RFP Attachment-SOW.pdf

Statement of Work for

Automated Access Control (ACC) System U.S. Army Medical Material Center, Korea

1. Scope: This Statement of Work (SOW) defines the effort required for the Contractor to design, install, configure, and test a stand-alone, turn-key installation of a Commercial Automated Access Control System (ACS). The location of the work is U.S. Army Medical Material Center, Korea (USAMMC-K) buildings S-709, S-710, S-710 Annex (710A), S-711, and S-718 located on Camp Carroll (Waegwan), Republic of Korea. Camp Carroll is a U.S.

Army Installation and has restricted access.

2. Requirement: (1) Replace the existing ACS located inside and surrounding USAMMC-K buildings S-709, S- 710, S-710A, S-711, and S-718. The automated access control system shall be complimentary security controls that provides security-in-depth that is sufficient to deter, detect, and document unauthorized entry or actions.

ACS: The Automated Access Control System (ACS) will be ANSI/UL-294 compliant that allows only authorized access, protect government property, and conforms to regulatory requirements. The installed ACS will permit only authorized personnel entrance utilizing a Common Access Card (CAC) or Proxy/Smart Card. In designated restricted areas requiring dual authentication, a CAC/Proxy Card and Personal Identification Number (PIN) will be utilized. Unless specified in the SOW, the access points will allow egress in both standard and emergency circumstances. The ACS shall log and archive all entries and alert of unauthorized entry attempts. The ACS must resist both covert and forced entry. The contractor is to design, install, setup, configure, and test the ACS in accordance with this SOW.

3. References: The Automated Access Control and Video Assessment System will be installed and configured in accordance with the Manufacturer's recommended procedures, Unified Facilities Criteria (UFC 1-200-01, DoD Building Code (General Building Requirements), UFC 3-520-01 - Interior Electrical Systems (2021), UFC 4-010-01

– DoD Minimal Anti-terrorism Standards for Buildings (2020), UFC 4-020-01 – DoD Security Engineering Facilities Planning Manual (2008), UFC 4-020-02 – DoD Security Engineering Facilities Planning Manual (2013), UFC 4-021-02 – Electronic Security Systems (2019), UFC 4-026-01- Design to Resist Forced Entry (2020)), Unified Facilities Guide Specifications (UFGS 28-10-05 – Electronic Security Systems (2016), UFGS 28-08-10 – Electronic Security System Acceptance Testing (2016)), National Electronic Code requirements (NEC), and National Fire Protection Association (NFPA 101 – Life Safety Code (2021), NFPA 780 – Standard for the Installation of Lightning Protection Systems (2020).

4. Description of Service. The Contractor shall furnish all management, supervision, labor, technical, analytical services, equipment, material, transportation, and supplies required to install and configure an ACS for Buildings 709, 710, 710A, 711, and 718, Camp Carroll (Waegwan), Republic of Korea, in accordance with this SOW. The Contractor shall be responsible for providing and installing all miscellaneous ancillary hardware not explicitly specified in this SOW as required for a complete and fully-operational system. The systems shall include all connectors, adapters, and terminators necessary to interconnect all equipment. The Contractor shall also supply all cabling and conduit (rigid and flexible) necessary to interconnect the ACS equipment. Unless specified in this SOW, all components and material of the ACS shall be new. The systems shall be non-proprietary, and components shall be available through multiple distribution channels. The Contractor will provide the brand name, model number, and serial number of all components. All components shall meet health and safety standards and be Underwriters Laboratories (UL) listed or possess a KC Mark Certification.

5. Physical Protection:

(a) ACS: Control units will be located within secure communication rooms. All components will be securely fastened to a wall or fixed structure in an aesthetically pleasing appearance as determined by the Government, and, when identified in this SOW, utilize tamper protection that sends a tamper alarm that can only be cleared at the monitoring station. Electrical components, associated wiring, or mechanical links shall be accessible only from inside the secure areas and be tamper resistant. System data carried on transmission lines (e.g., access authorizations, personal identification, or verification data) to and from equipment located outside the secure area shall be encrypted. Electric door strikes shall positively engage and be approved under UL 1034 for burglar resistance/forced opening. Magnetic Locks will provide a minimum of 600 pounds of resistance to forced entry. The ACS will identify occurrences of a door being forced opened and create a Door-Forced-Open alarm that can only be cleared at the monitoring station.

6. Country of Origination: The country of origination will be identified for all components. No manufacture, or their subsidiaries, of any component used for this contract shall be on the prohibited video surveillance equipment list identified in the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Public Law 115– 232—August 13, 2018).

