832367482 PWS FINAL Attach 1.docx

PERFORMANCE WORK STATEMENT (PWS)

Award

Contract Number:

Task Order Number:

Contractor Name

Tracking Number:

1. Contracting Officer’s Representative (COR).

a. Primary COR. See Points of Contact in Contract Administration Data

b. Alternate COR. See Points of Contact in Contract Administration Data

c. Property Administrator : Ralph P. Delgado

2. Contract or Task Order Title. Joint Interoperability Test Command Sensitive Compartmented Information Facility Proximity Keypad Installation

3. Background. This effort is required because existing proximity keypads are failing and replacements are no longer manufactured nor is bench stock available through any approved source. In order to maintain DoD SCIF requirements as put forth in the DoD 5105.21 Sensitive Compartmented Information Facilities (SCIF) Administration Manual, the Intelligence Community Directive (ICD) 705 Technical Specification, and the Unified Facilities Criteria (UFC) 4-010-05, the SCIF must be equipped with approved Intrusion Detection System (IDS). As a tenant on Fort Huachuca (FH), JITC is required to utilize the FH Military Police as guard force response, and therefore must use the Army’s Integrated Commercial Intrusion Detection System (ICIDS). DAQ Electronics is the Army’s sole vendor and we must use their proprietary equipment and software. Without working proximity keypads, authorized personnel are not able to enter/exit JITC SCIFs unless a Special Security Representative (SSR) manually controls the doors with a key to allow entry/exit. This is not a practical solution and cannot be sustained as it prevents the SSR from carrying out their day-to-day duties. This is also not a best practice as two-part authorization is the standard (proximity badge and a unique PIN) for SCIF operations, and automatically tracks movement of personnel. This effort does not parallel efforts on any current or prior contracts, task orders, or other agency activities. Requested work does not relate to work already accomplished or ongoing through other vehicles.

4. Objectives: The objective of this contract is to have a certified DAQ Electronics Value Added Reseller (VAR) install six (6) proximity keypads, six (6) local controllers, and required software to replace the failing keypads.

5. Scope.

5.1 The contractor will provide a DAQ certified VAR, equipment, and software to replace six failing keypads at JITC SCIFs. After hardware and software installation, tThe equipment and software will be tested to ensure the alarm system is in good working order, confirming the integrity of the access control and intrusion detection system per DoD 5105.21 and ICD 705 security requirements.

6. Performance Requirements.

6.1 The contractor shall provide certified, qualified ICIDS DAQ technicians for the installation of a DAQ Security Management System (SMS) access control system with new local controllers, and will replace the old RF Logics card readers with JITC furnished HID RPK40-H card readers located at JITC, Fort Huachuca, AZ, in accordance with ICD705 and UFC 4-010-05.

The access control system devices will be 100% compatible and interoperable with the existing installation IDS (ICIDS DAQ SMS). The contractor shall provide all necessary hardware, software, engineering, and programming to implement the installation of the access control system that will be Federal Information Processing Standard-201 (FIPS-201) and Homeland Security Presidential Directive-12 (HSPD-12) compliant.

6.2 The contractor shall test system operation to ensure all security equipment functions properly.

6.3 Upon completion of installation, the contractor shall provide a signed post- installation system test report to Fort Huachuca Post Physical Security and to JITC.

T

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary COR.

Deliverables:

7. Performance Standards. The contractor shall utilize certified, qualified ICIDS technicians to provide install, reconfiguration, and test of a DAQ SMS access control systems with new local controllers, and replacing old RF Logics card readers with JITC furnished HID RPK40-H card readers for the access control system at JITC Fort Huachuca, AZ. The contractor shall provide and install new, six (6) DAQ ACB-07584-000 IAC-3 PCB assembly local controller panels. This upgrade of the current outdated ICIDS II to IV equipment will allow for the access control system to be Common Access Card (CAC) and Personal Identity Verification (PIV) compatible and FIPS-201 and HSPD-12 compliant with the capability to read both CAC and PIV cards. The new equipment will be capable of integrating with the current ICIDS-V DAQ SMS system.

