SOW_8.14.25.pdf

United States Department of Energy Southeastern Power Administration

1166 Athens Tech Road Elberton, Georgia 30635

August 14, 2025

Statement of Work (SOW) – PACS Refresh 2025

1. Introduction

This Statement of Work (SOW) outlines the objectives, scope, deliverables, and expectations for the PACS Refresh 2025 project. The purpose of this project is to upgrade and replace all Physical Access Control Systems (PACS), including door access control systems, intercom systems, and camera surveillance systems at two separate sites. The first site being Southeastern Power Administration’s Main site and the second, Southeastern’s Remote Operations Site. Ensuring compliance with FIPS 201 standards for identity authentication and Section 2 of the Secure Networks Act, which restricts certain telecommunications and surveillance equipment deemed as security risks.

2. Scope of Work

The contractor shall perform the following tasks:

- Assessment & Planning – Conduct a site survey on two separate sites, SEPA Main site and SEPA E Site, to evaluate current PACS infrastructure, including camera coverage and security vulnerabilities, ensuring compatibility with FIPS 201 PIV credential requirements and Secure Networks Act Section 2 equipment restrictions.

- System Procurement & Installation – Acquire, install, and configure new access control, intercom, and camera surveillance systems that meet or exceed FIPS 201 standards and comply with Secure Networks Act prohibitions.

- Integration & Testing – Ensure seamless integration of PACS with Genetec security center and monitoring systems and verify functionality in accordance with FIPS 201 authentication protocols and Secure Networks Act compliance.

- User Training & Documentation – Provide training sessions for personnel and deliver comprehensive user manuals, including compliance guidelines for FIPS 201-based authentication and Secure Networks Act-approved surveillance technologies.

- Support & Maintenance Plan – Establish a post-installation maintenance strategy and define service-level agreements.

3. Deliverables

The contractor will provide the following:

- Updated PACS hardware & software, including FIPS 201-compliant access control and Secure Networks Act-approved surveillance equipment.

- New door access control, intercom solutions, and camera surveillance systems.

-New cat 6 cabling provided by contractor and installed by contractor where applicable

- Specific required components are as listed:

• HID® Signo® 40 PIV Reader (quantity=5+1 spare)

• HID® pivCLASS® RKCL40 (quantity=4+1 spare)

• HID® pivCLASS®Authentication Module (quantity=9+1 spare)

• HID® EDGE EVO® EH400-K Networked Controller (quantity=9+1 spare)

• Grandstream GDS3710 Intercom (quantity=9+1 spare)

• Grandstream GSC3570 Control station (quantity=3 )

• Bosch Camera NDP-5523-Z30L (quantity=8) (4 for main site 4 for E site)

• Bosch Camera NDM-7702-A (quantity=3)

• Bosch Camera NBE-7704-ALX (quantity=5)

• Bosch Camera NDE-8704-RL PTRZ (quantity=10) (6 for main site 4 for E site)

• Genetec Streamvault SV-2040E-R4-64T-16-436 with 3YR ADV warranty

• Genetec Streamvault SV-300E with 3YR ADV warranty (E site)

Server Software:

1x SY-PVC-CM (HID PIVClass Certificate Management Server software, one per system)

1x GSC-SY-PIVM (Genetec (PIVM) Embedded enrollment CAC/PIV Plugin, one per system)

1x SY-PVC-API-RTLP-27-00 (HID SDK Connector to Genetec PIVM Plugin for Enrollment, one per system)

Enrollment Workstation Software/Hardware:

1x R31210349-1 (Piv/CAC enrollment reader for HID Registration Engine or Genetec embedded PIVM plugin)

1x SY-PVC-API-RTL (HID PIVCLASS FIPS 201 SDK for Embedded Genetec (PIVM) enrollment module, one required per enrollment workstation)

Genetec Security Center (newest version)

HID® PivClass software (newest version)

- Fully integrated surveillance system with remote monitoring capability, ensuring compliance with Secure Networks Act restrictions.

- System integration reports and testing documentation.

- Training materials and operational manuals detailing FIPS 201 and Secure Networks Act compliance.

4. Timeline & Milestones

- Phase 1 (Q3 2025): Initial assessment and system selection.

- Phase 2 (Q4 2025): Installation and configuration.

- Phase 3 (Q4 2025): Testing and final system integration.

- Phase 4 (Q4 2025): User training and full deployment.

5. Performance Standards

- All PACS components, including camera systems, must comply with industry security standards and government regulations, including FIPS 201 authentication requirements and Secure Networks Act restrictions.

- Surveillance cameras must provide high-resolution imaging, 24/7 monitoring capability, and secure data storage, ensuring compliance with Secure Networks Act-approved equipment lists.

- Training must ensure at least 95% personnel proficiency in system operation.

6. Roles & Responsibilities

- Contract Officer: Oversee budget approvals, contract execution, procurement items,

- Contractor: Installation, testing and training.

-Contracting Officer Representative Security Teams: Ensures compliance with FIPS 201, Secure Networks Act, and integration with existing infrastructure.

7. Assumptions & Constraints

- Existing infrastructure may require modifications before integration.

- Vendor equipment lead times could affect installation scheduling.

- Compliance with FIPS 201 and Section 2 of the Secure Networks Act is mandatory for system deployment.

8. Payment Terms

- Payments will be structured by milestone completion.

- Invoices must be submitted with progress reports.

