PWS WAHC SECURITY SYSTEMS SERVICES MR.pdf

PERFORMANCE WORK STATEMENT (PWS)

WAMC Security Maintenance Service Contract

General Information

1. GENERAL: This is a non-personal services contract to provide maintenance of Womack Army Medical Center (WAMC) security systems including LenelS2 OnGuard ADV integrated with Milestone XProtect system, indoor/outdoor security cameras, access control locks, magnetic door locks, cabling, monitors, servers running Microsoft Server Operating Software (MS OS) and video storage, multiple displays that are vital to the LenelS2 OnGuard with Milestone XProtect Video Surveillance System (hereto known as VSS). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor personnel.

Womack Army Medical Center’s (WAMC) primary mission is to provide the highest quality care, maximize the medical deployability of the forces, and sustain exceptional education and training programs. WAMC supports the Fort Bragg Army installation, which is the largest military installation in the world by population and is home nearly 10 percent of the Army’s active component force. WAMC provides comprehensive care to prevent disease, restore health and maximize readiness of the active force and their families.

In order to better serve the forces and families at Fort Bragg, WAMC must provide a safe and secure area for products, employees, patients, and visitors. The VSS requires maintenance as the purview of WAMC, outlying health clinics, medical homes and support facilities, all systems and devices require maintenance and upkeep to include replacement and/or repair of existing equipment, troubleshooting and servicing, updating, security patching of all equipment and software which is necessary to maintain the technologies that attempts to stay ahead of risks to personnel, patients, and material goods. Planned maintenance is conducted to verify the operating status of current devices and systems, identify devices that will require replacement and planning to replace said devices to ensure the integrity of the recorded video and VSS is maintained. Throughout this PWS, any reference to “replace” or “replacement” indicates replacement as a more economical means of repair and does not refer to lifecycle replacement.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform security maintenance services, as defined in this Performance Work Statement (PWS), except for those items specified as government furnished property and services. The Contractor shall perform in accordance with (IAW) the terms and conditions of the contract and consistently with the established standards in this PWS and contract.

1.1.1. This contract to service WAMC’s VSS requires a one (1) year warranty to be provided on any newly installed hardware and for workmanship whereby the DHA may request call-backs if services do not function as they were designed. Servicer shall secure a 24-hour customer servicing representative who can be contacted to arrange for emergency repairs or replacement or technical or software related troubleshooting (travel to and from base of operations shall be the responsibility of the contractor and not billed to the government directly, all travel will be included in the price of service that is provided prior to the award of this contract and not after). Contractor shall perform all tasks with due diligence and shall verify proper function of the installed or repair devices prior to leaving each day. Contractor shall be provided and have access to existing ticketing system to track all technical and system change requests for audit and tracking purposes to ensure normal, priority and/or emergency requests are tracked and executed by Repair Order. All installed devices shall be compatible and able to feed back to the WAMC EOC (Emergency Operations Center) and the VSS. LenelS2 OnGuard with Milestone XProtect based products are the expected level of quality, but substitutions are acceptable if compatibility is assured.

1.1.2. This contract guarantees one (1) LenelS2 certified, installation technician, five days (40 hours) per week, to perform installs, repairs, services, moves, replacement, troubleshooting, and all scheduled and unscheduled corrective actions for all VSS related equipment. The technician will maintain all WAMC and Fort Bragg security requirements and be able to maintain continuity for purposes of ensuring the security for on-post and off post assets, in addition to troubleshooting.

1.1.3. This contract guarantees one (1) LenelS2 – Milestone certified system administrator (SysAdmin) integration time five days (40 hours) per week at minimum, time used by systems engineer for systems maintenance, updates, configuration changes, installs and other software system duties. During the contract option year or year of execution the technician and SysAdmin will provide service, repairs, replacement, and troubleshooting to all existing security systems including servers and software.

1.1.4. Technician and system administrator (SysAdmin) will continue to be present at WAMC or associated buildings under its purview for the hours and amounts detailed for the year of execution. The Technician and SysAdmin will maintain all WAMC and Fort Bragg personnel security requirements, and hold a Secret security clearance, and be able to maintain continuity for purposes of ensuring the security for on-post and off post assets.

