Note: the links and images in this document may point to external sources. Please review them before opening.

STATEMENT OF WORK (SOW)

for Coast Guard Housing Eureka Video Surveillance System (VSS) Modernization

(Wireless Microwave Hybrid Standalone SOW)

1.0 GENERAL

1.1 BACKGROUND

The United States Coast Guard (USCG) Housing Community located in Eureka, CA, requires a modern, robust, and highly secure Video Surveillance System (VSS) to protect personnel, families, and federal assets. The legacy analog surveillance systems are obsolete, provide insufficient coverage, and lack the digital resolution and security required under modern Department of Homeland Security (DHS) mandates.

1.2 SCOPE

This Statement of Work (SOW) defines the requirement for a Contractor to provide a complete, turn-key solution to design, procure, install, configure, test, and commission a modern, high-definition, internet protocol (IP) VSS at the Coast Guard Housing Community centered around 1475 Terrace Way, Eureka, CA 95501.

To bypass the extreme cost, labor, and community disruption associated with underground trenching across a residential neighborhood, this design utilizes a Wireless Microwave Hybrid architecture. High-definition IP cameras will be clustered at strategic exterior locations (entrances, exits, perimeters, and common areas) and connected to local PoE+ switches. These clusters will transmit data wirelessly via highly secure, encrypted, industrial-grade Point-to-Point (PtP) and Point-to-MultiPoint (PtMP) microwave links back to the central housing office head-end.

The scope of this project includes all tasks necessary to deliver a complete and fully functional system:

conducting a physical site survey and wireless path analysis, developing a comprehensive ESS Security Plan, procuring all hardware/licenses, installing all outdoor wireless transceivers and cameras, configuring local Network Video Recorder (NVR) storage, and executing a full system acceptance test.

1.3 OBJECTIVE

The primary objective of this project is to replace the legacy security system with a modern, fully compliant wireless IP VSS consisting of fifteen (15) outdoor cameras. All wireless microwave bridging equipment must utilize FIPS-validated AES-256 encryption. The final system must be capable of local recording (supporting at least 30 days of continuous high-definition footage) and be built for future integration into the Coast Guard's centralized security architecture.

1.4 APPLICABLE DOCUMENTS

1.4.4 Mandatory Compliance Documents

The following documents establish mandatory requirements, standards, and specifications for this project:

Document Number Title Relevance

COMDTINST

M5500.13 Series

USCG Information and Technology Management

Specifies USCG-specific policies for information assurance and cybersecurity.

UFC 4-021-02 Electronic Security Systems DoD design and installation standards for ESS.

36 C.F.R. § 1194.1 Section 508 of the Rehabilitation Act Accessibility standards for all ICT.

DHS MD 11042.1

Safeguarding Sensitive But Unclassified (For Official Use Only) Information

Requirements for protecting CUI.

FAR 52.204-25

Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment

Prohibits use of equipment from entities covered by Section 889.

NIST SP 800-53 Rev.

Security and Privacy Controls for Information Systems and Organizations

Establishes the mandatory baseline of security controls required for all federal information systems.

NIST SP 800-88 Rev.

Guidelines for Media Sanitization Defines the required procedures for securely sanitizing data from legacy equipment prior to disposal.

DHS MD 4300A Sensitive Systems Policy Directive Provides the foundational DHS policy for the security of all IT systems, including the ESS.

NIST IR 8259

Foundational Cybersecurity Activities for IoT Device Manufacturers

Device hardening standards for cameras and wireless bridges.

2.0 SPECIFIC REQUIREMENTS/TASKS

These tasks are to be performed upon contract award.

2.1 TASK ONE. ELECTRONIC SECURITY SYSTEM (ESS) SECURITY PLAN

The Contractor shall develop a comprehensive ESS Security Plan. The plan will detail the wireless path analysis, line-of-sight (LOS) verifications, technical design, power calculations, and installation layout for the wireless VSS.

