PWS_Access Control System Maintenance.pdf

PERFORMANCE WORK STATEMENT (PWS)

ACCESS CONTROL SYSTEM MAINTENANCE

FOR

FIRES CAPABILITIES DEVELOPMENT & INTEGRATION DIRECTORATE (CDID)

1.0 BACKGROUND: This requirement is for the purchase of an Access Control Maintenance Agreement for CDID, Buildings 700 and 3040 to ensure compliance with access control procedures and key control as outlined in AR 380-5 and AR 190-13. The Capabilities Development and Integrations Directorate (CDID) has 11 classified open storage areas and 5 secure video teleconference (SVTC) suites within buildings 700 and 3040. To provide adequate protection to these areas the CDID employs the use of an automated entry control system (AECS) and a closed-circuit television (CCTV). The DNA Fusion AECS Milestone CCTV systems fully meet the regulator requirements as outlined in Army Regulation (AR) 380-5, Information Security. This system has been in effect since 2011 and renewed on a yearly basis. This is a $300,000 specialized system and only personnel who are certified in Milestone and Open Options will be allowed to work on this equipment. The contractor shall be Platinum Certified in Milestone & Open Options. The equipment shall be maintained on an as needed and quarterly basis.

1.1 PLACE OF PERFORMANCE: The primary place of performance shall be Knox Hall (Building

700) and I-See-O Hall (Building 3040), Fort Sill, Oklahoma and shall include locations throughout the buildings.

1.2 PERIOD OF PERFORMANCE: The Period of Performance for this maintenance contract includes a 12-month Base Period and four (4) one-year Option Periods.

2.0 SCOPE: Provide all labor and equipment to maintain, install, move, relocate, re-install, and upgrade the Access Control Systems and associated hardware and software in Buildings 700 and 3040 as outlined in the Systems Maintenance Agreement for Ft. Sill Fires - CDID September 16, 2023 – September 15, 2028. All packing materials, cardboard, and any other equipment wrappings should be discarded by the contractor at the MWR recycle center on post or in the designated dumpster.

2.1 Inspection and Acceptance: Any revision to an existing requirement shall be coordinated with the Contracting Officer (KO), or the Contracting Officer’s Representative (COR), Capabilities Development and Integration Directorate at 558-0710 or 442-2257. Any changes shall be coordinated and approved by the KO/COR.

2.1.1 Special Personnel Requirement: The Contractor shall ensure all personnel are following installation security policies. All personnel shall adhere to OSHA standards while performing the duties within the scope of this agreement. Contractor shall carry valid insurance or bonding protection while performing the service required.

3.0 SERVICE CONTRACT REQUIREMENTS:

3.1 Contractor shall participate in the kickoff meeting with KO/COR and any other SMEs within three business days of the start of the project to determine a schedule for each facility that shall be agreed upon in by the Contractor, COR and KO.

3.2 Contractor shall appoint a primary project lead to oversee the contractor’s employees, tasks and progress on project deliverables.

3.3 Contractor shall deliver quarterly reports detailing project repairs, maintenance and any other calls or response to trouble so both the COR and the Contractor have a record to identify repetitive issues.

This is to catalog items that may need manufacturers input and/or attention to mitigate these issues that have been evident in the past.

3.4 Contractor shall meet and confer with KO/COR regarding the status of technical assessment activities, problems, issues or conflicts in need of resolution on a quarterly basis if not more frequently.

3.5 Contractor shall assess and document work papers, procedures, processes, technical specifications, implementation plans and other relevant information as necessary for the various project components and systems.

3.6 Contractor shall provide list of staff selected to participate in the project with years of experience and that demonstrate sufficient expertise to satisfy the requirements. All personnel shall possess the manufacturer’s certifications and licensing to troubleshoot and diagnose any of the equipment identified within this scope. All this documentation shall be provided to the COR/KO upon award and anytime there is a change in the workforce to ensure certified personnel are diagnosing and repairing the equipment.

3.7 Contractor shall be able to communicate with both technical and non-technical persons. Contractor shall exhibit professional interpersonal skills and be able to interface with all levels of management and non-management personnel.

3.8 The Contractor shall assess the nature of system failures to determine an immediate solution or refer the problem for intervention. Most of which shall be repaired within 24 hours of determining the cause of the failure. If parts are required that are not on hand an expedited method of delivery shall be expected to ensure repair is made within 72 hours of initial diagnosis.

3.9 Details of expected level of service and support from Contractor and service personnel:

3.9.1 All labor to be included for all repairs, replacements, diagnosis and troubleshooting of equipment associated with the components that are outlined in this PWS.

