Attachment 0006 - PWS 06 RFAAP Security and Antiterrorism.pdf

DRAFT

RADFORD ARMY AMMUNITION PLANT

PERFORMANCE WORK STATEMENT (PWS)

PWS - 6: INSTALLATION SECURITY AND ANTITERRORISM

1. GENERAL:

1.1. This Performance Work Statement (PWS) prescribes policy, standards, procedures and general responsibilities pertaining to security, antiterrorism (AT) and preservation of order at the Radford Army Ammunition Plant (RFAAP), an installation under Exclusive Jurisdiction.

1.2. The Contractor shall comply with the most recent version of Army regulations referenced in this PWS. If the Army regulations change during performance of this PWS the Contractor shall comply with and shall be responsible for meeting all the requirements in the updates to Army Regulations as they become effective. Any change in the Army regulations during performance shall be deemed a change under this contract. Any such changes will be incorporated by the Procuring Contracting Officer in accordance with FAR 52.243-2, Changes – Cost-Reimbursement. Chapter and paragraph numbers have been included for convenience; however, this does not relieve the Contractor from complying with all other applicable parts of the referenced Army Regulation (AR).

1.3. The Contractor shall hold subcontractors equally responsible for adhering to security requirements as outlined in this PWS and the installation Physical Security Plan (PSP) IAW AR 190-13 and AMC-R 525-4.

2. CONTRACTOR REQUIREMENTS: The Contractor shall perform the services enumerated below in accordance with (IAW) this PWS and the approved installation PSP. All documentation shall be available for review by the RFAAP Security Manager upon request.

2.1. PHYSICAL SECURITY PLAN:

2.1.1. The Contractor shall develop (or in the case of a continuing contract, shall update annually and maintain) an installation PSP IAW Army Regulation (AR) 190-13 paragraph 2-12 and Appendix C and AMC-R 525-4 for the protection of installation personnel, resources and facilities which outlines security operations for the entire installation at RFAAP. This installation PSP shall include procedures to collect and analyze threat information and threat capability, assess vulnerability to threat attacks and implement procedures to deter, detect, defend and recover from terrorist threats to include Weapons of Mass Destruction (WMD)/Chemical, Biological, Radiological, Nuclear and High Yield Explosive (CBRNE) events. The PSP shall be Department of Homeland Security (DHS) National Incident Management System (NIMS) compliant.

The contractor shall submit, 90 days after contract award of the facility, the PSP thru the Administrative Contracting Officer (ACO) to the Procuring Contracting Officer (PCO) for approval before implementation. In accordance with AR 525-27, the Army Emergency Management Program, the installation PSP shall be fully coordinated to ensure integration of other protection programs, plans and orders (for example, AT, Fire and

Emergency Services (F&ES), Oil and Hazardous Material Spills, and Environment) and shall adopt and implement procedures consistent with the NIMS and the ICS. (A06-01).

2.1.1.1. This PSP will include procedures to collect and analyze threat information and threat capability, assess vulnerability to threat attacks and implement procedures to deter, detect, defend and recover from terrorist threats to include a Weapons of Mass Destruction (WMD)/Chemical, Biological, Radiological, Nuclear and High Yield Explosive (CBRNE) event. The DPP shall be Department of Homeland Security (DHS) National Incident Management System (NIMS) compliant.

2.1.1.2. The PSP will be reviewed by the RFAAP Security Manager and the

Headquarters, US Army Joint Munitions Command (JMC) Provost Marshal/Protection G2/6 office, endorsed by the Commander. The contractor shall submit, 90 days prior to operational control of the facility, the PSP thru the administrative Contracting Officer (ACO) to the Procuring Contracting Officer (PCO) for approval before implementation.

2.2. SECURITY FORCE TRAINING

2.2.1. The Contractor shall furnish properly trained and qualified security personnel, to include armed security officers. The Contractor shall ensure armed security officers are properly trained and that each individual who performs security tasks or duties before assignment to such duties or tasks is properly qualified. Armed officers will be capable of mutually supporting RFAAP Department of the Army Civilian Police (DACP) officers and local law enforcement agencies in the entry of any building on the installation. However, it is not expected that the Contractor or its subcontracted armed guards are required to enter such building with DACP and/or local law enforcement agencies This entry may require the use of deadly force to stop an active armed threat.

2.2.1.1. Training standards for security guards shall conform, as local requirements and AR 190-56 dictate, to performance-oriented tasks necessary to ensure adequate security and preservation of order at RFAAP. The Contractor shall develop a training program based on mission, local threat, AR 190-56 and RFAAP Commander approved training requirements. The Contractor shall forward the RFAAP Commander its training curriculum 30 days after contract award. As first responders, Security’s training curriculum shall include compliance with AR 525-27, pages 9-10, Table 4-1, for first responder officers, potential security incident commanders, dispatchers and EOC personnel. The contractor will provide all security guard personnel with active shooter training IAW AR 190-56, paragraph 4-6.g., and Training Support Package (TSP) 191-AS-2015 annually. (A06-02).

