Attachment I- Performance Work Statement.pdf

TYAD LAN Cable Installation Performance Work Statement

PERFORMANCE WORK STATEMENT

Network Cable Installations and Maintenance Services for Tobyhanna Army Depot (TYAD) Local Area Network (LAN)

Status: Draft

Author: Tobyhanna Army Depot (TYAD)

Date: June 16, 2026

Version: 5.0

Table of Contents Table of Contents

1. Scope

2. Government Provided Material, Equipment and Accommodations

3. General Requirements

4. Performance Requirements

4.1 LAN/Ethernet

4.2 Fiber Cable

4.3 Remedial Maintenance (RM)

4.4 BBLAN Removal

5. AT OPSEC requirements

6. SERVICE or EQUIPMENT INSTALLATION CONTRACTOR SAFETY STANDARDS FOR TYAD

S1.0 THE CONTRACTOR IS SOLELY RESPONSIBLE AND LIABLE FOR JOB- SITE SAFETY

S2.0 CODE COMPLIANCE

S3.0 JOB HAZARD ANALYSIS (JHA) / ACTIVITY HAZARD ANALYSIS (AHA)

S4.0 SITE SPECIFIC SAFETY & ACCIDENT PREVENTION PLANS

S6.0 FALL PROTECTION

S7.0 ELECTRICAL SAFETY

S8.0 DEPOT REQUIRED PERMITS / APPROVALS

S9.0 CONFINED SPACES

S11.0 PROTECTION TO THE DRINKING WATER SYSTEM

S12.0 PROTECTION OF PERSONNEL

S13.0 FIRE AND EMERGENCY SERVICES

S14.0 IF AN INCIDENT HAPPENS

S15.0 CRANE LIFT OPERATIONS AT TOBYHANNA ARMY DEPOT

S16.0 APPLICATION OF ANY ODOR PRODUCING MATERIAL

S17.0 CONTROL OF RESPIRABLE CRYSTALLINE SILICA

6. Standard Specifications for Projects Under the National Environmental Policy Act (NEPA) in Accordance with 32 CFR 651 Proponent ELTY-ISP-N

7. Performance Standards

8. Unacceptable Performance

1. Scope This Performance Work Statement (PWS) defines the requirements to install, extend, retract, move and perform all work necessary for the Local Area Network (LAN), located at Tobyhanna Army Depot (TYAD), Tobyhanna Pa. 18466, to support multimedia functions, (e.g., two-way data communications) so that the entire LAN may operate as one system while conforming to the specifications herein.

The LAN is comprised of, but not limited to, for the purposes of this contract, the following types of components: Ethernet and Fiber Optic Cables and their necessary connectors, to include those that pass-through walls and cubicles. All work performed by the contractor shall provide minimal disruption to Government owned systems and personnel.

2. Government Provided Material, Equipment and Accommodations

• Government Furnished Material (GFM) and Government Furnished Equipment (GFE): The

Government shall provide GFM & GFE as all LAN Ethernet cable, fiber optic cable, connectors, installation hardware, ladders, lift equipment, and any other miscellaneous installation related items.

• Contractor Provided: Except for the GFM/GFE identified above, the Contractor shall provide all plant, labor, vehicles, tools, fiber splicing equipment, consumable materials not provided as GFM, supervision, and services necessary to perform all operations with regard to inspection, connections, removal, repair, maintenance (remedial and preventive), part replacements, and tests to ensure proper operation of the LAN located at TYAD as one system.

• Site Provisions: The Government shall provide to the Contractor as applicable to this contract: desk, chair and storage space for tools and test equipment.

3. General Requirements

• Place of Performance: All within the scope of this effort are located on the Tobyhanna Army Depot.

• Period of Performance: The base period is one (1) year from date of award with the option to extend for four (4) additional years.

• Standards: The contractor shall install LAN cabling, in accordance with (IAW) industry standards, i.e., ANSI/TIA-568.0-D, Generic Telecommunications Cabling for Customer Premises, 2015, ANSI/TIA- 568.1-D, Commercial Building Telecommunications Infrastructure Standard, 2015, ANSI/TIA-568.2-D, Balanced Twisted-Pair Telecommunication Cabling and Components Standard, in buildings as required by the Government.

• Contractor Personnel: The contractor shall provide trained and experienced service technicians with recent and relevant experience in the installation, termination and testing of Category 6 and 6E Ethernet drops at TYAD.

4. Performance Requirements

4.1 LAN/Ethernet

The contractor shall provide a team of journeyman LAN cable installers to install and terminate category 6 and 6E LAN twisted pair cable drops as requested by the COR via Government conduit. Quantity not to exceed 400 drop installations per contact year.

