Attachment 1 ESS PWS v1.6.pdf

PERFORMANCE WORK STATEMENT

Maintenance of Electronic Security Systems Directorate of Emergency Services (DES)

Fort Cavazos, Texas As of 24 March 2025

TABLE OF CONTENTS

Part 1 – General

1.1 Description of Services/Introduction

1.2 Background

1.3 Objectives

1.4 Scope

1.5 Period of Performance (PoP)

1.6 General Information

1.6.1 Quality Control

1.6.2 Quality Assurance

1.6.3 Recognized Holidays

1.6.4 Hours of Operation

1.6.5 Place of Performance

1.6.6 Type of Contract

1.6.7 Access and General Protection Policy and Procedures

1.6.7.2 Physical Security

1.6.7.3 Personnel Security Clearance Requirements

1.6.7.4 Background Checks

1.6.7.5 Contractor Common Access Card (CAC) Requirements

1.6.7.6 Access to Government Information Systems

1.6.7.7 Key Control

1.6.8 Post Award Conference/Contract Periotic Progress Meetings

1.6.9 Contracting Officer’s Representative

1.6.10 Key Personnel

1.6.11 Special Qualifications or Certifications

1.6.12 Identification of Contractor Employees

1.6.13 Reserved

1.6.14 Reserved

1.6.15 Data Rights

1.6.16 Non-Disclosure Requirements

1.6.17 Organizational Conflict of Interest

1.6.18 Phase-in/Phase-out (PIPO) Period

1.6.19 General Training Requirements

Part 2 – Definitions & Acronyms

2.1 Definitions

2.2 Acronyms

Part 3 Government Furnished Property and Services

3.1 The Government will not provide property to perform maintenance or repair of the ICIDS

3.2 Emergency and Rescue

3.3 Telecommunications/Utilities

3.4 Government Furnished Facilities and Real Property

3.7 Government Furnished Services

Part 4 – Contractor Furnished Facilities and Equipment

4.1 Contractor Furnished Facilities and Equipment - General

4.2 Materials and Equipment

Part 5 – Specific Tasks

5.1.1 ESS Regulatory/Required Installation and Maintenance Criteria

5.1.2 Administer and Maintain

5.1.3 Life Cycle Replacement and Modernization

5.2 Electronic Security System Patch Management

5.3 ICIDS Preventative/Routine/Scheduled Maintenance, Testing, Repair, Replacement, Installation and Projects

5.3.1 Performance during ICIDS-V 12 Month Warranty Phase

5.3.2 Post Warranty Phase of ICIDS-V

5.3.3 ICIDS Service Requests during Normal Business Hours

5.3.4 ICIDS Patch Management

5.4 Administrative Services Support

5.5 Database/Repair Records/Reports

5.5.1 Maintenance Service Database

5.5.2 Warranty Service Database

5.5.3 Customer Service Orders (CSO)

5.5.4 IDS Priority Level Assignment Report

5.5.5 ESS Status Report

5.5.6 Maintenance Guide Sheets/Record

5.5.7 PIC/PIN Weekly Status Report

5.5.8 ICIDS Catastrophic Event Report

5.5.9 Contractor Parts, Material and Equipment Report

5.6 Hazardous Material Disposal

5.7 Service Calls (Unscheduled)

5.7.1 Response to Unscheduled Service Calls

5.7.2 Unscheduled Service Call Reporting

5.7.3 Intrusion Detection System (IDS) Outside Normal Business Hours

5.7.4 Electronic Entry Control Equipment (ECE) Outside Normal Business Hours

5.8 Reserved

5.9 Reserved

5.10 New IDS Installations

5.10.1 Facility Renovations

5.11 Contractor Parts, Equipment and Material

5.11.1 Contractor Parts, Equipment and Material Availability

5.12 Reserved

Part 6 – Applicable Regulations and Manuals Part 7 – Attachments and Technical Exhibit Listing

Part 1 General Information

1. GENERAL: This is a non-personnel services contract to provide Electronic Security System (ESS) maintenance and repair services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, transportation, tools, materials, supervision, other items, and non-personal services necessary to perform ESS Maintenance, repair, and installation as defined in this Performance Work Statement (PWS) except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract.