2.2.1.2. The Contractor shall document and record the training and qualifications of each security guard performing under this PWS. Documentation of training and qualification shall occur via training attendance rosters, which at a minimum, shall contain the name of the training course being taught, the location of the training, the date and time the training was conducted and names and signatures of the training participants. These attendance rosters, along with a copy of the course lesson plan, shall comprise a training record. This documentation shall be readily available for review and maintained for as long as that individual remains employed in a security capacity and for one (1) year after termination or retirement of security personnel. (A06- 03).

2.2.1.3. Prior to issuance of weapons and non-lethal devices, all security personnel shall receive training on the Army escalation of force per DODD, AR 190-14 paragraphs 3-1 and 3-2, AR 190-56, CH 5-3d and IAW applicable regulations and local law; instructions on firearms safety functions, capabilities, limitations and maintenance procedures for the type of weapon issued; and individual responsibilities on the carrying of firearms and nonlethal devices. This training shall include the use and proficiency of all of the options on the degree of force required for specific security situations as described in AR 190-14, to include formal training on verbal persuasion and unarmed defense techniques. Non-lethal devices and options are defined as verbal persuasion, unarmed defense techniques, chemical aerosol irritant projectors (OC spray), military police club (baton), presentation of deadly force capability, and use of deadly force.

2.2.1.4. Weapons training, to include qualification, familiarization and required annual training, will comply with AR 190-56 paragraphs 4-5 and 4-6 and ST 19- LEWTAQ. All security personnel shall successfully qualify with their assigned handgun using the US Army Military Police School (USAMPS) Law Enforcement Weapons and Training Qualifications (LEWTAQ) (ST 19-LEWTAQ) as required by AR 190-56 paragraph 4-5. ST 19-LEWTAQ is a controlled document and will be obtained by the RFAAP Security Manager through the USAMPS and distributed as necessary to the contractor for training purposes. To be considered eligible to carry firearms, personnel must have satisfactorily completed mandatory training and proficiency testing within the preceding six (6) months and possess any licenses required by the state of Virginia and Federal Law. The Contractor shall maintain documentation and records of this qualification firing for as long as each employee remains employed in a security capacity.

2.2.1.5. The Contractor shall ensure all security force personnel assigned to

RFAAP are well versed and knowledgeable in their authority as defined by Federal, State and local laws and AR 190-56 chapter 4 and paragraph 4-6b.

2.2.1.6. The Contractor shall ensure all security force personnel are certified by an accredited agency in First Aid, cardiopulmonary resuscitation (CPR) and automated external defibrillator (AED) certified within 180 days of contract award, or an individual's start date.

2.2.1.8. The Contractor will provide uniformed armed personnel with active shooter (defensive) training IAW AR 190-56 paragraph 4-6g, and Training Support Package (TSP) 191-AS-2015 at least annually. TSPs will be obtained by the RFAAP Security Manager and distributed to the contractor for training purposes. If security guards are provided by a subcontractor at any tier, the contractor will be responsible for requiring and ensuring that all such subcontractor security guards receive active shooter training IAW AR 190-56, paragraph 4-6.g., and TSP 191-AS-2015. Security guards will at all times act within the scope and authorizations of any licenses they are required to hold and the laws and regulations of the Commonwealth of Virginia governing the authority of contract security guards. Receiving Active Shooter training is not an authorization or direction by the Government to respond or act contrary to such licenses, laws, or regulations. It is the contractor’s responsibility to be cognizant of and understand all such licensing, statutory and regulatory requirements and to ensure that its security guards and the security guards employed through any subcontractor at any tier know all such requirements and are in full compliance at all times.

2.2.1.9. As security force dispatchers answer all of the installation’s emergency calls via an internal emergency telephone system; therefore, all security force dispatchers shall have basic Emergency Medical Service (EMS) Dispatcher Certification within 180 days of contract award. NFPA 1221, 7.4.5 requires, “For medical calls where a patient is determined to be unconscious/unresponsive and not breathing, bystander CPR shall be confirmed or telephone CPR shall be initiated by a tele communicator qualified in emergency medical dispatch and continued until emergency responders arrive at the patient”. Dispatchers/EOC Staff shall also complete training required per AR 525-27, page 10, Table 4-1, Dispatchers/EOC ICS through advanced means: IS- 100, IS-200, ICS-300 and ICS-400]. Dispatchers shall also receive training in the use of the Closed Circuit Television (CCTV) system and Intrusion Detection System (IDS). All training certifications will be maintained in the employees training file and be available for review as required. (A06-04).

2.3. SECURITY FORCE EQUIPMENT AND ARMAMENT

2.3.1. The Contractor shall provide uniforms for all security personnel and ensure standardized seasonal uniform items that enhance duty performance and personnel safety; provide adequate protection against the elements; and present a professional and standardized appearance. The ACO will ensure the uniform appearance and components are comparable to AR 190-56. Uniforms for administrative personnel are at the discretion of the Contractor. Uniforms shall be compatible and consistent with the type of work or work scenarios required, such as, jumpsuits or special reaction team coveralls for conducting special searches, responses, and exposures to inclement weather conditions, etc. This includes safety equipment, such as safety shoes, safety glasses, and any other safety items needed for conducting security patrol checks and inspections in industrial and chemical buildings. The safety equipment shall be consistent with that of other standard police department safety equipment, to include such things as ballistic protective vests and chemical agent protective masks. Normal safety policies established for other Depot employee's protection against high noise, protective footwear, or protection against eye injury in a general industrial plant are also required. The Contractor shall provide this equipment to the necessary security personnel, and the equipment shall meet the minimum standard guidelines IAW current American National Standards Institute (ANSI), Occupational Safety and Health Administration (OSHA), National Fire Protection Association (NFPA) and National Institute for Occupational Safety and Health F(NIOSH) general industrial standards, recommendations, and laws. Ballistic protective vests shall be fitted to the individual security officer and the security officers shall be “fit tested” and given medical clearance by a physician prior to assignment and use of chemical agent protective masks.