1.1.5. This non-personal service and fixed purchased price contract may be awarded to any vendor with the qualifying features as follows. Contractor must be local (100 geographical miles from the place of service) as WAMC desires rapid response times for service. Contractor must have 2 years of experience with DOD and government. contracts with an overall favorable evaluation from their prior contracts with the US Government. Contractor is certified with Lenel Technologies, and able to service the equipment without voiding any warranties. Contractor must maintain a Secret level of security clearance throughout the duration of the contract and option years. Contractor must be able to supply equipment and provide service. Contractor should abide by all provisions in the contract as noted.

1.1.6. All work for this project will be performed at the WAMC campus, and all outlying clinics and buildings which have CCTV and Access Control components that are connected to WAMC’s VSS, Fort Bragg, NC. These installations include, but not limited to the following locations:

1.1.7 COMPATIBILITY. All equipment, software and hardware must be compatible with the existing equipment and software. All equipment software and hardware must possess the capability to feed back to the WAMC’s VSS security suite whereby security in the WAMC EOC may monitor equipment functionality and monitor all feeds from the installed cameras. Contractor has 24 hrs. post installation to verify that the item is fully functional with the VSS. Parts shall be stored and secured locally; arrive for installation within 48 hours of the order items found to be noncompatible will be replaced by the persons who installed it at no additional cost to the government.

1.2. Background: WAMC has a mission to serve the family and soldiers of Fort Bragg and the 82nd Airborne Division that makes Fort Bragg the largest Army installation on the east coast. WAMC additionally serves all local military retirees and their Tricare recipients. It is the DHA's mission to ensure the health and wellbeing of all those who come, use, or work within or on WAMC campus or satellite facilities. To avoid security failures and blind spots from occurring in addition to ensuring the secrecy and level of trust in the servicers, WAMC desires LenelS2 – Milestone compatible products, technicians that are LenelS2 certified, and those who service them to hold and maintain their SECRET level security clearance.

1.3 Scope: This contract covers all service in regard to the VSS at WAMC and the surrounding clinics and campus. This contract includes both item install, replacement and service with full scope as outlined in section 1.3 and period performance below1.3

1.3.1. Provide: Contractor shall provide one (1) Lenel certified, security technician 5 days (40 hours) per week, completing all repairs, scheduled and unscheduled corrective action per year. Technician shall main continuity with the DHA and holds Secret level security credentials. Technician will be responsible for installing and servicing items on any part of the WAMC VSS campus and purview of the EOC. Parts shall be stored and secured locally; arrive for installation within 48 hours of the order. Technician shall in addition to his regular duties provide preventative maintenance information, such as identifying areas that could potentially lead to system failures in the near future and identifying best practice procedures.

1.3.2 This contract guarantees one (1) LenelS2 – Milestone certified system administrator (SysAdmin) integration time five days (40 hours) per week at minimum, time used by systems engineer for systems maintenance, updates, configuration changes, installs and other software system duties shall maintain continuity with the Medical Treatment facility, and hold a Secret security clearance.

1.3.3. Provide: Contractor shall provide 24 hours per year of administrative time (2 hour per month).

1.3.4. Contractor must ensure that all equipment meets WAMC requirements and thus must maintain regular communication with WAMC's IMD (Information Management Department) service to ensure all computers or software related requirements are met in order to prevent delays or down-times in services.

1.3.5. Contractor must ensure that all equipment meets WAMC requirements and thus must maintain regular communication with WAMC’s IMD (Information Management Department) service to ensure all related devices and/or software related requirements to include and not limited to cybersecurity and IT compatibility, are met in order to prevent delays or down-times in services. Due to the secure nature of the network at WAMC, when the contractor updates all server licenses, camera licenses, and performs VSS updates, they must perform this task in person using a scanned, via IMD Cyber, a CD or USB with all updated information contained within the disc or USB. The Contractor may be given permission to be unescorted while working in the telecommunication closets and data centers within the hospital only after being approved by the Chief Information Officer to perform such tasks. Coordination between contractor, physical security, and IMD is due to the system becoming unavailable during its regular updates that occur on a periodic basis. Extra staff will need to be scheduled on those days to monitor areas of concern as the system will under maintenance at that time.

1.3.6. Contractor will notify the COR of any delay to repair and maintenance services within 3-5 business days of discovery.

1.3.6.1. During times where server and software updates are required, Contractor must coordinate with IMD and Physical Security (EOC) to ensure that server and software requirements and security concerns are being met. Contractor is not allowed to work on any server unaccompanied unless written consent is given to the contractor and memo held by both physical security, and COR. Contractor must hold and maintain a Secret level security clearance if VSS is connected to or through DHA MEDCOI Network.

