SOW - Intrusion detection system replacement Grosslittgen and Niederkail- revised 2025 07 28.pdf

Project: MACC - Intrusion detection system replacement Grosslittgen and Niederkail

28 Jul 2025

52 CES/CEOE 1

Statement of Work (SOW)

Title: Intrusion detection system replacement Grosslittgen and Niederkail

Bldg. 2120, 2140, 2300, 2016

Revised version: 28 Jul 2025

52nd CES/CEOE Norbert Lorenz Gebäude 120 54529 Spangdahlem

Tel.: 06565 – 61 - 4882 E-Mail: norbert.lorenz.de@us.af.mil

52nd CES/CEOIU Michael Hill Gebäude 2023 54529 Spangdahlem

Tel.: 06565 – 61 - 6098 E-Mail: michael.hill.74.de@us.af.mil

Spangdahlem, Jul 2025

52 CES/CEOE 2

WORKSCOPE

The contractor shall provide all labor, tools, parts, materials, equipment, crane, supervision, management, licenses, supplies, transportation, and other items and services necessary to replace the existing intrusion detection system at Grosslittgen and Niederkail wells at Spangdahlem Air Base.

Construction Site Location:

The construction sites are located outside the US Spangdahlem Air Base. Access to the well buildings and the valve shaft is via gravel field and forest roads. Access to these is difficult but possible with normal cars. The water plant is located near Grosslittgen and can also be reached by car via a gravel field path. Due to the narrow paths, it is only possible to pass oncoming traffic in some places.

52 CES/CEOE 3

DESCRIPTION

At the Niederkail north and south well as well as at the water treatment plant at Grosslittgen new intrusion alarm systems and the pertaining detectors and contacts shall be installed and connected ready to use.

The project involves buildings and structures located in the immediate vicinity of Spangdahlem Air Base. All buildings are only accessible via gravel forest roads. The first building is the water treatment plant near Grosslittgen, which consists of two structures and three wells. One is the water plant itself and the other is the drinking water reservoir. The other structures are the three wells located in the forest, which can be reached via the same path. The two wells in the Kailbach Valley each have a separate transformer station, but these are not to be monitored. The last structure is the valve shaft, which is located approximately halfway between the two wells. The two well buildings in the Kailbach Valley are identical in design and consist of multi-layered masonry on the outside. This consists of exposed sandstone masonry (approx. 10 cm thick) with an intermediate layer of insulation (approx. 10 cm) and concrete (approx. 30 cm). The interior partition walls are made of concrete. The valve shaft is located underground beneath the forest path. Access is via two hinged concrete slabs arranged at the edge. The entire cover of the shaft consists of concrete slabs lined up next to each other with a cast steel surround.

The existing intruder alarm systems in the buildings described shall be replaced by this project. Most of the electrical installations shall be surface-mounted. The water plant in Grosslittgen shall have its own alarm control center, while the other locations shall share a control center located in Brunnen Nord. The alarm systems for the various buildings shall be used for outer shell and trap monitoring. The components offered for these systems shall form a coherent and coordinated system. The systems shall be installed using bus technology. The assignment of detectors is carried out by programming the control center and the bus participants. Access doors are monitored for opening and closing, and windows are monitored for opening and climbing through. Existing copper and fiber optic connections shall be used to connect and transmit signals between the buildings and to the office on base, and system statuses are transferred to the existing PLC. Outside the Grosslittgen water plant, the existing camera pole shall be replaced due to damage.

An insulated lightning protection system shall be installed on it to prevent lightning currents from entering the cameras and the building. All devices installed outside the various buildings shall be protected by surge protection modules.

All alarm and camera related cabling shall be replaced, but the installation systems shall be reused as far as possible. The contractor shall connect the cables to the existing PLCs. Programming the controllers / SCADA shall be done in close coordination with the GOV POC. All work in the network cabinets at the various locations, shall be documented and the necessary adjustments shall be made in coordination with the GOV POC. The existing connecting lines to the wellheads outside the buildings described shall be checked for continuity and insulation

52 CES/CEOE 4

(according to VDE). Access to the buildings will be provided by CES shop staff.

