612674404_Attachment 1_PWS.pdf

PERFORMANCE WORK STATEMENT (PWS)

Award/Mod Effective Version Date Award TBD

Contract Number: TBD Contractor Name TBD Tracking Number: 612674404 Follow-on to Previous Contract Number HC104721P4000

1. Contracting Officer’s Representative (COR).

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator See DITCO Additional Text G1 - Points of Contact

2. Contract Title.

Building Automation System (BAS) maintenance and associated services contract for the Defense Information Systems Agency (DISA) Headquarters (HQ) facilities located at Ft George G Meade (FGGM), Maryland (MD).

3. Background.

In 2011 DISA and over 4,300 of its military, civilian, and embedded contractor personnel relocated from leased government-owned offices and leased facilities throughout Virginia to FGGM, in Anne Arundel County, MD. As a result of the transition, DISA employees now oversee the management of a very complex building campus, including the operation and maintenance of a Central Utility Plant (CUP) which is made up of chillers, boilers, cooling towers, heat exchangers, and water side economizers, etc. The BAS, a Lon Works based computer system, monitors the building’s critical systems such as lighting; heating, ventilation, and air conditioning (HVAC); and the systems that make up the CUP. The purpose of this BAS maintenance and associated services contract is to sustain the DISA HQ BAS by maintaining, testing, calibrating, and repairing the system components; adjusting device programming; and maintaining the software which monitors all the facilities systems within DISA’s HQ facility at

FGGM.

4. Objectives:

The DISA J4 Facilities, Engineering, and Installation Services Branch is looking to acquire BAS calibration, repair, testing and software maintenance services for the currently installed BAS at the DISA HQ Complex. J4 is responsible for providing highly reliable and maintainable facilities along with the various systems supporting the facility which directly supports DISA’s critical mission. Due to the complex and critical nature of the DISA HQ buildings, the BAS is a key tool for J4 and the Base Operating Support (BOS) contractor to monitor the building’s functions.

5. Scope.

The contractor shall provide full-time on-site maintenance, repair, and support services to the BAS so that all monitored equipment functions properly. All routine work shall be performed during regular working hours.

Regular working hours consist of a nine (9) hour period between 7:30am - 4:30pm local time. No routine work shall be scheduled and/or planned to be done on Saturdays, Sundays, or holidays unless approved by the COR. If any additional costs are involved, the work schedule must be approved by the Contracting Officer. Systems monitored and controlled by the BAS include:

• Boiler plant.

• Chilled water plant with associated cooling towers.

• Constant and variable speed fans and pumps.

• Variable frequency drives.

• Air and water economizers.

• Air distribution and ventilation systems, including, but not limited to, air handlers, computer room air conditioning units, and terminal devices.

• Exhaust fan systems.

• Fan coils with heating and/or cooling.

• Gas fired unit heaters.

• Lighting systems and controls.

• Power systems including power conditioners.

• Emergency power systems include transfer devices, backup generators, fuel delivery system, and uninterruptable power supply system.

• Operating schedules.

• Utility Meters.

6. Performance Requirements.

6.1 Task 1 - Preventative Maintenance (PM) of building controls systems.

The Contractor shall provide expert technicians trained on the LonWorks protocol which networks direct digital controls for HVAC system control using Schneider-Electric TAC I/A Series® MicroNet controllers, lighting control, and power monitoring using Eaton controllers and other Modbus devices. The technicians must have three years’ working experience, be certified in the use of Niagara N4 Framework and TAC I/A Series® Workplace Tech Tool 5.7 software and have training in the BAS software versions in use and automated control system operations.

Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting: Contractor will require facilities access to DISA headquarters facilities to support meetings & services with higher level strategic planning purposes with Senior Vice President level person supporting J4. Additionally, the Contractor will require NIPR access. The technicians must be capable of troubleshooting, calibrating, repairing, and/or coordinating repair of field and panel mounted devices along with associated control algorithms for HVAC, building environmental, and power automation systems. The contractor shall maintain the building controls systems by utilizing current BAS software and controls. The contractor shall perform any routine maintenance specified by the manufacturer and install/de-install control system parts and components as required to maintain the BAS in fully operational condition.

PM shall be performed in accordance with the Systems Operations and Maintenance Manuals (SOMMs) which include annual verification of proper operation of:

• Sensors

• Actuators

• Controllers

• Valves

• Dampers

• Panels/Devices

• Calibration of each Analog input.

