PWS_Final 2 SEP 25 .docx

PERFORMANCE WORK STATEMENT

Maintenance, Service & Continuous Monitoring of the Electronic Security Systems (ESS) at Southwest Division – Forward (SWD-F)) Sensitive Compartmented Information Facility (SCIF) U.S. Army Corps of Engineers, Winchester, VA

W912ER-25-C-00XX

1.0 SYNOPSIS The objective of this Performance Work Statement (PWS) is to purchase and install, an intrusion detection systems (IDS), a new camera and monitoring system, and provide maintenance and service of the Electronic Security Systems (ESS), and the supporting equipment within the Southwest Division – Forward (SWD-F) Sensitive Compartmented Information Facility (SCIF) in Winchester, VA.

1.1 Existing Conditions. The current IDS is a BOSCH D9412GV2 Control Panel, and the Access Control System is a HIRSCH Velocity System (Reference Attachment 1 and 2). The existing IDS includes a UL certified system with door contacts, key panels, motion sensors, current and software, and 24/7 connectivity with the Philadelphia Megacenter.

2.0 SCOPE

The scope of services for this contract includes the following tasks:

2.1 Mobilization and Initial Inspection (CLIN 0001): This CLIN includes three tasks. These tasks include (1) all work associated with the Contractor accomplishing the requirements related to establishing facility access for their personnel and beginning work (including submittal of work plans, schedules, etc.), (2) conducting the project kick off meeting, and (3) performing an initial condition inspection/assessment of the current IDS system.

2.1.1 Establishing Facility Access (Task 1.1). This PWS contains several requirements for security-related training and other items which must be completed prior to Contractor personnel being granted access to the SWD-F secured facility.

The following tasks are to be completed within 14 days of contract award (unless more stringent requirements are listed in the referenced paragraphs of the PWS) and must be accepted by the COR prior to the on-site kick off meeting. The scheduling of training which will be conducted by Government representatives shall be coordinated with the COR:

· Antiterrorism (AT) Level 1 Training (Para 4.7.1); which is online

· Suspicious Activity Reporting Training (Para 4.7.4); which will be covered in AT Level 1 training

· OPSEC Training (Para 4.7.5) which is online

· Information Awareness Training (Para 4.7.6) which is online

· E-Verify / Pre-Screening (Para 4.7.8) which can be completed online

· Submittal of qualifications for the Program Manager (Para 4.2.1)

· Submittal of qualifications for technicians (Para 4.2.2)

The following mobilization tasks must be completed prior to the on-site condition inspection:

· Submittal and acceptance of the Site Visit Accident Prevention Plan (SVAPP) (Para 4.8.1)

The following mobilization tasks must be completed prior to the beginning of maintenance activities (Para 2.3):

· Submittal and acceptance of the final SVAPP (Para 4.8.2)

· Submittal and acceptance of the Contractor’s Maintenance Plan (Para 4.4.1)

2.1.2 Contract Kick Off Meeting (Task 1.2). The Contractor’s Program Manager will schedule, and coordinate with the Government, a contract kick-off meeting with the KO and/or COR at SWD-F HQ in Winchester, VA and key Contractor staff involved the execution of this PWS. The KO may or may not participate in the kick-off meeting. The kick-off meeting will be held by the Contractor within 21 calendar days after the start date of this contract. Note that the Contractor attendees must be cleared by the COR or KO to participate in the on-site meeting by accomplishing the required tasks listed in the previous paragraph (as designated for the kickoff meeting only). The Contractor’s Program Manager shall be present at the meeting in person; however other participants may attend remotely.

The purpose of the kick-off meeting is to: (1) Aid both the Government and Contractor personnel in achieving a clear and mutual understanding of all contract requirements, (2) to conduct a walkthrough inspection, (3) discuss regular maintenance and re-certification of the UL Certification, and (4) identify and resolve potential problems.

The Contractor shall identify the unique characteristics of each task and confirm the roles and responsibilities of all parties. The Contractor shall also be prepared to discuss any issues requiring clarification and be prepared to gather information necessary for the development of the Contractor’s “plans” (e.g. Maintenance Plan, etc.) and condition inspection. The Contractor shall establish a common understanding of cost, schedule, and performance expectations (including applicable workflow procedures) with the Government representative(s). The Contractor shall prepare a kick-off meeting presentation and meeting minutes. The Contractor’s Program Manager will submit the draft kick-off meeting minutes in Microsoft Word (.doc) format for Government review and comment within 10 calendar days after completion of the kick-off meeting. The Contractor is not responsible for setting up and coordinating the Government review and comment period. The Government will have 10 calendar days to review the draft kick-off meeting minutes and provide comments to the Contractor’s Program Manager. The Contractor will submit the final kick-off meeting minutes in Microsoft Word (.doc) and Adobe (.pdf) formats to the COR, with comments resolved to the satisfaction of the Government within 7 calendar days after Contractor’s receipt of the Government’s review comments.