3.9.2 Contractor shall have capability of handling and recording all calls to outages, failure, and general operational discrepancies of the systems outlined in this PWS 24 hours/day, 7 days/week, 365 days/year.

3.9.3 Contractor shall respond within 24 hours of a notified outage for non-emergency items as outlined in this PWS.

3.9.4 Contractor shall respond within 8 hours for diagnosis/repair of critical components that could potentially cause a security vulnerability compromising the integrity of the specific facility unless other security measures can be implemented by the government.

3.9.5 Equipment shall be provided by the Contractor as a suitable mitigating measure until final repairs of system to be made ensuring system functionality.

3.9.6 All trouble calls made by individual customers will be verified through the COR prior to the Contractor executing any action. This is to allow the COR to diagnose and determine if the level of effort and urgency is warranted to mitigate any erroneous billing outside of normal working hours.

4.0 COVERAGE SCOPE:

4.1 Software/Firmware Upgrades: Software/Firmware shall be upgraded at the advice or recommendations of the equipment manufactures.

4.2 Entry Point Readers: Cleaned and tested quarterly for proper operations and to ensure they are securely mounted.

4.3 Back-up Batteries on Power Supplies. Tested quarterly and replaced as needed at no additional fee or charge.

4.4 Locks and Hardware. Inspected quarterly for excessive wear and proper alignment.

4.5 Video Recorders: Inspected quarterly for proper operations, correct setting, and cable Security.

4.6 Cameras: Cleaned and aligned quarterly, inspected for quality picture and proper operation.

4.7 Spare Parts & Equipment. Maintained and reserved on hand to prevent prolonged down time.

Supply 100 blank badges to the customer each year.

4.8 Technical Service. Provide seven days a week, twenty-four hours a day by factory trained and qualified technicians.

4.9 Support Training. Four hours per year support training provided to staff, directors, and other essential personnel that includes any refresher and new enhancements to the system.

5.0 REPAIR SERVICES:

5.1 Emergency Service & Trouble Calls: Emergency Service Request shall be dispatched WITH-IN 12 HOURS of receiving the call. Includes after hour and weekend emergency calls, provided coordination with the specific facility is made to ensure access is feasible. COR shall be notified for each facility on initial coordination of access to inform the occupants. Any contact or coordination throughout the routine maintenance or diagnosis shall be arranged by each facility POC.

5.2 Dispatch Status: Priority Dispatch.

5.3 Fault Correction: Faults shall be identified on the spot and corrected within 48 hrs. if parts and equipment are available. This does not apply to equipment that has been discontinued by the manufacturer or is otherwise unavailable.

5.4 Replacement Parts: Contractor shall maintain a stock of common system devices and parts for the access system. This includes batteries, modules, magnetic locks, electric strikes, keypads and contacts.

This does not include major CPU or complete systems. If not available, equipment shall be shipped overnight for repairs or replacement at no shipping cost to the customer. New equipment shall be ordered overnight at no shipping cost. Does not apply to equipment that has been discontinued, or no longer supported by the manufacturer, or otherwise not available.

5.5 Warranty: All new parts or equipment shall be warranted by Contractor for the period of 12 months.

Repaired equipment shall carry the manufactures warranty.

5.6 Items Not Covered: This does not cover any equipment or services not specifically mentioned. This shall be modified or amended to cover other equipment or services upon the request of either party, or with the approval of both parties.

6.0 ADMINISTRATIVE CONSIDERATIONS.

6.1 Work Schedule. Contractor shall comply with the following types of service calls for maintenance of the AECS. The hours of 0800 to 1700 are the projected normal hours operating over a standard five-day period, excluding Federal holidays.

6.2 Overtime. Overtime is not anticipated unless cleared with and approved by the KO in advance.

6.3 Security and Privacy.

6.3.1 Clearances. All Contract personnel assigned to this task shall be U.S. citizens and be capable of passing a background check to gain entry to the installation that will be further described later in this

PWS.

6.4 All Electronic and Information Technology (EIT) procured through this task shall meet the applicable accessibility standards at 36 Code of Federal Regulation (CFR) 1194, unless an agency exception to this requirement exists. 36 CFR 1194 implements Section 508 of the Rehabilitation Act of 1973, as amended, and is viewable at http://access-board.gov/sec508/508standards.htm.

7.0. NON-PERSONAL SERVICES: The Government and the Contractor understand and agree that the work described in this task order is a “Non-personal Services Contract” as defined in FAR Part

37.101. Therefore, it is further understood and agreed that the Contractor and/or the Contractor’s employees:

7.1. Shall perform the services described herein as independent contractors, not as employees of the Government.

7.2. Contractor shall NOT be placed in a position where they are under the supervision, direction or evaluation of a federal employee, military or civilian, but shall, pursuant to the Government’s right to inspect, accept or reject work, comply with such general direction of the Contracting Officer or the duly appointed representative of the Contracting Officer as is necessary to ensure completion of the contract objectives.