• Confirmation of operation for each Analog Output.

• Confirmation of operation for each Digital Input.

• Confirmation of operation for each Digital Output.

• Point-to-point checks and reports on each field device.

• Software updates.

• Firmware updates.

The BAS control points and sequences of operation are provided in the technical library which includes the SOMMs, as-built drawings, and equipment lists. The applicable sections of the technical library will be provided to the contractor in electronic format after contract award. The contractor shall update this information as changes are made to the BAS. This information may be reviewed on site at DISA HQ during the proposal period by appointment. Contact the COR to make an appointment at least two working days in advance of the desired appointment date.

6.2 Task 2 – Adjustment of BAS system’s programming and settings.

Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting: Contractor will require facilities access to DISA headquarters facilities to support meetings & services with higher level strategic planning purposes with Senior Vice President level person supporting J4. Additionally, the Contractor will require NIPR access. The Contractor shall adjust parameters and set points for changing environmental conditions, input data for added systems and components, update changes to existing data fields, perform programming of software and firmware updates as needed to maintain or improve system performance, and perform diagnostic testing and analysis. The contractor shall allow the government full unrestricted access to both front end and back-end programming.

6.3 Task 3 – Coordination with the Base Operating Support Contractor (BOS) and J4.

Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting: The Contractor will be responsible for attending coordination meetings, working with the Base Operating Support Contractor, and J4 to identify issues involving the BAS system. The contractor shall make recommendations on the proper BAS operation. The contractor will have access to maintenance shutdown plans which are cleared at the SECRET level. The contractor shall respond to the requests made by J4 and by the BOS contractor for investigation and repair of any aspect of the control system within two working days. Historical data shows that approximately 200 of these requests have been made each year. The level of liability for the cost of materials for each individual call is $100.00. All work which results in a projected material cost in excess of $100.00 will be negotiated and awarded via contract modification under a line item in support of task 4, Realignments, Additions, and Modifications to Existing BAS and Repair Parts.

6.4 Task 4 - Realignments, Additions and Modifications to Existing BAS and Repair Parts.

In the event of new system requirements (i.e., additional BAS hardware, modifications to the BAS programming due to building alterations, space reallocation, changed occupancy, or upgraded software) defined by the Government, the Contractor shall prepare estimates of hardware/software cost and hours to complete. The estimates shall also include line-item breakdown or material cost and labor rates. Labor costs and material costs should have a markup of no more than 5% and 3% respectively. The KO shall approve all upgrade and modification requirements via modification to the contract.

6.4 Task 4.1- CO2 Sensor Replacement. DISA HQ J4 has been placing overrides to the BAS system to overcome the failing sensors and their lack of providing reliable information for the BAS system to maintain good control over the air handler units. DISA BAS contractor needs to replace the interior CO2 sensors in Acquisitions and Operations building sensors. All of these sensors have reached their end-of-life expectancy and are now presenting issues for the BAS system to operate correctly.

6.4 Task 4.2- Additional Ports for Calibration of Transducers. DISA HQ J4 has been placing overrides to the BAS system to overcome the lack of calibration required to maintain good control over the chilled and hot water systems. DISA HQ BAS Contractor will install test ports in six areas within the piping system.

These testing ports will allow the technician to calibrate the water flow through the entire system within the complex and therefore will provide better control of the HVAC system and reduce labor and energy costs.

6.5 Task 5 - Unscheduled (Emergency) Maintenance & Repair (24x7).

Emergency Maintenance Services shall include all troubleshooting and repair of all covered equipment. Emergency services shall be available to the Government 24 hours per day, 7 days per week, with an eight (8)-hour response time by trained, proficient operations and repair Contractor personnel (report to site or as directed by site representative).

6.5.1- Unscheduled (Emergency) calls shall be worked continuously “around the clock” until completed.

The contractor may have access to maintenance shutdown plans which are cleared at the SECRET level.

Estimated completion date/times and progress reports shall be provided to the COR at least three times per workday. Parts required in support of emergency service calls shall be obtained in the most expedient and cost-effective manner available. Emergency service calls can occur at any time, on any day.

6.5.2- A Service report on tasks performed and any findings relating to equipment condition and/or recommendations to improve the condition of the system shall be provided to the COR within 24 hours after completion of work.

