SP4702-24-Q-0009 Amendment 001.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO.

7009603478

4. REQUISITION/PURCHASE REQ. NO. 5. PROJECT NO. (If applicable)

6. ISSUED BY CODE SP4702 7. ADMINISTERED BY (If other than Item 6) CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

CODE FACILITY CODE

SP470225R0002

X

2024 DEC 27

10A. MODIFICATION OF CONTRACT/ORDER NO.

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of OffersX is extended, is not extended.

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

12. ACCOUNTING AND APPROPRIATION DATA (If required)

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO.

IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc. ) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

E. IMPORTANT: Contractor is not, X is required to sign this document and return 1 copies to issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A NAME AND TITLE OF SIGNER (Type or print)

NSN 7540-01-152-8070

Previous edition unusable

STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA FAR (48 CFR) 53.243

16B. UNITED STATES OF AMERICA15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

(a) By completing Items 8 and 15, and returning

DCSO COLUMBUS-DIVISION-1

PO BOX 3990

COLUMBUS OH 43218-3990

USA

15C. DATE SIGNED 16C. DATE SIGNED

D. OTHER (Specify type of modification and authority)

3. EFFECTIVE DATE

(X)

CHECK ONE

9A. AMENDMENT OF SOLICITATION NO.

9B. DATED (SEE ITEM 11)

13. THIS APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

X January 24th, 2025 at 3pm EST

DBG0003

Cross-Out

CONTINUATION SHEET

CONTINUED ON NEXT PAGE

PAGE 2 OF 2 PAGESREFERENCE NO. OF DOCUMENT BEING CONTINUED:

SP4702-25-R-0002 001

Amendment 01 is issued to incorporate the below changes to Solicitation # SP4702-25-R-0002:

Extend the Solicitation Due date:

New Solicitation Closing Date: January 24th, 2025 at 3pm EST.

Response to Solicitations Questions: See attachment

Site Visit:

- A pre-proposal site visit will be held on January 22, 2025, at 10:00 AM. All prospective contractors are encouraged to attend.

- Any contractor who plans to attend MUST notify the Contracting Specialist, Becky Hard at Becky.Hard@dla.mil NO LATER THAN (NLT) January 21, 2025, atm 10am EST with their DBIDS Number.

o A pre-enrollment in the DBIDS system is required. Please visit the following link ( https://dbids-global-enroll.dmdc.mil/preenrollui/#!/ ), fill out the form using Becky Hard as a sponsor, and send the resulting DBIDS number to the Contracting Specialist NLT January 21st, 2025 at 10am EST. This date will not be extended.

- Site Visit Clauses is hereby incorporated: 52.237-1

- 52.237-1 Site Visit. --Site Visit (Apr 1984) Offerors or quoters are urged and expected to inspect the site where services are to be performed and to satisfy themselves regarding all general and local conditions that may affect the cost of contract performance, to the extent that the information is reasonably obtainable. In no event shall failure to inspect the site constitute grounds for a claim after contract award.

- (End of provision)

CLINS Added to allow pricing to be quoted by Job Role:

CLIN 0006 - Program Manager – The work specified within the PWS relies on the management of a PM CLIN 0007 - Management Analyst – Work specified within the PWS requires procurement of parts and material(s), which are duties and responsibilities of a management analyst.

CLIN 0008 - Drafter – Duties specified within the PWS, as well as certain deliverables require the expertise of a drafter.

Use attached updated Bid Sheet When submitting quotes.

All other terms and conditions remain the same

BID FORM

Maintenance of ESS Systems for DSCC Columbus

BASE YEAR:

CLIN 0001 –

(1) Full Time Software Engineer/ Network Administrator = $ ______________________