7.3. Contractor shall NOT be placed in a position of command, supervision administration or control over DA military civilian personnel or personnel of other contractors or becomes part of the Government organization.

7.4. Further as this contract/task order does not create an employer-employee relationship, the entitlements and benefits applicable to such relationships do NOT apply. Such include, but are not limited to, federal income tax withholding, Federal Insurance Contributions Act (FICA), unemployment compensation and workman's compensation benefits by virtue of this contract/task order.

8.0. SERVICE CONTRACT REPORTING: The contractor shall report, annually by October 31, for services performed under this contract during the preceding Government fiscal year (October 1 - September 30). The contractor shall report the following information: Contract Number, total dollar amount invoiced for services performed during the period Government fiscal year under the contract, the number of Contractor direct labor hours expended on the services performed during the previous Government fiscal year, and data reported by subcontractors (as applicable). This information shall be submitted via the internet at www.sam.gov.

9.0 CONTRACTOR ACCESS PROCEDURES TO FORT SILL (FEB 2015): INSTALLATION

ACCESS REGULATIONS. The site of the contracted work is on a military reservation, and rules and regulations issued by the Commander, Fort Sill, or other appropriate commanders, covering fire, safety, sanitation, severe weather requirements, admission to installation/facility and conduct of operations shall be observed by the Contractor and his employees. Unscheduled gate closures by the military police may occur at any time. All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions of AR 190-16, Physical Security, shall apply to contractor personnel while within Fort Sill’s area of jurisdiction. The installation Commander may deny access to the military installation to any individual in accordance with 18 U.S.C. 1382. Said denial shall not relieve the Contractor of his duty to perform under this contract.

Effective 9 February 2015, personnel requiring access to the installation shall possess a Common Access Card (CAC), Long Term Unescorted Access Pass or Military ID, or Individual temporary pass issued by the Fort Sill Directorate of Emergency Services (DES) pursuant to Army Directive 2014-05, Policy and Implementation Procedures for Common Access Card Credentialing and Installation Access for Un-cleared Contractors. Fort Sill has initiated a system which provides three forms of access documentation based upon the duration of required access and DOD Network requirements. The three forms, described below, are as follows: (1) Common Access Card (CAC); (2) Long Term Unescorted Access Pass or Military ID; or an (3) Individual Temporary Pass. Installation access cards from other DoD installations (for example: Tinker Air Force Base, Sheppard Air Force Base, Fort Hood) do not meet the criteria for installations access. Fort Sill has a "stand alone" installations access process and does not share information with other DoD installations.

The Prime Contractor shall provide a completed FS Form 118 for each prime or sub-contract employee who requires a CAC or Long Tern Unescorted Access Pass in the performance of this contract. The required documentation shall be provided by the Prime Contractor to the Fort Sill Visitor Control Center (VCC) office between 7:00-5:00 Pm hours Monday- Friday. Required forms shall be provided to the VCC within 10 calendar days of notification of this requirement or of contract award (whichever occurs first).

Directions to the VCC: From Interstate 44, take the exit for Rogers Lane West. Go approximately 2 miles to the Sheridan Road North exit. Go north on Sheridan Road and follow the signs to the Visitor Control Center (on the right side of the roadbuilding T6701).

9.1 Required Documentation for Access: FS 118 REQUEST FOR UNESCORTED INSTALLATION CONTRACT ACCESS TO FORT SILL. The form is located at: http://sill-www.army.mil/ http://sill-www.army.mil/. Failure to receive a CAC may result in the contractor personnel being denied admission to the installation. Failure to receive a Long-Term Unescorted Access Pass or Individual Temporary Pass will result in the contractor personnel being denied admission to the installation. Failure to receive required access shall not relieve the Contractor from execution of Contract Requirements. Denial of a request can be appealed by completing and submitted FS 117 and a letter of recommendation from the employer to the VCC for action. Submission of an appeal shall not relieve the Contractor from execution of Contract Requirements.

Required Documentation for Appeal: FS 117 FORT SILL ACCESS CONTROL DENIAL WAIVER

APPLICATION PROCESS AND FORT SILL FORM 117 (FS ACCESS CONTROL DENIAL

WAIVER APPLICATION). The form is located at: http://sill-www.army.mil/.