2.1.1 Specific Tasks:

Conduct Site Survey & Wireless Path Analysis: The Contractor shall perform a physical site survey of the Eureka Housing Community to verify line-of-sight between proposed wireless transceiver nodes and the central housing office. Conduct a frequency spectrum analysis to select optimal, non-interfering wireless channels.

Develop Draft ESS Security Plan: The Contractor shall create a draft plan including:

o A detailed Bill of Materials (BOM) listing all hardware, software, and licenses.

o Specific wireless transceiver models, documenting their FIPS 140-2/3 validation status and encryption capabilities.

o Scaled floor plans, site maps, and path diagrams indicating the precise location of all 15 cameras, PoE+ enclosures, and wireless transceivers.

o A system topology diagram illustrating network routing from the camera nodes, across the microwave links, to the central Network Video Recorder (NVR).

Submit for Review & Revision: The Contractor shall submit the draft plan to the designated Government representative(s) for review and feedback. The Contractor shall incorporate all Government-mandated changes and submit a final version for approval.

2.1.2 Deliverables

Deliverable # Title Due Date

1 Draft ESS Security Plan (PDF Format) 30 days after award

2 Final, Approved ESS Security Plan (PDF Format) 15 days after review

2.1.3 Acceptance Criteria

The Final ESS Security Plan shall be considered complete and acceptable when it has been formally approved in writing by the Southwest District Security Manager and a copy has been successfully delivered to the unit command.

2.2 TASK TWO. ESS MATERIAL PROCUREMENT AND VERIFICATION

2.2.1 Scope

The Contractor shall procure all approved hardware, software licenses, cabling, local mounting poles, outdoor weather-proof enclosures, and transceivers. All hardware must be brand new, NDAA-compliant, and sourced through OEM-authorized distribution channels.

2.2.2 Specific Tasks

Inventory & Verification: The Contractor shall conduct an inventory of all procured materials to verify that all items on the approved BOM are present and in undamaged condition.

Functional Testing: The Contractor shall test all equipment prior to deployment to ensure it is in good working order and fully operational according to manufacturer specifications.

2.2.3 Deliverables

3 Material Verification and Inspection Report Within 7 days of material receipt

2.3 TASK THREE. DECOMMISSIONING AND DISPOSITION OF LEGACY

EQUIPMENT

2.3.1 Scope

The Contractor shall safely decommission and remove any legacy analog cameras, coax cables, and recording hardware being replaced under this contract.

2.3.2 Specific Tasks

Disconnect and Segregate: The Contractor shall physically disconnect all legacy VSS equipment from power and network sources. Any device with internal memory or storage (e.g., servers, recorders) must be segregated.

Secure Handover of Sensitive Equipment: The Contractor shall physically transfer all segregated equipment with memory/storage capabilities to the Coast Guard unit CSO for final data sanitization and disposal in accordance with NIST SP 800-88. A Sensitive Equipment Handover Form, including the manufacturer, model, and serial number of each item, must be signed by both the Contractor and the CSO to document the transfer.

Removal and Disposal: The Contractor shall remove all other legacy equipment, including cameras, wiring, and mounting assemblies, and dispose of them legally.

2.3.3 Deliverables

4 Signed Sensitive Equipment Handover Form (with Serial Numbers)

Upon transfer of legacy equipment to CSO

2.4 TASK FOUR. ESS INSTALLATION, COMMISSIONING, AND

ACCEPTANCE

2.4.1 Scope

The Contractor shall furnish all labor, tools, and materials necessary to install, configure, test, and commission the 15-camera wireless hybrid VSS.

2.4.2 Specific Tasks

Physical Installation:

o Install fifteen (15) premium outdoor 4K PTZ cameras in ruggedized, marine-grade housings at approved neighborhood monitoring points.

o Install Point-to-MultiPoint (PtMP) wireless microwave transceivers and directional antennas. Mount wireless nodes to existing utility poles or building exteriors using non-destructive, wind-resistant brackets.

o Deploy secure, outdoor weather-proof (NEMA 4X) PoE+ enclosures at wireless nodes to power local cameras and transceivers.

o Install the central NVR server, main network switch, and high-gain wireless base station sector antenna at the central housing office head-end.