Those not meeting this requirement are not authorized to work on or to WAMC servers or network per DHA policy. Contractor must ensure that all technicians have performed HIPAA, Informational Assurance, Informational Security, and Operational Security training prior to accessing any DHA network, server, or communication closet per DHA policy.

1.3.6.2. Contractor shall provide as part of service all camera, access control solution panel, and VSS licenses renewals as part of the services provided. Those items requiring renewals shall be done as part of the services and maintenance offered under this service maintenance contract.

1.3.7. In the event that hours for on-site emergency services substantially exceed the estimated annual hours in this PWS, the contractor may request an equitable adjustment from the Contracting Officer.

1.3.8. Authorized Contractor shall not take orders to perform tasks that would add additional costs or go beyond the hours as mentioned from any persons other than what is granted in writing from the KO.

Contractor shall note that any activity not directly authorized by the KO or what is granted in this contract is an unauthorized commitment and the US government has no responsibility to pay for such tasks that were not directly.

1.3.9. Provide: Contractor must provide a technician that must be dispatched from an operational center or locality within 100 miles of the DHA with a two (2) hour response time to an emergency service request.

1.4. Scope: This contract covers all service in regard to the VSS at WAMC and the surrounding clinics and campus. This contract includes both item replacements and service with full scope as outlined in section 1.3 and period performance below.

1.5 Period of Performance: The period of performance for this contract is for a base plus (4) year.

1.6 General Information

1.6.1 Quality Assurance: The Contractor. The Contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1 Contractor Inspection Requirements). The Contractor shall develop, implement, and maintain a Quality Control Program (QCP) to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS).

1.6.1.1 Quality Control Program. The Contractor shall develop, implement, and maintain an effective Quality Control System, which is a written Quality Control Plan (QCP). The QCP shall implement standardized procedures and methodologies for monitoring and documenting contract performance to ensure all contract requirements are met. The Contractors’ QCP shall contain a systematic approach to monitor operations to ensure acceptable services, supplies products described in the contract are performed at or above the standards defined in the PWS and Performance Requirements Summary

(PRS).

1.6.2. The Contractor shall submit their QCP no later than (NLT) 10 days after contract award and within five (5) days of any proposed changes. The QCP shall be submitted by the contractor to the Contracting Officer (KO) and Contracting Officer Representative (COR) if it was not already furnished as part of the initial proposal/award package. QCP shall be submitted to the KO and COR within 5 working days when changes are made thereafter. After acceptance of the QC Plan the contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system. The Contractor’s QCP shall be incorporated into and become part of this contract after the plan has been accepted by the KO/COR. Proposed changes made after KO/COR acceptance shall be submitted in writing through the COR to the KO for review and acceptance prior to implementing any revision. The Contractor’s QCP shall be maintained throughout the life of the contract and shall include the Contractor’s procedures to routinely evaluate the effectiveness of the plan to ensure the Contractor is meeting the performance standards and requirements of the contract.

1.6.3. The QCP shall include Contractor’s organizational and management structure, titles, responsibilities and qualifications, work and quality control verification. A comprehensive program to plan and deliver quality services/supplies described in the contract, prioritize services, and concentrate on the most essential services as identified in the Performance Requirements Summary (PRS).

1.6.4. The QCP shall provide methods, acceptable to the Government, of identifying deficiencies in the quality of service performed under the contract before the level of performance becomes unacceptable.

Describe a method for preventing and addressing processes for corrective actions without dependence upon Government direction, and shall contain specific quality control techniques for contract services or supplies identified in the PRS.

1.6.5. QCP shall establish an inspection system covering all services required by the contract. The plan shall specify areas to be inspected on both a scheduled or unscheduled basis and the title of the individual who will do the inspection. Maintain a system to inspect their subcontractor services and products to ensure compliance with contract requirements, and applicable laws and regulations. Specify tasks or areas to be inspected on a scheduled or unscheduled basis, and how inspections are to be conducted. The contractor shall provide current list of all titled positions and the names of the incumbents who will perform the inspections, and the percentage of the work that will be inspected regularly.