7. Deliverables:

PWS

Task#

Deliverable Title Format Due Date Distribution/Copies Frequency and Remarks

6.1- 6.3

Weekly activity and status reports

Contractor- Determined Format

By the second working day of the following week

E-mail to COR Monthly

6.1 Monthly PM

records

PDF By the fifth working day of the following month

E-mail to the COR Monthly

6.2 BAS systems

reports as may be requested by the COR

Contractor-

Within five days of COR request

E-mail to COR As requested

6.4 Service Report Contractor-

Not more than 15 calendar days following the completion.

E-mail to COR As required

6.5 Service Report Contractor-

Within 24 hours after completion of work.

E-mail to COR As required

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary Technical POC. All copies can be emailed.

8. Performance Standards.

Performance Standard Acceptable Quality Level (AQL) Method of Surveillance Task 1 – Preventive Maintenance

Performance occurs with no required re-performance or re-work at least 95% of the time. Problems that occur do not disrupt the facility’s regular operations and are resolved in a satisfactory manner.

Routine inspection of deliverable products and services.

Task 2 – Adjustment of BAS system’s programming and settings.

Materials contain required information and are delivered on time at least 95% of the time.

Revisions that occur do not disrupt the facility’s regular operations and are resolved in a satisfactory manner.

Routine inspection of the materials.

Task 3 – Coordination with the Base Operating Support Contractor

Meetings are attended by a knowledgeable technician on time at least 95% of the time.

Routine inspection of the meeting minutes from the BOS contractor.

Task 4 - Realignments, Additions and Modifications to Existing BAS

Performance occurs with no required re-performance or re-work at least 95% of the time. Problems

Inspection of deliverable products and services.

that occur do not disrupt the facility’s regular operations and are resolved in a satisfactory manner.

Task 5 - Unscheduled (Emergency) Maintenance & Repair (24x7

Emergency conditions are mitigated each occurrence.

Inspection of deliverable products and services.

Period of Performance:

Base period is from: 02MAY2026 to 01NOV2026 One six-month extension, if exercised per FAR 52.217-8 dates: from 02NOV2026 to 01MAY2027

9. Incentives.

This is a Firm-Fixed Price (FFP) contract.

10. Place of Performance.

Meetings and Survey’s will be conducted within a DISA facility at DISA’s Headquarters (6910 Cooper Avenue, Ft Meade, MD 20755) facility in Ft Meade, Maryland. All Full-time work will be performed partially on site at the DISA facility and off site at the contractor’s office.

*Unclassified work may be performed at the contractor’s locations.

*Classified or unclassified work may be performed at the Government locations.

Government locations: DISA’s Headquarters, 6910 Cooper Avenue, Ft Meade, MD 20755

11. Security Requirements.

This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this PWS must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement

b. DISA Instruction 240-240-01, External Peripheral Devices Authorized for Network Connectivity

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-34, Controlled Unclassified Information (CUI)

e. DISA Instruction 240-110-36, Personnel Security

f. DISA Instruction 240-110-38, Industrial Security

g. DISA Instruction 240-110-43, Counterintelligence

h. DISA Instruction 240-110-43, Insider Threat Program

i. DISA Instruction 630-230-19, Cybersecurity

j. DoD Manual 5200.01, Vol. 1 and 3, DoD Information Security Program, 17 January 2025

k. DoD Manual 5200.01, Vol. 2, DoD Information Security Program, 28 July 2020

l. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

m. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program (PSP), 3 April 2017, Change 1, 29 October 2020

n. 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), 24 February 2021

o. DoD Directive 5240.06, Counterintelligence Awareness and Reporting (CIAR), 17 May 2011, Change 3, 31 August 2020

p. DoD Instruction O-5240.24, Counterintelligence (CI) Activities Supporting Research, Development, and

Acquisition (RDA), 8 June 2011, Change 2, 15 July 2020

q. DoD Instruction 5205.16, “The DoD Insider Threat Program,” December 20, 2024

r. DoD Instruction 5230.24, Distribution Statements for DoD Technical Information, 10 January 2023

s. DoD Instruction 8510.01, Risk Management Framework for DoD Systems, 19 July 2022

t. DoD Manuel 5400.07, DoD Freedom of Information Act (FOIA) Program, 25 January 2017

u. Security Executive Agent Directive 3 (SEAD 3) Reporting Requirements for Personnel with Access to

Classified Information or Who Hold Sensitive Position, 12 June 2017

v. Security Executive Agent Directive 4 (SEAD 4), National Security Adjudicative Guidelines, 8 June 2017

11.1 Facility Security Clearance. The work to be performed under this contract/ task order is up to the Secret level.

Therefore, the company must have a final Secret Facility Clearance from the Defense Counterintelligence and Security Agency Facility.