4.2 Fiber Cable

The contractor shall provide a team of journeyman LAN cable installers to install, terminate, and splice fiber-optic cable as requested by the COR through Government-provided conduit. Pre-terminated fiber runs will consist of Government-provided fiber-optic cables with eye pulls and LC connectors on each end. The contractor shall install these runs to Government-designated locations through Government-provided conduit. The contractor shall terminate or splice fiber-optic cable as necessary using contractor-provided equipment operated by personnel trained in its use. The length of pre-terminated fiber cables will be between 200 and 1000 ft. The quantity of pre-terminated runs shall not exceed 10 fiber-cable installations per contract year. The quantity of fiber-splicing instances shall not exceed five per contract year. Regarding the size of cable to be spliced, cables will be between 12 and 72 strands.

Fusion splicing will be required. OTDR certification will also be required to prove the splices don't have high loss.

4.3 Remedial Maintenance (RM)

The contractor shall provide remedial maintenance (RM) for the entire cable LAN at TYAD. In the event of a major failure, the contractor shall provide on-site RM within six (6) business hours after notification by the Government. The contractor shall restore LAN service to operational status within 18 business hours after notification by the Government. RM shall also include water removal from manholes, as necessary, to install or repair LAN cable. There are approximately 160 manholes on post; the contractor is not required to keep all manholes free of water at all times but shall remove water as necessary to support LAN installation or repair. Water removal shall not exceed 40 hours per contract year.

4.4 BBLAN Removal

The contractor shall uninstall the previously employed Broadband Local Area Network (BBLAN). The contractor shall remove all coaxial cable and components necessary for the operation of the end-of-life BBLAN. One-fifth (1/5) of the BBLAN cable (approximately 31/miles) and components (splitters, amplifiers, taps, power supplies, line extenders, couplers, node taps, equalizers, 2126 devices in all) shall be removed during the course of each annual period of performance. Priority shall be given to work orders issued for other performance requirements. Documentation necessary for determining the location of this equipment will be provided upon contract award. The contractor shall report to the COR regarding removal effort at each POP expiration until the BBLAN removal is complete.

5. AT OPSEC requirements Force Protection Condition (FPCON) Should the Force Protection Condition (FPCON) at the installation change, the Government may require changes in contractor security matters and/or processes.

If based on the requirements of this contract, contractor employees may be designated as mission essential. Mission-essential contractor employees are required to report for duty and remain on duty during declared emergencies and/or elevated FPCON levels unless otherwise directed by the Contracting Officer (KO) via the appropriate Contracting Officer's Representative (COR).

Unscheduled gate closures by Law Enforcement may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays.

Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

The contractor’s employees shall become familiar with and obey the regulations of the installation, including law enforcement, fire, traffic, safety and security (protecting National security) regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall always carry proper identification with them. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance.

The contractor, if required, shall provide support during contingencies, exercises, heightened operations, and adverse weather or security closures in the accomplishment of performance requirements. From time to time, the Base Commander may decide to close all or part of a base in response to an unforeseen emergency or similar occurrence. Such emergencies include adverse weather such as snow, or ice, "an act of God,” such as tornado or earthquake, or a base disaster such as a gas leak or fire.

Emergency Communications and Services. If assigned to TYAD for (7) seven days or longer, contractors and subcontractor employees will enroll in the ALERT! Mass Warning Notification System (MWNS).

Common Access Card (CAC) is required to register for ALERT!. If a CAC has not been deemed necessary for the contractor or subcontractor, the COR will provide the necessary information to TYADs

Antiterrorism Officer or TYADs Emergency Manager in the Security Operations Branch for manual input into the ALERT! System.

ALERT! MWNS is NOT optional - it is a Headquarters Department of the Army (HQDA) requirement to be a registered user.

Due to the life-safety implications of the information being relayed and the requirement to provide immediate alerts and warnings, personnel assigned to TYAD must ensure that their personal contact information, including after-duty hours contact information, as appropriate (e.g., personal cellular phone numbers or landline phone numbers), e-mail addresses, home address, etc., are entered into the system and regularly updated or verified every 90 days to remain current and accurate.

In the event of a life-threatening emergency or natural disaster, COR will account for assigned contractors. COR will send personnel accountability report to Emergency Operations Center (EOC).

Base closure announcements will be disseminated via ALERT! MWNS.

Antiterrorism (AT) Level I Training. In accordance with AR 525-13, all contractor and subcontractor employees requiring access to Army installations, facilities, or controlled access areas shall complete AT Level I awareness training annually. This training must be completed prior to being granted installation access and beginning work. The contractor is responsible for ensuring this requirement is met and for providing certificates of completion for each employee to the COR upon request. The web-based training is available at https://jko.jten.mil (Course: JS-US007).

AT Level I and iWATCH training is not required to be in person. While in-person training is an option, the most common and widely accepted method is web-based. Army regulations explicitly provide multiple ways to meet the training requirement to ensure flexibility for all personnel, regardless of their location or access to a classroom setting.

iWATCH Army Training. This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

Contractors and all associated sub-contractors will be briefed by the TYAD Antiterrorism/Force Protection officer. It is recommended this training be conducted as part of an initial entry briefing or unit/organization newcomer’s briefings. Send training requests to TYADs Antiterrorism Officer.

Contractor employee training will be documented on a local form.

Access and General Protection/Security Policy and Procedures. Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by TYAD Law Enforcement. Contractor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA, and/or local policy.

