Attachment 0002 - Statement of Requirements.pdf

Statement of Work

Due to the strict network policies that ACS cannot use on the NIPRnet. ACS is seeking Wi-Fi solutions from an Internet provider to supply reliable commercial internet service to support the soldiers and their families with access to ACS programs and resources online at 310 Brannon Rd. Building 690, Schofield Barracks, Hawaii 96857. This is to include, but not limited to registering for workshops, attending virtual classes, and completing necessary informational forms from their own Personal Electronic Devices (PED)s. This support ensures ACS resources are accessible and necessary ACS support programs are efficiently being delivered to serve the Army community.

The Contractor shall provide and manage a Wi-Fi solution which involves network switches that provide internet signal throughout the desired location and connect the Access Points (Routers) on each floor for optimal coverage.

Salient Characteristics

Managed Network Switch 48P Poe (or similar)

- Provide network connectivity to the Access Points (Router) on each floor at ACS.

- Support both dual band 2.4 ghz and 5 ghz to ensure all devices can connect to the internet.

- Provide the capability to segment network configurations for “Guest” and “Internal” Wi-Fi.

- Ability to manage and direct network traffic efficiently.

Managed Network Edge 2G (or similar)

- Provide gateway connection from the outside to the internet and to ACS Network Router.

- Provide security and routing capability Stateful firewall, URL content filtering, Advanced Malware

Protection (AMP), Intrusion detection and prevention, Layer 7 Geo-IP firewall rules, Dynamic Host Configuration Protocol (DHCP), Automated updates, One-click policy deployment, and Client VPN.

Security Requirements

Access and General Protection/Security Policy and Procedures

Contractor and all associated subcontractors’ employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (i.e., FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.7.5.1.1 ACCESS TO ARMY INSTALLATIONS – PERSONNEL and VEHICLES.

The Government recognizes the important roles companies like you play in our day-to-day operations. That is why USAG Hawaii is enhancing the current access control solution called the Automated Installation Entry (AIE) Program. This program supports the security requirements while offering a streamlined access procedure for vendors, contractors, sub-contractors, suppliers and service providers. This program is available to new and existing personnel who require access to USAG Hawaii and are not authorized to receive a Department of Defense CAC and desire a streamlined entry into the installation. Sponsorship and participation at each USAG Hawaii location is required.

AIE Credential holders may access the installation through any of the USAG Hawaii gates that size allows and will only be subject to random inspections.

Companies that choose not to participate in the AIE Program will have limited access through the various bases. All employees will be required to go through the inspection area and will be subject to the standard access control procedures, security screenings, and/or vehicle inspections.

*Access control changes can occur at any time due to security requirements

Companies that service USAG Hawaii facilities may initiate enrollment in the AIE Program by contacting the Contracting Officer’s Representative (COR).

If you have questions regarding the AIE Program at USAG Hawaii, please contact Security Branch Operations, at 808-656-0232.

AIE Program Enrollment Process for Background Check and Process to obtain AIE Badge

Enroll your company by contacting the COR who will be the Sponsor. The COR will provide the excel spreadsheet for the list of contractor employee information. The following information is required from the contractor: last name, first name, date of birth, status, social security number, company name, and contract number. The COR will complete the Sponsor information and provide the list to the Directorate of Emergency Services (DES) Access Control Division. The DES will conduct the background check to vet personnel prior to arrival to pick up their AIE Badge and will ensure a more efficient process while saving time.

The AIE Program performs background screening and credentialing.

DES will contact the COR (Sponsor) once the background checks have been validated to schedule a time for the contractor employees to go to one of the registration locations and complete the process to obtain the AIE Badge.

Contractor employees should bring an acceptable form of identification (see List A and List B) to the appointment.

Upon arrival, a photo will be taken to complete the process. Employees will be issued their AIE Badge, which they will use for access to the installation.

Forms of Acceptable Identification for picking up your credential:

List A - One (1) needed U.S. Passport (unexpired) Permanent Resident Card or Alien Registration Receipt Card (Form I-551) Unexpired foreign passport, with I-551 stamp or attached Form I-94 indicating unexpired employment authorization Unexpired Employment Authorization Document that contains a photograph (Form I-766, I-688, I688A, I-688B)

List B – Two (2) needed Driver’s license or ID card issued by a state ID Card issued by federal, state or local government agencies or entities School ID card with a photograph Voter’s registration card U.S. Military card or draft record Military Dependent’s ID card U.S. Coast Guard Merchant Mariner Card Native American tribal document Driver’s license issued by a Canadian government authority U.S. Social Security card issued by the Social Security Administration

List B – Two (2) needed

Certification of Birth Abroad issued by the Department of State (Form FS-545 or Form DS-1350)

Original or certified copy of a birth certificate issued by a state, county, municipal authority or outlying possession of the United States bearing an official seal

U.S. Citizen ID Card (Form I-197) ID Card for use of Resident Citizen in the United States (Form I-179)

Unexpired employment authorization document issued by DHS (other than those listed under List A)

1.7.5.1.2 PTA Installation Access. Contractor shall comply with the PTA Installation procedures as directed by the Provost Marshall’s Office for securing Contractor personnel identification cards and vehicle passes for performing work on the installation (see Attachment 9/Technical Exhibit 9.1 (TE-9.1)) PTA Installation Access Control Policy).

