Project_Work_Statement.pdf

PERFORMANCE WORK STATEMENT (PWS)

PHYSICAL ACCESS CONTROL SYSTEM AND SURVEILLANCE EQUIPMENT

FOR BUILDINGS 376, 390 and 527

PART 1

1. Project Scope And Requirements

Background:

The Fort Buchanan Network Enterprise Center (NEC) requires a Physical Access Control System and Surveillance equipment to safeguard their facilities that includes sensitive classified areas, office spaces, datacenter, and other server rooms.

It is intended to obtain a Physical Access Control System and Surveillance equipment and maintenance services that allow the NEC to implement and manage the required security levels at the NEC facilities. This project will enable the NEC to achieve a higher level of security providing adequate access control and security protection capabilities. The actual system is not under warranty, obsolete and many parts are not operational.

1.1 Objectives:

Remove, and dispose all existing proximity card readers, cameras, and other physical security components with their respective cables. Install newly acquired Physical Access Control System and Surveillance equipment under this PWS. This project will improve overall security aspects of the facilities while taking in consideration multiple security aspects of the National Institute of Standards and Technology (NIST) Special Publication 800-53 Rev. 4.

1.2 Scope

1.2.1 Contractor is responsible for disassembly, removal, and disposal of all existing access control system and video surveillance equipment. Contractor is responsible to provide, assembly, install and provide maintenance services to the all-new Physical Access Control System and Surveillance equipment specified in this document.

1.2.2 Contractor shall visit the facilities to confirm all the requirements, measurements, and any other technical specification before ordering any equipment. The contractor shall coordinate each phase of the project with the Contracting Officer Representative (COR) to evaluate space requirements for materials, plan the removal of old equipment and the installation of the new equipment in such a way to allow the NEC personnel to continue operations. Contractor shall have all tools, materials and hardware needed to complete the installation of all equipment in compliance with vendor specification and scope of the contract.

1.3 Assumptions And Project Roles And Responsibilities:

1.3.1 Contractor must have on hand all tools and materials necessary to complete the removal and disposal of existing equipment in compliance with applicable safety requirements.

1.3.2 Contractor shall ensure all new items are compatible.

1.3.3 Contractor shall ensure that the delivery, installation, and configuration of all access control system components to include hardware and software are performed in compliance with applicable NIST SP 800-53 Access Controls and Physical and Environmental Protection Controls, General Services Administration (GSA) Approved Products List (APL), following the Homeland Security Presidential Directive 12 (HSPD-12) and Federal Information Processing Standard 201 (FIPS 201).

1.4 Period of Performance: Contractor is required to complete all work within 45 calendar days from the contract award date. The contractor shall coordinate with the COR within five

(5) workdays before the works begin.

1.5 Place of Performance. The work will be performed at Buildings 376, 379, 390 and 527 Fort

Buchanan, Puerto Rico. The contractor may coordinate with the COR and supply personnel to use the space available in the warehouse to store materials related to the project. The contractor shall not block more than one access of the building at any time, nor shall they disrupt the existing parking arrangement to any of the building parking areas, unless authorized by KO.

1.6 Per "FAR 52.236-9, Protection of Existing Vegetation, Structures, Equipment, Utilities, and Improvements" Contractor is responsible for the following:

1.6.1 Remove or alter existing equipment in such a manner as to prevent injury or damage to any portions of the existing work which remain.

1.6.2 Repair or replace portions of existing work which have been altered during operations to match existing or adjoining work, as approved by the KO. At the completion of operations, work shall be in a condition equal to or better than that which existed before new work started.

1.6.3 General Information: The contractor should provide the equipment and software’s with required specifications and manufacturer’s warranty extended to cover 24 months on all hardware, software and services. Contractor provide onsite physical support for the term of the warranty period within 24 hours of reporting.

1.6.4 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

1.7 Recognized Holidays: The contractor is not required to perform services on Holidays.

1.7.1 New Year’s Day

1.7.2 Martin Luther King Jr.’s Birthday

1.7.3 President’s Day

1.7.4 Memorial Day

1.7.5 Independence Day

1.7.6 Labor Day

1.7.7 Columbus Day

1.7.8 Veteran’s Day

1.7.9 Thanksgiving Day

1.7.10 Christmas Day

1.8 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0700-1600 Monday thru Friday except Federal holidays or when the facility is closed due to local or national emergencies, administrative closings, or similar directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.9 Type of Contract: This will be a firm-fixed contract for supply/product with inherited service. The contractor will furnish all supplies, tools, equipment, and hardware needed to complete the upgrade.

