1. Performance Work Statement Rev1.pdf

Ver. June 2021

PERFORMANCE WORK STATEMENT (PWS)

FOR

Intrusion Detection System (IDS) Infrastructure Repair and Sustainment Services

1.0 General:

1.1 Scope: The contractor shall provide all personnel, equipment, tools, parts, materials, supervision, and quality control necessary, except as specified in Paragraph 3.0 as Government Furnished, to perform IDS Infrastructure Repair, System Upgrades, and Sustainment Services, as defined in this PWS.

1.1.1 Objectives: To repair/replace failing components associated with the 233d Space Group’s (233 SG) IDS and sustain its operational capabilities for the duration of this contract period.

1.2 Background: The current 233 SG IDS underwent a refresh in 2016 and was subsequently certified in 2019. The refresh primarily consisted of software modification but did not include replacement of numerous physical components. An engineering study was conducted in 2023, identifying significant infrastructure repair, replacement, and upgrades to the IDS are required. Many of the physical IDS components have reached or are reaching their end of life and are beginning to fail. Additionally, there are significant deficiencies/anomalies in terms of infrastructure/system protection, regulations, and design requiring system upgrade for stable and safe operation. The PWS entails assignment of a contractor certified through Vindicator/Honeywell to accomplish administrative oversight, maintenance, upgrades, and general sustainment taskings for the Vindicator security system platform. The contractor shall ensure their personnel adhere to the malfunction, replacement, and maintenance response timelines found within Department of the Air Force Instruction (DAFI) 31-101, Integrated Defense.

1.3 Period of Performance (PoP): The Period of Performance shall be one Base Year of 12 months and four 12-month option years.

1.4 General Information:

1.4.1 Place and Performance of Services: The contractor shall be able to provide services between the hours of 0001 - 2359 on Sunday - Saturday, except on the recognized US holidays listed below. However, when major or catastrophic failures occur the contractor shall respond in accordance with (IAW) paragraph 5.1.1 and DAFI 31-101 Chapter 9. Performance shall be at Greeley Air National Guard Station (GANGS) at 2605 E 8th St, Greeley, CO 80631. The contractor shall maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons.

When hiring personnel, the contractor shall keep in mind that the stability and continuity of the work force are essential.

1.4.1.1 Telework: The Government does permit the contractor to telework in support of this requirement. In furtherance of Continuity of Operations Planning (COOP), a telework program may be enacted to ensure that the Government's mission-critical operations stay operational during times of national emergency or incidents of national significance. Telework shall be at no additional cost to the Government.

1.4.1.2 Unscheduled gate closures by Security Forces may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

1.4.1.3 The contractor’s employees shall become familiar with and obey the regulations of the installation, including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times and shall be subject to such checks as may be deemed necessary. The contractor shall ensure compliance with all regulations and orders of the installation, which may affect performance. The Government reserves the right to direct the removal of an employee from Government property or revoke access to Government systems for misconduct, security reasons, or any overt evidence of communicable disease. Removal of contractor employees for reasons stated above does not relieve the contractor from responsibility for total performance of this contract.

1.4.2 Recognized Holidays: The following are recognized United States (US) holidays.

The contractor shall not perform services on these days unless the IDS undergoes a major or catastrophic failure as outlined in paragraph 5.1.1:

1.4.2.1 New Year’s Day

1.4.2.2 Martin Luther King Day

1.4.2.3 Washington’s Birthday

1.4.2.4 Memorial Day

1.4.2.5 Juneteenth

1.4.2.6 Independence Day

1.4.2.7 Labor Day

1.4.2.8 Columbus Day/ Cabrini Day

1.4.2.9 Veteran’s Day

1.4.2.10 Thanksgiving Day

1.4.2.11 Christmas Day

1.4.3 Quality Control (QC): The contractor shall develop and maintain an effective QC Plan (QCP) to ensure services are performed IAW this PWS and in coordination with the Contract Officer Representative (COR). The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QCP is the means by which it assures itself that its work complies with the requirements of the contract. As a minimum, the contractor shall develop QC procedures that address the areas identified in Technical Exhibit (TE) 1, Performance Requirements Summary (PRS).