The contractor shall install new components as well as test system to ensure system equipment is operational and access control equipment functions properly. The new access control equipment shall be 100% compatible and interoperable with the new ICIDS V DAQ SMS.. All components shall be selected to match existing equipment for the purpose of minimizing operational d maintenance costs. Installation effort will include pulling necessary wire, mounting components, and completing final terminations. The contractor shall conduct a quality assurance inspection, test the new security equipment, as well as provide test results and signed approval documentation to FH Post Physical Security and JITC Security Office. The contractor shall coordinate all task-related requests and communicate daily status of the installation with the designated POC. The contractor shall provide a minimum of 1 year warranty for parts and labor which will start at completion of testing by the contractor.

JITC will be responsible for ensuring security escorts are provided. JITC will also be responsible for ensuring timely access to any electrical or mechanical rooms that are necessary for the installation.

8. Incentive: None

9. Place of Performance. Work must be performed on site at a government facility, JITC, 2001 Brainard Rd, Fort Huachuca, AZ 85613.

Secondary Place of Performance – Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

10. Period of Performance. Expected one year after contract task awarded.

11. Security Requirements. The following security requirements shall apply to this effort.

References:

1. DISA End User Access Agreement, 11 February 2021

1. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

1. DISA Instruction 240-110-8, Information Security

1. DISA Instruction 240-110-36, Personnel Security

1. DISA Instruction 240-110-38, Industrial Security

1. DISA Instruction 240-110-43, Insider Threat Program

1. DISA Instruction 630-230-19, Cybersecurity

1. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

1. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

1. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

1. DoD 5220.22-M, National Industrial Security Program Operating Manual, February 2006 Incorporating Change 18 May 2016

1. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM”, 24 February 2021

1. DoD Manual 5105.21 Sensitive Compartmented Information Administrative Security Manual: Administration of Information and Information Systems Security, Vol. 2, 19 October 2012, incorporating Change 1, 05 April 2018

1. Intelligence Community Directive (ICD) 705 Technical Specification, 26 July 2021

1. Unified Facilities Criteria 4-010-05, 26 May 2023

11.1 Facility Security Clearance. N/A

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. Per the ICD 705, installation and testing within the U.S. shall be performed by U.S. companies using U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel do not require a security clearance, they will be escorted within JITC at all times, and their equipment will be inspected prior to introduction into SCIF.

11.3 Investigation Requirements. None

11.4 Visit Authorization Letters (VAL). Visit requests shall be processed and verified through the JITC Security Office either via Defense Information System for Security (DISS) to SMO DKARAA3, or if they do not possess a security clearance, through use of a Visit Authorization Letter (VAL).

The VAL must contain the following information on company letterhead

· Company name, address, telephone number

· CAGE CODE

· Facility Clearance if applicable

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

· Name of COR/Alt COR

· Dates or period the VAL is to be valid

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-1235 or via mail at:

Joint Interoperability Test Command 2001 Brainard Rd, Bldg 57305 Fort Huachuca, AZ 85613

JITC Security POC:

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 DISA retains the right to revoke contractor personnel access to DISA facilities who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government. The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.6 Contractor personnel will generate or handle documents/materials that contain For Official Use Only information and/or Controlled Unclassified Information (CUI) at the Government facility. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 3, DoD Information Security Program: Protection of Classified Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI). N/A

13. Other Pertinent Information or Special Considerations: N/A

a. Identification of Non-Disclosure Requirements. The contractor shall obtain and maintain Non-Disclosure Agreements (NDA) for each employee assigned to the JITC SCIF Proximity Keypad Installation. Initial NDAs shall be signed within one week of JITC SCIF Proximity Keypad Installation award, and NDAs shall be kept current through the entirety of the period of performance as employee turnover occurs. The contractor shall ensure that all employees assigned to the contract have executed NDAs on file as of the date of the Monthly NDA Status Report, which shall include names and NDA status of all current employees assigned to the contract.

