Attachment 2 SOW FA8501-23-Q-0008.pdf

FA8501-23-Q-0008

ATTACHMENT 2

STATEMENT OF WORK

STATEMENT OF WORK (SOW)

Air Force Reserve Command Headquarters

IDS/ACS/CCTV System and Installation

Bldg 556, Robins AFB, GA

1. Headquarters Air Force Reserve Command (HQ AFRC) at B556, Robins Air Force Base, Georgia, requires installation of three Access Control Systems (ACS), three Intrusion Detection Systems (IDS), and three Closed Circuit Television (CCTV) monitoring systems for three areas.

The ability to properly store critical assets in accordance with Intelligence Community Directive (ICD) 705 requires these new systems to be operational prior to facility accreditation. Each facility requires an IDS and ACS independent of each other and independent from the building as a whole. The CCTV systems shall be independent as well but with one shared camera. All equipment shall be installed within the confines of bldg 556 located on Robins AFB. The IDS, ACS, and CCTV shall be installed in bldg 556 and shall be protected by multiple security components inclusive of but not limited to balanced magnetic switches, card reader access system, premise control unit, access control panel, security system control panel, electronic door lock(s), door position switch, passive infrared devices, duress buttons, etc. The IDS shall be a networked with the existing network/alarm system operating within the 78 SFS Base Defense Operations Center (BDOC), located on Robins AFB. System/Product/Components must conform to the latest standards of the following prescribed guidance: ICD/ICS 705 Version 1.4 (“Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities”), UL 2050 (“National Industrial Security Systems for the Protection of Classified Material”), UFC 4-021-02 (“Electronic Security Systems”), and Air Force Instruction/AFI 31-401 (“Department of the Air Force Information Security Program”).

2. The contractor shall utilize blueprints/schematics to bldg. 556 and coordinate with Government Customer POC and CE POC as needed prior to ordering equipment starting work and/or modifications. The contractor shall design, estimate, procure and install all needed system hardware, cabling, accessories, and all programming to install this IDS within bldg 556 based on schematics provided by the customer. Any required modifications to existing building infrastructure shall be coordinated through the customer and the Facility Owner. Only components from the current Air Force Non-Nuclear Intrusion Detection System Approval memo shall be utilized.

3. The contractor shall provide all labor, equipment, tools, materials, supplies and supervision to include all consumable items, transportation and other items and services necessary to provide and install the following:

ATTACHMENT 2

3.1. SCOPE: The contractor shall perform the following services for the installation in a phased in process.

3.1.1. Intrusion Detection Components:

3.1.1.1. Install hardware at all existing device rough-in boxes (wall and ceiling) and conduit provided by others. Equipment shall be inclusive of but not limited to balanced magnetic switches, premise control unit, security system control panel, passive infrared devices, and duress buttons.

3.1.1.2. Contractor shall utilize existing security system roughed in conduit with pull strings and device boxes and install new IDS devices, where applicable to make a complete and usable IDS.

3.1.1.3. Contractor shall leave in place all current rough in conduit and device box(es) components identified as unnecessary in a manner to not damage existing materials or systems within bldg 556.

3.1.1.4. Contractor shall replace existing interior finishes damaged during IDS install to match existing.

3.1.1.5. System cabling entering & exiting the secure areas shall be routed in existing rigid conduit installed by others to greatest extent possible. Any new material required to provide a complete and usable IDS system shall be coordinated with Contracting Officer.

3.1.1.6. To the extent possible, all telecommunication cabling within the secure areas shall be in existing conduit from the existing outlet box provided by others for the IDS contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per

ICD-705.

3.1.1.7. The system shall include battery backup lasting no less than twenty-four (24) hours.

3.1.1.8. Coordinate all programming of the system and map of the area(s) with 78 SFS.

ATTACHMENT 2

3.1.1.9. Provide an applicable drawing(s) that indicates all designated alarm points that shall be programmed into the base alarm system; this shall be reviewed by 78 SFS during material submittals.