1.10 Security Requirements: Contractor is required to submit a completed Form DD369 Police Record Check for all contractor personnel visiting the installation to perform work.

Form shall be submitted to the COR (RMO office POC) five (5) working days prior to commence work.

1.10.1 Physical Security: The contractor shall be responsible for safeguarding any equipment, information and property provided for attendee use.

1.10.2 Key Control: The contractor will not be issued a key for entrance into the facility.

1.11 Special Qualifications: No special qualifications are needed.

1.12 Post Award Conference/Periodic Progress Meetings: Conference or progress meetings with be conducted as needed.

1.13 Contracting Officer Representative (COR): If needed, the (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the

Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies, provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.14 Key Personnel: The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 0700 and 1600, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons.

1.15 Identification of Contractor Employees: All contract personnel must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractors are required to wear badge while in the facility, they must sign into the Visitor’s Center upon entry to the installation.

1.16 Contractor Travel: Not applicable.

1.17 Other Direct Costs: Not applicable

1.18 Pollution. Contractor shall comply with all applicable Federal, State and local laws, regulations, and standards regarding environment pollution. All environmental protection matters shall be coordinated through the Contracting Officer with the Post Environmental Protection Office at DPW. The Post Environmental Division Office is located at Building 34, telephone 787-707-3575 or 787-707-3508.

1.19 Material Spills. Contractor shall be responsible for the prompt containment, clean up, and restoration (if applicable, of any petroleum, oil, lubricant (POL) or coolant liquids that may have spilled from its vehicles as a result of the operation of its fleet in support of this contract.

The contractor shall have at all times spill response equipment in sufficient amount to respond and contain any leak until garrison emergency responders are able to arrive at the spill scene.

Furthermore, any such release shall be immediately notified via telephone, within the first 30 minutes from spill incident awareness, by the operator to the COR or DPW Environmental Office - The Post Environmental Division Office is located at Building 34, telephone 787- 707-3575 or 787-707-3508.

1.20 Product Compliance. All paints, solvent, epoxy, and bituminous materials used as part of repairs and maintenance actions must be stored within protected areas. Contractor shall be responsible for the prompt containment, clean up, and restoration of any area where paints, solvent, epoxy, and bituminous materials used is spilled. Spill prevention measures will be required. Contractor must submit all paints and or hazardous materials product specification and safety data sheets to the COR for review and approval prior to commencing work.

1.21 Environmental Condition Reports. Contractor shall provide reports as follows: Report any circumstances of unusual soiling of an area which may affect performance of contract work, unhealthful and/or hazardous conditions, and any delays or interference of work by employees of the Government. Such reports shall be made as expeditiously as possible by the Contractor to the Contracting Officer. In any event, the report shall be made not later than the close of business (4:00 pm, Monday-Friday) on the same day.

1.22 Require Training:

1.22.1 AT Level I Training. This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility, or area. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. This training shall be completed within thirty (30) calendar days of contract award and within five (5) calendar days of new employees commencing performance with the results reported to the COR NLT forty-five (45) calendar days after contract award.

1.22.2 I WATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local WATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within thirty (30) calendar days of contract award and within five (5) calendar days of new employees commencing performance with the results reported to the COR NLT forty-five (45) calendar days after contract award.

1.23 Emergency Services:

1.23.1 Emergency Services. In case of emergency the Contractor and/or Contractor employees shall contact the Fire/Ambulance Service Emergency Number: (787) 707- 5911. The Contractor or their employees shall immediately notify their supervisor of any accident requiring emergency medical treatment. All incidents and accidents shall be reported to the COR within thirty (30) minutes of incident occurrence.

1.23.2 Fire Protection. The Contractor shall comply with AR 420-1 Army Facilities Management Chapter 25 and the Fort Buchanan USAG-FB Policy #29 Fire Prevention guidelines. See TE-10 for a copy of USAG-FB Policy #29 Fire Prevention.

1.23.3 Extinguishing Equipment. The Contractor equipment shall have available a portable fire extinguisher as required to comply with the Fire Department instructions. Existing building extinguishers shall not be used to meet this requirement.

1.23.4 Accident Reporting. The Contractor shall maintain an accurate record of accidents resulting in injury or death and accidents resulting in damage to government property, supplies, and equipment. The Contractor shall report accidents immediately to the COR IAW the requirements indicated in AR 385-40, Accident Reporting and Records.