Working hours are therefore set between 7 a.m. and 4 p.m.

The structures to be protected by the alarm system within this requirement are drinking water supply wells / water plants / drinking water supply facilities. Basically technical, industrial facilities housing critical infrastructure.

Critical infrastructure refers to facilities that are of vital importance to the state community and whose failure or impairment would result in long-term supply bottlenecks, significant disruptions to public safety, or other dramatic consequences.

Under these specifications, an intruder alarm system, including all sensors and alarm devices, shall be installed in accordance with VDS Class C. VDS Class C alarm systems offer a high level of security against intrusion, both when armed and unarmed. The response sensitivity of the alarm detectors shall be increased and functions relevant to security shall be monitored. Therefore, a simple alarm system, such as those installed in private homes, will not be sufficient.

The IDS system shall be a multifunctional central platform for connecting detectors, contacts, and sensors using conventional and BUS technology. All detectors, sensors, alarm devices, and other necessary equipment shall be wired together using monitored bus technology. No wireless / radio transmission, as this could be disrupted by jammers. The modular design shall ensure that there is 30% of space reserved for possible future expansion.

The cameras to be installed shall meet at minimum the following specifications:

Resolution: 2MP or better / Light intensity: 0.06 lux (color) or better / White balance / Day/night switching with additional IR spotlight if necessary. All cameras shall be powered by PoE. Outdoor cameras shall be IP67-rated and shall be equipped with a housing including a heating cartridge.

The digital recorder shall be equipped with 2 hard drives in RAID 1 structure. The recording time will depend on the Terabyte capacity and on the resolution.

Recording time shall be at a minimum of 45 days before information gets re-written in a loop.

The IDS system shall include all licenses necessary for the unrestricted operation of all components. The licenses should be generally valid and not subject to any time restrictions.

All outdoor devices shall be supplied and installed in a weatherproof design with UV-resistant housing and an IP54 classification (or higher). If the devices do not meet this requirement, they shall be housed in additional stainless steel housings to ensure they are weatherproof. All outdoor alarm devices shall be fitted with a folded stainless steel sheet rain canopy/sun protection according to their dimensions.

All outdoor and indoor devices shall be connected to a power supply. Operation with batteries only is not permitted (for maintenance and servicing reasons).

52 CES/CEOE 5

All cable and ducts shall be halogen-free versions. All existing cables, cable ducts, sensors, detectors, controls, etc. from the old intrusion detection system shall be removed and disposed of. Old dowel holes shall be sealed and touch up is required with appropriate paint / color. Exception: The lines from the water treatment plant in Grosslittgen to the three existing well head facilities.

Additional circuit breakers are needed in the sub-distributions for the additional devices that will be part of the intrusion alarm system. New cables and lines in the buildings shall be run in surface-mounted PVC ducts. Outdoors, cable conduit shall be used. Multi-cable conduits shall be used in Großlittgen.

The scope of the work to be carried out includes the installation of plaster, sockets for the new circuits, junction boxes and interface converters for the conversion from copper to fiber optics.

Lightning protection and grounding systems. The two cameras on the free-standing pole at the entrance to the area of Grosslittgen water treatment plant shall be protected by a new lightning rod mounted on top of the pole. That pole shall be grounded with a new grounding rod installed by the contractor next to the pole (this requires a digging permit).

Furthermore, surge protection devices will be installed in the feed lines of the cameras. All newly laid cables and lines that are routed from the outside into the respective buildings will be equipped with a suitable overvoltage protection module.

In some cases, new penetrations through walls and ceilings are required due to new cables and lines. These will be sealed in accordance with the applicable fire protection regulations.

The planning and execution of all work is based on the current German regulations, standards, and guidelines for the construction industry.

Furthermore, various installation and connection work is also required as part of the construction project.

Furthermore, the contractor shall provide the entire documentation of the new installed intrusion detection system at all work sites.