1.2 Background: Fort Cavazos Integrated Commercial Intrusion Detection System (ICIDS) has undergone a system upgrade to the Department of the Army approved ICIDS-V at the time of PWS preparation. Work performed under this contract will be at the Fort Cavazos Main Cantonment, West Fort Cavazos, North Fort Cavazos, and in Fort Cavazos Housing Areas.

1.3 Objectives: With the ICIDS-V system newly installed the objectives are to sustain a 100% operational status of each zone with reoccurring preventive and routine maintenance and testing schedules pursuant to Army Regulations. The Contractor shall provide timely troubleshooting and repairs during normal business hours and outside normal business hours. Deliver customer service for newly identified areas requiring IDS installation for the protection of military and/or civilian assets within the confines of Fort Cavazos, Texas.

1.4 Scope: The Contractor shall provide all necessary personnel, management, equipment, supplies, transportation, tools, materials, supervision, to perform maintenance, repairs, replace to repair, adjustments, installations, surveying, system designs, removal, and replacement services during facility renovations, projects, system administration, and Cyber Security Information Assurance (IA) for each Electronic Security System (ESS) under this contract at Fort Cavazos, Texas. The Contractor selected for this service contract must be a current DAQ ICIDS Certified VAR (Value Added Reseller) for sales, installation, configuration, and maintenance-related services. The Contractor must maintain an active VAR status with DAQ throughout the life of this contract. Interfaced into the Fort Cavazos ICIDS-V are Intrusion Detection protection and Entry Control Equipment (ECE) for controlled facility access. The ICIDS-V System consists of commercial-off-the-shelf hardware and software. The ICIDS-V platform is the DAQ Electronics’ StarWatch Security Management Software (SMS). StarWatch SMS is designed as a client-server, network-centric architecture based on distributed processing. Reference Technical Exhibit J for quantities of ICIDS network switches integrated into the Closed Restricted Network (CRN) level 4.

Final quantities may vary at time of award. Local intelligence and processing capabilities are positioned at each point in the system to assure processes are performed rapidly, decisions made, actions taken independently, and failures or maintenance is localized to allow the rest of the system to continue to operate. The StarWatch SMS Remote Area Data Collector (RADC) and EntroStar field devices are intelligent components that autonomously control their designated areas, report events, and execute commands received from operators via the system Primary Monitor Console (PMC). These components use dedicated processors to assure maximum throughput of data from remote areas to the monitoring stations and allow use of a mixture of communications media on the system. The monitoring stations process and display information received from remote areas, execute command, and control functions.

The design is completely scalable and adaptable to installation characteristics and security levels allowing for environments spanning from stand-alone Sensitive Compartmented Information Facilities (SCIF) to complete base-wide installation. ICIDS-V is designed to be capable of continuous operation (24 hours per day, 365 days per year) for life expectancy of ten (10) years with proper corrective and preventative maintenance.

1.5 Period of Performance (PoP): The PoP consists of 5 years and is as follows:

Phase-In 18 June 2025 – 17 July 2025.

59-month period 18 July 2025 – 17 June 2030.

1.6 General Information

1.6.1 Quality Control Plan (QCP): The Contractor shall develop, implement, and maintain a QCP and program to ensure all work described in this contract is performed at or above the standard defined in Attachment 1 Performance Requirements Summary (PRS). The QCP is developed by the Contractor for its internal use to ensure that it performs and delivers high-quality service. The Contractor’s QCP is the means by which the Contractor ensures all work complies with the requirements of the contract. The QCP identifies and corrects potential and actual problem areas throughout the entire scope of the contract.

1.6.1.1 The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The QCP shall be submitted within thirty (30) days of contract award.

After acceptance of the QCP, the Contractor shall receive the contracting officer’s (KO) acceptance in writing of proposed changes to the QC procedures. The Contractor shall submit QCP changes within five

(5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation.

1.6.1.2 The Quality Control Plan shall address as a minimum:

1.6.1.2.1 Inspection Program. Included shall be a quality control inspection program covering all general and specific tasks included in the contract scope of work. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis. In developing this inspection program, the Contractor shall identify the key activities and associated characteristics in each process that have a significant influence on specific services and provide for methods for evaluation of the selected characteristics.

1.6.1.2.2 Deficiency Identification. The QCP shall include a method of identifying deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS. This shall contain processes for corrective action without dependence upon Government direction.