Three Forms of Access Documentation - Common Access Card (CAC): Contractor employees and staff (herein referred to as Contractors) requiring access to the installation on a recurring basis for a period of 6 months or more and requiring access to a DOD computer network shall obtain a CAC. Contractor employees who do not require access to a DOD computer network are not eligible for a CAC but should apply for Long term, unescorted access as described below. CACs are issued through the Trusted Associate Sponsorship System (TASS) program. Issuance of a CAC requires a favorable Federal Bureau of Investigation (FBI) fingerprint check, successful submission of a National Agency Check with Inquiries (NACI) (equivalent or higher) background investigation to the Army’s investigative service provider and a favorably adjudicated NACI (equivalent or higher) investigation from a Federal department or agency.

In order to avoid delays in gaining access to the installation, contractors requiring a CAC are encouraged to contact their Contracting Officer Representative (COR) to begin the process to obtain CACs as soon as possible.

Long Term, Unescorted Access Pass: This pass is required for Contractors, Sub-contractors and Vendors requiring physical access to the installation on a recurring basis (greater than 24 hours) and who do not require access to a DOD computer network. The expiration date of the access will be the end of the contract period of performance or 365 days whichever comes first. Sub-contractors shall be bound by this same requirement. Prime Contractors are responsible for obtaining timely sub-contractor documents necessary to secure required access documents. Contractors and their employees shall pass a NCIC Interstate Identification Index check in order to secure this pass.

Military ID: Military ID cards for retirees, reservists and dependents are acceptable for unescorted access onto Fort Sill.

9.2 Required Documentation for Appeal: FS 117 FORT SILL ACCESS CONTROL DENIAL WAIVER

APPLICATION PROCESS AND FORT SILL FORM 117 (FS ACCESS CONTROL DENIAL WAIVER

APPLICATION). A fillable form is located at: http://sill-www.army.mil/USAG/forms.html

9.3 Three Forms of Access Documentation

1. Common Access Card (CAC): Contractor employees and staff (herein referred to as Contractors) requiring access to the installation on a recurring basis for a period of 6months or more and requiring access to a DOD computer network shall obtain a CAC. Contractor employees who do not require access to a DOD computer network are not eligible for a CAC but should apply for Long term, unescorted access as described below. CACs are issued through the Trusted Associate Sponsorship System (TASS) program. Issuance of a CAC requires a favorable Federal Bureau of Investigation (FBI) fingerprint check, successful submission of a National Agency Check with Inquiries (NACI) (equivalent or higher) background investigation to the Army’s investigative service provider and a favorably adjudicated NACI (equivalent or higher) investigation from a Federal department or agency.

In order to avoid delays in gaining access to the installation, contractors requiring a CAC are encouraged to contact their Contracting Officer Representative (COR) to begin the process to obtain CACs as soon as possible.

2. Long Term, Unescorted Access Pass: This pass is required for Contractors, Sub- contractors and Vendors requiring physical access to the installation on a recurring basis (greater than 24 hours) and who do not require access to a DOD computer network. The expiration date of the access will be the end of the contract period of performance or 365 days whichever comes first. Sub-contractors shall be bound by this same requirement. Prime Contractors are responsible for obtaining timely sub- contractor documents necessary to secure required access documents. Contractors and their employees shall pass a NCIC Interstate Identification Index check in order to secure this pass.

Military ID: Military ID cards for retirees, reservists and dependents are acceptable for unescorted access onto Fort Sill.

In order to avoid delays in gaining access to the installation, contractors are encouraged to contact their Contracting Officer

3. Individual Temporary Pass: All contractors and sub-contractors who do not possess a CAC, a valid Military ID, or a current long term unescorted pass shall report to the Visitors Control Center located near Sheridan gate to obtain an Individual temporary pass. A temporary pass will ONLY be issued to persons who produce a valid current federal or state issued ID with a picture and must pass a NCIC Interstate Identification Index check and local exclusion roster. (The Center is anticipated to be open 30 January 2015).

Acceptable forms of ID are:

1. Valid current State issued Photo ID that is for driving or for identification.

2. Valid current Permanent Resident Card or Alien Registration Receipt Card (Form I-551)

3. Valid current Employment Authorization Document (Card) that contains a photograph (Form I-766)

4. Passport (Foreign Passports must show point of entry stamp).

The contractor shall return issued CACs and Passes to the designated COR at the end of the contract period of performance or the end of the individual employee’s tenure, whichever comes first. The contractor shall also coordinate with the COR for new or replacement CACs or Long-Term Unescorted Passes as required.

For additional information, see:

http://sill-www.army.mil/installation_access_change.html http://sill-www.army.mil/USAG/forms.html Fort Sill unescorted access regulation (to be published).