1.24 Liability and Responsibility for Damaged Property:

1.24.1 Damage to Government Property. The Contractor shall be held liable for damage or destruction of Government property (e.g. buildings, vehicles, sidewalks, fences, etc.)

caused by the Contractor, Contractor personnel or representatives of the Contractor in the performance of services on this contract. The Contractor shall be aware that Government property - beyond standard structures and equipment - also includes trees, flower beds, and turf (for example, wounded trees or damaged turf shall be repaired or replaced). If the Contractor fails to take the required corrective action, the Government retains the right to exercise other rights or remedies available to the KO.

1.24.2 Damage to Privately-Owned Property. The Contractor shall be held liable for damage or destruction of privately owned property (e.g. privately owned vehicles), as defined in this SOW, caused by the Contractor, Contractor personnel or representatives of the Contractor in the performance of services in this contract. The Contractor shall take corrective action within 5 working days to repair damages or replace destroyed property. Contractor will purchase and maintain at all times a general third-party liability insurance policy of not less than $500,000 per event coverage.

1.24.3 Damage Reports. The Contractor shall submit a damage reports to the KO and COR within 24 hours of damage or destruction to Government property or privately owned property caused by the Contractor, Contractor personnel or representatives of the Contractor. The damage report shall detail the facts and the extent of damages or destruction and the corrective action taken by the Contractor to repair damages or replace destroyed property.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 CONTRACT: Document to provide contractors that provides material, labor, project management and engineering resources to design, implement and support a broad range purchasing and servicing within the federal government.

2.2 CONTRACTOR: A supplier or contractor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.3 CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.4 CONTRACTING OFFICER'S REPRESENTATIVE (COR): An employee of the U.S. Government appointed by the contracting officer to administer the contract.

Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.5 DEFECTIVE SERVICE: A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.6 DELIVERABLE: Anything that can be physically delivered but may include non-physical things such as meeting minutes.

2.7 KEY PERSONNEL: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the SOW. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.8 PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

2.9 QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.10 QUALITY ASSURANCE Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.11 QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.12 SUBCONTRACTOR: One that enters into a contract with a prime contractor.

The Government does not have privity of contract with the subcontractor.

2.13 WORK DAY: The number of hours per day the Contractor provides services in accordance with the contract.

2.14 WORK WEEK: Is defined as Monday through Friday, unless specified otherwise.

2.15 ACRONYMS:

ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation CCE Contracting Center of Excellence CFR Code of Federal Regulations

CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial Off the Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense FAR Federal Acquisition Regulation HIPAA Health Insurance Portability and Accountability Act of 1996 KO Contracting Officer OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary SOW Scope of Work QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program TE Technical Exhibit

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Services: The contractor shall notify the POC within five (5) workdays before commencing work to schedule date/time of delivery and set up.

3.2 Facilities: Government facilities for work will be Bldg. 527 South Terminal Road, Fort Buchanan, and PR 00934

3.3 Utilities: Government utilities will be provided as needed.

3.4 Equipment: Government equipment will not be provided.

3.5 Materials: Government materials will not be provided.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: Not applicable

4.2 Secret Facility Clearance: No applicable

4.3 Materials: The Contractor shall provide materials as needed.

4.4 Equipment: The Contractor shall provide equipment as needed.

PART 5

SPECIFIC TASKS

5. SPECIFIC TASKS:

5.1 Scope:

5.1.1 Requirements by building

5.1.1.1 Building 376

5.1.1.1.1 Pedestrian Gate

5.1.1.1.1.1 Contractor shall install Access Card Reader

5.1.1.1.1.2 Contractor shall modify existing gate to install Push Bar Panic

Exit Device with a Security Plate as illustrated on Appendix A.

5.1.1.1.1.3 Contractor shall provide and install one (1) Rain Cover

Protector for Access Card Reader.

5.1.1.1.2 Main Door

5.1.1.1.2.1 Contractor shall install Access Card Reader.

5.1.1.1.2.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.1.2.3 Contractor shall install a magnetic lock capable of 1200 lbs. of holding force.

5.1.1.1.2.4 Contractor shall install a Ring Bell Button.

5.1.1.1.2.5 Contractor shall install a Door Opener Button on Reception

Desk.

