CUI

Statement of Work: Technology Upgrades

1.0 DESCRIPTION OF SCOPE

1.1 SCOPE AND REGULATIONS. The Contractor shall be responsible for providing all delivery, transportation, tools, materials, equipment, labor, supervision, training, and other incidental items necessary to provide installation, removal, and disposal to perform all the work of this Contract. All work shall be performed in accordance with (IAW) Federal, State, and local laws, standards and regulations, and other specifications as identified in this SOW; all work shall be accomplished to meet or exceed industry or Government standards, whichever is more stringent.

2.0 DESCRIPTION OF SERVICES

2.1 System Upgrade And Replacement Overview: The 36th Civil Engineer Squadron requires Fire Alarm Reporting Systems technology upgrades to BDOC Bldg. 23020, Alt BDOC Bldg. 20001, Alarm Shop Bldg. 20010. The following items will be performed by trained contractor personnel:

• Provide and install one (1) repair-by-replace CPU (S-1) at BDOC Bldg. 23020 to include:

o One (1) tower CPU, keyboard, and mouse o Configure the CPU with Base’s current D-21 database o Configure with D-21 V2 software upgrade o Transfer existing software licenses to the new CPU o Decommission existing CPU from the Monaco system o Provide and install two (2) replacement widescreen monitors for new CPU compatibility o Provide and install one (1) UPS short-term backup power

• Provide and install one (1) repair-by-replace CPU (S-2) at Alt BDOC Bldg. 20001 to include:

o One (1) tower CPU, keyboard, and mouse o Configure the CPU with Base’s current D-21 database o Configure with D-21 V2 software upgrade o Transfer existing software licenses to the new CPU o Decommission existing CPU from the Monaco system o Provide and install two (2) replacement widescreen monitors for new CPU compatibility o Provide and install one (1) UPS short-term backup power

• Provide and install one (1) repair-by-replace CPU (C-1) at Alarm Shop Bldg. 20010 to include:

o One (1) tower CPU, keyboard, and mouse o Configure the CPU with Base’s current D-21 database o Configure with D-21 V2 software upgrade o Transfer existing software licenses to the new CPU o Decommission existing CPU from the Monaco system o Provide and install two (2) replacement widescreen monitors for new CPU compatibility o Provide and install one (1) UPS short-term backup power

• System Verification and Validation:

o Verify alarm and trouble transmission across LAMAS prior to upgrade installation o Any faults during this test shall be notated and corrected by the base o Verify alarm and trouble transmission across LAMAS after upgrade installation to confirm no change in transmission o Verify network connectivity at all installation facilities o Validate system performance after installation

• Training and Documentation:

o Provide proper formal D-21 operator training after system initialization while the installation technician is on-site. 36 CES will provide a conference room that formal training can be provided in.

o At project conclusion, contractor shall provide its standard forms, system drawings, and documentation detailing all completed work

2.2 PREPARATION

2.2.1 Pre-Installation Requirements: Before installation services begin, the Contractor may perform a physical survey of the actual site to verify the amount of equipment and materials needed and to inspect and obtain all information needed for the performance of the service(s). The Contractor shall notify the CO of any conditions that prevent the suitable completion of these services, such as power limitations, network connectivity issues, or environmental concerns (temperature, humidity). If the Contractor discovers such problems associated with the work after starting, he or she shall immediately notify the COR and obtain approval if work is to continue.

2.2.2 Removal & Disposal: The Contractor shall remove existing equipment (servers, workstations, network devices, etc.) and deliver it to 36 CES Alarm Shop personnel so that it may be disposed of in accordance with all applicable Federal, State, and local laws and regulations, including data sanitization standards

2.2.3 Asbestos/Hazardous Materials: The Contractor shall stop work immediately and contact the COR if asbestos or other hazardous materials are suspected to be present during any removal or installation activities. The Contractor shall NOT remove/dispose of any asbestos or other hazardous materials.

2.2.4 General: The Contractor shall ensure all equipment is installed in accordance with manufacturer's specifications and industry best practices. Any necessary patching or modifications to existing infrastructure (e.g., cable runs, power outlets) shall be performed to ensure a clean and professional installation.

