Attachment 2 SOW FA8501-23-Q-0008 REV.pdf

Attachment #1 Date: 08 February 2023

Updated 19 April 2023

STATEMENT OF WORK (SOW)

1. Headquarters Air Force Reserve Command (HQ AFRC) at B556, Robins Air Force Base, Georgia, requires installation of three Access Control Systems (ACS), three Intrusion Detection

Systems (IDS), and three Closed Circuit Television (CCTV) monitoring systems for three areas.

The ability to properly store critical assets in accordance with Intelligence Community Directive

(ICD) 705 requires these new systems to be operational prior to facility accreditation. Each facility requires an IDS and ACS independent of each other and independent from the building as a whole. The CCTV systems will be independent as well but with one shared camera. All equipment will be installed within the confines of Building 555 South located on Robins AFB, physical address 555 Robins Parkway, Robins AFB, GA 31098. The IDS, ACS, and CCTV will be installed in Building 556 in three areas on the second floor, connected by a shared corridor

(room 269 in diagrams). The areas will be protected by multiple security components inclusive of but not limited to balanced magnetic switches, card reader access system, premise control unit, access control panel, security system control panel, electronic door lock(s), door position switch, passive infrared devices, duress buttons, etc. The IDS will be a networked with the existing network/alarm system operating within the 78 SFS Base Defense Operations Center

(BDOC), located on Robins AFB. System/Product/Components must conform to the latest standards of the following prescribed guidance: ICD/ICS 705 Version 1.4 (“Technical

Specifications for Construction and Management of Sensitive Compartmented Information

Facilities”), UL 2050 (“National Industrial Security Systems for the Protection of Classified

Material”), UFC 4-021-02 (“Electronic Security Systems”), Non-Nuclear Configuration

Management Database (CMD) Equipment Approval, and Air Force Instruction/AFI 31-401

(“Department of the Air Force Information Security Program”).

2. The contractor will coordinate a site survey with the customer prior to ordering equipment to document locations of existing conduit, boxes and raceway installed by others for this system.

The contractor will design, estimate, procure and install all needed system hardware, cabling, accessories, and all programming to install this IDS within Building 556 based on schematics provided by the customer. Any required modifications to existing building infrastructure will be coordinated through the customer and the Facility Owner. Only components from the current

Air Force Non-Nuclear Intrusion Detection System Approval memo will be utilized.

3. The contractor will provide all labor, equipment, tools, materials, supplies and supervision to include all consumable items, transportation and other items and services necessary to provide and install the following:

3.1. SCOPE: The contractor will perform the following services for the installation in a phased in process.

3.1.1. Intrusion Detection Components:

3.1.1.1. Install hardware at all existing device rough-in boxes (wall and ceiling) and conduit provided by others. Equipment will include at a minimum:

3.1.1.1.1. Type II High Security Switches (HSS) on doors to the A2, A3RZ, and A3NN areas as well as the emergency exit for the A2 area.

3.1.1.1.2. Motion sensors covering the same doors.

3.1.1.1.3. Glass break sensors in the A2 and A3RZ areas.

3.1.1.1.4. Premise Control Units and battery backups with 24 hours capacity.

3.1.1.2. Contractor will utilize existing security system roughed in conduit with pull strings and device boxes and install new IDS devices, where applicable to make a complete and usable IDS. Existing wiring may be used for power and communications. Communications lines will be tied directly to the base alarm system.

3.1.1.3. Contractor will leave in place all current rough in conduit and device box(es) components identified as unnecessary in a manner to not damage existing materials or systems within Building 556.

3.1.1.4. Contractor will replace existing interior finishes damaged during

IDS install to match existing.

3.1.1.5. System cabling entering & exiting the secure areas will be routed in existing rigid conduit installed by others to greatest extent possible. Any new material required to provide a complete and usable IDS system will be coordinated with Contracting Officer.

3.1.1.6. To the extent possible, all telecommunication cabling within the secure areas will be in existing conduit from the existing outlet box provided by others for the IDS contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per

ICD-705.

3.1.1.7. The system will include battery backup lasting no less than twenty-four (24) hours.

3.1.1.8. Coordinate all programming of the system and map of the area(s) with 78 SFS.

3.1.1.9. Provide an applicable drawing(s) that indicates all designated alarm points that will be programmed into the base alarm system; this will be reviewed by 78 SFS during material submittals.

3.1.1.10. Provide a complete list of alarm devices to 78 SFS which will be reviewed during the material submittals.

3.1.1.11. Contractor will coordinate with 78 SFS for alarm point numbers for programming after installation is complete; this will also be provided to 78

SFS as a hard copy and electronic copy.