1.4.4 Quality Assurance (QA): The Government will evaluate the contractor’s performance under this contract IAW the Quality Assurance Surveillance Plan (QASP).

This plan is primarily focused on what the Government will do to ensure that the contractor has performed IAW the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and acceptable quality level(s) or defect rate(s).

1.4.5 Access and General Protection/Security Policy and Procedures. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the COR. The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the local installation’s Security Forces, Director of Emergency Services or local Security Office. The contractor shall ensure compliance with all personal identity verification requirements as directed by Department of Defense (DoD), Headquarters Air Force (HAF) and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

1.4.5.1. The contractor shall obtain base identification and vehicle passes, if required, for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. Contractor personnel are required to wear or prominently display installation identification badges or contractor-furnished, contractor identification badges while visiting or performing work on the installation.

1.4.5.2. The contractor shall submit a written request on the 233 SFS Form 113 to the COR for site access. When reporting to the installation, the authorized contractor individual(s) should provide a valid driver’s license, current vehicle registration, valid vehicle insurance certificate, and 233 SFS Form 113 to obtain a vehicle pass.

1.4.5.3. During performance of the contract, the contractor shall be responsible for obtaining required identification for newly assigned personnel and for prompt return of credentials and vehicle passes for any employee who no longer requires access to the work site.

1.4.5.4. When work under this contract requires unescorted entry to controlled or restricted areas, the contractor shall comply with DAFI 31-101, Integrated Defense and the 233 SG Integrated Defense Plan (IDP).

1.4.5.5. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

1.4.5.6. Failure to comply with these requirements may result in withholding of final payment.

1.4.5.7. Reserved.

1.4.5.8 For contractors that do not require CAC but require access to a DoD Facility and/or Installation. Contractor and all associated sub-contractors’ employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB), DAFI 31-145, DAFI 31-101, and Air Force Manual (AFMAN) 31-113, applicable installation, facility and area commander installation/facility access, and local security policies and procedures provided by the COR.

1.4.5.9 Antiterrorism Awareness Level I Training (AT Level I). All contractor employees, to include subcontractor employees, requiring access to US Government installations, facilities and controlled access areas shall complete AT Level I training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. AT Level I may be accomplished by a Level I qualified instructor or by completing the Force Protection computer-based training (CBT) course on Joint Knowledge Online (JKO) at http://jko.jten.mil. Tracking for each contractor or subcontractor employee is the responsibility of the COR or unit AT Representative. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee to the COR within 15 calendar days after completion of training by each employee or subcontractor personnel.

1.4.5.10 Communications Security/Information Technology (COMSEC/IT) Security. All communications with DoD organizations are subject to COMSEC review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DoD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations. Therefore, the contractor is advised that any time contractor personnel place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DoD information. The contractor shall abide by all Government regulations concerning the authorized use of the Government's computer network, including the restriction against using the network to recruit Government personnel or advertise job openings.

1.4.5.11 Use of Government Information Systems (IS) and access to Government networks is a revocable privilege, not a right. Users are the foundation of the DoD strategy and their actions affect the most vulnerable portion of the Air Force Infostructure. Contractor employees shall have a favorable background investigation or hold a security clearance and access approvals commensurate with the level of information processed or available on the system. Contractor employees shall:

1.4.5.11.1 Comply with the command's Acceptable Use Policy (AUP) for Government owned IS and sign an AUP prior to or upon account activation.

1.4.5.11.2 Complete initial and/or annual Information Assurance (IA) training as required by applicable Air Force/Air National Guard (ANG) policy.

1.4.5.11.3 Mark and safeguard files, output products, and storage media per classification level and disseminate them only to individuals authorized to receive them with a valid need to know.

1.4.5.11.4 Protect IS and IS peripherals located in their respective areas IAW physical security and data protection requirements.

1.4.5.11.5 Practice safe network and Internet operating principles and take no actions that threaten the integrity of the system or network.

