g_Security Statement of Work (SOW).pdf

Attachment 0016 dated 15 May 2020

SECURITY STATEMENT OF WORK (SOW)

PHYSICAL SECURITY STANDARDS FOR DOD SECURITY RISK CATEGORY I AND II

MISSILES AND ROCKETS AND AMMUNITION AND EXPLOSIVES (A&E) AT

CONTRACTOR-OWNED, CONTRACTOR-OPERATED (COCO) FACILITIES

(from DoD 5100.76M, Appendix 2)

1. Facility Construction. This command will make a Suitability Determination of structural adequacy on production and storage facilities used by the contractor. The contractor shall store CAT I/II A&E in approved magazines secured with the Sargent & Greenleaf 833C key-operated high security padlock and NAPEC shrouded hasp.

2. Lock and key control. The contractor shall implement a control system that ensures accountability and control of storage structure locks and keys. The contractor shall maintain keys to A&E storage areas and IDS separately from other keys. He should allow only those individuals authorized access to the A&E keys. The number of keys should be held to the absolute minimum and signed for by authorized employees. When not attended or used, the contractor shall secure keys providing access to CAT I/II A&E in a Class 5 GSA-approved security container. He shall provide the same level of security to replacement or spare locks, keys and cores for A&E keys. Master keying of locks and the use of a master key system is prohibited. The contractor shall appoint a key and lock custodian in writing, who shall maintain a key control register to ensure continuous administrative accountability for the keys. He shall perform semiannual key and lock inventories. The custodian shall maintain any A&E registers, issue/turn-in records, and inventories separate from administrative keys reports and for a minimum of one year.

3. Fencing. The contractor shall fence the entire perimeter of an enclave area storing CAT I/II A&E. If the outer perimeter of the facility has adequate fencing and a closed circuit television (CCTV) monitors the entrances to the storage area, he need not construct the inner fence. The minimum height of the chain-link fence is 6 feet plus top guard.

Unless continuously manned, the contractor shall secure the gates with GSA-approved low-security padlocks. He shall bar any drainage or water passages greater than 96 square inches to prevent unauthorized access.

4. Lighting. Exterior building and door lighting shall be provided for all structures storing CAT I/II A&E. The lighting shall be of sufficient intensity to allow detection of unauthorized activity. Switches for exterior lights shall be installed in such a manner that they are accessible only to authorized individuals.

5. Access controls. The contractor shall ensure that vehicular and pedestrian entry into and exit from the production and storage areas is controlled. Privately owned vehicles shall not be parked within 100 feet of storage and production buildings.

6. Intrusion Detection System. All CAT I/II A&E storage structures shall be protected by a UL-approved IDS to include point sensors on doors and other openings, and motion or vibration sensors in the interior. If IDS is absent or inoperable, the contractor needs to provide constant surveillance. An approved IDS will have a UL certificate showing that Underwriters Laboratories, Inc. lists the system and installer, and that the IDS meets the following UL codes: UL-681, UL-827, UL-1076, and UL-2050. The contractor shall have an UL-approved installer install the IDS. Each separately alarmed area will have a UL antonino.spinella Text Box Distribution Statement A. Approved for public release; distribution is unlimited.

certificate. The contractor shall maintain daily logs of all alarms received, and maintain these logs for a minimum of 90 days for review to identify and correct IDS reliability problems. The contractor shall test the IDS monthly and maintain the test records for one year.

7. Security Force. Security patrols may consist of civilian security personnel, state or local police, or responsible contractor employees. Where a public law enforcement agency has agreed to perform this function, the contractor shall maintain a current letter of agreement to that effect from the agency. A patrol shall periodically check facilities and areas used to store A&E at least once during each 24-hour period. The contractor shall ensure that the patrols record these checks. He shall review guard procedures at least annually and revise, if necessary, to provide greater application of security measures. The contractor shall establish liaison with local civil police agencies to conduct periodic surveillance and coordinate a security plan.

8. Response Force. The contractor may use any one of the following investigative responses: Central station security force, proprietary security force, subcontract security force, law enforcement officials, or properly trained, designated employees. The UL certificate will state who the responder is and what the response time will be.

a. Response time to an activated alarm signal should not exceed 15 minutes from the time the alarm first registers. The contractor shall make arrangements with the responding law enforcement agency to contact the contractor's representative who shall go immediately to the facility to ascertain the nature of the alarm and take appropriate measures to ensure the security of A&E items.

b. Security forces dispatched by an alarm monitoring station to an alarm shall remain on the premises until the contractor's representative arrives, or for a period of not less than 1 hour, whichever comes first. If the contractor's representative fails to arrive within 1 hour, the alarm monitoring station shall report the incident to the contractor within 24 hours.

9. Additional Security Measures. During periods when the production line is unattended, the contractor shall remove sensitive A&E to approved storage areas or protect the production line. If used as overnight or temporary storage, the production building must meet the storage criteria construction requirements cited in 1.a.

10. Accountability. The contractor shall have an accountability system for both sensitive A&E components and end items produced under a DOD contract, or furnished or released to a contractor by the DOD. The contractor shall provide the government with a written description of his accountability procedures. He shall review accountability records and conduct quarterly inventories for bulk storage.

11. Security Procedures. The contractor shall develop written security procedures designed to ensure security standards in keeping with this security SOW. The contractor shall keep these procedures available at his facility for review by government representatives.

12. Transportation. The contractor shall transport sensitive A&E as prescribed in the contract. The contractor shall ensure that internal movement (movement on a contractor’s facility) of CAT I and II AA&E includes the ability to communicate with security and safety personnel.

13. Security Surveys and Inspections. To ensure that a prospective contractor will satisfy physical security requirements of this security SOW, government security personnel (usually Defense Security Service (DSS)) will perform a preaward security survey. The DSS office will perform security inspections at recurring 18-month intervals during the period of the contract to ensure compliance with this security SOW.

14. Exceptions/Waivers. The contractor shall submit written requests for exceptions/waivers to the security requirements of this security SOW to the Government PCO, coordinating with DSS and AMSFS-FP (Force Protection, G-2). The PCO shall forward such requests to AMSFS-FP, who will either endorse the request up to Department of Army (DA) for decision, or request further information from the contractor.

DA normally grants waivers for a period of 1 year and may extend only after review of the contractor's request for extension. They grant exceptions on a more permanent basis.

Requests for exceptions/waivers shall include a statement as to why the contractor cannot meet requirements and outline compensatory measures proposed by the contractor to provide equivalent or better protection than the original standard. The request for waiver shall also provide details of an upgrade project design to correct waived deficiencies, as well as the expected date of project completion. The AMSOS-SC office will furnish copies of approved exceptions/waivers to the applicable DSS office.

15. Significant Incidents Pertaining to A&E. The contractor shall report all losses and thefts of sensitive A&E as soon as discovered to local law enforcement agencies. The contractor shall notify the following no later than 72 hours after initial discovery: BATF, FBI, CCRC-AC-CC, AMSJM-FP and DSS. The contractor shall report all losses and thefts;

any armed robbery or attempted armed robbery; forced entry or attempted forced entry with physical evidence of the attempt; evidence of terrorist involvement; or illegal trafficking in sensitive A&E.