3.1.1.12. After alarm system installation but before alarm system programming, 78 SFS will conduct an inspection of the installed parts.

3.1.1.13. Each alarm device will have its own alarm point.

3.1.1.14. The contractor will warranty support for parts and labor for a period of one year. The contractor will provide on site support within 24 hours of customer request.

3.1.2. Access Control Components

3.1.2.1. Install hardware at all existing device rough-in boxes (wall and ceiling) and conduit provided by others. Hardware will include at a minimum:

3.1.2.1.1. Radio Frequency Identification (RFID) card reader with integrated Personal Identification Number (PIN) pad.

3.1.2.1.2. Control station to associate cards with the ACS in each secure area (A2, A3RZ, A3NN).

3.1.2.1.3. Badge printer in the A2 secure area.

3.1.2.2. Contractor will utilize existing roughed in conduit with pull strings and device boxes and install new ACS devices, where applicable to make a complete and usable ACS. Existing wiring may be used for power.

Communications wiring will not be integrated into any existing network cabling and will not extend beyond the perimeter of the secure areas.

3.1.2.3. Contractor will leave in place all current rough in conduit and

3.1.2.4. Contractor will replace existing interior finishes damaged during

ACS install to match existing.

3.1.2.5. System cabling entering & exiting the secure areas will be routed new material required to provide a complete and usable ACS will be

3.1.2.6. To the extent possible, all telecommunication cabling within the by others for the contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per ICD-705.

3.1.2.7. Additional equipment will include a single RFID card printer for issuing cards to assigned personnel.

3.1.3. Closed Circuit Television Components:

3.1.3.1. Install hardware at all existing device rough-in boxes (ceiling) and conduit provided by others. Hardware will include:

3.1.3.1.1. Cameras outside each door (A2, A2 emergency exit, A3RZ, A3NN, and Entrance to the Corridor (room 269).

3.1.3.1.2. Monitoring stations in each secure area that will display the cameras covering their respective entrances as well as the room 269 camera. Stations will not have recording capabilities.

3.1.3.2. Contractor will utilize existing roughed in conduit with pull strings and device boxes and install new CCTV devices, where applicable to make a complete and usable CCTV system. Existing wiring may be used for power.

Communications wiring will not be integrated into any existing network cabling and will not extend beyond the perimeter of the secure areas.

3.1.3.3. Contractor will leave in place all current rough in conduit and

3.1.3.4. Contractor will replace existing interior finishes damaged during

CCTV install to match existing.

3.1.3.5. System cabling entering & exiting the secure areas will be routed new material required to provide a complete and usable CCTV will be

3.1.3.6. To the extent possible, all telecommunication cabling within the by others for the contractor. Contractor to utilize existing pullstring provided for new cabling. Contractor to terminate all new system cabling per ICD-705.

3.1.3.7. Each CCTV system will be independent of the others and will monitor the door outside the individual facility where it is installed. The only exception is the camera monitoring the outer man-trap door, which will be monitored by all three systems.

3.2. TIME FRAME: The installation of the above systems shall take no more than 90 days from the start of physical installation.

4. All data transmission lines will be protected with a National Institute of Standards and

Testing (NIST) certified Advanced Encryption Standard (AES) encryption. Units must keep the certification on file for the life cycle of the system. NOTE: Current systems as of the publication date of the current AFI 31-101, Integrated Defense, will be grandfathered: however any upgrades or newly installed systems will meet with AO approval.

4.1. The contractor will coordinate with the 78 SFS on the installation of mounted alarm boxes and fiber cables/copper pairs prior to installation, or when within 80 percent of completion to ensure correct placement of equipment.

5. TRAINING: Contractor will provide up to six (6) hours of training to designated HQ AFRC

Staff and Controlled Area Monitors on the operation of the IDS, ACS, and CCTV system (e.g.

how to activate, reset, test, add users, etc.)

6. DOCUMENTATION: Contractor will provide three (3) compact disk(s) (CD) with electronic As-Built Drawing(s) (PDF and AutoCAD) following the completion of all work to the end users and the 78 SFS and provide those as part of the final Performance Verification Test

(PVT).

7. SAFETY: The contractor will provide all safety gear to include, hard hats, eye protection, ear/sound protection, and any other safety equipment required for safe working conditions while meeting all applicable safety codes / requirements. The contractor is also responsible for proper safety around the work area. The contractor will visit the site with the contracting officer or designated representative to document existing conditions to ensure any unsafe conditions are corrected prior to start of work.