1.4.5.12 All contractor employees and associated sub-contractor employees assigned to work on a Government site and/or requiring access to a DoD network will be required to register with JKO at commencement of services in order to complete the necessary training required of them initially and annually for the duration of the contract (i.e., DoD IA Cyber Awareness, Protecting Sensitive Information, CUI, FPCON, etc.). JKO website: https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf?ORG=NAVSEA

1.4.5.13 IA Training. All contractor employees and associated sub-contractor employees shall complete the DoD IA Awareness Cyber Awareness Challenge before issuance of network access and annually thereafter. All contractor employees performing services involving IA/IT functions shall comply with DoD and Air Force training requirements in DoDD 8140.01, DoD 8570.01-M and AFMAN 17-1301 within 180 days of the start of contract performance.

1.4.5.14 IA/IT Certification. IAW DoD 8570.01-M, DFARS 252.239.7001, and Air Force Policy Directive (AFPD) 17-1 contractor employees performing services supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M shall be completed upon contract award.

1.4.5.15 Requirement for Operational Security (OPSEC) Training. IAW AFI 10-701, Operations Security, OPSEC PMs/Signature Managers/Coordinators will provide OPSEC training or training materials to contract employees within 30 days of employees’ initial assignment to the contract and prior to having access to any critical information (CI) and annually thereafter. General organizational orientations may need to be supplemented by duty-related orientations in the work center targeted toward specific critical information and vulnerabilities associated with the work.

1.4.5.16 OPSEC Plan. The contractor shall develop an OPSEC Plan and provide it to the COR and KO within 15 calendar days of contract award to be reviewed and approved by the responsible Government OPSEC officer, per AFI 10-701, Operations

Security. This Plan shall include the Government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. For the contractor to effectively comply with OPSEC provisions of the contract, the organization will provide the following guidance: (1) Organization’s CI; (2) Adversaries’ collection threat information as it applies to the organization’s mission and the contract; (3) OPSEC guidance; and (4) Specific OPSEC measures the organization requires (as appropriate).

1.4.5.17 Controlled Unclassified Information (CUI). Controlled Unclassified Information (CUI) is information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that requires safeguarding or dissemination controls consistent with applicable laws, regulations, and Government-wide policies but is not classified under Executive Order 13526 "Classified National Security Information.” IAW DFARS clause 252.204-7012, contractors are required to comply with NIST 800-171. IAW DODI 5200.48, Controlled Unclassified Information training standards can be met at https://www.cdse.edu/Training/Toolkits/Controlled- Unclassified-Information-Toolkit/

1.4.5.18 Contractors and Consultants. DoD contractors and consultants who have TOP SECRET/SCI access may be given unescorted access to or be allowed to work alone in DoD SCIFs if all proprietary information or other special program materials to which the contractor may not have access under the terms of the contract are secured, as appropriate. Reference: DoDM 5105.21-V2

1.4.5.18.1 The contractor must possess a final TOP SECRET security clearance and be indoctrinated into SCI in order to be left alone within a SCIF.

1.4.5.18.2 The statement of work or DD Form 254 must authorize the contractor to work past routine working hours as they are described in the contract. The CORs concurrence is required prior to allowing contractors to work past routine working hours.

1.4.6 Reserved.

1.4.7 Special Qualifications: The contractor shall ensure employees tasked with the completion of any of the items located in TE 1 – PRS possess all required licenses & certifications awarded by software proprietary manufacture, Honeywell, which are required to operate, modify, repair and maintain the Vindicator platform at the administrative level. The required certifications are; VINDICATOR IDS, VINDICATOR OPERATOR, and VINDICATOR ACS. Contractor personnel must also hold, at minimum, a CompTIA Security+ certification to operate on DoD/Air Force networks used in the performance of this contract. This does not include education or other qualifications for the position in which the contractor requires upon hiring employees such as advanced degrees or dress & appearance standards. (NOTE: The Government does not provide training to contractors. Contractors must ensure that any personnel performing under a contract are fully trained, licensed, certified, and otherwise qualified to provide services.)

1.4.8 Post Award Conference/Periodic Progress Meetings: The contractor shall attend any post award conference convened by the KO IAW FAR 42.5. The KO, COR and other Government personnel, as appropriate, may meet periodically with the contractor to review the contactor’s performance. At these meetings, the KO will apprise the contractor of how the Government views the contractor’s performance and the contractor shall apprise the Government of problems, if any, being experienced. The contractor shall resolve outstanding issues raised by the Government. Contractor attendance at these meetings shall be at no additional cost to the Government.