2.2.5 Cabling: All new cabling shall be properly labeled and organized according to industry standards. Cable management solutions (e.g., cable trays, zip ties) shall be used to maintain a tidy and accessible installation.

3.0 TECHNOLOGY INSTALLATION/CONFIGURATION

3.1 General Installation: The Contractor shall install all equipment according to manufacturer's instructions and industry’s best practices.

3.2 Server Configuration: The Contractor shall configure servers with the specified operating system, network settings, security configurations, and required applications.

Data migration from existing servers (if applicable) shall be performed with minimal downtime.

3.3 Network Configuration: The Contractor shall configure network switches, routers, and firewalls according to the specified network topology, security policies, and performance requirements. VLANs, routing protocols, and access control lists shall be configured as needed.

3.4 Workstation Configuration: The Contractor shall configure workstations with the specified operating system, software applications, security settings, and user profiles.

Data transfer from old machines shall be performed securely and efficiently.

3.5 Wireless Network Configuration: The Contractor shall configure wireless access points with the specified SSID, security protocol (e.g., WPA3), and channel settings.

Wireless network performance shall be tested to ensure adequate coverage and bandwidth.

3.6 Data Backup Solution Implementation: The Contractor shall install and configure data backup hardware and software, set up backup schedules, and test the backup and restore process to ensure data integrity and recoverability.

3.7 Cybersecurity Implementation: The Contractor shall install and configure firewall, intrusion detection system, and anti-malware software based on industry best practices to enhance the system security.

4.0 WARRANTY

4.1 Warranty of Materials: The Contractor shall provide manufacturer's standard performance guarantees or warranties on all hardware and software components.

4.2 Warranty of Labor: The Contractor shall respond to the CO or COR within twenty-four

(24) hours for the repair of all warranty items. The Contractor shall warrant all work performed for one (1) year after project completion date.

5.0 GENERAL INFORMATION

5.1 NOTIFICATION: The Contractor shall contact the CO and COR upon receipt of the equipment and upon completion of the job.

5.2 RESPONSE/COMPLETION TIME: The Contractor shall be available to start work, if site is available, within 30 calendar days after receipt of the equipment. The Contractor shall work Mon-Fri during normal working hours (0730-1600) until the job is complete.

5.3 WORK HOURS: All work shall be accomplished during normal work hours of 0730-1600 Monday through Friday, excluding Federal holidays or hours approved by the CO.

Contractor will be required to submit a “Request to Work outside Normal Duty Hours Worksheet”.

5.4 QUALITY AND APPROVAL: All materials shall be installed in a neat, workmanship manner by workers with relevant certifications (e.g., CompTIA A+, Network+, Security+, Microsoft Certified Professional) or under the direct and physical supervision of a certified installer, in accordance with the recommended installation procedure of each manufacturer.

5.5 INSPECTION AND ACCEPTANCE: Government inspection and acceptance of work will be performed by the COR. The Contractor is responsible for inspection of their own work and corrections of discrepancies prior to the COR’s inspection.

5.5.1 UNSATISFACTORY PERFORMANCE: Unsatisfactory performance shall result in work being re-accomplished at the Contractor’s expense with no additional cost to the Government.

5.6 DAMAGES: The Contractor shall be responsible for repairing any damages caused by his/her actions at no additional cost to the Government.

5.7 SECURITY REQUIREMENTS

Contractor employees shall comply with Andersen AFB security requirements imposed by the Installation Commander at all times while on Andersen AFB premises. The Contractor shall obtain all necessary passes, decals, badges, or other items required for access to perform contract services at Andersen AFB. The Contractor is responsible for accountability of all such media, which shall be surrendered to the Security Forces Squadron Pass and Registration Section upon completion or termination of the contract or upon termination of an individual’s employment for the Contractor. The Contractor shall comply with all Andersen AFB policies regarding entry to the installation, rules of the road, contingency operations compliance, and photography prohibitions. Contractor employees are authorized entry to the installation for the purpose of work under this contract only, and are not authorized in other facilities or areas without prior government authorization. Due to safety/security requirements, Contractor personnel shall be required to fluently speak, comprehend, read, and write English.

