Atch 1 - Access Control System Performance Work Statement 13 MAY 2026_Redacted.pdf

13 MAY 2026

Performance Work Statement for

Maintenance of the Acquisition Management Complex Access Control System

FA8601-26-Q-0036

Introduction

The Acquisition Management Complex (AMC) Access Control System (ACS) provides secure access control to sensitive areas, ensuring compliance with HSPD-12 and FIPS-201 regulations.

The purpose of this contract is to ensure the ongoing functionality, security, and compliance of the ACS, maintaining the system previously installed. This Performance Work Statement (PWS) outlines the requirements for a non-personal services contract to provide comprehensive preventative maintenance and corrective repair and replacement services for security doors. The Contractor shall be certified, authorized and qualified to operate Genetec Doors, Equipment and Systems and shall provide all necessary personnel, management, supplies, and equipment to perform the services defined herein. The objective is to ensure all security doors are maintained in a safe, fully operational, and compliant condition at all times. This contract will be awarded as a Firm-Fixed-Price (FFP) agreement for all scheduled preventative maintenance, with a separate Firm-Fixed-Price Level-of-Effort Contract Line-Item Number (CLIN) for unscheduled or necessary corrective maintenance, emergency replacement, and repairs. The Period of Performance is anticipated to be one (1) Base Year with four (4) one-year Option Years.

Background

The facility's PACS infrastructure is built on the Genetec Security Center - Synergis platform and utilizes an associated HID Global Validation System. The system uses Veridt Stealth Dual Contact/Contactless Keypad reader (model # SY-900W2036-OXYON), OSDP, HID embedded compatible, Multifactor authentication for PIV, pIV2, CAC, TWIC, ISO 7816 & ISO 14443, IP 65 metal domed backlit keypad for tactile feedback: tamper resistant mounting with tamper switch.

The readers are tied to the system using Synergis Cloudlink (Model # SY-CLOUDLINK), a Mercury Intelligent Controller, Linux based, 8In/4Out/2Rd, 3rd Party Application support (Model # SY-LP4502) and Mercury MR52 2-reader interface module Series 3 (8 inputs, 6 relays, PCB only) (Model # SY-MR52-S3)

1.0 Scope of Work

The scope of this contract covers the maintenance of the Access Control System installed at the AMC and other outlying buildings. Contractor shall furnish all labor, supervision, maintenance, materials, training, reporting, and equipment to ensure stellar operational performance of 328 Access-Controlled Doors across 14 Buildings at WPAFB.

The ACS includes 328 access-controlled doors spread across 14 buildings. The contractor will perform work which shall ensure that the system remains fully operational, secure, and compliant with all federal regulations and Genetec Operational requirements and in accordance with this Performance Work Statement and Contract Terms and Conditions. Contractor shall perform in accordance with (IAW) terms and conditions of the contract and to standards specified herein and directives listed. Locations and estimated quantities of work are listed throughout each section and appendices. Services the contractor shall perform are listed under each functional heading and are specified in corresponding sections of this PWS.

The Government may, at its discretion, require the installation of new access control points or the replacement of obsolete or failed system components. This work is not a guaranteed requirement and will only be initiated on an as-needed basis. However, if during preventative maintenance the Contractor identifies failures, the Contractor must notify the contracting Officer and the Security Team immediately. If such a need arises, the Contractor shall be required to procure, install, configure, train staff and integrate new hardware as requested by the Government. If needed, all replacement or newly installed hardware and software must be 100% compatible with the Government’s existing Genetec Security Center - Synergis platform. The Contractor shall be responsible for verifying full integration compatibility before proposing or procuring any equipment.

All personnel performing work under this contract shall possess current and valid Genetec certification appropriate to their assigned duties and provide a copy of the certification on an annual basis to the Contracting Office. Certification shall be required as a condition of this contract, authorization to access, configure, maintain, or interface with any Genetec systems or components. Personnel without such certification shall not engage Genetec for technical support or perform related system activities. Documentation of certification status shall be made available to the Government upon request.

Buildings Covered: (Drawings provided via DoD Safe to potential contractors) This table represents the current baseline; however, the scope may be expanded to include additional buildings, equipment, and associated installation services as required by the Government.

Building Number Number of Doors

Building 7 11 doors

Building 11 19 doors

Building 12 8 doors

Building 16 4 doors

Building 17 8 doors

Building 32 7 doors

Building 46 14 doors

Building 56 2 doors

Building 553 116 doors

Building 556 37 doors

Building 557 50 doors

Building 558 34 doors

Building 559 4 doors

Building 560 14 doors

2.0 Preventive Maintenance

The contractor will conduct quarterly Preventive Maintenance (PM) for the ACS, ensuring that all components are tested and function correctly. This checklist will include:

• Testing card readers

• Testing door position switches

• Testing exit devices and sensors

• Panel diagnostics

• Battery load tests

• Event log reviews

• Backup verification

3.0 Corrective Maintenance

Base hours of operation are between 0800 to 1600 each day. Priority Levels: Corrective maintenance will be classified into three priority levels:

Emergency: System failure (e.g., building access down, security risk, life safety concern). Response Time: Contractor shall acknowledge within 1 hour and be on-site within 4 hours or by 0800 next business day, whichever comes first

Urgent: Critical but mitigated through alternative procedures (e.g., degraded system performance). Response Time: Acknowledge within 4 hours; on-site arrival within 8 hours or by 0800 next business day, whichever comes first

Routine: Non-critical issues. Response Time: Acknowledge within 1 business day; on-site arrival by 0800 next business day, whichever comes first.

