SOW Bldg 617 Access Control System 28 Aug 2026.docx

STATEMENT OF WORK (SOW)

Access Control System and Peripherals Luke Air Force Base, AZ

1.0 OBJECTIVE

Luke AFB requires the procurement, installation, programming, and testing of an electronic standalone Access Control System (ACS) for four (4) designated entry points at Building 617, Luke AFB, AZ. The purpose of this effort is to enhance physical security, restrict unauthorized entry, and enforce compliance with applicable Department of the Air Force physical security directives.

2.0 SCOPE OF WORK

The Contractor shall furnish all labor, materials, equipment, tools, and incidentals necessary to design, install, program, and test a fully functional, turn-key electronic Access Control System (ACS).

Major components of this effort include:

System Isolation: Provision of an independent, standalone Access Control System (ACS) designed, configured, operated, and maintained independently of any external network. The ACS and its workstation shall remain completely air-gapped from the base LAN and the public internet.

Access Control Hardware: Procurement and installation of proximity card readers with built-in keypads, electric door strikes, standalone door controllers, conduit, low-voltage cabling, junction boxes, and lockable enclosures.

Workstation: Procurement, setup, and programming of a dedicated modular computer workstation to host and run the ACS management software.

Integration and Programming: Integration of all physical hardware with the new system software, including the enrollment of credentials, PIN configurations, and history logs.

Testing and Training: Execution of comprehensive testing, a five-day continuous burn-in test, and operator/administrator training for designated Government personnel or personnel designated by the Government.

3.0 DOOR LOCATIONS & CORE FUNCTIONALITY

The Contractor shall install access control hardware at the following four (4) designated doors:

4.0 SITE SURVEY

Due to the complexity of facility layouts and specific structural requirements, it is highly recommended that the Contractor perform an on-site survey and validation of Building 617 prior to submitting a final proposal. Arrangements for the site survey must be coordinated through the Government Point of Contact (POC).

5.0 ACCESS TO THE BASE AND FACILITY

The Contractor shall be responsible for coordinating base access for all personnel, vehicles, and equipment through the Luke AFB Visitor Control Center.

The Contractor shall coordinate facility access with the designated Government representative to ensure doors are opened and closed during and after the accomplishment of work.

6.0 WORKING HOURS

Standard working hours shall be from 7:00 A.M. to 3:00 P.M. local time, Monday through Friday.

Work shall not be performed on Federal Holidays or Air Education and Training Command (AETC) / Air Combat Command (ACC) Family Days unless explicitly authorized in writing by the Contracting Officer (CO).

7.0 SPECIFIC TECHNICAL REQUIREMENTS

7.1 Supply Chain Risk Management & Compliance

Trade Agreements Act (TAA): All provided hardware, software, and components must be TAA-compliant.

NDAA Section 889: The Contractor shall certify that no products, components, or services are manufactured by or sourced from prohibited Chinese telecommunications and video surveillance manufacturers in accordance with Section 889 of the National Defense Authorization Act (NDAA).

7.2 Hardware & System Standardization

Platform Standardization: All software and hardware shall be standardized on the Lenel OnGuard platform, Version 8.3 (or the latest approved version).

Equipment Pedigree: All hardware items must duplicate equipment that has been in satisfactory use for at least two (2) years prior to bid opening. No prototype or beta-release hardware is acceptable.

Support Organization: All equipment must be fully supported by a local certified technical service organization located within a reasonable response distance to Luke AFB.

7.3 Workstation Technical Specifications

The standalone workstation shall meet or exceed the following minimum technical requirements:

Display: One (1) high-definition monitor supporting at least one (1) HDMI and one (1) DisplayPort connection.

Input Devices: Standard wired keyboard, wired mouse, and a dedicated USB wired 10-digit keypad for secure badge PIN input.

Connectivity: A minimum of two (2) USB ports available in addition to those required for standard peripheral devices (keyboard, mouse, PIN pad).

Operating System: Windows 11 (or latest version) Security: Access to the Operating System must require a secure, unique, and complex username and password.