5.7.1. Base Access. The Contractor must be aware that entry requirements are subject to change due to installation and world situations. All employees may be subject to a background check through the FBI for base access.

5.7.2. Main Base Access. Current security access restrictions at Arc Light entry gate require all contractor commercial vehicles (which are the size of a standard bread delivery truck or larger) to enter through the North Gate only. Contractor vehicles may be subject to search prior to gaining base entry. The Contractor should plan and allow for delays as a result of increased and ever- changing security procedures.

5.7.3. Security Manager. Upon contract award, the Contractor shall designate, in writing to the CO, a Security Manager who shall be the Contractor’s point of contact for all security matters. Within 5 working days of contract award, the Contractor’s Security Manager shall contact the Civil Engineer Squadron (CES) Security Manager for assistance on accomplishing Contractor personnel security requirements.

5.7.3.1. Security Training. Contractor personnel are required to attend security and OPSEC orientation under Homeland Security Presidential Directive (HSPD) Title 12. The Contractor shall schedule initial and annual refresher training (for all assigned contractor personnel) through the CES Security Manager. All contractor personnel shall be thoroughly briefed by theCESSecurityManageronestablishedsecurityrequirementsandprocedures as stipulated in AirForce Policy Directive (AFPD31-1, Integrated Defense).

5.7.3.2. Security Authority. The Contractor shall brief all employees that they shall immediately leave any area upon notification by the CO, COR, constituted authority, Security Forces, or when directed as occasional operational requirements, real world activities, or emergencies dictate.

5.7.4. Restricted/Controlled Areas. Contractor performance within restricted/controlled areas shall require Contractor compliance with various levels of security and established personnel security entry control procedures. The Contractor shall ensure all contractor employees performing services in secured areas are processed for a controlled area, limited access, or visitor badge by the Entry Controller of the restricted/controlled area.

5.7.4.1. Access Coordination. The facility manager/user/occupant/requester will be responsible for providing access, escorts, or temporary visitor access badges for contractor personnel while performing ISWM duties. The Contractor shall be responsible for scheduling access/escorts/badges by contacting the facility manager/requester at the Entry Control Point of the restricted/controlled area.

5.7.4.2. Escorts. At all times while in restricted/controlled areas, contractor employees shall be under direct surveillance of a person from that facility who is cleared to wear a controlled area badge and perform escort duties. Visitor badges shall be returned to the Entry Controller each time the employee completes the duties and leaves the area. This requirement is waived forcontractorpersonnelwhohaveunescortedaccessprivilegesanddisplayacontrolledareaba dgefor the restricted/controlled areas.

5.7.5. Employee Background Checks. All Contractor employees who do not have a current security investigation acceptable to the Security Forces, and who require a National Agency Check (NAC) for the performance of their duties, shall complete an

Electronic Personnel Security Questionnaire (EPSQ), SF 85P, Questionnaire for Public Trust Positions, in three copies (original and two photocopies); and an AF Form 2583, Request for Personnel Security Action. For all employees requiring local area network (LAN) access (if applicable), the Contractor shall submit the following information: full name, date and place of birth, social security account number, affirmation of United States citizenship, and any current security investigation data. Information shall be in writing, on company letterhead, and submitted to Security Forces through the CES Security Manager.

5.7.5.1. Pre-approval Coordination. The CES Security Manager is the source for the necessary forms and will provide instructions for receiving, preparing, and processing these forms. The Contractor shall coordinate with all required facilities to process all necessary paperwork. After forms have been properly completed, the CES Security Manager will make an appointment for contractor employee(s) to go to the Security Forces for submittal of paperwork and fingerprinting. Appointments will be scheduled within two weeks of request.

5.7.5.2. Badge Issuance. A minimum of 180 days is required to process contractor employee NACs. Additional time will be required if the NAC is unfavorable and may result in denial of entry to restricted/controlled areas or denial of base LAN access. The CES Security Manager will notify the Contractor of any NAC results. After completion of a favorable NAC, each eligible employee shall report to the CES Security Manager for processing of AF Form 2586, Unescorted Entry Authorization Certificate. The CES Security Manager will schedule appointments for issuance of badges.

