Attachment A 01368 Statement of Objectives.pdf

Service Maintenance Agreement for the Intrusion Detection System at

C5ISC

Statement of Objectives

Purpose: The U.S. Coast Guard Command, Control, Communications, Computers, Cyber and Intelligence Service Center (C5ISC) has a need to establish an annual service maintenance contract for its DSX electronic access control and ancillary equipment.

Scope: The offeror is to provide technician labor and DSX Inc. brand parts to keep C5ISC's electronic access control equipment operational. The service includes regular work hours and after-hours emergency support coverage with established caps on annual labor and parts.

Period of performance:

C5ISC intends to use these services for the following base and option periods:

• Base Year: 15 Sept 2023 through 14 Sept 2024

• Option Year One: 15 Sept 2024 -14 Sept 2025

• Option Year Two: 15 Sept 2025 -14 Sept 2026

• Option Year Three: 15 Sept 2026 – 14 Sept 2027

• Option Year Four: 15 Sept 2027-14 sept 2028 Note: Above periods are subject to change based on actual award date by the government contracting officer.

Place of Performance will be the C5ISC campus at 4000 Coast Guard Blvd, Portsmouth, VA 23703. Service call requests will be made by the Contracting Officer's Representative (COR) or designated technical representative.

Performance objectives and constraints

Objectives

1. Provide DSX Inc. certified and experienced technician labor capable of troubleshooting, repairing, and replacing faulty parts related to the unit's electronic access control equipment.

2. Provide same day response for emergency support calls and two-day response or sooner for routine support calls. Emergency support calls involve casualties affecting external perimeter doors of buildings and designated restricted areas.

Constraints

1. Offeror must be a current, authorized dealer for DSX Inc. equipment that operates in the Hampton Roads region and can provide a timely response to service requests.

2. Offeror’s technicians must be DSX Inc. trained and certified and have 10 or more years of experience in repairing DSX Inc. access control equipment.

3. Secret Clearance Required

Section 508 Compliance: Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) (codified at 29 U.S.C. § 794d) requires that when Federal agencies develop, procure, maintain, or use information and communications technology (ICT), it shall be accessible to people with disabilities.

Federal employees and members of the public with disabilities must be afforded access to and use of information and data comparable to that of Federal employees and members of the public without disabilities.

1. All products, platforms and services delivered as part of this work statement that, by definition, are deemed ICT or that contain ICT shall conform to the revised regulatory implementation of Section 508 Standards, which are located at 36 C.F.R. § 1194.1 & Apps. A, C & D, and available at https://www.gpo.gov/fdsys/pkg/CFR-2017-title36-vol3/pdf/CFR-2017-title36-vol3-part1194.pdf. In the revised regulation, ICT replaced the term electronic and information technology (EIT) used in the original 508 standards.

Item that contains Information and Communications Technology (ICT): Service of Electronic Access System

Applicable Exception: N/A Authorization #: N/A

Applicable Functional Performance Criteria: All functional performance criteria in Chapter 3 apply to when using an alternative design or technology that results to achieve substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4 and 5 of the Revised 508 Standards, or when Chapters 4 or 5 do not address one or more functions of ICT.

Applicable 508 requirements for electronic content features and components (including electronic reports): Does not apply.

Applicable 508 requirements for software features and components (including Web, desktop, server, mobile client applications): All requirements in Chapter 5 apply, including all WCAG Level AA Success Criteria, 502 Interoperability with Assistive Technology, 503 Application

Applicable 508 requirements for hardware features and components (including Computers & laptops; Peripheral Equipment (ex. keyboards)): All requirements in Chapter 4 apply.

Applicable 508 requirements for support services and documentation: All requirements in Chapter 6 apply.

2. When providing maintenance upgrades, substitutions, and replacements to ICT, the contractor shall not reduce the original ICT’s level of Section 508 conformance prior to upgrade, substitution or replacement. The agency reserves the right to request an Accessibility Conformance Report (ACR) for proposed substitutions and replacements prior to acceptance. The ACR should be created using the on the Voluntary Product

Accessibility Template Version 2.2 508 (or later). The template can be located at https://www.itic.org/policy/accessibility/vpat

3. When developing or modifying ICT for the government, the contractor shall ensure the ICT fully conforms to the applicable Section 508 Standards. When modifying a commercially available or government-owned ICT, the contractor shall not reduce the original ICT Item’s level of Section 508 conformance.

4. When developing or modifying ICT that are delivered in an electronic Microsoft Office or Adobe PDF format, the contractor shall demonstrate conformance by providing Section 508 test results based on the Accessible Electronic Documents – Community of Practice (AED COP) Harmonized Testing Guidance at https://www.dhs.gov/compliance-test-processes.

5. Contractor personnel shall possess the knowledge, skills and abilities necessary to address the applicable revised Section 508 Standards for each ICT.

6. Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the Contracting Officer and a determination will be made according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated January 29, 2016, and DHS Instruction 139-05-001, Managing the Accessible Systems and Technology Program, dated January 11, 2017.

7. Where ICT conforming to one or more requirements in the Revised 508 Standards is not commercially available, the agency shall procure the ICT that best meets the Revised 508 Standards consistent with the agency’s business needs, in accordance with 36 CFR E202.7. Any selection of a product or service that meets less accessibility standards due to a significant difficulty or expense shall only be permitted under an undue burden claim and requires authorization from the DHS Office of Accessible Systems and Technology (OAST) according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated January 29, 2016 and DHS Instruction 139- 05-001, Managing the Accessible Systems and Technology Program, dated January 11, 2017 and 36 CFR E202.6.

Caps on parts and labor For cost control purposes, offerors should consider the following factors when preparing their proposals:

1. Based on repair history, the total retail cost of all DSX Inc. brand controller panel and power supply components expected to be replaced in a given service year is capped at $10,000.

2. The total hours of technical labor during normal business hours in a given service year is capped at 80 hours.

3. The total hours of technical labor after normal business hours in a given service year is capped at 10 hours.

https://www.itic.org/policy/accessibility/vpat https://www.dhs.gov/compliance-test-processes https://www.dhs.gov/compliance-test-processes

Government furnished equipment: The government will furnish to the contractor the following non-DSX Inc. components when necessary to complete maintenance and repairs under this service agreement:

• Magnetic locks

• Z brackets

• Batteries

• Proximity readers

• Door contacts

• Request to exit switches (button & motion type)

• Sirens The contractor is expected to provide all other miscellaneous electrical supplies, consumables, e.g., panel wire, wire ties, wire nuts, splice connectors, etc., and tools needed to complete work.

On-site inspection of work to be done

C5ISC will provide an opportunity to survey the work to be done in advance of submitting a proposal.

Security requirements This is a service maintenance contract to support the unit's DSX electronic access control and ancillary equipment in classified and unclassified spaces at C5ISC. Contractor personnel working on-site at Government facilities must comply with all installation security requirements and all security regulations and directives for this Contract (i.e., security and safety, visit request, badging, escorted/unescorted, training, day-to-day requirements, etc.).

Specific requirements regarding access to classified restricted areas are detailed under the Classified Contract Information.

Facility and Computer Access

Contractor with physical access to the U.S. government facilities and shall be properly vetted for badging credential. The following condition applies:

At a minimum, contractor personnel (which includes any subcontractor personnel) performing work under this Contract shall have a favorable fingerprint check and have the minimum Tier 1 investigation initiated and completed to obtain a DoD Common Access Card (CAC) in accordance with the COMDTINST 5500.18, Trusted Associate Sponsorship System (TASS) for physical and logical access to government installation and IT resources. Contractor will not require IT account to NIPR. However, the contractor will require access to unclassified stand-alone systems / equipment within classified restricted spaces.

Contractor and subcontractor personnel who are declined via the TASS are ineligible to perform work under this Contract.

When a contractor employee (including subcontractor employees) with a CAC is no longer performing work under this Contract, the contractor employee shall surrender the

CAC to the assigned CG Manager, the Contracting Officer’s Representative (COR) or the TASS Trusted Agent (TA) on the same day the contractor employee stops working.

Additionally, the COR shall immediately advise the servicing Command Security Officer

(CSO) of the sponsoring unit. The prime contractor shall be responsible for ensuring that all contractor personnel (including subcontractor personnel) return each CAC to a proper CG representative.

Access Data

Under this Contract, Contractor will be exposed to classified and Sensitive but Unclassified (SBU). Contractor employees shall safeguard this information against unauthorized disclosure or dissemination. Specific security requirements are provided herein for protection of such information.

Sensitive Information

The Contractor shall protect all sensitive information (e.g., For Official Use Only, etc.,) to which they have access under this Contract. In accordance with DHS Management Directive (MD) 11042.1 “Safeguarding Sensitive but Unclassified (For Official Use Only) Information,” all Contractor personnel with access to sensitive information shall execute DHS Form 11000-6, Department of Homeland Security Non-Disclosure Agreement (NDA), as a condition of access to such information. The Contractor shall maintain signed copies of the NDA for all employees as a record of compliance. The Contractor shall provide copies of the signed NDAs to the COR no later than two (2) days after execution of the form.

Further, sensitive information shall be protected in accordance with DHS Class Deviation 15-01 for proper handling and safeguarding of the security of all such USCG information, as defined in the terms and conditions of this Contract.

Any access to data, categorized as Controlled Unclassified Information (CUI), shall adhere to the cognizant servicing agency’s guidance to handle such information.