1.6.1.2.3 Deficiency Correction. The program shall contain process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.6.1.2.4 Documentation and Enforcement. The QCP shall include a method of documenting and enforcing quality control operations of both prime Contractor and subcontractor work; including inspection and testing.

1.6.1.2.5 Trend Analysis. The QCP shall include a method of performing trend analysis and assessments through the use of metrics.

1.6.1.2.6 Surveillance Methods. The QCP shall contain specific surveillance techniques for all contract services. The surveillance methods shall be comprehensive and adaptable to the reporting system of the plan.

1.6.2 Quality Assurance (QA): The Government shall evaluate the Contractor’s performance under this contract in accordance with (IAW) the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the Contractor has performed IAW the performance standards and contract quality requirements are met. Contract quality requirements” means the technical requirements in the contract relating to the quality of the product or service and those contract clauses prescribing inspection, and other quality controls incumbent on the Contractor, to ensure the product or service conforms to the contractual requirements. It defines how the performance standards will be applied, the frequency of surveillance, the performance threshold, and deductions, if applicable.

1.6.3 Recognized Holidays: Contractor performance shall not be required on the Federal holidays listed below unless otherwise notified by the Contracting Officer.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth National Independence Day Christmas Day Independence Day

1.6.4 Hours of Operation: The Contractor is responsible for conducting business, between the hours of 7:30 a.m. and 4:30 p.m. Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the Contractor will not be reimbursed when the Government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

Administrative Support Services M-F 7:30 a.m. – 4:30 p.m.

Maintenance M-F 7:30 a.m. – 4:30 p.m.

Repair (Scheduled) M-F 7:30 a.m. – 4:30 p.m.

(Unscheduled) Service Calls 24/7 as required and outside of standard hours of operation IDS Testing M-F 7:30 a.m. – 4:30 p.m.

1.6.5 Place of Performance: Work performed under this contract will be throughout the Fort Cavazos Main Cantonment, West Fort Cavazos, North Fort Cavazos, and in Fort Cavazos Housing Areas where

ICIDS is fielded. Key areas of performance are located at buildings 2310 on main cantonment (Administrative Support Services), 70001 on West Fort Cavazos (Furnished facility), 422 the Network Enterprise Center (NEC), and 23020 Alarm Monitoring Station.

1.6.6 RESERVED.

1.6.7 Access and General Protection Policy and Procedures: Contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204‐9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes.

1.6.7.1 FPCON: In addition to the changes otherwise authorized by the changes of clause of contract, should the US Government Force Protection Condition (FPCON) at any individual installation change, the Government may require changes in Contractor security matters or process in accordance with DoDI

2000.16. During FPCONs Charlie and Delta, only contract services that have been deemed “mission essential” by the Government will continue. Contract services will resume when the FPCON is reduced to Bravo or lower.

1.6.7.1.1 HPCON: The Contractor shall be responsible for adhering to the installation’s Health Protection Condition (HPCON) guidance regarding the COVID-19 precautionary measures.

1.6.7.2 Physical Security: The Contractor shall be responsible for safeguarding all Government equipment, information, and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured IAW Army Regulation (AR) 190-13, “The Army Physical Security Program.”

1.6.7.3 Personnel Security Clearance Requirements: The Contractor must possess a minimum of a SECRET facility clearance. Contractor personnel performing work under this contract must have an active personnel security clearance at the SECRET level in the Joint Personnel Adjudication System (JPAS) at time of the proposal submission and must maintain the level of security required for the life of the contract. The security requirements are IAW with the attached DD Form 254, “Department of Defense (DOD) Security Classification Specification” (The unit security monitor is responsible for initiating this form). The Contractor shall ensure that Contractor employees and sub-contractor employees performing services under this contract comply with FAR 52.204-2, Security Requirements when the employee has access to information classified “Confidential,” “Secret,” or “Top Secret.” The Contract will ensure the employee complies with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M), and any revisions to DOD 5220.22-M, notice of which has been furnished to the Contractor. Contractor personnel performing work under this contract must have a minimum of an interim secret clearance at time of the proposal submission, when newly hired during contract performance and must maintain the level of security required for the life of the contract. Newly hired Contractor personnel no later than 24 hours after and prior to the new employee performing any services on contract.

