SOW (JCI Metasys 11 Upgrade) W911RX22Q0058.pdf

STATEMENT OF WORK (SOW)

FOR

UPGRADE OF JOHNSON CONTROLS METASYS SOFTWARE FOR FORT RILEY UMCS SYSTEM

1. DESCRIPTION OF SERVICES / GENERAL INFORMATION.

1.1 Description of Services: The Contractor shall provide all management, tools, supplies, equipment, and labor necessary to Upgrade the operating software for the Fort Riley Utility Management and Controls System (UMCS) to Johnson Controls Metasys Release 11. The requirement is for “Turn-Key” purchase of the software packages and installation.

1.2 General Information: Fort Riley Directorate of Public Work (DPW) is wanting to upgrade the software for their UMCS system from Johnson Controls Metasys Release 9 to Metasys Release 11.

2. SCOPE: This project is for the upgrade of the Johnson Controls UMCS server at Fort Riley. The upgrade will include the software upgrade for the Application & Data Server and the 4 Lonworks Control Servers to Release 11.

3. TECHNICAL REQUIREMENTS:

1. Provide and install the ADX server software upgrade, the upgrade of the (4) LCS server software that will include the 15K upgrade package for each and the engine image upgrade for all of the NAE’s on the base.

2. Image the (1) ADX server and the (4) LCS servers

3. Update SCAP scans, STIG checklists and Nessus vulnerability scans for each server. Once deployed, create a baseline image for each server. All server images shall be per DoD standards.

4. Upgrade the software at each of the NAE’s (Network Automation Engines) to the most current revision level possible.

5. Work with Fort Riley PW personnel on a small group basis with regards to Alarm Management and develop a plan moving forward for alarm criteria and priority.

6. Develop a Summary Page of most important alarms so that they can be recognized quickly without digging through pages of alarms.

7. Provide a software subscription that include the upgrades of the above-mentioned software for a period of 3 years. Subscription shall cover the cost of the software and the labor to implement the upgrades as they become available.

8. The contractor shall provide a warranty for all installed equipment for a minimum of 2 years.

9. Supplies and services provided shall be “turn-key.”

4. ADMINISTRATIVE REQUIREMENTS

4.1 Place of Work and Work Hours: Work shall be performed Monday thru Friday, except federal holidays, at building 200. The Contractor shall perform work during normal business hours. Normal business hours for the Government site are 08:00 AM – 5:00 PM. The DPW Point of Contact must approve, in advance, any work outside of normal business hours, and all overtime supporting this requirement.

4.2 Recognized Federal holidays: The contractor is not required to perform services on Federal Holidays.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth Christmas Day Independence Day

4.3 Security.

4.3.1 This requirement will not require access to classified and controlled or sensitive information and facilities.

Contractor personnel shall comply with all applicable security and safety regulations, guidance, and procedures, including local, referenced in this SOW and in effect at the work sites.

4.3.2 Access and General Protection Security Policy and Procedures. Contractor and all associated sub-contractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office (PMO), Director of Emergency Services (DES), or Security Office. Contractor workforce shall comply with all personal identity verification requirements of FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

4.3.2.1 For contractors that do not require CAC but require access to a DoD facility or installation. Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

4.3.3 Physical Security: The Contractor shall safeguard all Government equipment, information and property provided for Contractor use.

4.3.4 Key Control: All references to keys include key cards. The Contractor shall ensure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The Contractor shall immediately report any occurrence of lost or duplicate keys to the COR.

4.3.5 Lock Combinations: The Contractor shall ensure all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. The Contractor shall include these procedures in the Contractor’s QCP.

4.3.6 Emergencies and Force Protection Conditions. During declared emergencies and/or elevated Force Protection Conditions (FPCONs) Charlie or Delta, contractor performance under this contract shall be determined by the COR or KO. All Contractor employees providing services under this contract are required to report for duty as scheduled and remain on duty during declared emergencies and/or elevated FPCON levels unless otherwise directed by the KO or COR.

4.3.7 Operations Security (OPSEC). The Contractor shall comply with DoD Directive 5205.02E, Army Regulation 530-1, and the requiring activity OPSEC program. Failure to comply with the OPSEC directives shall be deemed adequate cause for the removal of a Contractor employee from performance on this contract and could be considered for appropriate legal action.

4.3.8 iWATCH Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within calendar 30 days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award. The training is in Exhibit A, Fort Riley iWatch Training.

4.4 Safety: The Contractor shall perform in a manner that assures maximum safety and protection for their employees and all personnel while performing work for this contract. The Contractor shall exercise surveillance on a continuing basis and shall eliminate or otherwise control existing or potential safety hazards.

4.4.1 The Contractor shall participate in the Government’s safety program. Compliance with provisions pertaining to safety of site facilities and equipment is mandatory. The Contractor shall establish and implement a comprehensive Safety Program Plan for use by contractor and sub-contractor employees. This Plan shall incorporate appropriate elements of 29 CFR 1910 and 1926, AR 385-10, NETCOM Reg 385-1 and applicable OSHA regulatory guidance.

4.4.2 The Contractor shall comply with all federal, state, and local policies, directives, laws and regulations.

During the performance of tasks requiring protective equipment and clothing, contractor employees shall wear safety items required by OSHA and as specified in the applicable regulations. The Contractor shall be responsible for providing personal protective equipment, clothing, and training.