7. ACS Recordkeeping: Records shall reflect the active assignment of identification badge/cards, personnel identified numbers (PIN), level of access, entries, and similar system-related information. Access to such data shall be restricted to the only person responsible for the access control system. Records of personnel removed from the system shall be retained for a minimum of two years from the date of removal. Records of security incidents (violations/infractions) shall be recorded until system violations have been resolved. The ACS will identify and individually annunciate tampering, or a door being forced opened and create a Tamper or Door-Forced-Open alarm that can only be cleared at the monitoring station.

8. Components: Components are to be emplaced in accordance with the included placement descriptions and diagrams. All components will comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules that the device does not cause harmful interference. All electrical components shall be 110v/50/60 Hz and compatible with U.S. electrical standards. All components will be non-proprietary and available through multiple distribution channels.

(a) Tamper switch: Tamper switches will individually annunciate whenever a protected device is tampered with and shall be spring-loaded and held in the closed position. The Tamper switch is to be individually annunciated, inaccessible until the switch is activated, under electrical supervision at all times irrespective of the protection mode in which the circuit is operating and cannot be disarmed or silenced except at the monitoring station. The tamper switch is to prevent the placement of a malicious card reader “skimmer” inside the legitimate card read.

(b) Access Control Unit: The Access Control Unit (ACU) shall be rack-mounted, UL-294 compliant, enterprise-level, utilize NIST Certified AES-256 encryption, door position sensor, door forced open alarm, and located within the data center located in BLDG #709. The ACU will include tamper switch(es) to detect unauthorized physical access to the ACU. ACS enrollment capability should be available at this location for redundancy, if the main ACS enrollment station cannot be accessed.

(c) ACS Enrollment/ Badge Station. The enrollment and control station will be located in BLDG 710 Annex (710A), Room 113 (Security Office). Monitors will be Government furnished equipment. ACS enrollment capability should be replicated in the data center in building 709 to provide redundancy and access control management/ enrollment – no badge print capabilities required in 709.

(d) ACS Software: The ACS software will be a user-friendly, non-proprietary, integrated security platform that provides comprehensive functionality for access control, badging, visitor management, and comprehensive logs utilizing a keyboard and computer mouse. The software will use an easy to use, graphic user interface (GUI), and allow a minimum of 125 users. The ACS software will allow up to eight user-definable time schedules that determine the day(s) and times an individual will be granted access to a specific access point. The software will allow photographs, logos, emblems, and other graphics to be easily imported and produce easy to create, high quality, color, tamper-proof access badges. Badges can be coded to work with or without a PIN, depending on the access level.

(e) Physical credentials: The ACS credentials are government-supplied Common Access Card (CAC) and Contractor-provided proxy/smart-cards. Proxy/smart cards shall be non-proprietary and available through multiple distribution channels. The proxy/smart cards will be used for specific purposes such as staff-duty checks, visitors, and emergency services. The system will have the capabilities to use both CAC and Proxy/Smart Cards simultaneously.

(f) Card Printer: A duplex badge printer will be installed and configured by the Contractor. All necessary expendables to create a minimum of 200 Proxy/Smart cards will be provided, installed, and configured by the Contractor. The printer and expendables shall be non-proprietary and available through multiple distribution channels.

(g) Electric Strikes: Electric Strikes (ES) shall be fail-secure configuration causing the door to be locked from the public side and requires manual key entry to unlock the door from the public side, but allow egress by manual activation of the door handle/lever when exiting from the secure side. ES will be protected with a cover guard to prevent the lock from being over-ridden (pried open) by an intruder. ES identified on the included diagram as GFE will be furnished by the Government. Electric door strikes shall positively engage and be approved under UL 1034 for burglar resistance/forced opening. ES will be installed in an aesthetically pleasing appearance as determined by the Government.

(h) Electromagnetic Locks: Magnetic locks (ML) will be fail-safe. The electromagnet portion of the lock is to be securely attached to the inside (non-threat side) of the door frame/wall, and a mating armature plate is securely attached to the door as depicted in the below diagram. The two components are to fully in contact when the door is closed. ML identified on the included diagram as GFE will be furnished by the Government. ML will be rated at least 600 pounds of resistance. Unless specified otherwise in this SOW, a means to exit during emergencies must be provided with a life/safety mechanical override IAW 2009 NFPA 101 (The Life Safety Code). ML will be installed in an aesthetically pleasing appearance as determined by the Government and will not interfere with the normal operation of the door.