5.1.1.1.2.6 Contractor shall provide and install one (1) Rain Cover

5.1.1.1.3 Main Frame Room # 112

5.1.1.1.3.1 Contractor shall install Access Card Reader.

5.1.1.1.3.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.1.3.3 Contractor shall install a magnetic lock capable of 1200 lbs. of holding force.

5.1.1.1.4 Server Room # 119

5.1.1.1.4.1 Contractor shall install Access Card Reader.

5.1.1.1.4.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.1.4.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.1.5 Security Cameras

5.1.1.1.5.1 Contractor shall install six (6) each Pan Tilt Zoom Dome

Cameras on the Perimeter as illustrated on Appendix A.

5.1.1.2 Building 379

5.1.1.2.1 Security Cameras

5.1.1.2.1.1 Contractor shall install one (1) each Pan Tilt Zoom Dome Camera on Generator Room #1 as illustrated on Appendix A.

5.1.1.2.1.2 Contractor shall install one (1) each Pan Tilt Zoom Dome Camera on Generator Room #2 as illustrated on Appendix A.

5.1.1.3 Building 390

5.1.1.3.1 Server Room Door

5.1.1.3.1.1 Contractor shall install Access Card Reader.

5.1.1.3.1.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.3.1.3 Contractor shall install a magnetic lock capable of 1200 lbs. of holding force.

5.1.1.3.1.4 Contractor shall install a Ring Bell Button.

5.1.1.3.1.5 Contractor shall install a Door Opener Button on Reception

Desk.

5.1.1.3.1.6 Contractor shall install one (1) each Pan Tilt Zoom Dome

Camera as illustrated on Appendix A.

5.1.1.3.1.7 Contractor shall provide and install one (1) Rain Cover

5.1.1.3.2 Telecommunications Closet First Floor

5.1.1.3.2.1 Contractor shall install Access Card Reader.

5.1.1.3.2.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.3.2.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.3.3 Telecommunications Closet Second Floor

5.1.1.3.3.1 Contractor shall install Access Card Reader.

5.1.1.3.3.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.3.3.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.3.4 Telecommunications Closet Third Floor

5.1.1.3.4.1 Contractor shall install Access Card Reader.

5.1.1.3.4.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.3.4.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.4 Building 527

5.1.1.4.1 Pedestrian Gate

5.1.1.4.1.1 Contractor shall install Access Card Reader

5.1.1.4.1.2 Contractor shall modify existing gate to install Push Bar Panic

Exit Device with a Security Plate as illustrated on Appendix A.

5.1.1.4.1.3 Contractor shall provide and install one (1) Rain Cover

5.1.1.4.2 Main Door

5.1.1.4.2.1 Contractor shall install Access Card Reader.

5.1.1.4.2.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.4.2.3 Contractor shall install a magnetic lock capable of 1200 lbs. of holding force.

5.1.1.4.2.4 Contractor shall install a Ring Bell Button.

5.1.1.4.2.5 Contractor shall install a Door Opener Button on Reception

Desk.

5.1.1.4.2.6 Contractor shall provide and install one (1) Rain Cover

5.1.1.4.3 Telecommunications Closet Room # 24

5.1.1.4.3.1 Contractor shall install Access Card Reader.

5.1.1.4.3.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.4.3.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.4.3.4 Contractor shall provide and install one (1) each door closer.

5.1.1.4.4 Cyber Security Division Room # 25

5.1.1.4.4.1 Contractor shall install Access Card Reader.

5.1.1.4.4.2 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.4.4.3 Contractor shall install a magnetic lock capable of 1200 lbs. of

5.1.1.4.4.4 Contractor shall provide and install one (1) each door closer.

5.1.1.4.5 Warehouse Door

5.1.1.4.5.1 Contractor shall replace existing door with a 36” by 84” SDI Level 2 steel door.

5.1.1.4.5.2 Contractor shall install Access Card Reader.

5.1.1.4.5.3 Contractor shall install Non-Authenticated Exit Mechanism.

5.1.1.4.5.4 Contractor shall install a magnetic lock capable of 1200 lbs. of holding force.

5.1.1.4.5.5 Contractor shall provide and install one (1) each door closer.

5.1.1.4.5.6 Contractor shall provide and install one (1) Rain Cover

5.1.1.5 Access Control System Requirements

5.1.1.5.1 Security Management Suite (Software) Features:

5.1.1.5.1.1 Web Based Client for Badging, Reporting, Alarm and Event Monitoring

5.1.1.5.1.2 Server support including Windows Server 2012/2012R2/2016, SQL Server 2012/ 2014/ 2016

5.1.1.5.1.3 Single user interface for multiple security and business functions

5.1.1.5.1.4 Software capable of integrating with other building systems such as Physical Access Control Devices, and Video surveillance