Contractor and all associated sub-contractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by the government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

A background check and approval from TYAD Law Enforcement is required for all contractor and subcontractor personnel prior to on-site access at TYAD. All persons seeking entrance to TYAD shall submit to and comply with all security standards and requirements in force at the time such persons are seeking entry. All contractors, regardless of resident status or citizenship, will be subject to vehicle search and intense in-processing by TYAD security personnel prior to being granted access to TYAD. This requirement is inclusive of on-site supervisory or managerial personnel and sub-contractor personnel that the contractor anticipates will be performing work or visiting on-site. This security screening process may be time consuming, and access may be delayed or denied. COR will provide specifics to the contractor after award and at least ten days prior to the expected visit date for completion. This security screening does not relieve the contractor of any responsibilities to conduct thorough pre-employment background checks and drug screening. Contractor workers will not be granted access to the work site until security screening is completed and access is approved. Any contractor personnel on-site who fail screening will not be permitted further access to TYAD. Ensure undocumented workers are not included in contracted work related to Army missions.

The company will ensure that its employees entering Army-controlled installations or facilities have obtained access badges and passes in accordance with facility regulations and that these badges and passes are obtained in advance so as not to delay the accomplishment of contracted services.

Pre-Bid Site Visit Controls: Any pre-bid site visits held before the contract award will be conducted under strict security controls. These protocols—including mandatory pre-registration for baseline vetting and constant escorting—apply to all potential bidders, regardless of any previous work history with TYAD or current installation access. During this public solicitation phase, a contractor's prior access or familiarity with the installation does not grant them a "need-to-know" for a new requirement. All bidders will be treated as external entities, and the site visit is strictly for a visual inspection of physical conditions only.

Post-Award Information Release: Conversely, all project specifics—including exact locations, detailed plans, and mission context—can and must be provided to the contractor only after the contract is awarded and their personnel have completed all mandatory security training (AT, OPSEC, CUI). At this stage, the contractor has an established "lawful government purpose," and the controlled release of detailed information is appropriate and necessary for the performance of the contract.

Common Access Card (CAC): For contractors that do not require CAC, but require access to a DoD facility or installation: Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/AR 190-13);

applicable installation, facility and area commander installation and facility access and local security policies and procedures (provided by Government representative); or, at OCONUS locations, in accordance with status-of-forces agreements and other theater regulations.

Collection of Badges: The Contractor shall account for all forms of Government-provided identification (even visitor badges) issued to the Contractor employees in connection with performance under this contract. The Contractor shall return such identification to the issuing agency at the earliest of any of the following, unless otherwise determined by the Government:

1. When no longer needed for contract performance

2. Upon completion of the Contractor employee’s employment

3. Upon contract completion or termination

The Contracting Officer may delay final payment under a contract if the Contractor fails to comply with these requirements. The Contractor shall insert the substance of this clause, including this paragraph, in all subcontracts when the subcontractor’s employees are required to have routine physical access to a federally controlled facility and/or routine access to a federally controlled information system. It shall be the responsibility of the prime Contractor to return such identification to the issuing agency in accordance with the terms set forth in of this section, unless otherwise approved in writing by the Contracting Officer. The company will return all issued U.S. Government Common Access Cards, installation badges, and/or access passes to the COR when the contract is completed or when a contractor employee no longer requires access to the installation or facility. Contractor personnel will obtain a vehicle pass for access to the military installation and Common Access Cards for computer access, if applicable.

Insider Threat Program: The contractor will establish and maintain an insider threat program to gather, integrate, and report relevant and available information indicative of a potential or actual insider threat, consistent with E.O. 13587 and Presidential Memorandum “National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs.”

Operations Security (OPSEC). OPSEC is mandatory for all and is not a one-time checklist, it is a dynamic, ongoing process embedded in every phase of planning, execution, and daily operations. It requires continuous critical thinking and vigilance from everyone who interacts with government information or operates on a government installation. This includes military personnel, Department of Defense civilians, contractors, subcontractors, and family members. OPSEC is not just a policy, it’s a mindset. Its success depends on consistent awareness and execution by every member of the TYAD community.

At TYAD, all observations, communications, and experiences must be protected and must not be shared with anyone lacking a lawful government purpose or a validated business need-to-know. This disciplined approach ensures that emerging threats, evolving vulnerabilities, and shifting mission parameters are constantly reassessed and addressed to safeguard critical information.

OPSEC applies across the full spectrum of DoD missions, functions, programs, and activities under this contract. Practicing OPSEC daily is a requirement that is essential to mission success and the protection of national security assets.

Failure to properly safeguard sensitive or classified information—whether through negligence, willful misconduct, or ignorance—may result in administrative, disciplinary, contractual, or criminal consequences.

Applicability and Management of the Contractor OPSEC Plan The requirement for an Operations Security (OPSEC) Plan or an OPSEC Standing Operating Procedure (SOP) is based on the contractor's access to and handling of Critical Information and/or Controlled Unclassified Information (CUI), regardless of where that information resides. It is essential to distinguish between Information Security (INFOSEC), which protects data "at rest" within a system, and OPSEC, which protects data "in use" by governing the procedures and actions of personnel.

