IBDSS_IDIQ - RFP - Attachment 1 - SOW - Amendment 0005.pdf

Statement of Work For

United States European Command Integrated Base Defense Security

Systems

15 November 2021

Page 2 of 42 FA564121R0006 / Amendment 0005 Attachment 1 Statement of Work (SOW)

Contents

1.0 PURPOSE

2.0 APPLICABLE DOCUMENTS (AND DEFINITIONS)

3.0 PERFORMANCE REQUIREMENTS

4.0 SECTION 508 ACCESSIBILITY STANDARDS

5.0 CONTRACT ADMINISTRATION

6.0 QUALITY

7.0 DOCUMENTATION AND DELIVERABLES

8.0 SECURITY

9.0 CONTRACTOR FACILITIES

10.0 CONTRACTOR ACQUIRED PROPERTY (CAP)

11.0 SAFETY ISSUES

12.0 TRAVEL

13.0 ACCEPTANCE PLAN

Page 3 of 42 FA564121R0006 / Amendment 0005

1.0 PURPOSE

1.1 BACKGROUND

The United States Air Force (USAF) Installation Mission Support Center (IMSC) Detachment 4 (Det 4), in response to initiatives promulgated by the United States Air Force Europe (USAFE), requires engineering development, design, procurement, fabrication, configuration, integration, installation, modernization, and logistics solutions for electronic security and emergency management deliverable products. These deliverable products will support the operational requirements of the United States European Command (USEUCOM) where electronic security and emergency management are of high or vital interest. This SOW provides the general guidelines and specific requirements to design, develop, and deliver electronic security and emergency management deliverable products that protect our Nation's critical infrastructure, personnel, assets, and resources in the United States European Command (USEUCOM) Area of Responsibility (AOR).

1.2 SCOPE

The purpose of this contract is to provide streamlined delivery of electronic security and emergency management deliverable products in the USEUCOM AOR. Ordering activities outside of USAFE may utilize this contract, provided USAF IMSC Det 4 approves such use and sufficient contract ceiling is available for the work contemplated. The scope of this contract covers the entire spectrum of outcomes associated with the full lifecycle of delivery and support of electronic security and emergency management deliverable product capabilities. This SOW covers requirements as it relates to electronic security and emergency management deliverable product experience with specific Commercial Off The Shelf (COTS) solutions and variations of project environments that range in risk and complexity based on size and other factors. Support under this SOW includes supply requirements such as material, shipping, travel, project/program/engineering management, installation, and other technical support associated with the development and delivery of electronic security and emergency management deliverable products.

The Government does not guarantee Technical Expert Status Accreditation (TESA) approval of individuals proposed by the contractor and retroactive TESA approval will not be provided by the Government for any work contemplated by this SOW.

See Section 3.2.5 for additional information regarding TESA.

2.0 APPLICABLE DOCUMENTS (AND DEFINITIONS)

All work shall be accomplished using the best commercial practices and current acceptable industry standards. The applicable references and standards invoked will vary within individual projects and will be specifically called-out in each DO. In Accordance With (IAW) Defense Acquisition Policy changes, maximum utilization of non-Government standards will be made wherever practical. Where backward compatibility with existing systems is required, selected interoperability standards will be invoked by the Government Technical Point of Contact (TPOC). The following documents are not exclusive; however, the contractor shall meet those cited when applicable to the DO. The Contractor may request applicable documents from the Government TPOC or Contracting Officer (CO).

Page 4 of 42 FA564121R0006 / Amendment 0005

2.1 REQUIRED DOCUMENTS

The following instructional documents are mandatory for use. Unless otherwise specified, the document’s effective date of issue is the date on the request for proposal. Additional applicable documents may be included in specific DOs. The required documents are not limited to the outlined list below, and the contractor is subject to any applicable required documentation inadvertently not included in the list. In addition, the contractor is required to use the most current version of the documents, or in case document becomes obsolete, the replacement document, based on future updates.

Document Number Title a.

DoDM 5200.01 Volume I Department of Defense (DoD) Manual - Information

Security Program: Overview, Classification and Declassification, dtd 01 Jan 21

b. DoD 5220.22-M DoD Manual – National Industrial Security Program Operating Manual (NISPOM), dtd 18 May 16

c. DoDI 5220.22 Change 2 DoD Instruction – National Industrial Security Program, dtd 24 Sep 20

d. DoD 5200.2-R A DoD Regulation – Personnel Security Program, dtd Jan 87

e. DoDD 5205.02E Change 2 DoD Directive – DoD Operations Security (OPSEC) Program, dtd 20 Aug 20

f. DoD 5205.02-M Change 2 DoD Manual – Operations Security (OPSEC) Program Manual, dtd 20 Aug 20

g. DoDI 6055.17 DoD Instruction – DoD Emergency Management (EM) Program, dtd 03 Oct 19

h. DoDI 6055.06 DoD Instruction – DoD Fire and Emergency Services (F&ES) Program, dtd 03 Oct 19

i. DoDI 8500.01 Change 1 DoD Instruction – Cybersecurity, dtd 7 Oct 19

j. DoDI 8510.01

DoD Instruction – Risk Management Framework (RMF) for DoDEA Information Technology (IT), dtd 29 Oct 19

k. DoDD 8570.01 DoD Directive – Information Assurance Training, Certification, and Workforce Management, dtd 15 Aug 04

l. DoD 8570.01-M Change 4

DoD Manual - Information Assurance Workforce Improvement Program, dtd 11 Oct 15

m. ICD 705 Sensitive Compartmented Information Facilities, dtd 26 May 10

n. IC Tech Spec‐for ICD/ICS 705 V1.5

Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities, dtd 13 Mar 20

o. ICS 705-1 Physical and Technical Security Standards for Sensitive Compartmented Information Facilities, dtd 17 Sep 10

p. ICS 705-2 Standards for the Accreditation and Reciprocal Use of Sensitive Compartmented Information Facilities, dtd 22 Dec 16

q. NIST SP 800-Series National Institute of Standards and Technology Special Publications 800 Series – Computer Security Policies, Procedures, and Guidelines

Page 5 of 42 FA564121R0006 / Amendment 0005 r.

