A02 FD ICIDS PWS 2025 Final.pdf

Performance Work Statement (PWS)

For

Fort Detrick & Forest Glen Silver Spring Annex Integrated Commercial Intrusion Detection System (ICIDS)

PART 1

GENERAL INFORMATION

1. Background: ICIDS system provides effective interior and exterior security by monitoring and controlling personnel entry into Army Facilities and areas. Interior and exterior sensors are used to monitor and detect intrusion attempts. Access and entry control equipment will report unauthorized entry attempts. ICIDS enhances the security environment while reducing the need for physical security checks.

1.1 Objectives: To establish a Preventative Maintenance, Repair, and Inspection (PMRI) contract for Fort Detrick’s and Forest Glen’s ICIDS system.

1.2 Description of Services/Introduction: The contractor shall provide all personnel, equipment, tools, materials, supervision, and non-personal services necessary to perform ICIDS Maintenance and Repair Services as defined in this Performance Work Statement except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract.

1.3 Scope: The Contractor shall provide qualified technicians, equipment, material, supplies, tools, transportation, supervision, and other items and/or services necessary to perform preventive and corrective maintenance, service, adjustment, and repair, replace, install, input/update software to including mapping, naming convention and database information, preform preventive and corrective maintenance, conduct 6-month Intrusion Detection System (IDS) testing, record testing results on a Department of Army Form 4930, respond to system lockouts and emergency calls, conduct system verification testing on ICIDS and all devices connected to the IDS for the Garrison and tenants located on Fort Detrick and Forest Glen. The facilities that are monitored by and are the responsibility of the Garrison Directorate of Emergency Services (DES). Electronic Security Systems (ESS) capabilities and installed equipment varies by tenant. Systems to be maintained include, but are not limited to, Integrated Commercial Intrusion Detection System (ICIDS). The contractor shall perform to the standards in this contract.

1.4 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months, four (4) 12-month option years IAW FAR 52.217-9, Option to Extend the Term of the Contract, and a six-month extension period IAW FAR 52.217-8, Option to Extend Services.

The Period of Performance reads as follows:

Base Year: 26 Mar 2025 – 25 Mar 2026 Option Year 1: 26 Mar 2026 to 25 Mar 2027 Option Year 2: 26 Mar 2027 to 25 Mar 2028 Option Year 3: 26 Mar 2028 to 25 Mar 2029 Option Year 4: 26 Mar 2029 to 25 Mar 2030 52.217-8 Option: 26 Mar 2030 to 25 Sep 2030

1.5 General Information

1.5.1 Quality Control Plan (QCP): The contractor shall develop and maintain an effective quality control program to ensure services are rendered in accordance with the PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of any non-compliance in services. The contractor’s quality control program is the means by which it assures that the work being performed complies with the requirement of the contract. As a minimum, the contractor shall develop quality control procedures that address the areas identified in PWS, Performance Requirements Summary (PRS) and the Delivery Schedules. The QCP shall be submitted with the proposal. Change to the QCP shall be submitted to the Contracting Officer not later than ten (10) calendar days prior to the effective date of the change. The basis of the plan is that the Contractor is responsible for maintaining quality over the life of the contract.

1.5.1.1. Delivery Schedule (DS) and Performance Requirement Summary (PRS): The government shall utilize the DS and PRS to monitor Contractor’s performance in accordance with the Performance Work Statement (PWS). The DS provides instructions to the Contractor in terms of the services to be provided, and the frequency of deliveries. The PRS summarizes the Contractor’s service requirements for the performance objectives that relate directly to mission essential items. The PRS describes the minimum acceptable levels of service required that are critical to mission success.

1.5.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.5.3 Recognized Holidays: The Contractor shall not perform non-emergency work on Federal public holidays listed below. The Contractor will follow OPM Federal Holiday observation dates as directed by 5 U.S.C. 6103.

New Year’s Day Independence Day Martin Luther King Jr.’s Birthday Labor Day Inauguration Day (As Applicable Columbus Day Washington’s Birthday Veteran’s Day Memorial Day Thanksgiving Day Juneteenth Day Christmas Day

1.5.4 Hours of Operation/Place of Performance: The contractor is responsible for conducting contract work on Fort Detrick (Area A, B, C, and Forest Glen, Silver Spring Annex, Silver Spring, Maryland) between the hours of 07:30 and 16:00 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must always maintain an adequate work force for the uninterrupted performance of all tasks defined within this performance work statement when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential.

