1 SOW B28 GC Summary 12 5 2023.pdf

Statement of Work – December 5, 2023

Building 28 (B28) High Containment Continuity Laboratory (HCCL) Project

CDC Project Number 20160718

Summary of Services to be Provided: The General Contractor (GC) shall manage and perform the construction of the facility. Included with the construction effort, the GC shall provide management and inspection services, bonds, warranties, guarantees, quality control, safety review/inspections, test and inspections, security and logistic control, record documents, manuals, facilities maintenance training, health and safety plan, CPM schedules, submittal review and coordination, construction administration services, commissioning, furnish tools, materials, equipment, labor and incidentals, coordinate all construction related work, develop required coordination drawings, construction administration services, commissioning, and other related professional services.

Site Location: The B28, HCCL building will be constructed on the CDC Roybal Campus at 1600 Clifton Road, Atlanta, GA 30333 at the existing location of the Building 16 Parking Deck.

Project Description (Note: Project Design Documents – complete plans, consisting of over 800 drawings, and specifications, consisting of over 2600 pages, have been completed via CDC Contract Number 75D301-19-C- 06664). The following is a summary narrative:

1. Summary – Building 28 (B28) is planned as a 175,000 square foot five-story building with a partial Sub- Sub-Sub-Basement (SSSB) floor and a mezzanine above the Mechanical 1 (M1) level. The HCCL facility has an expressed and solely dedicated purpose of providing high containment research and diagnostic space to supplement Building 18 (B18) and other CDC science programs. Due to the uniqueness of this arrangement of program space, B28 only includes bio-safety level (BSL) 3E and BSL-4 high containment laboratories; the remainder of spaces are engineering and material support areas. Each floor of B28 serves a unique purpose, with the majority of the floors providing lab support functions. All levels, from SSSB to mechanical level, will be served by two service elevators. Front and back doors allow for some separation of people and clean and dirty services. The egress stairs on both the east and west sides of the building can also be used for internal circulation. There are two levels that include elevated slabs:

the M1 (Mechanical) level has a mezzanine (M2), and the Engineering, Maintenance and Operations Services Office (EMOSO) suite is on an elevated portion of the Sub-Sub-Basement (SSB) level referred to as SSBE.

2. SSSB Level (Utility Entry) - SSSB Level (Utility Entry) includes a direct tunnel connection to B18 that serves as the primary staff, material and supplies entry to B28. This level also provides the primary campus low voltage, chilled water, steam and condensate return utility entry via the campus utility tunnel. The Fire Pump Room is located at this level off of a 2-hour fire-resistance-rated passageway directly accessible to the exterior by a protected path through the west egress stair.

3. SSB Level (HCCL Support) - SSB Level (HCCL Support) includes the second direct tunnel connection to B18 and serves as the primary animal transfer to and from B18’s vivarium. This floor also includes a third tunnel connection to Building 23’s B2 level vivarium. Other program areas included on the B28 SSB level include lab support functional areas that support the HCCL floor, such as the emergency generator room, main electrical and UPS rooms, entry low voltage rooms, incoming potable water room, gamma cell room, incinerator room, effluent treatment suite, and B28’s support office suite for EMOSO on an elevated portion of the slab. This floor level has direct site access along the west side of the building and provides at grade access for periodic large equipment removal. The floor slabs of this level are designed to withstand the movement of various heavy pieces of equipment such as generators and incinerator components, transformers, and the gamma cell. This floor is also designed for a future secure building entry.

4. Sub-Basement (SB) Level Effluent Discharge System (EDS) Piping - SB Level (EDS Piping) does not include any connections to adjacent buildings. Connections are not possible at the floor level due to the perimeter service drive that requires adequate vertical clearances to accommodate emergency vehicle access. This floor is dedicated to housing the effluent decontamination piping from the HCL floor located immediately above. This floor will provide an unobstructed inspection space for the EDS piping.

Miscellaneous storage rooms and caged storage areas are provided along the perimeter; these storage areas will not be located directly below the HCL effluent piping.

5. Basement (B) Level (HCCL) - B Level (HCCL) is dedicated to BSL-3E and BSL-4 lab suites. B Level includes a direct bridge connection to B18’s High Containment Lab (HCL) floor to directly connect science programs located in each building. Other than miscellaneous building core spaces such as stairs, elevators, shafts, etc., and a pair of select agent holding rooms, no other program areas other than high containment are located on B level.

6. 1 Level - High Efficiency Particulate Air (HEPA) Floor - HEPA filters will be located immediately above the rooms they serve below to minimize duct runs from the bubble tight damper to the HEPA caisson. This floor will be connected to the M1 level above via two large openings in the M1 floor down the east west building axis to allow all ductwork to be distributed more easily through these large openings versus a multitude of floor penetrations.

7. M1 Level (Penthouse) - M1 Level (Penthouse) floor will house mostly engineering program spaces, such as supply and exhaust air systems, breathing air systems, chemical shower system, low pressure steam, humidification heat exchangers, etc. As noted under the HEPA level description above, this mechanical floor level is directly connected to the HEPA floor below via two large openings in the floor.

8. M2 Level (Mechanical Mezzanine) - M2 Level is a mezzanine to the M1 Level and includes a cart storage cage, additional Air Handling Units (AHU’s), and the breathing air systems.

