SOW_N6660425Q0168.pdf

v4.0_DEC 18 2024

STATEMENT OF WORK (SOW)

(Security Monitoring Center (SMC))

1.0 BACKGROUND

The Naval Undersea Warfare Center Division, Newport (NUWCDIVNPT) is a naval research activity, operating under the direction of the Commander, Naval Sea Systems Command

(NAVSEA). The Division Corporate Operations is an integral part of NUWCDIVNPT, continually working to improve the efficiency and effectiveness of the Division’s business processes. The Division Corporate Operations provide responsive and affordable services in the area of security to maintain and sustain a compliant and secure workplace. The Security Division of the Division Corporate Operations must maintain compliance with Department of Defense

(DoD), Secretary of the Navy (SECNAV), and NAVSEA security regulations, directives, instructions, and policies governing operations at all NUWCDIVNPT sites. The Security

Division of the Division Corporate Operations must maintain compliance with Department of

Defense (DoD), Secretary of the Navy (SECNAV), and NAVSEA security regulations, directives, instructions, and policies governing operations at all NUWCDIVNPT sites. The

NUWCDIVNPT Security and Monitoring Center (SMC) is a critical part of meeting these compliances and requires personnel to support security systems monitoring, communication coordination, emergency response coordination and security compliance checks.

2.0 SCOPE

The SMC serves as the central point of contact (POC) for the NUWCDIVNPT Security Division and its Detachments for; security, antiterrorism/force protection (AT/FP), and Emergency

Management (EM) related incidents. The SMC facilitates and coordinates emergency response efforts with the host installation, as well as federal, state, and municipal public safety partners.

The SMC acts as the NUWCDIVNPT Command Duty Officer (CDO) representative

(administrative duties only) and provides on-site access services. The SMC shall support numerous requirements including; communication support, testing of SMC systems and equipment, Security systems monitoring/data recording and emergency response, and coordination for NUWCDIVNPT, its detachments, and associated assets supporting NUWC.

NUWCDIVNPT maintains Detachments at the following locations;

Okahumpka, FL: Towed Array Calibration (Bugg Spring)

Williamsburg, VA: Yorktown / Cheatham Annex

Bangor, WA: Submarine Base Bangor

Kings Bay, GA: Submarine Base Kings Bay

Fishers Island, NY: Electromagnetic Test Facility

West Palm Beach, FL: Atlantic Undersea Test and Evaluation Center (AUTEC)

Andros Island, Bahamas: Atlantic Undersea Test and Evaluation Center (AUTEC)

Mayport, FL: Shipboard Electronics Systems Evaluation Facility (SESEF)

Dresden, NY” Seneca Lake Sonar Test Facility

Virginia Beach, VA: Ft. Story / SESEF

Niantic, CT: Dodge Pond Acoustic Measurement Facility

Rota, Spain: SESEF

Norfolk, VA: St. Julien's Creek Annex Field Engineering Office (FEO)

The Contractor shall perform:

General Monitoring

Compliance Checks

Lock And Key Support

Security Report and Pass Down Log

Security System Utilization

Vehicle Operation

SMC Program Management

SMC Systems and equipment testing as required

2.1 Places of Performance

The work specified herein shall be performed at the Naval Undersea Warfare Center, Division

Newport (NUWCDIVNPT) or the Naval Station, Newport Rhode Island (NAVSTA) designated or an alternate Security Monitor Center

2.2 Authorized Users

Code 10 is authorized to place Over Head funding on this Purchase Order for Code 105 Security

Division services provided throughout NUWCDIVNPT, its detachments, Headquarters, and offsite locations.

2.4 Types of Funding

This requirement shall be funded using Overhead (OH).

3.0 Applicable Documents

The contractor shall perform the tasking required in Section 4.0 in accordance with (IAW) the below Applicable Documents (ADs).

Number Name Revision

Number / Date

Task

Number

3.1 NUWCDIVNPT M-5500.4 Command

Security Manual

(SECMAN), Change 1

16JUN23 4.0

3.2 NUWCDIVNPT Physical Security

(PHYSEC) Plan

26FEB21 4.0

3.3

NUWCDIVNPT M-5530.1 Security of Sensitive, Conventional Ammunition and Explosives

14NOV23 4.0

3.4 NUWCDIVNPT Antiterrorism (AT)

OPORD 3300-23 AT

Plan

23JUN23 4.0

3.5 NUWCDIVNPTINST 3440.1C Emergency

Management (EM) Plan

29FEB16 4.0

3.6 NUWCDIVNPT Command Security

Division SMC Standard Operating

Procedures (SOPs)