1.6.6. The contractor shall keep records on-site of all inspection files conducted by the Contractor and the necessary corrective action taken. Documentation of all contractor quality control inspections and corrective actions shall be maintained by the contactor throughout the term of this contract.

1.6.7. The QCP shall have a customer comment processing system for correction of Contracting Officers Representative (COR) validated comments received verbally or through the Interactive Customer Evaluation (ICE) program. The system should be designed to provide feedback to the Government based on customer contact, investigation of derogatory comments, rebuttal to derogatory comments, or corrective action(s). Government collected and graded customer satisfaction comment cards will be part of the Government’s performance evaluation process.

1.6.8. The contactor shall establish, maintain, and implement a Disaster Contingency Plan. This plan shall establish procedures, identify personnel, document essential PWS disaster services and identify the means of maintaining essential PWS services during disasters. Disaster means natural disaster (e.g., earthquake, major storm, flash flood, or hurricane), utility outage, terrorist attack or other special.

1.7. Non-Conformance Report (NCR). When the Contractor's performance is unsatisfactory, a Contract Discrepancy Report (CDR) will be issued. The Contractor shall reply in writing within five (5) workdays from the date of receipt of the CDR, giving the reasons for the unsatisfactory performance, corrective action taken, and procedures to prevent recurrence.

1.8. Quality Assurance: The COR will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the COR must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). When an observation indicates defective performance, the COR will require the Contractor or designated on-site representative to initial the observation to acknowledge the defective performance. The acknowledgement of the observation does not necessarily constitute Contractor concurrence with the observation, only that the Contractor has been made aware of the defective performance. Clauses of FAR 52.246-1, Inspection of Supplies -Fixed Price and FAR 52.246-4, Inspection of Services -Fixed-Price shall be followed as an assisting means of determination for the quality of worked performed.

1.9. Property Management System: The Contractor shall establish a system to manage Government Furnished Equipment (GFE) in its possession to control, use, preserve, protect, repair and maintain. The Property Management System (PMS) must be adequate to satisfy the requirements of the contract. The Property Management System (PMS) must be adequate to satisfy the requirements of Property Management in accordance with (IAW) FAR clause 52.245-1 Government Property. The Contractor shall provide a copy of their Property Control Plan (PCP) to the KO and COR within thirty (30) days of contract award.

1.10. Reserved.

1.11. Recognized Federal Holidays: The Contractor is normally not required to perform services on recognized federal holidays. However, that requirement is subject to mission execution requirements.

The Contractor shall not be required to perform services on recognized federal holidays.

New Year’s Day Veteran’s Day Martin Luther King Jr.’ Birthday Thanksgiving Day President’s day Christmas Day Memorial Day Independence Day Juneteenth 19, June Labor Day

Columbus Day

1.11.1. When a holiday occurs on a Saturday, Federal employees are normally granted the previous Friday as the holiday observance. When a holiday occurs on a Sunday, Federal employees are normally granted the following Monday as the holiday. The contractor shall work on the days the Government is scheduled to work.

1.11.2. When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor will have the following options:

1.11.2.1. Reschedule the work on any day that is mutually satisfactory.

1.11.3. Hours of Operation: The Contractor shall be responsible for providing services, between the hours of 08:00 AM to 4:00 PM Monday through Friday, except federal holidays or when the government facility is closed due to local or national emergencies, administrative closings or similar government directed facility closings. For other than firm fixed price contracts, the Contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential to successful performance under this contract. No overtime (OT) or compensatory time (CT) is authorized. Contractor personnel shall not exceed a 40-hour work week; flexible work schedule may be considered.

1.11.3.1. Performance of work by Contractor personnel under the terms of this contract shall not interfere with regularly scheduled government operational activities. Performance of work by Contractor personnel under the terms of this contract shall have minimal to no interference with regularly scheduled government operational activities.

1.11.4. Place of Performance: All work for this Contractor shall have routine access to Government-controlled facilities. The work to be performed under this contract shall be accomplished at project will be performed at the WAMC campus, and all outlying clinics and buildings which have CCTV and Access Control components that are connected to WAMC's LAN/MEDCOI and/or VSS, Fort Bragg, NC. These installations are listed in Technical Exhibit 3 and shall include other installations designated by COR and acquired under the purview of WAMC's physical security.

1.12. Security Requirements:

IAW PARC Policy Alert 14-33, Homeland Security Presidential Directive 12 (HSPD-12) issued 31 Dec.