1.4.9 Contract Manager (CM): The contactor shall designate a CM who shall ensure performance under this contract. The name of this person, and an alternate who shall act for the contractor when the CM is absent, shall be designated in writing to the KO.

The CM or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The CM shall work through the COR, to resolve issues, receive technical instructions, and ensure adequate performance of services. The CM shall ensure that contractor employees do not perform any services outside the scope of the contract without an official modification issued by the KO. The CM shall ensure contractor employees understand that services performed outside the scope of the contract are performed wholly at the expense of the contractor.

1.4.10 The contractor shall retrieve all identification media (including vehicle passes) from its employees who depart employment for any reason. The contractor shall return all identification media (i.e., badges and vehicle passes) to the KO within 14 days of an employee’s departure.

1.4.11. Combating Trafficking in Persons: The US Government has adopted a zero-tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the US Government’s zero tolerance policy, the actions that will be taken against employees for violations of this policy. The contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at FAR 22.17.

1.4.12 Reserved

1.4.13 Data Rights. The Government has unlimited rights to all documents/materials produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the KO. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.4.14 Reserved

1.4.15 Reserved

2.0 Definitions and Acronyms:

2.1 Definitions:

2.1.1 Contractor: A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.2 Defective Service: A service output that does not meet the standard of performance associated with the PWS.

2.1.3 Deliverable: Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.4 Key Personnel: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.5 Physical Security: Actions that prevent the loss or damage of Government property.

2.1.6 Quality Assurance: The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.7 Quality Assurance Surveillance Plan: An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.8 Quality Control: All necessary measures taken by the Contractor to ensure that the quality of an end product or service shall meet contract requirements.

2.1.9 Subcontractor: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 Acronyms:

233 SG 233rd Space Group AFI Air Force Instruction AFMAN Air Force Manual

ANG Air National Guard AT Antiterrorism AUP Acceptable Use Policy CBT Computer Based Training CI Critical Information CFP/M/E Contractor Furnished Property, Materials, and Equipment CM Contract Manager COOP Continuity of Operations Planning COMSEC Communications Security COR Contracting Officer Representative DAFI Department of the Air Force Instruction DFARS Defense Federal Acquisition Regulation Supplement DoD Department of Defense DSCA Defense Counterintelligence and Security Agency FAR Federal Acquisition Regulation FDB Field Distribution Box FPCON Force Protection Condition GANGS Greeley Air National Guard Station GFP/M/E/S Government Furnished Property/Material/Equipment/Services HAF Headquarters Air Force IA Information Assurance IAW In Accordance With IDS Intrusion Detections System IS Information System(s) IT Information Technology JKO Joint Knowledge Online KO Contracting Officer NCIC-III National Crime Information Center Interstate Identification Index OF Optical Fiber OPSEC Operational Security PoP Period of Performance PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Plan RPA Resource Protection Area SAW Security Archive Workstation SCIF Sensitive Compartmented Information Facility SCS Space Communication Squadron SFS Security Forces Squadron SPD Surge Protector TE Technical Exhibit TSDB Terrorist Screening Database US United States

3.0 Government Furnished Property, Material, Equipment and Services (GFP/M/E/S):

The Government will provide the property, material, equipment, and/or services listed below solely for the purpose of performance under this contract:

3.1 Property: The Government will furnish the necessary workspace for the contractor to perform services outlined in this PWS to include desk space, telephones, computers and other items necessary to maintain an office environment.

3.2 Services: The Government will provide communication infrastructure support through the 233 Space Communication Squadron (SCS), and security policies/requirements through the 233 SFS.

3.3 Utilities: All utilities in the facility will be available for the contactor’s use in the performance of this contract. The contractor shall instruct employees in utilities conservation practices. The contractor shall operate under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount.

4.0 Contractor Furnished Property, Materials, and Equipment (CFP/M/E):

4.1 General: Except for those items specifically stated to be Government-Furnished in Paragraph 3.0, the contractor shall furnish everything required to perform these services as indicated in Paragraph 1.1 and in Technical Exhibit (TE) 3-6.

4.2 Reserved

4.3 Contractor Security Clearance: The contractor and the contractor’s employees performing work in support of this contract shall possess or be eligible to receive and maintain a SECRET clearance from Defense Counterintelligence and Security Agency

(DSCA).

