PWS - UHHZ180032 15 Sept 2023_FINAL.docx

PERFORMANCE WORK STATEMENT FORMAT (5-PART)

OPERATIONAL CONTRACTING

Project: UHHZ180032

PR: F3Q2AD3195AW01

20230915

1.0 DESCRIPTION OF SERVICES. The contractor shall provide all services to support this project at Robins AFB, GA. The contractor shall provide all equipment, tools, materials, transportation and services for the upgrade of Supervisory Control and Data Acquisition (SCADA) system at Robins.

2.0 SERVICES SUMMARY (SS).

Ref Performance Threshold

No Deficiencies in SCADA system upgrade.

All assets installed will be fully functional at final inspection of contract prior to payment.

Technical POC contact assigned for service Billy Bandy billy.bandy@us.af.mil 478-327-8958.

3.0 TECHNICAL REQUIREMENTS

The contractor shall provide the hardware, software and services provision as indicated in the following paragraphs, for the SCADA system upgrade, radio communication infrastructure and installation of the video wall at the Building 1555 control center.

The contractor shall provide Minsait ACS Precise Real-time Information Systems Management (PRISM) software upgrade, Minsait Advanced Control System (ACS) Remote Terminal Unit (RTU) Upgrade, Radio Communications Hardware Upgrade, and Control Center Display Wall. The contractor shall provide:

3.1 Master Stations GE MDS and Antennas Upgrade

In summary:

· 5 MDS stations

· 6 Omni Antennas

Robins AFB has confirmed that

· there are two MDS master stations in the enclosure at 12th St. Water Tower

· there are 2 omni antennas at 12th St. and 2 at Main St. water towers and they are already installed and cabled. These must be replaced with new omni antennas and new cabling.

· at the control, center the omni antenna and its cabling must be replaced with new elements.

· the enclosure available at Main St. water tower is not sufficiently large to host an MDS, and Robins AFB will replace it with a larger one, before the work here described is started.

All the cabling and material required for:

· installation, testing and commissioning of Master Stations.

· installation, testing and commissioning of Omni antenna at DR site.

· replacement, testing and commissioning of 2 Omni antennas at 12th St., 2 Omni antennas at Main St. towers and 1 Omni antennas at Control Center.

Contractor to remove the “cold” MDS master station at 12th St and leave the “hot” MDS in place and functioning. The new MDS at 12th St. must be installed using one of the two Omni antennas and the existing MDS must be connected to the other. So, the existing MDS at 12th St. water tower and the new one, must be left working in parallel, and the existing MDS must not be removed before the activities at 3.2 and 3.3 are terminated.

All new MDS must be configured to communicate on the pair of frequencies available at Robins AFB but not used by the existing radio communication devices. These frequency pair will be provided by Robins AFB, and it is not part of the supply of the contractor.

The new MDS at the DR site will be connected but not in use until the SCADA node is installed in the DR site.

Associated Services:

· extraction of all components related to the existing radio equipment.

· replacement with new radio equipment.

· All radio components removed and replaced will be disposed of by Robins AFB.

3.2 Conversion to TCP/IP of existing NTX-SD09 sets

At Robins AFB there 11 NTX-20 recently installed which are configured with their corresponding communication equipment, for serial communications. Prior to issuing this service request, Robins AFB has proven that it is possible to establish a TCP/IP communication between the existing SCADA and an NTX-20 and has therefore decided to use TCP/IP communication to the 11 RTUs mentioned before.

The contractor will convert to Ethernet as part of the upgrade and reconfigure their connectivity in the existing SCADA, before the SCADA is upgraded.

· 10 RJ45 Ethernet Cables

· 1 x Media converters TCP/IP to Fiber for Pos 19

· 1 X Media converters Fiber to TCP/IP at CC

· 1 X Media converters Fiber to TCP/IP as spare No optic fiber connection is available at DR site, so the signals from Pos 19 will not be sent to the DR site.

Associated Services:

· Reconfiguration of SD9 to communicate over the pair of frequencies available at Robins AFB but not used by the existing radio communication devices. These frequency pair will be provided by Robins AFB, and it is not part of the supply of the contractor.