8. SYSTEM CHECK: The Contractor will complete a system check to include but not limited to ensuring all installed components are functioning to manufacturer specifications, certified test requirements, Phase I, Phase II, and Phase II.

8.1. Certification Test Requirements. The Security Forces Administrator will conduct functional and operational certification tests of the ACS/IDS to ensure the system meets effectiveness standards and compliance requirements. Note: This test and certification process must be accomplished before ACS/IDS is deemed operational. The testing and certification will occur in three (3) phases.

8.2. Phase I: The contractor will perform a Contractor Verification Test (CVT) will occur upon ACS/IDS installation at each facility or groups of facilities. The contractor, HQ

AFRC/A2S representative, and the 78 SFS representative will witness this test. The test will be performed IAW the written testing procedures provided in the Installation Design Package

(IDP). Any component found to be inoperative during the test or at any time during the installation period will be brought to the attention of the Security Forces POC. Acceptance testing will consist of the following: intrusion tests, tamper tests, annunciation test, assessment test, AC power loss test, line supervision test, sensor system self-tests, and access control.

8.3. Phase II Testing: Phase II testing is a 72-hour continuous test that ensures all equipment is installed properly and works according to specifications. It will establish initial expectations in regard to false and nuisance alarm. The AFTO 747, Communications and

Information Systems Acceptance Certificate, transferring the system will be signed after successful completion of this test phase. AFTO 747 is used to signify the completion of the project and acceptance of the installed system by the user. The completion of this form means the system has been tested and accepted as installed, and all noted exceptions will be corrected by the responsible party to the satisfaction of AFRC/A2S and 78 SFS. The decision to accept the successful completion of the test phase is a commander-level decision and should be completed by the appropriate commander.

8.4. Phase III Testing: Phase III testing is a 30-day continuous operational test to assess how well the system performs in its normal operating mode on a permanent basis. This test is to detect any premature or latent defects in the equipment or components and to allow the operators and maintainers an opportunity to assess the adequacy of logistics support, and assess the false and nuisance alarm rates of the system. After successful completion of this test phase, the using organization will request MAJCOM certification.

8.5. Phase II and III Testing will be completed by the government.

9. SECURITY AND PRIVACY: This applies to all contractor personnel including delivery drivers requiring access to Robins AFB. Personnel will be required to divulge Privacy Act information as required to meet Air Force security requirements.

9.1. Base Entry Requirements. The contractor will obtain base identification and any required vehicle passes for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. The contractor will, within three

(3) working days after receiving award, submit a written request on company letterhead to the contracting officer listing the following: contract number, location of work site, start and stop dates, hours of required access, and names of employees and subcontractor employees requiring installation access. The letter must include the employee name, date of birth, Real-

ID driver license (or state issued ID or passport) number, and State of Issuance for the purpose of background vetting. The Contracting Officer (CO) or Contracting Officer

Representative (COR) will endorse the request and submit to Security Forces for processing.

For all contracts, the CO or COR will forward the request to the 78sfs.sf.pass_reg@us.af.mil org box. Submission of late, inaccurate or incomplete information could delay issuance of access credentials. During performance of the contract, the contractor will be responsible for obtaining required identification for newly assigned personnel and for prompt return of credentials to the CO or COR, for any employee who no longer requires access to the work site. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor will ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

9.2. Contractor Consent to Background Checks: The contractor and, as applicable, subcontractor will not employ persons for work on this contract, if such employee is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population, nor will the contractor or Subcontractor employ persons under this contract who have an outstanding criminal warrant as identified through the National Crime Information Center. Checks will verify if a person is wanted by local, state, and federal agencies. All contractor and subcontractor personnel must consent to background checks. Contractor and subcontractor personnel who do not consent to a check will be denied access to the installation. Information required to conduct a check includes:

full name, driver’s license number, state of issue, and date of birth of the person entering the installation, and completion of a background check questionnaire. The contractor will provide this information to the 78 CONS on company letterhead.

9.3. Contractors will ensure their employees and those of their subcontracts are U.S.

citizens. Persons later found to be undocumented or illegal aliens will be remanded to the proper authorities. The contractor will not be entitled to any compensation for delays or expenses associated with complying with the provisions of this clause. Furthermore, nothing in this clause will excuse the contractor from proceeding with the contract as required.

9.4. Contractor Registration of Vehicles on Robins AFB: All contractor or contractor employees’ vehicles used for the performance of this contract will comply with all local, state and federal regulations. Additionally any pass will be surrendered to Security Forces upon demand to positively identify a persons need to be on Robins AFB.