1.5.5 Type of Contract: The government anticipates award of a Fixed Price.

1.6.6 Security Requirements: The contractor shall provide complete AHRC TASS Form 1 (Applicant Registration Form) for all personnel providing services under this contract. The Contractor shall provide the following information of all personnel providing services under this contractor to the Contracting Officer Representative (COR) using Fort Detrick Vetting, First, Middle, Last Name, social security number, date of birth, place of birth, and full name 10 days prior to commencement of work.

1.6.6.1 PHYSICAL Security. The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use at the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.6.2 Base Access. IAW Army Regulation 190-13, Non-Common Access Card (CAC) holding visitors, contractors, vendors, and other personnel as described in paragraph 8-4 of AR 190-13, must have a need validated by Department of Defense (DOD) component for one-time, intermittent, or routine physical access to an Army installation. Visitors will not be granted unescorted installation access without the required identity proofing, vetting against the National Crime Information Center Interstate Identification Index (NCIC-III). The Installation Commander will, in the absence of a waiver deny uncleared contractor, subcontractor and visitors unescorted access to the installation based on the results of the NCIC-III check that contains credible derogatory information. Such derogatory information includes, but is not limited to the following:

a. The NCIC III contains criminal arrest information about the individual that causes the installation Commander to determine that individual present a potential threat to the good order, discipline, or health and safety on the installation.

b. The Installation is unable to verify the individual’s claimed identity in the attempt to gain access.

c. The individual has a current arrest warrant in NCIC, regardless of the offense or violation.

d. The individual is currently barred from entry or access to a federal installation or facility.

e. The individual has been convicted of crimes encompassing sexual assault, armed robbery, rape, child molestation, production or possession of child pornography trafficking in humans, drug possession with the intent to sell or drug distribution.

f. The individual has a US conviction for espionage, sabotage, treason, terrorism or murder.

g. The individual is a registered sex offender.

h. The individual has a felony conviction within the past 10 years, regardless of the offense or violation.

i. The individual has been convicted of a felony firearms or explosives violation.

j. The individual has engaged in acts or activities designed to overthrow the U.S. Government by force.

k. The individual is identified in the Terrorist Screening Database (TSDB) as known to be or suspected of being a terrorist or belonging to an organization with known links to terrorism or support of terrorist activity.

l. Individual is barred from Fort Detrick.

1.6.7. Badges. Personnel I.D. badges shall be worn when required by the specific tenant or organization. Those badges will be temporally assigned by that specific tenant or organization.

1.6.8. Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.8.1. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.8.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.8.3. Access to Secure Facilities: Special requirements are required to gain access to a secure facility including but not limited to being a US Citizen or documented legal resident alien.

Access to secure facilities on Fort Detrick requires coordination with the Contracting Officer’s Representative. Requests for access must be filed 15 days in advance to obtain necessary clearances. The Contractor shall provide all required personal data on personnel requiring access with the application. Upon completion of work the contractor shall surrender all issued security passes. Final contract payment will be withheld until all passes have been returned. The contractor is required to work with the Contracting Officer's Representative to meet the individual security requirements for that facility to gain access. The normal processing time for access is approximately 14 calendar days from the receipt of a complete vetting form (FD 190-13). Vetting forms must be legible. Incomplete or illegible forms will be returned to the contractor for resubmission and will delay access to the installation.

Secret Facility Clearance: The contractor shall possess and maintain a SECRET facility clearance from the Defense Security Service. The Contractor’s employees, performing work in support of this contract shall have been granted a SECRET security clearance from the Defense Industrial Security Clearance Office. The DD 254 can be provided.

1.6.9 Training:

1.6.9.1 Anti-terrorism Security Requirements: The contractor and all associated subcontractors’ employees shall comply with applicable installation, facility, and area commander installation and facility access and local security policies and procedures (provided by the Government COR). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services, or Security Office. The contractor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.9.2. Anti-Terrorism Level (1) One Training. All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. All contractor employees must complete annual AT Level 1 awareness training.

1.6.9.3. Annual training is to be conducted in the anniversary month it was initially completed.

The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 15 calendar days after completion of training by all employees and subcontractor personnel. AT Level I training is now conducted on the Joint Knowledge Online (JKO) site.

For those that have a CAC, AT Level I can be accessed via https://jkodirect.jten.mil.