Contractor shall have routine access to Government-controlled facilities.

1.12.1 Anti-Terrorism (AT) Level I Training: Contractor personnel performing work under this contract that require access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after commencing performance under this contract. The Contractor shall submit employee certificates of completion within 30 calendar days after completion of the training. AT Level I awareness training is available at the following website:

https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf

1.12.1.1 Contractor personnel shall have (all contractor personnel to include technical personnel and SysAdmin of the) or requiring access into Womack Army Medical Center Local Area Network/MEDCOI (WAMC LAN/MEDCOI) shall have a SECRET level of security clearance and signed non-disclosure agreement with WAMC within 30 days after contract award. Personnel must maintain and hold a SECRET level of security and must match the requirement’s DD Form 254. Secret level security clearance must be held at the time of application and must maintain the level of security required for the duration of the contract. The security requirements are in accordance with the attached DD Form 254.

Contractor personnel shall comply with all applicable security and safety regulations, guidance, and procedures, including local, referenced in this PWS and in effect at the work sites. All personnel must meet requirements IAW DODD 8140.01. Personnel Security Clearances must be kept to an absolute minimum based on contractual needs.

1.12.1.2 Originate the request for security clearance through your Contractor Company Facility Security Officer (FSO) based on bona fide contractual occupational requirement. Individuals cannot apply for a personnel security clearance application on their own. The security clearance process begins when a company determines that an employee or candidate for employment requires a personnel security clearance to access classified information in order to perform the duties of his or her position. If the applicant has never held a personnel security clearance, or if their previous clearance was terminated more than 24 months ago, this is referred to as an initial clearance. The employee must complete an Electronic Questionnaire for Investigations Processing (e-QIP), signature pages and submit fingerprints electronically for all initial investigation requests.

1.12.1.3 Contractor personnel shall have a favorable National Agency Check (NACI) with inquiry in accordance with Security definition for personnel who occupy "ADP (Automated Data Processing) Sensitive" positions, as per AR 380-67. An individual's conduct involving questionable judgment, lack of candor, dishonesty, or unwillingness to comply with rules and regulations can raise questions about his or her reliability or trustworthiness and may put people, property, or information systems at risk. An individual's past criminal or dishonest conduct may put people, property, or information systems at risk.

Therefore, conditions that may be disqualifying include:

(1) A single serious crime or multiple lesser offenses which put the safety of people at risk or threaten the protection of property or information. A person's convictions for burglary may indicate that granting a CAC poses an unacceptable risk to the U.S. Government's physical assets and to employees' personal property on a U.S. Government facility.

(2) Charges or admission of criminal conduct relating to the safety of people and proper protection of property or information systems, regardless of whether the person was formally charged, formally prosecuted, or convicted.

(3) Dishonest acts (e.g., theft, accepting bribes, falsifying claims, perjury, forgery, or attempting to obtain identity documentation without proper authorization).

(4) Deceptive or illegal financial practices such as embezzlement, employee theft, check fraud, income tax evasion, expense account fraud, filing deceptive loan statements, or other intentional financial breaches of trust.

(5) Actions involving violence or sexual behavior of a criminal nature that poses an unacceptable risk if access is granted to federally controlled facilities and federally controlled information systems.

For example, convictions for sexual assault may indicate that granting a CAC poses an unacceptable risk to the life and safety of persons on U.S. Government facilities.

(6) Financial irresponsibility may raise questions about the individual's honesty and put people, property, or information systems at risk, although financial debt should not in and of itself be cause for denial. Deliberate omission, concealment, or falsification of relevant facts or deliberately providing false or misleading information to an employer, investigator, security official, competent medical authority, or other official U.S. Government representative, particularly when doing so results in personal benefit or which results in a risk to the safety of people and proper safeguarding of property and information systems. "Compliance with HSPD-12: On 07 Mar 14 the Secretary of the Army published Army” Directive 2014-05, which establishes HSPD-12 investigative and adjudicative policy and procedures to support credentialing determinations for the 3-601, "The Personnel Security Program" no later than 10 days after award of contract.

Personnel Security Clearances must be kept to an absolute minimum based on contractual needs; for more information, please visit http://www.dss.mil/psmo-i/indus_psmo-i_process_applicant.html.

Personnel Security Clearances must be kept to an absolute minimum based on contractual needs; for more information, please visit http://www.dss.mil/psmo-i/indus_psmo-i_process_applicant.html.