2.1.3 Initial Condition Assessment (Task 1.3). Following the kickoff meeting, but no later than 30 days following contract award, the Contractor shall conduct a full condition survey of the existing IDS and related systems at the SWD-F HQ. This assessment will include all activities necessary to evaluate the working condition of all physical IDS equipment as well as any associated software systems, alarms, or other notification systems. Procedures for evaluation and testing shall be coordinated in advance with the COR during (or shortly after) the kickoff meeting.

Within 14 days of the inspection, the Contractor shall submit a report of their findings. This report shall include the observed condition of all equipment and systems. If any equipment or systems are found to be deficient, not operating properly, or in need of repair, the Contractor shall state their opinion regarding corrective action, including replacement, repair, or operational changes/troubleshooting. Costs associated with corrective action shall be included if available.

In order to begin the initial inspection, all relevant requirements of Paragraph 2.1.1 must be complete to the satisfaction of the COR.

2.2 New Equipment Procure/Install (CLIN 0002):

2.2.1 Purchase of a New IDS System (Task 2.1): The Contractor shall replace the existing IDS (motion sensors, door position switches, keypads, IDS panel and etc.) in accordance with the referenced standards and any additional facility or other requirements listed herein. The equipment that will be used to replace the existing IDS shall be the most current industry approved products and shall be UL certified. The IDS shall be sized to provide coverage for a 497 SF secure facility and 85 SF secure vestibule. Drawings and schematics will be provided upon contract award.

This new system is required to be purchased, installed, commissioned, and be fully functional within 730 days of contract award.

2.2.2 New Camera and Monitoring System (Task 2.2): The Contractor shall procure and install a new camera, network video recorder (NVR), and monitor to view the SCIF entrance. The camera must be placed in such a way that the viewer must not be able to observe classified information when the door is open nor external control pads or access control components in accordance with ICD 705 Tech Spec Chapter 11, paragraph D.4.

The new camera system is required to be purchased, installed, commissioned, and be fully functional within 60 days of contract award.

2.2.3 Manuals & Training: Upon completion of all installation tasks, the Contractor shall provide all operations & maintenance (O&M) and training manuals for all newly installed systems. The Contractor shall also provide on-site training to SWD-F personnel related to operating and maintaining any new equipment.

2.2.3 Cybersecurity hardening of New Equipment. The Contractor shall complete the cybersecurity hardening of all NEW equipment in their own facilities prior to installation on site.

2.2.4 Worksite Management and Housekeeping. While installing or replacing equipment, the Contractor shall maintain the worksite in a reasonably neat appearance, and shall perform daily cleanups of the worksite at the conclusion of each workday. The Contractor is responsible to secure all tools and materials at the close of business. The Contractor shall protect all materials from exposure to the elements. Note that this requirement applies to all aspects of contract performance, including regular and corrective maintenance tasks..

2.3 Regular and Reoccurring Maintenance (CLIN 0003, 1003, 2003, 3003, and 4003):

2.3.1 Regular Maintenance and Inspection Services (Task 3.1). The Contractor shall maintain and service the current IDS and incorporate any upgraded systems into their maintenance and service plan after upgrades are complete. The Contractor shall perform maintenance and service for the existing Electronic Security System (ESS) and any new ESS equipment installed during the period of performance as described in this PWS.

All equipment is to be maintained per the manufacturer’s recommendations. In addition, the Contractor shall regularly test and inspect all IDS equipment to ensure they are functioning properly. All possible alarms and entry control elements, to include intrusion, tamper, loss of power or communication, proper annunciation, and graphics call-up (when applicable), shall be exercised to confirm operability. Testing shall also include proper voltage readings for equipment. All regular maintenance shall be executed in accordance with the Government accepted Maintenance Plan (see Paragraph 4.4.1). Additionally, the Contractor shall ensure that the ESS Service Agreements and software licenses are up-to-date and current as part of the regular maintenance program.

2.3.1.1 Inspection & Testing Frequency: Testing and documentation methods shall comply with the referenced codes, standards and manufacturer’s recommendations. Where there are no records indicating the date of the last test performance, the Contractor shall assume no test was performed and proceed accordingly. Testing shall be conducted during the regular maintenance year in accordance with the following table or the manufacturer’s minimum maintenance recommendations, whichever is more frequent:

During regular maintenance in general, the Contractor shall observe the condition of the equipment under maintenance and shall notify the Contract Officer Representative (COR) if faulty or potentially fault equipment is discovered. The information to be provided in this case shall include, at a minimum, the location, model & serial number of the part, and a description of the troubleshooting tests that have been performed.