4.4.3 The DPW Point of Contact may require the Contractor to cease operations associated with the performance of this contract for safety violation reasons. The Contractor shall correct any safety violations, caused by a contractor employee, during non-duty hours at no additional cost to the Government.

4.4.4 The Contractor shall ensure all employees receive the safety training required by all federal, state, and local laws and policies. The Contractor shall maintain the safety training records and make them available to the DPW Point of Contact and KO upon request.

4.5 Contractor Identification Requirements. Contractors performing work at Government workplaces shall provide their employees with an easily readable identification (ID) badge indicating the employee’s name, the contractor’s name, and a recent color photograph of the employee. Contractors shall require their employees to wear the ID badges visibly when performing work at Government workplaces, unless doing so would physically interfere with the employees ability to carry out assigned tasks.

4.6 Property and Material

4.6.1 Government Furnished Property (GFP). There will be no Government Furnished Property (GFP) provided under this contract.

4.6.2 Contractor Provided Equipment and Material

4.6.2.1 Contractor Property. The Contractor shall provide all equipment, parts, safety equipment and clothing, vehicles, tools, materials and items required to perform the requirements of this contract unless provided as GFP or incidental property. All Contractor provided equipment shall be clearly marked and stored separately from Government property. Upon completion or termination of this contract, the Contractor shall remove all Contractor-owned equipment/property. If the Contractor does not remove Contractor-owned items NLT thirty (30) calendar days after the conclusion of the contract, the Government will properly dispose of the items. The Contractor shall furnish safety protective equipment and clothing required for compliance with NETCOM Regulation 385-1 and other applicable regulations prior to performance start.

4.7 Service Contract Reporting. Reserved.

4.8 Contracting Officer’s Representative (COR). Reserved.

4.8.1 The Point of Contact for delivery, installation and de-installation is Mr. Michael Kerr at (785) 239-6150 or michael.p.kerr15.civ@army.mil .

5.0 Acronyms.

Acronym Definitions AR Army Regulation ARNET Army Reserve Network mailto:michael.p.kerr15.civ@army.mil

BBP Best Business Practices BDC Backup Domain Controller BRAC Base Realignment and Closure C4/IT Command, Control, Communication, and Computers/Information Technology CAC Common Access Card CAN Campus Area Network CDR Contract Discrepancy Report CDRL Contract Data Requirement List CMR Contractor Manpower Reporting CO/KO Contracting Officer COMSEC Communications Security CONUS Continental United States CSCB Computer System Configuration Baseline DA Department of the Army DA PAM Department of the Army Pamphlet DCP Defense Continuity Program DHCP Dynamic Host Configuration Protocol DIACAP DoD Information Assurance Certification and Accreditation Program DMZ Demilitarized Zone DNS Domain Name Server DoD Department of Defense DODD Department of Defense Directive DODI Department of Defense Instruction DOIM Directorate of Information Management DREN Defense Research Engineering Network EMCS Energy Management and Control System FAR Federal Acquisition Regulation FSC Federal Service Code FSO Facility Security Officer GIG Global Information Grid IA Information Assurance IAVA Information Assurance Vulnerability Alert IAW In-Accordance-With IM/IT Information Management/Information Technology INFOSEC Information Security IP Internet Protocol IPR In-Progress Report IT Information Technology IT/IA Information Technology/Information Assurance IT-I Information Technology Level I IT-II Information Technology Level II

IT-III Information Technology Level III JPAS Joint Personnel Adjudicative System JWICS Joint Worldwide Intelligence Communications System LAN Local Area Network MAC Moves, Adds, and Changes NACLC National Agency Check with Local Agency and Credit Check NAS Network Attached Storage NIPRNET Non-Secure Internet Protocol Router Network OCI Organizational Conflict of Interest OPM Office of Personnel Management OU Organizational Unit PDA Personal Digital Assistant PDC Primary Domain Controller PK Public Key PKI Public Key Infrastructure PM/TD Project Manager/Technical Director POC Point of Contact PPSM Ports, Protocols, and Services Management QA Quality Assurance QAE Quality Assurance Evaluator QC Quality Control QCP Quality Control Plan SA/NM Systems Administrator/Network Manager SAN Storage Area Network SBU Sensitive But Unclassified SIMNET Simulations Network SIPRNET Secret Internet Protocol Router Network SOP Standing Operating Procedures SOW Statement of Work SSBI Single Scope Background Investigation TB Technical Bulletins TLA Top-Level Architecture TM Technical Manuals TS Top Secret TT Trouble Tickets USC United States Code UIC Unit Identification Code UPS Uninterrupted Power Supply URL Uniform Resource Locator VPN Virtual Private Network WAN Wide Area Network

WINS Windows Internet Name Service XML Extensible Markup Language

7.3 Definitions.

CONTRACTOR: A supplier or vendor having a contract to provide specific supplies or service to the government.

The term used in this contract refers to the prime.

CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

SUBCONTRACTOR: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

WORKDAY: The number of hours per day the Contractor provides services in accordance with the contract.

WORK WEEK: Is defined as Monday through Friday, unless specified otherwise.