(i) Push-to-exit: When an electromagnetic lock is used, "push-to-exit" (!E) devices will be mounted within the secured area, adjacent to the exit, and consist of a built-in tamper switch. The "push-to-exit" devices will be protected from manipulation and inaccessible from the threat side. Push-to-exits will be installed in an aesthetically pleasing appearance as determined by the Government.

(j) Card Readers: Card readers (CR) will be contactless, consist of an integrated keypad, rated at least IP65, consist of built-in tamper switch, and durable/resist tampering. The CR shall be located adjacent to the entrance in an aesthetically pleasing appearance as determined by the Government. The card readers shall be compatible with both CAC and Organizationally produced Proxy/Smart Cards. All CR will be tamper-protected and be securely fastened to a wall or other fixed structure. CR will comply with NIST SP 800-116 guidelines and supports reading PIV, PIV- I, CAC, CIV, TWIC, FRAC, and iCLASS.

(k) Uninterruptable power supply (UPS): The minimum requirement for battery backup is two (2) hours and will be integral to the system. This is to prevent power outage during generator load-testing.

(l) Surge Protection: Provide surge protection in accordance with NFPA 780 and UFC 3- 520-01. Switching from dedicated power to generator, should not interrupt system operations.

(m) Cable Trays: There are existing cable trays. Cable trays will be used when available.

BLDG 709

(n) Wires/Cables: All wiring and cables shall be individually marked and identified on adhesive labeling and professionally printed, not handwritten. Wiring and cabling shall be routed through the conduit to a pull box. CAT6 or higher cabling will be utilized.

(o) Conduit:

(1) All wiring shall be installed in either flexible or rigid conduits and secured by means of proper fittings. Conduit will typically be hidden behind the ceiling or wall, but when this is not possible, the conduit must be run in such a manner as to provide an aesthetically pleasing appearance as determined by the Government. The Contractor shall use existing conduit and cable infrastructures or wire/cables installation wherever possible per direction by the Government. The type of conduit used is determined by wiring regulations set forth by NEC codes. All conduit and materials furnished by the Contractor shall be new, be U.L. or K.C. listed, and meet NEMA and NEC requirements.

(2) Junction boxes, expansion joints, and conduit fittings shall be fabricated from a material similar to the connecting conduit. Rigid metal conduit (RMC) shall be steel and hot-dipped galvanized inside and outside. When tested in accordance with ASTM A90, zinc coating of rigid metal conduit shall be a minimum of 1.5 ounces per square foot inside and out. Electrical metallic tubing (EMT) and intermediate metal conduit (IMC) shall be steel, galvanized on the outside, and protected on the inside with a suitable corrosion-resistant material. Fittings shall be liquid-tight. Set screws are not be permitted. Steel compression fittings will be allowed. All joints and connections shall be permanently sealed completely around all surfaces. Flexible conduit shall be liquid-tight. All conduit ends shall be reamed to remove burrs and sharp edges. Where conduit is threaded in the field, a standard conduit-cutting die with a 3/4-inch taper per foot shall be used.

(3) The conduit shall be securely attached and supported by means of straps. The straps shall be installed at the recommended spacing specified in the National Electrical Code (NEC). The straps must allow for linear expansion and contraction of the conduit due to temperature change. All conduits placed on structures shall be security fastened with conduit straps or hangers. Conduit shall be fastened within three (3) feet of each box or fitting, and all-metal conduit clamps shall be of the galvanized malleable type. Clamps shall be of the two (2)-hole type. All Steel conduit terminations shall be fitted with bushings or bell ends. All metal conduit terminations shall be fitted with a grounding-type bushing except for the conduit used for duct cable casing that does not terminate in a ground box.

All conduit locations and pull boxes shall be marked on the Wiring Diagram.

(p) Pull Boxes: Pull boxes shall be precast and installed in a professional manner subject to Government approval and acceptance. All pull box installations must include proper drainage.

9. ACS Configuration: Placement of components shall be in accordance with the SOW. Any deviation must be consulted with the Center’s Physical Security Officer and requires pre-approval from the Contracting Officer. Any changes that occur due to the Contractor's request will be at the Contractor's expense.

(a) Building 709: Doors 1-6 will consist of an electric strike and card reader. Doors 7-10 shall consist of electromagnetic locks, card reader, and push-to-exit button with life/safety mechanical override. Door 11 will consist of either one (1) dual electromagnetic locks or two (2) electromagnetic locks (one per door), and two (2) card readers; access will be control both ingress and egress (no push-to-exit button).