Descriptions of the intrusion alarm systems:

A. Construction Site: Niederkail Well “North” – Fac. No.: 2140

Contractor shall install a battery buffered Intrusion Alarm System IAS with control panel. This system in well “North” shall cover the controls of well “South” and the “valve chamber” that is located in-between the North and South wells. A device for arming and disarming the system shall be installed at building “North”, as well as audible and visible alarms and 2 cameras with integrated Infra-Red IR night vision. The cameras shall be connected to a digital video recorder. The recorder shall be connected to the existing network so that recorded material can be

52 CES/CEOE 6

viewed externally, too. The outer skin of the building is monitored via passive glass breakage sensors and magnet contacts. Doors shall be equipped with bolt switching contacts where possible, to prevent false alarms. The control panel for the alarm system shall be located in the well “North” building.

B. Construction Site: “Valve Chamber” – Fac. No.: 1197 Contractor shall extend the alarm bus connection from well “North” to the “valve chamber” via fiber optic converter and existing fiber optic line. In the “valve chamber”, all access openings and all segments that can be opened shall be monitored via magnet contacts. The valve chamber components shall be armed/disarmed via the control panel in building well “North”.

C. Construction Site: Niederkail Well “South” – Fac. No.: 2120 Buildings at well “South” shall be connected to the IAS well at well “North” via the “valve chamber”. A device for arming and disarming the system shall be installed at building “South”, as well as audible and visible alarms and 2 cameras with integrated IR night vision. The cameras shall be connected to a digital video recorder. The recorder shall be connected to the existing network so that recorded material can be viewed externally, too. The outer skin of the buildings is monitored via passive glass breakage sensors and magnet contacts. Doors shall be equipped with bolt switching contacts where possible, to prevent false alarms.

D. Construction Site: Water Treatment Plant Grosslittgen – Fac. No.: 2300 A battery buffered IAS with control panel shall be installed in the water treatment plant buildings at Grosslittgen. A device for arming and disarming the system shall be installed outside the building, as well as audible and visible alarms and 4 cameras with integrated IR night vision. The cameras shall be connected to a digital video recorder. The recorder shall be connected to the existing network so that recorded material can be viewed externally, too. The outer skin of the building is monitored via passive glass breakage sensors and magnet contacts.

Doors shall be equipped with bolt switching contacts where possible, to prevent false alarms. A separate control panel for the system shall be installed inside the building. The three somewhat remote well heads and the new potable water tank shall be monitored by the new system, too. The feed line to the new potable water tank shall be run underground, in a protective tube. Existing lines shall be used for the well heads.

E. Connection to SCADA System (Kisters ProCos): All alarm panels are getting connected to existing Simatic S7 300 PLC’s which shall be extended with digital inputs for Alarm, Active/Inactive and Fault. These inputs need to be routed in the plc program to an existing data block for transmit to the SCADA servers, at the SCADA Servers the corresponding entries where the Messages were received shall be renamed and set to alarm, information or Fault message. These messages shall be linked to the UI visualization of the SCADA system.

F. A draft schematic of the entire intrusion detection system, as well as floor plans showing the approximate location of the components for Grosslittgen and Niederkail, are available upon request from 52 CONS Mr. Lars Dahinten

52 CES/CEOE 7

lars.dahinten.de@us.af.mil, or Mr. Angelo Minisini angelo.minisini@us.af.mil. See Attachments 1, 2 and 3. The location of the control panels and detectors as well as all cables and lines shall be determined locally by the Contractor in coordination with CES.

G. Report / Documentation including System introduction for shop personnel Documentation shall be delivered 3 times as bounded folders as well as one DVD with the digital version of the report.

H. Daily cleaning of the work area.

All work shall be accomplished according to German VOB, DIN regulations, VDE standards, VDS standards, the five safety rules concerning work on electrical systems, German water law, technical rules for sprinkler systems, NFPA 101 Life Safety Code and the general state-of-the-art.