Labor Rate: $ Per Hour Per Associate = $______________________

CLIN 0002 -- (120) Hours Overtime Software Engineer = $ ______________________

OT Labor Rate: $ Per Hour Per Associate = $ ______________________

CLIN 0003 – (2) Full Time Field Technicians: = $ ______________________

CLIN 0004 – (120) Hours Overtime Field Technicians = $ ______________________

CLIN 0005 – Repair/ Maintenance Parts and Material = NTE $ 185,000.00

CLIN 0006 – Program Manager = $ _______________________

CLIN 0007 – Management Analyst = $ ________________________

CLIN 0008 – Drafter = $________________________

TOTAL BASE YEAR: = $ _____________________

Option Year 1: PoP: 28 Feb 2026 – 27 Feb 2027

CLIN 1001 –

CLIN 1002 -- (120) Hours Overtime Software Engineer = $ ______________________

CLIN 1003 – (2) Full Time Field Technicians: = $ ______________________

CLIN 1004 – (120) Hours Overtime Field Technicians = $ ______________________

CLIN 1005 – Repair/ Maintenance Parts and Material = NTE $ 185,000.00

CLIN 1006 – Program Manager = $ _______________________

CLIN 1007 – Management Analyst = $ ________________________

CLIN 1008 – Drafter = $________________________

TOTAL OPTION YEAR 01: = $ _____________________

Option Year 2: PoP: 28 Feb 2027 – 27 Feb 202

CLIN 2001 –

CLIN 2002 -- (120) Hours Overtime Software Engineer = $ ______________________

CLIN 2003 – (2) Full Time Field Technicians: = $ ______________________

CLIN 2004 – (120) Hours Overtime Field Technicians = $ ______________________

CLIN 2005 – Repair/ Maintenance Parts and Material = NTE $ 185,000.00

CLIN 2006 – Program Manager = $ _______________________

CLIN 2007 – Management Analyst = $ ________________________

CLIN 2008 – Drafter = $________________________

TOTAL OPTION YEAR 02: = $ _____________________

Option Year 3: PoP: 28 Feb 2028 – 27 Feb 2029

CLIN 3001 –

CLIN 3002 -- (120) Hours Overtime Software Engineer = $ ______________________

CLIN 3003 – (2) Full Time Field Technicians: = $ ______________________

CLIN 3004 – (120) Hours Overtime Field Technicians = $ ______________________

CLIN 3005 – Repair/ Maintenance Parts and Material = NTE $ 185,000.00

CLIN 3006 – Program Manager = $ _______________________

CLIN 3007 – Management Analyst = $ ________________________

CLIN 3008 – Drafter = $________________________

TOTAL OPTION YEAR 03: = $ _____________________

Option Year 4: PoP: 28 Feb 2029 – 27 Feb 2030

CLIN 4001 –

CLIN 4002 -- (120) Hours Overtime Software Engineer = $ ______________________

CLIN 4003 – (2) Full Time Field Technicians: = $ ______________________

CLIN 4004 – (120) Hours Overtime Field Technicians = $ ______________________

CLIN 4005 – Repair/ Maintenance Parts and Material = NTE $ 185,000.00

CLIN 4006 – Program Manager = $ _______________________

CLIN 4007 – Management Analyst = $ ________________________

CLIN 4008 – Drafter = $________________________

TOTAL OPTION YEAR 04: = $ _____________________

QUALITY ASSURANCE PLAN

Maintenance of ESS Systems for DSCC Columbus

09 August 2024

1. Pre-Performance Phase:

1.1 The Contracting Officer Representative (COR) will review and approve the contractor’s quality control plan.

1.2 COR will coordinate review and approval of safety plan through the Environmental Safety and Occupational Health Office.

1.3 COR will instruct contractor in procedures for obtaining contractor ID badges and building keys.

1.4 Establish points of contact and chain of command.

1.5. Schedule a face-to-face meeting with the contractor, COR and contracting to review the PWS and DSCC policies.

1.6 Verify contractor qualifications for employees to conduct inspection and repair services.

2. Performance Phase:

2.1 The COR will periodically inspect the contractor’s work to ensure all work is being performed according to the PWS requirements. Major items to be inspected or assessed include:

2.1.1 Scheduling requirements.

2.1.2 Field verification of equipment preventative maintenance/repairs and restoration of work area.

2.1.3 Timely submission and completeness of required reports.

2.1.4 Timely scheduling and correction of documented deficiencies.

2.2 The contractor will be notified in writing of all deficiencies to allow the COR and contractor to keep a written record of the contractor’s performance.

2.3 The COR will document and inform contracting if the contractor’s performance is not meeting the PWS requirements. Failure to have a qualified person in the role shall impact invoices. If contractor has a lapse in coverage invoicing salaries will be prorated until the position is vetted and begins work.

2.4 Review and accept the contractor’s WAWF invoice.

3. Post Phase:

3.1 Ensure all contractor badges and building keys are returned.

3.2 Ensure all GFE is returned.

Timely is defined as an agreed upon time frame between the COR and Contractor, based upon scope, scheduling and workload not to exceed 15 working days.

Sheet1

ITEM # QTY DESCRIPTION Model BLDG 1 5 6 9 10 11 14 17 20 20A 21 21A 22 23 24 27 30 31 43 44 JAMES 46 47 52 58 YEARLING 302 306 308 507

1 375 DOOR CONTACT, BMS, BIASED SENTROL 2507AH 7 4 69 2 19 95 5 32 3 25 2 3 15 7 4 1 3 16 24 5 17 16 1

2 30 DOOR CONTACT, BMS, TRIPLE BIASED SENTROL 2707A 5 23 1 1

3 74 DOOR CONTACT, BMS, BIASED, ROLL-UP SENTROL 2207AH 3 1 5 26 4 3 15 10 7

4 0 WINDOW CONTACT, BMS SENTROL 1035

5 38 AUDIBLE ALARM ADEMCO WAVE2F 1 6 1 17 13

6 262 pivCLASS RPKCL40-P READER KEYPAD READER HID 923PPRTEK0053W-L002 5 13 37 2 13 88 3 2 2 4 2 14 1 3 6 1 4 2 2 15 5 5 15 17 1

