DRAFT MARK SOW.pdf

UNCLASSIFIED

STATEMENT OF WORK

Vindicator intrusion detection system installation, upgrade and/or removal if required, refresh, testing and integration services incorporating all new and existing intrusion detection equipment, camera monitoring equipment, access control panels and keypads, enrollment workstations, sensors, and necessary software/firmware upgrades for 9 AF (AFCENT) secure areas and facilities with full operational integration to Shaw AFB Security Forces

Facilities (multiple rooms): Building number 1130 (B1130), B1102, B216, B1921, B1902, B1903, B1925, B1910, B1917, B1919, B1926, B1927, B1941, and B1411

SHAW AIR FORCE BASE, SOUTH CAROLINA

And

B1000 MOAB, 226 Combat Communications Group (Alabama Air National Guard)

1000 Airbase Boulevard

MONTGOMERY, ALABAMA.

1. DESCRIPTION OF WORK: This Statement of Work (SOW) describes the Government’s requirement for the purchasing, installing, removing, integrating, testing, refreshing, archiving and upgrading of an intrusion detection system (IDS), access control systems (ACS) designed to meet the physical security compliance requirements of the Department of the Air Force

Instruction (DAFI) 31-101 and/or Intelligence Community Directive (ICD) ICD-705, DoDM

5105.21 V1-3, and AFMAN 14-403. The Contractor shall provide all needed equipment, tools, materials and/or supplies needed for the installation and associated infrastructure. The Contractor shall ensure that the system delivered under this contract consists of already proven (qualified)

Commercial off the Shelf (COTS) equipment from the most recent” Non-Nuclear Configuration

Management Database (CMD) approved equipment list dated December 8, 2023 (specified in attachment 2). The Contractor shall conduct equipment production qualification test and acceptance testing and support Government operational evaluation for non-AEL IDS equipment

(as applicable) in accordance with SOW requirements. The Contractor shall perform Contractor

Verification Testing of the system and subsystems to include information assurance verification and stability testing. Contractor shall validate Contractor supplements to commercial technical manuals and support all phases of Government acceptance testing and provide site-specific training personnel. The Contractor shall provide factory equipment staging services, onsite programming, testing, and training for Honeywell Vindicator equipment and other associated equipment. The Contractor shall provide project management for sub-contractors and onsite personnel.

1.1. GENERAL REQUIREMENTS INTRUSION DETECTION SYSTEM (IDS) for

SCIFS: Contractor shall procure and install DOD approved IDS equipment that complies with

Chapter 7 of Technical Specifications for Construction and Management of Sensitive

Compartmented Information Facilities: version 1.5.1 IC Tech Spec – for ICD/ICS 705, (specified in attached 1) UL 2050: Extent of Protection #3 (specified in attached 2) and the Non-Nuclear

Configuration Management Database (CMD) approved equipment list dated December 8, 2023 specified in attachment 2). Motion sensors are not required. The contractor shall ensure the IDS is integrated into the Shaw Air Force Base Vindicator IDS head end monitoring equipment for security reporting and alerting and annunciate at the Base Defense Operations Center (BDOC), which is currently operating on Windows 10. All installed devices must be Windows 10 and on the current versions. Contractor shall protect the cabling between the sensors and the annunciator

(called the detection loop) for the IDS. IDS cabling will be routed in rigid metal conduit, flexible metal conduit, or equivalent raceways. These materials must comply with national electric code and ICD-705 standards.

1.2. GENERAL REQUIREMENTS FOR COLLATERAL AND OPEN STORAGE: All equipment shall be installed, in areas where collateral and open storage are required, in accordance with DoDM 5200.01 volume 3 - DoD Information Security Program: Protection of

Classified Information.