2.3.1.2 Customer Support Center (CSC). As part of their regular maintenance services, the Contractor shall establish and operate a CSC and shall be the single point of contact for reporting all maintenance related requests. The single point of contact shall speak fluent English or immediately transfer the call to a fluent English-speaking qualified individual. The Contractor shall have procedures for receiving and responding to technical inquiries and service requests 24 hours/seven days a week. A single telephone number shall be provided by the contractor for the receipt of service requests and technical inquiries. The CSC plans and procedures must be provided within the Maintenance Plan (See Paragraph 4.4.1). Service requests shall be considered received by the Contractor at the time and date the telephone call is placed by the authorized Government representative. The Contractor shall separately document each service request, as received. The status of any service request must be provided within two (2) hours of any inquiry during normal working hours. The CSC will document the service request, coordinate resources and monitor progress to ensure the resolution of all work. Although the primary purpose of the CSC is to communicate and document corrective maintenance requests, the cost for operating this service shall be included in the price for regular maintenance (CLINS 0002, 1002, 2002, etc.).

2.3.1.3 Cybersecurity Continuous Monitoring: The contractor shall maintain the cybersecurity posture of the system IAW the approved system Continuous Monitoring Strategy in the approved Authority to Operate (ATO). As this system will reside on a Closed Restricted Network a Quarterly Patch Cycle will be followed. This effort includes but is not specifically limited to regular scanning, patching, updating, STIGing, POA&M updates and security control review of all associated components of the system. Any recommended changes to security control policy will be documented and delivered to the Information System Owner and Organization Information System Security Manager (ISSM). The contractor is responsible for documenting all updates and changes to the system IAW the Change Management process outlined in the approved ATO, as well as participating in all system related Change Management meetings and functions. Change documentation will be provided to the correct government/customer Change Management representative. As this system will reside on a Closed Restricted Network a Quarterly Patch Cycle will be followed. The contractor will provide documentation showing that Pre and Post patching and remediation scans were completed as well as documentation of any patches or updates applied. A Cybersecurity Sustainment deliverable shall be required to indicate what efforts were conducted during the last visit, identifying any issues, resolutions, output of any scans, mitigations, etc.

2.3.1.4 Adjustments in Maintenance Responsibilities: Fluctuations in the quantity of the equipment to be serviced throughout each of the option years could result from a reduction through attrition or gain because of added coverage. The Contractor shall also be responsible for corrective maintenance and service for all IDS elements in use, but not the preventive maintenance for increases in equipment quantities during the current, awarded maintenance period. Two (2) months prior to the expiration of the current awarded period of performance, the Contractor shall provide the Government a consolidated list, listing all increases and decreases of equipment within. The Government may use this list to modify the preventive maintenance requirements for the next option year.

2.3.2 UL Re-Certification (Task 3.2): The Contractor shall ensure the UL requirements for all elements and components of the system are kept up-to-date and current, including testing and recertification every six (6) months from the date of the current UL certificate which is 30 November 2025. The recertification process shall be completed prior to the expiration of the current certification. Corrections that can be accomplished without additional parts (except minor screws or wire) such as loss or broken wires, misalignments, cleaning, tightening, and adjustments shall be considered a regular maintenance requirement and shall be executed by the Contractor as required without a corrective maintenance service order (SO).

2.3.3 Period of Performance: Regular maintenance requirements are for a one-year base period (CLIN 0003) with four (4) one-year option periods (CLINS 1003, 2003, 3003, and 4003) beginning upon issuance of Notice to Proceed (NTP). The KO will issue an NTP specifically for these CLINs once mobilization requirements are complete. The Government may elect to exercise one or more option periods and there is no guarantee that option periods will be exercised.

Regular maintenance service shall be priced on a “per-month” basis and invoiced no more than monthly. Regular Maintenance service cannot begin until the Contractor meets all the mobilization requirements in Paragraph 2.1 and the KO issues NTP. The Contractor shall schedule their mobilization efforts such that regular maintenance work can be authorized within 30 days of contract award.

2.4 Corrective Maintenance (CLIN 0004) – Not to Exceed (NTE) $5,000: The Contractor shall have the capability and expertise to perform corrective maintenance (repair) services on all IDS systems and components. Repairs under this CLIN will be authorized using service orders (SOs) issued against the NTE value of this CLIN using the process described below. Potential SOs (i.e., repair projects) may be identified by the Contractor during the course of regular maintenance activities or by the Government.