7 114 ELECTRIC DOOR STRIKE, 24VDC HES 5000 1 2 18 1 3 56 1 2 2 2 2 1 2 1 1 8 3 4 3 1

8 69 MAGNETIC LOCK, SINGLE DOOR LOCKNETICS 390 3 4 20 4 6 1 6 2 2 1 6 8 6

9 38 MAGNETIC LOCK, DOUBLE DOOR LOCKNETICS 392 2 7 22 1 1 1 1 3

10 205 REQUEST-TO-EXIT PASSIVE INFRARED SENSOR DETECTION SYSTEMS DS-160 4 6 42 2 6 72 4 3 2 8 1 3 2 4 1 2 13 5 14 10 1

11 30 REQUEST-TO-EXIT PUSHBUTTON SECURITRON PB2E 1 1 2 8 8 1 1 1 6 1

12 105 EMERGENCY INTERRUPT PUSHBUTTON STI SS2-018 4 6 25 4 26 1 1 6 1 2 2 1 1 1 6 9 9

13 0 DUAL TECH PIR/MW MOTION SENSOR, 360 DEG SENTROL 2T360

14 0 DUAL TECH PIR/MW SENSOR, LONG-RANGE SENTROL 2T100

15 37 DURESS SWITCH W/ TERMINALS ADEMCO 268 HOLD-UP SWITCH 1 13 1 4 1 2 15

16 10 DURESS SWITCH TRANSMITTER, WIRELESS INOVONICS FA210 W/ADEMCO 268 10

17 4 DURESS SWITCH RECEIVER, WIRELESS INOVONICS FA416DR 4

18 121 POWER SUPPLY ENCLOSURE TAMPER SWITCH GRI TSC-20 5 4 18 2 8 25 2 1 2 4 1 2 13 2 2 4 2 2 2 2 2 5 2 4 4 1

19 16 RELAY MODULE, 12/24VDC ALTRONIX RBSN 6 1 6 3

20 133 POWER SUPPLY 12/24VDC, 6AMP ALTRONIX AL600ULX 5 10 18 2 9 30 2 1 2 4 1 2 13 2 2 4 2 2 2 2 2 5 2 4 4 1

21 95 ENCLOSURE TAMPER SWITCH GRI TS 20 3 9 13 1 5 22 2 1 1 3 1 2 8 1 1 4 3 1 1 1 2 3 1 2 3 1

22 39 INTELLIGENT SYSTEM CONTROLLER LENEL LNL-3300 1 1 1 2 1 2 1 1 5 1 2 1 1 1 1 1 1 1 1 1 2 1 1 1 1 2 1 1 1 1

23 73 ALARM INPUT PANEL LENEL LNL-1100 1 1 1 3 3 8 6 12 3 3 1 3 2 1 1 7 1 2 2 1 1 2 5 1 2

24 2 ALARM OUTPUT PANEL LENEL LNL-1200 1 1

25 168 DUAL READER INTERFACE LENEL LNL-1320 3 10 28 1 10 52 2 1 1 3 2 10 1 2 5 1 2 1 2 6 4 3 8 9 1

26 5 STAR MULTIPLEXER LENEL LNL-8000 1 1 3

27 5 ACOUSTIC GLASSBREAK SENSOR SENTROL 5812NT 3 2

28 0 POWER SUPPLY 12VDC 3AMP ALTRONIX SMP3PM

29 NOT USED

30 4 IMAGE CAPTURE KIT LENEL CAM-24Z704USB-N-KIT 4

31 NOT USED

32 NOT USED

33 267 BATTERY, 12VDC, 7AH POWER SONIC PS-1270 1 1 1 10 20 36 4 16 58 4 2 2 6 1 1 4 26 4 4 8 4 4 4 4 8 10 4 8 8 4

34 0 USB CONVERSION KIT LENEL CAM-F5U208

35 2 REQUEST-TO-EXIT PIR EXTERIOR OPTEX OP-08CBL 2

36 1 ID CARD PRINTER HID HDP6600 PRINTER/FLIPPER/LAM 1

37 0 DOOR CONTACT, BMS, EXPLOSION PROOF SENTROL 2804T

38 0 SEISMIC SENSOR GE DV1201A

39 14 TRI-TECH PIR/MW SENSOR, 360 DEG BOSCH DS9370 11 3

40 0 SIREN ELK 150RT

41 0 HID OMNIKEY WEDGE READER BADGE ID IMPORT HID OMNIKEY 5427CK

42 1 LED AREA NOTIFICATION 1

43 1 LENEL SERVER LENEL PRO SERVER 1

44 0 PIR SENSOR, LONG RANGE, WIDE ANGLE GE AP633

45 1 LENEL SERVER LENEL32ES 1

46 5 ELECTRIFIED CRASH BAR FALCON 24-R C 26D RHR 718 3FT 5

47 0 KEYPAD IEI-212I 0

48 0 PIR SENSOR, 360 DEG GE AP669

49 1 REX PUSHBUTTON TRANSMITTER, WIRELESS INOVONICS FA210 1

50 1 REX PUSHBUTTON RECEIVER, WIRELESS INOVONICS FA416DR 1

51 0 TAMPER SWITCH SENTROL 1035

52 1 TRI-TECH PIR/MW SENSOR, 360 DEG DETECTION SYSTEMS DS9360 1

53 0 DUAL TECH-PIR/MW SENSOR, WIDE ANGLE INTELLISENSE DT900 0

54 2 DUAL TECH PIR/MW SENSOR, LONG-RANGE INTELLISENSE DT 906 / GE RCR-90 2 0

55 0 ELECTRIFIED CRASH BAR VON DUPRIN CX9927EO-3-26D-R60

56 2 DOOR POWER SUPPLY VON DUPRIN PS-914-2RS-BB-KL 2

57 2 MAGNETIC LOCK, SINGLE DOOR SCHLAGE M420 2

58 1 SIREN WITH STROBE, INDOOR ATW SECURITY PR-DOBERMAN PLUS 1

59 0 MAGNETIC LOCK, DOUBLE DOOR SCHLAGE M422

60 3 INTERCOM/VIDEO MONITOR STATION W/P/S AIPHONE MK-2MCD W/PS-182OUL 1 1 1

61 4 INTERCOM/VIDEO DOOR STATION, VANDAL RES AIPHONE MK-DGV DOOR STATION 1 1 2

62 2 CHEXIT RIM DEVICE, PANIC BAR VON DUPRIN CX-99EO, 26D, 3FT 2

63 1 CHEXIT RIM DEVICE W/MORTISE LOCK VON DUPRIN CX-9975EO, 26D, 3FT 1

64 1 LAMP ASSEMBLY, GREEN, 12VDC RADIO SHACK 272-337A 1

65 2 MAGNETIC LOCK, SINGLE DOOR W/BMS LOCKNETICS 390+XDSMXMBSXL1XATS 1 1

66 NOT USED

67 0 ELECTRIFIED CRASH BAR STANLEY APEX 2000 SERIES

68 0 DOOR POWER SUPPLY STANLEY ELR150

69 0 POWER SUPPLY CONTROL MODULE STANLEY CM150-08

70 8 AIPHONE MASTER STATION AIPHONE KB-3MRD 6 1 1

71 6 AIPHONE SUB-STATION AIPHONE KB-3HRD 5 1

72 8 AIPHONE CALL BOX AIPHONE KB-DAR 6 1 1

73 0 ELECTRIFIED CRASH BAR ADAMS RITE 8600 SERIES 8611SE36

74 0 DOOR POWER SUPPLY ADAMS RITE PS-LR

75 0 AIPHONE MASTER STATION AIPHONE LEF-3L

76 0 AIPHONE CALL BOX AIPHONE LE-D

77 0 ELECTRIFIED CRASH BAR CORBIN RUSSIN ED5200-W94

78 0 DOOR POWER SUPPLY/CONTROLLER ASSA ABLOY 781N

79 1 LCD DISPLAY, 2.25", HANDHELD, WIRELESS OPTEX IVISION LCD DISPLAY UNIT 1

80 1 DOOR CAMERA, WIRELESS OPTEX IVISION CAMERA DOOR UNIT 1

81 0 AIPHONE MASTER STATION AIPHONE LEF-5

82 0 AIPHONE DOOR RELEASE RELAY AIPHONE RY-PA

83 1 ELECTRIFIED CRASH BAR VON DUPRIN EL99L-06 3 26D LHR 1

84 0 MAGNETIC LOCK, SINGLE DOOOR, DELAY EGRESS DYNALOCK 3101B-TJ101

85 35 HANDICAP PUSHBUTTON/OPENER 1 11 21 1 1

86 14 MOTOR CONTROL SWITCH 1 3 1 2 2 2 1 2

87 14 AUDIBLE ALARM 1 13

88 0 DOORSTRIKE HES 9600

90 5 ALTRONIX TROVE 1M1 ENCLOSURE W/TAMPER TROVE 1M1 1 1 1 1 1

91 5 ALTRONIX AL 400 ULXB2 12/24 VDC 4AMP AL 400 ULXB2 1 1 1 1 1

92 5 ALTRONIX RSB1 115V SERVICE SWITCH ALTRONIX RSB1 1 1 1 1 1

96 2 REQUEST-TO-EXIT CRASHBAR RCI R210A51360 2

98 5 DOOR KING REMOTE RECEIVER 8054-082 MICRO PLUS 2 1 1 1

99 1 LNL-CK KEYPAD COMMAND KEYPAD 1

100 17 LENEL/MILESTONE WORKSTATION DELL PRECISION 3460 3 1 1 7 5

PERFORMANCE WORK STATEMENT (PWS)

Electronic Security System (ESS) and Electronic Key Control (EKC) Maintenance and

Support Services, DLA, Defense Supply Center Columbus Ohio

