NEW PWS_Advanced Programs-OMN-Security System Maintenance. Rev 1.pdf

PERFORMANCE WORK STATEMENT

Performance Work Statement

For

Advanced Programs-OMN-Security System Maintenance

1. Scope

This Performance Work Statement (PWS) establishes the contractor tasks for the service, repair, preventative maintenance, and semi-annual test inspections of the Access Control System (ACS) which includes a badging system (computer/printer/camera), and the Intrusion Detection System (IDS) located at NAWCTSD Room 2033 at 12211 Science Dr Orlando, FL 32826. Requirements in this document are specified using “shall”.

1.1 Background

NAWCTSD Room 2033 incorporates an ACS and IDS in specialized areas. The current IDS security system requires semi-annual test inspections, and the ACS workstation requires periodic patching and may require repair in the event of a system malfunction.

2. Applicable Documents

The documents listed below form a part of this PWS to the extent specified herein. In the event of a conflict between documents referenced herein and the contents of this PWS, the contents of this PWS take precedence. Nothing in PWS, however, supersedes applicable laws and regulations, unless a specific exemption has been obtained.

ICS 705-1 Intelligence Community Standard (ICS) 705-1, Physical and

Technical Security Standards for Sensitive Compartmented Information

Facilities, dated 17 September 2010

Link to reference: https://fas.org/irp/dni/icd/ics-705-1.pdf

IC Tech Spec ver. 1.4 Technical Specifications for Construction and Management of

Sensitive Compartmented Information Facilities, dated 28 Sep 2017

Link to reference: https://www.dni.gov/files/NCSC/documents/Regulations/Technical-Specifications-SCIF-

Construction.pdf

3. Period of Performance

This PWS shall cover a base period of performance of one (1) year from the contract award date with four (4) consecutive one-year OPTIONS to award as necessary.

4. Top Level Requirements

a. The contractor shall comply with ICS 705-1 and IC Tech Spec version 1.4 for security system maintenance and testing.

b. The contractor shall provide 24 hours a day, 365 days a year, phone support and is able to initiate repairs/establish priority within 4 hours of a trouble signal or a request for service.

c. The contractor shall ensure services conducted under this contract are performed by

U.S. citizens.

http://www.dni.gov/files/NCSC/documents/Regulations/Technical-Specifications-SCIF-Construction.pdf

d. The contractor shall be a UL 2050 certified company.

e. The contractor shall provide documentation for inspections within 30 days of completion CDRL

A001.

f. The Contractor shall provide a real-time occupancy monitoring capability integrated with the installed badge access control system. The system shall display the name and current location of personnel within designated controlled areas based on badge reader transactions. The display shall update automatically as personnel enter or exit monitored areas and shall be accessible to authorized

Government personnel.

g. The Contractor shall install and configure an additional card reader at the main facility entrance to support egress authentication. The system shall enforce an "anti-passback" security feature, preventing an access card from being used for entry multiple times without an intervening exit. This installation must also support the real-time occupancy monitoring requirements as specified in paragraph 4f.

4.1 Maintenance Requirements

The maintenance for the NAWCTSD Room 2033 shall include all components of the ACS to include the badging system (computer/printer/camera/badge readers) and IDS.

a. The Contractor shall ensure service requests classified as “emergency” resolved within 24 hours.

An emergency request involves any failure or malfunction that severely degrades the physical security of NAWCTSD Room 2033, prevents authorized access, or leaves the space vulnerable to undetected intrusion.

• Total System Failure: Complete failure of the Access Control System (ACS) or Intrusion Detection System (IDS).

• Loss of Monitoring/Annunciation: The system fails to transmit alarm signals to the monitoring station, or the real-time occupancy monitoring system

(mandated in 4.f) goes completely offline.

• Total Lockout: Authorized personnel are completely locked out of the facility due to a server failure, database crash, or critical failure of the Honeywell

ProWatch software.

• Power Supply Critical Failure: Loss of primary power to the security panel coupled with a dead or failing Uninterruptible Power Supply (UPS) battery.