9. Acceptance Criteria

- Final system integration passes all security tests and meets operational requirements, including FIPS 201 authentication validation and Secure Networks Act equipment compliance.

- End-users demonstrate proficiency in system operation post-training.

10. Evaluation Criteria

• Price: Firm-Fixed-Price

• Technical Approach: Technical capability of the Technical Approach offered to meet the Government requirement; the approach must include a logical sequence of tasks that you will perform to accomplish the requirements. Identify and describe the specific techniques and steps that will be applied during the accomplishment of all tasks of this project.

• Past Performance: Prior Experience: Recently performed similar and relevant work (i.e. size, scope and complexity).

Technical and past performance, when combined, are approximately equal to cost or price.

The Government will evaluate offers for award purposes by adding the total price for all options to the total price for the basic requirement. The Government may determine that an offer is unacceptable if the option prices are significantly unbalanced. Evaluation of options shall not obligate the Government to exercise the option(s). Weighted criteria will be used to evaluate:

• Prior experience with similar projects o Past performance as recorded in https://www.cpars.gov/ o Considerations include:

Accuracy of reports on past contracts.

Degree of technical complexity in past digitizing projects Adhere to schedules and meeting milestone dates.

Method for identifying and solving problems.

Key personnel performance examples from previous contracts.

o Technically acceptable offers will be ranked on:

Quality of scanned documents Accuracy of NARA approved formatting Timeline to complete o Documentation of results the vendors approach to meeting milestones.

o How the vendor determines acceptable performance and the level of quality.

• Qualifications of the personnel performing the work.

o Experience and skills of the key personnel.

o Individually held security clearances.

o Description of how the proposed key personnel have the ability to perform the work of the contract.

A written notice of award or acceptance of an offer, mailed or otherwise furnished to the successful offeror within the time for acceptance specified in the offer, shall result in a binding contract without further action by either party. Before the offer’s specified expiration time, the Government may accept an offer (or part of an offer), whether or not there are negotiations after its receipt, unless a written notice of withdrawal is received before award.

11. Change Management

- Any scope changes require review, formal documentation and approval by the Contracting Officer

12. Safety

- The Contractor shall comply with Department of Energy (DOE) Safety and Security Orders and Directives, including, but not limited to, the safety requirements defined in all applicable Federal, State and local laws, regulations and ordinances. When questionable the most stringent shall apply.

Contractor personnel shall comply with all applicable provisions of the State Labor and Industries Safety and Health Regulations, U.S. Department of Labor, Occupational Safety and Health Administration (OSHA) Standards 29 CFR 1910 and 29 and 29 CFR 1926, Environmental Protection Agency (EPA) Title 40 CFR 170 (Worker Protection Standard) and other applicable Federal, State, and location regulation.

Job-Related Injuries/Illnesses: Job-related injuries to Contractor employees shall be reported to the COR.

Contractor personnel shall comply with all applicable provisions of the State Labor and Industries Safety

13. Period of Performance

- 4 months from the contract award

14. Place of Performance

- Southeastern Power Administration HQ Office

• 1166 Athens Tech Rd Elberton, GA 30635

-Southeastern Power Administration Remote Operations Site

• 2169 Engineers Drive Elberton, GA 30635

-Vendors Facility

15. Submission Timeline

• Submission Deadline: 5pm Eastern Standard Time on September 15, 2025

• Expected Decision Date: September 18, 2025

• Vendor Start date: Within 30 day of Award

• Please submit all proposals to the CO at o Juvonna.mattox@sepa.doe.gov via email or o 1166 Athens Tech Rd Elberton, GA 30635 via mail

• Check-In Meetings: To be scheduled at project start, project mid-point and at project completion. Meetings may be conducted using Microsoft Teams, WebEx or any other equivalent remote technologies or in person.

• Vendor close-out date: NLT 12 Months from the vendor start date mailto:Juvonna.mattox@sepa.doe.gov

16. Submission Requirements

• Title your submission “PACS Refresh 2025 for Southeastern Power Administration”

• Include offeror name, address, telephone number, and email address

• Offeror must be registered in the System for Award Management, SAM, https://www.sam.gov/. All offerors who bid on Federal Government Contracts are required to be registered in SAM, keep the registration current, an update annually. There is no fee to register in SAM. When submitting the bid please include the offeror Unique Entity ID.

• “Remit to:” address, if different than mailing address

• Past performance information, to include recent and relevant contracts or the same or similar items and other references (included contracts number, points of contact with telephone numbers and other relevant information

17. Points of Contact

Contracting Officer Name: Juvonna Mattox

Address: 1166 Athens Tech Drive, Elberton, Georgia 30635

Email: juvonna.mattox@sepa.doe.gov ; Phone Number: 706-213-3808

Contracting Officer’s Representative (COR) Name: Hector Santiago

Address: 1166 Athens Tech Drive, Elberton, Georgia 30635

Email: hector.santiago@sepa.doe.gov; Phone Number: 706-213-3830

Please email any questions that you may have to the Contracting Officer listed above and an updated Q&A will be posted to SAM.gov on or before September 4, 2025. 10 days prior to the close of the RFP

Please note that this RFP does not constitute a contract, and we reserve the right to accept or reject any or all proposals received. Furthermore, any costs incurred by your organization in the preparation and submission of the proposal will be solely your responsibility and will not be reimbursed.

We look forward to receiving your proposal and appreciate your consideration of this request. Should you have any questions or require further clarifications, please do not hesitate to contact us.

mailto:juvonna.mattox@sepa.doe.gov