2.0. GENERAL INFORMATION: Contractor shall procure and install Department of Defense

(DoD) approved IDS equipment that complies with Chapter 7 of Technical Specifications for

Construction and Management of Sensitive Compartmented Information Facilities: version 1.5.1

IC Tech Spec – for ICD/ICS 705, (specified in attached 1) UL 2050: Extent of Protection #3

(specified in attachment 2) and the Non-Nuclear Configuration Management Database (CMD) ) approved equipment list December 8, 2023 (specified in attachment 2). Furthermore, the contractor shall ensure the IDS is integrated into the Shaw Air Force Base Vindicator IDS head end monitoring equipment for security reporting and alerting and annunciate at the Base Defense

Operations Center (BDOC). Contractor shall protect the cabling between the sensors and the annunciator (called the detection loop) for the IDS. IDS cabling may be routed in rigid metal conduit semi-rigid conduit, or equivalent raceways. These materials must comply with national electric code and ICD-705 standards.

2.1. ACCESS ENTRY CONTROL SYSTEM (AECS) REQUIREMENTS AND PEDESTRIAN

DOOR LOCKS: Card presentation and Personal Identification Number (PIN) shall provide the access control for all 9 AF (AFCENT) facilities. Only GSA approved installers as outlined in the

Navy Lock Program guidance shall install door lock equipment and mechanisms. IDS/ACS installers shall procure and install GSA approved high-security locks for pedestrian secured doors.

2.2. ENROLLMENT: All SCIF enrollment will occur at their respective SCIFs. Enrollment for access to B1130, B1102, and B216 will occur at the B1130 Security Office. Enrollment for access to B1921, B1902, B1903, B1904 COMMS CLOSET will occur at the B1923 Security

Office. Enrollment for B1925, B1910, B1917, B1919, B1926, B1927, B1941 and B1000 -

MOAB will occur at the B1925 Security Office. B1000 will also maintain enrollment for their access systems. Enrollment for B1411 will occur at B1411.

2.3. FACILITIES:

2.3.1. IDS AND BADGE MANAGER SYSTEMS: Contractor will procure the latest approved equipment. Contractor will provide the required amount of V3 panels to maintain the required configuration.

B1130 – AFCENT HQ: Areas of need are the special technical operations (STO) area, sensitive compartmented information facility (SCIF), Office of Special Investigation (SCIF) Vault, and

Security Office. Add card readers, motion and Balance Magnetic Switch (BMS) as needed.

These will be integrated into the existing system. Upgrade the firmware, necessary input boards.

A UHS 1500 solution AES-1500T for relocating/adding motion sensors throughout the area.

This will need to integrate with the Security Office and Shaw Security Forces (20 SFS) BDOC.

Main Entry Doors: (Exterior doors only) Diagnose and repair electrical strike and ACS power issue of the existing system.

Basement Entry Doors: Parking lot double doors and loading ramp double doors. Diagnose and repair electrical strike and ACS power issue of the existing system.

A2 SCIF: Add card readers, motions and BMS as required. Replace VCC/VBM. Needs complete sensor refresh/addition. Procure and install Uninterrupted Power Supply (UPS) to work with current server rack configuration.

OSI Vault: Add a Vindicator Site Commander (VSC), upgrade all firmware, and add a Security

Archive Workstation (SAW) to be integrated into the existing system.

Security Office: BDOC and the B1130 Security Office VICADS are not compatible. The video system at the Security Office would need to be decommissioned and the cameras enrolled in

BDOC. The Security Office VICADS will have to be configured to view cameras 7and search for archived video. Connect the V5 ACS located in Room 123 server room to the VSC in the

Security Office. Diagnose and repair soft-wall issue with VICADS in RM 175B and add soft-wall in the Security Office Bay located in RM 175A.

B1102 – AFCENT Staff: Upgrade the V5 IDS/ACS firmware and add motion sensors and

BMS’s throughout the space to include the entrances and offices with windows. These will be integrated into the existing system.

B216 – 3rd Floor Battle Lab/MDA: Add in/out pivCLASS card readers with keypads to the 3rd floor elevator lobby double doors. These will be integrated with the B1130 Security Office. To ensure integration with the B1130 Security Office a door group will need to be added to the existing B1130 Security Office V5.

B1921 – Ops Floor SCIF: Add a VSC, upgrade all V5 firmware(s), and add card readers, motions and BMS as required. We have also included a standalone SAW workstation and IDS to the communications room and Passive Infrared (PIR) in room 119. These will be integrated into the existing system.

B1921 – ASUS SCIF: “New SCIF Annex”. Procure and install VCC/VBM Keycard Readers, BMS’s, Motions, UPS, conduit, drops, network switch.