5.0 Requirements: The contractor shall:

5.1 Provide Preventative Maintenance and 24/7 Maintenance Response.

5.1.1 IDS Failure Categories. IDS faults are divided into three distinct categories.

5.1.1.1 Catastrophic Failure. Catastrophic failures are defined by the entire system or a major portion fails. (e.g., failure of the annunciation and display subsystem leaving no operational annunciator, or failure of the server eliminating communication between the annunciator and all alarm points).

5.1.1.2 Major Malfunction. Major malfunctions are defined by there being the possibility of an intruder penetrating an area boundary or accessing a resource without passing through a line of detection or a detection capability, or by the failure of an annunciator when an alternate exists and is still operating.

5.1.1.3 Partial Failure. Partial failures are any other system degradation, which does not leave any protected asset without at least one detection capability. For example, only one line of detection at a boundary is operational where two are required, or a portion of a structure, shelter or individual resource line of detection fails.

5.1.2 When any IDS component, system, or software malfunctions or fails, the contractor will diagnose and restore the system to full capability as soon as possible.

The contractor shall maintain sufficient bench stock to repair or replace malfunctioning components within the established timelines below.

5.1.2.1 For areas containing PL-1 and PL-2 resources, the contractor will respond within one hour of notification for catastrophic failures and major malfunctions. Catastrophic failures and major malfunctions must be repaired to at least a partial failure within 24 hours.

5.1.2.2 For all other areas, the contractor will respond within 24 hours of notification for catastrophic failures and major malfunctions. Catastrophic failures and major malfunctions must be repaired to at least a partial failure within 24 hours of response.

5.1.2.3. For all areas, the contractor will respond no later than the next duty day following notification for malfunctions classified as partial failures.

5.1.3 The contractor, with oversight from 233 SF personnel, will conduct a functional test of each sensor that receives any maintenance action or any type of alarm as a result of maintenance activity in accordance DAFI 31-101, Integrated Defense. This includes those from outside the serviced zones or those accidentally caused by maintenance.

5.1.4 Following any maintenance action/response, the contractor shall provide an after-action report outlining the system/component failure, response taken, and the operational testing status/completion within 7 business days of completion of the repair.

5.1.5 Test all repaired or replaced components in accordance with DAFI 31-101, Integrated Defense.

5.1.6 Clean all camera lens quarterly or as required to maintain 100% operational capability.

5.1.7 Provide a quarterly system status report to help determine IDS health.

5.1.8 Update existing IDS network maps and diagrams based on any and all modifications made to the existing system. Provide two physical and two digital copies of all updated maps and diagrams to the COR.

5.1.8.1 The network maps and diagrams of the entire IDS shall include;

• Device Identification

• Device location

• MAC/IP address

• Device Icon

• Connectivity type

• Inter-connectivity

5.1.8.2 The network maps and diagrams, at a minimum, shall consist of;

• Each Controlled area/facility

• Sensitive Compartmented Information Facility (SCIF)

• Each network hub

• The Restricted Area

• The Resource Protection Area (RPA), otherwise known as “main base”

5.2 Option 1 - Upgrade Vindicator and VICADS CCTV systems to Microsoft Windows 10 compatible versions. Replace all IDS/ VICADS connected workstations and servers as outlined in TE 3 with Windows 10 and Windows Server 2019 compatible hardware/software. Additionally, vendor shall separate SAW2 and VCC2 machines per vindicator guidance for security reasons. See Questions and Answers for anticipated equipment/work required. Vendor is responsible to install a complete and functional system regardless of the equipment listed in the Questions and Answers and TE-3.

Replace existing V5 head-end IDS machine with V6 variant. Conduct all work in accordance with DAFI 31-101, Integrated Defense.

5.3 Option 2 - Seal all building interior holes/openings penetrated by IDS/CCTV conduits and cables with fire caulking and all exterior holes/openings penetrated by conduits and cables with weather proofing as outlined in TE 7.