1.12.2 Safety Incident Reporting. Contractor shall report any injury to contractor personnel while performing services using the following format:

(a) Who. Contractor employees injured.

(b) What: A description of the safety incident event.

(c) Where: Location of the safety incident event.

(d) When: The date and time of the safety incident event.

(e) Why: Proximate cause of the safety incident event.

1.12.3. Installation Access and General Protection/Security Policy and Procedures

1.12.3.1. The Contractor shall fully comply with all vehicle inspections and verifications of identification at all Fort Bragg Access Control Points (ACPs). Contractors shall obtain appropriate passes to be permitted onto Fort Bragg. Fort Bragg Travel Passes may be obtained at the All-American Freeway Guardhouse after successfully passing a background check. All passes obtain shall be for a year duration unless otherwise stated. All vehicles which lack such a pass will not be allowed on post and thus turned around at the gate. Failure to gain access onto post shall not be a legitimate reason to be late or deficient with any works. It is up to the Contractor to ensure that this pass is held and maintained during the contract.

1.12.3.2 All Contractor personnel performing work under this contract shall comply with applicable installation, facility and area commander installation/facility access, local security policies and security procedures provided by the Security Manager Government representative. Contractor personnel shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor personnel shall comply with all personal identity verification requirements as directed by Department of Defense (DoD), HQ Department of Army (DA) or local policies. Sponsoring organizations, activities, and persons will be responsible for monitoring contractor access by submitting a completed and approved DES Form 118 at the All-American Gate VCC Center, detailing the contracted services to be performed, location of services, and duration of the contract. Contractors requesting access for less than one year may receive an AIE visitor card on a case-by-case basis, or a temporary vehicle pass for 90 days. Contractor cards will be issued for periods of one to three years depending on the terms of their contract. AIE card expirations may be updated to reflect a new contract period by submitting an approved. Renewed short term passes must be re-processed at the All American VCC. In addition to the changes otherwise authorized by this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor and subcontractor security matters or processes.

1.12.3.3 The Contractor workforce shall comply with all personal identity verification (PIV) requirements as directed by Department of Defense (DOD), Headquarters Department of the Army (HQDA), and Fort Bragg Directorate of Emergency Services (DES) and Provost Marshall local policy. Sponsoring organizations, activities, or persons will be responsible for Contractor access to the installation by submitting a completed (DES) Installation Badges and Passes Request Form (DES Form 118) for AIE II+ cards.

1.12.3.4 The DES Form 118 is located on the Fort Bragg Provost Marshall webpage at http://www.llibarty.army.mil/directorates/DES/pmo/Pages/AIE.aspx under the Installation Access Control tab. Once approved, the sponsoring organization, activity, or person will be notified to contact the applicant(s) to go and process their AIE II+ card. The Fort Bragg All American (VCC) located at the All- American Hwy, Access Control Point (ACP), Building H-1575, outside ACP 5. The COR/ACOR will request changes in Contractor security matters or processes if the Force Protection Condition (FPCON) at any individual facility or installation changes.

1.12.3.5 Motor Vehicle Operators. (If applicable) Contractor's personnel, whose tasks involve the operation of any vehicles, shall possess a valid driver's license, certificates, and permits applicable for the type and class of vehicle being operated. The Contractor shall be responsible for assuring all Contractor personnel authorized to perform work under this contract obtain installation access, as required by the Army Motor Vehicle Traffic Regulation AR 190-5, available for download at https://www.apd.army.mil/pdffiles/r190_5.pdf. Government furnished identification shall be returned to the Government within 10 calendar days after completion of contract and when the employee no longer performs work under this contract.

1.12.3.6 Contractor Vehicle Registration. (If applicable) The Contractor shall register all contractor-owned or operated vehicles and trailers operating on the Fort Bragg Installation within (10) calendar days of contract start date. The Contractor shall complete all applications with the Fort Bragg, Directorate of Emergency Services (DES) and Provost Marshall Vehicle Registration located at the All-American Hwy, Access Control Point (ACP), Building H-1575, outside ACP 5. Commercial vendor or contractor must use the Truck Plaza VCC located off Cook Street in Building K-1153 outside ACP 16. Evidence of vehicle ownership and vehicle liability insurance must be presented upon application of vehicle registration.