31JUL21 4.0

3.7 NUWC SMC Emergency Incidents Matrix 23 DEC 2020 4.0

3.8 EM SOP 1052-21-001 - Giant Voice 05 OCT 2021 4.0

3.9 NUWC SMC SOPs REV 7 05 OCT 2021 4.0

4.0 OPNAV M-5100.23 - Chapter 36 - Traffic

Safety Program

05JUN20 4.0

4.1 NAVSTANPTVINST 5100.1H - Traffic

Safety, Regulations and Enforcement

11APR17 4.0

4.2 NUWCDIVNPT Safety and

Occupational Health Program

24MAY18 4.0

4.0 TECHNICAL REQUIREMENTS

Core working hours are 0800-1600 Monday thru Friday excluding observed holidays. Project manager shall ensure resources, assignments, staff, and training are administered to support the

NUWCDIVNPT SMC SOW. The Contractor shall designate one (1) Shift Lead for each of the three (3) duty periods daily, 7 days per week.

Contractor shall complete all tasks within the SOW 4.0 in accordance with the SMC SOP’s and other identified AD identified in Section 3.0.

Individual tasking shall be provided to the contractor via SharePoint site(s), electronic inbox, or white board tasking.

4.1 GENERAL MONITORING

4.1.1 On a daily basis using Government Furnished Information (GFI), the contractor shall monitor and record events on the advanced Electronic Security System (ESS) inclusive of

Electronic Physical Access Control Systems (ePACS), Intrusion Detection Systems (IDS), Premises Control Units (PCU), alarm panels, DoN ELMR and RISCON two-way radios, and other security and communications devices located within the SMC. In response to alarms, reports from personnel, security, or outside agencies, the contractor shall document, and initiate coordination efforts. These efforts shall include but are not limited to relaying alarm activations and other relevant matters to the Command Navy Region Mid- Atlantic Regional Dispatch

Center (CNRMA-RDC) and/or host command, NAVSTANPT (N343) Police/Security and (N30)

Fire and Emergency Services.

4.1.2 On a daily basis using GFI, the contractor shall monitor the closed-circuit television

(CCTV) system which monitor NUWCDIVNPT critical areas within the installation enclave, the host command, NAVSTANPT, the NUWCDIVNPT Narragansett Bay Test Facility/Still

Water Basin (NBTF/SWB) complex, NUWCDIVNPT Detachments, sites, and activities supporting NUWCDIVNPT. The contractor shall document observations and provide electronic reports of incidents upon request, and initiate response and coordination efforts to any observed anomalies or suspicious activities. CDRL A001

4.1.3 On a daily basis using GFI the contractor shall act as the NUWC non-Core hours primary

POC for communication. All communications shall be documented in the SMC Desk Journal.

The contractor shall initiate necessary notifications or requested coordination efforts.

4.1.4 On an ad hoc basis using GFI, the contractor shall receive complaints concerning compliance and safety. The contractor shall promptly report, document, and initiate coordination efforts as required. per the notification requirements stated in the SMC/SOP.”

4.1.5 On a daily basis using GFI, the contractor shall provide monitoring and response support of the ESS/LENEL and other alarm systems. Administration consists of, at a minimum, the masking or unmasking the alarms on/off, (activate/deactivate) door locks, Intrusion Detection

System (IDS), motion sensors, and controlling space access as approved by the Command

Security Division personnel or the Command Duty Officer (CDO).

4.1.6 On an ad-hoc basis using GFI, the contractor shall provide on-scene support, in accordance with this SOW, at emergencies and 911 calls. The Contractor shall document and assist Command Security Division personnel or the CDO with access control, observation, coordination, and information gathering efforts.

4.1.7 Upon receipt of GFI, the SMC Project Manager shall update and maintain all after-hours and emergency recall information and reference materials in the SMC Recall Reference

Workbook ensuring accuracy for all updates.

4.1.8 On an ad-hoc basis, the Contractor shall facilitate and coordinate emergency response efforts with host installation, NAVSTANPT Emergency Services/Public Safety (i.e., Medical, Police, Fire) via telephone or Department of Navy (DoN) Enterprise Land Mobile Radio

(ELMR) two-way communications with NAVSTA Newport assets and/or the Command Navy

Region Mid-Atlantic, Regional Dispatch Center (CNRMA-RDC), and during situations involving emergency mutual aid support, two-way communications with Federal, State and

Municipal Public Safety partners via the Rhode Island Statewide Communications Network

(RISCON) two-way radio; acting as the NUWCDIVNPT Command Duty Officer (CDO) representative (administrative duties only); unlocking secured doors (when applicable);

recording reports received and contacting designated POCs for repair actions (e.g., floods, broken lighting, structural and utilities damage); providing field assistance for authorized personnel to access NUWCDIVNPT secured building or office spaces within the installation enclave, NUWCDIVNPT’s assets located on NANSTANPT, the host command, and the

NUWCDIVNPT NBTF/SWB complex.