Deliverable:

b. Packaging, Packing and Shipping Instructions. N/A

c. Inspection and Acceptance Criteria. N/A

d. Property Accountability. The contractor shall submit the Consolidated Product Listing for IGCE/RFQ/EPL/MI&RR (see below) in addition to complying with all requirements of DFARS 252.211-7003. See DITCO Additional Text H2, Requirement to Submit an Electronic Product List for additional information.

14. Section 508 Accessibility Standards. As obtained from the Accessibility Requirements Tool (ART), Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to, and use of, information and data that is comparable to people without disabilities.

Enclosure 4a, PWS Page 1 of 11 Pages 2015/Version 9

Enclosure 2c, PWS Page 21 of 36 Pages 20May2021/Version 15 image1.emf

NonDisclosure Agreement for DISA Contractors v8 - 19 Sep 2017.docx

DEFENSE INFORMATION SYSTEMS AGENCY

NON-DISCLOSURE AGREEMENT FOR CONTRACTOR PERSONNEL

THIS CERTIFICATION CONCERNS A MATTER WITHIN THE JURISDICTION OF AN AGENCY OF THE UNITED STATES AND THE MAKING OF A FALSE, FICTICIOUS, OR FRAUDULENT CERTIFICATION MAY RENDER THE MAKER SUBJECT TO PROSECUTION UNDER TITLE 18, UNITED STATES CODE, SECTION 1001.

I, (print or type name), as an employee of

(insert employer name) (“the Company”), a contractor or subcontractor for the Defense Information Systems Agency/Defense Information Technology Contracting Organization (DITCO) or other relevant DoD entity, performing under Contract Number (insert contract number), understand that as a result of my assignment under this contract, I may have access to, become aware of, or possess information/data that is considered sensitive or proprietary and may be protected by law from unauthorized use or disclosure.

I agree not to disclose to any individual, business entity, organization, or anyone within or outside of the Company who has not signed a non-disclosure agreement for the purposes of performing this contract: (1) any planning, programming, and budgeting system information; (2) any contractor bid or proposal information or source selection information as defined in Federal Acquisition Regulation (FAR) 3.104-4; (3) any information exempt from disclosure under the Freedom of Information Act, 5 U.S.C. § 552(b), including any trade secrets, proprietary, or financial information protected under § 552(b)(4); (4) any personally-identifiable information or protected health information; and (5) any other sensitive information considered Confidential or For Official Use Only (FOUO). I also agree to use such information/data solely for the purposes of performing this contract, and not to use such information/data to obtain anything of value or to provide a financial benefit or a competitive advantage to any third party and/or my employer.

I continue to be bound by the obligations of this Agreement after my performance under the contract has ended, and after the contract has been terminated or closed, until such time as the information/data protected by this Agreement is approved by the United States Government for public release. Any sensitive or proprietary information/data in my possession at the end of my performance under this contract must be returned to the Government. I understand that I may be subject to administrative, civil, and criminal sanctions for violating this Agreement, and any violation of this Agreement may result in my removal from assignment to this contract.

This Agreement does not bar disclosures to Congress or to an authorized official of an executive agency or the Department of Justice that are essential to reporting a substantial violation of law, and this Agreement does not prohibit disclosures which are required under order of a court of competent jurisdiction. These provisions are consistent with and do not supersede, conflict with, or otherwise alter the obligations, rights, or liabilities created by existing statutes or Executive orders relating to (1) classified information, (2) communications to Congress, (3) the reporting to an Inspector General of a violation of any law, rule, or regulation, or mismanagement, a gross waste of funds, an abuse of authority, or a substantial and specific danger to public health or safety, or (4) any other whistleblower protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by controlling Executive orders and statutory provisions are incorporated into this agreement and are controlling. These controlling Executive orders and statutory provisions include Executive Order No. 13526, as amended; Section 7211 of Title 5, United States Code (governing disclosures to Congress); Section 1034 of Title 10, United States Code, as amended by the Military Whistleblower Protection Act (governing disclosure to Congress by members of the military); Section 2302(b)(8) of Title 5, United States Code, as amended by the Whistleblower Protection Act (governing disclosures of illegality, waste, fraud, abuse or public health or safety threats); the Intelligence Identities Protection Act of 1982 (50 USC 3121 et seq.) (governing disclosures that could expose confidential Government agents); and the statutes which protect against disclosure that may compromise the national security, including Sections 641, 793, 794, 798, and 952 of Title 18, United States Code, and Section 4(b) of the Subversive Activities Act of 1950 (50 USC 783(b)).