When contractor personnel generate, access or handle CUI—such as building floor plans, maps, technical manuals, operational schedules, or documents that contain information that falls within a CUI category www.dodcui.mil—they are required to have an approved OPSEC Plan/SOP. Contact the COR for more information on an OPSEC Plan/SOP. This plan is a formal, documented agreement that outlines how the contractor will protect the government's sensitive information. Even when CUI is handled exclusively on Government Furnished Equipment (GFE), the contractor remains responsible for the "human factor." The OPSEC Plan transfers the responsibility for protecting this information from the Government to the contractor by legally obligating them to establish internal procedures for everything from secure physical storage and controlled discussions to the proper destruction of materials. Without this plan, the Government retains all risk for how a contractor safeguards its data.

The management and approval of the contractor's OPSEC Plan is a shared responsibility, with defined roles at each stage. Per government acquisition and security policy, it is the Contracting Officer's Representative (COR) who is ultimately responsible for the initial identification and final enforcement of this requirement. The process is as follows: The COR (designated technical representative) identifies the need for an OPSEC Plan based on the work described and writes the requirement into the Statement of Work (SOW)/checks this off on the Security Review Cover Sheet. After contract award, the COR enforces this by ensuring the contractor submits the plan on time. The Contracting Officer (KO) ensures the requirement is legally binding in the final contract and is the sole authority to take contractual action for non-compliance. Finally, the Government OPSEC Officer, as the technical expert, is responsible for reviewing the submitted plan against AR 530-1 and providing the formal approval or rejection back to the COR.

Mandatory Annual OPSEC Training Requirements. In accordance with AR 530-1 (4-2-a), all contractors and subcontractors shall complete OPSEC Level I certification training annually (Initial and Continual – detailed below).

The Contracting Officer’s Representative (COR) serves as the oversight authority: the COR verifies contractual compliance by collecting and reviewing certificates, ensuring they’re submitted within the required timeframe – first 30 days of assignment.

According to AR 530-1 (para 4-2) and DoDM 5205.02, there is no “grace period” or minimum number of days on-site before OPSEC Level I Initial and Continual training becomes mandatory—any contractor, subcontractor, or support-service provider who requires access to TYAD information, systems, or facilities must complete both parts of their OPSEC Level I training.

OPSEC Level I training is comprised of two parts (Initial and Continual):

1. OPSEC Level I Initial training (annual):

o To be completed within first 30 days of assignment to TYAD and annually thereafter – preferably before the job starts o Provides specific information about TYADs OPSEC program o Contractors and subcontractors must set up an appointment with TYADs OPSEC Officer for Initial training. The COR will provide the necessary point of contact to schedule this training.

o Conducted by TYAD’s OPSEC officer or alternate – training can be in person or via MS Teams (30 minutes) and is tracked by a TYADs OPSEC Officer via a local training form

2. OPSEC Level I Continual training (annual):

o Commonly referred to as annual OPSEC training o To be completed within 30 days of assignment to TYAD and annually thereafter – preferably before the job starts o Provides general information about OPSEC and reemphasizes sound OPSEC practices throughout the contract period o Title of the training is: “OPSEC Awareness for Military Members, DoD Employees and Contractors” and is available online -https://securityawareness.dcsa.mil/opsec/index.htm o Certificates of completion must go to the COR

OPSEC Measures to Protect Critical Information. All personnel are required to protect critical information at all times and in all forms. This section is critical because it moves beyond a simple, vague requirement to “practice OPSEC” and provides the contractor with specific, actionable, and enforceable rules of behavior.

All contractors and subcontractors shall implement the following mandatory OPSEC measures during the entire period of performance to protect critical and sensitive unclassified information:

1. Training and Compliance: Complete all mandatory OPSEC training as specified in this contract and actively apply all TYAD OPSEC measures in daily, contract-related operations.

2. Secure Communications: Avoid discussing government operations in public spaces or over unprotected communications (e.g., personal cell phones). Transmit Controlled Unclassified Information (CUI) only through authorized, encrypted channels as directed in the SOW/PWS = DoD Safe Access File Exchange (SAFE) is the accredited method for sending files that contain CUI, Personally Identifiable Information (PII), or other sensitive data that should not be transmitted over unencrypted, commercial email channels. The files are encrypted during the transfer process.

3. Public Release and Social Media Prohibition: Do not disclose or post any images, data, or operational details (e.g., maps, pictures, schedules, equipment, tactics) to any unofficial media, including personal or corporate social media platforms. All information or materials intended for public release require a documented OPSEC review by a TYAD certified OPSEC Level II reviewer.

Coordinate all press releases through the COR and TYADs Public Affairs Office.

4. Reporting Requirements: Immediately report any attempts by unauthorized third parties to solicit sensitive information to the TYAD Security Operations Branch, the contract POC, and the contractor's Facility Security Officer (FSO).