1.6.7.3.1 Access to Network Enterprise Centers: ALL personnel visiting the Fort Cavazos Stand Alone Network Enterprise Center (SANEC) are required to provide a Visit Authorization Letter (VAL)/Visit Authorization Request (VAR) a minimum of five working days prior to arrival. This includes DA civilians, military, and Contractors. The Primary Monitoring Console (PMC) cabinet houses the front end ICIDS-V servers and is located within the NEC data center. Instructions for the visitor request are found in attachment 3.

1.6.7.4 Background Checks: The Contractor shall ensure Contractor employees and subcontractor employees performing services under this contract have passed a security check conducted by the State Police Department of their U.S. residence. Security checks that have been completed as part of a personnel security clearance background investigation, or a previous background check that was a condition of employment, meet this requirement. Documentation of these checks will be made available to the KO or COR upon request. The Government retains the right to exclude any employee from performance of duties under this contract if a background security check reveals an employee is a security risk. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. If the Government determines additional background checks are required, at a minimum, and upon request from the Government, the Contractor shall provide to the KO or COR, the following information on any Contractor or subcontractor employee performing services under this contract:

• Full birth name

• Married name (if applicable)

• SSN or local equivalent (ID card number)

• Date of birth

• Place of birth (city, country)

1.6.7.4.1 Background Check Notification Requirements: If a background check on any employee or subcontractor employee performing services under this contract, whether the check was conducted as a condition of employment or as part of the contract with the Government, reveals any information from any source (including host country law enforcement) of criminal activity by Contractor employees, subcontractors, or subcontractor employees, the Contractor shall immediately notify the KO and COR of that information. The Contractor shall make notification of:

(1) Traffic violations, other than parking, will be reported to the KO or COR only if the contract is for drivers for the Government;

(2) Any suspicious activity by Contractor employees, subcontractors, or subcontractor employees the Contractor believes may pose a risk to U.S. or host nation national security or imminent risk of deadly bodily harm to any person; and

(3) Any actions taken against Contractor employees, subcontractors, or subcontractor employees pursuant to this requirement.

1.6.7.4.2 Remedies. In addition to other remedies available to the Government, the Contractor’s failure to comply with the requirements of this paragraph may result in requiring the Contractor to remove a Contractor employee or employees from the performance of the contract.

1.6.7.4.3 Subcontracts. The Contractor shall include the substance of this paragraph and the preceding paragraph in all subcontracts.

1.6.7.5 Contractor Common Access Card (CAC) Eligible Requirements: Before CAC issuance, the Contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05.

The Contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DOD facility and access, via logon, to DOD networks on-site or remotely; (2) Remote access, via logon, to a DOD network using DOD-approved remote access procedures; or (3) Physical access to multiple DOD facilities or multiple non-DOD federally controlled facilities on behalf of the DOD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management. Contractor personnel shall return CAC to appropriate U.S. Government authorities within five (5) days of the end of their contractual duties.

1.6.7.5.1 Federal Installation/Facility Access: Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative). The employee performing services under this contract shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, Security Office, or the host nation equivalent.

1.6.7.6 Access to Government Information Systems: All Contractor employees and subcontractor employees performing services under this contract who have access to a Government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services and must successfully completed the DoD Information Assurance Awareness training prior to access to the information system and then annually thereafter.

1.6.7.7 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. Contractor shall not duplicate keys provided by the Government. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas.

1.6.7.7.1 The Contractor shall report any occurrences of lost or duplicate keys/key cards to the KO and the COR (and physical property manager, if applicable) within two (2) hours or the next business day if after hours and to request key or lock(s) replacement. This notification and request for key(s) and lock replacement shall be submitted in writing. The total cost of the replacement may be at the Contractor’s expense.

1.6.7.7.2. Only authorized Contractor personnel shall use Government issued key(s) and/or key card(s).

Contractor personnel shall follow security access requirements when entering secure areas. Contractor shall receive appropriate security clearance approval to allow visitor(s) access in secure areas.

1.6.7.8 Reserved

1.6.8 Post Award Conference/Contract Periodic Progress Meetings: The Contractor shall attend the post award conference convened by the contracting activity or contract administration office IAW Federal Acquisition Regulation (FAR) Subpart 42.5. The KO, COR, with other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the KO will apprise the contractor of how the government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.9 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: ensure the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications;

monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.10 Key Personnel: The follow personnel are considered key personnel by the Government: Project manager/alternate project manager (PM), System Administrator and Privileged users, Administrative Support services, Maintenance and Repair Technicians. The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract.