· Replacement of the serial RTU-Radio connection with the Ethernet connection through TCP/IP port.

· Reconfiguration of NTX to communicate through Ethernet

· Configuration of NTX in SCADA DNPNet[footnoteRef:2] [2: DNPNet is a software component provided by the SCADA vendor Minsait ACS that allows communications to RTUs using TCP/IP, this component is available in the existing SCADA version and in the upgraded SCADA version.]

Robins AFB is responsible for providing networking support and IP addresses for all the RTUs to enable TCP/IP communications.

3.3 Minsait ACS RTU Upgrade and Radio Communications Hardware Upgrade

· 63 NTX-20

· 2 NTX-200

· 58 SD09

· 2 x Media converters TCP/IP to Fiber for Pos 8

· 2 X Media converters Fiber to TCP/IP at CC

· 2 X Media converters Fiber to TCP/IP at DR All the cabling and material required with installation, testing and commissioning of RTU.

Associated Services:

· extraction of all components related to the existing RTU’s.

· installation of the RTUs specified in this sections of this document.

· removal existing antennas and connecting cables from the existing RTU’s

· replacement and securing with new cable and antennas corresponding with each radio placement.

· installation of hasp and tamper switch for securing and notification for cabinet door (base will provide padlocks)

· Configuration of NTX database with the database of the replaced RTU.

· Configuration of NTX in SCADA DNPNet.

The RTUs are shipped by Minsait ACS to Robins AFB and then handed over to installers by Robins AFB for installation.

Robins AFB is aware that the weather integrity of the RTU cabinets is not guaranteed, since the installation is in existing RTU cabinets that are aged and may not be weather tight and agrees to the installation of the new RTUs and Antennas in the existing cabinets.

All RTU components removed and replaced will be disposed of by Robins AFB.

All the cabling and material required with installation, testing and commissioning of Radios.

Associated Services:

· extraction of all components related to the existing radio equipment.

· replacement with new radio equipment.

· All radio components removed and replaced will be disposed of by Robins AFB.

The optic fiber infrastructure and communication are provided and serviced by Robins AFB and are not part of the scope of the contractor.

3.3.1 Minsait ACS PRISM software upgrade including

SOFTWARE

The existing Robins AFB water scripts will be transitioned to the upgraded PRISM system

HARDWARE

The contractor shall provide:

· Project Management

· Evidence of delivery of all hardware at the Minsait ACS Factory

· Staging of the system on the manufacturing floor at the Minsait ACS Factory

· Configuration, migration of existing displays and scripts

· Baseload of all PRISM machines with the PRISM Blueprint image

· Installation of the database -retrieved from existing system- into a PRISM master and converted to new version.

· Migration/Conversion of the system’s existing graphic displays into PRISM.

· Loading of PRISM applications and configuration with Robins AFB’s input

· The existing Robins AFB water scripts will be transitioned to the upgraded PRISM system

· FAT (Factory Acceptance Testing)

· Delivery to ROBINS AFB Onsite Installation: Robins AFB will stage, network, and power the equipment

· SAT

· PRISM project closeout Robins AFB is responsible for providing networking support and communication between the Control Center and the DR site, for the SCADA servers.

3.4 Control Center Display Wall

SOFTWARE

Display Node)

HARDWARE

19.88 ft Wide x 4.48 ft. High x 0.29 ft. Deep 5x2 video array Robins AFB Control Room

Associated Services:

· Design, provision, installation, integration, and testing of the proposed solution.

· On-site operator training (and manuals) for Robins AFB personnel.

· Technical Support for one (1) year from installation

3.5 PWS for Cybersecurity

1. The contractor shall install at delivery all tested and validated security patches.

2. The contractor shall verify and provide documentation that all services and patches have been installed and current status.

3. The contractor shall mitigate all vulnerabilities discovered during the security scan testing and provide documentation (e.g. SCAP) of the passing results. Security scan software provided by Robins AFB, during staging phase.

4. The contractor shall verify functionality, based on manufacturer procedures at the conclusion of patches following the mitigation from point 3, and provide documentation of the results.

5. The contractor shall verify and provide documentation that equipment have been patched to latest compliance scanned passing score.