5.1.1.5.1.5 Web Services API enables Integration Options

5.1.1.5.1.6 Certification Management

5.1.1.5.1.7 Custom triggers and procedures

5.1.1.5.1.8 Event/action associations including sending emails, running a stored procedure, or triggering a panel I/O point

5.1.1.5.1.9 Triggered events for panel-to-panel and panel-to-software actions or within a panel for local actions

5.1.1.5.1.10 Advanced Reports

5.1.1.5.1.11 Virtualization support for VMWare and Microsoft Hyper-V

5.1.1.5.1.12 Compliance Reports that offer data and statistical reporting;

auto generated reports upon schedules

5.1.1.5.1.13 Easy system setup and maintenance with user definable hardware templates

5.1.1.5.1.14 Database partitioning and definable operator permissions

5.1.1.5.1.15 IP, serial and modem communications

5.1.1.5.2 GSA Access Control System Requirements

5.1.1.5.2.1 Components shall support a minimum of one Federal Identity, Credential and Access Management (FICAM) approved PIV PKI authentication method, specifically PKI-CAK, PKI- AUTH, and PKI-AUTH + BIO(-A), as defined in [NIST SP 800-116].The E-PACS solution shall be comprised of products that are listed on the GSA Approved Part List[APL].

Contractor shall ensure that proposed solutions align with these goals and fully describe related capabilities, assumptions, limitations, and non-conformance. The Access Control System shall be capable of evaluating the validity of a PIV/PIV-I credential and the binding of the credential to the bearer at time of registration and at time of access

5.1.1.5.2.2 The E-PACS shall confirm the validity of the PIV/PIV-I credential presented by performing the following functions:

5.1.1.5.2.2.1 Active Authentication

5.1.1.5.2.2.2 Validation of Trusted Origin

5.1.1.5.2.2.3 Bearer Confirmation

5.1.1.5.2.3 The E-PACS shall use an [APL] approved Validation System to perform item 1.b "Validation of Trusted Origin”. Validation Systems may use one or a combination of:

5.1.1.5.2.3.1 Certificate Revocation Lists (CRLs),

5.1.1.5.2.3.2 Online Certificate Status Protocol (OCSP), or

5.1.1.5.2.3.3 Server-based Certificate Validation Protocol (SCVP).

5.1.1.5.2.4 At time of in-person registration, the E-PACS shall:

5.1.1.5.2.4.1 Capture the Content-Signer certificate, the PKI-AUTH certificate, and the PKI-CAK certificate for purposes of periodic Validation of Trusted Origin (items 1.b, 2 and 3).

5.1.1.5.2.4.2 At a minimum, use PKI-AUTH for challenge/response, and confirmation of the bearer’s presented PIN.

5.1.1.5.2.4.3 Check the expiration date of all data objects and signers on the credential and perform a private key challenge/response for each certificate being registered.

5.1.1.5.2.4.4 Perform Validation of Trusted Origin (items 1.b, 2 and

3) of the user’s credential and its signers. Performance Criteria at time of access

5.1.1.5.2.5 PKI-CAK

5.1.1.5.2.5.1 Performance Time is measured from detection of the card by the PIV reader (contact or contactless) to the access grant or access denied response at the door.

Included as a part of this process is the PKI challenge and response to include certificate validation (items 1.b, 2 and 3).

5.1.1.5.2.5.2 Performance Time shall be 2.5 seconds or less.

5.1.1.5.2.6 PKI-AUTH

5.1.1.5.2.6.1 Performance Time is measured from completion of entering the PIN to the access grant or access denied response at the door. Included as a part of this process is the PKI challenge and response to include certificate validation (items 1.b, 2 and 3).

5.1.1.5.2.6.2 Performance Time shall be 2.5 seconds or less.

5.1.1.5.2.7 PKI-AUTH + BIO(-A)

5.1.1.5.2.7.1 Performance Time is measured from completion of entering the PIN and successful presentation of a fingerprint to the access grant or access denied response at the door. Included as a part of this process is match-to-card fingerprint validation, and the PKI challenge and response to include certificate validation (items 1.b, 2 and 3).