(b) Building 710: Doors 1, 9-11 will consist of an electric strike and card reader. Doors 2-7 will consist of an electromagnetic lock, card reader, and push-to-exit button with life/safety mechanical override. Doors 2 (front door) and 7 (Command suite) shall have an aesthetically pleasing physical mechanism to deactivate the electromagnetic lock during routine business hours. Door 6 will consist of an electromagnetic lock and two (2) card readers; access will be controlled both ingress and egress (no push-to-exit button).

(c) Building 710A: Doors 1-6 and 8 will consist of an electric strike and card reader. Door 7 will consist of an electromagnetic lock, card reader, and push-to-exit button with life/safety mechanical override.

(d) Building 711: Doors 1-5 will consist of an electric strike and card reader. Doors 6-10 will consist of dual electromagnetic locks or two (2) electromagnetic locks (one per door), a card reader, and a push-to-exit button with life/safety mechanical override.

(e) Building 718: Doors 1-7 (first and second floor) will consist of an electric strike and card reader.

10. Installation Schedule: A Project Schedule shall be provided to the COR within seven calendar days after contract is awarded. Installation shall begin no later than fourteen (14) calendar days after receipt of the award. The system installation, performance verification testing, and training shall be completed within thirty (30) calendar days from the commencement of work. Work shall occur from 08:00 to 16:00 hours daily, Monday thru Friday, excluding U.S. and Korean holidays. Any work requested outside of these days and times must be approved in advance by the Contracting Officer.

11. Warranty. The Contractor shall provide for the repair or replacement of defective items discovered for a minimum of one (1) year after acceptance. The Contractor shall warrant all workmanship (to include labor) for a minimum of two (2) years from the date of acceptance. Repairs made necessary by reason of misuse, alteration, normal wear, or excessive voltage are not covered under this warranty. The Contractor shall furnish a point of contact (POC) to receive warranty repair work during regular duty hours of 0800-1600, Monday to Friday, excluding legal U.S. and Korean holidays. The Contractor shall provide emergency repair service within 48 hours of notification. Standard service hours are from 08:00 AM to 4:00 PM, Monday through Friday, excluding legal holidays. In the event that an item is replaced, the Contractor shall provide the item serial number and type of equipment replaced to the USAMMC-K's PSO. The contractor shall repair and/or replace all equipment damaged during the course of work. All areas affected shall be restored to their original condition.

12. Electrical: All reasonable quantities of electricity necessary to perform the requirements of this contract shall be furnished to the contractor by the Government at no charge. Temporary connections shall be made and removed at the contractor's own expense. The contractor shall pay for costs for repairs of utility lines damaged by the contractor.

The Contractor shall submit a License of registration Electrical Construction Business (전기공사사업등록증) with a copy in both English and Korean. A subcontractor cannot substitute these documents. The prime contractor must register the license. The Contractor shall be responsible for coordinating all electrical work in conjunction with this SOW's specifications, including but not limited to the connection of servers, cameras, conduit, and power supplies.

Any additional requirements for power supplies and additional pathway conduits/sleeves shall be installed at the Contractor's expense.

13. Supervision of Contractor's personnel: The Contractor will have at least one person on the job site that is fluent in English. The contract personnel will be solely accountable to the Contractor, who, in turn, is responsible to the Government. The Prime Contractor shall perform no less than 51 percent of installation work to be performed under this contract IAW FAR 52.219-14.

14. Performance Verification Testing and Acceptance. Upon completion of installation, the Contractor shall conduct a Performance Verification Test (PVT) for each installed system with USAMMC-K's Physical Security Officer (PSO). In concurrence with the PSO, the COR will determine if each system is fully operational and complete IAW this SOW and regulatory guidance identified in paragraph 2.

15. Technical Data Package: The Contractor shall provide all end-user documentations. All documentation/material will be provided in English. A complete as-built diagram, wire and hardware schematic, user manuals, warranty information, and all other manufacture documentation will be provided to the PSO. All usernames/passwords will be provided to the PSO and be changeable by the user.

16. ACS Training: The Contractor shall provide two (2) hours of user and administrator training class to two (2) students. The training plan must be approved by the COR prior to the execution of the training. Training will be comprehensive, hands-on, and include all aspects of the operation of the ACS, including, but not limited to, operating the ACS software, enrolling/de-enrolling individuals, creating proxy/smart cards, running enquires, viewing logs, corrective, and preventive maintenance of the equipment. Instruction manual/materials written in English shall be provided by the Contractor to allow PSO to train additional personnel later.