6.0 Applicable Publications: Publications applicable to this PWS are listed below:

Publication (Chapter/Page)

Date of Publication

Mandatory or Advisory

Website

Federal Acquisition Regulation https://www.acquisition.gov/?q=browsefar Defense Federal Acquisition

Regulation Supplement http://www.acq.osd.mil/dpap/dars/dfarspgi/current/in dex.html or https://www.acquisition.gov/dfars DoDM 5200.2 Procedures for the DoD Personnel Security Program

(PSP)

04/03/2017 https://www.esd.whs.mil/Directives/issuances/dodm/

Homeland Security Presidential Directive (HSPD)-12

Policy for a Common Identification Standard for Federal Employees and

Contractors

08/27/2004 https://www.dhs.gov/homeland-security-presidential-directive-12

DoD 8570.01-M Information Assurance Workforce

Improvement Program

12/19/2005 (Change 4:

11/10/2015) https://www.esd.whs.mil/Directives/issuances/dodm/

DoD 5220.22-M 02/28/2006 https://www.esd.whs.mil/Directives/issuances/dodm/

National Industrial Security Program Operating Manual (NISPOM)

(Change 2:

05/18/2016)

AFI 31-145

Antiterrorism

11/14/2022 Controlled document. Available upon request.

DAFI 31-101

Integrated Defense

Updated 4/11/2023

Controlled document. Available upon request.

AFI 31-118

Security Forces Standards and

Procedures

Updated 10/14/2022 https://static.e-publishing.af.mil/production/1/af_a4/publication/afi3

1-118/afi31-118.pdf

AFPD 17-1

Information Dominance Governance and Management

04/12/2016 https://www.e-publishing.af.mil/Product- Index/#/?view=pubs&orgID=10141&catID=1&series

=-1&modID=449&tabID=131

AFMAN 17-1301

Computer Security (COMPUSEC) Updated

1/17/2023 https://static.e-publishing.af.mil/production/1/saf_cn/publication/afm an17-1301/afman17-1301.pdf

AFI 10-701

Operations Security

7/24/2019 (Change 1:

06/09/2020) https://static.e-publishing.af.mil/production/1/af_a3/publication/afi1

0-701/afi10-701.pdf Force Protection Division, AFLCMC/HBU Non-Nuclear Configuration Management Database

(CMD) Equipment Approval Memorandum

5/2/2023 Controlled document. Available upon request.

6.1 Applicable Forms: Forms applicable to the PWS are listed below:

Form Date Website 233 SF Form 113 Available upon request

TECHNICAL EXHIBIT 1

Performance Requirements Summary (PRS)

This PRS includes performance objectives the Government will use to determine contractor performance and will compare contractor performance to the Acceptable Quality Level (AQL).

Performance Objective

Performance Standard Acceptable Quality Levels (AQL)

Surveillance Method / By Whom

5.1.2.1 24/7

Maintenance Response

For areas containing PL-1 and PL-2 resources, respond within one hour of notification for catastrophic failures and major malfunctions.

Catastrophic failures and major malfunctions must be repaired to at least a partial failure within 24 hours of notification.

No more than 1 failure to meet the response time within the period of performance

Periodic Inspection / COR

5.1.2.2 24/7

Maintenance Response

For all other areas (non-PL-1 or 2), respond within 24 hours of notification for catastrophic failures and major malfunctions. Catastrophic failures and major malfunctions must be repaired to at least a partial failure within 24 hours of response

No more than 1 failure to meet the response time within the period of performance

Periodic Inspection / COR

5.1.2.3 24/7

Maintenance Response

For all areas, respond no later than the next duty day following notification for malfunctions classified as partial failures.

No more than 1 failure to meet the response time within the period of performance

Periodic Inspection / COR

5.1.3 24/7

Maintenance Response

Testing

Conduct a functional test immediately following completion of maintenance action of each sensor that receives any maintenance action or any type of alarm as a result of maintenance activity

No more than 1 failure to test within the period of performance

Periodic Inspection / COR

5.1.4 24/7

Maintenance Response After Action Reporting

Provide an after-action report outlining the system/component failure, response taken, and the operational testing status/completion within 7 business days of completion of the repair

No more than 2 late reports submitted within the period of performance

Periodic Inspection / COR

5.1.5 Test all repaired

or replaced components

Test all repaired or replaced components immediately following completion of repair/replacement work