5. Credential Control: Conceal or remove all government-issued badges and identification when off the installation. Do not duplicate, loan, or leave credentials unattended (CACs, badges, and/or parking passes or placards). Report any lost or stolen passes/badges/credentials to TYAD Law Enforcement Branch. The COR will provide all POC contact information.

6. Protection of Sensitive Data: Mark and protect internal company data related to this contract (e.g., schedules, deliverables, vulnerability reports) as CUI. All government-provided information, such as drawings and technical data, must be protected in accordance with DoD, Army guidance and guidance within contract package documents.

7. Information Disposal: At contract completion or upon Government request, return all government information to the COR or destroy it in accordance with approved TYAD procedures for handling CUI.

Photography or Videography. Contractors and subcontractors who take photos or video at TYAD must notify their COR at least fourteen business (14) days in advance and complete OPSEC Level I Initial training. The COR will provide the contractor with the security branch’s points of contact after the contract is awarded. All individuals must follow TYAD policy regarding photography/videography and the use of personal electronic devices.

All photos and videos must undergo an OPSEC Review—per AR 530-1 Chapter 4—to evaluate them against TYAD’s Critical Information List and identify any vulnerabilities. That review must be fully documented and signed off by a TYAD employee who holds OPSEC Level II certification before disseminated.

Information Security (INFOSEC). The contractor shall comply with all applicable regulations for the protection of government information. Information handled under this contract is categorized as either Controlled Unclassified Information (CUI) or Classified National Security Information (CNSI).

Controlled Unclassified Information (CUI) The handling, marking, safeguarding, and destruction of all CUI shall be in strict accordance with DoD Instruction 5200.48, Controlled Unclassified Information (CUI).

Specific contractor responsibilities are detailed in the "Safeguarding CUI" section of this document.

CUI Training Requirement Any contractor or subcontractor personnel who will generate or have access to CUI under this contract must complete mandatory CUI training prior to accessing such information. The "DoD Mandatory Controlled Unclassified Information (CUI) Training" course available on the DCSA CDSE Security Awareness Hub (https://securityawareness.dcsa.mil/cui/) satisfies this requirement. Completion certificates shall be provided to the COR upon request.

Contractor Responsibilities for Handling CUI – even if it is their own information that must be controlled (example: Personal Identifiable Information, etc.). Contractors are responsible for handling CUI when it is created, collected, or maintained in performance of a government contract.

The contractor shall comply with all CUI requirements outlined in Executive Order 13556 and 32 CFR Part 2002. www.dodcui.mil The contractor's responsibilities include, but are not limited to:

• Marking: Applying uniform CUI markings to all CUI data and deliverables.

• Access Controls: Restricting CUI access to personnel with a lawful government purpose and validated need-to-know.

• Flow Down: Ensuring all CUI protection requirements are passed down to subcontractors.

• Physical Safeguarding: Implementing appropriate physical controls (e.g., locked storage, controlled-access areas) for all CUI, whether in hard copy or on electronic media.

• Incident Reporting: Reporting any actual or suspected loss or compromise of CUI to the COR immediately.

• Disposition: Returning all CUI to TYAD control or destroying it in accordance with DoD and Army guidelines upon contract completion.

Physical Security.

Safeguarding of Government Property - The Contractor shall be responsible for safeguarding all government equipment, information, and property provided for Contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

Key Control - The Contractor shall establish and implement methods of making sure all keys and key cards issued to the Contractor by the Government are not lost, misplaced, or used by unauthorized personnel.

• No keys issued by the Government shall be duplicated.

• The Contractor shall develop a key control procedure, to be included in their Quality Control Plan, which includes procedures for the turn-in of keys by personnel who no longer require access.

• The Contractor shall immediately report any lost or duplicated keys to the Contracting Officer (KO). In the event a key is lost or duplicated, the Government may, at its option, re-key or replace the affected locks, and the total cost shall be deducted from the monthly payment due to the Contractor.

Lock Combinations - The Contractor shall establish and implement methods to ensure that lock combinations are not revealed to unauthorized personnel when applicable. The Contractor shall ensure combinations are changed when personnel with knowledge of the combination no longer have a need-to-know.

6. SERVICE or EQUIPMENT INSTALLATION CONTRACTOR

SAFETY STANDARDS FOR TYAD

Below are some “installation specific” safety standards which contractors are required to adhere to while performing any work on Tobyhanna Army Depot. It is the contractor’s responsibility to always incorporate these particular requirements into their daily operations while under contract and to institute these specifics into their overall site safety controls. These do not substitute or deflect in any way the requirement to institute and adhere to all OSHA 29 CFR 1910 & 1926 and USACE EM385-1 safety standards, as well as all applicable contractual Federal Acquisition Regulations while performing the work under this contract on Tobyhanna Army Depot.

It is the responsibility of the contractor to enforce the below requirements as well as all current revisions of the above referenced standards. Failure to enforce safety requirements on the depot can result in immediate stop works, safety stand down orders and even complete termination of the contract.