Qualifications for all key personnel are listed below:

a) Project Manager and Alternate: The contractor shall provide a full time Project Manager and alternate who shall be responsible for the overall management and oversight of the contract.

The PM’s position shall not be an entry level management position. The PM shall serve as the contractor point of contact with the Government and shall have the authority to act or make decisions on behalf of the contractor on all matters during the performance of the resultant contract. The PM shall be available onsite between the hours of 7:30am through 4:30pm Monday through Friday and available by telephone 24 hours a day, Monday through Sunday.

The PM shall respond to Contracting Officer (KO) requests within one hour of notification.

The PM shall have a minimum of 5 years’ experience in supervision and management of systems approximately equal in size, type, and complexity to the Fort Cavazos systems and shall possess a working knowledge and experience with all the security systems covered under this contract.

b) System Administrator and Privileged Users: The Contractor shall provide services for both system and network administration (during normal duty hours, 7:30am through 4:30pm (central time), Monday through Friday, to perform administration over the ICIDS administration services may be required after normal duty hours (refer to PWS section 5).

The Contractor shall ensure there are Contractor personnel available to provide services after normal duty hours. Overtime is not authorized during the performance of the contract. The Contractor shall ensure the system and network administration positions meets the requirements outlined in AR 25-2 (Army Information Assurance). system and network administrators are responsible for overseeing the proper operation of each ESS maintained under the terms of this contract. They shall ensure all daily tasks are reviewed, submitted, documented, updated, or otherwise completed as required.

c) Administrative Support: The Contractor shall provide PIC/PIN and badging services Monday through Friday, 7:30 am through 4:30 pm. The PIC/PIN and badge Administration Services is a customer service requirement that will require excellent writing and communication skills. The Contractor shall ensure that Contractor personnel are fluent in English with excellent writing and communication skill. The Contractor personnel must be able to generate standard and customized reports, database querying, and log review/analysis.

d) Maintenance and Repair Technicians. Contractor personnel performing maintenance, repair, and system administration services. Level of certification shall commensurate with each Contractor personnel’s role and responsibility to perform maintenance, and repair during the performance of the contract. The Contractor shall schedule Maintenance during normal duty hours, 7:30am through 4:30pm (Central Time), Monday through Friday. Technicians, performing maintenance, or repair on SCIF zones or any components of a SCIF shall be required to have a Secret Security Clearance. The Contractor shall and must ensure all other technicians servicing other ESS components and zones other than a SCIF are granted and possess a minimum Confidential Security Clearance, in accordance with (IAW) AR 380–67 (Personnel Security Program). In accordance with Army Regulation 190-11(Physical Security of Arms, Ammunition, and Explosive); a check of the National Crime Information Center (NCIC) for installers and maintainers of unclassified IDSs is a command decision.

The decision will be based on the sensitivity of the area to be protected and the need for quality control over personnel having access. The Government may conduct annual checks to ensure fitness and suitability of all contract employees.

1.6.11 Special Qualifications or Certifications: Per Army Regulation 190-11 part 3-6, Alarm maintenance personnel will be certified in the respective software appropriate to the system which they will maintain.

The contractor selected for this service contract must be a current DAQ ICIDS Certified VARs (Value Added Resellers) for sales, installation, configuration, and maintenance-related services. The Contractor must maintain an active VAR status throughout the life of this contract and provide proof of VAR status prior to award of the contract. Any individual performing privileged or administrator functions on the systems be actively certified in accordance with DoD 8570.01 at the IAT (Information Assurance Technical) Level 2. The Contractor shall provide personnel possessing the skills, knowledge, and training to perform the services required by this contract. All personnel required to maintain the ICIDS-V System should complete the ICIDS-V Installation Training Courses, consisting of Operator, System Administrator, and Maintainer training. Additionally, maintenance personnel should have specific experience in computer networking, electronic component troubleshooting, fiber optic and telephone communications, access control and physical security devices.

1.6.11.1 IA/IT Training Certification: All Contractor employees and subcontractor employees supporting IA/IT functions must be certified upon contract award as directed in DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2. Baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.12 Identification of Contractor Employees: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as Government employees. This identification includes meeting attendance, answering Government telephones, email communications, and working in other situations where Contractor status is not obvious. Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc.