1.0 General: This is a non-personal services contract to provide Electronic Security System (ESS) and Electronic Key Control (EKC) Maintenance and Support Services for the Defense Logistics Agency at the Defense Supply Center located in Columbus Ohio. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. All provisions, requirements, and standards of the base contract apply except as identified in this PWS. This contract requires a Secret Security Clearance for all contractors actively working on site.

1.0.1 Introduction: The Defense Logistics Agency (DLA) is a United States (U.S.)

Department of Defense (DoD) agency providing worldwide logistics support to the missions of the Military Departments and the Combatant Commands.

In support of these missions, DLA Installation Management (DM) maintains a presence at DLA locations for the life, health, and safety systems including Electronic Security Systems (ESS) and Electronic Key Control (EKC). DM serves as the functional proponent for all ESS and EKC requirements, policy, and procedures.

ESS encompasses Intrusion Detection Systems (IDS), Access Control Systems (ACS), and Closed-Circuit Television (CCTV) systems, for DLA facilities, personnel, and property. EKC controls and logs the access to key cabinets located around the installation that authorized users can operate to remove specific keys for facility access.

The ESS and EKC, includes all subcomponents, are located within the DLA Defense Supply Center Columbus, Ohio (DSCC) and currently reside on the DLA network

1.0.2 Scope and Tasks (Service Plan): The contractor shall provide a program management plan. The plan shall clearly establish the scope of work to include Preventative Maintenance (PM), Corrective Maintenance (CM), Emergency Maintenance (EM), software upgrades for associated equipment/hardware for the Lenel OnGuard, Lenel Milestone, Keystone, and Morse Watchman Key System at DSCC. At a minimum, the plan shall include all personnel to conduct services, the licenses and certifications for each individual, the methods, and tools to be used to conduct service for each building, and a schedule.

1.0.3 Scope and Tasks (Work Effort): The Contractor shall manage the total work effort associated with the PWS herein to assure timely completion of all PWS items including, but not limited to, planning, developing, and implementing project plans, scheduling, report preparation, communication and coordinating with stakeholders, escalation procedures, establishing and maintaining records, monitoring, and quality control. The Contractor shall provide fully qualified personnel with the necessary management expertise, training, and certifications to assure the performance of the work in accordance with sound and efficient management practices.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Maintenance and Support Services for the ESS and EKC system as defined in this Performance Work Statement except for those items specified as government furnished property and services. The Contractor shall perform to the standards, terms and conditions set forth in in this PWS.

The Government may add new work projects providing funding is available from ODCs to support project equipment requirements. This will be limited to small scale projects that would not require additional resources in manpower and would be able to be performed by contractors on site. Projects may include additional card readers installed, cameras, and the like. Any new project work shall be approved in writing from the KO/COR.

1.1.1 The Contractor shall be an authorized, licensed Value-Added Reseller (VAR): in good standing with Lenel. The contractor shall be responsible for obtaining all necessary licenses and certifications required to perform maintenance and repair services on Lenel ESS, CCTV, Milestone and Morse Watchmans equipment and comply with all applicable DoD, Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and make them available to the Government upon request.

1.1.2 The Government reserves the right to: the Government reserves the right to ADD to or DELETE from the ESS/EKC Maintenance Support Services contract anytime during the period of the contract as the need arises due to ongoing efforts keeping up with cyber and enterprise infrastructure updates.

1.2 Type of Contract: The Government will award a Firm Fixed Price contract.

1.3 Hours of Operation: Regular working hours for DSCC are estimated to be 8-hour work days Monday through Friday from 0730-1600 including a 30 minute break for lunch.

Maintenance and repairs will be performed during these hours unless coordinated with COR/TPOC. Work will be performed during normal working hours when practical. However, due to operational requirements, schedules, and the availability of required resources and/or downtime of those resources, overtime (OT) may be required. OT allowances are in accordance with the identified labor categories and estimated labor hours specified in the Government pricing model. Prior to OT hours being worked, the contractor will obtain COR concurrence for the specified hours per labor category and applicable dates. Specifically, the contractor will not exceed the estimated OT allowable hours as identified at time of contract award.