Homeland Security Presidential Directive 12, Policy for a Common Identification Standard for Federal Employees and Contractors located at http://www.dhs.gov/homeland-security-presidential-directive- 12#1 Army Regulation (AR) 190-13, the Army Physical Security Program located at http://armypubs.army.mil/epubs/190_Series_Collection_1.html Army Directive 2011-08, Army Implementation of Homeland Security Presidential Directive -12 located at http://armypubs.army.mil/epubs/pdf/ad2011_08.pdf.

10.0 ANTI-TERRORISM/OPERATIONS SECURITY

10.1 Anti-Terrorism (AT) Considerations and Awareness Training. In accordance with (IAW) Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process to determine the trustworthiness and suitability prior to being granted access to federal property. Limited access with escort may be granted (at the installation’s discretion) for an interim period while investigations are being conducted. IAW AR 25-2 and HSPD-12, Installation Security Office will submit all background investigations on prospective contractors requiring Common Access Cards (CAC), network access. Upon notification, the Provost Marshal Office will conduct background checks on all other contractor personnel when there isn’t a requirement for CAC and/or IT requirements in the contract All contractor personnel assigned to this contract shall complete the “Anti-Terrorism Level 1 Training” provided on-line at https://atlevel1.dtic.mil/at/ annually. Certificate of completion will be provided thru the COR to the unit/activity security manager. (Reference Department of the Army, US Army Contracting Agency, SFCA-CO, 5 Sep 07, subject: Incorporation of Anti-Terrorism Measures into the Contracting Process and AR 525-13, Antiterrorism).

10.2 Security Awareness Training. All contractor personnel assigned to this contract shall complete the Contractors Security Awareness Training annually. Go to Internet Explorer, Fort Gordon website, select Fort Gordon and click on Dir, Plans Training & Mobilization, select Security/Intelligence, and click on Contractor OPSEC Awareness Training. A record on completion shall be provided thru the COR to the unit/activity security manager. (Reference AR 530-1, Operations Security (OPSEC), Chapter 6).

10.3 Contractor personnel will have routine and unavoidable access to proprietary information which they are required to protect. Personnel applied to the tasks in this PWS may not work on other tasks for the contractor or for any other agency without a formal written request, and written consent granted by, the contracting officer.

10.4 Uses and Safeguarding of Information. Information from the secure web site is proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time shall any data be released to the public with the contractor’s name and contract number associated with the data.

10.5 Privacy Act. All contract personnel assigned to this task will have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements.

10.6 At Level I Training. This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

10.7 At Awareness Training for Contractor Personnel Traveling Overseas. This standard language text required US based contractor employees and associated subcontractor employees to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit ATO being the local point of contact.

10.8 Access and General Protection/Security Policy and Procedures. This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility or area. Contractor and all associated sub-contractors’ employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce shall comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

10.9 iWatch Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWatch program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 14 calendar days of contract award and within 14 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

10.10 Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government info system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services and shall successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter.

10.11 For Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty.

All contractor employees shall complete annual OPSEC awareness training.

10.12 For Information assurance (IA)/information technology (IT) training. All contractor employees and associated sub-contractor employees shall complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

10.13 For information assurance (IA)/information technology (IT) cortication. Per DoD 8570.01-M, DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M shall be completed upon contract award.

10.14 For Contracts That Require Handling or Access to Classified Information. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “(Con) fidential,” “(Sec)ret,” or “Top (Sec)ret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

10.15 In support of the DOD policy on terrorism, it is DA policy that-…Commanders do not have the same legal responsibility to provide AT training for Defense contractors as that provided for military forces or direct-hire employees. Contractors remain private U.S. citizens. The DOD will assist the DOS, where militarily feasible, in supporting efforts to protect U.S. citizens abroad. Contractors are required to contact the combatant command to obtain, and comply with, the specific AT guidance for that area. Commanders are required to offer AT training to contractors under the terms specified in the contract. Contractors working within a U.S. military facility or in proximity of U.S. Forces will receive incidentally the benefits of measures undertaken to protect U.S. Forces. Operating contractors at Government Owned Contractor Operated facilities will comply with the provisions of this regulation, and with ACOM, Major Subordinate Command (MSC), DRU, and GCC directives and guidance, which supplement or amend AR 525–13. Army officials responsible for developing and negotiating contracts with contractor operators of government facilities will ensure that this provision is included in all operating contracts. Compliance with the “No Double Standard” policy on dissemination of terrorist threat information is maintained.

10.16 All Contractor employees shall complete the Defense Information System Agency Information Security Awareness CD-ROM course as a minimum training requirement. The Contractor employees shall also receive basic computer security awareness training. Information required to execute will be provided by the Government after TO award.