For those personnel that do not have a CAC they can utilize the below instructions to complete, i.e. contractors etc.

1. Google JKO and begin the process from there. https://jko.jten.mil Clicks:

2. No DOD CAC.

3. I am a US mil, government civil servant or contract employee.

4. I've been directed to take required training on JKO.

5. Courses.

6. I do not have a .MIL, .GOV, or .NDU.EDU address or I am a Multi-National Student.

1) Help desk sends non-CAC user an email with User ID.

2) Help desk will send a separate email with an electronic token to register a new password (token is good for 24 hours).

3) New User follows the instructions in the email and enters a new password.

4) User will need to enroll in Course # JS-US007-14 (User has up to 1 year to complete the course) (Contractors need to follow the requirements outlined in the AT/OPSEC cover sheet and complete it in 30 days). If training is required in a non-English language, please contact Fort Detrick ATO at https://home.army.mil/detrick/my-fort/all-services/prto.

1.6.9.4. iWatch Awareness Training. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided in this PWS by the Fort Detrick ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report on suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees’ commencing performance, with the results reported to the COR no later than 5 calendar days after completion. AT Awareness information and training can be found at:

http://www.detrick.army.mil/ready/iwatch.cfm and iSalute:

http://www.detrick.army.mil/ready/iSALUTE.cfm.

1.6.9.5. RAMS and ALERT. AT Level 1 and iWatch Awareness training assist in informing the contractor that at times Random Antiterrorism Measures (RAMS) may be in effect, where their vehicle may be checked, ID cards validated, security checks done by COR and Police. Gate operations could be affected based on the FPCON or RAM. COR is responsible depending on the length of this contract with signing up at least one contractor for ALERT messages for weather or incident alerts, that POC will be responsible for notifying the other contractors by phone tree or other means. The COR is also responsible for ensuring if any blueprints that show information outside of the scope of work that they are either collected back at the end of the job or destroyed.

https://jkodirect.jten.mil/

1.6.9.6. Operational Security (OPSEC) Requirements. Personal information or information considered critical to the installation's operations released intentionally or unintentionally could have direct consequences for military and government personnel as well as our critical operations.

Therefore, the contractor shall be responsible for safeguarding personal information and information considered critical to the Fort Detrick's operations. Per AR 530- 1, Operations Security (OPSEC), new contractor employees must complete Annual OPSEC training within 30 calendar days of reporting for duty. All contractor employees must complete annual OPSEC awareness training. All contractor employees shall adhere to USAG Fort Detrick OPSEC policies, regulations, and guidance. OPSEC awareness training is required when working with personal information (Social Security Number, date of birth, etc) or on government systems that are considered critical to the installation's operations. Contractor personnel shall not release any personal or operational information to the general public, press, or any other personnel or organizations without prior approval from the USAG Command.

1.6.9.7. OPSEC Awareness Training. New contractor employees and subcontractor employees must complete Level I OPSEC awareness training within 30 calendar days of reporting for duty.

All contractor employees must complete annual OPSEC awareness training. Annual training is to be conducted in the anniversary month it was initially completed. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 15 calendar days after completion of training by all employees and subcontractor personnel.

(http://www.detrick.army.mil/dptms/pdf/OPSECTrainingContractors.pdf)

1.6.9.8. Industrial Personnel Security: IAW AR 380-67, AR 380-49 and DOD 5200.2-R, all contracts, classified, sensitive but unclassified and unclassified are required to contain a security clause. “IAW Army Regulations 380-67, 380-5 and 380-49, the Contractor shall ensure all personnel performing under this contract have a completed National Agency Check with Local Checks (NACLC) or Unclassified contracts require a NACI and that it contain no unfavorable information and has been completed by Office of Personnel Management and/or adjudicated by Defense Industrial Security Clearance Office (DISCO) prior to the start of the contract. The security requirements must be maintained for the life of the contract, and citizenship will be verified by presenting an original birth certificate or a valid US Passport or the original Naturalization Certificate to the USAG Security Office at the time of in processing for all contract personnel assigned to the contract. In order to maintain the security requirements any derogatory information, to include law enforcement issues, mental health issues, or alcohol/drug related issues discovered during the performance of this contract must be reported to the USAG Security Office.”