6. The contractor shall verify and document any contractor-configured or manufacturer default accounts, usernames, passwords, security settings, and other access methods are changed, disabled, or removed.

7. The contractor shall verify and document standard Linux log files.

8. The contractor shall disable, remove or modify all inactive, default or guest accounts pursuant to approved recommendations.

9. The contractor shall install and configure equipment with the latest supported and compliant operating systems (e.g. Windows 10, Server 2019, Linux) in use including licenses within that system.

10. The contractor shall provide personnel with expertise and certification that meets DoD 8570 IAT level II requirements.

11. The contractor shall install and configure equipment (e.g. routers, servers, gateways, firewalls, managed switches, etc.) meet compliance with DoD UCR2013, DFAR 252.225.7020 and FARS 52.225-5.

12. The contractor shall install and configure equipment (e.g. MacAfee) to meet the latest endpoint security solutions.

13. The contractor shall configure equipment manufacturer default username and passwords or their security characters to 15-characters length for compliance IAW DoD8520.03, July 2017.

14. The contractor shall install and configure wireless equipment to meet latest supported and compliant encryption (e.g. FIPS-140-2) for compliance IAW 8420.01, November 2017.

15. The contractor shall not install or configure equipment (e.g. Hubs, Bluetooth, ZigBee) to be transmitting information.

16. The contractor shall provide basic documentation (e.g. hardware/software list including application, riser/network diagram) to support system baseline and configuration.

4.0 GOVERNMENT FURNISHED PROPERTY AND SERVICES.

No GFP shall be provided.

5.0 GENERAL INFORMATION:

5.1 Security Requirements: The contractor shall meet all Robins, Air Force, and Department of Defense security requirements.

5.1.1 Government Security Regulations: The Contractor shall ensure personnel, information, system, facility, and international security requirements are met in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Air Force Instruction (AFI) 31-101, Integrated Defense, and Robins Air Force Base Instruction (RAFBI) 31-101, Installation Security.

5.1.3 Communications Security (COMSEC): The Contractor shall use only secure communications methods and/or equipment to transmit or otherwise transfer classified and/or sensitive, but unclassified, information in accordance with DoD 5220.22-M.

5.1.5 Access to Government Facilities

5.1.5.1 The Contractor shall ensure Contractor personnel who require access to Robins AFB or other Government facilities comply with the security procedures of the facility.

5.1.5.2 If Contractor personnel require repeated access to Robins AFB or another Government facility over the life of the contract/order, the Contractor shall ensure they complete, as applicable, a DD Form 1172-2 (Application for Department of Defense Common Access Card – DEERS Enrollment) to obtain a Common Access Card (CAC), an Air Force Materiel Command (AFMC) Form 496 (Application for AFMC Identification Card) to obtain an AFMC Identification Card, or an AFMC Form 387 (Contractor ID Card/Badge) to obtain a Contractor Identification (ID) Card/Badge.

5.1.5.3 All visitation requests will be submitted through the Joint Personnel Adjunction System (JPAS) to the contract security manager Security Management Office (SMO) code RX1MFN826. Visitations will be made available for review by the Group Security Manager (GSM) of the area where the task will be performed.

5.1.6 Operations Security (OPSEC): The Contractor shall ensure compliance with OPSEC requirements including procedures to protect classified and/or sensitive, but unclassified, Government projects and/or programs. The Contractor shall ensure Contractor personnel who perform work at Robins AFB or another Government facility comply with the OPSEC procedures of the facility.

5.1.7 Security Incident or Violation: The Contractor shall immediately notify the Government Security Office of any potential or actual security incidents or violations including potential or actual unauthorized disclosure or compromise of classified and/or sensitive, but unclassified, information.

5.2 Place of Performance: Services shall be performed at Robins AFB GA and contractor’s facilities.

5.3 Schedule: Contractor personnel shall adhere to Government holiday and family day schedules. The Contractor shall ensure Contractor personnel are available for support during the hours of 0700 through 1800 hours Monday through Friday.