1.3.1 Recognized Holidays: The days specified below are legal Federal holidays. If the holiday falls on a Saturday, it is observed on Friday; if the holiday falls on Sunday, it is observed on Monday. The Contractors will not be required to work on holidays, except incomplete tasks which are mission-essential or Emergency Work.

New Year’s Day Labor Day Martin Luther King Jr’s Birthday Columbus Day Presidents Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth Independence Day Christmas Day Independence Day

1.3.2 Schedule: The Contractor shall schedule and arrange work to cause the least interference with the normal occurrence of Government business and mission. In those cases where some interference may be essentially unavoidable, the Contractor shall make every effort to minimize the impact of the interference, inconvenience, equipment downtime, interrupted service, and/or customer discomfort. Non-scheduled visits will be coordinated with the COR at least five (5) working days in advance and notify the COR if the work being performed may cause interference. Notification shall include the type of work to be done and the estimated completion date/time. The Contractor shall reschedule any work that the KO/COR deems necessary to avoid unacceptable disruptions in the Government's business.

The Contractor shall create, maintain, and submit project plan(s)/schedule(s). Initial plans and schedules are due within five (5) business days after award and will be updated monthly (on 1st Monday of month) until the final inspection is completed. The Contractor shall create, maintain, and submit project plan(s)/ schedule(s) 15 business days following a request for any upgrade, installation, or replacement of device(s) and or application(s). Microsoft Project is the preferred software/format for project plans/schedules. Project plans/schedules shall include Task ID, Task Name, Actual Start, Actual Finish, Baseline Start, Baseline Finish, % complete, resource name/title, with the critical path defined utilizing predecessors and/or successors. The Government may return unacceptable plans and schedules for re-work, and the Contractor shall update and re-submit project plans and schedules within five (5) business days of request.

1.3.2.1 Post Award Kickoff Meeting: The Contractor shall coordinate a post award Kickoff meeting prior to the initiation of work and conduct monthly In Process Review (IPR) meetings. These meetings will be held with the Contractor, CPM, KO, Contract Specialist (KS), COR, and the J6 TPOC to discuss an overview of Contractor’s plans to manage scope, schedule, and resources. The Contractor will discuss stakeholders’ expectations, details of contract execution including incident management, triage support, technology road map plans including current and future software/hardware landscape general conditions, project schedule/plan, work schedules, coordination, security, safety, deliverables, permits, and other matters pertinent to work accomplishments shall be discussed in this meeting. Contractor shall attend other meetings as required in support of contract tasks.

1.4 Background: This Performance Work Statement (PWS) outlines requirements for limited New Installations (NI), Preventative Maintenance (PM), Corrective Maintenance (CM), Emergency Maintenance (EM), and upgrades for the Lenel OnGuard, Lenel Milestone, and Morse Watchman Key System at DSCC. Specifically, for this effort the Contractor will provide technical services for Defense Supply Center Columbus, Ohio. At Defense Supply Center Columbus, Ohio. The Contractor will provide services for the Lenel OnGuard, Lenel Milestone CCTV, Keystone Software, and Morse Watchman’s KeyWatcher Touch System.

The Contractor will provide installation and/or maintenance support to include but not limited to daily operations testing, cybersecurity support and artifacts, hardware and software upgrades, patches, migrations, enhancements, inspection, and corrective and preventive maintenance.

The Contractor will assist with supporting information protection needs and system security requirements for Commercial off-the-Shelf (COTS) ESS and EKC solutions.

1.5 Scope: Electronic Security and Electronic Key Control Systems maintenance and support services. Services include Maintenance and upgrades to software and hardware for LENEL OnGuard, Lenel Milestone (CCTV), KeyStone software, and Morse Watchman Key Watcher Touch Software.

1.6 Objectives: Electronic Security and Electronic Key Control Systems are maintained to ensure maximum uptime and mitigate security risks to the installation. Upgrade hardware, software, and limited New Installations (NI) and or expansion of the ESS and EKC systems to mitigate the changing various threats to the installation and personnel.

1.7 Area of Responsibility: Defense Logistics Agency (DLA), Defense Supply Center Columbus (DSCC), including but not limited to all DLA buildings, gates, fence-lines, open spaces (green space), and any other DLA owned property requiring ESS and EKC systems as determined by DLA Physical Security. This includes local or headquarters mandated requirements by Physical Security.

1.8 Period of Performance: The period of performance will be for one (1) Base Year of 12 months and four (4) 12-month option years. Base year includes 30-day phase-in period from 28 Feb – 29 Mar 2025

Base Year 28 Feb 2025 – 28 Feb 2026 Option Year I 28 Feb 2026 – 28 Feb 2027 Option Year II 28 Feb 2027 – 28 Feb 2028 Option Year III 28 Feb 2028 – 28 Feb 2029 Option Year IV 28 Feb 2029 – 28 Feb 2029

1.9 Work Control (General): The Contractor shall implement all necessary work control procedures to ensure timely accomplishment of work requirements, as well as to permit tracking of work in progress. The Contractor shall plan and schedule work to assure material, labor and equipment of all contracted items are available to complete work requirements within the specified time limits and in conformance with the quality standards established herein.

The Contractor shall submit a Quality Control Plan (QCP) within ten business days of contract start date to the COR and updated monthly in the MSR. This plan shall describe the Contractor’s methodology of compliance with the Deliverables and Performance Requirements Summary outlined above. The COR will notify the Contractor of concurrence or required modifications to the QCP within ten business days of receipt. The Contractor shall make appropriate modifications within five (5) business days of the COR’s notification and provide a revised QCP within five (5) business days.

The Contractor shall provide operations, sustainment, and maintenance support including mechanical Preventative Maintenance (PM), Corrective Maintenance (CM), and technical services support of software/hardware including any required manufacturer support plan products.