CNSSAM TEMPEST/1-13

Addendum 1

RED/BLACK Installation Guidance, dtd Feb 00

s. Invoice Shipment Guidance DD FORM 1149, latest version

t. N/A DD Form 1423

u. N/A DD Form 254

v. N/A System Authorization Access Request (SAAR) form

w. Security Agreement DD Form 441, Facility Clearance (per DCSA

Guidance)

x. UFC 4-021-02 Electronic Security Systems, dtd 11 Sep 19

y. UFC 4-010-05 Sensitive Compartmented Information Facilities

Planning, Design, and Construction, dtd 01 Oct 13

z. AFI 31-101 Air Force Instruction, Integrated Defense, dtd 16 Sep

aa. ESE-SIT-0001 Standardized Electronic Security Equipment Siting and Design Guidance for Permanent Installations – Force Protection Systems, dtd 21 Feb 18

ab. ESE-TP-0023 Electronic Security Equipment (ESE) Master Installation Acceptance Test and Turnover Plan, dtd 26 May 20

ac. N/A Non-Nuclear Configuration Management Database Equipment Approval, dtd 13 May 21

ad. N/A Configuration Management Database Equipment Approval for Security in Nuclear Areas, dtd 13 May

2.2 GUIDANCE DOCUMENTS

The following documents are to be used as guidance. Unless otherwise specified, the document’s effective date of issue is the date on the request for proposal. Additional applicable documents may be included in specific DOs. The guidance documents are not limited to the outlined list below, and are subject to any applicable guidance documentation inadvertently not included on the list. In addition, the contractor is required to use the most current version of the documents, or in case document becomes obsolete, the replacement document, based on future updates.

a. MIL-HDBK-61A Configuration Management Guidance, dtd 07 Feb 01

b. MIL-STD-130N Change

DoD Standard Practice – Identification Marking of US Military Property dtd 17 Dec 07

c. MIL-STD-881D Work Breakdown Structures for Defense Materiel Items, dtd 09 Apr 18

d. MIL-STD-1916 DoD Test Method Standard – DoD Preferred Methods for Acceptance Of Product

e. MIL-STD-129 P Change

DoD Standard Practice – Military Marking For Shipment and Storage, dtd 19 Dec 07

f. N/A Occupational Safety and Health Act (OSHA) Standard 29 CFR 1910 (general) and 1926 (shore)

g. DoDI 2000.12 Change 3 DoD Instruction – DoD Antiterrorism Program, dtd 08 May 17

Page 6 of 42 FA564121R0006 / Amendment 0005

h. DoDI 3020.41 11th

Edition DoD Instruction – Operational Contract Support (OCS), dtd 31 Aug 18

i. DoDI 3020.52 Change 1 DoD Instruction – DoD Installation Chemical, Biological, Radiological, Nuclear, and High-Yield Explosive (CBRNE) Preparedness Standards, dtd 22 May 2017

j. DoDI 4161.02 Change 2 DoD Instruction – Accountability and Management of Government Contract Property, dtd 31 Aug 18

k. DoDD 5000.01 DoD Directive – The Defense Acquisition System, dtd 09 Sept 20

l. DoDI 5000.02 DoD Instruction – Operation of the Adaptive Acquisition Framework, dtd 23 Jan 20.

m. DoDI 5000.56 01 DoD Instruction – Programming Geospatial- Intelligence (GEOINT), Geospatial Information and Services (GI&S), and Geodesy Requirements for Developing Systems, dtd 26 Aug 20

n. DoDI 8100.3 DoD Instruction – DoD Voice Networks, dtd 16 Jan

o. DoDI 8100.04 DoD Instruction – DoD Unified Capabilities (UC), dtd 9 Dec 10

p. DoDI 8130.01 Change 3 DoD Instruction – Installation Geospatial Information and Services (IGI&S), dtd 4 Aug 20

q. DoDI 8530.01 Change 1 DoD Instruction – Cybersecurity Activities Support to DoD Information Network Operations, dtd 25 Jul 17

r. NENA 02-010 Version 9 Standard Formats & Protocols for Automatic Location Information (ALI) Data Exchange, ALI Response & Geographic Information System (GIS) Mapping, dtd 12 Aug 18

s. NENA 02-014 Version 1 GIS Data Collection & Maintenance, dtd 17 Jul 07

t. NENA 08-502 NENA Generic E9-1-1 Requirements Technical

Document, dtd 23 Jul 04

u. NENA 71-001 Version 1 NENA Standard for NG9-1-1 (Additional Data), dtd

17 Sept 09Next Generation 9-1-1 (NG9-1-1) Additional Data, dtd 17 Sep 09

v. NENA 71-501 Version 1.1

NENA Information Document for Synchronizing Geographic Information System Databases with MSAG & ALI”, dtd 08 Sep 09

w. NENA-STA-004.1-2014 NENA Next Generation 9-1-1 United States Civic Location Data Exchange Format (CLDXF), dtd 23 Mar 14

x. NENA-INF-014.1-2015 Development of Site/Structure Address Point GIS Data for 9-1-1, dtd 18 Sep 15

y. UFC 3-580-01 Change 1 Telecommunications Interior Infrastructure Planning and Design, dtd 01 Jun 16

z. UFC 4-101-03 Security Engineering: Physical Security Measures for High Risk Personnel, dtd 08 Feb 11

aa. UFC 4-010-01 Change 1 DoD Minimum Antiterrorism Standards for Buildings, dtd 12 Dec 18

ab. UFC 4-010-05 Change 1 Sensitive Compartmented Information Facilities Planning, Design, and Construction, dtd 01 Oct 13