• Anti-Pass back Failure: The mandatory egress authentication/anti-pass back feature (mandated in 4.g) fails, creating a high-risk access vulnerability.

b. The Contractor shall ensure service requests classified as “non-emergency” resolved within 8 hours. A non-emergency request involves localized hardware malfunctions, software maintenance, or peripheral issues that do not immediately compromise the overall security perimeter or prevent the facility from operating securely.

• Single Peripheral Failure: A malfunction of a single badging component (e.g., the badge printer, a camera, or a workstation monitor) where workarounds exist and access control is not compromised.

• Isolated Reader Issue: A single internal card reader malfunctions, provided the main facility perimeter is still secure and an alternate approved entry method exists.

• Routine Software/Firmware Updates: Scheduled patching or updates to the server operating system, SQL database, .NET framework, or IDS firmware that are not resolving an active, critical zero-day vulnerability.

• Low Battery Alerts: A system warning for low batteries in wireless sensors or

UPS units that are still currently functioning but require preventative replacement.

• Minor Software Glitches: Administrative or reporting errors in the ProWatch software that do not impact the actual locking mechanisms or live alarm monitoring.

c. The Contractor shall ensure peripherals associated with the ACS system working and updated accordingly to avoid obsolesces/end of life issues. Maintenance requirements include the replacement of consumable items such as batteries, if necessary, at no additional costs to the

Government.

d. The Contractor shall conduct a comprehensive evaluation of the Access Control System (ACS) to verify that all software components are current. This evaluation shall include the Honeywell

ProWatch badging software, the server operating system, the SQL database, the .NET framework, and any other ancillary software necessary for the operation of the ACS. The

Contractor shall upgrade the Honeywell ProWatch software and all other identified software components to the latest manufacturer-supported versions as necessary, at no additional costs to the Government. Following the upgrade, the Contractor shall conduct testing and evaluation to ensure the ACS remains fully functional and meets all operational requirements.

e. The Contractor shall perform backups of the system before any Honeywell ProWatch software updates are performed.

f. The Contractor shall ensure all IDS firmware and software are current in accordance with

Original Equipment Manufacturer procedures and document in the semi-annual report.

g. The Contractor shall provide documentation for the maintenance and repairs within 10 days of completion. Documentation shall include: (a) listing what components were replaced, (b) model and serial numbers of both old and new part (c) points that were tested and associated methodology of the testing (i.e. motion sensor activate within three steps or tamper activates upon opening. etc.), (d) firmware version as applicable to the hardware, (e) UPS battery voltage and time since replacement, (f) software versions before and after upgrade, (g) name and certification of person completing the work.

h. For emergency call-outs outside standard duty hours (1630-0730), the Contractor shall contact the designated 24/7 Government Point of Contact (POC) immediately upon dispatch to facilitate gate clearance.

4.2 Semi-Annual Inspection Requirements

a. The Contractor shall perform semi-annual inspections for the NAWCTSD Room 2033 in accordance with IC Tech Spec ver.1.4 (28 Sep 2017) and include all areas/components of the

ACS and IDS. Testing must demonstrate that all installed equipment and components are performing according to system specifications and operational requirements. Testing shall consist of the following: Intrusion Test, Tamper Test, Correct Annunciation test, Correct

Assessment test, AC power loss test, Line supervision test, Sensor system self-tests, where applicable. Along with Access control and Duress buttons, where applicable.

b. The Contractor shall provide documentation of completed inspections within 30 days of event completion (CDRL A001).

c. The Contractor shall ensure inspection personnel are witnessed by NAWCTSD Government personnel.

4.3 Over and Above Work Requests

The Contractor shall submit the attached Over and Above Work Request Form for approval, as required, for replacement of broken or malfunctioning security components and implementation of security fixes to failed security inspection items.

C-TXT-SCR SERVICE CONTRACT REPORTING (JAN 2021)

Services Contract Reporting (SCR) requirements apply to this contract. The contractor shall report required SCR data fields using the SCR section of the System for Award Management (SAM) at following web address: https://sam.gov/SAM/.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://sam.gov/SAM/.”

https://sam.gov/SAM/ https://sam.gov/SAM/