Specifically, the Contractor shall provide the personnel, equipment, spares, mechanical hardware, software/firmware including licensing required for fully operational ESS and EKC systems including, but not limited to, testing, inspection, maintenance, services, patching, upgrading, migrating, and/or enhancing ESS and EKC systems.

Preventative Maintenance (PM) includes a recurring set of scheduled services and actions which the Contractor shall provide to keep systems fully operational and compliant.

Corrective Maintenance (CM) is the non-recurring unscheduled repairs or services required to make the systems fully operational.

Emergency Maintenance (EM) is any activity that requires immediate action. DSCC security personnel are the first line of defense for responding and assessing mission critical situations.

DSCC security personnel must assess what the problem is and determine the correct response prior to the ESS Support contractor being notified. The contractor shall:

1. Respond to requests for emergency maintenance.

2. Perform troubleshooting functions of the IESS (Hardware and Software).

3. Contact the DISA Global Service Desk and request an incident be opened and assigned to J62BK – OT Security for ESS issues as necessary.

4. Coordinate with the Information Technology Operations Center (ITOC) as necessary.

5. Locate the cause of the faults, replace defective components/equipment, and make necessary adjustments to the system (Hardware and Software).

6. Follow-up with the DSCC security POC detailing the emergency, arrival time to the site, and repair/corrections needed to return the system to full functionality.

7. Follow-up with the DSCC security POC upon completion of the repair.

Technical services support includes daily operations support, version upgrades, patching, security updates, enhancements, data migrations, and/or network migrations required for ESS and EKC systems. All required cyber updates and patches shall be done through Preventative Maintenance including Information Assurance Vulnerability Alert (IAVMs), Cyber Task Order (CTO), Assured Compliance Assessment Solution (ACAS) scan remediations or any other cyber requirements to include updating or creating any supporting cybersecurity documentation required for assessment and accreditation.

1.9.1 Work Control (Operations): The Contractor shall support daily operations of systems including system monitoring, break/fix triage support, incident management, project management, configuration management, software/hardware updates/upgrades, and PM/CM required in day-to-day operations support. Contractor shall provide an Incident Response Plan (IRP) for incident management to the COR and J6 TPOC for approval.

1.9.2 Work Control (Sustainment): The Contractor shall develop and implement a Sustainment Plan for all systems, subsystems, and equipment IAW with original equipment manufacturer and/or Federal/DoD/DLA policies and procedures. The Sustainment Plan shall include the periodic maintenance, repair, replacement, and overhaul of existing systems, hardware, and software including planned version upgrades of the application and Operating System (OS). The Contractor shall provide the Sustainment Plan which includes the technology road map, the PM schedule, and Corrective Maintenance (CM) approach to the COR for approval within five (5) days of contract award. The CM approach should include:

1. Position qualified and certified personnel, test equipment, and other pertinent information needed to quickly diagnose and make repairs.

2. Plan, perform, and document system confidence tests, periodic inspections, and preventive maintenance of the application and servers.

3. Identify critical system operations and implement strategies to prevent potential failures or administrative downtime from creating a critical system outage.

4. Provide after-hours support response times within 4 hours for tickets/issues

5. Since these applications are health and safety systems, they require high uptime ~ 99.6%, 24/7, 365 and the Contractor shall maintain and support as such.

6. Analyze fault histories and fault trends to proactively predict and mitigate repetitive issues.

7. Respond to and take corrective action to resolve vulnerabilities identified by the Contractor or the Government. Lead the efforts to resolve the vulnerabilities associated with the ESS applications, servers, clients, or equipment, coordinate resolution with appropriate DLA Technical Reps that support OS, hardware, etc. as required.

8. Provide ongoing training for Government personnel as requested in support of the existing ESS/EKC.

9. As a software upgrade becomes available, the Contractor shall develop a plan for the upgrade and present that plan to the COR for approval. The COR will present this plan to the J6 Technical Point of Contact (TPOC) for routing for J62 approval. Once approved, the Contractor shall execute their plan to install the upgrade(s) and return the ESS system(s) to an operational state.

10. The Contractor will be responsible for all IAT- II level version upgrades, patching, device enhancements, device replacements that reach end of life/support and for device replacements of hardware equipment that does not meet cyber standards/requirements including migrations required for ESS and EKC systems compliance.

The Contractor shall perform preventive maintenance service on all equipment which consists primarily of inspection, testing, cleaning, lubrication, adjustment and calibration to verify proper system operation; minimize malfunction, breakdown, and deterioration of systems and equipment. The Contractor shall perform PM services in accordance with the information specified in Appendix A - Equipment Listing.

All replacement parts, materials, environmental compliance and Contractor personnel transportation used for PM shall be included in the contract unit price for PM services.

BATTERY MAINTENANCE:

Battery voltage and charge levels will be checked as part of the maintenance visit. Any battery incapable of maintaining a 75% charge will be replaced immediately.

QUARTERLY COMPLETE SYSTEM TEST OF INTRUSION DETECTION SYSTEM (IDS):

All quarterly IDS testing shall be scheduled to be performed during normal working hours. All Restricted and Controlled Areas will be tested monthly.

MONTHLY ARMS VAULT TEST OF THE INTRUSION DETECTION SYSTEM (IDS):

All monthly Arms Vault IDS testing shall be scheduled to be performed during normal working hours. This excludes bulk storage areas which are done quarterly.

Preventative maintenance test of all ESS will be conducted annually.

Preventative maintenance of Morse Watchmans Keypro Touch will be in accordance with manufacturers requirements.

2.0 Maintenance: The Contractor shall perform Preventive Maintenance (PM) services on all equipment which consists primarily of routine recurring inspection, testing, cleaning, lubrication, adjustment, and calibration to verify proper system operation to minimize malfunction, breakdown, and deterioration of systems and equipment. The Contractor shall submit and maintain an up-to-date schedule with status for all PM tasks. Any modifications, changes, additions, or deletions shall be submitted to the COR for approval and once approved and implemented, documented in as-built drawings, and provided to the site.

