PWS - Metasys Training and MX.docx

PERFORMANCE WORK STATEMENT (PWS)

for

99 CES METASYS CYBER CONTINUOUS MONITORING SERVICE

AND

ON-SITE METASYS TRAINING COURSES

10 July 2024

1.0. DESCRIPTION OF WORK

1.1. Metasys Cyber Continuous Monitoring Service. The Contractor shall provide all labor, equipment, material, transportation, administration, and supervision to perform all aspects of providing required quarterly maintenance and monitoring of the Nellis AFB Metasys ADX server located at Bldg 907.

The Contractor shall provide experienced System Security Engineers with required DoD 8570-01 certifications to perform the following software setup/configuration/hardening tasks on the existing ADX server hardware:

Cyber Lab and On-Site Efforts Update existing ADX Server with most current DISA STIG checklists as noted below:

Apply MS Member Server 2016 OS STIG Apply MS SQL 2016 Instance STIG Apply MS SQL 2016 Database STIG (includes all system and user databases) Apply MS .NET 4.x STIG Apply MS IE 11 STIG Apply MS IIS STIG Apply McAfee AV STIG Install Patches and Test existing Metasys Software and Applications Provide SCAP, STIG and Nessus reports.

Site Support Installation, Scan-Fix-Scan and Reporting Perform the following commissioning and support tasks at the site:

Create baseline back up new ADX to site provided secure location Restore SCT Archive to new ADX Sever Migrate and Upgrade JCI Historian Database to the new hardened ADX Server Support local ACAS scanning for Scan/Fix/Scan testing activity as necessary Setup JCI Launcher application on applicable workstations / Tech support on server

1.2. On-site Metasys Training Courses. The objective of these courses is to provide classroom instruction and hands-on training to repair and maintain Metasys Building Automation Systems, Mitsubishi/LG VRF digital control systems, and other CE Industrial Control Systems installed throughout Nellis AFB. Depending on at time circumstances, these courses may ne be conducted on-site, at Nellis AFB or at the vendors training location.

2.0. SPECIFIC REQUIREMENTS

2.1. Metasys Cyber Continuous Monitoring Service

2.1.1 General Scope: Contractor shall furnish all labor, equipment, material, transportation, administration, supervision and all else necessary to perform all operations in connection with successfully completing the service of performing required quarterly maintenance on the current Nellis Air Force Base (NAFB) Energy Management and Control System (EMCS)/Direct Digital Controls (DDC) system for an entire year. This will consist of four (4) quarterly full maintenance services provided to the Nellis Metasys server at Bldg 907.

2.1.2. Location: The project site is located at Main Base NAFB. NAFB is approximately nine (9) miles north of downtown Las Vegas on Highway U.S-93 (Las Vegas Blvd). NAFB consists of three (3) main areas: the Main Base, Area II, and Area III and two well sites located approximately 6 miles west of Nellis AFB on Craig Rd. The physical address of the project location is 4450 Devlin Drive, Nellis AFB, NV 89191.

2.1.3. Applicable Codes: All work must be in compliance with and conform to industry standards and applicable manufacturer’s recommendations. The Contractor shall be responsible for compliance with: Department of Defense Cybersecurity Risk Management 8570-0,1 UFC 04-010-06 Cybersecurity of the Facility Related Control Systems, AFGM 2017-32-01 Civil Engineer Control System Cybersecurity and AFM 17-1301 Computer Security.

2.1.4. Deliverables. 99 CES Shall provide escort personnel for the Contractor upon scheduling the dates of quarterly service with the 99 CES Representative.

2.2. On-site Metasys Training Courses. The Contractor shall provide the functional support required to fulfill this task objective as outlined below.

2.2.1. Material Support and Knowledge, Skills, and Abilities (KSA). The Contractor shall provide training instructor(s) for vendor specific training designed to ensure Government personnel receive the latest proprietary information needed to operate and maintain Metasys Building Automation Systems throughout Nellis AFB, NV.

2.2.1.1. The Contractor shall provide all training and support materials required during instruction.

2.2.1.2 The Contractor shall ensure instructors are well versed in specialized training materials and requirements (i.e., computers, tablets, Wi-Fi) to wholly execute the curriculum developed for the training courses.

2.2.1.3 The Contractor shall provide a copy of training material to all attendees.

2.2.1.4 The Contractor shall ensure instructors have the knowledge, skills and ability to provide comprehensive instruction for courses outlined in paragraph 2.4.

2.2.2. Deliverable(s): The Contractor shall provide materials to execute the plan of instruction and curriculum as required.

2.2.3. Areas of instruction: The Contractor shall provide training and instruction for the requested courses listed below as outlined in Johnson Controls 2024 Training Catalog:

Course 388 (Metasys System Extended Architecture for Building Operator) Course 4803 (Building CCT Programming)

2.2.4. Performance Schedule. The Contractor shall provide course on-site instruction as identified in individual orders.

2.2.5. Duty Hours. Monday – Friday, 0700 – 1600

Attachment A: Services Summary Table 1 - Services Summary

On-site training for all requested courses has been provided in accordance with training curriculum.

a)100% of deliverable requirements are met and received on time.

3.0. GENERAL REQUIREMENTS.

3.1. Utility Service Interruptions: If any utility will require interruption in service, the following apply:

3.1.1 Advance Notification: The Contractor shall submit written notification not less than 30 calendar days in advance of each interruption of each utility and/or communication service to or within existing buildings and facilities being used by others to include but now limited to natural gas, domestic hot water supply and electrical. Notify the Fire Dispatch Center and the Facility Manager for the facility prior to disconnecting, testing, or reconnecting the Fire Protection Systems, Security system, Communication system, HVAC System, electrical system or any other utility systems.

3.1.2 Duration: No single outage will exceed four (4) hours at a time or more than once in any two-week period unless approved in writing by the Contracting Officer. The time and duration of all outages will be coordinated with the 99 CES Representative by 99 CES Customer Service (702-652-2301 / 99ces.ceo.outagerequest@us.af.mil ). Utility outages required shall be scheduled so as to provide the minimum interference to the government.

3.1.3 Clearance: No outage may begin until the Contractor has applied for and obtained a completed Air Force Form 103, Base Civil Engineering Work Clearance Request. The Contractor shall apply for the clearance at the 99th Civil Engineer Squadron Requirements and Optimization office (702-652-2301) located in Building 843, 6060 McGough Parkway, Nellis AFB. Permit application shall be submitted a minimum of four (4) weeks prior to any outage as the Air Force portion of the permit typically takes 28 calendar days to complete. Utilities shall not be turned off until these clearances are approved.

3.1.4 Emergency: During work activity the Site Superintendent shall be on site and have emergency contact numbers to offices/shops on Nellis AFB that respond to first aid, fire, damaged electrical, communication, gas, water or other utilities.

3.1.4.1 Note: First responders within Nellis AFB will respond during accidents or injury that require immediate attention. Contractor must seek additional care at an off-base location if requiring further medical assistance.

3.1.4.2 Emergency Contact Numbers for Nellis: Dial 9-1-1 and mention to the operator that you are on Nellis Air Force Base. For emergencies pertaining to electrical, gas, water and other utilities, dial 702-652-2301.

4.0. GOVERNMENT FURNISHED ITEMS:

4.1. Government Provided Equipment. Government Furnished Equipment (GFE) – The Government shall provide a training classroom in building 843. The Contractor shall provide all other necessary training materials and equipment for their staff.

5.0. TRAVEL.

5.1. The Contractor shall make all travel arrangements and provide all travel accommodation for instructor(s).