No more than 1 failure to test within the period of performance

Periodic Inspection / COR

5.1.6 Clean cameras

Clean all camera lens quarterly or as required to maintain 100% operational capability. Quarterly is defined as no later than the last day of the 3rd, 6th, 9th, and 12th months of the period of performance

No more than 1 failure to conduct quarterly cleaning within the period of performance

Periodic Inspection / COR

5.1.7 Quarterly system

status report

Provide a quarterly system status report. Quarterly is defined as no later than the last day of the 3rd, 6th, 9th, and 12th months of the period of performance

No more than 1 late report submitted within the period of performance

Periodic Inspection / COR

5.1.8 Network Maps

(Digital/physical)

Updated network maps and diagrams are received no later than 30 business days after any modification

No more than 1 late submittal within the period of performance

Periodic Inspection / COR

5.2 Upgrade

Vindicator and

VICADS CCTV

systems

Upgrade Vindicator and VICADS CCTV systems to

Microsoft Windows 10 compatible versions. Replace all IDS/ VICADS connected workstations and servers as outlined in TE 3 with Windows 10 and Windows Server 2019 compatible hardware/software.

Replace existing V5 head-end IDS machine with V6 variant.

Conduct all work in accordance with DAFI 31-101, Integrated Defense. Complete upgrade within the 90 days of official start date.

30-day burn-in period completed without partial system failure

IAW DAFI 31-101

Periodic Inspection / COR

5.3 Fire Caulking &

Weather Sealing

Seal all building interior holes/openings penetrated by

IDS/CCTV conduits and cables with fire caulking and all exterior holes/openings penetrated by conduits and cables with weather proofing as outlined in TE 7. Complete upgrade within the 60 days of official start date.

30-day burn-in period completed without partial system failure

IAW DAFI 31-101

Periodic Inspection / COR

TECHNICAL EXHIBIT 2

Deliverables Schedule

PWS Reference / Deliverable Title

Frequency Number of Copies

Medium/Format Submit To

1.4 and all sub-paragraphs / training certificates

Provide certificates of completion for all required training within 15 calendar days after employee completes training

1 Electronic Submission

COR

5.1.4 24/7 Maintenance Response After Action Reporting

Provide within 7 business days of completion of the maintenance action

1 Electronic Submission

COR

5.1.7 Quarterly system

status report

Quarterly is defined as no later than the last day of the

3rd, 6th, 9th, and 12th months of the period of performance

1 Electronic Submission

COR

5.1.8 Network maps

Physical & Digital

As required following modifications to the system

2 Physical and Electronic

Submission

COR

TECHNICAL EXHIBIT 3

Option 1 - Known Workstations and Servers Requiring Replacement

VINDICATOR ABDOC (B100) SCIF (B100) ECF (B138) NCC (B103)

Workstations

VCC2/SAW2 1 0 1 0

VCC2/SAW2 for SCIF 0 1 0 0 Badge Manager 1 0 0 0

Servers VSS 0 0 0 1

VICADS ABDOC (B100) SCIF (B100) ECF (B138) NCC (B103)

Workstations Personal Viewer 1 0 1 1 SoftWall 1 0 1 0

Servers

NVR 0 0 0 1

Broadcast Server 0 0 0 1 Management Server 0 0 0 1

VINDICATOR ABDOC (B100) SCIF (B100) ECF (B138) NCC (B103)

VCC2 1 0 1 0

Workstations SAW2 1 0 1 0

VCC2 for SCIF 0 1 0 0

SAW2 for SCIF 0 1 0 0

Badge Manager 1 0 0 0

Servers VSS 0 0 0 1

TECHNICAL EXHIBIT 4

Option 2 – Fire Caulking & Weather Sealing

Building Room/Location Requirement

100 Alternate BDOC Seal all interior holes/openings penetrated by conduits and cables with appropriate fire caulking.

103 Exterior Camera Pole Seal all exterior holes/openings penetrated by conduits, cables, and/or brackets with appropriate weather proofing.

137 Exterior Camera Pole Seal all exterior holes/openings penetrated by conduits, cables, and/or brackets with appropriate weather proofing.

138 ECF Electrical Room Seal all interior holes/openings penetrated by conduits and cables with appropriate fire caulking.