1.6.12.1 Badging of Contractor Employees: If required by the Government, contract personnel and all associated subcontractor’s employees accessing U.S. facilities or activities, shall present a valid picture ID provided by the Government while accessing Government owned or contracted facilities and shall adhere to facility security policies and restrictions. If applicable, Government issued access badges will not be worn outside designated facility where visible to the general public. Contractor personnel shall return all U.S. Government issued identification to appropriate U.S. Government authorities within five

(5) days of the end of their contractual duties.

1.6.13 Reserved

1.6.14 Reserved

1.6.15 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.16. Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply, and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.6.16.1 Reserved.

1.6.16.2 Advertisement and Social Media: The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The use of propaganda violates DOD Commercial Use of Imagery Guidelines stated at (http://www.defenseimagery.mil/products/DODimagery/commercialuse.html). The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.6.16.3 Information Assurance: At no time will the Contractor or associated sub-contractor employees transmit Government documents or information over using methods that do not meet the security requirements specified in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" such as personal electronic mail accounts, public digital data storage sites (cloud storage), social media platforms or instant messaging. Approved Government sites such as U.S. Army Aviation and Missile Research Development and Engineering Center (ARMDEC) Safe Exchange at https://safe.amrdec.army.mil/SAFE/About.aspx, or All Partners Access Network (APAN) at https://community.apan.org/, or other transmission means determined by the Government must be used.

1.6.17 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications, or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor http://www.defenseimagery.mil/products/dodimagery/commercialuse.html shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.18 Phase-in/Phase-Out (PIPO) Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the contractor shall have personnel on board, during the thirty (30) day phase in period. During the phase in period, the contractor shall become familiar with performance requirements, obtain Contractor CACs, complete all training identified in part 1.6.19, establish Government email accounts, access to the Fort Cavazos network, familiarize technicians with fielded ESS, and receive system username and passwords. Contractors shall make transitions during each period with the outgoing and incoming Contractor to transition occupancy of building 70001 in order to commence full performance of services on the contract start date. Prior to acceptance of the facility as the outgoing Contractor shall ensure the facility is cleared of all Contractor owned equipment and office supplies, cleaned and approved by the COR. During the phase-out period, to ensure 12 months of service are provided it is expected the Contractor will be performing while simultaneously phasing out over a 30-day period. It is expected during this time the Contractor will familiarize the in-coming Contractor with each system, issuance of username and passwords, keys, removal of Contractor property, transfer of incidental property, and final vacating of the building 70001 and the PIC/PIN office in building 2310.

1.6.19 General Training Requirements:

1.6.19.1 Anti-Terrorism (AT) Level I Training: All Contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I Awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 5 calendar days after completion of training by all employees and subcontractor personnel. AT level I Awareness training is available at the following website: http://jko.jten.mil.

1.6.19.2 OPSEC Training: Per AR 530‐1, Operations Security, the contractor employees must complete

Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. All Contractor employees and sub-Contractor employees performing services under this contract will complete Level I OPSEC training within 30 calendar days of employment under this contract. OPSEC Level I training is available at https://jkodirect.jten.mil, course number "EUC-ECJ6-110-N-LB". Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local OPSEC Officer at their assigned location for classroom training by a Level 2 trained OPSEC Officer and a copy of either the training certificate or the training attendance roster signed by the OPSEC Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or KO upon request.

1.6.19.3 Information Assurance (IA)/Information Technology (IT) Training: All Contractor employees and associated subcontractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01‐M and AR 25‐2 within six months of appointment to IA/IT functions. https://cs.signal.army.mil/login.asp http://jko.jten.mil/ https://jkodirect.jten.mil/ https://cs.signal.army.mil/login.asp

1.6.19.4 Threat Awareness Reporting Program (TARP Training): Within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract and require a security clearance, shall complete TARP training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR within ten (10) calendar days after completion of training by all employees and subcontractor personnel. TARP training is available at the Army Learning Management System (ALMS) https://www.lms.army.mil/. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local Counterintelligence (CI) Officer at their assigned location for classroom training and a copy of either the training certificate or the training attendance roster signed by the CI Officer will be maintained by the Contractor. Verification of the training will be provided to the Contracting Officer (KO) or Contracting Officer Representative (COR) within ten (10) calendar days after completion of the training.