11.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by

DCSA.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be United States citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

PWS Task / Subtask

Number of Security Clearance Levels Access Justification for Access to Classified

6.1 Task 1 Secret NIPRNET Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting:

Contractor will require facilities access to DISA headquarters facilities to support meetings & services with higher level strategic planning purposes with Senior Vice President level person supporting J4.

Additionally, the Contractor will require NIPR access. The technicians must be capable of troubleshooting, calibrating, repairing, and/or coordinating repair of field and panel mounted devices along with associated control algorithms for HVAC, building environmental, and power automation systems. The contractor shall maintain the building controls systems by utilizing current BAS software and controls.

The contractor shall perform any routine maintenance specified by the manufacturer and install/de-install control system parts and components as required to maintain the BAS in fully operational condition.

6.2 Task 2 Secret NIPRNET Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting: Contractor will require facilities access to DISA headquarters facilities to support meetings & services with higher level strategic planning purposes with Senior Vice President level person supporting J4. Additionally, the Contractor will require NIPR access. The Contractor shall adjust parameters and set points for changing environmental conditions, input data for added systems and components, update changes to existing data fields, perform programming of software and firmware updates as needed to maintain or improve system performance, and perform diagnostic testing and analysis.

The contractor shall allow the government full unrestricted access to both front end and back-end programming.

6.3 Task 3 Secret NIPRNET Secret and NIPRNet access is required to support: Required for Contractor Key Personnel, who require unescorted access in secure Government facilities. Key personnel shall have final U.S. SECRET clearances on the contract signature date, which will prevent possible spillage when conducting:

The Contractor will be responsible for attending coordination meetings, working with the Base Operating Support Contractor, and J4 to identify issues involving the BAS system. The contractor shall make recommendations on the proper BAS operation. The contractor will have access to maintenance shutdown plans which are cleared at the SECRET level.

11.3 Investigation Requirements.

All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for a current PR.

11.3.1 The contractor is required to have personnel cleared with an interim or final Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel should also have interim or final clearance Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization .

Visit requests shall be processed and verified through the DISS to the Security Management Office (SMO) DKABAA10. DISS visits for contracts/orders are identified as “Other” or “Temporary Additional Duty (TAD)/Temporary Duty (TDY)” and will include the Contract/Order Number of the contract/order in the Additional

Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected portable document format file (.pdf) to the COR/ACOR specified in PWS/SOW Section 1.0.

11.4.1 VAR Package. VAR Centers must receive VAR packages from the Security Manager (via email and require pre-approval from the assigned DISA COR) at a minimum of five business days in advance of the initial report date or renewal. For option years, VARs should be renewed 30-90 days prior to the expiration date unless modified sooner for changes such as name, COR/sponsor, contract modification, etc. As an option, a VAR can be approved for up to a maximum of three (3) years within the POP for contractors. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package (DISA Field Sites may have site specific VAR requirements):

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. PWS/SOW/Sub Memo

4. DISS verification of Visit Authorization by Security Manager

5. (Optional: see NOTE below) Contractor VAL signed by the Contractor Facility Security Officer (FSO)

NOTE: If DISS is not available, the VAL must contain the following information on company letterhead:

• Company name, address, telephone number, facility security clearance

• Commercial and Government Entity Code (CAGE CODE)

• Contract/Order Number

• Name, Social Security Number (SSN), date and place of birth, and citizenship of the employee intending to visit, email address, and phone number

• Certification of personnel security clearance and any special access authorizations required for the visit

(type of investigation & date and adjudication date & agency)

• Name of COR/Alt COR

• Dates or period the VAL is to be valid (i.e., Start date / End date)

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the PWS/TO/Sub for all employees leaving the contract/task order/subcontract.

11.4.2.1 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is to identify contractor personnel removed for security related issues in case of a return to DISA without appropriate vetting.. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology

Other actions:

• Incidents involving violence in the workplace or harassment.

• Misuse of time.

• Inspector General or General Counsel and related inquiries.

• Failure to comply with security policies and procedures.

• Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead:

• Company name, address, telephone number, facility security clearance

• CAGE CODE

• Contract/Order Number

• Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

• Date contractor Common Access Card (CAC) was collected

• Name of COR/Alt COR

• Termination Date

• Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied.*

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at the following:

Defense Information Systems Agency Defense Information Systems Agency ATTN: J-16, Industrial Security ATTN: J-16, Personnel Security Command Building Command Building 6910 Cooper Ave. 6910 Cooper Ave.