Important Phone Numbers:

Fire or Emergency: 911 Fire Department – (Non-Emergency):

Security:

Safety Office:

The COR will provide a list of necessary on-post contact numbers to the contractor upon contract award.

S1.0 THE CONTRACTOR IS SOLELY RESPONSIBLE AND LIABLE

FOR JOB- SITE SAFETY

1. Review of the project plans and other documents by any government appointed official does not constitute an acceptance of Federal responsibility or liability for the adequacy of the safety measures identified for the job or for the Contractor's compliance with all applicable safety rules and regulations.

2. The Contractor remains solely responsible and liable for job-site safety at all times during the term of the contract. No outside personnel (other than ET, COR, TYAD Safety, or other government appointed contract personnel) are allowed onto the job site at any time during contract without prior permissions and/or escort by the ET, COR or KO.

3. Tobyhanna Army depot has restrictions on the use of fossil fuels in all buildings.

When it is determined that electric or other alternatively fueled vehicles are insufficient or unavailable for movement of material within the buildings on the installation, fossil-fueled vehicles can be used only when all alternatives of accepted electric material movement equipment have been considered, and the last option is use of a fossil fuel vehicle or project failure. This includes any situations where safety of employees and equipment may be jeopardized. Convenience will never be an acceptable justification to utilize fossil-fueled vehicles. The Government Designated Representative (GDR) will notify the appropriate supervisor(s) or leader(s) in the area where the need to utilize a fossil fuel vehicle is required. The supervisor / leader will take the necessary steps to notify the employees in the work area of the option to leave the area during the material movement process. The GDR and Contractor will also document all actions the Contractor took to utilize electric or other alternatively fueled vehicles. The documentation will specifically state why electric or alternatively fueled vehicles are insufficient and all mitigation efforts used to minimize the effects of fossil-fueled vehicles to include information as to any appropriate scrubbers that can be utilized along with any ventilation or exhaust systems that can be used to externally vented to the outside of the facility.

The documentation must be submitted to the TYAD Safety office for approval prior to any equipment being used. A final copy of the Approved documentation will be provided to the TYAD Safety Division.

4. All direct construction supervision, including subcontractors, must as a minimum, complete an OSHA 30-hour safety course for construction. These certificates must be submitted as part of the site safety plan BEFORE construction activities start.

5. RED CARD PROGRAM - Tobyhanna Army Depot utilizes a program to allow employees to stop an action which is considered unsafe. Employees carry small red cards that can be thrown down when employee sees any action they consider unsafe. Work ceases until TYAD management can decide if it is safe or not.

Contractors are required to comply with this program. If a TYAD employee presents the red card to the contractor, the contractor must stop working until the COR and Safety Office can determine if there is a safety hazard or not.

6. All contractor personnel, to include subcontractors, vendors, suppliers, or visitors, when performing any type of work activity, or gaining access through an occupied area or shop - must have all applicable PPE that is required for the area to include, but not limited to, hardhats, safety glasses, hearing protection, and respirator protection. Notify both COR & Area Supervision, for access approval and prior to any work activities being performed.

S2.0 CODE COMPLIANCE

As noted in Tobyhanna Army Depot Safety Regulation 385-1 - TYAD follows all requirements and is certified as an ISO 45001 facility. Accordingly, the contractor shall comply with and maintain these high safety standards and provide full compliance with all applicable safety regulations and standards. The Contractor shall maintain, monitor, and enforce employee compliance with all applicable rules, regulations, and codes.

Tobyhanna Army Depot requires full contractor compliance with all safety regulations and standards. The Contractor is responsible for maintaining, monitoring, and enforcing all rules, regulations, and codes, by ALL personnel working for the contractor including all subcontractors. These codes include:

Title 29 Code of Federal Regulations-1910 (OSHA General Industry Standards)

Title 29 Code of Federal Regulations-1926 (Construction Industry Standards)

National Fire Protection Association Codes

Uniform Facilities Code

Unified Facilities Guide Specifications (UFGS)

USACE EM385-1-1 (Safety and Occupational Health Requirements)

All other codes as required to maintain safety standards.

S3.0 JOB HAZARD ANALYSIS (JHA) / ACTIVITY HAZARD

ANALYSIS (AHA)

Prior to the start of work, the contractor shall prepare a JHA / AHA for each phase of work that will be done under the contract. This will be completed in accordance with all applicable OSHA safety requirements. A phase is any operations involving a certain type of work. Examples include demolition, excavation, masonry work, concrete pouring, roofing, and electrical wiring. Work done by each subcontractor is also a phase. The JHA / AHA will:

1. List the activity being performed and identify the sequence of work steps.

2. List the hazards associated with each step, and the procedures and training required to eliminate or reduce the risk to an acceptable level.

S4.0 SITE SPECIFIC SAFETY & ACCIDENT PREVENTION PLANS

Contractors will submit a written Site-Specific Safety / Contractor Accident Prevention Plan prior to beginning activities. The plan must follow the guidelines in OSHA 29 CFR 1926 or 1910 as applicable.