4.1.9 On an Ad-hoc basis using GFI, the contractor shall document all NUWCDIVNPT and off-site Detachments, communications regarding security, safety and systems outlined in this

SOW to the in the SMC desk journal.

4.1.10 SMC Project Manager shall provide monthly metrics data to Code 1052. These data reports will include the following number of activities; the number of LENEL Events/Alarms, law enforcement/security/fire/EMS Incidents, Crisis Alerts (911) received, NLETS queries performed, Telephone Assistance calls, SS1/SS2 alarms; RAMs performed by the SMC, 2nd security checks performed, safe/secure room checks/SSPs performed, office unlock requests, additional container checks in support of Code 1053, LENEL communications losses, and number of expired/lost/stolen badges detected in LENEL. CDRL A001

4.2 COMPLIANCE CHECKS

4.2.1 On a daily basis using GFI, the contractor shall conduct compliance checks and audits of

GSA safes and secure rooms across NUWCDIVNPT installation as well as NUWCDIVNPT assets located on Naval Station Newport.

4.2.2 On a daily basis using GFI, the contractor shall respond to calls from Secure spaces from their space custodians to perform secondary validation checks on their SF-702 Security

Container Check Sheet to ensure security of safes, secure spaces, vaults, and doors are locked and secured.

4.2.3 On a daily basis using GFI, the contractor shall perform and record assigned Random

Antiterrorism Measures (RAMs), document completions in the SMC Desk Journal and report findings/discrepancies to the NUWCDIVNPT Code 1052, Anti-Terrorism Officer (ATO).

Contractor shall supply weekly and monthly RAM schedules and completion reports to the

NUWCDIVNPT ATO, IAW CDRL A002.

Note:

“Secure Rooms” is an all-encompassing term which includes secure rooms with limited access protocols)

Gate 1 at Naval Station Newport is operated and manned 24 hours per day 7 days per week, 365 days per year. Gate 17 at Naval Station Newport is operated and manned, Monday – Friday from 0600 – 1800). When Gate 17 is not being operated and manned, access to NUWCDIVNPT assets at Naval Station Newport will require a 4-mile one-way trip to Gate 1.

4.2.4 On a daily basis using GFI, the contractor shall perform, record, and report assigned

Security Surveillance Program (SSP) checks, document completions in the SMC Desk Journal, and report findings/discrepancies to the NUWCDIVNPT Code 1051, SSP Coordinator a and/or Activity Security Manager (ASM), IAW CDRL A001.

4.2.5 On a daily basis, using GFI, the contractor shall perform assigned security compliance checks of designated Restricted Areas (RAs), Critical Infrastructure (CI), Mission Essential

Vulnerability Areas (MEVAs), facilities, containers, perimeter, building ingress and egress points, during each duty shift/scheduled tour of duty, to detect any deficiencies or violations of security standards. All security violations and deficiencies detected shall be documented via the SMC Desk Journal and General Services Administration (GSA) Form 1500, Report of

Security Violation, and promptly reported to the appropriate Command Security representatives, IAW CDRL A001.

4.3 LOCK AND KEY SUPPORT

4.3.1 On a daily basis using GFI, the contractor shall monitor and document in SMC Desk

Journal, the daily issuance of specific security keys (to include Ammo Magazine keys).

4.3.2 On a daily basis using GFI, the contractor shall respond to and assist NUWCDIVNPT employees that are locked out of their offices/work areas within the installation and

NUWCDIVNPT assets located on NAVSTANPT. They shall accomplish this by unlocking doors with a master key maintained by the SMC.

4.4 SECURITY REPORT AND PASS DOWN LOG

4.4.1 On a daily basis using GFI, the contractor shall maintain the SMC Desk Journal as an electronic record of all official command records that is continually maintained by the

SMC.

4.4.2 On a daily basis using GFI, the contractor shall update and document the SMC Desk

Journal to record daily events including but not limited to; shift changes, security & compliance checks and audits, unsecure conditions, unusual events, reports of structural and utility problems, breaks and emergencies. Entries into the SMC Desk Journal shall be complete as to who, what, when, where, how, and why the event occurred; notifications made; actions directed and taken;

and shall include a follow up or resolution to the event.

4.4.3 On a daily basis using GFI, whenever the Contractor is unable to document all activity and events in the SMC Desk Journal, other electronic or hand-written means shall be utilized.