My execution of this Agreement shall not nullify or affect in any manner any other Confidentiality or Non-Disclosure Agreement, including any Standard Form 312 or 4414, which I have executed or may execute with the United States Government or any of its departments or agencies.

I have carefully read this Agreement and understand my obligations under it.

Signature of Contractor Employee Date image2.emf

Consol_Product_List_and_Instructions.xlxs Template

CONTRACTOR REQUIRED INFORMATION

Contractor Contract # (SEWP / GSA):

CONTRACTOR POC Name:

POC Email:

POC Phone #:

CAGE Code

DUNS #

Columns in Pink form the basis for the Independent Government Cost Estimate (IGCE) to be completed by the program office Yes (leave blank) or no

Columns in green form the basis for Contractor's Quote (RFQ)

When completed, the columns in goldenrod fulfill the requirements to submit an Electronic Products List (EPL) IAW DITCO Additional Text H2 (Completed by Contractor)

SEE INSTRUCTIONS FOR COMPLETING THIS TEMPLATE ON THE 2ND WORKSHEET TAB

ITEM # (Proposed CLIN) Brand Name (BN) or Equal? Manufacturer Name Manufacturer Part Number Description QTY UNIT OF ISSUE UNIT PRICE EXTENDED AMOUNT Promised Delivery (ARO) Covered by OEM Warranty (type and duration) HW Serial Number/Key Code HW Unique Item Identifier (See DFARS 252.211-7003) Software License Included (Duration) SW Serial Number/Key Code UID of Parent IAW DFARS 252.211-7003 (5)(e) Contract Number Delivery Order Number (if applicable) Funding Document Number Contract Line Item No. (CLIN) SubCLIN (SLIN) Customer Organization Delivery Address Tracking No Carrier IUID Type Issuing Agency Code Enterprise Identifier Lot or Batch Number Type Designation Special Tooling or Special Test Equip

$ - 0

GRAND TOTAL $ - 0

REQUESTED DELIVERY DATE: All items to be delivered no later than MM/DD/YYYY (Partial deliveries will/will not be accepted)

DELIVER ITEMS TO: CACI Federal INC. (P&S) Note: You must update CACI address as required.

Office Name/Symbol Attn: P&S Receiving Dock 1 / Tech Refresh

Address 44590 Guilford Dr.

City, State and Zip+4 Ashburn, VA 20147

POC Name, Phone, Fax and Email Please provide POC information and update address if non-DISA customer

NOTE: Property Accountability. (If this is a DISA requirement, and property is to be delivered under the contract/TO that must be accounted for IAW DISAI 270-165-8, the following applies. If block 4e on the Requirements Checklist is marked “no” or you are not a DISA requiring office, delete this paragraph and the embedded Electronic Product List or mark as “not applicable”) The contractor shall submit the attached Electronic Product List (see below) in addition to complying with all requirements of DFARS 252.211-7003. See IAW FAR Part 8/16 Ordering Procedures, Additional Text H2 for additional information.

Note: If field is blank, Contractor will be required to register and provide IUID tags.

&L

&CEncl 2a, Consolidated Product List 1Nov2018/v3

For DISA only: Prior to submission of a new requirement package to DITCO, a review by DISA Central Receiving Point (CRP) Equipment Re-utilization review POC must be completed to determine that items are not available in the warehouse. The CRP warehouse POC will be required to sign the requirements checklist (block 16g). To save time, forward this completed equipment list to disa.meade.mps.list.mps31-warehouse-branch-sro-team@mail.mil for verification that your items are not available as surplus prior to completion of your acquisition package.