1. Who will implement the plan, including who is responsible for safety and accident prevention?

2. A means for coordinating and controlling subcontractors and suppliers.

3. Safety training.

4. Who will investigate accidents?

5. Emergency response.

6. Job site cleanup and safe access.

7. Public safety requirements such as signs and barricades.

S5.0 MACHINERY SAFETY, RISK ASSESSMENT, AND VALIDATION

REQUIREMENTS

The below defines the mandatory machine safety, risk assessment, and validation criteria for all machinery, integrated subsystems, and equipment delivered, installed, or modified by the Contractor at Tobyhanna Army Depot (TYAD). These requirements are established to maintain TYAD’s accredited ISO 45001 Occupational Health and Safety Management System and AS9100/9110 Quality Standards.

COMPLIANCE STANDARDS & GUIDELINES

The Contractor shall ensure that all equipment, machinery, and integrated subsystems delivered under this contract are designed, manufactured, and validated to achieve an acceptable level of risk.

System Safety Engineering: Shall comply with MIL-STD-882E (Department of Defense Standard Practice for System Safety) and ANSI B11.0 (Safety of Machinery - General Requirements and Risk Assessment).

Electrical & Control Subsystems: Must comply with NFPA 79 (Electrical Standard for Industrial Machinery) and relevant OSHA 29 CFR 1910 standards.

TYAD Safety & Health Requirements: Any onsite contractor activities (such as installation, validation, or testing) shall comply with the US Army Corps of Engineers Safety and Health Requirements Manual (EM 385-1-1).

MANDATORY TASK-BASED RISK ASSESSMENT

The Contractor shall conduct a comprehensive, task-based Machine Risk Assessment (MRA) for all phases of the equipment lifecycle. This assessment must explicitly evaluate hazards associated with the following profiles: Standard industrial operations.

Maintenance and system troubleshooting. Equipment setup, tooling changes, and calibration. Clearing line jams and mechanical debris. Cleaning and equipment sanitation protocols. Lockout/Tagout (LOTO) procedures, designed in strict accordance with OSHA 29 CFR 1910.147 (Control of Hazardous Energy) and fully aligned with local

Tobyhanna Army Depot (TYAD) safety regulations, permitting workflows, and local LOTO template requirements.

HAZARD MITIGATION HIERARCHY

The Contractor shall apply the hazard mitigation hierarchy to resolve identified operational risks. Hazards must be addressed in the following strict order of precedence:

- Elimination or Substitution: Eliminate the hazard entirely through inherent design choices (e.g., eliminating pinch points) or substitute hazardous materials/processes with non-hazardous alternatives

- Engineering Controls: Implement physical guards, barriers, enclosures, or safety-rated devices (e.g., light curtains, safety mats, interlocks) to isolate personnel from the hazard.

- Awareness Devices: Install visual and audible warning systems, such as strobe lights, backup alarms, and safety signage, to alert personnel to residual hazards.

- Administrative Controls: Develop safe work procedures, standard operating instructions, and mandatory training programs to limit exposure time or dangerous behaviors.

- Personal Protective Equipment (PPE): Mandate the use of appropriate safety gear (e.g., safety glasses, steel-toed boots, arc flash protection) as the final line of defense.

VERIFICATION AND VALIDATION (V&V) REQUIREMENTS

The Contractor shall provide documented evidence that all safety systems function exactly as designed and reduce risks to acceptable levels. All V&V activities must strictly adhere to the following regulatory benchmarks:

Safety Function and Hardware Verification: The Contractor must execute functional testing on all safety-related control circuits, including emergency stops (E-stops), interlocked guards, and presence-sensing devices. Testing methods must comply with ANSI B11.26 (Functional Safety - Control Systems) and NFPA 79 (Electrical Standard for Industrial Machinery).

Fault Injection and Failure Mode Validation: Testing must simulate component failures (e.g., short circuits, broken wires, sensor misalignments) to verify that the system fails only into a predictable, safe state. This validation process must align with MIL-STD- 882E Section 4 (System Safety Program Requirements) and the risk reduction metrics of ANSI B11.19 (Performance Requirements for Risk Reduction Measures).

OSHA Compliance Verification: The final physical configuration of all physical guarding, perimeter barriers, and points of operation must be validated against OSHA 29 CFR 1910 Subpart O (Machinery and Machine Guarding).Military Installation Inspection:

Prior to equipment integration at TYAD, all electrical and safety components must pass a field validation audit compliant with US Army Corps of Engineers Manual EM 385-1-1 Section 11 (Electrical) and Section 16 (Machinery and Mechanized Equipment).Validation Report: A final, signed Safety Validation Report must be submitted to the TYAD Contracting Officer Representative (COR) prior to final equipment acceptance.

S6.0 FALL PROTECTION

1. Personnel performing works at a height of six feet or more from any lower level shall comply with OSHA 29 CFR 1926.500 through 1926.503 safety standards for any type of new installations. OSHA 29 CFR 1910-28 shall apply to any type of servicing on previously installed equipment.