10.17 The Contractor shall ensure that all assigned personnel understand applicable security policies and directives. Personnel who knowingly violate security policies or directives shall be dismissed.

10.18 All Electronic and Information Technology (EIT) procured through this task shall meet the applicable accessibility standards at 36 CFR 1194, unless an agency exception to this requirement exists. 36 CFR 1194 implements Section 508 of the Rehabilitation Act of 1973, as amended, and is viewable at http://access-board.gov/sec508/508standards.htm.

10.19 All Contractor employees shall complete the Defense Information System Agency (DISA) training in accordance with the ID/IQ contract’s PWS paragraph C.1.6.14.

10.20. THREAT AWARENESS AND REPORTING PROGRAM (TARP) TRAINING: IAW AR

381-12, paragraph 1-10, all DA contract employees possessing a security clearance shall receive annual Threat Awareness and Reporting Program (TARP) training instructed by a CI agent or other trainer as specified in AR381-12, paragraph 2-4b. Training shall be accomplished annually during the organization's scheduled TARP training session. In those instances where live training is not possible, such as in deployed theaters of operation, CI units may, in coordination with appropriate commanders, develop alternative means to conduct threat awareness training and meet the requirements of AR 381-

12. Certificates of completion shall be provided to the COR within 5 days of completion.

11.0 ORGANIZATIONAL CONFLICT OF INTEREST:

11.1 The Contractor shall receive no privileged, proprietary, or otherwise sensitive information without the Government’s knowledge and without both the Government and Contractor implementing appropriate safeguards or agreements thereon. Contractors shall not divulge any information accessed and obtained during performing this task to other Contractor staff or anyone outside the Government.

Specifically, in addition to any organizational conflict of interest provision, contractor employees assigned to this project will be required, prior to contract start date, to sign the following Non- Disclosure Agreement (NDA) agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, who has not signed an NDA. The signed NDAs will be furnished to the Contracting Officer (KO) and Contracting Officer Representative (COR) prior to contract performance. The company shall include with its submission of the Request for Proposal (RFQ), its plan to “firewall” these employees and enforce this provision (i.e., internal controls, training, etc.). Failure to adhere to these NDA safeguards may result in termination of this task. Final authorship and copyright (if required) of any deliverable will be with the Government. The Contractor cannot gain any unfair advantage.

11.2 The Contractor shall identify any organizational conflict of interest clauses they or their subcontractors are subject to, current or within three years of federal government contract services, by providing, with their offer, a copy of the clause, a description of the contract services performed, a contract number, a governmental point of contact, and a phone number for that point of contact.

12.0 QUALITY CONTROL PLAN: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1 Contractor Inspection Requirements). The Contractor shall develop, implement and maintain an effective Quality Control System which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting task order performance to ensure all contract requirements are met. The Contractors' QCP shall contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP as a minimum shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspection; discrepancy identification and correction;

corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints. The contractor shall provide to the Government their quality control documentation within 30 days after task order award and submitted to the KO and COR. The Government will have ten (10) working days to review and accept or send the plan back for revision. In the event revisions are required, the Contractor shall make the appropriate revisions and return the revised QCP to the Government within five (5) working days of receipt of notification to revise. After acceptance of the quality control plan, the contractor shall receive the Contracting Officer's acceptance in writing of any proposed change to their QC system. After acceptance of the QCP by the Contracting Officer, any future proposed revisions shall be submitted to the Contracting Officer for approval.

13.0 IDENTIFICATION OF CONTRACTOR EMPLOYEES and VEHICLES: The contractor shall provide each employee an identification (ID) badge on contract start date, or on employment start date. The ID badge shall be made of nonmetallic material. The badge shall be easily readable and include employee’s name, contractor’s name, functional area of assignment, and current photograph.

The ID badge template shall be approved by the contracting officer or their designee before contract start date or within 10 working days of inclusion of this clause in a contract. The Contractor shall collect Contractor-furnished identification badges upon termination of employee.

13.1 Display of ID Badge. Contractor personnel shall wear the ID badge at all times when performing work under this contract to include attending Government meetings and conferences. Unless otherwise specified in the contract, each contractor employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

13.2 Point of Contact. The Contractor shall provide a local telephone number that is answered 24 hours a day, seven (7) days a week, and a local address where the Contractor can be notified of or contacted for emergency work. The Government shall not be expected to call a series of phone numbers in order to locate the Contractor or his designated representative. Electronic answering devices, beepers, or pagers shall suffice for this requirement.

13.3 Answering Telephones. Contractor personnel shall identify themselves as contractor employees when answering Government telephones.