Page 7 of 42 FA564121R0006 / Amendment 0005

ac. UFC 4-020-01 DoD Security Engineering Facilities Planning

Manual, dtd 11 Sep 08

ad. UFC 4-020-02FA Security Engineering: Concept Design (CUI), dtd 01

Mar 05

ae. UFC 4-020-03FA Security Engineering: Final Design (CUI), dtd 01 Mar

af. UFC 4-021-01 Change 1 Design and O&M: Mass Notification Systems, dtd 09

Apr 08

ag. UFC 4-021-02 Change 1 Electronic Security Systems, dtd 01 Oct 13

ah. UFC 4-022-01(Updated) Security Engineering: Entry Control Facilities/Access

Control Points, dtd 27 July 17

ai. UFC 4-024-01 Security Engineering: Procedures for Designing

Airborne, Chemical, Biological, And Radiological Protection for Buildings, dtd 10 Jun 08

aj. UFC 4-025-01 Security Engineering: Waterfront Security, dtd 01 Nov 12

ak. UFC 3-550-0 Change 3 Exterior Electrical Power Distribution, dtd 01 Nov 19

al. National Fire Protection

Association (NFPA) 70 National Electric Code

am. NFPA 72-(latest version) National Fire Alarm and Signaling Code

an. NFPA 101-(latest version) The Life Safety Code

ao. ISO 9001 (ANSI/ASQ Q9001) (latest version)

International Organization for Standardization (American National Standard Institute/American Society for Quality) – Quality Management Systems, Requirements

ap. ISO/IEC 12207 (latest version)

International Organization for Standardization/ International Electrotechnical Commission: Systems and Software Engineering – Software Life Cycle Processes

aq. ISO/IEC 15288 (latest version)

International Organization for Standardization/ International Electrotechnical Commission: Systems and Software Engineering – System Life Cycle Processes

ar. IEEE Std 12207-2008 (latest version)

International Standard Systems and Software Engineering – Software Lifecycle Processes

as. IEEE Standard 142-2007 IEEE Recommended Practice for Grounding of Industrial and Commercial Power Systems

at. MIL-HDBK-419A-V-182 Grounding, Bonding, and Shielding for Electronic Equipment and Facilities, dtd 29 Dec 87

au. MIL-STD-1472G i DoD Design Criteria Standard, Human Engineering, dtd 17 Jan 19

av. MIL-STD-188-124B (Notice 4)

Military Standard: Grounding, Bonding and Shielding For Common Long Haul/Tactical Communication Systems Including Ground Based Communications- Electronics Facilities and Equipments

aw. 28 CFR Part 36 Nondiscrimination on the Basis of Disability by Public Accommodations in Commercial Facilities published, 26 Jul 91

Page 8 of 42 FA564121R0006 / Amendment 0005

ax. ANSI/EIA-748A

Revision E America National Standards Institute/Electronic Industries Alliance Standard – Earned Value Management (EVM) Systems

ay. HSPD-12 Homeland Security Presidential Directive – Policy for a Common Identification Standard for Federal Employees and Contractors, dtd 27 Aug 04

az. DoDM-1000.13-M-V1 DoD Manual – DoD Identification (ID) Cards: ID Card Life-Cycle, dtd 23 Jan 14

ba. FIPS PUB 201-2 Federal Information Processing Standards Publication -– Personal Identity Verification (PIV) of Federal Employees and Contractors, dtd Aug 13

bb. Form I-9, OMB No. 115-

US Department of Justice, Immigration and Naturalization Services Form – Employment Eligibility Verification

bc. N/A National Institute of Standards and Technology (NIST), Framework for Improving Critical Infrastructure Cybersecurity. Version 1.1, dtd 16 Apr

bd. NIST Special Publication 800-53 Revision 5

Security and Privacy Controls for Federal Information Systems and Organizations, dtd 10 Dec 20

be. DODM 5205.07 Vol 4 Special Access Program (SAP) Security Manual:

Marking, dtd 08 Sep 20

bf. AFI 16-1404, AFMC Supplement

Air Force Instruction – Air Force Information Security Program, dtd 04 Aug 20

bg. DoD Manual 5100.76 Change 2

Physical Security of Sensitive Conventional Arms, Ammunition, and Explosives (AA&E), dtd 17 Apr 12

bh. ANSI/TIA/EIA Standard 568-B

Commercial Building Telecommunications Cabling Standard

bi. ANSI/TIA-606-B Administration Standard for Commercial Telecommunications Infrastructure

bj. ASTM Standards (latest edition)