System Configuration:

o Configure WPA3-Enterprise or proprietary wireless bridging protocols utilizing FIPS-validated AES-256 encryption on all microwave paths.

o Set up local continuous recording schedules on the NVR to support a minimum of 30 days of archiving.

o Harden all edge devices by changing default passwords to unique, strong passwords and disabling unencrypted management protocols (e.g., Telnet, HTTP, FTP) in accordance with

NIST IR 8259.

System Acceptance Testing (SAT): Following installation and configuration, the Contractor shall conduct a comprehensive SAT consisting of two distinct phases:

o Functional Validation: Verify lag-free, high-definition 4K video feeds from all 15 wireless cameras. Demonstrate successful PTZ remote control functionality across the wireless links.

o Security Validation: Conduct authenticated scanning against the NVR, switches, and transceivers, fully remediating all "Critical" and "High" vulnerabilities.

Operator Training & Documentation: The Contractor shall provide on-site training to housing personnel on basic day-to-day operational functions of the VSS and deliver a complete documentation package, including "As-Built" drawings and equipment manuals.

2.4.3 Deliverables

5 System Acceptance Test (SAT) Plan 48 hours prior to SAT

6 Vulnerability Scan Reports (Initial and Final) With SAT Report

7 Operator Training Session & Training Materials Prior to Final Acceptance

Final Documentation Package (including As-Built Drawings and SAT Report)

Upon completion of all work

3.0 CONTRACTOR PERSONNEL

3.1 QUALIFIED PERSONNEL

The Contractor shall provide appropriately qualified and trained personnel to perform all requirements specified in this SOW. All personnel shall be fluent in English and be legally authorized to work in the United States.

3.2 KEY PERSONNEL

The Government considers the following positions to be Key Personnel. The Contractor shall provide the names, qualifications, and contact information for these individuals in their proposal:

Project Manager (PM):

o Responsibilities: Serve as the single point of contact for the Government; responsible for the overall management of all work performed, including schedule, performance, and personnel.

o Minimum Qualifications: A minimum of five (5) years of experience managing federal government contracts or technology installation projects of similar scope and complexity.

Lead Certified Technician:

o Responsibilities: Serves as the primary technical point of contact; must be physically on-site during all equipment testing and installation/commissioning.

o Minimum Qualifications: Must possess active, valid OEM certifications for both the camera system and the proposed wireless microwave bridging platform; a minimum of five (5) years of hands-on experience installing and configuring electronic security systems of similar size and scope.

3.3 DUAL-HATTING OF KEY PERSONNEL

The roles of Project Manager and Lead Certified Technician may be filled by the same individual, provided that the proposed individual meets all the minimum qualifications and responsibilities for both positions.

4.0 SECURITY AND IDENTIFICATION

4.1 CONTRACTOR VETTING AND ACCESS REQUIREMENTS

The Contractor shall submit personnel information to the Government for all individuals requiring access to government facilities to perform work under this SOW.

The Contractor shall provide the following data for each employee to include sub-contractors and suppliers to the designated Government security point of contact no less than ten (10) business days prior to their required access date:

1. Full Name (Legal name as it appears on government-issued identification)

2. Date of Birth

3. Place of Birth (City, State, and Country)

4. Citizenship Status (e.g., U.S. Citizen, Lawful Permanent Resident)

5. Form I-9 Acceptable Documents or Social Security Number

6. Driver's License Info (State of Issuance and License Number, if driving on property)

4.2 ON-SITE CONDUCT AND IDENTIFICATION

The Contractor shall ensure all its employees and subcontractors adhere to the following conduct and identification standards at all times while at a Government facility:

Real ID Act Compliance: All personnel requiring base access must hold a driver's license from a compliant state, an enhanced driver's license, or provide alternative approved federal identification.