Uniforms and Equipment issued prior to Security Guard going on duty Uniforms are subject to inspection every day. The contractor shall provide an initial memorandum stating that all personnel have been issued the required safety and security equipment and annually thereafter. (A06-5A)

2.3.1.1. Ballistic protective vests shall be fitted to the individual security officer.

Chemical agent protective masks will be "fit tested" and officers will be given medical clearance by a physician prior to assignment and use of the masks.

2.3.2. The Contractor shall arm all uniformed personnel. Administrative personnel may be armed at the discretion of the installation Commander, and if approved, must satisfactorily complete mandatory weapons training and proficiency training. The Contractor shall arm the security personnel. The Contractor shall provide 9mm caliber, semi-automatic side arm and 5.56 caliber, semi-automatic, magazine fed, patrol carbines/rifles. Contractors are authorized in addition to above weapons to employ 12ga shotguns as a defensive weapon meeting the following requirements (shotgun qualification/familiarization shall include both “buckshot” and “slug” capabilities). When issued for duty, the shotgun rounds shall include both “buckshot” and “slug” capabilities in a sufficient amount to counter applicable threats. The Government will issue all ammunition (9mm, 5.56mm and if assigned 12-gauge rounds) for assigned Contract weapon systems and ammunition will be provided through TAMIS. The Contractor shall ensure that each Security Guard is equipped with three 15-round magazines of this ammunition for the side arm (one magazine in the weapon and two on the duty belt for a total of 45 9mm rounds). The Contractor shall issue, at a minimum, Level III security holsters for the Security Guard’s 9mm handguns IAW AR 190-56 Para 6-13h. Security Guards are not authorized to carry or use concealed weapons or privately- owned weapons or ammunition at RFAAP. In addition, 5.56 caliber, semi-automatic, magazine fed, patrol carbines/rifles, magazines, magazines pouches shall be furnished by the Contractor to Contractor Security Guards who are performing patrol and over watch duties. The Contractor Long Rifle/ Shotguns weapons shall be securely mounted in the Contractor’s security vehicles or Access Control Points to provide immediate access in the event of an emergency. The Contractor shall provide and ensure that each Security Guard with a patrol carbine/rifle, is equipped with four 30-round magazines (one magazine in the weapon and three magazines in magazine pouches on the duty belt for a total of 120 5.56 rounds). Rifles and side arms shall immediately be taken out of use when they do not function as designed and/or when they have broken pieces or parts.

In addition to firearms, the contractor shall provide expandable police batons and chemical aerosol irritant projectors (e.g., OC spray) to security personnel. The Contractor are authorized to store Contract weapons and ammunition storage and Government weapons and ammunitions within the same Storage facility but must be stored in separate approved GSA weapons racks or lockers.

2.3.2.1. The Contractor shall ensure security force weapons and ammunition are stored and accounted for IAW AR 190-11 Chapters 3, 4, and 5; AR 710-2 Chapters 2 and 3; and DA Pam 710-2-1 Chapter 9.

2.3.3. The Contractor is responsible for the acquisition, upkeep and maintenance on all vehicles used for security force operations. All vehicles utilized by the Contractor for security shall be equipped with emergency equipment and markings deemed appropriate by the Contractor and approved by the Government.

2.4. SECURITY FORCE EMPLOYMENT SUITABILITY REQUIREMENTS

2.4.1. The Contractor shall hire trustworthy and reliable security personnel IAW AR 190-56 which provides the required personnel qualifications and selection standards. In addition, the contractor shall establish an Individual Reliability Program (IRP) as specified in AR 190-56, chapter 2 and 3; AR 190-11, and AR 190-13. Meeting the standards of the IRP shall be a condition of continued employment in a security capacity. Each security officer shall undergo a Tier 3 (T3) government personnel security investigation IAW with AR 190-56 to confirm his/her trustworthiness, and for handling government sensitive government information and material. The Tier 3(T3) personnel security investigation process will initiated by the contractor Facility Security Officer (FSO) through the Defense Counterintelligence and Security Agency (DCSA)/National Background Investigation Bureau. The adjudication results of the Tier 3(T3) personnel security investigation for Secret security clearance eligibility will be determined by the DoD Consolidated Adjudication Service (CAS) and will be annotated in the DoD’s official system of record for Personnel Security (PERSEC). Secret security clearance shall be required for security officers through the applicable DOD entities.

Interim security clearance will be granted by DOD CAS or HQDA G-1 CSSC.