1.12.4. Common Access Card Issuance:

1.12.4.1 All Contractor personnel performing work under this contract shall obtain a Department of Defense (DOD) Common Access Card (CAC). In addition to CAC, contractors must obtain a Womack Army Medical Center (WAMC) contractor access badge and access card key. The CAC and other required badges shall be worn at all times, when performing work under this contract, to include attending government meetings and conferences. Unless otherwise specified this contract, Contractor personnel shall wear the CAC and other required badges inconspicuous place on the front of exterior clothing and above the waist, except when safety or health reasons prohibit such placement or when used for computer access. Reference CAC Issuance and Revocations: DODI 5200.46, September 9, 2014.

1.12.4.2 Contractor personnel shall be required to obtain a CAC at least ten (10) workdays prior to start of base contract period or prior to performance under this contract, whichever comes first.

1.12.4.3 The Contractor shall develop, maintain, and provide to the COR an updated roster which shall include names and positions of all Contractor personnel as well as indicating which employees were issued CAC or other forms of government identification cards. The Contractor shall submit initial roster to the COR within ten (10) calendar days after commencement of base period of performance.

1.12.4.4 The Contractor shall immediately report any lost CAC or government issued identification cards to the COR and Military and/or DoD police agencies. The Contractor shall immediately collect the CAC and other government issued forms of identification upon termination of employee, or at the end of the contract performance period. The CAC and other government issued forms of identification shall be returned to the COR within one (1) hour of employee termination, or at the end of contract performance period, whichever comes first. Final payment may be delayed if Contractor fails to comply with these requirements.

1.12.4.5 Contractor shall insure all security policies are followed and obtain a long-term visitor's pass or acquire a CAC card per the policy of the DHA. The Contractor shall ensure that all individuals who present themselves unto post undergoes the same level of vetting to ensure no threats are allowed with the post or DHA. During periods of time that contract is on Fort Bragg campus or within the facilities owned or utilized by the DHA, Contractor shall insure they display their name tags and wear suitable attire.

1.12.5 National Industrial Security Program (NISP).

The Contractor shall implement and maintain a security program for control of personnel, property, and information, including, unclassified and classified materials, documents, and records. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires Contractors to comply with—(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the Contractor. In addition, the Contractor’s security program shall include provisions for, but not limited to:

--Initial and Annual Operations Security (OPSEC) awareness training IAW AR 530-1. Operations Security, new contract employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty and annually thereafter.

--Receiving, storing, disseminating, transmitting, transporting, and protecting items classified as CONFIDENTIAL or SECRET by the Government, including the use of courier cards.

--In-processing and out-processing Contractor personnel for security matters.

--Obtaining Contractor personnel security clearances.

--Documenting and reporting actual and potential security problems.

--Initiating proper procedures to correct documented problems and implementing corrective procedures in the Contractor's security program.

--Filing Classified Documents. All Government-furnished classified and unclassified files in existence at the contract performance start date and those generated under this contract shall be maintained in accordance with AR 25-400-2 or other applicable regulations. Files shall be transferred to the KO or designated representative upon completion of the contract period or last day of contract performance, whichever comes first. Such files are the property of the U.S. Government. The Contractor shall provide security of classified documents in accordance with AR 380-5 and DOD 5200.1-R, NISP Operating Manual.

1.12.5.1. Physical Security Plan. This portion of the Contractor’s security program shall address physical security aspects associated with contract performance and describe how the Contractor shall prevent unauthorized access, vandalism, pilferage, larceny, sabotage, and arson directed toward Contractor-controlled facilities and Government Furnished Property (GFP). The following regulations shall apply when developing the physical security plan: ARs 190-11, 190-13, and 190-51; Department of Defense (DOD) 4500.9-R, and Department of Defense Instruction (DODI) 5100.76 and DODI 5220.22, and applicable FB 190-13-1 and FB 190-1 policies. The Contractor shall develop and implement a physical security plan in accordance with AR 190-13.

1.12.5.2. Key Control. The Contractor shall include in the physical security section of the Contractor’s security program a key control plan IAW applicable regulations, policies and directives ensuring keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The key control plan shall include requirements of AR 380-5 FB 190-1 and FB 190-13-1], if classified materials are being stored. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR.

1.12.5.3 In the event keys are lost or duplicated, the Contractor shall, upon direction of the KO, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.12.5.4 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the KO.

1.12.5.5 Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s security program.