All contractor workforce are required to obtain an Installation Access Pass (IAP) from the PTA DES Law Enforcement Branch. Requests for Installation Access shall be submitted at a minimum of thirty (30) days prior to start date to include renewal of IAP. A completed IAP form (TE 6) with either the excel spreadsheet provided by the COR (with the required contractor employee information IAW 2.5.1.4.1) or a copy of an eCrim Background Check Report shall be submitted to the COR (Sponsor) to request an IAP. Approval will depend on National Crime Investigation Center (NCIC) or eCrim verification.

1.7.5.1.3 Investigative Background Checks. Investigative Background Checks are required on all Contractors and Contractor employees that apply for a PTA IAP. Until PTA has the ability at the installation to do background checks using NCIC, a background check may be done at https://ecrim/ehawaii.gov. A $5 charge is the minimum charged by eCrim, if no record is found. The eCrim cost shall be incurred by the Contractor and not the Department of the Army. This background check will determine eligibility for a PTA Installation Access Pass. PTA Police reserve the right to deny access to any individual.

1.7.5.1.4 Limited Access to PTA. Contractor personnel ONLY are permitted access to government facilities.

Contractor shall ensure all personnel and vehicles are identifiable with nametags and signs

Physical Security N/A

Security Training

In the event of a National Defense Emergency affecting USAG Hawaii PTA and KMC, the Contract Officer (KO) will immediately notify the contract POC. At that time, the contractor shall take immediate steps to cease all activities on the installation(s) and will cause all personnel to leave the installation(s) property until notice is given by the installation and Contract Officer (KO) that National Defense Emergency conditions are no longer in effect.

Anti-Terrorism (AT) Level I Training

IAW Department of Defense Instruction (DoDI) 2000.16, Vol. 1 DoD Antiterrorism Standards and Army Regulation (AR) 525-13 Antiterrorism, all Contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas shall complete Antiterrorism (AT) Level I awareness training within thirty (30) calendar days after contract start date. The Contractor shall submit certificates of completion for each affected contract employee and subcontractor employee to the COR, or to the Contracting Officer if a COR is not assigned within thirty (30) calendar days after completion of training by all employees and subcontractor personnel on a recurring annual basis. AT Level I awareness training is available at the following site:

http://jko.jten.mil.

If access to a computer is not available, the Government will provide AT Level I training to Contractor employees within thirty (30) business days after contract start and maintain a copy of the attendance roster for one (1) year.

https://ecrim/ehawaii.gov https://usg01.safelinks.protection.office365.us/?url=http%3A%2F%2Fjko.jten.mil%2F&data=05%7C02%7Ckyle.m.tanaka.civ%40army.mil%7C7e4907ae543d4274443e08dd67f2324c%7Cfae6d70f954b481192b60530d6f84c43%7C0%7C0%7C638781012096175048%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=FS1tuy%2BYQsXJjJj3v8fDpV9mG7BCufUBLklIhEfUP1k%3D&reserved=0

Any Contractor hired after contract start will be required to receive AT Level I training within thirty (30) calendar days either on line or as provided by the Government. The Contractor must present the training certificate to the COR, or to the Contracting Officer if a COR is not assigned within thirty (30) calendar days.

iWATCH Training

The Contractor shall brief the local iWATCH program (training standards provided by the Installation Anti- Terrorism Officer (ATO)) to all its’ employees and associated subcontractors. This training is used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to USAG Hawaii PTA and KMC Military Police and the COR. The Contractor shall complete the training within thirty (30) calendar days after contract award and within thirty (30) calendar days of new employees commencing performance and send to the COR, or to the Contracting Officer if a COR is not assigned via both electronic and paper copy within thirty (30) calendar days of completion.

Operational Security (OPSEC) Awareness Training

For contracts that require OPSEC Training. All contractor employees, to include subcontractor’s employees, requiring access to Army installation, facilities, controlled, access areas, and/or installation computers shall complete OPSEC Level I Training within thirty (30) days after contract start date or effective date of incorporation of this requirement into the contract. The Contractor shall provide either certificates of completion or dates of attendance at the (the installation: PTA or KMC), for each affected contractor employee and subcontractor employee to the COR, or to the Contracting Officer if a COR is not assigned, within fifteen (15) calendar days after completion of training by all employees and subcontractor personnel.

Operational Security (OPSEC) Awareness Training. IAW AR 530-1, Operations Security, Contractor employees shall complete Level I OPSEC Awareness training within thirty (30) calendar days of contract award and send to the COR via both electronic and paper copies. New employees must be trained within thirty (30) calendar days of their reporting for duty and annually thereafter. All Contractor personnel shall complete Level I OPSEC Awareness training annually. Level I OPSEC training is available at the following website:

https://securityawareness.usalearning.gov/opsec/index.html.

Threat Awareness and Reporting Program Training

For all DA contractors. Training will be completed within thirty (30) days of assignment or employment to an organization and will undergo live environment TARP training will be completed annually IAW AR 381-12 Threat Awareness and Reporting Program. The Contractor shall provide either certificates of completion or dates of attendance at the (PTA if face-to-face training is available or online ), for each affected contractor employee and subcontractor employee to the COR, or to the Contracting Officer if a COR is not assigned, with fifteen (15) calendar days after completion of training by all employees and subcontractor personnel.

https://usg01.safelinks.protection.office365.us/?url=http%3A%2F%2Fcdse.edu%2Fcatalog%2Felearning%2FGS130.html&data=05%7C02%7Ckyle.m.tanaka.civ%40army.mil%7C7e4907ae543d4274443e08dd67f2324c%7Cfae6d70f954b481192b60530d6f84c43%7C0%7C0%7C638781012096188389%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=tRSD1wbWZ6BP%2B7MaOwBMseNuwKSN%2BVR1pwDESvcVZn4%3D&reserved=0