2.4.1.1. Security personnel shall undergo drug abuse testing as specified in AR 600-85 and Paragraph 2-4 of AR 190-56. Drug abuse testing shall occur on 20 percent of the security personnel per year, with no less than one test per month. Testing results shall be forwarded to the Government Security Officer for review as soon as the results are received. 100% of Contract Security Guards will be drug tested at the time of hiring and at least 20% of Contract Security Guards will be drug tested annually thereafter.

Drug Test results will be supplied to Government Security via DA Form 7708 as soon as the results are received (A06-6A). All Contractors and Security personnel shall comply with DODI 6130.06 prohibition listed dietary supplements substances use.

2.4.1.2. Security personnel shall annually undergo a medical examination by a competent medical authority to determine physical and mental fitness and results shall be documented by the Contractor. 100% of security personnel will undergo a medical examination at the time of hire and annually thereafter. Annual review of Medical Records will be documented on DA Form 7708. (A06-07A).

2.4.1.3. Reliability standards shall also include, but are not limited to, criminal misconduct, financial stability, alcohol or drug abuse (to include the use of prohibited dietary supplements substances as identified on the DOD prohibited supplement list ), sexual misconduct, loyalty to the US Government, foreign interests and job-related violations. The Individual Reliability Program is addressed in AR 190-56 chapter

3. Specific reliability factors are listed in AR 380-67 paragraph 2-4 and Appendix I discusses the reliability factors in depth, to include the concern, conditions that could raise a security concern and may be disqualifying, and conditions that could mitigate security concerns.

2.4.1.4. The Contractor shall annually ensure certification that all security personnel satisfactorily meet these individual reliability standards. Personnel that fail to meet these standards, upon Contractor’s discovery of, shall be immediately relieved of security duties.

2.4.1.5. The Contractor shall annually certify that all security personnel meet the physical ability testing (PAT) requirements of AR 190-56 Appendix D. Specifically, when the Contractor hires new security guards, the initial testing requirement shall be met prior to assignment to a security guard position. If a currently assigned security guard fails the record PAT, he/she is required to pass the retest within 90 days.

However, security guards will be allowed to work during such time. If the security guard fails the second PAT, they shall be prohibited from performing as a security guard on the contract.

2.5. BACKGROUND INVESTIGATION REQUIREMENT FOR ALL CONTRACTOR

EMPLOYEES

2.5.1. Security for arms, ammunition and explosives (AA&E) in production shall be in accordance with DOD 5100.76-M enclosure 9 and AR 190-11 Appendixes G and H.

Security for arms, ammunition and explosives in storage shall comply with the standards found in AR 190-11 and any current security exceptions or waivers. The level of physical security shall be commensurate with the category of the AA&E protected. When applicable, the Contractor shall use intrusion detection systems.

2.5.1.1. All Contractor personnel who require access to AA&E but do not require a government security clearance will have a Tier 3 (T3) background investigation initiated by the contractor Facility Security Officer (FSO) through the Defense Counterintelligence and Security Agency (DCSA)/National Background Investigation Bureau. The Tier 3 for AA&E suitability results of the Tier 3 (T3) investigation will be conducted by HQDA G-1 CSSC criteria identical to the Federal employee suitability standards. Contractors may appeal any adverse suitability decision, security clearance eligibility adjudicative, or appeals/due process decisions, this process has been centralized with either the DOD CAS or HQDA G-1 CSSC.

2.5.1.2. Personnel Reliability Screening and Evaluation Form, DA Form 7708 checks, shall be performed on all personnel with primary duties of AA&E production, manufacturing, renovation and demilitarization operations, or security operations prior to assuming duties and annually thereafter. The local civilian law enforcement record check of an individual’s will be completed within 90 days of the DA Form 7708. After initial review, evaluation will be conducted every three years of DA 7708, per AR 190-11 and AR 190-13. (A06-09).

2.5.1.3. The Contractor shall retain all files and documents to show proof of favorable personnel security investigations and DA Form 7708 screenings. Security files and DA Form 7708 screenings shall be reviewed by the RFAAP Security Manager when requested to support inspections and investigations.

2.5.1.4. The Contractor shall comply with AR 190-11 chapter 2 to ensure the trustworthiness and reliability of personnel involved in the transport of AA&E or personnel given unaccompanied access to AA&E storage facilities, to include individuals issuing/receiving security keys. The Contractor shall document and maintain the results of this procedure.

2.6. ACCESS CONTROL (INCLUDING FOREIGN VISITORS) AND BADGING

2.6.1. The Contractor shall establish, maintain, and document an ingress/egress system for personnel, vehicles and shipments at RFAAP. Contractor will adhere to AR 190-13 chapter 8, for implementation of access control and vetting of visitors to RFAAP through the National Crime Information Center-Interstate Identification Index (NCIC-III).

The Contractor shall establish installation access controls for vehicles, personnel, and property following the guidelines of AR 190-13 and AR 190-45. The Contractor shall establish access controls for vehicles, personnel, and property at all Government AA&E areas IAW AR 190-11. The Contractor shall control access by 1) identifying vehicles, personnel, and material; 2) determining the eligibility of vehicles, personnel and material to pass onto RFAAP; 3) inspecting vehicles, personnel and material, as appropriate; 4) controlling and monitoring vehicles, personnel and material; 5) prevent unauthorized exit of vehicles, personnel and material and 6) establishment of a visitor control program. The Contractor shall secure all access control points when not staffed.