Repairs may include the overhaul, or the replacement of non-functional parts or materials that have failed, that require continual repair or show signs of imminent failure. Repair work may also include inspection, testing, adjustment, calibration, part or component replacement and programming, modernization, and cybersecurity (CS) support as required to complete the service request. Repairs may be utilized to modernize outdated equipment, move equipment, or provide additional coverage within the limits of a SO. This CLIN may also be used to support cybersecurity software updates or to run any diagnostic scans.

2.4.1 Corrective Maintenance Service Order (SO) Procedures: The Contractor shall submit a SO request for all repairs as applicable, regardless of how the potential repair work was initiated.

Any repair shall require a SO. A single SO for repair shall be limited to equipment serviced under a single controller, head-end equipment, or IDS servicing a logical area (i.e. all IDS equipment at one building). SOs are used for actions that require little or no design, and are less than $100,000.00, and are of short duration. If the Contractor believes a potential repair action may not meet these limitations, they shall immediately contact the COR and Contracting Officer for further guidance.

After the need for repair is identified, the Contractor shall prepare a SO describing the work to be performed and the proposed cost. All potential SOs shall be requested using the attached Service Order Form, see Attachment 2. Once an SO request is accepted by the Government (including the price, which may be subject to negotiation), the amount of the SO will be deducted from the NTE amount (until all funds are exhausted or replenished by contract modification) and the Government will issue a Notice to Proceed (NTP) for that repair action/SO.

SOs for repair should only include direct labor costs related to the repair, materials and equipment, shipping, and for a minimal amount of labor so that the maintenance manager may process the SO. All Supervision, administration, and management costs for repair SOs shall be addressed under the firm fixed portion (i.e., CLIN 0003 and subsequent yearly optional CLINs) of the contract and not on each SO unless the SO is for new installation or upgrades.

SOs will be processed as follows:

SOs whose cost(s) (initial investigation & repairs) does not exceed $500.00 are pre-approved and the Contractor may proceed to complete the SO, provided enough funding remains on the NTE CLIN. It is the Contractor’s responsibility to track the remaining amount of funding on this CLIN and to inform the COR if there is a risk that a repair action, even one of this size, could exceed the remaining funds.

SOs whose cost(s) (initial investigation & repairs) range between $500.00 and $2,500.00 require COR approval before work may be initiated.

SOs whose cost(s) (initial investigation & repairs) exceed $2,500.00 require KO approval before work may be initiated.

All SOs upon completion must be signed by the COR to indicate Government acceptance. SOs cannot be invoiced until the Government accepts the work in writing. The Contractor shall furnish a copy of the final, signed SO to the COR with all invoice requests and maintain a copy for their records.

2.4.2 Corrective Maintenance Response Times: Corrective maintenance requirements shall be categorized as either “Regular” or “Emergency” actions. The Government COR will determine how each corrective maintenance requirement will be categorized. Emergency actions are to be considered urgent and have more stringent response time requirements.

Response and completion times for corrective maintenance shall be in accordance with the following definitions:

*Repair Time starts immediately after the telephone response.

The Contractor shall have the capability to respond to both regular and emergency repair orders as described above. No travel will be authorized or reimbursed for either type of activity unless required by extenuating circumstances. Any type of travel related cost must be specifically approved in advance by the KO.

2.4.2 Removal of Existing Equipment: A SO may be utilized to remove ESS equipment that is no longer required. All sensitive equipment not within an enclosure such as motion sensors, and electronic equipment shall be boxed and packed with packing material and identification labeled on the box exterior. Computers, primary control units, and digital video recorders (DVR) removed from service shall have all memory wiped after coordination with the government representative.

2.4.3 Replacement of Components with Non-Identical Parts: While executing a repair, if the Contractor determines that a broken electronic component cannot be replaced with an identical component, the Contractor shall provide information concerning compatibility and cybersecurity risks of utilizing the replacement part. Approval shall be obtained from the Government COR before the replacement can be utilized.

2.4.4 As-Builts: The Contractor shall provide as-built drawings or update existing drawings for any SO that involves adding or upgrading equipment. Drawings shall be in AutoCAD and Adobe formats. All drawings shall be marked “Control Unclassified Information”

2.4.5 Repair of Items Under Warranty: For any failure of equipment currently under warranty, the Contractor shall determine whether the fault is due to the warranted issues or other causes. If it is determined that the fault is due to other causes, then the Contractor shall repair the fault in accordance with the regular corrective maintenance processes described herein. If it is determined that the fault is due to the warranted equipment then the following steps are required to be performed:

The Contractor shall coordinate with the COR for permission to execute repair of a warrantied item. If permission to repair is provided, then the Contractor shall remove the warranted equipment and turn it over to the COR for shipment of equipment for repair. Upon return of equipment the Contractor shall re-install it. If the equipment has already been replaced with a spare, then the repaired equipment can be placed in the spare inventory.