1.6.10 Special Qualifications: The Contractor shall establish and maintain in the following areas:

1.6.10.1 The Contractor shall provide documentation that the Contractor is a DAQ Electronics Value Added Reseller (VAR) to be eligible for winning this contract award. Non-DoD Link:

https://www.daq.net/support/resellers---vars. Contractors who cannot provide the required documentation that verify their status as a DAQ Electronics VAR are not eligible to be considered for this award.

1.6.10.2 Contractors shall have current certifications and training in good standing for their employees on the systems being serviced.

1.6.10.3 The Contractor shall have personnel who are:

A. Certified or Trained in the current ICIDS version used on Fort Detrick. In the absence of official certificates:

http://www.detrick.army.mil/dptms/pdf/OPSECTrainingContractors.pdf

B. A signed statement of documented training for ICIDS, DAQ StarWatch (or the applicable software in-use) Processor Control Units, Panels and Keypads. The statement should include date and source of training.

C. Having at least three years of experience in Electronic Security System (ESS) sensors such as Balanced Magnetic Switches, Passive Infrared Motions Sensors, and Duress Switches.

D. Experience can be shown by individuals with experience in all systems or an aggregate of individuals qualified in specific equipment to include:

i. Independently able to install, troubleshoot, remove and/or repair individual sensors and controls.

ii. Independently able to install, troubleshoot, remove and/or repair door controls such as Maglocks and Door Strikes.

iii. Independently able to install, troubleshoot, remove and/or repair or program a RADC and Local Controller using CalistoView.

iv. Independently able to install, troubleshoot, remove and/or repair or program and wire a DES encryption Device.

v. Independently able to install, troubleshoot, remove and/or repair and modify the configuration of the internal ICIDS network to include CIV DAEMON, PC Starwatch, etc.

vi. Independently able to install, troubleshoot, remove and/or repair communications circuits to prove them acceptable/unacceptable for ICIDS use.

vii. Independently able to install, troubleshoot, remove and/or repair fiber circuits to prove proper operation of the ICIDS system.

viii. Independently able to install, troubleshoot, remove and/or repair or configure Remote Status Monitors to handle SCIF operations including anti-poller configuration and troubleshooting.

ix. Independently able to install, troubleshoot, remove and/or repair or configure and modify a Poller Mux.

x. Independently able to shut down and restart the ICIDS system.

xi. Independently able to back up and restore the ICIDS operating system.

xii. Must demonstrate expertise in communications protocols used in the ICIDS system to include RS232, RS485, high impedance busses, Bell 202 standards, and modem protocols.

Must demonstrate expertise with the Ethernet Networking Protocols used in ICIDS to be able to troubleshoot and repair communications issues between nodes.

xiii. Must demonstrate expertise with the DCIDS-6/9 protocols that govern this system.

xiv. Must demonstrate expertise with the AR190-Series regulations related to this system.

E. Qualified to service Electronic Security System (ESS) equipment. The Contractor shall provide a list of the personnel performing the work to the COR. The list shall identify the systems its employee(s) is qualified to service.

F. The Contractor is responsible for ensuring all employees possess and maintain current ICIDS certification during the execution of this contract.

1.6.11 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.12 Primary Point of Contact (POC). The Contractor shall provide a Project manager, and supervisor, who shall be responsible for the performance of the provided service or work. The name of this person and an alternate(s) shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The POC and alternate shall be designated in writing to the Contracting officer at least 24 hours after contract award.

1.6.13 Key Personnel: The follow personnel are considered key personnel by the government:

Project Manager & Service Technician. Projected replacement of key personnel must be submitted in writing to the COR and Contracting Officer for approval 30 days prior to a replacement. All key personnel must be able to communicate fluently in English both verbally and in writing.

1.6.13.1 Project Manager: The Project manager shall, at minimum, have three (3) years of experience in managing projects similar in scope to this contract. The contractor shall provide records showing three (3) or more years of employment in that role. Acceptable submittals may be an employee’s resume, employment record, or any other verifiable documentation.

1.6.13.2 Service Technician: The Service Technician shall, at minimum, have three (3) years of experience involving projects similar in scope to this contract. The contractor shall provide records showing three (3) or more years of employment in that role. Acceptable submittals may be an employee’s resume, employment record, or any other verifiable documentation.

1.6.14 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.6.14.1. The Contractor shall not employ any person who is an employee of the United States Government if the employment of that person would create a conflict of interest.