3.1.1.10. Provide a complete list of alarm devices to 78 SFS which shall be reviewed during the material submittals.

3.1.1.11. Contractor shall coordinate with 78 SFS for alarm point numbers for programming after installation is complete; this shall also be provided to 78 SFS as a hard copy and electronic copy.

3.1.1.12. After alarm system installation but before alarm system programming, 78 SFS shall conduct an inspection of the installed parts.

3.1.1.13. Each alarm device shall have its own alarm point.

3.1.1.14. The contractor shall provide warranty support for all parts, installation, and labor for a period of one year. The contractor shall provide onsite support within 24 hours of customer request.

3.1.2. Access Control Components

3.1.2.1. Install hardware at all existing device rough-in boxes (wall and ceiling) and conduit provided by others. Hardware shall include at a minimum a Radio Frequency Identification (RFID) card reader with integrated Personal Identification Number (PIN) pad and a control station to associate cards with the ACS.

3.1.2.2. Contractor shall utilize existing roughed in conduit with pull strings and device boxes and install new ACS devices, where applicable to make a complete and usable ACS.

3.1.2.3. Contractor shall leave in place all current rough in conduit and

3.1.2.4. Contractor shall replace existing interior finishes damaged during ACS install to match existing.

3.1.2.5. System cabling entering & exiting the secure areas shall be routed in existing rigid conduit installed by others to greatest extent possible. Any

ATTACHMENT 2

new material required to provide a complete and usable ACS shall be

3.1.2.6. To the extent possible, all telecommunication cabling within the by others for the contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per ICD-705.

3.1.2.7. Additional equipment shall include a single RFID card printer for issuing cards to assigned personnel.

3.1.3. Closed Circuit Television Components:

3.1.3.1. Install hardware at all existing device rough-in boxes (ceiling) and conduit provided by others. Hardware shall include cameras and monitoring stations. No recording systems shall be utilized.

3.1.3.2. Contractor shall utilize existing roughed in conduit with pull strings and device boxes and install new CCTV devices, where applicable to make a complete and usable CCTV system.

3.1.3.3. Contractor shall leave in place all current rough in conduit and

3.1.3.4. Contractor shall replace existing interior finishes damaged during CCTV install to match existing.

3.1.3.5. System cabling entering & exiting the secure areas shall be routed in existing rigid conduit installed by others to greatest extent possible. Any new material required to provide a complete and usable CCTV shall be

3.1.3.6. To the extent possible, all telecommunication cabling within the by others for the contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per ICD-705.

3.1.3.7. Each CCTV system shall be independent of the others and shall monitor the door outside the individual facility where it is installed. The only exception is the camera monitoring the outer man-trap door, which shall be monitored by all three systems.

ATTACHMENT 2

3.2. Installation and Delivery: The installation of the ACS-IDS-CCTV systems shall take no more than 90 days from the start of physical installation. Delivery of equipment shall be no more than two weeks from receipt of award.

4. All data transmission lines shall be protected with a National Institute of Standards and Testing (NIST) certified Advanced Encryption Standard (AES) encryption. Units must keep the certification on file for the life cycle of the system. NOTE: Current systems as of the publication date of the current AFI 31-101, Integrated Defense, shall be grandfathered: however any upgrades or newly installed systems shall meet with AO approval.

4.1. The contractor shall coordinate with the 78 SFS on the installation of mounted alarm boxes and fiber cables/copper pairs prior to installation, or when within 80 percent of completion to ensure correct placement of equipment.

5. TRAINING: Contractor shall provide up to six (6) hours of training to designated HQ AFRC Staff and Controlled Area Monitors on the operation of the IDS, ACS, and CCTV system (e.g.

how to activate, reset, test, add users, etc.)

6. DOCUMENTATION: Contractor shall provide three (3) compact disk(s) (CD) with electronic As-Built Drawing(s) (PDF and AutoCAD) following the completion of all work to 78 SFS and provide those as part of the final Performance Verification Test (PVT).

