 and manufacturer guidelines.

100% COR

Inspection and system validation.

Deliverables & Reporting

Submit closeout documentation, drawings, and testing reports within 5 business days of completion.

95% of deliverables submitted on time and accurate.

COR review and acceptance of reports.

TECHNICAL EXHIBIT B

DELIVERABLES SCHEDULE

Deliverable Frequency # of copies Format Submit To

Quality Control Plan (Paragraph 1.5.1)

Within 30 days after contract award

1 Electronic delivery via email using PDF format

To the Contracting Officer via the COR

Installation Pass Log…