Display Identification: Always wear and display the Government-issued identification badge in plain view, above the waist.

Self-Identification: Clearly identify themselves as "Contractor" in all forms of communication, including but not limited to, meetings, answering telephones, and in email signature blocks.

5.0 OTHER APPLICABLE CONDITIONS

5.1 BACKGROUND INVESTIGATION

All Contractor personnel performing work under this SOW shall undergo a background investigation. A Tier 4 (High Risk) investigation is required for any individual granted system administrator privileges. All other contractor employees requiring access to Government facilities or information must receive a favorable adjudication of a Tier 2 (Moderate Risk) investigation. The Contractor shall ensure that each proposed employee completes and submits the appropriate questionnaire (SF 85P for Tier 2 / SF 85P-S for Tier 4), as directed by the Government's security office.

5.2 HANDLING OF SENSITIVE INFORMATION

All documentation, plans, and drawings generated or handled under this agreement, including but not limited to the ESS Security Plan and "As-Built" drawings, are designated as Controlled Unclassified Information (CUI) and must be handled as such. The Contractor shall not disclose, disseminate, or remove any CUI from the designated work site or release it to any party without the express written permission of the Contracting Officer.

5.3 INCIDENT RESPONSE PROCEDURES

The Contractor shall report all suspected or confirmed security, safety, or compliance incidents to the

Government COR and the unit's Command Security Officer (CSO) within one (1) hour of discovery. A formal written incident report must follow within 24 hours detailing the date, time, location, description of the incident, impact, individuals involved, and immediate actions taken.

5.4 CYBERSECURITY TRAINING

The contractor shall ensure that all personnel assigned to this contract complete government-approved cybersecurity awareness training prior to being granted access to any government information systems or controlled unclassified information (CUI). This training shall be completed annually. Contractor personnel without a CAC/PIV card can complete the public version of the training directly at https://dl.dod.cyber.mil/wp-content/uploads/trn/online/disa-cac-2025/launch.html.

5.5 SUPPLY CHAIN RISK MANAGEMENT (C-SCRM)

Software Bill of Materials (SBOM): The Contractor shall provide a detailed Software Bill of Materials (SBOM) for all software, firmware, and operating systems deployed under this contract.

The SBOM must align with NTIA minimum elements and be provided to the Government prior to system installation.

Hardware Integrity: The Contractor must ensure that all devices (including cameras, controllers, and transceivers) are sourced through authorized, OEM-certified distribution channels.

Procurement from prohibited sources or vendors listed under federal restriction lists is strictly prohibited.

5.6 DELIVERABLES

9 Software Bill of Materials (SBOM) Prior to System Installation

10 Signed Non-Disclosure Agreements Prior to individual's access to CUI

11 Certificate of CUI Destruction/Return No later than 15 days after contract completion

6.0 PERIOD OF PERFORMANCE

The period of performance for all tasks, including the site survey, design, procurement, installation, and final acceptance, shall be 90 days from the date of contract award.

7.0 PLACE OF PERFORMANCE

The primary place of performance shall be the Coast Guard Housing Community, centered around 1475 Terrace Way, Eureka, CA 95501.

8.0 HOURS OF OPERATION

Normal Working Hours: The Contractor shall perform all on-site work during normal Government working hours, defined as 0800 to 1700 PST, Monday through Friday, excluding Federal holidays.

Work Outside Normal Hours: Any work required outside of these hours must be requested and scheduled with the COR at least 48 hours in advance.

9.0 TRAVEL

No travel away from the primary place of performance is required.

10.0 POST AWARD CONFERENCE

The Contractor shall participate in a Post-Award Conference with the Contracting Officer (KO) and the Contracting Officer's Representative (COR) via teleconference no later than ten (10) business days after the date of contract award.