7. SAFETY: The contractor shall provide all safety gear to include, hard hats, eye protection, ear/sound protection, and any other safety equipment required for safe working conditions while meeting all applicable safety codes / requirements. The contractor is also responsible for proper safety around the work area. The contractor shall visit the site with the contracting officer or designated representative to document existing conditions to ensure any unsafe conditions are corrected prior to start of work.

8. SYSTEM CHECK: The Contractor shall complete a system check to include but not limited to ensuring all installed components are functioning to manufacturer specifications, certified test requirements, Phase I, Phase II, and Phase II.

8.1. Certification Test Requirements. The Security Forces Administrator shall conduct functional and operational certification tests of the ACS/IDS to ensure the system meets effectiveness standards and compliance requirements. Note: This test and certification process must be accomplished before ACS/IDS is deemed operational. The testing and certification shall occur in three (3) phases.

ATTACHMENT 2

8.2. Phase I: The contractor shall perform a Contractor Verification Test (CVT) shall occur upon ACS/IDS installation at each facility or groups of facilities. The contractor, HQ AFRC/A2S representative, and the 78 SFS representative shall witness this test. The test shall be performed IAW the written testing procedures provided in the Installation Design Package (IDP). Any component found to be inoperative during the test or at any time during the installation period shall be brought to the attention of the Security Forces POC.

Acceptance testing shall consist of the following: intrusion tests, tamper tests, annunciation test, assessment test, AC power loss test, line supervision test, sensor system self-tests, and access control.

8.3. Phase II Testing: Phase II testing is a 72-hour continuous test that ensures all equipment is installed properly and works according to specifications. It shall establish initial expectations in regard to false and nuisance alarm. The AFTO 747, Communications and Information Systems Acceptance Certificate, transferring the system shall be signed after successful completion of this test phase. AFTO 747 is used to signify the completion of the project and acceptance of the installed system by the user. The completion of this form means the system has been tested and accepted as installed, and all noted exceptions shall be corrected by the responsible party to the satisfaction of AFRC/A2S and 78 SFS. The decision to accept the successful completion of the test phase is a commander-level decision and should be completed by the appropriate commander.

8.4. Phase III Testing: Phase III testing is a 30-day continuous operational test to assess how well the system performs in its normal operating mode on a permanent basis. This test is to detect any premature or latent defects in the equipment or components and to allow the operators and maintainers an opportunity to assess the adequacy of logistics support and assess the false and nuisance alarm rates of the system. After successful completion of this test phase, the using organization shall request MAJCOM certification.

8.5. Phase II and III Testing shall be completed by the government.

9. SECURITY AND PRIVACY: This applies to all contractor personnel including delivery drivers requiring access to Robins AFB. Personnel shall be required to divulge Privacy Act information as required to meet Air Force security requirements.

9.1. Base Entry Requirements. The contractor shall obtain base identification and any required vehicle passes for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. The contractor shall, within three

(3) working days after receiving award, submit a written request on company letterhead to the contracting officer listing the following: contract number, location of work site, start and stop dates, hours of required access, and names of employees and subcontractor employees requiring installation access. The letter must include the employee name, date of birth, Real-

ATTACHMENT 2

ID driver license (or state issued ID or passport) number, and State of Issuance for the purpose of background vetting. The Contracting Officer (CO) or Contracting Officer Representative (COR) shall endorse the request and submit to Security Forces for processing.

For all contracts, the CO or COR shall forward the request to the 78sfs.sf.pass_reg@us.af.mil org box. Submission of late, inaccurate or incomplete information could delay issuance of access credentials. During performance of the contract, the contractor shall be responsible for obtaining required identification for newly assigned personnel and for prompt return of credentials to the CO or COR, for any employee who no longer requires access to the work site. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

9.2. Contractor Consent to Background Checks: The contractor and, as applicable, subcontractor shall not employ persons for work on this contract, if such employee is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population, nor shall the contractor or Subcontractor employ persons under this contract who have an outstanding criminal warrant as identified through the National Crime Information Center. Checks shall verify if a person is wanted by local, state, and federal agencies. All contractor and subcontractor personnel must consent to background checks. Contractor and subcontractor personnel who do not consent to a check shall be denied access to the installation. Information required to conduct a check includes full name, driver’s license number, state of issue, and date of birth of the person entering the installation, and completion of a background check questionnaire. The contractor shall provide this information to the 78 CONS on company letterhead.