1.12.5.6. Environment and OSHA:

The Contractor shall comply with all local, state, and Federal environmental and occupational safety laws, rules, and regulations. Any apparent conflict between compliance with such local, state, and Federal laws, rules and regulations, and compliance with the requirements of the contract shall be immediately brought to the attention of the KO and/or the COR final resolution. The Contractor shall notify the KO and COR in writing in addition to any verbal notification of such conflicts. The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, all such local state, or Federal laws, rules, and regulations. All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the KO or COR, to halt all Contractor performance with a commensurate deduction of monies due the Contractor until such unsafe conditions are corrected. The Contractor shall take due caution not to endanger personnel during performance of this contract. Upon discovery of any hazard such as, but not limited to, fire, or large fuel spill, the Contractor shall immediately notify the KO or

COR.

1.12.5.7. Safety. The Contractor shall comply with all local, state, and Federal environmental and occupational safety laws, rules, and regulations. Any apparent conflict between compliance with such local, state, and Federal laws, rules and regulations, and compliance with the requirements of the contract shall be immediately brought to the attention of the KO and/or the COR final resolution. The Contractor shall notify the KO and COR in writing in addition to any verbal notification of such conflicts.

The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, all such local state, or Federal laws, rules, and regulations. All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the KO or COR, to halt all Contractor performance with a commensurate deduction of monies due the Contractor until such unsafe conditions are corrected. The Contractor shall take due caution not to endanger personnel during performance of this contract. Upon discovery of any hazard such as, but not limited to, fire, or large fuel spill, the Contractor shall immediately notify the KO or COR.

1.12.5.8 Personnel Safety. The Contractor shall provide safety barriers or tape to show work area. The Contractor shall immediately correct all safety deficiencies upon findings or notification of the deficiencies.

Contractor shall notify the COR of the corrective action to be taken. The Contractor shall not leave equipment unattended while in use or unsecured while at the work site.

1.12.5.8.1 Accident Protection and Emergency Medical Treatment. All work crews, office personnel and the COR shall be provided with information pertaining to the Contractor's arrangement for emergency medical treatment.

1.13. Anti-Terrorism Program

1.13.1 Homeland Security Presidential Directive 12

Contractor shall be responsible for ensuring all personnel performing work under this contract comply with PARC Policy Alert 14-33, Homeland Security Presidential Directive 12 (HSPD-12) issued 31 Dec 24 during the execution of this contract.

1.13.1.2 iWatch Training: The Contractor shall brief all personnel performing work under this contract on the local iWatch program [training standards provided by the requiring activity Anti-Terrorism Office (ATO)]. This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award with the results reported to the COR NLT 45 calendar days after contract award. New employees shall complete the training within 10 calendar days of commencing performance of work under this contract, with the results reported to the COR NLT 15 calendar days.

1.13.1.3 iWatch is simply common awareness. Contract employees can be good sources of information.

iWatch training would include organization instructions on “things to look for” and a phone number to call in case the contract employees have information regarding possible terrorist or criminal activities.

Providing contractors with awareness materials such as the iWatch brochure or wallet card is a cost-effective alternative to training. The card describes suspicious activity and can be modified to include the

COR in reporting procedures. Samples of the iWatch brochure and posters are available on the Antiterrorism Enterprise Portal (ATEP) at https://army.deps.mil/army/sites/PMG/prog/ATEP/iWATCH%20Army/Forms/AllItems.aspx and https://www.army.mil/e2/c/downloads/287489.pdf

1.14. WAMC Cyber Security Program: Contractor Employees Requiring Access to Government Information Systems shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered and comply with DHA policies to include but not limited to DOD and NIST Policy, Instruction, and Guidance.

1.14.1. Joint Knowledge Online: Registration / Contractor Employees Requiring Access to Government Information Systems: Contractor shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of support services and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems. Training shall be required annually after the initial training. Completion certificates shall be submitted to the COR within fifteen (15) calendar days from date of commencing performance under this contract.

1.14.2 Contractor Employees Requiring Access to Government Information Systems: Contractor shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of support services and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems. Training shall be required annually after the initial training. Completion certificates shall be submitted to the COR within fifteen (15) calendar days from date of commencing performance under this contract.

1.14.3 OPSEC Training: Contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander.

In addition, the contractor shall have an identified certified Level II OPSEC…