Access Control Plan will be updated and delivered to the government annually. (A06- 05).

2.6.1.1. The contractor shall establish security at ACP’s and patrols to meet local threats and mission requirements. Patrols to areas storing AA&E shall follow the time limits prescribed in AR 190-11. Other patrol requirements are defined in AR 190-51, AR 190-13, AMC Supplements thereto and physical security waivers and exceptions. The contractor shall outline these ACP’s and patrols in the PSP. Any changes to contractor’s ACP or patrol configuration shall be approved by the ACO; if the changes affect the PSP, they shall be submitted to the PCO for approval. The contractor shall staff the security force to meet the manning requirements of all static ACP’s, mobile patrols and supporting ACP’s, during FPCONs (Force Protection Condition) NORMAL/ALPHA/BRAVO (higher FPCONs may require additional personnel), utilizing an ACP manning factor of five (5) officers required for every ACP position that requires continuous and uninterrupted staffing. RFAAP’s ACP’s, patrols and other duty assignments shall be made available to the contractor after award. Any changes to contractor’s ACP or patrol configuration shall be approved by the ACO; if the changes affect the PSP, they shall be submitted to the PCO for approval. (A06-10).

2.6.1.2. CCTV coverage is required on all the installation's access control points, to include those which are limited in use or used primarily for emergency evacuation (with the exception of Gate 20). The CCTV cameras shall be digitally recorded in a central database and the images (motion detection footage) shall be stored for no less than 90 days at a time. Coverage must include all lanes of ingress and egress into the facility with a minimum of two (2) fixed mount CCTV cameras covering the Main ACP (canopy).

2.6.1.3. The Contractor shall use an identification badge or card system for individual access control that is approved by the Commander and the RFAAP Security Manager. The contractor shall use the Automated Installation Entry (AIE) system when installed. Once the AIE system is installed, the contractor will be responsible for using the AIE system to verify the authenticity of all security credentials presented for access to the installation. The contractor is responsible for registering all RFAAP employees, visitors and contractors in the AIE system and appropriately entering accurate data in all of the data collection fields within the AIE system. The contractor shall use the AIE system to issue RFAAP site specific badges to employees, visitors, contractors and military personnel. The contractor shall immediately report malfunctions and/or systems failure of the AIE system to the government security officer. Additionally, the Contractor shall ensure the following:

2.6.1.3.1. Strict accountability, storage and handling of these badges/cards through their life cycle IAW AR 190-13 chapter 5 and AR 600-8-14 paragraphs 19.11 – 19.16.

2.6.1.3.2. Storage and handling of all badging or card components in such a manner to preclude access by unauthorized individuals.

2.6.1.3.3. Prompt access invalidation of lost or stolen cards/badges and a means to quickly communicate these invalidated cards/badges to security personnel at points of ingress/egress.

2.6.1.3.4. Prompt denial of access for individuals who have lost access privileges. The Contractor shall promptly (by close of business the next business day) notify the RFAAP Security Manager when a Contractor employee is terminated from employment, resigns in lieu of termination, or is suspended from work on the installation.

2.6.1.4. If an automated card/badge reading system utilizing mechanical, electronic or other technological means for access controls is proposed for use by the Contractor. The Contractor shall submit a request to use the system to the RFAAP Security Manager for evaluation and approval by the installation Commander.

Subsequent approvals will be requested by the Army Staff through the appropriate headquarters’ to the US Army Office of the Provost Marshal General (OPMG) prior to implementation IAW AR 190-13 Chapter 8.

2.6.1.5 For Contractors requiring a Common Access Card (CAC). Before CAC issuance, the Contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (Tier 3) or an equivalent or higher investigation in accordance with Army Directive 2014-05, The Contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of six (6) months or more. At the discretion of the sponsoring activity, an initial CAC may be issued on a favorable review of the FBI fingerprint check and a successfully scheduled Tier 3 at the Office of Personal Management. (A06-08)

2.6.1.6. The badge system shall include one type or style of permanent badge for Contractors (to include the Contractor) assigned full-time at RFAAP and one type or style of permanent badge for United States Government personnel assigned full-time at RFAAP. The Contractor shall issue two types of non-permanent badges to personnel entering the installation. The first non-permanent badge type is a temporary badge issued to RFAAP employees who have lost or forgotten their permanent badge to access the installation. Temporary badges shall not be issued for any period of time in excess of 72 hours. The second type of non-permanent badge is a visitor badge, which shall be issued to all visitors to RFAAP. For the purposes of this PWS, a visitor is defined as an individual who is not permanently employed on a full-time basis at RFAAP. Visitor badges may be issued up to 5 business days at a time.

2.6.1.7. AIE Training requirements are met:

2.6.1.7.1. Operator Training – The contractor shall have all current employees that will operate the handheld credential readers attend the initial onsite operator training provided by the AIE Installation team. It will be conducted on site and last approximately eight (8) hours. All other (i.e., future) personnel operating the handheld credential readers shall receive internal training from the operating contractor utilizing the government furnished materials from the AIE Installation team.