When the SMC Desk Journal system is restored, the Contractor shall chronologically transcribe all entries/activity into SMC Desk Journal.

Note:

Use of standard phraseology, nomenclature, and grammar is required. In the event the digital desk journal is unavailable for use (due to power failure, hardware /software failure or communication failure), the contractor shall maintain a hard-copy log and enter log information into the digital log as soon as it is available for use.

4.5 TEMPORARY STORAGE OF CLASSIFIED MATERIAL

4.5.1 On an ad-hoc basis using GFI, the contractor shall take receipt and store Secret and below level classified information/materials (i.e. documents and hard drives) in a temporary storage unit, GSA Security Containers, provided as GFP. Storage shall be done in accordance with

(IAW) SMC SOPs.

4.6 GENERAL SMC SYSTEM AND EQUIPMENT TESTING

4.6.1 On an Ad-hoc basis using GFI, the contractor shall test Security Monitoring Center

Systems and equipment. On an Ad-hoc basis the contract shall document finding in the SMC

Desk Journal.

4.7 VEHICLE OPERATION

4.7.1 On a daily basis, the Contractor shall support tasks using a contractor provided vehicle in support of 4.0 tasks. The vehicle shall display a distinctive Contractor emblem for identification purposes.

5.0 PROGRESS REPORTS

For SOW Tasks 4.1 – 4.7, the contractor shall provide a Security Monitoring Activity Report that indicates the progress of work, status of the program(s), and existing or potential problem areas. The contractor shall submit the Security Monitoring Activity Report for the same timeframe as each invoice submitted in the procurement Integrated Enterprise Environment (PIEE) module of Wide Area Workflow (WAWF) (IAW CDRL A002).

5.1 Contract status report

The Contractor shall prepare a Contractor’s Status Report that indicates the progress of work, status of the program(s), and existing or potential problem areas for all assigned tasks. The

Contractor shall submit the Contract Status Report for the same timeframe as each invoice submitted in the Wide Area Workflow (WAWF) Module of the Procurement Integrated

Enterprise Environment (PIEE).

Deliverable: CDRL A003.

5.2 Training

5.2.1 The Contractor shall require each Contractor employee performing work at any NUWC

Division Newport site, who has a Common Access Card (CAC) and an NMCI Account to complete all required Mandatory training and any applicable Limited Audience required training(s). The Contractor shall fill out and submit to the Government the Training Completion

Status Report, GFI #25, affirming all Mandatory training and any applicable Limited Audience required training(s) are completed. The required training and required training schedule is available at the following website: [WILL BE PROVIDED AT AWARD] under Mandatory

Training Instructions. See the .pdf Mandatory Training Instruction – Contractors Only.

Deliverable: CDRL A00A.

6.0 GOVERNMENT FURNISHED INFORMATION

The following Government Furnished Information (GFI) shall be made available under this contract. The Government functional area lead shall deliver these documents electronically or post to a shared folder accessible to the contractor.

GFI

# Name Task Number

1 NUWCDIVNPT Security Containers and Secure

Room access List.

All

2 911 emergency response guide All

3 NUWCDIVNPT Command Security Division

Standard Operating Procedures (SOPs)

All

4 SMC DESK JOURNAL All

5 LENEL OnGuard 7.5 Alarm Monitoring User Guide

(current LENEL OnGuard 8.2.524.0 User Guide embedded in program)

All

6 LENEL OnGuard 7.5 System Administration User

Guide (current LENEL OnGuard 8.2.524.0 User

Guide embedded in program)

All

7 IndigoVision Control Center Operator Guide All

8 IndigoVision Incident Player Operator Guide All

9 CPI OpenFox Messenger User Manual, Ver 3

All

10 CPI OpenFox Desktop User Manual, Ver 3.0 All

11 CPI OpenFox Desktop Shortcuts, Ver 3.00 All

12 Criminal Justice Information Services (CJIS) Security

Policy, Ver 5.9

All

13 Criminal Justice Information Services (CJIS) Security

Policy, Ver 5.9

All

14 NCIC CJIS Security Policy Requirements Companion All

15 National Crime Information Center (NCIC) Operating

Manual

All

16 Interstate Identification Index (III)/National

Fingerprint File (NFF) Operational & Technical

Manual

All

17 NCIC Code Manual All

18 NCIC/III Technical & Operational Updates (TOUs) All

19 Rhode Island Law Enforcement Telecommunications

System (RILETS) Level 3 Security Awareness

Training

All

20 2023 NCIC-NLETS-RILETS CPI Open Fox Guidance

(Rev 5) * Covered in SMC SOP 21-017

All

21 Giant Voice System Manual All

22 Random Anti-Terrorism Measures SOP All

23 Classified custody receipts All

24 9575A Iridium Satellite Phone User Manual All

25 FY Mandatory Training Instructions for Contractors All

8.0 QUALITY SURVEILLANCE AND PERFORMANCE STANDARDS

RESERVED

9.0 INFORMATION AND COMMUNICATION TECHNOLOGY (ICT)

ACCESSIBILITY REQUIREMENTS

The Government has determined that Section 508 EIT Accessibility Standards are not applicable to this solicitation.