5.4 Green Procurement Program (GPP): The contractor shall comply with the Green Procurement Program in accordance with Under Secretary of Defense (USD) Memorandum, Establishment of the DoD Green Procurement Program, dated August 27 2004, establishes the requirement for a GPP. The GPP is a mandatory federal acquisition program that focuses on the purchase and use of environmentally-preferable products and services. In accordance with FAR 23.404, Agency Affirmative Procurement Programs, the GPP requires 100% of purchases of Environmental Protection Agency (EPA)-designated products, included in the Comprehensive Procurement Guidelines (CPG) list, contain recovered materials unless the item cannot be acquired competitively within a reasonable timeframe, meet appropriate performance standards, and/or be acquired at a reasonable price. In accordance with FAR 23.101, Sustainable Acquisition Policy / Definition, the GPP requirement applies to all acquisitions, including services, using U.S. Government appropriated funds. The Green Procurement Program (GPP) includes these mandatory components:

(1) Recycled content products, also known as Comprehensive Procurement Guideline (CPG) Items http://www.epa.gov/cpg/products.htm

(2) Energy Star® and energy-efficient products; energy efficient standby power devices http://www.eere.energy.gov/

(3) Bio-based products http://www.dm.usda.gov/procurement/programs/biobased/awarenessbrochure_may2006.pdf

(4) Non-ozone depleting substances http://www.epa.gov/ozone/snap/lists/index.html

5.5 Contractor Safety Program. The contractor shall establish and maintain an acceptable safety program in accordance with their accepted Safety and Health Plan. The Air Force is part of the OSHA Voluntary Protection Program (VPP). All shall familiarize themselves with the requirements of VPP. Information on the VPP can be accessed at http://www.osha.gov/dcsp/vpp/index.html. Additionally, the contractor is responsible for the safety and health of all subcontractor employees. No more than two Class C mishaps per contract year and Zero Class A or B mishaps will be tolerated. All changes to the plan must also be submitted in writing and approved by the government via the DD 1423 Data Item Number Data Acquisition Document Number DI-ENVR-81375 for Contractor's Standard Operating Procedures (SOP) to receive the Contractor's Safety and Health Plan Update.

5.5.1 Safety and Health Plan: Within 10 calendar days after contract award, the contractor shall provide a copy of their company Safety Plan that is required to ensure compliance with the Occupational Safety and Health Act (OSHA) (Public Law 91-596). The Safety Plan shall be provided to the Safety Office for review. The Safety Office will provide acceptance or non-acceptance within 5 working days of receipt to the government point-of-contact who will notify the CO. (CDRL A001, Contractor’s Standard Operating Procedures, DI-SAFT-82080 NOT 1).

5.5.1.2 The contractor Safety Plan shall address in detail the items listed in the Contract Appendix C, Part II through Part IV as applicable. For task specific procedures identified in the Contract Appendix C, the contractor’s internal procedures for those tasks must be identifiable within the submitted Safety Plan or shall be provided in an amendment or addendum to the company’s Safety Plan. If task specific procedures identified in the Contract Appendix C, are not submitted with the contractor’s Safety Plan, the submitted Safety Plan will be returned as NOT ACCEPTED. The contractor will have 5 working days to resubmit the Safety Plan, amendment or addendum to address or correct issues identified for non-acceptance. The Safety Office will provide acceptance or non-acceptance of the resubmission within 5 workings days of receipt to the government POC who will notify the CO.

5.5.2 Safety Mishap/Incident Reporting: The contractor shall report all mishaps/incidents in accordance with the Contract Appendix C. The contractor shall immediately secure the mishap scene and damaged property and impound pertinent maintenance and training records until released by the Government’s Safety Office (78ABW/SE). Such release shall be accomplished through the CO. The contractor shall cooperate and assist Government personnel in the investigation of the incident and submit an Accident/Incident Report within 24 hours of the accident/incident. The Contractor shall require all subcontractors to comply with required safety, health and fire standards. (CDRL A002, Accident/Incident Report, DI-SAFT-81563 NOT 1)

5.6 Essential Services During Crisis. The Functional Commander/Director (FC/FD) has determined, by placing in writing their decision, that this requirement is not Mission Essential (M-E) in accordance with DFARS 237.76, Continuation of Essential Contractor Services.