Service Acknowledgment: Response time is measured from receipt of notification in the ticketing system, phone call, or from CO/COR authorization.

4.0 Buildings, Network Dependencies, and Remote Access

Base Network Dependencies: The ACS system relies on the base-wide network infrastructure.

The contractor shall coordinate with AMC security desk in building 557.

Remote Diagnostics: Remote diagnostics will be allowed if it complies with base cybersecurity controls and approved by the COR. The contractor must specify VPN or remote access methods and ensure adherence to security protocols.

Cybersecurity Controls: The contractor shall adhere to the applicable cybersecurity controls as required by the Government and base security policies, including any required NIST/CMMC standards. The contractor is strictly prohibited from sharing collected data with any third party and from storing Government Data on any unauthorized systems.

5.0 Electrical Work Requirements:

Inclusion of Electrical Work: The Contractor shall be responsible for performing and managing all electrical work related to the access control system required during the period of performance, unless otherwise directed by the Contracting Officer or Contract Officer Representative. The Contractor shall ensure compliance with all federal, state, and local codes, as well as Department of Defense and Base regulations. If electrical work is required that falls outside the scope of the primary contract, it will be handled through a separate contract or by coordinating with the in-house electricians.

Inclusion of Repairs: During installation and/or repairs of new doors and equipment , the surrounding areas of the doors and readers can become damaged. Contractor should ensure that the surrounding area where work is performed is free of hanging wires, dry-wall dust/debris, paint chips, damaged dry-wall, structural damage. The Contractor shall ensure compliance with all federal, state, and local codes, as well as Department of Defense and Base regulations. All installations and finishes shall be clean, precise, and completed to a high standard of quality.

6.0 Performance Standards

Preventive Maintenance Reports: The contractor will submit quarterly reports documenting the completion of the PM activities. These reports will include any recommended repairs or upgrades. (CDRL 0001)

Corrective Maintenance Logs: The contractor will submit service logs for all corrective maintenance performed, detailing the work completed and any parts replaced. Service logs will be submitted within 3 days after completion of maintenance. (CDRL 0002)

Annual Preventive Maintenance Report: The contractor will provide an annual preventive maintenance report documenting the system’s health, performance, and any recommendations for system upgrades. This report should be completed within 1 week prior to the POP. (CDRL 0003)

Access Logs: The contractor shall provide access training, log-extraction, and support to Security Forces.

Reporting format: All reports and logs should include the following details: date of service, description of maintenance performed, the technician responsible for the work, their labor category, and any additional findings. The report may be submitted in either spreadsheet or document format.

Estimate vs. Actual Reconciliation: If the work is expected to exceed the estimate by more than 10%, the contractor must obtain approval from the Contracting Officer.

Not-to-Exceed Ceiling: The contract will include a Firm Fixed Price Level of Effort (FFP LOE) for each option year. The contractor is required to obtain written authorization (service order or task) from the Government before proceeding with any FFP LOE work. The authorization shall include a detailed description of the issue, an estimate of labor hours, and a list of required parts, except in instances involving emergent conditions or safety-related concerns where immediate action is necessary.

Invoice Requirements: Invoices must include the following details for traceability and shall align with the service logs and Preventive Maintenance (PM) reports:

1.1.1. Date and time of service

1.1.2. Technician name and labor category

1.1.3. Hours worked by rate (In accordance with the Wage Determination Rates on Sam.gov)

1.1.4. Work Location

1.1.5. Description of work performed

1.1.6. Parts with part numbers and pricing.

7.0 System Expansion and New Installations

General: This contract includes the procurement and installation of new access-controlled doors to be integrated into the existing Genetec Security Center-Synergis system. The Government may order new installations on an as-needed basis throughout the period of performance.

Scope of New Installations: For each new door ordered, the contractor shall provide all necessary hardware, software configuration, and labor to make the door fully functional within the ACS.

This includes, but is not limited to:

• A complete hardware kit (reader, controllers, door contacts, locks, power supplies, wiring).

• All labor required for physical installation and wiring.

• System programming and configuration to integrate the new door into the Genetec system.

• Testing and validation to ensure full functionality.

Installation and Hardware Standards: All new hardware must be identical or fully compatible with the existing system components as specified in this Performance Work Statement and (e.g., Veridt readers, Mercury controllers). All installation and electrical work must comply with the standards set forth in this Performance Work Statement.

Ordering New Installations: New installations will be ordered via the issuance of a Firm- Fixed-Price Task Order against the appropriate CLINs for hardware and installation labor.

Hours of Operation:

Normal Working Hours. Contractor shall perform work during the hours as defined at 8:00am – 4:00pm Monday – Friday. Prior to any changes to hours of operation, contractor shall submit a request to CO and Security for approval.