13.4 Utilizing Electronic Mail. When contractor personnel send e-mail messages to Government personnel while performing on this contract, the contractor’s e-mail address shall include the company name together with the person’s name.

When it is necessary for contractor personnel to have a user address on a Government computer, the Government shall ensure that person’s e-mail address includes the name of their company.

13.5 Vehicles. Each side of Contractor-owned vehicles shall bear the Contractor's name in 2-inch letters.

13.6 Workforce. The successful bidder shall not hire persons not legally residing in the United States of America.

13.7 Conduct of Employees. The Contractor’s employees shall not be permitted to carry firearms, knives or other lethal weapons while on Fort Sill.

DEPARTMENT OF THE ARMY

HEADQUARTERS, UNITED STATES ARMY FIRES CENTER OF EXCELLENCE AND FORT SILL

FORT SILL, OKLAHOMA 73503-5000

REPLY TO

ATTENTION OF

This agreement is to be signed by all contractor employees who in the course of performing contract work for Fires Center of Excellence (FCOE) may be disclosed, or have access to, Protected Information and Computer Software as defined below.

I, ________________________________________, the employee of ___________________________________________________________understand in the course of my work for the FCOE under various contracts that Protected Information and computer software may be disclosed to me and I may otherwise have access to such items on FCOE information technology networks or in FCOE workspaces. I agree to abide by all terms and obligations contained in this agreement regarding the protection of such items.

1. Definition.

a. Unless specifically excluded by paragraph 1.c, “Protected information and computer software” means all information and computer software regardless of its form that in the course of performing work for the FCOE under various contracts is disclosed orally, in writing or in any other media to me, or to which I am otherwise given access to, by (i) FCOE, (ii) other Government agencies, (iii) foreign governments or (iv) other contractors while directly supporting FCOE, which is accompanied by written legends identifying use or disclosure restrictions or disclosed under circumstances that I know are subject to use or disclosure restrictions established in writing by the Government.

b. Protected Information and Computer Software includes by way of illustration, but is not limited to: (i) data marked Limited Distribution (LIMDIS); (ii) information marked For Official Use Only (FOUO), (iii) personnel data protected by the Privacy Act; (iv) data, information and material (including software documentation and computer databases) of a technical, scientific, or government pre-deliberative nature; (v) contractor proposals, acquisition plans, government cost estimates, draft statements of work, source selection plans, and evaluations of contractor proposals; (vi) financial and management data used for contract award or administration purposes; (vii) test reports; (viii) government requirements documents; (ix) financial statements and reports; (x) manpower reports; (xi) planning, cost and program development documents, resource forecasts, Program Objective Memorandums (POM), Program Budget Submissions, Congressional Justification Books, President’s Budget Submissions, Program Budget Decisions (PBD), and Five Year Plans; and (xii) computer programs, source code, source code listings, object code listings, design details, algorithms, processes, flow charts, formulae, and related material that would enable the software to be reproduced, recreated, or recompiled.

c. Protected Information and Computer Software does not include information that:

(1) Has fallen into the public domain by operation of law or through no action of the undersigned in breach of this agreement or any other party in breach of any other obligation of confidentiality owing to the Government or the owner of the protected information or computer software;

(2) Has been lawfully obtained by the recipient outside the course of the performance of a Government contract;

(3) Has been properly licensed or provided directly by the owner (or other authorized source) of the information or computer software to the recipient to the extent so licensed or provided;

(4) Is owned by the recipient or was developed independently of the disclosure hereunder;

(5) Has been used or disclosed by the recipient in response to an order of a court or administrative body of competent jurisdiction to the extent permitted by that authority; or

(6) Has been disclosed to the recipient by the Government who has explicitly authorized the recipient to use or disclose the information for another purpose, to the extent so authorized.

2. Use and Disclosure Obligations. I will use and disclose Protected Information and Computer Software only as necessary for the performance of the requirements of the underlying contract(s) under which the information or computer software is furnished. I understand Protected Information and Computer Software may not be used or disclosed for any other purpose, including bid or proposal preparation or business marketing, without the written approval of the cognizant Government contracting officer. I will comply with all restrictions set forth in any legends, licenses or instructions provided to me or accompanying the Protected Information or Computer Software or other written directives of my employer or the Government known to me. The use and disclosure obligations imposed by this paragraph shall expire as follows:

a. There shall be no expiration date for the following Protected Information and Computer Software,

(i) technical data or computer software containing Limited Rights, Restricted Rights, Government Purpose Rights, Special License Rights, or Unlimited Rights legends; (ii) information or software marked Limited Distribution (LIMDIS); (iii) information or software marked Source Selection Information; (iv) contract proposal information marked pursuant to FAR 52.215-1(c) limiting its use for proposal evaluation purposes only; (v) information and computer software marked Contractor Proprietary or with a similar legend; (vi) data known by me to be protected by the Privacy Act; and

(vii) information marked For Official Use Only (FOUO).

b. For other information or software accompanied at time of disclosure by a written legend identifying use or disclosure restriction time periods, the expiration date shall be as stated in or derived from the legend.

c. For all other Protected Information and Computer Software, the expiration date shall be 3 years from the date the information or software is first disclosed to me.