2.4.6 Period of Performance: This CLIN shall be in effect for the duration of the regular and re-occurring maintenance CLIN (CLIN 0002, 1002, 2002, etc.). This means as long as the yearly options are exercised for regular and re-occurring maintenance, this CLIN will remain active. Likewise, work on this CLIN shall not begin until the NTP for CLIN 0003 (and subsequent yearly CLINs) is issued by the KO.

The Government reserves the right to increase the value of this CLIN as repairs occur and funding is reduced from the initial NTE amount. The Government anticipates adding approximately $5,000 every year to this CLIN but reserves the right to add more or less funding as repair priorities and the frequency required for corrective services dictate. Any unused funding remaining on this CLIN at contract completion will be de-obligated from the contract amount and returned to the Government.

2.5 Spare Parts and Consumables (CLIN 0005) – NTE $1,000: This contract includes the requirement for the Contractor to develop a spare parts inventory plan and to procure spare parts and consumables which are used frequently or are required to be on-hand to ensure timely repair of critical systems. The Contractor shall generally attempt to utilize those spares on-hand to perform maintenance activities when practical (highly priced spare components which are not frequently required to be replaced do not need to be purchased as spares and kept in inventory). The Contractor shall also perform spare parts inventory management functions (e.g., re-ordering spares as the current stock is depleted, keeping an up-to-date list of spares on-hand, purchasing additional quantities of parts as conditions warrant, etc.). All spare parts shall be stored at the Transatlantic Division HQ in an area designated by the COR.

Shortly following contract award, the Contractor shall provide a recommended spare parts list to the site COR for review and acceptance. After acceptance of the parts list by the COR, the Contractor shall procure the spare parts needed and carry an inventory of these critical spare parts or provide the spare parts for the COR to minimize disruptions in service using the SO process (following the same procedures as described in Paragraph 2.4.1).

Initial spare part procurements shall be documented on a Service Order Form. Follow-on requirements shall be procured as needed using SOs (following the same procedures as described in Paragraph 2.4.1). A spare parts inventory list shall be maintained and provided in the semiannual status report (See Paragraph 4.4.3).

Parts and consumables ordered under this CLIN will be authorized using service orders (SOs) issued against the NTE value of this CLIN. Once an SO request is accepted by the Government (including the price, which may be subject to negotiation), the amount of the SO will be deducted from the NTE amount (until funds are exhausted or replenished by contract modification).

2.5.1 Replaced Equipment Disposition. All equipment, except batteries, that have been replaced shall be returned to the Government COR. Outdated, damaged, or replaced batteries shall be properly disposed of by the Contractor.

2.5.2 Period of Performance: This CLIN shall be in effect for the duration of the regular and re-occurring maintenance CLIN (CLIN 0003, 1003, 2003, etc.). This means as long as the yearly options are exercised for regular and re-occurring maintenance, this CLIN will remain active.

The Government reserves the right to increase the value of this CLIN as repairs occur, and funding is reduced from the initial NTE amount. The Government anticipates adding approximately $1,000 every year to this CLIN but reserves the right to add more or less funding as the rate of parts consumption dictates. Any unused funding remaining on this CLIN at completion will be de-obligated at contract completion will be de-obligated from the contract amount and returned to the Government..

3.0 APPLICABLE DOCUMENTS. Technical criteria for the work described herein as defined/governed by the most current version of the following criteria shall be applied during the execution of all work performed:

a. UFGS 28 10 05 Electronic Security Systems (ESS)

b. UFGS 28 08 10 Electronic Security System Acceptance Testing

c. UFGS 27 10 00 Building Telecommunications Cabling System

d. f. UFC 4-021-02 Electronic Security Systems, with Change 1

e. g. UFC 4-022-01 Security Engineering: Entry Control Facilities / Access Control Points

f. AR 190-13, The Army Physical Security Program

g. AR 190-51 Security of UNCLASSIFIED Army Property (SENSITIVE and NONSENSITIVE)

h. AR 380-67 Personnel Security Program,

i. AR 25-1, Army Information Technology

j. AR 25-2, Information Assurance

k. AR 530-1, Operations Security

l. AR 380-5 Department of the Army Information Security Program

m. NFPA 70, National Electrical Code, 2011 Edition

n. NFPA 101, Life Safety Code

o. ICD/ICS 705 Version 1.1, Intelligence Community Directive/Standard

p. IC Tech Spec – for ICD/ICS 705 Version 1.5.1, Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities

q. ICD 705, Sensitive Compartmented Information Facility

r. ICD 705-1 Physical and Technical Security Standards for Sensitive Compartmented Information Facility

s. ICD 705-02., Standard for the Accreditation and Reciprocal Use of Sensitive Compartmented Information Facilities

t. The Federal Information Security Management Act (FISMA)

u. Committee National Security Systems, Policy No. 11

v. Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIGs)

w. DoD Instruction 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT)

x. DoD Instruction 8570.01 Information Assurance (IA) Training, Certification, and Workforce Management

y. DOD 8570.01-M Information Assurance Workforce Improvement Program

z. DoD Directive 8140.01, Cyberspace Workforce Management All deliverables shall be marked as CUI (Controlled Unclassified Information). SCIFs are not to be labeled as SCIF in the deliverables. The use of DoD SAFE (https://safe.apps.mil/) shall be used to send CUI documents to the COR.

4.0 CONTRACT REQUIREMENTS

4.1 General Provisions: The Contractor shall supply all equipment, materials, documentation and labor required to execute this ESS Contract. The Contractor shall provide qualified specialist technicians to perform maintenance, service, adjustment, and repair of IDS, CCTV, ACS and other ancillary equipment supporting ESS equipment covered by this contract.

It is the Contractor’s responsibility to provide sufficient manpower to support all corrective maintenance service orders and preventative maintenance activities. It shall be the Contractor’s responsibility to monitor the maintenance and repair type work for efficiency, such as not allowing two people to work on the same job unless job circumstances require more than one technician on site.

All supplied equipment and materials shall be consistent with existing equipment and manufacturers. All work is to be done in accordance with (IAW) industry standards, most current ICD 705 Tech Spec Electronic Security System (ESS) Guide Specifications, manufacturers’ recommendations, and all applicable U.S. regulations and codes (See Paragraph 3.0). The Contractor shall utilize the latest DoD approved Operating Systems for all systems provided. Windows Server 2025 and Windows 16 are the current approved versions of Microsoft OS software. All network hardware (routers and switches) provided will be selected from the DISA Approved Products List.

The Contractor shall comply with all requirements of the Army Corps of Engineers Information Technology (ACEIT), or its equivalent authority, related to repair or installation of transmission equipment, systems, and software.

The Contractor shall make no public disclosures of work being performed under this contract.

If video, still photos, or digital photos must be taken during the execution of a task under this service contract, the contractor must provide a written request to the COR. If the request is granted, the COR will leverage internal resources to provide the contractor with the needed documentation. Video, still photos, and digital photos taken during the execution of this contract will be turned over to the Government with their associated negatives and files at the completion of task/work effort. Digital photographs shall be submitted to the Government on compact discs in Joint Photographic Experts Groups (JPEG) format, and the contractor shall destroy all associated files from its records.

4.2 Resources/Key Personnel

4.2.1 Program Management: The Contractor shall efficiently and effectively manage their performance under this contract to ensure all the necessary technical, business, and administrative planning; organizing, managing, coordinating, and tracking (e.g., cost, schedule, deliverables, etc.); performance management, risk management, component procurement management, system engineering management, resource management, data management, and subcontract management are performed in accordance with the requirements of this PWS.

The Contractor will provide sufficient personnel, both in number and qualifications, to perform the work described herein. The Contractor’s Program Manager will be the Government’s primary point of contact (POC) for work to be performed under this contract. The Contractor’s Program Manager will keep the Contracting Officer (KO), and Contracting Officer’s Representative (COR) informed of any potential problems and provide recommendations on solutions for Government consideration.

The Contractor will ensure that deliverables are completed in a thorough and timely manner. The requirements in performing this contract demand that the Contractor's technical, analytical, and administrative support and the level of expertise, experience, and demonstrated performance of Contractor personnel involved in the execution and development of each deliverable must be sufficient to ensure acceptable performance of the requirements of this PWS.

The Program Manager will provide sufficient oversight and supervision of this contract, and associated Contractor staff, in order to ensure all employees are functioning within their designated labor categories/disciplines and at acceptable levels of performance, performing their assignments related to each deliverable, are completing tasks in a timely manner, and are adhering to all reporting requirements.