10.0 SECURITY COMPLIANCE

10.1 Program protection

SECURITY: All Contractor personnel shall adhere to the Security provisions of 32 CFR Part 117

– National Industrial Security Program Operating Manual (NISPOM) and the security requirements of the attached DD254. While performing work associated with NUWCDIVNPT, Contractor personnel shall comply with the NUWCDIVNPT Security Manual and, if at another facility, the security regulations of the host facility. Applicable FAR, DFARS, NMCARS clauses, and NAVSEA text shall be adhered to in the performance of this contract. Security incidents shall be promptly reported through the companies Facility Security Officer (FSO), to the Contracting Officer’s Representative (COR), Technical Point of Contact (TPOC), and the

Cognizant Security Office to NUWCDIVNPT Security.

Controlled Unclassified Information (CUI) including Legacy FOUO and Covered Defense

Information (meeting the definition of 48 CFR 252.204–7012(a)) generated and/or provided under this contract shall be marked and safeguarded as specified in DoD Instruction 5200.48, CUI available at:

https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/520048p.PDF. Any product containing Covered Defense Information shall be assigned a distribution statement (distribution statements B through F) in accordance with DoDI 5230.24 (Distribution Statements on Technical

Documents); and DoDI 5230.24, Enclosure 3 Procedures, available at https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/523024p.pdf

INFORMATION SECURITY: If the work is performed at the Contractor's facility, the

Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of classified information and controlled unclassified information (CUI) and to control distribution of CUI in accordance with National Industrial Security Program

Operating Manual (NISPOM) codifying 32 CFR Part 117, NISPOM Rule, and SECNAV M-

5510.36B. If the work is performed at the Government's facility, the Contractor shall comply with facility policy.

CUI INCIDENT REPORTING AND RESPONSE: The Contractor shall promptly report any unauthorized, inadvertent, or illegal release or disclosure of CUI to the Contracting Officer’s

Representative / Technical Point of Contact (TPOC), Procuring Contracting Officer, and the

Security Office. Contractor personnel shall coordinate this effort through the relevant industry site FSO.

PUBLIC RELEASE: Any controlled unclassified information pertaining to this contract shall not be released for public dissemination, including posting to any social media sites such as

Facebook or Twitter, unless it has been approved for public release by appropriate U.S.

Government authority. Proposed public releases shall be submitted for approval prior to release through Commander, Naval Undersea Warfare Center, Division Newport, Newport, RI 02841.

10.2 Operations security (OPSEC)

OPSEC is a process that identifies critical information to determine if friendly actions can be observed by adversary intelligence systems, determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate or reduce adversary exploitation of friendly critical information.

The Contractor shall develop, implement, and update and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the Contractor and any subcontractor during performance of the contract. The

Contractor shall be responsible for the subcontractor implementation of the OPSEC requirements. The Contractor developed OPSEC program may include Information Assurance and Communications Security (COMSEC). The OPSEC program shall be in accordance with

National Security Decision Directive (NSDD) 298, and at a minimum shall include:

1) Assignment of responsibility for OPSEC direction and implementation.

2) Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures.

3) Establishment of OPSEC education and awareness training.

4) Provisions for management, annual review, and evaluation of OPSEC programs.

5) Flow down of OPSEC requirements to subcontractors when applicable.

While performing aboard NUWC or NUWC sites, the contractor shall: comply with all OPSEC instructions and policies detailed in the NUWCDIVNPT Security Manual; Include OPSEC as part of its ongoing security awareness program and take all required Agency training;

Be responsive to the Supporting OPSEC Manager on a non-interference basis; and Protect sensitive unclassified information and activities, which could compromise classified information or operations, or degrade the planning and execution of operations performed by the Requiring

Organization and contractor in support of the mission.

10.3 Electronic spillage

Electronic Spillage (ES) is defined as a situation where information of higher classification than a system is authorized to process is introduced into that system, intentionally or otherwise. If a

Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the

Government for ES remediation will be charged to the Contractor.