9. Building Interior - The interior aesthetic of the building, except for the HCCL level, will embrace its industrial nature. Exposed ceilings, columns and beams, sealed concrete floors, painted walls, stainless steel railings, and wall protection is designed per CDC standards.

10. Plans and Specifications – design is complete, detailed through plans and specifications.

Site Logistics - Several crucial steps must occur before construction of the HCCL project can begin. Items required include, but are not limited to: 1) temporary construction and permanent accessible site route for the disabled; 2) temporary construction and permanent emergency responder access routes for any buildings/structures impacted by construction of the Building 28 project; 3) any utilities impacted by the Building project shall be relocated and operational; and 4) additional items discovered during preparation of the Building 28 construction documents shall be identified, and resolved (safety, security, pedestrian, vehicular, critical path sequencing, etc.). In addition, prior to the demolition of the parking deck, provisions for maintaining chilled water and natural gas services to Building 16 will have to be executed. During the demolition and construction phases of the project, code conforming egress shall be maintained from all adjacent buildings.

The CDC will continue normal operations on the Roybal Campus while construction activities are occurring.

Due to the critical mission of the Agency and the nature of the work performed at the Roybal Campus, the CDC Roybal Campus is always open, and activities occur 24 hours a day, 365 days per year. The GC shall cooperate and coordinate with the CDC, at all times, to avoid any adverse impacts on the CDC’s ability to maintain continuation of all operations.

Project Schedule – Construction and commissioning shall be duration of forty-four (44) months, commencing two weeks after Notice-to-Proceed.

Security and Privacy Language for Information and Information Technology Procurements Other IT Procurements A. Hardware Procurements

1) Card Readers. The Contractor (and/or any subcontractor) shall include Federal Information Processing Standard (FIPS) 201-compliant smart card readers (referred to as LACS Transparent Readers) with the purchase of servers, printers, desktops, and laptops.

2) Mobile Devices. The contractor shall follow NIST 800-124, Rev. 1, Guidelines for Managing the Security of Mobile Devices in the Enterprise when using mobile devices that process or store HHS data.

B. Non-Commercial and Open Source Computer Software Procurements The Contractor (and/or any subcontractor) shall follow secure coding best practice requirements, as directed by the United States Computer Emergency Readiness Team (US-CERT) specified standards and the Open Web Application Security Project (OWASP) that will limit system software vulnerability exploits.

C. Information Technology Application Design, Development, or Support

This section refers to procurements including application design, development, or support. For the purposes of this document, “Computer software” means:

a. Computer programs that comprise a series of instructions, rules, routines, or statements, regardless of the media in which recorded, that allow or cause a computer to perform a specific operation or series of operations; and

b. Recorded information comprising source code listings, design details, algorithms, processes, flow charts, formulas, and related material that would enable the computer program to be produced, created, or compiled.

“Computer software” does not include computer databases or computer software documentation.

1) The Contractor (and/or any subcontractor) shall ensure IT applications designed and developed for end users (including mobile applications and software licenses) run in the standard user context without requiring elevated administrative privileges.

2) The Contractor (and/or any subcontractor) shall follow secure coding best practice requirements, as directed by United States Computer Emergency Readiness Team (US-CERT) specified standards and the Open Web Application Security Project (OWASP), that will limit system software vulnerability exploits.

3) The Contractor (and/or any subcontractor) shall ensure that computer software developed on behalf of HHS or tailored from an open-source product, is fully functional and operates correctly on systems configured in accordance with government policy and federal configuration standards. The contractor shall test applicable products and versions with all relevant and current updates and patches updated prior to installing in the HHS environment. No sensitive data shall be used during software testing.

4) The Contractor (and/or any subcontractor) shall protect information that is deemed sensitive from unauthorized disclosure to persons, organizations or subcontractors who do not have a need to know the information. Information which, either alone or when compared with other reasonably-available information, is deemed sensitive or proprietary by HHS shall be protected as instructed in accordance with the magnitude of the loss or harm that could result from inadvertent or deliberate disclosure, alteration, or destruction of the data. This language also applies to all subcontractors that are performing under this contract.

5) The Contractor (and/or any subcontractor) shall remediate all risks or vulnerabilities immediately after the risks or vulnerabilities have been identified in the software.

D. Physical Access to Government Controlled Facilities

Homeland Security Presidential Directive (HSPD)-12 The Contractor (and/or any subcontractor) and its employees shall comply with Homeland Security Presidential Directive (HSPD)-12, Policy for a Common Identification Standard for Federal Employees and Contractors; OMB M-05-24; FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors; HHS HSPD-12 policy; and Executive Order 13467, Part 1 §1.2.

Roster. The Contractor (and/or any subcontractor) shall submit a roster by name, position, e-mail address, phone number and responsibility of all staff working under this acquisition where the Contractor will develop, have the ability to access, or host and/or maintain a government information system(s). The roster shall be submitted to the COR and/or CO by the effective date of this contract. Any revisions to the roster as a result of staffing changes shall be submitted immediately upon change. The COR will notify the Contractor of the appropriate level of investigation required for each staff member.

If the employee is filling a new position, the Contractor shall provide a position description and the Government will determine the appropriate suitability level.