2.6.1.7.2. Registrar Training – The contractor shall have all current Badge office employees attend the initial onsite registrar training provided by the AIE Installation team. It will be conducted on site and last approximately eight (8) hours. All other (i.e., future) badge office personnel shall receive internal training from the operating contractor utilizing the government furnished materials from the AIE Installation team.

2.6.1.7.3. Maintainer Training – The contractor shall have all current employees that will concentrate on basic troubleshooting and help-desk procedures attend the initial onsite maintainer training provided by the AIE Installation team. It will be conducted on site and last approximately eight (8) hours. All other (i.e., future) help desk and troubleshooting personnel shall receive internal training from the operating contractor utilizing the government furnished materials from the AIE Installation team.

2.6.1.7.4. Administrative Training – The contractor shall have all current employees that will focus on administering user accounts attend the initial onsite administrative training provided by the AIE Installation team. It will be conducted on site and last approximately eight (8) hours. All other (i.e., future) administrative personnel shall receive internal training from the operating contractor utilizing the government furnished materials from the AIE Installation team.

2.6.1.7.5. If an automated card/badge reading system utilizing mechanical, electronic or other technological means for access controls is proposed for use by the contractor, the contractor shall receive approval from the U.S. Army Office of the Provost Marshal General (OPMG), through the AMC Office of Security, Force Protection and Law Enforcement (OSFPLE), prior to implementation IAW AR 190-13

2.6.1.7.6. The badge system shall include one type or style of permanent badge for contractors (to include the operating contractor) assigned full-time at RFAAP and one type or style of permanent badge for United States Government personnel assigned full-time at RFAAP. The contractor shall issue three types of non-permanent badges to personnel entering the installation. The first non-permanent badge type is a temporary badge issued to RFAAP employees who have lost or forgotten their permanent badge to access the installation. Temporary badges shall not be issued for any period of time in excess of 72 hours. The second type of non-permanent badge is a visitor badge, which shall be issued to all visitors to RFAAP. For the purposes of this PWS, a visitor is defined as an individual who is not permanently employed on a fulltime basis at RFAAP. Visitor badges may be issued up to 30 days at a time. The third type of badge to be issued is the contractor badge. For the purpose of this PWS, a contractor is defined as an individual who works for a private corporations or industry, is not employed by the operating contractor on the installation and performs some type of service or project work on the installation. Non-permanent (i.e., temporary and visitor) badges may be removed from the installation premises after issuance but must be returned to the RFAAP badge office upon their expiration

2.6.1.7.7. The Contractor shall provide briefings for its employees and its subcontractors on the security requirements for accessing and working on the installation. The Contractor is responsible for producing an informational video presentation which shall be viewed by all visitors to RFAAP. The video shall address safety, security, and Environmental Management System requirements for visitors when they are on the installation. The Contractor is also responsible for ensuring that the informational video contains current and relevant information.

Semi-Annual review of Video. (A06-11).

2.6.1.7.8. The Contractor shall require all visitors to sign the 'Conditions of Entry' on the applicable RFAAP Form. The Contractor shall keep these signed forms on file for 90 days from the date of signature

2.6.1.7.9. The contractor shall notify the RFAAP Commander, ACO and RFAAP Government Security Officer of any foreign visits to RFAAP. Notifications shall be completed 10 days in advance of scheduled visit dates. The contractor shall document the visit, the information related to the visit and provide a written afteraction report to the RFAAP Government Security Officer. Foreign nationals visiting RFAAP (either sponsored by government or contractor invitation) shall be escorted at all times during their visit. For the purposes of this PWS, a foreign national is defined is an individual who is not a citizen of the United States of America. (A06-12).

2.7. VEHICLE REGISTRATION

2.7.1. Contractor will adhere to AR 190-5 for installation motor vehicle traffic policy, and for registration of POVs authorized access into the installation.

2.7.1.1. The Contractor shall ensure privately-owned vehicle (POV) operators meet the following requirements:

2.7.1.1.1. Possess a valid state driver's license.

2.7.1.1.2. Possess a certificate of state registration as required by the state in which the vehicle is registered.

2.7.1.1.3. Comply with the minimum requirements of the automobile insurance laws or regulations of the state where the vehicle is registered.

2.7.1.1.4. Satisfactory completion of safety and mechanical vehicle inspection when required by the state or jurisdiction in which the vehicle is registered.

Safety inspections shall meet minimum standards established by the state in which the vehicle is registered.

2.7.2. Visitors shall be vetted via NCIC-III and registered using a temporary vehicle registration and a temporary vehicle pass as required by the installation. The Contractor shall verify that visitors meet the following requirements:

2.7.2.1. Possess a valid state driver's license.

2.7.2.2. Possess a certificate of state registration as required by the state in which the vehicle is registered. The rental car company agreement will suffice as proof of state registration for a rental car.

2.7.2.3. Comply with the minimum requirements of the automobile insurance laws or regulations of the state where the installation is located. A copy of the rental car contract is adequate to meet the requirement.