9.3. Contractors shall ensure their employees and those of their subcontracts are U.S.

citizens. Persons later found to be undocumented or illegal aliens shall be remanded to the proper authorities. The contractor shall not be entitled to any compensation for delays or expenses associated with complying with the provisions of this clause. Furthermore, nothing in this clause shall excuse the contractor from proceeding with the contract as required.

9.4. Contractor Registration of Vehicles on Robins AFB: All contractor or contractor employees’ vehicles used for the performance of this contract shall comply with all local, state and federal regulations. Additionally, any pass shall be surrendered to Security Forces upon demand to positively identify a persons need to be on Robins AFB.

9.5. Entry Requirements for Controlled or Restricted Areas. In the event where the work shall take place within an Air Force Controlled or Restricted Area (i.e., airfield, aircraft parking areas, classified areas, armories, pharmacies etc.), access into the area shall be denied unless contractor employees, to include sub-contractors, are identified on an approved Entry Authority List (EAL). The contractor is responsible for providing the names, date of birth, ATTACHMENT 2 driver’s license number and state of issue for each employee to the CO or COR, at least 30 days prior to the first day of performance. The request must also include the Contract Number, the specific location of the Controlled/Restricted area where work shall be accomplished, and inclusive dates required for contract performance. All requests for Installation Access Credentials must be on Company letterhead. The CO or COR shall in turn provide the information to Security Forces Installation Security Section, for processing.

The submission of employee information for EAL purposes is a separate requirement from the submission of information for Installation Access Passes and must be on separate letters.

9.6. Property Protection: Property protection for facility where the contractors’ primary work center is located shall be the responsibility of the local facility manager and local Government Site Security Manager, or their duly authorized representative IAW AFI 31-101, Integrated Defense and command/local directives. The contractor shall safeguard all government-owned equipment and materials in his/her possession or use. Additionally, the Contractor is to adhere to providing a system capable of safeguarding classified information IAW Chapter 2 of the IC Tech Spec-for ICD/ICS 705, via close coordination with the assigned Government Site Security Manager (SSM), who is responsible to conduct risk management using an Analytical Risk Management Process. The SSM then provides the definable features of work/salient features of work to the contractor’s specification writer.

9.7. ICS 705-1 and IC Tech Spec-for ICD/ICS 705 (Chapters 7 & 8 - provide the minimum and enhanced security requirements).

9.8. Safeguarding Classified or Unclassified Information: The contractor shall not handle any classified material. Additionally, all resources (e.g., maps, publication/instructions, photos) provided by the government to assist the contractor in the performance of their contract shall be surrendered upon termination of employment or the end of the contract performance period.

9.9. Privacy Act: Work on this project requires that personnel have access to Privacy Information. Personnel shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

Acronyms:

1. 78 SFS: 78 Security Forces Squadron

2. AFI: Air Force Instruction

3. BMS: Balanced Magnetic Switch

4. ESS: Electronic Security System

5. IAW: In Accordance with

6. MAJCOM: Major Command

ATTACHMENT 2

7. SOW: Statement of Work

8. UL: Underwriters Laboratories

References:

1. AFI 31-101, Integrated Defense

2. AFTO 747, Communications and Information Systems Acceptance Certificate

3. Air Force Memorandum, Non-Nuclear Intrusion Detection System Approval

4. IC Tech Spec-for ICD/ICS 705 “Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities v1.5.

5. NFPA 70, National Electrical Code

6. UFC 4-010-05, Sensitive Compartmented Information Facilities Planning, Design, and

Construction, Change 1, 2013; Section 3-5.13

7. Department of Defense Manual 5105.21 V2, Sensitive Compartmented Information (SCI)

Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security