2.0.1 Enterprise Configuration Management (ECM): The Contractor shall adopt DLA Enterprise Configuration Management (ECM) plans ensuring all hardware and software changes are approved by the J6 TPOC and coordinated with the COR. The Contractor shall use the DLA Business Capability Management (BCM) ServiceNow, Change Implementation Plans (CIPs), and provide technical expertise in Enterprise Change Requests (ECRs) that addresses product management and version control for software (changes) and hardware (changes). The Contractor shall support business processes documentation such as Scheduled Maintenance Requests and Information Technology Operations Center (ITOC) notice (INFOSPOT) and all other control items such as customer notifications. The Contractor shall evaluate all changes to the approved system requirements baseline for risk to security, and for schedule and cost impact, provide evaluations in writing and with sufficient detail to allow for review and approval by the configuration governance structure as required. CIPs and ECRs are normally required 21 business days in advance of required change.

2.0.2 Configuration Audit: A configuration audit is an inventory of all existing hardware, software, data, drawings, devices, and technical documentation and is a function of Configuration Management. The Contractor shall perform an initial configuration audit and provide to the COR within ten (10) business days of performance start. Asset lists shall be provided upon request and include product details such as hosting location, model, versioning, product type, and other details about the product, software, hardware, or device. The Contractor shall report updates to asset list(s) within the monthly status reports. Additionally, a data dictionary is required.

The contractor shall:

1. Manage the site inventory of equipment and material spares using a Microsoft Excel spreadsheet for tracking purposes. The government will use this spreadsheet to monitor purchases, repairs, and disposals.

2. Maintain the following categories on the Microsoft Excel spreadsheet.

a. Item configuration number

b. Item nomenclature (Common Name)

c. Current Item Quantity

d. Item low level (Lowest quantity allowable before ordering replacements)

e. Item high level (Highest quantity allowable on shelf)

f. Warranty expiration date

g. Date order placed

h. Date order received (on-site)

3. The contractor shall NOT include any contractor consumables as part site inventory. Examples of contractor provided consumables are, electrical tape, cleaning rags, brushes, etc. Approved consumables for site inventory are cleaners, lubricants, fuses, lamps, etc.

4. Validate and maintain the inventory of security system hardware.

5. Validate and maintain an inventory of all system software, license information, versions, and system and security patches.

6. Keep, appropriately secured, copies of site-specific support documentation to include software license information, versions and patches, technical manuals, and design plans at the government facility.

7. Review and validate technical drawing as part of the configuration audit.

8. Validate the existence of technical manuals as part of preventive maintenance

9. Summarize actions taken to validate and update drawings and technical documentation as part of the contractor’s monthly status report to the government.

2.1 Records/Reports: The Contractor shall maintain management, maintenance, repair records, and reports. All records and copies of reports shall be turned over to the COR within seven (7) calendar days prior to contract completion. Contractor shall always maintain red line drawings on site, product data sheets, license/software data, and at the conclusion of the contract all red line as-built drawings shall be submitted in CAD format v. 2022 or newer.

2.2 Cyber Security Requirements: The Contractor shall provide cybersecurity (CS) in accordance with all current policies, procedures, and statutes, to include (but not restricted to) the following, as applicable, to specific task orders (most current version):

System Identification Reference Documents:

1. Committee on National Security Systems Instruction 1253, Security Categorization and Control Selection for National Security Systems, July 29, 2022

2. Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004

3. Federal Information Processing Standards Publication 200, Minimum Security Requirements for Federal Information and Information Systems, March 2006

4. Federal Information Security Management Act (P.L. 107-347, Title III), December

5. Department of Defense Instruction 5000.02, Operation of the Defense Acquisition System, January 23, 2020

6. Department of Defense Instruction 5200.39, Critical Program Information (CPI) Identification and Protection within the Research, Development, Test, and Evaluation (RDT&E) Incorporating Change 3, Effective October 1, 2020

System Compliance, Instructions and Guidelines Reference Documents:

1. 44 U.S.C. § 3542, January 2012

2. Department of Defense Instruction 8500.01, Cybersecurity, Incorporating Change 1, Effective October 7, 2019

3. Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology, July 19, 2022

4. Department of Defense Instruction 5200.44, Protection of Mission Critical Functions to Achieve Trusted Systems & Networks, Incorporating Change 3, October 15, 2018

5. DoD Program Manager’s Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle

6. Defense Acquisition Guidebook (DAG)

7. Department of Defense Directive 8140.01, Cyberspace Workforce Management, October 5, 2020

8. Department of Defense Instruction 8330.01, Interoperability of Information Technology (IT), Including National Security Systems (NSS), September 27, 2022

System Cybersecurity Implementation Reference Documents:

1. Department of Defense Instruction 8580.1, Information Assurance (IA) in the Defense Acquisition System, July 9, 2004

2. National Institute of Standards and Technology Special Publication 800-82 Revision

2, Guide to Industrial Control Systems (ICS) Security, February 2015

3. UFGS-25 50 00.00 20 Cybersecurity of Facility-Related Control Systems

4. United Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facilities-Related Control

Systems

Personnel Requirements Reference Documents:

1. Department of Defense DoD 8570.01-M, Information Assurance Workforce

Improvement Program, change 3 dated 24 Jan 2012

2. DoD Manual (DoDM) 8140.03 Cyberspace Workforce Qualification & Management

Program, dated 15 Feb 2023

FRCS Guidelines Reference Documents:

1. Deputy Under Secretary of Defense (Installations and Environment) Memo dated 19 Mar 14, subject: Real Property Related ICS Cybersecurity

2. Defense Logistics Agency Risk Management Framework Standard Operating

Procedures, April 2021

3. Office of the Assistant Secretary of Defense Facility Related Control Systems (FRCS) Master List Memo, October 2020

4. Defense Logistics Agency Approved Cybersecurity Computing Environment List, October 2021Department of Defense Control Systems Security Requirements Guide Version 1, Release 1, July 14, 2021