2. There are currently no certified anchorage points or permanent guardrail systems on any TYAD roof. Most roofs of the depot are more than 20 feet high.

3. Contractors and their employees must be protected from falling off the edge of the roof, regardless of how briefly the employees are at the edge of the roof.

S7.0 ELECTRICAL SAFETY

Follow the current Tobyhanna Army Depot standard. This standard is based on NFPA 70E.

Copies of the TYAD Electrical standard may be obtained by request from the ET, COR or KO on the project or service contract.

All equipment shall be certified by a Nationaly Recognized Testing Laboratory (NRTL) in accordance with 29 Code of Federal Regulations (CFR) 1910.303.

29 CFR 1910.303(a): Approval. The conductors and equipment required or permitted by this subpart shall be acceptable only if approved, as defined in § 1910.399.

29 CFR 1910.399: Acceptable. An installation or equipment is acceptable to the Assistant Secretary of Labor, and approved within the meaning of this subpart S:

(1) If it is accepted, or certified, or listed, or labeled, or otherwise determined to be safe by a nationally recognized testing laboratory recognized pursuant to § 1910.7;

Army Regulation 385-10, Army Safety Program, Paragraph 23-5.d: Tools and equipment. Electrical equipment that contains or produces energy greater than 50V alternating current (AC) or 100V direct current (DC) must meet one of the following conditions to be safe for use:

(1) Listed by an NRTL and used as intended (for example, as described in the manufacturer’s instructions or technical manual). All purchased electrical equipment must be NRTL-listed if available, even if a less expensive unlisted product is available. NRTL approved equipment is stamped with a listing symbol.

NRTL listing symbols can be found at https://www.osha.gov/dts/otpca/nrtl/nrtllist.html.

S8.0 DEPOT REQUIRED PERMITS / APPROVALS

Permits are required for:

1. Excavation: Contractors must utilize the PA 1 Call system and also coordinate with contracting officer representative (COR) for a TYAD dig permit for any excavations prior to any groundbreaking including digging, drilling and stake driving.

2. Trenching: Contractors will adhere to OSHA requirements and receive approval from

TYAD Safety office before any trenching deeper than 5 feet is performed.

Notifications of such activities will be provided to the COR along with required plans, requests and permits prior to any trenching works being performed. Contractor is responsible for field verifying all utilities and underground entities. Excavation or trench greater than 18 inches in depth that remains open greater than (1) day OR left unattended for any period of time shall have a safety orange construction fence installed around the perimeter of the opening. Caution tape or cones for this purpose is unacceptable.

3. Confined Space: All confined space works on TYAD are to be considered as permit required entries, (unless reclassified by the TYAD Safety office,) and Contractor must first request and be provided with an approved "signed" permit from TYAD Safety Office prior to any confined space entry. Contractor will refer to all OSHA requirements and must have a confined space plan and all appropriate safety equipment. Contractor is to request approval from TYAD Safety office through COR prior to entry.

4. Burning / fire: Hot work permits must be obtained daily from the Fire Department.

5. Cranes: For use of cranes and all WHE and LHE at TYAD see S.10.13

6. Army Radiation Permits: Non-Army agencies (including other military Services, vendors, and civilian contractors) require an Army Radiation Permit (ARP) to use, store, or possess ionizing radiation sources on TYAD (see 32 CFR 655). Non-Army applicants will apply by letter with supporting documentation to the Depot Commander. The letter should be submitted so that the Depot Commander receives the application at least 30 days before the requested start date of the permit. The

ARP application will specify start and stop dates for the ARP and describe the intended use of the radioactive material.

For sealed sources of radiation, i.e. Moisture Soil Density Gauges, the application must include a valid Nuclear Regulatory Commission (NRC) Radioactive Materials License that allows the applicant to use the source as specified in the ARP application, current leak test certificates, operator training records and calibration certificates for any equipment that may be utilized at TYAD.

For machine produced ionizing radiation sources, i.e. X-ray Equipment, the application must include the appropriate state authorization that allows the applicant to use the source as specified in the ARP application along with operator training records and calibration certificates for any equipment that may be utilized at TYAD.

ARPs will not be issued for more than 12 months at a time.

S9.0 CONFINED SPACES

1. All Confined Spaces at TYAD are considered as Permit-Required Confined Spaces unless reclassified by TYAD Safety office after a thorough review of the area and the work being planned.

2. Contractors must first notify the COR and receive TYAD Safety office approvals prior to gaining access or opening any confined space area.

3. Contractors must fully comply with all OSHA regulations for Confined Space

Operations, including on-site use and availability of a Confined Space Entry Permit / Checklists, along with prior approvals of their Accident Prevention Plan and associated Activity Hazard Analysis (AHAs) for the work to be performed.

4. The contractor and/or the COR will then notify the TYAD Safety office and TYAD

Fire and Emergency Services of the Confined Space Entry timelines and schedules.

5. Upon completion, the contractor will notify the TYAD Safety Office and discuss whether any new hazards were added to the Confined Space and will submit the completed Confined Space Entry Permit / Checklist for record.

S10.0…