5.7.5.3. Access Revocation. The Andersen AFB Installation Commander reserves the right to deny restricted area entry to any contractor employee whose NAC is unfavorable, and the right to terminate the entry of any employee upon disclosure of information indicating the individual’s continued entry to a secure area is not in the best interest of national security.

5.7.5.4. Badge Validity. Controlled area badges will be valid only for the actual period of employment or the term of the contract, whichever occurs first. Contractor employees must display the controlled area badge on their outer garment above waist level, and must, upon request, surrender the badge to any DoD member for identification verification.

Violations or deviations from established security procedures by contractor employees may result in confiscation of controlled area badges and denial of future entry to restricted areas.

5.7.5.5. Contract Personnel Requirements. The Contractor shall not employ persons for work on this contract who are identified to the Contractor by the CO as a potential threat to the health, safety, security, general well-being, or operational mission of the installation and its population.

5.7.6. Contractor Vehicles. Contractor vehicles must be maintained in a safe and operational condition at all times while on Andersen AFB.

5.7.7. For Official Use Only (FOUO). The contractor shall comply with DoD 5400-7-R, DoD Freedom of Information Act (FOIA) Program requirements. This regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding FOUO material.

5.7.8. Reporting Requirements. Contractor personnel shall report to an appropriate authority any information or circumstances of which they are aware may pose a threat to the security or well-being of DoD personnel, contractor personnel, resources, and classified or unclassified defense information.

5.7.9. Physical Security. The contractor shall be responsible for safeguarding all government property and controlled forms provided for contractor use. At the end of each work period, all government facilities, equipment, and materials shall be secured.

5.7.10. Key Control. The contractor shall establish and implement methods of making sure all keys/combinations issued to the contractor by the government are not lost or misplaced and are not used by unauthorized persons. The contractor shall not duplicate any keys issued by the government. The contractor shall immediately report to the COR or CO any occurrences of lost or duplicated keys. In the event keys other than master keys are lost or duplicated, the contractor may be required, upon written direction of the CO, to re-key or replace the affected lock or locks without cost to the government. The government may, however, at its option, replace the affected lock or locks or perform re-keying and deduct the cost of such from the monthly payment due the contractor. In the event a master key is lost or duplicated, the government shall replace all locks and keys for that system, and the total cost will be deducted from the monthly payment due the contractor.

5.8. SAFETY REQUIREMENTS AND REPORTS. The contractor shall perform work in a safe manner as required by OSHA Safety and Health Requirements. Provide a verbal report to the CO as soon as possible of each occurrence of damage to Government property or an accident resulting in death, injury, occupational disease, or adverse environmental impact.

Provide a completed copy of required Accident Investigation Reports to the CO within five calendar days of each occurrence.

5.9 PERSONNEL: In accordance with paragraph 5.4, personnel hired by the Contractor shall be fully qualified to install in both a professional manner and in strict compliance with the manufacturer's standards and instructions.

5.10 CLEAN UP: The Contractor shall ensure the work area is clean at the end of the each workday. All packing materials, debris, and removed equipment shall be removed from the site.

5.9.1 Environmental Protections and Safety: The Contractor shall be knowledgeable of and comply with all applicable Federal, State and local laws, regulations and requirements regarding environmental protection and occupational safety and health. The Contractor shall comply with any laws and regulations changes during the term of this contract. The Contractor shall follow manufacturer's guidelines and professional recommendations.

5.10 STORAGE: The Contractor shall store and safeguard materials until the contractor has prepared the worksite for installation. No storage is available on Andersen AFB unless authorized by the CO.

6.0 Services Summary. The Contractor shall achieve quality performance and customer satisfaction with no assistance from the government. The following table lists the primary mission essential performance objectives, location in this SOW, and the threshold for acceptable performance.

Performance Objective SOW Paragraph

Performance Threshold

Method of Assessment

SS-1

Removal/Decommissioning of existing equipment

2.1 Zero (0) defects

Random/Periodic Inspection/Customer Complaint

SS-2

Installation/replacement of new equipment

2.1 Zero (0) defects

Random/Periodic Inspection/Customer Complaint