1.6.15 Contractor Travel: Contractor will be required to travel between Frederick MD (Fort Detrick Area A, B and C) and Silver Spring MD.

1.6.16 Organizational Conflict of Interests: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR

Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.17 Contracting Officer’s Representative (COR): The COR will be nominated by the requiring activity and appointed by the contracting officer by separate letter. A copy of the COR’s appointment letter will be sent to the awarded Contractor, identifying the designated duties and limitations of the COR. The COR is authorized to conduct oversight on all tasks or requirements and report observations to the Contracting Officer. The COR is not authorized to change any terms or conditions in the contract that pertain to cost, schedule, performance, quality, quantity, or other legal aspects of the resulting order.

PART 2

DEFINITIONS & ACRONYMS

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor if that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor is performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of a product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.12. WORKDAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. WORK WEEK. Monday through Friday, unless specified otherwise.

2.1.14. ACRONYMS:

AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation AT Antiterrorism ATO Antiterrorism Officer CAC Common Access Card CDR Contractor Discrepancy Report CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative DA Department of the Army DAQ The name of the company who developed and sells ICIDS software and servers DOD Department of Defense FAR Federal Acquisition Regulation IAW – In accordance with KO Contracting Officer NCR – National Capital Region NDA Non-disclosure Agreement OCI Organizational Conflict of Interest ODC Other Direct Costs OPSEC Operations Security PIPO Phase In/Phase Out POC Point of Contact PoP Period of Performance PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Plan TE Technical Exhibit USAG United States Army Garrison VAR Value Added Representative

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3.1 Utilities: The Government will provide all utilities in the facility will be available for the contractor’s use in performance of tasks outlined in this PWS. The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities, such as turning off the water faucets or valves after using the required amount.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4.1 General : The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS.

4.2 Secret Facility Clearance: The contractor shall possess and maintain a SECRET facility clearance from the Defense Security Service. The Contractor’s employees, performing work in support of this contract shall have been granted a SECRET security clearance from the Defense Industrial Security Clearance Office. The DD 254 can be provided.

4.3. Materials: The Contractor shall supply all materials required to perform work under this contract that are not listed under Part 3 of this PWS.

4.4. Equipment: The Contractor shall supply all equipment required to perform work under this contract that are not listed under Part 3 of this PWS.

PART 5

SPECIFIC TASKS

5.1. Basic Services. The Contractor shall provide qualified technicians, equipment, material, supplies, tools, transportation, supervision, and other items and/or services necessary to perform preventive and corrective maintenance, service, adjustment, and repair, replace, install, input/update software to including mapping, naming convention and database information, preform preventive and corrective maintenance, conduct 6-month Intrusion Detection System (IDS) testing, record testing results on a Department of Army Form 4930, respond to system lockouts and emergency calls, conduct system verification testing on ICIDS and all devices connected to the IDS for the Garrison and tenants located on Fort Detrick and Forest Glen. The facilities that are monitored by and are the responsibility of the Garrison Directorate of Emergency Services (DES). Electronic Security Systems (ESS) capabilities and installed equipment varies by tenant. Systems to be maintained include, but are not limited to, Integrated Commercial Intrusion Detection System (ICIDS). The contractor shall perform to the standards in this contract.

5.2 Emergency Repairs. The contractor shall perform emergency repairs on ICIDS server, workstations, and critical IDS zones to ensure operability of the ICIDS system. The contractor shall respond within two (2) hours of being notified by COR or Contracting Officer. The contractor shall restore the ICIDS to proper operating condition within eight hours of being of responding. If the system cannot be restored to operation within the 8 hours the COR or Contracting Officer must be notified immediately. When any repairs require shutting down the system or activating an alarm, the contractor shall contact the COR and Police Desk Sergeant @ 301-619-7114 for Fort Detrick and 301-319-5501 for Forest Glen locations and wait for approval. No work shall be conducted without prior approval from the COR and/or Contracting Officer.

5.3 Critical IDS are defined.

a. IDS equipment located in Arms, Ammunition, and Explosives (AA&E) storage areas, medical and pharmaceutical storage areas, Secret Internet Protocol Router Network (SIPRNET) rooms, and Sensitive Compartmented Information Facilities (SCIF).

b. Critical IDS are any locations where a guard would be required to be posted in the event the IDS becomes non-functional.

c. Critical IDS is also to be defined when an outage affects 10 or more zones or entire building access/IDS zones.