17. Payment. The payment shall be made based upon the COR's inspection and approval after the Contractor's completion of work, including the submission of required reports, performance verification tests showing the ACS if fully operational with no deficiencies, Government acceptance, training, and the submission of the technical data package.

18. Contractor Requirements: The Contractor shall ensure that its personnel only execute guidance provided by the Contracting Officer (CO) through the COR. The CO is the only person authorized to modify the contract terms or take any action to enter into a change or contractual commitment on behalf of the Government. The Government will not be responsible for any cost incurred for any additional work, which is not identified in the contract, contract specifications, or on the contract drawings.

(a) The Contractor shall complete the project per the terms and conditions of the contract with final inspection and acceptance by the Government.

(b) The Contractor will operate in a manner that is neat, provides a professional appearance, and not unnecessarily interfere with Government functions.

(c) The Contractor will dispose of all scrap material and equipment and other construction debris in accordance with Federal, Host Nation, and Local laws and regulations.

(d) The Contractor shall be fully responsible and liable for compliance with all applicable regulations pertaining to the health and safety of personnel during the execution of work and shall hold the Government harmless for any action on its part or that of its employees or subcontractors which results in illness or death.

19. Safety. The Contractor shall develop a site-specific safety plan and provide all necessary safety equipment and ensure that such equipment and all relevant safety procedures are adequate for the job being performed and are utilized properly. The plan will identify specific steps for the intended operations, a list of hazards, and procedures to minimize or eliminate those hazards. Work shall be performed in accordance with the U.S. Army Corps of Engineers Safety Manual EM 385-1 and USAG-D safety and fire codes. The contractor shall also be responsible to ensure that all contractor employees understand that there will be no smoking or vaping inside the USAMMC-K’s campus. Smoking and vaping is only authorized in a designated area.

20. Transportation. The Contractor shall be responsible for the transport of personnel and the materials to the worksite. Access to the site and material storage shall be coordinated with COR. The Contractor shall be responsible for the security and condition of any materials or equipment stored on-site prior to government acceptance. The Contractor shall coordinate all activities, including but not limited to site preparation, system installations, and systems inspection and acceptance with the COR. The Contractor may request access to the sites prior to scheduled installation to conduct site investigations or preparations by coordinating in advance with the COR. Any pre-installation site investigations requested by the Contractor shall be conducted at no additional cost to the Government and shall not delay the schedule of installations.

21. Security

(a) Anti-terrorism level I Training: All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level I awareness training within 15 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the contracting officer. AT Level I awareness training is available at the following website: http://jko.jten.mil.

(b) Access and general protection/security policy and procedures. Contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Director of Emergency Services. Contractor workforce must comply with all personal identity verification requirements (CFR clause 52.204-9, Personal Identity Verification of Contract Personnel) as directed by DoD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

(c) Access to a DoD facility or installation. Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/AR 190-13); applicable installation, facility and area commander installation and facility access and local security policies and procedures (provided by Government representative); or, at OCONUS locations, in accordance with status-of-forces agreements and other theater regulations.

(d) Anti-terrorism Awareness Training for Contractor Personnel Traveling Overseas. If applicable, U.S.-based contractor employees and associated subcontractor employees to make available and to receive Government-provided area of responsibility (AOR)–specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander, with the unit ATO being the local point of contact.

(e) iWATCH Training. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 15 calendar days of contract award and within 5 calendar days of new employees commencing performance, with the results reported to the COR NLT 18 calendar days after contract award.

(f) For contracts requiring performance or delivery in a foreign country. DFARS Clause 252.225-7043, Antiterrorism/Force Protection for Defense Contractors Outside the US, shall be used in solicitations and contracts that require performance or delivery in a foreign country. This clause applies to both contingencies and non-contingency support. The key AT requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor’s compliance with combatant commander and subordinate task force commander policies and directives.

(g) Elevated Force Protection Conditions: The Contractor and its employees are not considered "mission essential" during declared emergencies and/or elevated Force Protection Conditions (FPCON) and are not required to remain on duty or report to duty during declared emergencies and/or elevated Force Protection Conditions (FPCON) levels unless otherwise directed by the contracting officer.

(h) Contractor Employees Who Require Access to Government Information Systems: All contractor employees with access to a Government Information Systems (IS) must be registered in the Army Training Certification Tracking System and successfully complete the DOD Information Assurance Awareness prior to access. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2.