11.0 PROJECT SCHEDULE

The Contractor shall develop, submit, and maintain a detailed Project Schedule in Gantt chart format to ensure the timely completion of all work.

12 Project Schedule No later than 5 business days after Post-Award Conference

12.0 GOVERNMENT/CONTRACTOR COMMUNICATIONS

The Contractor shall provide a list of primary and alternate emergency points of contact to the COR at the Post-Award Conference.

13 Emergency Contact List At Post-Award Conference

13.0 PROGRESS REPORTS

The Contractor's Project Manager shall submit a Weekly Project Status Report to the COR and the KO via email no later than close of business every Friday for the duration of the project.

14 Weekly Project Status Report Every Friday, starting the week after Post-Award Conference

14.0 GENERAL REPORT AND DELIVERABLE REQUIREMENTS

All reports, plans, schedules, documentation, and other digital deliverables required under this agreement shall be provided by the Contractor in electronic format compatible with Microsoft Office Suite or in searchable PDF format.

15.0 INTELLECTUAL PROPERTY – GOVERNMENT RIGHTS TO

DELIVERABLES

The Government shall have unlimited rights to all data, documentation, and materials first produced and delivered in the performance of this contract, including the ESS Security Plan, "As-Built" drawings, system configuration files, and custom-developed training materials.

16.0 SECTION 508 ACCESSIBILITY REQUIREMENTS

All Information and Communications Technology (ICT) procured, developed, maintained, or used under this Statement of Work must conform to the Revised 508 Standards specified in 36 C.F.R. § 1194.1.

Required Deliverable: For each ICT product offered, the Contractor shall provide a completed Accessibility Conformance Report (ACR) based on the latest version of the Voluntary Product Accessibility Template (VPAT®), available from the ITI at https://www.itic.org/policy/accessibility/vpat.

Accessibility Conformance Reports (ACRs) / VPATs

With proposal or prior to procurement

17.0 DELIVERABLE REVIEW AND ACCEPTANCE

The COR will review all deliverables to ensure they fully conform to SOW requirements.

Timeline: The Government will have ten (10) business days from receipt of a deliverable to provide notice of acceptance or rejection. The Contractor will have ten (10) business days from receipt of a rejection notice to correct all identified deficiencies and resubmit.

Final Acceptance: A deliverable shall be considered formally accepted only when the COR provides the Contractor with a written notice of acceptance.

18.0 MASTER DELIVERABLE LIST

The Contractor shall provide the deliverables listed below in accordance with the specified due dates. All deliverables are subject to the review and acceptance process outlined in Section 17.0.

Del. # Deliverable Title Reference SOW

Section Due Date

1 Draft ESS Security Plan 2.1.2 Per approved Project Schedule

2 Final, Approved ESS Security Plan 2.1.2 After Government review of Draft

Material Verification and Inspection Report

2.2.3 Within 7 days of material receipt

Signed Sensitive Equipment Handover Form

2.3.3 Upon transfer of legacy equipment to CSO

5 System Acceptance Test (SAT) Plan 2.4.3 At least 48 hours prior to the SAT

Vulnerability Scan Reports (Initial & Final)

2.4.3 With SAT Report

Operator Training Session & Training Materials

2.4.3 Prior to Final System Acceptance

Final Documentation Package (Incl.

As-Builts & SAT)

2.4.3 Upon completion of installation and testing

9 Software Bill of Materials (SBOM) 5.6 Prior to System Installation

10 Signed Non-Disclosure Agreements 5.6 Prior to individual's access to CUI

11 Certificate of CUI Destruction/Return 5.6 No later than 15 days after contract completion

12 Project Schedule 11.0 No later than 5 business days after Post-Award Conference

13 Emergency Contact List 12.0 At Post-Award Conference

14 Weekly Project Status Report 13.0 Every Friday, starting the week after Post-Award Conference

Accessibility Conformance Reports (ACRs) / VPATs

16.0 With proposal or prior to procurement

END OF STATEMENT OF WORK