3. Unauthorized Use or Disclosures. I will immediately notify my employer of the circumstances of any unauthorized use or disclosures known to me of Protected Information and Computer Software in violation of the obligations contained in this agreement.

4. Disposition. At the termination of my employment or when I no longer perform contract work for FCOE, I agree to immediately return (or destroy if directed by my employer) all Protected Information and Computer Software in my possession. Furthermore, if I am dedicated to support a specific FCOE Office or Directorate or FCOE program and am reassigned to support another FCOE Office or Directorate or FCOE program, I will immediately return (or destroy if directed by my employer) all Protected Information or Computer Software in my possession previously furnished by the prior FCOE Office or Directorate or FCOE program.

5. Duration. The above obligations imposed by this agreement shall survive termination of my employment or the expiration or termination of the underlying contract(s) under which the protected information or computer software was furnished to me.

6. Classified Information. This agreement is in addition to and in no manner abrogates requirements, obligations or remedies regarding the protection of classified information and does not supersede the requirements of any laws, regulations, other directives or nondisclosure agreements regarding classified information.

7. Other Restrictions. This agreement does not abrogate any other obligations currently placed upon me or which may be imposed upon me in the future by my employer, FCOE or other entities; or remedies afforded those entities regarding those obligations.

8. Provided. I acknowledge I have been provided a copy of this agreement.

Signature Date

14.0 DELIVERABLES.

14.1 Deliverables shall be in the form of reports, courseware, Quality Control Plan, and any other format appropriate to the specific initiative and as identified by the Government. The Contractor shall be responsible for delivering all items specified to the Government COR. The following deliverables shall be submitted by the Contractor:

PARA ITEM QUANTITY DELIVERY DATE

3.1 Schedule of quarterly system

maintenance service calls for each building

1 copy through digital mean of transmission.

Format shall be submitted in Adobe Acrobat .pdf files or standard Microsoft Office suite applications.

Within one week of the Contract Kick-off Meeting; changes to the schedule shall be proposed one week in advance of scheduled maintenance service call.

3.3 Reports of scheduled services

performed and all service calls outlining items replaced/repaired during service

1 copy through digital mean of transmission.

Format shall be submitted in Adobe Acrobat .pdf files or standard Microsoft Office suite applications.

Quarterly, no later than the 5th of the month.

3.6 Contractor staff and certifications 1 copy through digital mean of transmission.

Format shall be submitted in Adobe Acrobat .pdf files or standard Microsoft Office suite applications.

Upon award and any time there is a change in personnel on the contract for the duration of this PWS.

4.9 Training for personnel on new

software enhancements, configurations, maintenance, and troubleshooting

1 copy through digital mean of transmission.

Format shall be submitted in Adobe Acrobat .pdf files or standard Microsoft Office suite applications.

4hrs annually as coordinated / scheduled with the

COR

14.2 Document deliverables shall be provided using standard Microsoft Office and Adobe Applications.

15.0 PERFORMANCE REQUIREMENTS SUMMARY:

Performance Objective

PWS

PAR

Performance Standard

Monitoring Method

Allowable Performance Deviation

Remedy Action

PO1: Hire & retain qualified staff to successfully support the terms of this contract.

3.6 Contractor

recruits, hires, and retains qualified personnel as documented in the PWS.

COR performs 100% surveillance of contractor personnel.

Zero Defects permitted.

(Note #1)

Contract Deficiency Report (CDR) completed.

Contractor shall provide in writing how to prevent reoccurrence and steps to prevent performance deviation.

PO2: Receipt of Contract Deliverables.

14.0 Submit

reports when due upon successful completion of warranty/servi ce repairs other deliverables as required in the PWS and outlined in the deliverable’s para.

COR reviews 100% of task order reports and deliverables.

2 Defects per quarter.

(Note #2)

CDR issued over allowable performance deviation.

PO3:

Contractor Manpower Reporting Application

(CMRA)

8.0 CMRA online

database completed by 31 OCT every year.

COR verifies online database.

Zero Defects

Withhold contract invoice payment pending compliance;

CDR; CPARs