5.4 Non-Emergency Repairs. The Contractor shall respond within 24 hours of COR or Contracting Officer notification. If the repair is required during the weekend or on a federal holiday, the contractor shall respond the next business day. Repairs will include the diagnosis, replacement, installing of equipment to bring the ICIDS system to current regulatory requirements. When new parts or equipment are required, the Contractor shall provide an itemized list for the repairs of parts/equipment. When additional costs will be incurred, no repair shall be conducted without prior approval from the Contracting Officer.

5.5 Six (6)-Month Intrusion Detection System (IDS): The Contractor shall test all devices located within an IDS zone at 6-months intervals. Each zone component will be checked and tested by qualified alarm maintenance personnel during preventive maintenance. The test results will be recorded on DA Form 4930 and provide a copy to USAG, DoO, Physical Security Section and the building managers.

5.6 Required Preventive Maintenance (PMs): All ICIDS equipment is required to receive two (2) PMs at 6-month intervals each year IAW AR 190-13. The COR and Contractor will coordinate to schedule all PMs for ICIDS IDS zones/equipment. All PMs will be conducted by a DAQ Electronic (Company name who make ICIDS) Value Added Reseller (VAR). [NOTE: A VAR is an approved by DAQ Electronic company to sell, install and service their products/equipment.] Any required repairs or software updates shall be brought to the attention of the Tenant POC and COR for disposition.

5.7 Database and Maps: The Contractor shall update ICIDS’s database, access setting, access person groups, and maps when any changes are made to a zone. The Contractor will update naming convention, badging card formatting, facility coding, person access groups, access zone naming and card reader data when requested by DES. All database information to include maps shall fully match each active zone connected to the system and meet proper naming convention set by USAG, DES, Physical Security Section. COR will be notified prior to making any changes.

5.8 Reporting. The Contractor shall submit a monthly report to the COR identifying all work conducted on systems identified in TE-3 during the previous month to include all repairs, testing and inspections. The monthly detailed report shall include equipment type, date, location, and tested status of the ICIDS and printout of the test from the system. The report must be submitted to the COR no later than the 10th of the following month after services were conducted. The COR will utilize this report for validation of all work successfully performed.

5.9. Service completion, clean up, and closeout. When all the services or tasks are complete, describe what completions, clean up, or final records / reports are mandated to validate closeout of all required services or tasks.

5.10. Any other requirements or tasks relating to this contract are expected of the contractor to include WAWF instructions.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. Publications and forms applicable to this Performance Work Statement are listed below. The publications and forms have been coded as mandatory or advisory. The Contractor is obligated to follow those publications and use those forms coded as mandatory to the extent (that is, a specific procedure in a paragraph, section, chapter or volume) specified in the Performance Work Statement. The Contractor shall be guided by those publications or use those forms coded advisory to the extent necessary to accomplish requirements in the Performance Work Statement.

The Contractor must abide by all applicable regulations, publications, manuals, and local policies and procedures.

6.1.1 Regulations and Directives

FERENCE MANDATORY /

ADVISORY

LINK OR PRINT

AR 530-1, Operations Security (OPSEC) Mandatory AR 530-1, Operations Security COE EM-385-1-1 Safety & Health Requirements Manual

Mandatory EM 385-1-1 Safety and Health

AR 380-5, Security Mandatory AR 380-5, Security AR 380-67, Personnel Security Program Mandatory AR 380-67, Personnel Security

Program FAR Subpart 9.5 Mandatory FAR Subpart 9.5 AR 190-13, Physical Security Program Mandatory Can be provided by the COR AR 190-11, Physical Security of Arms, Ammunition, and Explosives

Mandatory Can be provided by the COR

AR 190-51, Security of Unclassified Army Resources (Sensitive and Nonsensitive)

Mandatory Can be provided by the COR http://www.apd.army.mil/AdminPubs/series_range_regs.asp?search=530 http://publications.usace.army.mil/publications/eng-manuals/EM_385-1-1_languages/EM_385-1-1_English_2008/toc.html http://www.apd.army.mil/pdffiles/r380_5.pdf http://www.apd.army.mil/pdffiles/r380_67.pdf http://www.apd.army.mil/pdffiles/r380_67.pdf http://www.acquisition.gov/far/html/Subpart%209_5.html

TECHNICAL EXHIBIT 1

Performance Requirements Summary The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective (The Service required—usually a shall statement)

0BStandard Performance Threshold Method of Surveillance

PRS # 1. PWS PARA. 1.3 Scope Install new/replacement integrated Commercial Intrusion Detection System (ICIDS) equipment to DAQ, Army and Fort Detrick requirements.

