Attachment 2 IDS_ACS SOW.pdf

Attachment 2

STATEMENT OF WORK (SOW)

Hawaii Air National Guard

IDS/ACS System Installation

150th EWS Compound, PMRF, Barking Sands, Kauai, Hawaii

109th EWS ARMAG, JBPHH (Hickam), Honolulu, Hawaii

1. The 150th Electromagnetic Warfare Squadron (EWS) at Pacific Missile Range Facility Barking Sands (PMRF), Kauai, Hawaii & 109th EWS at JBPHH requires installation of an Access Control Systems (ACS) and Intrusion Detection Systems (IDS). The ability to properly store critical assets in accordance with Intelligence Community Directive (ICD) 705 requires these new systems to be operational prior to facility accreditation. Each facility requires an IDS and ACS independent of each other and independent from the compound area as a whole. All IDS equipment will be installed within the confines of 150th EWS compound area at PMRF. The IDS and ACS will be installed in Bldg 1116 (PMRF)/ARMAG near Bldg 3400 (JBPHH) and will be protected by Multiplexer (Lenel), keypad, dual reader interface module (Lenel), balanced magnetic contacts, exit sensor, electric latch bolt, door position switch, electronic door locks. The IDS shall be a networked with the existing network/alarm system. System/Product/Components must conform to the latest standards of the following prescribed guidance: ICD/ICS 705-01 Version 1.5 (“Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities”), UL 2050 (“National Industrial Security Systems for the Protection of Classified Material”), UFC 4-021-02 (“Electronic Security Systems”), and Air Force Instruction/AFI 31- 401 (“Department of the Air Force Information Security Program”).

2. The contractor shall coordinate a site survey with the customer prior to ordering equipment to document locations of existing conduit, boxes and raceway installed by others for this system. The contractor will verify that the existing system components, previously installed are located and installed in accordance with all applicable ICD/ICS 705 Chapter 7 & 8, security system codes and requirements. The contractor will design, estimate, procure and install all needed system hardware, cabling, accessories, and all programming to install this IDS within 150th EWS compound area. Only components from the current Air Force Non-Nuclear Intrusion Detection System Approval memo will be utilized.

3. The contractor shall provide all labor, equipment, tools, materials, supplies and supervision to include all consumable items, transportation and other items and services necessary to provide and install the following:

3.1. SCOPE: The contractor shall perform the following services for the installation in a phased in process, with Lenel certified alarm components and associated equipment.

3.1.1. Intrusion Detection Components:

3.1.1.1.1. Install hardware at all existing device rough-in boxes (wall and ceiling) and conduit provided by others, inclusive of but not limited to Multiplexer (Lenel), keypad, dual reader interface module (Lenel), balanced magnetic contacts, exit sensor, electric latch bolt, door position switch, electronic door lock(s).

3.1.1.1.2. Contractor shall utilize existing security system roughed in conduit with pull strings and device boxes and install new ACS/IDS devices, where applicable to make a complete and usable ACS/IDS system.

3.1.1.1.3. Contractor shall leave in place all current rough in conduit and device box(es) components identified as unnecessary in a manner to not damage existing materials or systems within Bldg 1116/ARMAG near Bldg 3400.

3.1.1.1.4. Contractor shall replace existing interior finishes damaged during ACS/IDS install to match existing.

3.1.1.1.5. System cabling entering & exiting the secure areas shall be routed in existing rigid conduit installed by others to greatest extent possible. Any new material required to provide a complete and usable ACS/IDS system shall be coordinated with Contracting Officer.

3.1.1.1.6. To the extent possible, all telecommunication cabling within the secure areas shall be installed in existing conduit from the existing outlet box provided by Nan Inc. Contractor to utilize existing pull string provided for new cabling. Contractor to terminate all new system cabling per ICD-705.

3.1.1.1.7. The system shall include battery backup lasting no less than twenty-four (24) hours.

3.1.1.1.8. Coordinate all programming of the system with:

150 EWS

2d Lt Jayleen Millan, Jaylen.millan@spaceforce.mil 808-789-1622 mailto:Jaylen.millan@spaceforce.mil

109 EWS

TSgt John Valdez, john_edward.valdez@spaceforce.mil 808-426-3941

3.1.1.1.9. Each alarm device will have its own alarm point.

3.1.1.1.10. The contractor shall provide a proposal for providing a certified technician to provide warranty response within 24 hours from a call requesting warranty support.

3.1.2. The contract shall be effective for one year from the date of approval. No options will be attached to the contract.

5. TRAINING: Contractor shall provide up to six (6) hours of training to designated 150th

EWS/109th EWS staff personnel and Controlled Area Monitors on the operation of the alarm system; e.g. how to activate, reset, test, etc.

6. DOCUMENTATION: Contractor shall provide three (3) compact disk(s) (CD) with electronic As-Built Drawing(s) (PDF and AutoCAD) following the completion of all work to 150 EWS/109 EWS and provide those as part of the final Performance Verification Test (PVT).