Copper Conductors for Electrical Power and Electronic Hook-up Wiring

bk. NEMA 250-2020 Enclosures for Electrical Equipment (1,000 Volts Maximum)

bl. W-C586 Conduit Outlet Boxes, Bodies, and Entrance Caps, Electrical: Cast Metal

bm. EIA 310-D Cabinets, Racks, Panels, and Associated Equipment

bn. DoD 5200.08-R Physical Security Program, dtd 02 Jan 19

bo. DoDI 5100.76 Change 2 Safeguarding Sensitive Conventional Arms, Ammunition, and Explosives (AA&E), dtd 05 Oct 20

bp. N/A Under Secretary of Defense Memo Radio Frequency

Identification (RFID), 30 Jul 04

bq. N/A Air Force Manual (AFMAN) 33-105

br. N/A Defense Acquisition Desk Book, dtd 22 Sep 20

bs. N/A ASD-NII/DOD-CIO Memorandum, “Encryption of

Sensitive Unclassified Data-at-Rest on Mobile Computing Devices and Removable Storage Media, dtd 3 Jul 07

bt. N/A FIPS 140-2

Page 9 of 42 FA564121R0006 / Amendment 0005

bu. N/A The Privacy Act of 1974

bv. N/A AER 27-715 Contractor Identification

bw. AF 530-1 AF 530-1

bx. N/A National Institute for Occupational Safety and Health

(NIOSH) Criteria Document for Confined Spaces

by. DoDI 5200.48 Controlled Unclassified Information, dtd 6 Mar 2020

bz. DoDM 5200.01, Vol 3 Information Security Program, Protection of

Classified Information, dtd 23 Dec 20

ca. AFI 31-101, Volume 2 Physical Security of Sensitive Conventional Arms, Ammunition, & Explosives, dtd 20 Feb 20

2.3 SOURCE OF DOCUMENTS

The contractor shall obtain all applicable documents. Many documents are available from online sources.

All commercial and industrial documents can be obtained through the respective organization’s website.

3.0 PERFORMANCE REQUIREMENTS

The following sections list anticipated support requirements throughout the contract life. The contractor shall provide electronic security and emergency management deliverable products required by individual DOs pursuant to the general requirements specified herein. All activities performed as part of this contract shall be performed IAW best commercial practices and Government standards and regulations, as described herein and within each DO. Each DO will define the user requirements, equipment, supplies, technical specifications, personnel requirements, travel, engineering, Information Assurance (IA), project/program management, logistics, and any other requirements/support for completion of electronic security and emergency management deliverable products for in the USEUCOM AOR.

3.1. TECHNICAL CAPABILITIES

The contractor shall require capabilities with typical electronic security or emergency management deliverable products, vendors, and related certifications necessary to perform work under this SOW as specified below. DOs placed under this contract may require one (1) or more of the deliverable products listed in this section. This is not an all-inclusive list and does not limit the scope of this contract with regards to electronic security and emergency management deliverable products, Chemical, Biological, Radiological, Nuclear, and Explosive (CBRNE), security and surveillance-type deliverable products.

3.1.1 Electronic Security and Emergency Management Equipment

The contactor shall provide functional and technical capabilities supporting of a wide range of access control, intrusion detection, video management, Physical Security Information Management (PSIM), and any other equipment and software associated with electronic security and emergency management deliverable products found on the U.S. Air Force Configuration Management Database equipment list. The Configuration Management Database (CMD) may be revised/updated by the U.S.

Air Force and is subject to change. These may include, but are not limited to:

a. AMAG Intrusion Detection, Access Control, and Video Management Solutions

b. LenelS2 Intrusion Detection, Access Control, and Video Management Solutions

Page 10 of 42 FA564121R0006 / Amendment 0005

c. Software House Intrusion Detection, Access Control, and Video Management Solutions

d. Honeywell Vindicator Intrusion Detection, Access Control, and Video Management Solutions

e. Monitor Dynamics Intrusion Detection, Access Control, and Video Management Solutions

f. American Dynamics Cameras, Encoders/Decoders, Controllers, Recorders, and Video

Management Solutions

g. DMP Intrusion Detection Solutions

h. Advantor Systems Access Control and IDS

i. Hirsch Identiv Access Control Solutions

j. Fiber SenSys, Inc. Security Intrusion Detection Solutions

k. Future Fiber Technologies Perimeter Intrusion Detection Solutions

l. Southwest Microwave Intrepid Perimeter Security Solutions

m. Axis Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

n. Bosch Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

o. Pelco Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

p. Verint Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

q. Genetec Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management

Solutions

r. Chameleon Closed Circuit Television (CCTV) Solutions

s. FLIR Thermal Cameras, Radar Solutions, and Cameleon Tactical Perimeter Intrusion Detection

t. Milestone System xProtect CCTV Cameras, Controllers, Recorders, and Video Management

System

u. Tactical Automated Security Systems

v. Proximex Physical Security Information Management Solutions

w. Security Information Systems Physical Security Information Management Solutions

x. Sensors and Command-Control solutions providing protection against chemical, biological, radiological, nuclear, and explosive threats.

y. Sensors and Command-Control solutions providing perimeter protection and early warning notification to respond to human and other physical threats in complex and challenging environments.

z. Eaton Cooper Notification Mass Notification Solutions (MNS)

aa. Federal Signal Mass Notification Solutions

ab. Northrop Grumman Command Point Computer Aided Dispatch (CAD)

ac. Enhanced 911 (E911) communication solutions

ad. Monaco Fire and Security Alarm Systems and Mass Notification System

ae. Whelen Mass Notification System

af. Regional Alarm Monitoring Automated Systems

ag. Local Alarm Monitoring Automated Systems

ah. Geographic Information System (GIS)

ai. Management Information System (MIS)

aj. Records Management System (RMS)

ak. Athoc Interactive Warning System

al. CAD solutions

am. Enhanced 9-1-1 (E9-1-1)/Next Generation 9-1-1 (NG9-1-1) Customer Premise Equipment

(CPE) call management solutions

3.1.2 CBRNE Equipment

The contactor shall have the ability to provide functional and technical expertise to respond to an evolving base of sensors being deployed for protection against CBRNE threats. A sample representative list of Original Equipment Manufacturers (OEMs) of CBRNE sensors and command-control solutions used to support USAFE in the USEUCOM AOR is provided below (subject to revision), based on USAFE’s anticipated/future CBRNE requirements in the USEUCOM AOR:

Page 11 of 42 FA564121R0006 / Amendment 0005

a. ENSCO Inc. (Sentry Software, sensor fusion and decision support software development and support)

b. Liedos (Development and service capabilities for the Radiation Portal Monitors)

c. Mesh Inc (Software and sensor development)

d. KD Analytical (AirGard sensor)

e. FLIR

f. Canberra

g. Smith Detection

h. S3I (Sensor development)

i. Sage Defense

3.1.3 Equipment Certification

The contractor shall provide experienced personnel certified as integrators, partners, value added resellers, or personnel with similar certifications for COTS OEM security solutions as applicable to individual DOs for equipment listed below (subject to revision) based on anticipated/future IDS requirements in the USEUCOM AOR. The contractor shall use the systems below to develop the IDP at the 30%, 60%, 90%, and 100% levels.

a. Honeywell Vindicator Intrusion Detection, Access Control, and CCTV Solutions

b. LenelS2 Intrusion Detection, Access Control, and Video Management Solutions

c. Prometheus VICADS CCTV and Video Management Solutions

d. Southwest Microwave Perimeter Intrusion Detection Solutions

e. Senstar Perimeter Intrusion Detection Solutions

f. Software House Intrusion Detection, Access Control, and Video Management Solutions

g. AMAG Intrusion Detection, Access Control, and Video Management Solutions

h. Monitor Dynamics Intrusion Detection and Access Control Solutions

i. American Dynamics Cameras, Encoders/Decoders, Controllers, Recorders, and Video

Management Solutions

j. Axis Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

k. Bosch Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

l. Pelco Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

m. Verint Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

n. Genetec Cameras, Encoders/Decoders, Controllers, Recorders, and Video Management Solutions

o. Proximex Physical Security Information Management Solutions

p. DMP Intrusion Detection Solutions

q. Eaton Cooper Notification Mass Notification Solutions

r. Federal Signal Mass Notification Solutions

s. Milestone Systems CCTV Recorders and Video Management Solutions

t. Security Information Systems Physical Security Information Management Solutions

u. AMX video systems (e.g., video decoders, wall mount touch panels, NETLINX controllers, etc.).

3.1.4 Information Assurance

The contractor shall provide DoD Risk Management Framework (RMF) artifacts for certification and accreditation of installed equipment for IA compliance of electronic security and emergency management deliverable products:

a. IA Management Support Tasks

b. IA RMF Execution

c. Development of the Certification and Accreditation Plan

d. Implementation of Applicable Security Technical Implementation Guides (STIGs)

e. IA tools: Enterprise Mission Assurance Support Service (eMASS), Marine Corps Certification and Accreditation Support Tool (MCCAST), Assured Compliance Assessment Solution

Page 12 of 42 FA564121R0006 / Amendment 0005

(ACAS), Security Content Automation Protocol (SCAP), Security Readiness Review (SRR) scripts, etc.

f. IA Collaboration

e. IA Testing and Validation

f. IA Execution: Vulnerability Remediation Asset Manager (VRAM), IAVMS (IA Vulnerability

Management System), etc.

3.2 DELIVERABLE PRODUCT ENVIRONMENT

DOs awarded under this contract may require support in one (1) or more of the complex environments listed below. This is a minimum list of unique environments and other conditions that adds to depth and complexity of product implementation. Additional environments can be introduced at the DO level. The contractor shall provide resources with relevant knowledge and experience applicable to the following environments:

3.2.1 Information Assurance

The contractor shall support the development of artifacts (plans, schedules, diagrams, and other related artifacts), performing IA scans, configuring systems, and providing support to satisfy DoD Risk Management Framework (RMF) certification and accreditation requirements. The contractor shall provide support designing, delivering, integrating, and supporting electronic security and emergency management deliverable products to meet or exceed all applicable network and interoperability certifications, security policies and accreditations as delineated in the specific DO. In some instances, the contractor shall be required to provide similar support for legacy electronic security and emergency management deliverable products accredited under the DoD IA Certification and Accreditation Program (DIACAP).

3.2.2 SCI Facilities

The contractor shall provide support designing, delivering, securing, integrating, and supporting systems/solutions for Sensitive Compartmented Information Facilities (SCIF) environments as applicable at the DO level IAW Intelligence Community Directive (ICD) 705, Intelligence Community (IC) Tech Spec‐for ICD/ICS 705, IC Standard Number 705-1, and IC Standard Number 705-2, CNSSAM TEMPEST/1-13 (latest edition).

3.2.3 Special Access Programs/Special Access Areas

The contractor shall provide support designing, delivering, integrating, and supporting electronic security and emergency management deliverable products for special access program spaces or special access areas as applicable at the DO level IAW Intelligence Community Directive (ICD) 705, Intelligence Community (IC) Tech Spec‐for ICD/ICS 705, IC Standard Number 705-1, and IC Standard Number 705-2, CNSSAM TEMPEST/1-13 (latest edition).

3.2.4 OCONUS-Logistics

The contractor shall provide support for electronic security and emergency management deliverable products in the USEUCOM AOR. The contractor shall support the development of artifacts (plans, schedules, packages, etc.) as necessary to provide Secure and Classified systems overseas. This includes Construction Security Plans, Logistics Security Plans, Secure Shipment and Decertification, and Secure Storage Area operations.

3.2.5 OCONUS Resource Management

The contractor is responsible for providing a technically capable workforce who meets contract personnel qualifications and any/all agreements, registrations, VISAs, Foreign Clearance Guide (FCG), Status of Forces Agreement (SOFA) status/Technical Expert Status Accreditation (TESA) (e.g., Germany) for work performed in the USEUCOM AOR as determined at the DO level.