5.1.1.5.2.8 Severity Notification

5.1.1.5.2.8.1 Background: The FIPS 201 Evaluation Program /

Approved Product List (APL) updates the technical criteria for approved product / service listings on a periodic, and as needed, basis. When these updates are made, listed/approved products are re-assessed according to the updated criteria (this generally occurs due to identification of new threats, updated standards / policies, etc.). Noncompliant products / services will be assessed a “Severity” finding. When this is the case, the Severity classification may be either a 1 (most severe), 2 (moderate), or 3 (low severity). Each severity finding has an allowable period of time for the vendor to correct and update their product / service.

5.1.1.5.2.8.2 Requirements: Severity 1 findings require the most urgent attention by the vendor to correct the noted product / service issue.

5.1.1.5.2.8.3 It is the responsibility of the product/service vendor to promptly notify the Integrator / Installer of any Severity 1 findings, and provide a brief action plan to address timely resolution of the noted issue. Resolution of noted issue shall include provision of a “patch”, approved by the FIPS 201 Evaluation Program, free of charge to the Integrator / Installer. Additionally, the product / service vendor shall notify the Integrator / Installer when the issue has been resolved and confirm acknowledgement.

5.1.1.5.2.8.4 It is the responsibility of the Integrator / Installer to promptly notify the Contracting Officer (CO) and / or Contracting Officer Technical Representative (COTR) of any Severity 1 findings, and provide a brief action plan to address timely resolution of the noted issue.

Resolution of noted issue shall include provision of a “patch”, approved by the FIPS 201 Evaluation Program, free of charge to the government.

Additionally, the Integrator / Installer shall notify the CO/COTR when the issue has been resolved and confirm acknowledgement.

5.1.1.5.3 Integrators / Installers

5.1.1.5.3.1 With regard to PACS Integrators (or Installers), PACS configuration work performed under the awarded task must be performed by personnel that are listed on IDManagement.gov as a Certified System Engineer ICAM PACS. The certification must be current. (Note: This certification program will provide necessary training and a minimum assurance of ability to efficiently and effectively implement PKI and federal ICAM architectures for E-PACS and meet federal requirements.)Vendor shall ensure physical onsite support in Puerto Rico during the warranty period of the equipment and work performed.

5.1.1.6 Surveillance System

5.1.1.6.1 Requirements

5.1.1.6.1.1 Contractor shall install a Network Video Recorder (NVR) capable of storing 30 days of recorded activity, this NVR shall be able to integrate with the Physical Security Software/System.

5.1.1.6.1.2 Contractor shall install a 65” Monitor displaying all cameras connected to the NVR

5.1.1.6.1.3 NVR Technical requirements:

5.1.1.6.1.3.1 Network Interface 1 RJ-45 10 / 100 / 1000 Mbps self-adaptive Ethernet

5.1.1.6.1.3.2 Video Input 16 Channels

5.1.1.6.1.3.3 Two –way Audio Input

5.1.1.6.1.3.4 HDMI Video Output

5.1.1.6.1.3.5 VGA Video Output

5.1.1.6.1.3.6 Stream Type Video, Video and Audio

5.1.1.6.1.3.7 Hard Disk

5.1.1.6.1.3.7.1 4 SATA Interface

5.1.1.6.1.3.7.2 Up to 8TB capacity for each disk

5.1.1.6.1.3.8 Serial Interface

5.1.1.6.1.3.9 USB Interface

5.1.1.6.1.3.10 Alarm Inputs / Outputs

5.1.1.6.1.4 Contractor shall install ensure that all cameras are configured to store videos to the NVR.

5.1.1.6.1.5 All cameras must comply with the following standards:

5.1.1.6.1.5.1 Casing IP66-, IP67-, IP6K9K- and NEMA 4X-rated, IK10 impact-resistant casing with polycarbonate dome, aluminum base

5.1.1.6.1.5.2 Video compression H.264 (MPEG-4 Part 10/AVC)

Baseline, Main and High Profiles Motion JPEG

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS):

U.S. NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA)

29 CFR 1910.94 Ventilation

29 CFR 1910.120 Hazardous Waste Operations and Emergency Response

29 CFR 1926.65 Hazardous Waste Operations and Emergency Response

29 CFR 1926.502(f) Warning Line Systems

32 CFR 651.4 Environmental Effects of Army Actions

33 CFR 328 Definitions

40 CFR 68 Chemical Accident Prevention Provisions

40 CFR 260 Hazardous Waste Management System: General

40 CFR 261 Identification and Listing of Hazardous Waste

40 CFR 262 Standards Applicable to Generators of Hazardous

Waste

40 CFR 302 Designation, Reportable Quantities, and Notification

40 CFR 355 Emergency Planning and Notification

49 CFR 171 - 178 Hazardous Materials Regulations

U.S. ARMY CORPS OF ENGINEERS (USACE)