Recommended IDS Systems (including all subcomponents):

- Honeywell HSCI-MB Secure-XXXX (or equal)

- Honeywell IDENT-KEY IK3 (or equal)

- Telenot Hiplex 8400 (or equal)

- Telenot RFID-Tastaturleser cryplock BLM10/K D (or equal)

Recommended Cameras (including all necessary equipment):

- Honeywell equip-Kamera HBW2GR3V (or equal)

- BOSCH DINION 3100i IR (or equal)

Recommended digital Recorder (including all necessary equipment):

- Honeywell MAXPRO NVR XE (or equal)

- BOSCH DIVAR IP all-in-one 4000 (or equal)

The devices listed above are only examples. The entire alarm system, that shall be installed, shall be from one manufacturer - ready to use. The components of this system shall form a consistent system, using bus technology. The detectors shall be programmed to the control panel and work as bus participants.

All cameras are supplied with PoE.

52 CES/CEOE 8

SPECIAL CONDITIONS

The contractor is responsible for conducting business, between the hours of 0700-1600, Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor shall always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this SOW when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

Contractor personnel performing work under this contract shall be able to obtain the required security documentation and shall maintain the level of security required for the life of the contract.

All work performed, equipment installed and material specifications shall comply with Base Standard or better.

Occupational safety in electrical operating rooms The contractor itself shall assign a person charged with carrying out direct responsibility for the operation of the electrical system or parts of the installation that are part of the workplace during the execution of construction work.

The contractor’s person responsible for the installation shall be able to assess the possible effects of the work to be carried out on the installations or parts of the system within his area of responsibility. This also applies to the effects of the electrical system or plant components that are in operation during construction work. The person shall take over the tasks under the Occupational Health and Safety Act for his area of responsibility. The person shall have a proofed knowledge of relevant standards (DIN, VDE, etc) and the safety regulations of the professional association (Berufsgenossenschaft).

An electrical operating room is defined as a room or location that essentially serves the purpose of operating electrical systems and equipment and is usually entered only by electricians (Elektrofachkräften).

Electrical systems are generally formed of several electrical equipment. Electrical systems and operating rooms may only be installed, modified, and maintained by a qualified electrician or under the escort of a qualified electrician in accordance with the electrical engineering regulations (VDE). This includes the work of other crafts (painters, locksmiths, metal workers, carpenters, ...).

The five safety rules shall apply at any time.

Before starting work Vor Beginn der Arbeiten

- Disconnect - Freischalten

- Prevent resetting - Gegen Wiedereinschalten sichern

- Check for zero potential - Spannungsfreiheit feststellen

52 CES/CEOE 9

- Ground and short-circuiting - Erden und Kurzschliessen

- Cover or make live parts inaccessible - Benachbarte, unter Spannung stehende Teile, abdecken oder abschranken

A qualified and certified contractor with long time experience of installation and maintenance in in electrical operating rooms shall be considered for the execution.

Fill out and sign HAZMAT forms as required.

The Contractor shall establish and implement methods of making sure all keys issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys to the Contracting Officer. If other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the contract award amount due to the Contractor.

If escorts are required, the escort shall get picked up in Escort Room, Bldg 119 and brought back around high noon for a lunch time of one hour. Regular duty time for escorts is Mon. – Fri.: 07:00h-17:00h. A pick up for escorts after 14:00h is not possible.

Insulation materials (mineral wool, glass wool) shall be disposed to the correct dumping ground.

All trash, food products, rubble and surplus excavated waste material shall be hauled off to a public sanitary landfill outside the installation on a daily basis. No trash from demolition work shall be housed on job site for any period.

All trash containers shall be covered and after reaching full capacity shall be hauled off within 48 hours or IAW applicable German Federal Regulations, whichever is more stringent. Also, all trash containers will be removed prior to final inspection. All paint and adhesive remainders and empty paint/adhesive buckets etc. shall be disposed of by the contractor as hazardous waste according to the regulations.