2.7.2.4. All individuals accessing RFAAP must be favorably vetted prior to entry in accordance with installation policy.

2.7.2.5. Visitors who do not pass the NCIC-III screening process will be denied entry to the facility. If a visitor is found to have an outstanding arrest warrant, Contractor will immediately notify a DACP Officer or local law enforcement, and will use its best efforts within the authorizations of law and legal authority to detain the visitor until arrival of law enforcement.

2.8. PHYSICAL SECURITY (INCLUDING POSTS AND PATROLS)

2.8.1. Security for AA&E shall be IAW AR 190-11 and AR 190-51 Appendix D, and any current security exceptions or waivers. The level of physical security shall be commensurate with the category of the AA&E protected.

2.8.1.1. The Commander will designate restricted areas on the installation and provide a copy of that designation to the Contractor. The Contractor shall post these areas with signs as specified in AR 190-13 chapter 6 and AR 190-11 paragraph 4-15.

The Contractor shall maintain existing restricted area signs to the standards outlined in these regulations. New signs shall be posted as soon as possible, but signage shall be placed no later than 60 days after receipt of restricted area designation by the Commander.

2.8.1.2. The Contractor shall maintain a 12' clear zone on the outside of the installation perimeter fence along with a 30' clear zone in the inside of the installation perimeter fence. This clear zone shall be free of vegetation exceeding 8" in height and shall be free of obstacles and topographical features, when feasible. Execution of vegetation control will be IAW PWS 7A.

2.8.1.3. The Contractor shall establish a system to receive, secure, and account for all security interest keys used at RFAAP. This system shall conform to the requirements of AR 190-11 chapters 3 and 5 for keys used to secure AA&E and AR 190-51 Appendix D for other Army property. The Contractor shall not allow removal of keys for locks used to secure AA&E from the installation. When not in use, keys used to secure AA&E shall be stored in such a manner to preclude access by unauthorized individuals. A security accountability, inventory, and receipt system shall be used to monitor and track the issuance of general purpose office keys and locks protecting Federal Government property assets under AR 190-51 chapter D. Assets include, but are not limited to, information technology (IT) equipment, file cabinets, diagnostic and calibration equipment, tools, gasoline and petroleum products, or access to special information areas that might contain sensitive, medical information files, or Government proprietary information. The Contractor's security forces shall respond to all requested gate openings and calls for service within 30 minutes of the request.

2.8.2. The Contractor shall establish and monitor a security seal program to ensure strict accountability of the seal from time of receipt at RFAAP to the time of destruction.

The Contractor shall maintain a security seal system following the guidance of AR 190- 51 Appendix D and AR 190-11 paragraph 7-1.

2.8.3. The Contractor shall establish security posts and patrols to meet local threats and mission requirements. Patrols to areas storing AA&E shall follow the time limits prescribed in AR 190-11 paragraph 5-2. Other patrol requirements are defined in AR 190-13 chapter 10 and physical security waivers and exceptions. The Contractor shall outline these posts and patrols in the PSP. Any changes to Contractor post or patrol configurations shall be approved by the RFAAP Security Manager and RFAAP Commander. The Contractor shall staff the security force with full-time employees and no more than 20 total part time officers to meet the manning requirements of all static posts, mobile patrols and supporting posts, during FPCONs (Force Protection Condition) NORMAL/ALPHA/BRAVO/CHARLIE/DELTA (utilizing a post manning factor of five (5) officers required for every post that requires continuous and uninterrupted staffing). (A06-10)

2.9. SECURITY DISPATCHING OPERATIONS AND COMMUNICATIONS

2.9.1 The Contractor is responsible for providing security force personnel a primary means of communication. The communication systems for emergency response and emergency coordination efforts shall be provided and extended to operational coverage in a primary and alternate Emergency Operations Center (EOC) on RFAAP. The 24/7 Emergency Operations Center, when activated by specific need and under the authority of the Commander, shall be pre-planned and pre-positioned with primary communication networks and equipment for a sustained or short-term incident response. Secondary redundant systems shall include an analog/digital landline telephone or cell phone system. The Contractor is required to staff and maintain a single dispatch center for security, fire and emergency medical services (EMS). In case of fire or medical emergency, the Contractor shall ensure emergency personnel are notified and direct/escort emergency response personnel and equipment to the location of the fire or injury.

2.9.2 The Contractor shall utilize a basic computer aided dispatch program to record and track the security officers and fire department's daily activities. The security force dispatcher is responsible for dispatching all of the installation's security forces, fire department and EMS personnel, as well as monitoring the installation's CCTV cameras and IDS alarm systems. The Contractor is responsible for installing a fixed mount duress alarm at the dispatch center (currently not installed). The Contractor shall develop an emergency notification matrix 30 days prior to operational control of the facility for use by the dispatcher for notification to the RFAAP Commander and RFAAP Government Security Officer of events as they occur on the installation. Develop an emergency notification matrix 30 days prior to operational control of the facility. (A06- 13).

2.10 SECURITY OPERATIONS AND INCIDENT NOTIFICATION

2.10.1 The Contractor shall maintain records IAW AR 190-45 paragraph 7-15 for running a security operation and reporting serious incidents IAW AR 190-45 paragraphs 8-2, 8-3, and 8-6 to appropriate Army Staff personnel. If a significant incident meets reporting requirements of AR 190-45, the Contractor shall assist the Army Staff in preparation of a Serious Incident Report (A06-14).