7. SAFETY: The contractor shall provide all safety gear to include, hard hats, eye protection, ear/sound protection, and any other safety equipment required for safe working conditions while meeting all applicable safety codes / requirements. The contractor is also responsible for proper safety around the work area. The contractor shall visit the site with the contracting officer or designated representative to document existing conditions to ensure any unsafe conditions are corrected prior to start of work.

8. SYSTEM CHECK: The Contractor shall complete a system check to include but not limited to ensuring all installed components are functioning to manufacturer specifications, certified test requirements.

8.1. Testing: 30-day continuous operational test to assess how well the system performs in its normal operating mode on a permanent basis. This test is to detect any premature or latent defects in the equipment or components and to allow the operators and maintainers an opportunity to assess the adequacy of logistics support, and assess the false and nuisance alarm rates of the system. After successful completion of this test phase, the using organization will request National Guard Bureau certification.

9. SECURITY AND PRIVACY: This applies to all contractor personnel including delivery drivers requiring access to PMRF and JBPHH (Hickam). Personnel will be required to divulge Privacy Act information as required to meet Air Force security requirements.

mailto:john_edward.valdez@spaceforce.mil

9.1. Base Entry Requirements. The contractor shall obtain base identification and any required vehicle passes for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. The contractor shall, within three (3) working days after receiving award, submit a written request on company letterhead to the contracting officer listing the following: contract number, location of work site, start and stop dates, hours of required access, and names of employees and subcontractor employees requiring installation access. The letter must include the employee name, date of birth, Real-ID driver license (or state issued ID or passport) number, and State of Issuance for the purpose of background vetting.

Contractor will also complete and submit SECNAV Form 5512/1 and JB2 Form 0- 180 to 2d Lt Millan or TSgt Valdez who will than endorse the request and submit to Security Forces for processing. For all contracts, 2d Lt Millan or TSgt Valdez will forward the request to the 647sfs.sf.pass_reg@us.af.mil org box. Submission of late, inaccurate or incomplete information could delay issuance of access credentials.

During performance of the contract, the contractor shall be responsible for obtaining required identification for newly assigned personnel and for prompt return of credentials to the KO or Government Point of Contact (POC), for any employee who no longer requires access to the work site. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

9.2. Contractor Consent to Background Checks: The contractor and, as applicable, subcontractor shall not employ persons for work on this contract, if such employee is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population, nor shall the contractor or Subcontractor employ persons under this contract who have an outstanding criminal warrant as identified through the National Crime Information Center. Checks will verify if a person is wanted by local, state, and federal agencies. All contractor and subcontractor personnel must consent to background checks. Contractor and subcontractor personnel who do not consent to a check will be denied access to the installation. Information required to conduct a check includes: full name, driver’s license number, state of issue, and date of birth of the person entering the installation, and completion of a background check questionnaire. The contractor shall provide this information to the USPFO Hawaii P&C Division (Contracting Office) on company letterhead.

9.3. Contractors shall ensure their employees and those of their subcontracts are U.S.

citizens. Persons later found to be undocumented or illegal aliens will be remanded to the proper authorities. The contractor shall not be entitled to any compensation for delays or expenses associated with complying with the provisions of this clause.

Furthermore, nothing in this clause shall excuse the contractor from proceeding with the contract as required.

9.4. Contractor Registration of Vehicles on Hickam AFB: All contractor or contractor mailto:647sfs.sf.pass_reg@us.af.mil employees’ vehicles used for the performance of this contract shall comply with all local, state and federal regulations. Additionally any pass shall be surrendered to Security Forces upon demand to positively identify a persons need to be on Hickam

AFB.

9.5. Entry Requirements for Controlled or Restricted Areas. In the event where the work will take place within an Air Force Controlled or Restricted Area (i.e. airfield, aircraft parking areas, classified areas, armories, pharmacies etc.), access into the area will be denied unless contractor employees, to include sub-contractors, are identified on an approved Entry Authority List. The contractor is responsible for providing the names, date of birth, driver’s license number and state of issue for each employee to 2d Lt Millan or TSgt Valdez, at least 30 days prior to the first day of performance. The request must also include the Contract Number, the specific location of the Controlled/Restricted area where work will be accomplished, and inclusive dates required for contract performance. All requests for Installation Access Credentials must be on Company letterhead. 2d Lt Millan or TSgt Valdez will in turn provide the information to Security Forces Installation Security Section, for processing. The submission of employee information for EAL purposes is a separate requirement from the submission of information for Installation Access Passes and must be on separate letters.

9.6. Property Protection: Property protection for facility where the contractors’ primary work center is located will be the responsibility of the local facility manager and local Government Site Security Manager, or their duly authorized representative IAW AFI 31-101, Integrated Defense and command/local directives. The contractor shall safeguard all government-owned equipment and materials in his/her possession or use. Additionally, the Contractor is to adhere to providing a system capable of safeguarding classified information IAW Chapter 2 of the IC Tech Spec-for ICD/ICS 705, via close coordination with the assigned Government Site Security Manager (SSM), who is responsible to conduct risk management using an Analytical Risk Management Process. The SSM then provides the definable features of work/salient features of work to the contractor’s specification writer.