Page 13 of 42 FA564121R0006 / Amendment 0005

The contractor shall adhere to each country’s (e.g., Germany, Italy, Belgium, Greece, United Kingdom (UK), Netherlands, Spain, Portugal, Kosovo, Turkey, Romania, etc.) specifications regarding deployment of personnel and work performance with regards to applicable SOFA, TESA accreditation, or local national approval (as required). The Government does not guarantee that contractor personnel will receive SOFA accreditation/TESA or any other in-country approval technical status accreditation in any of the countries previously noted and/or listed in Section 12.1.

3.2.6 Virtualized IT Infrastructure

The contractor shall provide support executing electronic security and emergency management deliverable product design, install, configuration, and testing products in a virtualized environment.

The contractor shall implement, based on End User Information Technology (IT) infrastructure, multiple components of systems in a virtual environment rather than stand-alone systems.

3.2.7 High Risk Applications

The contractor shall provide support executing electronic security and emergency management deliverable product design, material procurement, installation, configuration, testing, and other emergent support requirements for the protection of USAFE/Government facilities, missions, assets, and personnel that are determined to be a high risk target for terrorist or criminal activity based on their grade, mission, symbolic value, criticality, or a threat and vulnerability assessment. The contractor shall be prepared to operate in an environment where a quick and effective response to a variety of threats and incidents is required.

3.2.8 Resource Escalation

The contractor shall provide scalable and surge support for designing, delivering, installing, integrating, and supporting associated electronic security and emergency management deliverable products that include resource challenges based on variations in program/project size, schedule, site conditions and number of locations, and requirement variations for single systems distributed across multiple locations throughout the USEUCOM AOR. The periods for escalated support may be short in duration to respond to specific electronic security and emergency management deliverable product requirements or extended over a period of time to respond to broader threats in the USEUCOM AOR.

3.3 DELIVERABLE PRODUCTS

This contract considers the life cycle of any given system and its relationship with other systems, with the objective of obtaining supplies and incidental support services for deliverable products at the DO level. This system of systems approach will integrate functional and operational activities in the most technically proficient and cost-effective manner. These electronic security and emergency management deliverable products include primarily commercial systems as referenced in Section 3.1, but will also include modified commercial systems and military specification systems as required by the DO. The contractor shall ensure electronic security and emergency management deliverable products and all necessary actions for implementation to meet environmental requirements for transportation, storage, and operation at USEUCOM wide locations.

The contractor shall provide, as required under each DO, turn-key deliverable products to meet end-user needs. The contractor shall provide electronic security and emergency management deliverable products IAW the performance characteristics, interoperability, and interfaces as specified at the DO level. The contractor shall implement and maintain a Quality Control (QC) system for electronic security and emergency management deliverable products identified (but not limited to) in Section

3.1. The work to be performed requires the contractor to have a broad technical understanding of electronic security and emergency management deliverable products to provide turn-key supply solutions.

Page 14 of 42 FA564121R0006 / Amendment 0005

3.3.1 Supplies

The following sections describe and are representative, though not all encompassing, of the electronic security and emergency management deliverable products the contractor shall be required to deliver or support in a DO awarded under this contract:

a. Intrusion Detection Deliverable Products

b. Access Control Deliverable Products

c. Video Surveillance Deliverable Products

d. Physical Security Information Management Deliverable Products

e. CBRNE Deliverable Products

f. CAD Deliverable Products

g. E9-1-1/NG 9-1-1 CPE Deliverable Products

h. Mass Notification Systems (MNS) Deliverable Products

3.3.1.1 Intrusion Detection Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and train site personnel for intrusion detection and emergency management efforts in the USEUCOM AOR. This may include an expansion, upgrade, or replacement of the existing product, or the provision of a new intrusion detection/electronic security system.

3.3.1.2 Access Control Systems (ACS) Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and train site personnel for access control efforts in the USEUCOM AOR. This may include an expansion, upgrade, or replacement of the existing product, or the provision of a new access control.

3.3.1.3 Video Surveillance / CCTV Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and train site personnel for video surveillance/CCTV efforts in the USEUCOM AOR. This may include an expansion, upgrade, or replacement of the existing capability, or the provision of a new video surveillance/CCTV deliverable product.

3.3.1.4 Physical Security Information Management (PSIM) Deliverable Products When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, deliver, integrate, install, test, and train PSIM deliverable products in the USEUCOM AOR.

This may include an expansion, upgrade, or replacement of the existing product, or the provision of a new PSIM deliverable product.

3.3.1.5 CBRNE Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, deliver, integrate, install, test, and train CBRNE efforts in the USEUCOM AOR. This may include an expansion, upgrade, or replacement of an existing CBRNE, or the provision of a new CBRNE deliverable product.

3.3.1.6 CAD Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and provide computer aided dispatch (CAD) support in the USECOM AOR. This may include an expansion, upgrade, or replacement of the existing product, or the provision of a new CAD deliverable product.

Page 15 of 42 FA564121R0006 / Amendment 0005

3.3.1.7 E9-1-1/NG9-1-1 Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and train E9-1-1/NG9-1-1 efforts in the USEUCOM AOR.

This may include an expansion or upgrade, replacement of an existing E9-11/NG9-1-1, or a new E9- 1-1/NG9-1-1 deliverable product.

3.3.1.8 Mass Notification Deliverable Products

When required at the DO level, the contractor shall survey, analyze, design, develop, procure, fabricate, integrate, deliver, install, test, and train Mass Notification efforts in the USEUCOM AOR.

This may include an expansion, upgrade, or replacement of the existing product, or the provision of a new Mass Notification deliverable product.

3.3.2 Equipment and Material Support

As specified at the DO level, the contractor shall provide various equipment and material support that ranges from procurement to fabrication, integration and delivery.