9.5. Entry Requirements for Controlled or Restricted Areas. In the event where the work will take place within an Air Force Controlled or Restricted Area (i.e. airfield, aircraft parking areas, classified areas, armories, pharmacies etc.), access into the area will be denied unless contractor employees, to include sub-contractors, are identified on an approved Entry

Authority List (EAL). The contractor is responsible for providing the names, date of birth, driver’s license number and state of issue for each employee to the CO or COR, at least 30 days prior to the first day of performance. The request must also include the Contract

Number, the specific location of the Controlled/Restricted area where work will be accomplished, and inclusive dates required for contract performance. All requests for

Installation Access Credentials must be on Company letterhead. The CO or COR will in turn provide the information to Security Forces Installation Security Section, for processing. The submission of employee information for EAL purposes is a separate requirement from the submission of information for Installation Access Passes and must be on separate letters.

9.6. Property Protection: Property protection for facility where the contractors’ primary work center is located will be the responsibility of the local facility manager and local

Government Site Security Manager, or their duly authorized representative IAW AFI 31-101, Integrated Defense and command/local directives. The contractor will safeguard all government-owned equipment and materials in his/her possession or use. Additionally, the

Contractor is to adhere to providing a system capable of safeguarding classified information

IAW Chapter 2 of the IC Tech Spec-for ICD/ICS 705, via close coordination with the assigned Government Site Security Manager (SSM), who is responsible to conduct risk management using an Analytical Risk Management Process. The SSM then provides the definable features of work/salient features of work to the contractor’s specification writer.

9.7. ICS 705-1 and IC Tech Spec-for ICD/ICS 705 (Chapters 7 & 8 - provide the minimum and enhanced security requirements).

9.8. Safeguarding Classified or Unclassified Information: The contractor will not handle any classified material. Additionally, all resources (e.g. maps, publication/instructions, photos) provided by the government to assist the contractor in the performance of their contract will be surrendered upon termination of employment or the end of the contract performance period.

9.9. Privacy Act: Work on this project requires that personnel have access to Privacy

Information. Personnel will adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

Acronyms:

1. 78 SFS: 78 Security Forces Squadron

2. AFI: Air Force Instruction

3. BMS: Balanced Magnetic Switch

4. ESS: Electronic Security System

5. IAW: In Accordance with

6. MAJCOM: Major Command

7. SOW: Statement of Work

8. UL: Underwriters Laboratories

References:

1. AFMAN 31-101, Integrated Defense

2. AFTO 747, Communications and Information Systems Acceptance Certificate

(https://static.e-publishing.af.mil/production/1/afto/form/afto747/aft0747.pdf)

3. Non-Nuclear Configuration Management Database (CMD) Equipment Approval

4. IC Tech Spec-for ICD/ICS 705 “Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities v1.5.1.

(https://www.dni.gov/files/NCSC/documents/Regulations/IC_Technical_Specifications_for_

Construction_and_Management_of_Sensitive_Compartmented_Information_Facilities_v151

_PDF.pdf)

5. NFPA 70, National Electrical Code

6. UFC 4-010-05, Sensitive Compartmented Information Facilities Planning, Design, and

Construction, Change 1, 2013; Section 3-5.13

(https://www.wbdg.org/FFC/DOD/UFC//ufc_4_010_05_2013_c1.pdf)

7. Department of Defense Manual 5105.21 V2, Sensitive Compartmented Information (SCI)

Administrative Security Manual: Administration of Physical Security, Visitor Control, and

Technical Security

(https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/510521m_vol2.PDF?v er=TSoaZ1O6GcVD8tMjhTy52g%3d%3d) https://static.e-publishing.af.mil/production/1/afto/form/afto747/aft0747.pdf https://www.dni.gov/files/NCSC/documents/Regulations/IC_Technical_Specifications_for_Construction_and_Management_of_Sensitive_Compartmented_Information_Facilities_v151_PDF.pdf https://www.dni.gov/files/NCSC/documents/Regulations/IC_Technical_Specifications_for_Construction_and_Management_of_Sensitive_Compartmented_Information_Facilities_v151_PDF.pdf https://www.dni.gov/files/NCSC/documents/Regulations/IC_Technical_Specifications_for_Construction_and_Management_of_Sensitive_Compartmented_Information_Facilities_v151_PDF.pdf https://www.wbdg.org/FFC/DOD/UFC/ufc_4_010_05_2013_c1.pdf https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/510521m_vol2.PDF?ver=TSoaZ1O6GcVD8tMjhTy52g%3d%3d https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/510521m_vol2.PDF?ver=TSoaZ1O6GcVD8tMjhTy52g%3d%3d