The US Government will not be responsible for the contractor’s property. The US Government shall provide the contractor with an area for equipment and material storage, around which he will erect a temporary security fence. In any case, the contractor shall be responsible for security of his property.

52 CES/CEOE 10

The contractor shall adhere to the safety regulations of its written safety program, as well as the German laws/regulations on workers’ protection and protection of health as well as the Accident Prevention Regulations. Job sites are to be secured and protected by fences when outside work is involved. All accidents involving personnel, equipment or property of the US Air Force shall be reported during office hours to the Contracting Officer responsible for the respective contract and to the Safety Office of the 52 Air Base Wing.

No asbestos-containing material or materials containing any of the 17 EPA toxic materials shall be used, and only lead-free paints shall be used.

In the event the contractor suspects any hazardous material/waste such as asbestos, lead based paint (LBP), tar, or contaminated soil, the project manager shall be contacted immediately in order to coordinate testing with the Environmental Management Flight (52 CES/CEIE) and Bioenvironmental Engineering Flight (52 AMDS/SGPB). All demolition, removal or remediation of these materials will be performed IAW Federal Governing Standards, Germany (FGS-G). All asbestos/lead based paint removal work shall be performed IAW the FGS and TRGS 519. A work plan shall be submitted to the Environmental Management Flight, 52 CES/CEIE, (two weeks before start of work) for their review and coordination.

Construction utilities (water and electricity) are available; however, connections for the latter will be at the contractor’s expense. Interruptions of such utility services shall be coordinated in advance with the responsible office and shall be held to an absolute minimum.

After completion of work, the job site shall be restored to its original condition.

All interior finishes shall comply with the current Engineering Technical Letters (ETLs), UFC 3-600-01 Fire Protection Engineering for Facilities, National Fire Protection Association (NFPA) Fire Code and KMCI 32-2002 and have a fire resistive rating of class A or B, with certificate of certification under ESTM E84 test.

If tree cutting is required, or if any construction is closer than 3m to a tree, all actions will only be performed after obtaining permission from the Forestry Department through the Environmental Management Flight (52 CES/CEIE ) prior to construction, renovation, installation, demolition, trenching etc. However, all debris clean-up, such as branches, stumps, etc. shall be disposed of by the contractor as part of the project.

Period of 01 March up to 30 September no cutting/removing of hedges bushes are possible due to birds breeding time.

Ensure applicable Federal Acquisition Regulation (FAR) clauses are incorporated into the contract for proper notification and approval of hazardous material being utilized by contractor. Fill out HAZMAT form, included in Accident Prevention and Safety Standards letter. POC: 52 CES/CEIE, Mr. Thurner 452-7257.

52 CES/CEOE 11

APPLICABLE REGULATIONS:

DIN 18299 General regulations for any sort of construction work

The following regulations can be read weekdays from 0700 to 1600 hrs. in the Design Section (CEPM), Bldg. 119, Room 215, on Spangdahlem AB.

(1) Traffic Regulations

(AFI 31-204 IAW SAB 13-201 and Supplements) latest edition.

(2) Base Fire Protection Regulations (SABR 92-1) latest edition.

(3) Security Regulations (AFI 207-1 and Supplements) latest edition.

4) Accident prevention codes of the construction trade.

All AF accident prevention regulations and AF fire protection and AFOSH standards.

BASE ENTRY PASSES:

Due to the location of the construction site, contractor personnel shall have a pass/ID issued by the security forces pass/ID office and the facility manager of the respective area. All employees that fall under the contractor will need base access and shall be submitted to the construction manager at the preconstruction meeting at least 4 weeks prior to work start.

Regarding the pass request the following is to be observed:

Individuals that do not possess a valid pass/ID badge and shall work on the SAB need the following documents in order to gain base entry:

- Police certificate of conduct, max. 1 month old

- Copy of identification card

- Security questionnaire (6-sheets-method)

- Request for Base Entry Identification (Form 79)

- Residency check for Employment with the United States Air

Forces in Europe (Form 19)

- Acknowledgement of SAB order

- Request for Personnel Security Action (Form 2583)

Individuals not entitled to access the SAB via pass/ID (e.g., suppliers) shall be escorted by authorized individuals. A maximum of four individuals per escort are authorized. Individuals assigned to an escort shall stay with him/her at air base entry/exit and throughout the work day.