The Contractor will designate by name, in writing, a Program Manager and an alternate, who will act for the Contractor when the Program Manager is absent and provide a copy of the designation letter to the COR no later than (NLT) 14 calendar days after the contract period of performance (POP) start date. The Contractor’s Program Manager, or alternate, will have full authority to act for the Contractor on all contract matters relating to operation of this contract. If the Contractor’s designated Program Manager is ever replaced by another, different, Program Manager, a new designation letter shall have to be sent to the COR defining the new, and alternate, Program Manager prior to departure of the Contractor’s previously designated Program Manager. The Contractor’s Program Manager will be the POC between the Contractor and the KO and COR.

The Contractor’s Program Manager Responsibilities will include, but are not limited to, the following:

· Planning and coordinating all activities to support the PWS requirements,

· Maintaining close communication and coordination with the Government for the duration of the contract, including reporting of all problems encountered in executing this contract,

· Coordinating all deliverables with the Government as stated in the PWS requirements,

· Ensuring that all contract PWS requirements are met,

· Providing administrative support, supervision, and management of all Contractor personnel, equipment, and materials,

· Ensuring that all the Contractor’s Quality Control Standards required, and approved by COR, are met as specified by this contract, thus assuring all aspects of this contract will be completed to the satisfaction of the SWD-F Physical Security Program Manager.

4.2.2 Technician Requirements: The Contractor must be UL certified. Any individual performing technician services shall have certifications and/or training in good standing with the vendor on the systems (See Paragraph 1.0) being serviced. Contractor technicians must be certified to work on all applicable ESS systems, including the communication components.

Technicians must be able to configure, troubleshoot and repair communication equipment within the ESS network infrastructure. Primary first responder maintenance technicians must have at least five years of experience servicing ESS and communication equipment. Primary technicians shall have a certification in IDS, ACS and CCTV systems for UL. The Contractor shall submit the training, experience, and certifications of the primary and alternate technician(s) within 14 days of contract award. The Contractor will not be permitted to begin on-site maintenance until their list of technicians are deemed acceptable. The Contractor must have a qualified replacement any time the primary technician(s) is/are not available. The Contractor must be located within a 100-mile radius to respond/ be on site in the event they are needed to physically trouble shoot a repair. All Contractor personnel directly involved in the execution of this program must be U.S. citizens.

4.2.3 Contractor Personnel Changes: During the execution of this contract, if there is a change in personnel from those identified in the Contractor’s initial designation, the Contractor shall notify the COR as soon as the change is known. The Contractor shall provide documentation to show that the new personnel have the training and certifications required by this PWS. Notifying the COR and providing documentation shall be done within 10 days of the change in personnel. The Contractor shall meet requirements to access the installation covered under this contract.

4.3 Key Control: The Contractor shall establish and implement methods of making sure all keys (including key cards) issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR. In the event keys are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government may elect to replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than Contractor employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons.

4.4 Planning and Reporting:

4.4.1 Maintenance Plan. The Contractor shall develop a Maintenance Plan for this contract with 21 days of contract award. The Maintenance Plan shall include, as a minimum, the following:

How the Contractor intends to address the regular and corrective maintenance requirements of the contract, including:

· A narrative describing the work to be performed.

· A list of tasks, including frequency and staffing requirements for regular maintenance based on the manufacturers’ data and system security standards.

· Procedures for responding to corrective maintenance service requests.

· Procedures for testing systems after repairs are performed.

· Applicable codes, standards and regulations.

· A list of reports to be prepared and submitted, and records to be maintained.

· Status of UL re-certification efforts, to include the schedule for the next occurrence.

· Standard testing procedures to be performed to support regular and corrective maintenance.

· A detailed schedule for the duration of the period of performance detailing scheduled preventive maintenance. The schedule shall provide dates, location of equipment, and equipment type and model number. No changes to the schedule shall be made without prior approval from the COR.

· Checklists indicating tasks and tests conducted during regular maintenance for alarm zone equipment. Checklists shall list the site, building number, equipment quantity, equipment model, and serial numbers.

· Spare parts recommendations.

· Customer Support Center (CSC) plans and procedures.

4.4.2 Monthly Situation Report (SITREP)

The Contractor’s Program Manager will submit a monthly SITREP in Microsoft Word (.doc) and Adobe (.pdf) format, for Government review and comment, to the COR NLT the 5th day of each month. The Contractor is not responsible for setting up and coordinating the Government review and comment period.

The SITREP shall address each on-going work effort separately and shall include at a minimum (but is not limited to): a summary of operations and activities, significant accomplishments, lessons learned, and any outstanding issues/challenges.

4.4.3 Semiannual Status Report: The Contractor shall submit the semiannual report to the COR within ten calendar days after the scheduled maintenance, which shall include complete summary reports of all maintenance and service activities, to include the following:

· Approved Service Orders (SOs) that have been concluded and signed by the COR as being completed.