B1921 – Room 108 COMMS Closet: Add ACS System to include V3 or equivalent and pivCLASS card reader.

B1902 – Coalition (97% complete interior construction): Add V5 ACS controller, upgrade the firmware, necessary input and output boards, add card readers, motions and BMS as needed.

Include IDS to the communications room. The contractor will have to run conduit as none is provided. This will be integrated into the existing system.

B1903 – Alt Ops Floor/MDA: Add a workstation and upgrade the firmware as required. Include a badging workstation, with upgraded firmware for enrollment as well. These will be integrated into the existing system.

B1904 – A23 SCIF: Add card readers and associated door hardware, electronic strikes for rooms

103 and 104. Procure and install electronic strikes and associated door hardware for room 111.

B1904 – 609 ACOMS COMMS Closet: Needs ACS System to include V3 or equivalent and pivCLASS card reader.

B1925/1927 – Network Control Center (connected buildings): Upgrade the V5 IDS/ACS firmware, add a site commander, and add a card reader as required. These will be integrated into the existing system.

B1910 – Network Control: Add in/out pivCLASS card readers with keypads with integration to the B1925 V5.

B1917 – Comms Warehouse: Add in/out pivCLASS card readers with keypads with integration to the B1925 V5.

B1919 – Comms: Add in/out pivCLASS card readers with keypads with integration to the B1925

V5.

B1926 - Comms Warehouse: Add in/out pivCLASS card readers with keypads with integration to the B1925 V5.

B1941 – A6 Swing-space: Upgrade the ACS firmware. This will need to integrate into the existing system.

B1000 – MOAB: Add in/out pivCLASS card reader with keypad to room 129. All current card readers in B1000 will need to integrate to the B1925 V5, at Shaw AFB. Enrollment: B1000 and

B1925 will control enrollments for all systems at B1000.

B1411 – Provide and install VCC, VBM, ACS for interior and exterior doors, VICADS and interior fixed cameras. This will need to integrate into the existing system.

2.4. NORMAL HOURS OF OPERATION: The Government’s normal duty hours are five days per week, Monday through Friday, from 7:30 AM to 5:00 PM. However, the Command

Post functions on a 24/7 operations schedule.

2.4.1. RECOGNIZED HOLIDAYS. Any of the below holidays falling on a Saturday will be observed on the preceding Friday; holidays falling on a Sunday will be observed on the following Monday.

Jan 1 New Year's Day Sep 2 Labor Day

Jan 15 Martin Luther King Day Oct 14 Columbus Day

Feb 19 Presidents' Day Nov 11 Veterans Day

May 27 Memorial Day Nov 28 Thanksgiving Day

Jun 19 Juneteenth Dec 25 Christmas Day

Jul 4 Independence Day

2.5. SECURITY REQUIREMENTS FOR UNCLASSIFIED CONTRACTS. The following security requirements are required in Shaw AFB Statement of Works (SOWs) and Performance

Work Statements (PWSs) when contract work does not involve access to classified information.

2.5.1. LISTING OF EMPLOYEES. The contractor shall maintain a current listing of employees.

The list shall include the employee's name, social security number and type of investigation if contract work involves unescorted entry to Air Force controlled/restricted areas or other sensitive areas designated by the installation commander. The list shall be provided to the Program

Manager and sponsoring agency’s Security Manager. An updated listing shall be provided when an employee's status or information changes.

2.5.2. PASS AND REGISTRATION ITEMS. The contractor shall ensure the pass and registration items required for contract performance are obtained for employees. Contractor must coordinate with the contract POC to submit initial request for installation identification to 20th

Security Forces Squadron, no later than one (1) week following contract award. Furthermore, Contractor must coordinate with the contract POC fourteen (14) days prior to individuals requiring entry to installation. This is achieved when the contractor submits to the contract POC completed forms with Subject line “Contractor(s) needing access to Shaw”, for each individual employee requiring access, for the period of contract performance. This form is provided as

“Attachment 2 Shaw AFB Access Request for Contractors.” All forms will be filled out in their entirety and sent to the contract POC at least (21) days before the start of the project.