Fort Meade, MD 20755-7088 Fort Meade, MD 20755-7088 disa.meade.j1.mbx.mp6-industrial-security@mail.mil disa.meade.j-1.list.mp6-personnel-security@mail.mil

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

(Fill-in the section below)

Name: Tyrone Hurley Phone Number: 667-891-6220 E-mail: Tyrone.S.Hurley.civ@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements.

Initial and periodic safety and security training and briefings will be provided by Government security personnel.

Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is mailto:disa.meade.j1.mbx.mp6-industrial-security@mail.mil mailto:disa.meade.j-1.list.mp6-personnel-security@mail.mil not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke access to DISA facilities and networks from contractor personnel who violate one or more of the National Security Adjudicative Guidelines, harassment, insider threat, counterintelligence, or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility.

Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government and/or contractor facility. Contractor personnel will generate or handle documents that contain Proprietary, Contract Sensitive, or similarly designated information at the Government and/or contractor facility. Contractor personnel will have access to, generate, and handle classified material up to SECRET level only at the Government Location (Ref: Block 8 Place of Performance on DD254) and listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government.

The contractor shall comply with the provisions of 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)” for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

11.6.8 Foreign Travel Requirements: DISA Contractors are required to submit their official and unofficial foreign travel and foreign contacts via the Corporate Management Information Systems (CMIS) which may require a dual reporting requirement in accordance with DISA Instruction 240-110-35; DISA Instruction 240-110-43; Security Executive Agent Directive 3 (SEAD 3) Reporting Requirements for Personnel with Access to Classified Information or Who Hold a Sensitive Position.

11.6.9 Mandatory Security Training. All DISA Contractors are required to complete the DoD initial and annual security training for the following in accordance with (IAW) 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM):

• Security Awareness

• Level I Antiterrorism Awareness

• Derivative Classification

• Controlled Unclassified Information (CUI)

• Operational Security (OPSEC) Awareness for Military Members, DoD Employees, and Contractors

• DISA Counterintelligence and Awareness Reporting (CIAR) training IAW DISA Instruction 240-110-43 Counterintelligence; DoDD 5240.06 Counterintelligence Awareness and Reporting (CIAR); and DoDI O-

5240.24 Counterintelligence (CI) Activities Supporting Research, Development, and Acquisition (RDA).

• DISA Insider Threat Awareness: Contractors supporting DISA are required to complete the DISA Annual Insider Threat Awareness Training through the DISA Virtual Campus IAW the standards in DoD Instruction 5205.16, “The DoD Insider Threat Program,” December 20, 2024, regardless of insider threat awareness training provided by their employer.

11.6.9.1 Contractors supporting DISA onsite are required to complete the DoD initial or annual training through the DISA mandatory training system.

11.6.9.2 Contractors supporting DISA offsite are required to meet the DoD initial or annual training requirement through their employers who are to provide this training and maintain training documentation. The contractor supervisor needs to certify in writing and email completion certificates to the COR and DISA Security Manager that off-site contractors completed the training before receiving credit. The DISA Security Manager will update CMIS records, if available.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

The Government will provide the current BAS information as required per task. The government will provide one laptop with workplace tec. The government will provide a desktop computer connected to the BAS system with Niagara AX Framework software.

13. Other Pertinent Information or Special Considerations.

Contractor Abilities. Must have at least three (3) years of experience in BAS with a Lon Works based network system using Schneider-Electric TAC controllers.

Past Performance Capabilities. ………………………………………………………

14. Section 508 Accessibility Standards.

Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to, and use of, information and data that is comparable to people without disabilities.

Item that contains ICT: BAS Mx

BAS Mx E206 Hardware E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

15. Cybersecurity Maturity Model Certification (CMMC) Information processed, stored, or transmitted by the contractor or subcontractor on contractor information systems in performance of the contract, does not meet the standards for FCI or CUI. IAW 32 CFR 170.3(a)(1), CMMC Program requirements are not applicable.

In performance of the contract, the contractor or subcontractor will be operating Federal information systems on behalf of the Government. Information will not be processed, stored, or transmitted on contractor information systems, but solely Federal systems. IAW 32 CFR 170.3(b), CMMC Program requirements are not applicable.