The contractor shall adhere to all procurement requirements as directed on a DO basis. Requirements derived from policies (security, location, threat, etc.) could limit or increase required steps and approvals for procurement, handling, shipping, and receiving.

The contractor shall be responsible for material logistical aspects (crating, agricultural inspection, insurance, customs (if applicable), inspection, secure shipment practices, shipping, etc.) of all contractor acquired property (CAP), contractor furnished equipment (CFE), and contractor furnished material (CFM) required at the DO level for delivery of electronic security and emergency management deliverable products in the USEUCOM AOR.

3.3.2.1 Equipment/Material Procurement

The contractor shall procure items specified as CAP (e.g., CFE and CFM) at the DO level. Unless otherwise noted, all items procured by the contractor shall be stored at the contractor’s facilities and integrated into a system or transported by the contractor as directed in each DO. As specified by the Government TPOC, the contractor shall be responsible for generating inventory as part of the Material Inspection and Receiving Report/Inventory Tracking at the DO level. Deliverable documentation shall vary and be specified in each DO, if applicable.

The contractor shall procure items that conform to applicable product validation, identification, and tracking requirements. All procured equipment must be Trade Agreements Act (TAA) compliant, if applicable).

(a) Product Validation – The contractor shall certify that it purchases supplies from authorized resellers and/or distributers. Unless otherwise specified, the contractor shall warrant that the products are new, in their original box. The contractor shall obtain all manufacturer products submitted at the DO level from authentic manufacturers or through legal distribution channels only, IAW all applicable laws and policies at the time of purchase. The contractor shall provide the Government with a copy of the end user license agreement, and shall warrant that all manufacturer software is licensed originally to Government as the original licensee authorized to use the manufacturer software. The contractor shall track the licensing information and have it available for Government review as needed.

(b) Cybersecurity/Computer Security Requirements – The contractor shall ensure that all products recommended and/or procured that impact cybersecurity or IA shall be selected from the National Information Assurance Program (NIAP) Validated Products List. The contractor shall ensure the products chosen are based on the appropriate evaluated assurance level for the network

Page 16 of 42 FA564121R0006 / Amendment 0005 involved, and utilized IAW latest Defense Information Systems Agency (DISA) policy at the DO Level. The contractor shall store all product information at the contractor’s facility and have it available for Government review as needed.

(c) Radio Frequency Identification (RFID) – IAW Under Secretary of Defense Memo Radio Frequency Identification (RFID), July 30, 2004, the contractor shall mark applicable items with RFID (as required).

A list of equipment and material anticipated (i.e., not all inclusive) for electronic security and emergency management deliverable product support as part of this SOW is provided as Appendix A, Configuration Management Database (CMD).

The contractor shall ensure that all equipment (excluding misc. materials, etc.) procured to support DOs under this SOW shall be in compliance with the aforementioned CMD for electronic security and emergency management deliverable products as cited in Sections 3.1 and 3.2.

3.3.2.2 Property/Inventory Tracking

The contractor shall create and maintain internal records of all CAP at the DO level. The contractor shall record each item delivered and/or ordered in a Material Inspection and Receiving Report/Inventory Tracking Report. At a minimum, the report shall track the following information:

item description, order date, serial number, model number, lot number, delivery location, and the manufacturer warranty period and expiration date, if applicable. The contractor shall have inventory report information available for Government review as needed, and the contractor shall ensure the report information has the ability to be sorted and manipulated by any of the input fields. Separate from the Government tracking system, the information in the contractor’s records is a backup to the Government records; therefore, the Government shall own all data rights to the collected information.

3.3.2.3 Contractor Furnished On-site Storage Space

The contractor shall comply with the installation site security documents, such as a construction security plan or logistics security plan, where applicable. For equipment and material to be stored at the installation site and not contemplated by 3.3.2, the contractor shall provide a secure space, lease a secure commercial space, and/or request and be authorized Government space that meets storage requirements at the DO level.

3.3.2.4 Warranty Tracking of Serialized Items

The contractor shall submit Electronic Warranty Tracking and Administration Information for Serialized Items at the DO level. The contractor shall follow the requirements for any serialized item manufactured or acquired that comes with a warranty.

3.3.2.4.1 For Government specified warranty terms, the Government will complete certain fields on the WTI form (Appendix B) and Warranty Source of Repair Instructions (WSRI) form (Appendix C) and electronically forwarded them to the contractor. The contractor shall complete the remaining sections of the WTI and WSRI and forward the forms to the Government TPOC at time of delivery of the warranted serialized item(s).

3.3.2.4.2 For contractor/vendor specified warranty terms, the contractor shall complete all data elements for both the WTI and WSRI (Appendices B and C) and shall forward the forms electronically to the Government TPOC no later than the date of warranted serialized items are presented for receipt and/or acceptance.

3.3.2.4.3 For receipt and acceptance of items, the contractor shall comply with the following requirements:

Page 17 of 42 FA564121R0006 / Amendment 0005

(a) If the WTI and WSRI are submitted manually (as a PDF file), the contractor shall forward documents to the Government TPOC for review. As required, the contractor shall forward approved documents to Government personnel responsible for posting the forms to electronic data access

(EDA).

(b) If utilizing WAWF, the contractor shall ensure that the required warranty data is electronically submitted using the exhibit line item number (ELIN) functionality for the Material Inspection and Receiving Report. If problems occur submitting warranty data electronically, the contractor shall submit the WTI and WSRI manually (as a PDF file) with the Government TPOC concurrence. The contractor shall forward documents to Government TPOC for review and when approved, the Government will post forms to Electronic Data Access (EDA).