Performance Margins: The processor (CPU) speed and Random Access Memory (RAM) must be sized to a minimum of 150% of the official manufacturer's recommended system requirements for the installed version of Lenel OnGuard.

7.4 Individual Door Operational Criteria

At a minimum, each integrated door control system must meet the following operational parameters:

Access Grant: Upon presentation of an authorized credential (proximity card, PIN, or combined card+PIN), the door electric strike must release, allow access, and immediately return to a locked state upon the door closing.

Access Denial: Upon presentation of an unauthorized credential, the card reader must emit an audible warning (beep) and/or a visual indication, and the door lock must remain fully secured.

Fail-Secure Standard: In the event of a power outage, the electric strikes must default to a Fail-Secure state (locked from the exterior) to maintain physical security environment, while allowing immediate, unhindered mechanical egress from the interior (complying with life safety and fire codes).

Monitoring & Logging: The workstation event screen must log and display real-time events, including "Access Granted" (with username), "Access Denied" (with credential ID), "Door Forced Open" alarms, and "Door Held Open" alerts.

7.5 Core System Capabilities

The ACS shall provide the following administrative features:

Manual Control: Allow authorized system operators to manually command electric strikes to lock, unlock, or bypass schedules directly from the workstation interface.

Time Schedules: Support configurable, rule-based schedules to govern automatic locking/unlocking windows and credential privilege windows.

Special Days: Support an unlimited number of user-definable Special Days (such as federal holidays, exercises, or family days) to apply exceptions to standard weekly schedules.

System History Reporting: Support generating and exporting historical event logs, tracking user access, denied attempts (with justifications), and door tamper alarms.

Licensing: All software, modules, and database packages must include fully pre-paid licensing and support for a minimum of one (1) calendar year from the date of system acceptance.

8.0 INSTALLATION REQUIREMENTS

Standards compliance: Installation must be executed in accordance with the manufacturer's official instructions, national electrical codes, and local physical security mandates.

Surge & Noise Mitigation: Cable grounding and isolators shall be installed to eliminate ground loops, electromagnetic interference (EMI), and electrical surges from impacting communication lines.

Conduit Requirements: All fiber-optic runs and low-voltage wiring routed through exposed areas (excluding dedicated telecommunications closets) shall be enclosed in metallic raceways or rigid steel conduit to prevent physical tampering.

9.0 WARRANTY & SERVICE LEVEL AGREEMENTS (SLA)

The Contractor shall provide a comprehensive 1-year unconditional parts and labor warranty beginning on the date of final Government acceptance.

Critical System Failures: For emergencies (e.g., workstation failure, database crash, or a door failing to lock/secure), the Contractor shall provide an on-site technician within 72 hours of notification.

Collateral Damage: If Contractor warranty service work causes collateral damage to associated equipment, the Contractor shall restore the system to full operational status at no additional cost to the Government.

10.0 ACCEPTANCE AND BURN-IN TESTING

Functional Testing: The Contractor shall perform functional testing of every reader, lock, strike, sensor, and workstation control prior to requesting government inspection.

Burn-in Period: Upon successful preliminary testing, the Contractor shall initiate a five (5) day continuous, error-free burn-in test under near-real operating conditions.

If any hardware or software failure, anomaly, or database corruption occurs during this five-day window, the Contractor shall remediate the deficiency, and the 5-day burn-in clock shall reset to Day 1, unless otherwise specified by the Contracting Officer (CO).

Housekeeping: Before final handoff, the Contractor shall clean all worksites, removing excess wiring, construction debris, packaging, tools, and equipment.

Sign-Off: The system shall only be deemed accepted when the designated Government representative inspects the final physical installation, validates the error-free burn-in log, and signs the installation acceptance paperwork.

11.0 Points of Contact

Facility Managers:

Larry Binion (623) 856-3376 Matthew Ruscha (623) 856-7209

Functional POCs:

Logan Haulot: (623) 856-6299 Raymond Lewis: (623) 856-3505