9.7. ICS 705-1 and IC Tech Spec-for ICD/ICS 705 (Chapters 7 & 8 - provide the minimum and enhanced security requirements).

9.8. Safeguarding Classified or Unclassified Information: The contractor will not handle any classified material. Additionally, all resources (e.g. maps, publication/instructions, photos) provided by the government to assist the contractor in the performance of their contract will be surrendered upon termination of employment or the end of the contract performance period.

9.9. Privacy Act: Work on this project requires that personnel have access to Privacy Information. Personnel shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

9.10. CONTINUED SERVICE: The contractor shall provide a proposal for maintenance, repair, upgrade, and replacement of systems outside of the standard warranty period specified in paragraph 3.1.1.1.10. This proposal shall include a response time of 24 hours from a call requesting maintenance support.

Acronyms:

1. AFI: Air Force Instruction

2. AFTO: Air Force Technical Order

3. BMS: Balanced Magnetic Switch

4. ESS: Electronic Security System

5. IAW: In Accordance with

6. MAJCOM: Major Command

7. SOW: Statement of Work

8. UL: Underwriters Laboratories

References:

1. AFI 31-101, Integrated Defense

2. AFTO 747, Communications and Information Systems Acceptance Certificate

3. Air Force Memorandum, Non-Nuclear Intrusion Detection System Approval

4. IC Tech Spec-for ICD/ICS 705 “Technical Specifications for Construction and

Management of Sensitive Compartmented Information Facilities v1.5.

5. NFPA 70, National Electrical Code

6. UFC 4-010-05, Sensitive Compartmented Information Facilities Planning, Design, and

Construction, Change 1, 2013; Section 3-5.13

7. Department of Defense Manual 5105.21 V2, Sensitive Compartmented Information (SCI)

Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security

Antiterrorism / Operations Security / Information Protection Requirements

1. Access and General Protection/Security Policy and Procedures. This standard language is for contractor employees with an area of performance within Government controlled installation, facility, or area. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the Contracting Officer’s Representative (COR). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the local installation’s Security Forces, Director of Emergency Services or local Security Office. The contractor shall ensure compliance with all personal identity verification requirements as directed by DoD, HAF and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

2. For Contractors that do not require CAC, but require access to a DoD Facility and/or Installation. Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (DODIO 2000.16V1_DAFI 31-145, DAFI 31-101 and DODM 5200.08v3_DAFMAN 31- 101v3), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

3. Antiterrorism Awareness Level I Training (AT Level I). This standard language is for contractor employees with an area of performance within a US Government controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access to US Government installations, facilities and controlled access areas shall complete AT Level I training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. AT Level I may be accomplished by a Level I qualified instructor; completing the Force Protection computer based training (CBT) course on Joint Knowledge Online (JKO) at https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf. For those without a CAC, select "Non-CAC" user on the JKO site. Tracking for each contractor or subcontractor employee is the responsibility of the COR or unit AT Representative.

4. Requirement for OPSEC Training. In accordance with AFI 10-701, Operations Security, OPSEC PMs/SMO/SMNCOs/Coordinators will provide OPSEC training or training materials to contract employees within 30 days of employees’ initial assignment to the contract and prior to having access to any critical information (CI) and annually thereafter.

General organizational orientations may need to be supplemented by duty-related orientations in the work center targeted toward specific critical information and vulnerabilities associated with the work. Initial training (OPSE 1301 - OPSEC Fundamentals) located on the Defense Counterintelligence and Security Agency website:

https://securityawareness.usalearning.gov/opsec/index.htm and the OPSEC Annual training- DAF Operations Security Awareness Training located on My Learning https://lms-jets.cce.af.mil/moodle/course/view.php?id=11654#section-1

5. Requirement for OPSEC Training. In accordance with AFI 10-701, Operations Security, OPSEC PMs/SMO/SMNCOs/Coordinators will provide OPSEC training or training materials to contract employees within 30 days of employees’ initial assignment to the contract and prior to having access to any critical information (CI) and annually thereafter.

General organizational orientations may need to be supplemented by duty-related orientations in the work center targeted toward specific critical information and vulnerabilities associated with the work. Initial training (OPSE 1301 - OPSEC Fundamentals) located on the Defense Counterintelligence and Security Agency website:

https://securityawareness.usalearning.gov/opsec/index.htm and the OPSEC Annual training- DAFOperations Security Awareness Training located on My Learning https://lms-jets.cce.af.mil/moodle/course/view.php?id=11654#section-1

6. For Information Assurance (IA) / Information Technology (IT) Training. All contractor employees and associated sub-contractor employees shall complete the DoD Information Assurance Awareness Cyber Awareness Challenge before issuance of network access and annually thereafter. All contractor employees performing services involving IA/IT functions shall comply with DoD and Air Force training requirements in DoDD 8140.01, DoD 8570.01-M and AFPD 33-2 within 45 days of the start of contract performance

Organizational Conflicts of Interest (OCI)

1. The contractor and subcontractor personnel performing services under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs, as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO. In the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.