2.2.1 Accreditation Artifacts: The Contractor shall provide the following accreditation artifacts:

1. System Diagrams:

a. Architecture Network Diagram

b. Authorization Boundary Diagram

c. Data Flow Diagram

d. Purdue Diagram

2. Comprehensive Hardware Inventory Report

3. Comprehensive Software Inventory Report

4. Concept of Operations (CONOPS)

5. Plan of Actions and Milestones (POAM)

6. Software Upgrade and Support Plan (SUSP)

7. Ports, Protocols, and Services Management (PPSM) Documentation for Registration

8. Federal Information Processing Standard 199 (FIPS-199) Cybersecurity Strength

Requirements

9. PII Confidentiality Impact Level (PCIL) Categorization Worksheet

10. Enterprise Configuration Management Plan

11. Security Technical Implementation Guide (STIG) and Security Requirement Guides (SRG) Mitigations

2.2.2 Cybersecurity Strength Requirements: The Contractor shall provide the following cybersecurity strength requirements including, but not limited to the following:

The Contractor shall adhere to all existing authorities and policies of the Director of National Intelligence regarding the protection of sensitive compartmented information (SCI), as directed by Executive Order 12333 and other laws and regulations.

The Contractor shall satisfy the Risk Management Framework (RMF) requirements of subchapter III of chapter 35 of Title 44, United States Code (U.S.C.), also known as the “Federal Information Security Management Act (FISMA) of 2002”.

The Contractor shall enable DLA to meet the standards required by the Office of Management and Budget (OMB) and the Secretary of Commerce, pursuant to FISMA and section 11331 of Title 40, U.S.C.

FIPS 199 / CNSSI 1253 Security Categorization: The Contractor shall participate in categorization discussions with the DLA J6 PM, functional lead, and the Information System Security Manager (ISSM) and provide all required FIPS 199 documentation as requested to support security categorization.

The Contractor shall provide a recommendation on system categorization based on sound technical expertise in accordance with FIPS 199 then work in coordination with the prescribed DLA System Owner (SO) and ISSM to support the categorization IAW FIPS 199, CNSSI 1253 and OSD Facility Related Control Systems (FRCS) Master List including DLA specific systems, then document the results of the security categorization in the System DLA FIPS 199 document and the Concept of Operations (CONOPs).

Assigned DLA PM will coordinate with the Contractor to identify and document Confidentiality, Availability, Integrity (CIA) of the system in a DLA FIPS 199 document for approval by DLA ISSM personnel.

2.2.3 Completion Of System Hardening (Scan/Fix/Scan): Testing and Analysis The Contractor shall harden systems using a scan, fix, scan methodology remediating findings IAW current DOD, DLA, and Defense Information Systems Agency (DISA) standards. This includes automated and manual STIG application, Assured Compliance Assessment Solution (ACAS) scanning, and any other hardening efforts required to make the system ready to connect to a DOD network. Whenever findings occur, as required periodically, and/or following any major system change, the Contractor shall scan/fix/scan until all issues have been fixed and/or properly and acceptably mitigated. Any Critical or High impact level findings that cannot be fixed are to be reported to the J6 TPOC/ISSM immediately along with a valid reason the vulnerability cannot be fixed and a POAM. Once the Contractor has completed hardening efforts, system monitoring and audits shall occur to ensure STIG compliance is maintained.

2.2.4 Cybersecurity Assurance Requirements: The Contractor shall design, develop, and integrate cybersecurity solutions supporting the Department of Defense and all other applicable Government agencies.

This will be achieved through abiding by all applicable cybersecurity policies, regulations, and directives to ensure a favorable Assessment and Authorization (A&A), Assessment and Incorporate (A&I), or FRCS Assess Only Risk Assessment (FRCS AORA) decision, as well as obtaining an Authority to Connect (ATC) to DLA’s network. The Contractor shall mitigate risk identified through the RMF authorization process down to a level acceptable to the DLA Authorizing Official (AO).

Coding for Security. The Contractor shall provide documentation of development practices and standards applied to Government approved Contractor-written control system software, including firmware, used to ensure a high level of defense against unauthorized access.

The solution shall comply with the security control requirements documented in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53r4, “Security and Privacy Controls for Federal Information Systems and Organizations” and NIST 800- 82r2, “Guide to Industrial Control Systems (ICS) Security”. The Contractor shall provide details of any alternative but equally effective security measures used to compensate for the inability to satisfy a particular derived security requirement (mitigation to control compliance findings). This information shall be submitted in writing to the DLA J6 PM for cybersecurity approval as soon as the alternative is identified.

2.2.5 Application Network and Infrastructure: All system/network components and applications shall be compatible with all applicable Defense Information System Agency (DISA) Security Technical Implementation Guides (STIGs).

Any STIG exceptions must be identified as part of the Contractor’s proposal to the Government and approved by J6 Cybersecurity. Exceptions incurring risk found unacceptable to the DLA Authorizing Official are not permitted.

All network components and applications shall be IPv4 and IPv6 compatible.

Network components shall allow configuration of IEEE 802.1x or port security for authentication.

The Contractor shall provide a complete list of all ports, protocols and services required for any computer system running control system applications or required to interface the control system applications. The listing shall include all ports and services required for normal operation as well as any other ports and services required for emergency operation. The listing shall also include an explanation or cross reference to justify why each service is necessary for operation.

The Contractor shall identify any system wireless communication capability, enabled, or disabled. All wireless communications shall meet applicable STIG requirements to include FIPS 140-2 certification. Any requirement to use wireless or cellular must be approved in writing by DLA J6, coordinated with the J62B PM and documented with the DLA Frequency Manager.

2.2.6 Information and Operational Technology Infrastructure Requirements: In general, the DLA expects to furnish the IT Infrastructure to host the OT solution(s) and/or system(s) (including VLANs, and Virtual Machines (VMs)) unless there is a hardware, compatibility, or mission issue preventing it.