COE EM-385-1-1 (2014) Safety and Health Requirements Manual ASTM E 329 (2009) Standard Specification for Agencies Engaged in the Testing and/or Inspection of Materials Used in Construction

EM 385-1-1 (2014) U.S. Army Corps of Engineers Safety and Health Requirements Manual

WETLAND MANUAL Corps of Engineers Wetlands Delineation Manual Technical Report Y-87-1

NATIONAL FIRE PROTECTION ASSOCIATION (NFPA)

NFPA 241 (1996) Safeguarding Construction, Alteration, NFPA 51B (1999) Standard for Fire Prevention during Welding, Cutting, and Other Hot Work

Federal Register Executive Order 13693 Planning for Federal Sustainability in the Next Decade

ARMY PUBLISHING DIRECTOATE AR-200-1 Environmental Protection and Enhancement

STATE REQUIREMENT, EQB PERMITS AND REGULATIONS, FORT BUCHANAN

REQUIREMENTS:

1. MEC Pamphlet FY13 Oct. 70 Pub.

2. Sergeant Wolf 3Rs Poster (English and Spanish)

3. Environmental Awareness Package (Documents DL#65-78)

PART 7

GENERAL SAFETY REQUIREMENTS

7. FIRE AND SAFETY REQUIREMENTS

7-1. Fire Prevention and Protection:

a. The Contractor and Contractor employees shall comply with AR 420-90, Fire and Emergency Services, and National Fire Prevention Association guidelines.

b. Installation fire prevention personnel may make periodic routine inspections for compliance.

7-2. Safety Program:

a. The Contractor shall implement a safety program to ensure that all operations and activities comply with Occupational Safety and Health Administration (OSHA) standards and other safety and health local general consensus standards.

b. The Contractor shall be thoroughly familiar with all safety and health requirements of this PWS in accordance with OSHA national consensus standards, including the requirement to establish a site specific standard operating procedure in accordance with OSHA Directives CPL 02-00-124 and CPL 2-0.124--Multi-Employer Citation Policy (Dec. 10, 1999), Multi-employer Worksite Policy.

c. The Government has the right to inspect and test all services related to safety standards, to the extent practicable at all times and places during the term of the contract. The Government shall perform inspections and tests in a manner that will not unduly delay the work.

7-3. Protective Items: To comply with OSHA, Contractor personnel shall use protective clothing and equipment whenever and wherever required in the performance of services as determined in the contractors standard operating procedures related to tasks included in this SOW.

7-4. Safety Instruction: The Contractor shall provide initial indoctrination and continuing instruction to all employees to enable employees to conduct their work in a safe manner and to recognize and report hazardous conditions to the appropriate offices for corrective or abatement action. Initial indoctrination shall be provided for safe work practices; proper use, care, and maintenance of equipment; reporting hazards, accidents, and mishaps; employee responsibility for accident prevention and fire prevention; fire evacuation routes and internal shelter areas.

7-5. Notification of Accidents and Damage to Government Equipment Property:

a. General requirements for reporting accidents and loss or damage to Government property are contained in AR 385-10, and DA PAM 385-40 for the Performance of Contract Property Administration.

Appendix A

Building 376

Building 390

Building 527

Pedestrian Gate Modification Example

“The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address “https://contractormanpower.army.pentagon.mil. The required information includes: (1) Contracting Office, Contracting Officer, Contracting Officer’s Technical Representative; (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Estimated direct labor hours (including sub-contractor); (6) Estimated direct labor dollars paid this reporting period (including sub-contractor); (7) Total payments (including subcontractor);

(8) Predominant Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant FSC for each sub-contractor if different);

(9) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information); (10) Locations where contractor and sub-contractors perform the work (specified by zip code in the United States and nearest City, Country, when in an overseas location, using standardized nomenclature provided on website);

(12) Presence of deployment or contingency contract language, and,

(13) Number of contractor and sub-contractor employees deployed in theater this reporting period (by country). As part of its submission, the contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each government fiscal year and must be reported by 31 October of each calendar year.”