Escorts shall be always present on base and at construction site. Any expenditure of time will not be separately reimbursed.

52 CES/CEOE 12

When passes are no longer needed, they shall be immediately returned to the pass/ID office.

Loss of a pass/ID shall be immediately reported to the same place.

Pass/ID packages shall be submitted to the construction management filled out. A complete list of all individuals participating in the construction project shall be submitted.

The contractor shall inform all employees that they may be subject to search upon entry and/or exit of the SAB when stopped by base security forces. Expenditures of time spent when searched will not be reimbursed.

WORK HOURS:

Work shall be performed during normal operating hours between 0700 and 1600. All overtime work performed after 1700 hours on week nights, on Saturdays, Sundays and/or US holidays requires approval and shall be obtained at least 48 hours in advance.

US holidays are:

1st of January 3rd Monday in January 3rd Monday in February Last Monday in May 19th of June 4th of July 1st Monday in September 2nd Monday in October 11th November 3rd Thursday in November and following Friday 25th of December

If a holiday falls on a Saturday, the previous day will be considered the holiday and if it falls on a Sunday, the following day will be considered a holiday.

Work Stoppages:

Work stoppages may occur during work due to military exercises which occur every 90 days.

Each exercise lasts three to four days. Upon direction from assigned contracting officer, the contractor will cease vehicular traffic to and from the job site and all work will stop. If possible, the contracting officer will give the contractor 72 hours’ notice prior to all military exercises.

DAMAGE TO PROPERTY OF THE US GOVERNMENT:

The contractor shall repair to original condition at their expense any damages to US Government property caused by employees. Damages to utility lines shall be repaired within 12 hours. Repairs of communication lines/cables will be performed by a qualified company at a cost to be reimbursed by the contractor.

52 CES/CEOE 13

SECURITY REGULATIONS:

Regulations by security police for entry into military areas shall be strictly adhered by all employees. Employees can only drive in the immediate construction area and on access and exit ways. Noncompliance may result in a loss of on base privileges and result in being escorted off SAB by the security police. All instructions given by military police shall be immediately complied with and contractor is responsible for all personnel employed by him.

CONSTRUCTION SITE AND ACCESS ROADS:

The construction site and storage for materials shall be coordinated with Construction Management. The construction site and storage areas shall be kept in an orderly matter and tidied up at the end of each shift. The contractor may only use specific roads identified for hauling material and equipment to and from the job site. If for any reason, materials should spill on the roads and/or surrounding area, contractor shall immediately clean up the affected area.

MATERIAL AND WORK QUALITY:

All work described in specifications shall include delivery and installation necessary to bring to full operation. Therefore, terms which are self-explanatory such as deliver, mount, wire and make ready for operation are omitted as much as possible. All items given with a brand name, make and model within this SOW cannot be substituted. With these brands existing systems get extended in part or those parts are required for maintenance and training needs. Replacements or a substitute require prior approval by the GOV construction office.

SPECIAL CONDITIONS FOR CONSTRUCTION SITE:

Water and electricity are available to the contractor at no additional cost. If needed, the contractor shall coordinate the required connections in cooperation with the responsible SAB offices through the Construction Management office. Backflow preventers shall be used for all water connections on SAB.

The US Government cannot be held liable for damages caused and/or work stoppages due to power and water outages.

Interruptions of the power supply shall be limited to what is unavoidable and shall be announced to Construction Management at the latest 72 hours in advance.

52 CES/CEOE 14

Attachments

Attachment 2 - SOW - Schematic of IDS.pdf Attachment 3 - SOW - Floorplan - Schematics Wells Niederkail.pdf Attachment 4 - SOW - Floorplan - Schematics Water Treatment Plant Grosslittgen.pdf