· All service tickets with all data typewritten (not handwritten) with the accepting Government official’s printed name and signature.

· A summary of all regular maintenance activities conducted since the last report with completed checklists.

· All corrective maintenance service requests formatted as shown in Attachment 1. The form shall be provided in digital Excel (.xls) format and shall be cumulative for all activities conducted in the current contract year to date. (The Government will provide an electronic copy of Attachment 1)

· A short narrative that describes work that has been done, reports of any problems or outstanding issues, schedules for any ongoing or outstanding SOs, and any other information relevant to the project.

· Status of UL re-certification efforts, to include the schedule for the next occurrence.

· A list of all software agreements (SA), a list of all current versions of software for all components of the IDS and badge access systems under those SAs.

· A schedule to update software listed under the SA.

· A spare parts and consumables inventory list, including a list of any items procured, a list of parts and consumables utilized in maintenance actions, and a list of equipment taken out of service/replaced/disposed of since the previous report.

· A list of current equipment showing location, model number, serial number (if applicable), and expiration date of warranty (if applicable). Changes to the list since the previous report shall be highlighted in the list.

4.5 Cybersecurity Hardening: Existing system components will be hardened on site (see Paragraph 2.2 for newly purchased equipment). These activities include system patching, updating, STIGs, and any other secure configuration requirements. The Contractor will provide the following artifacts documenting completion of these activities: System Description, Network Diagrams, Dataflow diagrams, Hardware and Software lists, Ports, Protocols, and Services (PPS) list, system pre-scans and post scans (NESSUS and SCAP/SCC), as well as all applicable STIG Checklists, and a POA&M or deviations document listing and justifying exceptions to required patches, IAVAs, and STIGs. The system provided will be hardened to 100% ACAS/Nessus/SCAP/STIG compliance.

A Cybersecurity Sustainment summary shall be included in status reports (see above) to indicate what efforts were conducted during the most recent visit, identifying any issues, resolutions, output of any scans, mitigations, etc.

4.6 Physical Security: The Contractor shall provide a list of the personnel, with the required credentials, performing the work to the COR within 14 calendar days after contract award. All Contractor personnel shall be U.S. Citizens and speak fluent English.

The Contractor shall comply with all Antiterrorism/Operations Security (AT/OPSEC) requirements listed below:

4.6.1 AT Level 1 Training. All contractor employees, including subcontractor employees, requiring access to Middle East District facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 14 calendar days after contract start date. Upon request, the contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the contracting officer, within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: https://jkodirect.jten.mil/.

4.6.2 Facility Access and General Protection Policy and Procedures. All contractor and all associated sub-contractors employees shall comply with all Southwestern Division/Middle East District installation/facility access and local security policies and procedures (a list of these policies will be provided by the COR upon request). The contractor shall also provide all information required for background checks or background investigation and to meet installation/facility access requirements to be accomplished by the Southwestern Division Security Office. The Contractor workforce must comply with all personal identity verification requirements (FAR Clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by Department of Defense (DOD), Headquarters, Department of the Army (HQDA), and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

4.6.3 Suspicious Activity Reporting Training (e.g. i-WATCH, CorpsWatch, or See Something, Say Something). The contractor and all associated sub-contractors shall receive a brief/training (provided by the Southwestern Division) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 14 calendar days of contract award and within 14 calendar days of new employees commencing performance with the results reported to the COR NLT 14 calendar days after the completion of the training.

4.6.4 Requirement for OPSEC Training. All new Contractor employees shall complete Level I OPSEC Training within 30 calendar days of their reporting for duty. Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites: https:/www.iad.gov/ioss/ or http://vllww.cdse.edu/catalog/operations-security.html; or it can be provided by the MTC OPSEC Officer in presentation form which will be documented via memorandum.

4.6.5 Information Assurance (IA)/Information Technology (IT) Training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees performing IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

4.6.6 Escorting Requirements for Classified and/or Sensitive Materials and/or Sensitive or Restricted Areas. All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance or access privileges, must be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas

4.6.7 Pre-screening Candidates Using the E-Verify Program. The Contractor must pre-screen candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements. The Vendor must ensure that the candidate has two valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible candidates must be provided to the COR no later than 3 business days after the initial contract award. When contracts are with individuals, the individuals will be required to complete a Form I-9, Employee Eligibility Verification, with the designated Government representative. This Form will be provided to the Contracting Officer and shall become part of the official contract file.

4.7 Safety: Work shall be performed in accordance with United States Army Corps of Engineers Safety and Health Requirements Engineering Manual (EM) 385-1-1.