Contract Classified Information

Classified information is Government information, which requires protection in accordance with Executive Order 13526, Classified National Security Information (CNSI) as amended and supplemental directives. The Contractor shall abide by the requirements set forth in the DD Form 254, Contract Security Classification Specification, and attachment to this Contract, and the National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117 for protection of classified information, as directed by the Federal Acquisition Regulation (FAR) Clause 52.204-2, “Security Requirements.”

(Mar 2021)

The Contractor’s facility shall have a SECRET Facility Clearance (FCL) to meet the overall condition of this Contract. Any subcontractors identified for approval shall possess a FCL at the appropriate classification for the work to be performed under this Contract.

There is no requirement for the contractor to process or store any classified information at the contractor owned facilities.

Contractor personnel shall possess U.S. citizenship and to obtain a final SECRET Personnel Security Clearance (PCL) at time of award. PCL is required based on mission support of specific stakeholders’ requirements. Contractor personnel shall maintain the appropriate PCL for the life of the Contract. The contractor shall provide personnel that have been cleared at the appropriate level to perform the work under the Contract.

Classified visit requests must contain the information required by the NISPOM and USCG facilities’ requirements.

Cleared contractor personnel working under this Contract shall have a Classified Information Non-Disclosure Agreement (SF-312) properly executed by their contractor’s Facility Security Officer (FSO) and filed with their clearance granting authority. The contractor shall provide a list of employees’ PCL with assigned functions to the COR. The contractor shall advise the COR and Contracting Officer (KO) immediately upon reassignment of personnel to other duties not associated with this Contract.

Access to all classified information is based on a strict need-to-know principle. Access to classified information cannot be precluded by escorting personnel due to the nature of this work.

Security Deliverables:

The contractor shall provide a Training Plan to the COR and KO detailing how procedures are implemented for employee’s security briefings and certification that appropriate employees have executed a current SF-312 according to the NISPOM within 45 days after receipt of Contract award. The Training Plan shall be in the contractor’s preferred format.

The contractor is responsible for controlling and safeguarding Sensitive but

Unclassified/For Official Use Only (SBU/FOUO) information in accordance with DHS MD

11042.1, “Safeguarding SBU/FOUO information.” The contractor shall provide an

Operations Security (OPSEC) Plan to the COR and KO detailing how Sensitive but

Unclassified/For Official Use Only material will be handled, discussed, disseminated, and protected by their employee within 45 days after receipt of Contract award. The OPSEC

Plan shall be in the contractor’s preferred format.

Reporting Activities

Contractors who work in DHS/USCG installations and/or government leased facilities and are embedded or integrated within a program or activity, shall report all adverse information, suspicious contacts, and other reportable incidents to the local command security office.

Any misconduct/wrongdoing of a contractor, unauthorized modification/change to the contract/order, or changes to the company ownership status, which could have an adverse impact upon national security or the USCG program and/or information, shall be reported immediately to the Contracting Officer (KO) and COR.

Contractor shall adhere to the Security Executive Agent Directive [SEAD 3] according to

NISPOM, 32 CFR Part 117. SEAD 3 requires reporting by all contractor cleared personnel to report specific activities that may adversely impact their continued national security eligibility, such as reporting of foreign travel and foreign contacts. Contractor personnel that hold a security clearance shall report foreign travel to their cognizant security office prior to traveling.

Protection of Information

Contractor access to information protected under the Privacy Act is required under this

Contract. Contractor personnel shall safeguard this information against unauthorized disclosure or dissemination in accordance with the law and Government policy and regulation.

Training

Information Technology Security Awareness Training

The Contractor shall comply with all applicable requirements to access federal government IT systems. Contractor personnel shall take the Information Technology

Security Awareness Training before accessing information under this Contract. This training shall be completed on an annual basis by all Contractor personnel performing work under this Contract not later than October 31st of each year. Any new Contractor employees shall complete the training before accessing sensitive information under the contract. This training is accessible at http://www.dhs.gov/dhs-security-and-training-requirements-contractors. Training certificates are to be provided to the COR within thirty (30) days after receipt of Contract award.

Applicable Documents or References:

The Contractor shall abide by the security requirements contained in the following primary policies and instructions:

1. National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117

2. Classified Information Management Program Manual COMDTINST M5510.23 (series)

3. Operations Security (OPSEC) Program, COMDTINST M5510.24 (series)

4. Personnel Vetting Program, COMDTINST M5520.12 (series)

5. Safeguarding Sensitive But Unclassified (FOR OFFICIAL USE ONLY) Information, DHS MD 11042.1

6. Physical Security & Force Protection Program Manual, COMDTINST M5530.l(series)

7. U.S. Coast Guard Security and Information Assurance Manual, COMDTINST M5500.13 (series)

8. Coast Guard Industrial Security Program, COMDTINST 5520.13 (series)