1.6.19.5 iWATCH Training: The contractor and all associated sub‐contractors shall brief all employees on the local iWATCH Army program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 5 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

http://www.lms.army.mil/

PART 2

DEFINITIONS & ACRONYMS

(This section includes all appropriate terms and phrases for this PWS. The definition must be clear and concise, not ambiguous. Carefully consider each definition because they will be binding for the duration of this contract, unless modified. In addition, include a complete listing of all acronyms and words or phrases they represent.)

2. Definitions and Acronyms:

2.1. Definitions:

Adjust: Performing the necessary modifications to return the performance of the part to within the stated acceptable range.

As Indicated: Shall be defined to mean "as shown on the drawings and described in the specifications.”

Beneficial Occupancy Date (BOD): The beneficial occupancy date is the date on which beneficial occupancy is granted to the agency requiring use of the facility following construction. By mutual agreement, the occupying agency will allow the construction agency access as required to complete remaining items of construction pursuant to the construction contract.

Catastrophic Failure Report (CFR): Generated report to identify account failures, typically during multiple account outages. Report identifies by category of asset, location, Major Subordinate Command (MSC) by priority. Report is distributed electronically and/or hand delivered to the Contracting officer and COR (or Chief Physical Security if the COR is unavailable). Report is updated periodically as required to report accounts returned or additional account failures.

Check: To observe a system or its components for satisfactory operating performance, condition, and accuracy as compared to its designed operating parameters and to repair all deficiencies discovered.

Clean: Free from dirt, foreign material, debris, contamination, or impurities; unsoiled, unstained, recently laundered.

Contingencies: A future event or circumstance that is possible but cannot be predicted with certainty.

Contractor: A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contract Administrator: This is official Government representative delegated authority by the Contracting Officer to administer a contract. This individual, normally working in an appropriate contracting or procurement career field, advises on all contractual matters.

Contracting Officer: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Contracting Officer’s Representative (COR): An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Customer Service Order (CSO): Service document that identifies repair, materials and a detailed write up of work completed. This service order requires time sensitive submission and Government signature for acceptance of work. It is used to validate work completed for the monthly billing cycle.

Defect: Any nonconformance of a unit of service with specified requirements.

Defective Service: A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deficiency List: List or report of deficiencies noted on an inspection.

Deliverable: Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

Electronic Security System (ESS): The collection of electronic systems hardware, components, software, and interconnecting communication media that together provide the functions of intrusion detection, alarm assessment, surveillance, and access control.

EntroStar Panel: The EntroStar Panel is an alternative option to the Local Controller (LC) for the purpose of entry control. Similar to an LC, it collects and processes the devices for a portal which must consist of an entry control device, exit device, door position sensor, and locking mechanism.

Family of Systems (FOS): All sub-systems and components used in support of the primary system, or a group of systems used in support of a specific program. All parts and components added or renewed are equal to or like in kind to maintain the FOS.

Incidental Property. Property provided to the Contractor and not considered Government Furnished Property or Contractor Acquired Property.

Inspect: To conduct a close, thorough, and critical appraisal of the systems, equipment, components, and services covered by this contract and to provide detailed written reports on the conditions observed.

Installation: Installation is to install a fully functional system.

Key Control: The establishment, implementation and maintenance of systems and records to identify holders of all keys; verify authorization of key cutting orders; cross-reference keys, room numbers, lock/key brand/type; document lost keys; and restrict access to keys and key records.

Key Personnel: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

Maintain: To furnish necessary resources including repairs and parts to keep systems and components operating in a safe, effective, and reliable manner, to extend its useful life, and to minimize unscheduled downtime.

Operate: To furnish all labor to systematically ensure that systems and equipment are properly performing their intended and designed functions and are functioning safely, effectively, and efficiently for reliable, trouble-free service.

Operator Workstation (OPWS) is where the System User interfaces with the ICIDS-V software to perform monitoring functions.

Operation: To adjust, control or guide a specific thing to produce a specific performance or result in accordance with a specific operating procedure.

O&M Package: Operations & Maintenance Manuals, package is provided by the Contractor responsible for the security contract work on any project, regardless of execution agency and includes as minimum, but not limited to; Contractor information i.e., name, supervisor, contact information, address or corporate or local office, Warranty Information and contact number, Installed parts list, spare parts list, model/serial number, component cut sheets, quantity, drawings for construction that show all device locations, type of device, complete power and communication path, IP address, routing…