The contractor shall install new/replacement equipment within two weeks of receiving equipment.

Zero deviation from standard

100% inspection

PRS # 2 PWS PARA. 1.3 Scope Perform repair services on Fort Detrick's, Forest Glen’s ICIDS system

The contractor will respond to service requests related to alarms within 2 hours and building access within 24 hours.

Restore ICIDS to operational condition within 1 day for alarms and 72 hours for building access.

Zero deviation from standard

100% inspection

PRS # 3 PWS PARA. 1.3 Scope Update/repair ICIDS database

Update information within the ICIDS database to include maps, zone names, person groups, schedules, and card formats.

Zero deviation from standard

100% inspection

PRS# 4 PWS PARA. 1.3 Scope Respond to system lockouts

The contractor shall respond within 12 hours to system lockout.

Zero deviation from standard

100% inspection

PRS # 5 PWS PARA. 1.3 Scope Update/repair system software/database for all ICIDS servers and RSMs

The Contractor will update/repair all ICIDS computers/server/databases to the latest version of ICIDS V.

Zero deviation from standard

100% inspection

PRS # 6 PWS PARA. 1.3 Scope Perform preventive maintenance and testing on Fort Detrick's ICIDS system.

The Contractor shell preform preventive maintenance and testing = bi-annually

Zero deviation from standard

Random Sampling

PRS # 8 PWS PARA. 1.3 Scope Respond within 24 hours of COR or Contracting Officer's notification

24 hours of COR or Contracting Officer notification

Zero deviation from standard

100% inspection

PRS #11 PWS PARA. 1.6.9.2. Anti- Terrorism Anti-Terrorism Level One Training Certificates

Annually, within 15 calendar days upon completion 1 Copy

By email, attached in PDF format

PRS #12 PWS PARA. 1.6.9.4. iWatch iWatch Awareness Training

Annually, with 15 calendar days upon completion 1 Copy

By email, attached in PDF format

PRS #13 PWS PARA. 1.6.9.6 OPSEC

OPSEC Awareness Training Certificates

Annually, within 15 calendar days upon completion 1 Copy

By email, attached in PDF format

PRS#14 PWS PARA. 1.6.6 Security Requirements Shall provide complete AHRC TASS Form 1 (Applicant Registration Form) for all personnel providing services under this contract.

Within two weeks of being awarded contract. 1 Copy per employee

Hand Carried or by email attached in PDF format

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To

Monthly Service Report

15th of every month for the previous month 1

Electronic File by Email PDF attachment

COR

Biannual IDS TEST DA Form

No later than the 15 days after test was conducted 1 Electronic file by e-mail PDF attachment. COR

Contractor Quality Control Plan PWS Para 1.6.1

With Proposal submission 1 Electronically/MS word

COR and Contracting

Officer

TECHNICAL EXHIBIT 3

ICIDS System

The Fort Detrick Intrusion Detection and Control System (ICIDS) is a comprehensive network of security measures that includes multiple Intrusion Detection System (IDS) zones, building access zones, Remote Monitoring Stations (RMS), SCIF servers, device servers, Poller MUX cards, and fiber and copper communication lines. Currently, there are 141 IDS zones in place, with the number subject to change based on evolving mission requirements. In addition, there are 171 building access points, also subject to change as needed. The system includes seven SCIF systems that connect and report to the main Fort Detrick server, which is monitored by the Garrison.

Forest Glen also has a separate server that handles IDS/building access zones for buildings 605, 161, 2500, 178, and 162. This system is designed to provide robust and flexible security for the Fort Detrick.

TECHNICAL EXHIBIT 3 CONTINUED

TECHNICAL EXHIBIT 4

Item Labor Category/ title Functional Description FTE Total Hours/Year 1 1020 Administrative

Assistant Provides administrative support for the technician and contract requirements

0.3 Estimated total=60

hours a year.

2 23182- Electronic security systems technician level 11

Provides preventative maintenance and inspection support for Fort Detrick’s ICIDS system. This includes intrusion detection system and building access control.

1 8 hrs. per day. 5 days a week

Estimated total= 1920 hours per year.