Attch 02 - Statement of Work .pdf

STATEMENT OF WORK

ACS Badge Entry BLDG 302

System Standard Features:

• CAC entry with multifactor authentication at 3 doors (front, back and vault).

• Video communications answering stations located in multiple offices. This will allow us to answer the door and perform proper vetting prior to allowing entrance.

• Entire system must be self-contained, with no network or internet access.

• The entire system must operate independently, without relying on user-supplied equipment, government computing resources, or existing building infrastructure wiring.

• Answering stations must provide remote door unlocking functionality, enabling office personnel to control access from workstations following successful visitor vetting, particularly when handling potentially classified material (to prevent unsupervised access).

• The entire system must utilize hardwired communication. Wireless communication technologies are prohibited, with the exception of authorized RFID readers.

• The system must operate under a perpetual licensing model, avoiding recurring annual licensing fees or subscriptions. One-time licensing and setup fees are acceptable.

• The system must be fully compliant with TEMPEST and emission security (EMSEC) standards to mitigate the risk of compromising sensitive information through electromagnetic emissions.

• The system must include a comprehensive audit logging function to track personnel access events (dates and times) and facilitate detection of unauthorized or unusual access patterns.

• In accordance with DoDM 5200.08, C6.2.4 and DoDM 5200.01v1_DAFMAN 16-1404v1, Enclosure 3, Paragraph 12.a, a video communication system installed at the front entrance will enable remote visitor vetting, eliminating the need to physically open the door for initial communication. Access to communication facilities will be controlled, with entry restricted to authorized personnel only.

Access to classified information is limited to individuals who:

• Possess current security clearance.

• Have executed an appropriate non-disclosure agreement.

• Demonstrate a valid need-to-know

• The access control system must be managed by authorized office personnel, providing the ability to enroll and disenroll individuals for unescorted access. This requirement aligns with CNSSI 4005, VII.A, which stipulates that cleared personnel with a need-to-know are responsible for managing lock combinations.

This includes the following critical security measures:

Lock combinations must be changed when:

• Personnel with authorized knowledge no longer require access (e.g., transfer, clearance revocation).

• There is a potential compromise of the combination.

• At a minimum, every two years, or sooner if any of the above conditions are met.

The following practices are strictly prohibited:

• Recording or carrying combinations insecurely.

• Storing combinations for personal convenience.

• Storing combinations electronically without written approval from the cognizant security officer, especially at unattended or contingency facilities. This is particularly critical for combinations to facilities or containers housing COMSEC material.

Scope:

• The Contractor shall provide, configure, and install the access control system for the specified three doors.

• System installation shall require minimal modifications to the building's structure.

Surface mounting or routing through drop ceilings are preferred to minimize potential compromise of existing security infrastructure.

• The Contractor shall provide all equipment necessary for system installation, including any required rental equipment.

Delivery:

The ACS system will be delivered to and installed in BLDG 302, Joint Base Charleston, SC.