Instructions

Instructions for Completing Consolidated Product Listing to be used for IGCE/RFQ/EPL/MI&RR

Customers shall work with their respective Property Accountability Office in order to determine in advanced which of the requested item(s) require assignment of an Item Unique Identification (IUID) valuation tag in accordance with the guidance contained in DFARS 252.2011-7003. Each item that requires an IUID tag and collection/submission of required information must be clearly identified on the spreadsheet by leaving column M blank. If the contractor will not be required to provide either an IUID tag and/or IUID information, column M should indicate accordingly.

Note for DISA requirements only: DISA property accountability manager has determined it to be in the best interest of the Government to upload the required information into the Defense Property Accountability System (DPAS) in order to generate and affix IUID tags on items after delivery. Contractors will NOT be required to generate or provide IUID tags. However, all information outlined on the EPL MUST be provided with each shipment in order to allow for generation of the physical IUID tag.

When customer is submitting requirements for a specific brand name item (accompanied by the appropriate Justification for Other than Full and Open Competition), those items should be marked as “BN” in column B. Items which are to be competed on an “or equal” basis should be marked accordingly so vendors understand how to respond. Column B should be completed for each Contract Line Item (CLIN).

If the customer is purchasing a complete configurable system, a single CLIN may be used to identify all components associated with the top level assembly. Orders will be placed for a single system based upon the configuration using the Unit of Measure (UoM) of each. Multiple systems can be ordered on a single line item on the contract as long as all will have the exact same configuration. The configuration Bill of Materials (BOM) will be incorporated into the resulting contract as an attached document.

If an IUID tag is required for a component or subassembly of a configurable product, the per unit price of the item must be collected and reported. Whenever the need for an IUID tag is indicated, the offeror cannot decline to provide a per unit price by listing the item as not separately priced (NSP).

Within a CLIN for single system, sub elements/subassemblies may also require serial numbers and/or IUID tags. When required, the customer shall leave the appropriate columns blank to indicate to the contractors that information must be provided. If information is not required, columns L through N should indicate accordingly.

If a serial number is not required (or not provided in accordance with industry standards), column L should be indicate accordingly.

Customers will be allowed to group together small dollar items such as spares or peripheral equipment for a tech refresh (estimated per unit price of $5K or less) into one BOM for ordering purposes.

The completed spreadsheet shall be submitted to Procurement Services (PS) along with all required documentation for review. One copy of the document will be retained in the contract file marked “IGCE”. Another copy will be created with the per unit prices removed and labeled as “RFQ Proposal Template”. This copy will be included in the RFQ and shall be the basis for the offeror’s proposal. At the time the spreadsheet is forwarded in an RFQ, columns O through AB will be hidden. Instructions to offerors will explain use of these columns after award.

During the evaluation process, the Contract Specialist and Contracting Officer will review proposed CLIN structure with the customer to determine if additional changes are necessary before contract award.

Columns Q, R and S will be completed by PS and the remaining columns unhidden for distribution with the award documents. Contractors will be instructed to submit a completed document with each shipment in order to meet the requirements for submission of an Electronic Parts List. When more than one item is shipped per CLIN, all serial numbers and IUID tag information shall be inserted in the appropriate columns separated by semi-colons.

In order to assist in identifying a specific shipment to a specific order, contractors are required to provide the name of the carrier and the tracking number for each shipment on the completed EPL. When items are drop shipped from the Original Equipment Manufacturer (OEM), the contractor shall obtain the necessary information from the OEM and submit the completed EPL so that it is received on/before shipment arrives at the destination outlined in the contract.

In addition to submission of DD250, Material Inspection and Receiving Report, contractors shall attach a copy of the consolidated EPL with each shipment. To meet the information requirements for this document, columns T through AB must also be completed. IAW DFARS 252.211-7003, completed DD250 and the attachment must be included with invoices submitted in WAWF.

For further guidance, please reference the IGCE Desk book located at https://www.ditco.disa.mil/hq/deskbooks.asp