Contractor may be required to work extended hours to accomplish timely completion of work at no additional cost to the Government. Expanded Hours. The Contractor shall perform services after normal working hours up to twenty-four (24) hours per day, seven days per week (24/7) as requested to support mission requirements upon implementation of contingency plans and during surges, emergencies, disasters, deployments, exercises, or Continuation of Essential Department of Defense Contractor Services during crises. The Contractor shall respond within one (1) hour after notification of a requirement for after hours or expanded hours support.

Recognized Holidays. The following Federal holidays are observed at WPAFB: New Year’s Day, Martin Luther King Jr. Day, Presidents Day, Memorial Day, Juneteenth Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day, and Christmas Day. The Contractor is not required to provide services on Federal holidays, except as required to support mission requirements during expanded hours.

Continuation of Essential Contractor Services. To ensure continuation of essential Contractor services under all circumstances, access door performance in sensitive areas is hereby designated as Mission Essential. There may be times when real world conditions dictate some, or all, Contractor services elevated to designation as Mission Essential; examples (snow removal, HUREVAC support, elevated FPCONs, etc.). Required support for Wing Plan(s) execution are designated as essential Contractor service as defined in Defense Acquisition Regulation Systems (DFARS) 252.237-7023, Continuation of Essential Contractor Services. Contractor shall be responsible for performing all services recorded within the PWS as per the DFARS regulation.

Continuation of Contractor Services During Base Exercises, Local Emergencies or Contingencies, and Implementation of Local Contingency Plans. It is determined that the Contractor shall perform during and/or in support of base exercises, local emergencies, or contingencies and implementation of local contingency plans. CO shall notify Contractor in the event Contractor is relieved from performing any services during base exercises, local emergencies, contingencies, or implementation of local contingency plans.

8.0 Warranty of Services and Materials

The Contractor warrants that all services, including preventive and corrective maintenance, shall be performed in a professional and workmanlike manner.

Furthermore, any new hardware, components, or parts procured and installed under this contract, including but not limited to readers, controllers, locks, and power supplies, are warranted to be free from defects in both materials and workmanship for a period of one (1) year from the date of installation and acceptance.

Should any defect in materials or workmanship arise during the warranty period, the Contractor shall, at its own expense, promptly repair or replace the defective item to ensure the system remains fully functional and compliant with the requirements of this Performance Work Statement.

9.0 Security Requirements

Contractor shall possess a Facility Clearance Level (FCL) of Secret. This contract requires performance at a Government location in the U.S. At least 30 days prior to beginning operations, Contractor shall provide the Information Protection Office, Notification of Government Security Activities. Contractor employees shall comply with security requirements imposed by the Base Commander at all times while on the installation. Contractor shall provide an initial employee personnel listing, with names and social security numbers, to the Security Forces Security Assistant (SA) 30 days prior to contract start date for initial vetting. All employees shall in-process with the SA. All contract employees shall have or be eligible for a favorable suitability determination based on a T-1 investigation or equivalent. Contractor employees shall be submitted for suitability investigations by the SA. All contractor employees requiring access to a controlled/restricted area must have a favorably adjudicated T-1 investigation.

Safeguarding Classified Information. Contractor employees requiring access to classified information shall have Secret eligibility based on a T-3 investigation or equivalent. Contractor employees shall be submitted for security investigations by the Facility Security Officer (FSO).

Contractor shall conform to provisions of Code of Federal Regulations (CFR), Title 32, Subtitle A, Chapter I, Subchapter D, Part 117, National Industrial Security Program Operating Manual (NISPOM). Contractor shall only give access to classified information or material to those with proper security clearance, a valid need to know, and a signed SF 312, Classified Information Nondisclosure Agreement, on file.

Controlled Unclassified Information. Contractor shall comply with DoDI 5200.48, Controlled Unclassified Information and DoDI 5200.48_DAFI 16-1403 Controlled Unclassified Information for identification, protection, training, and out-processing requirements for contractor employees.

Contractor shall comply with DoDM 5400.7_Air Force Manual 33-302, Freedom of Information Act (FOIA) Program, requirements.

Escort Protocol (No DD 254) Because Security Forces will not utilize a DD Form 254 (Contract Security Classification Specification) for this contract, contractor personnel require a government-approved escort at all times while working in, accessing, or transiting through any sensitive or restricted areas within the AMC and outlying buildings. The contractor shall coordinate with the AMC security desk prior to arrival to ensure escort availability and avoid maintenance delays.

Risk Framework Management (RFM) The Contractor shall comply with all Risk Management Framework (RMF) requirements, protocols, and security language prescribed by the Government in accordance with DoDI

8510.01. The Contractor shall ensure that all system maintenance activities, remote access methodologies, and software or firmware updates preserve and sustain the system’s RMF accreditation. The Contractor shall maintain continuous compliance with all applicable DoD and USAF cybersecurity controls, provide all required RMF documentation and assessment support, and implement continuous monitoring measures to mitigate risk to Government networks, information systems, and physical security infrastructure throughout the period of performance.