3.3.2.4.4 For material management, the contractor shall make an inventory of all excess material and provide this inventory to the Government TPOC at the completion of the DO. This material shall be identified as ready for issue, repairable, or disposable.

3.3.2.5 Warranty Management

In support of warranty management for serial managed items not necessarily purchased as CAP or CFP, the contractor shall ensure the appropriate WTI and WSRI are current and uploaded to the WAWF Materiel Inspection and Receiving Report (or WAWF Receiving Report), as appropriate. As a backup to online warranty database, the contractor shall internally track items by DO and serial numbers, and shall update the information monthly to identify the time left on the original warranty.

The contractor shall provide the Government TPOC a copy of the warranty information in an inventory tracking report, to include on all warranty and non-warranty actions taken during the preceding month.

3.3.2.6 Equipment / Systems Fabrication and Assembly

(a) The contractor shall fabricate electronic/electrical and mechanical assemblies, chassis, deployable equipment rooms, equipment, and systems support platforms using drawings and reports specified at the DO level and provide all required material. The contractor and the Government TPOC shall test (if applicable) and/or perform QC inspections at the places of performance specified in the DO to ensure proper operation and reliability prior to shipment to the site for installation.

(b) The contractor shall use fabricated assemblies and units to verify the accuracy of the installation design plan (IDP), standards and/or guidance design drawings. The contractor shall apply lessons learned and conclusions in future design improvements and standards.

3.3.3 Other Requirements

3.3.3.1 Program Management (PM)

As required at the DO level, the contractor shall provide PM support to ensure adherence to all technical requirements of the required electronic security and/or emergency management systems.

3.3.3.1.1 Program Support

Some programs shall require a contractor to work closely with the Government program manager and/or the Government TPOC to support the needs of the program. As directed in DOs, coordinating meetings, developing agenda items, attending high-level meetings, generating minutes, and tracking action items shall be required.

Page 18 of 42 FA564121R0006 / Amendment 0005

3.3.3.1.2 Program Support Documentation

The contractor shall develop and draft PM Reports. At a minimum, the contractor shall provide the following typical PM Reports and documents:

(a) Economic Analyses, Comparative Cost Analyses, and Cost Estimation

(b) Meeting Agenda and Minutes

(c) Work Breakdown Structure (WBS)

(d) Staff Studies, Point Papers, Information White Papers, project/program/risk management plans, action briefs etc.

3.3.3.1.3 Plan of Objectives and Milestones (POA&M)

The contractor shall develop and update the POA&M at the DO level that addresses major milestones and overall detailed schedule for the DO. In the POA&M, the contractor shall identify performance schedule for all deliverable products including adequate response/cycle timelines (as dictated by DO) for Government responses and actions.

3.3.3.1.4 General Documentation/Technical Reports

The contractor shall provide the following reporting and deliverable requirements specified in individual DOs. The contractor shall submit these deliverables as General Documentation/Technical Reports. The contractor shall maintain the General Documentation/Technical Reports throughout the period of performance of each DO. Examples include, but are not limited to, the following:

(a) Project Status Reports

(b) Technical Proposal

(c) Bill of Materials

(d) Engineering and Design review artifacts including:

i.Systems Engineering Plan ii.Project Management Plans, Configuration Management Plans, Risk Management Plans, and Staffing Plans iii.Project Requirements Documents iv.System Requirement Documents v.Preliminary Design Review vi.Critical Design Review

(e) IA Documents

(f) Issues/Risks

(g) Investigation/Studies/Analysis

(h) Site Surveys, PSA, IDPs (Preliminary 30%, 60%, 90%, 100%, As-Builts, etc.)

(i) Cutover and Transition Plan

(j) Test plans, evaluation plans, test reports, evaluation, and lessons learned

(k) Pre-installation test and checkout

(l) Associated training materials/development

(m) System operation and verification test

(n) Project Support Agreement

3.3.3.1.5 Issues and Risks

The contractor shall capture, quantify, and report to the Government TPOC as required at the DO level in the General Documentation/Technical Reports any potential issue or risk that impacts cost, quality, schedule, or requirements of the DO.

Where risks or issues are realized and project cost, quality, schedule, or requirements are impacted, the contractor shall provide detailed recommendations to the Government TPOC on how to correct and restore project variables to original intent/threshold.

Page 19 of 42 FA564121R0006 / Amendment 0005

3.3.3.2 System Engineering Support

3.3.3.2.1 Analysis, Planning and Preparation

The contractor shall analyze and translate data into qualitative and quantitative technical requirements and architectures to allow for planning and project start-up at the DO level. This includes site surveys and analysis, identification of requirements, statement of existing systems/equipment/technologies, considerations and comparisons of candidate solutions, recommendations, scheduling, implementation schedule, WBS, logistics support, and projected cost of the deliverable end item. The contractor shall generate project management planning documents that will become the basis for further project management.

3.3.3.2.2 The contractor shall investigate and provide detailed analysis and/or studies as part of the General Documentation/Technical Reports to evaluate equipment or system components with regard to operational, standardization, and logistics considerations and make recommendations for improvement.

3.3.3.2.3 As part of delivery of electronic security and emergency management deliverable products cited in Sections 3.1 and 3.2, and IAW individual DOs, the contractor shall integrate new equipment technologies into existing system architectures as specified at the DO level. The contractor shall apply a systems engineering approach to ensure that mission objectives and system criteria requirements are fulfilled. Emphasis shall be on the demonstration of clear and measurable improvements in the performance, logistics supportability, reliability, and maintainability of the item.

3.3.3.3 Modeling & Simulation

The contractor shall apply a standardized, rigorous, structured methodology to create and validate a physical, mathematical, or otherwise logical representation of a system entity,…