2.10.2 The contractor shall notify the Department of Army Civilian Police (DACP) RFAAP Commander and the RFAAP Government Security Officer immediately (within 15 minutes) of all traffic accident on the installation The contractor shall provide notification immediately to the Department of Army Civilian Police (DACP), the RFAAP Commander and the RFAAP Government Security Officer if traffic accident involves death/ and or great bodily injury. The contractor shall record traffic accidents by location and provide this data to the ACO on an annual basis. (A06-14).

2.10.3 A number of events or situations (e.g., accidents, fires, explosions, injuries, AA&E losses) require immediate telephonic notification to specific parties. The contractor shall be responsible for such notifications IAW a published notification roster, which the contractor shall develop, maintain and update, to be approved by the RFAAP Commander. Written reports from these incidents shall be provided to the Department of Army Civilian Police (DACP), the RFAAP Commander and the RFAAP Government Security Officer NLT 1000 hours the next business day. The contractor shall provide follow-up oral and written information relating to such threats to the RFAAP Commander or ACO. The contractor shall inform the DACP’s, the RFAAP Commander and the RFAAP Government Security Officer in the event that an employee poses a threat to the installation, the government staff and/or fellow contractor employees. Such reports, however, shall also be delivered to the RFAAP Commander, Department of Army Civilian Police (DACP) and the RFAAP Government Security Officer NLT 1000 hours the next business day. The contractor shall not withhold threat information from the government staff. (A06-15).

2.10.3.1 In the event of the Contractor Security Manager learning of any criminal offense or alleged criminal offense (any accusation not yet established or corroborated as having occurred or being criminal) conducted on the installation by the Contractor’s employees, or onsite sub-contractors, vendors or visitors, the Contractor shall immediately upon learning of the same, notify the RFAAP Commander, RFAAP Security Manager, and Department of Army Civilian Police (DACP). The Contractor will submit notification verbally without delay to the RFAAP Commander or RFAAP Government Security Officer so a determination can be made by the RFAAP Commander and RFAAP Security Manager as to if the actions warrant a criminal, or human resources investigation. Written report shall be submitted to RFAAP Commander and the RFAAP Government Security Officer NLT 1000 hours the next business day. The contractor shall not withhold information from the government staff concerning such communicated threat scenarios. (A06-16).

2.11. AT, WMD, CBRNE CRITICAL INCIDENT OR EVENT

2.11.1 The Contractor shall develop and maintain plans that, in case of an emergency, the Contractor can take appropriate actions. Those plans shall address preparation for, and recovery from, incidents and shall include Disasters (i.e., Disaster Preparedness Plan), Bomb Threats, Civil Disturbances, WMD/CBRNE and Labor Disturbances. The Contractor shall formalize these plans and include them as annexes/appendices in the DPP IAW AMC-R525-4. The Contractor shall utilize and be prepared to properly deploy all Emergency Management Modernization Program (EMMP) Government-furnished equipment for the containment and recovery from of a WMD and/or CBRNE event. The Contractor shall ensure that its security and emergency response personnel are properly trained in the use of all of the equipment so that the equipment may be deployed immediately upon an emergency. (A06-17)

2.11.2 The contractor shall work with the RFAAP Commander and RFAAP Government Security Officer to develop a Force Protection/ AT Plan IAW AR 525-13, AMC-R 525-4, and the JMC AT Program. The contractor shall increase security measures a1 the direction of the RFAAP Commander or the RFAAP Government Security Officer to meet the standards for each FPCON level. The contractor shall increase and maintain FPCON levels Charlie or Delta within 24 hours of notification. The contractor shall be prepared to transition its security force to 12 hour shifts in the advent of the FPCON increase to Charlie or higher within 24 hours.

The transition plan shall be documented in a force elevation plan, which shall be provided to the ACO for approval 90 days prior to operational control of the facility.

The transition plan should be updated as regulations are updated. (A06-18).

2.11.3 Select Contractor personnel will be an integral part of the RFAAP Protection Working Group (PWG) that will focus on planning, coordinating and executing RFAAP's protection program IAW AR 525-13 chapter 5, AMC-R 525-4, AR 525-27 paragraphs 1- 18 and 1-19, and AR 525-2 chapter 5. The identification, justification and estimation of protection program projects should be discussed at these meetings for incorporation into the installations AT budget submissions to higher headquarters. The Contractor shall ensure that senior leadership from the Contractor's security force, fire department, facilities maintenance, production operations and safety office attend and participate in the RFAAP PWG. The Contractor may make recommendations to the RFAAP Security Manager as to which Contractor personnel should be a part of the PWG, but the decision to appoint Contractor personnel to the working group remains with the RFAAP Security Manager and Commander.

2.11.4 The Contractor shall participate in the RFAAP Anny Staffs full-scale, comprehensive annual AT exercise and prepare and maintain a written record of the Contractor's participation. The Contractor is considered to be the executive agent of the exercise as Contractor personnel carry out the provisions of the RFAAP AT Plan and the PSP. The Contractor shall participate in this exercise with the RFAAP Security Manager, RFAAP Emergency Manager, and federal, state and local entities as co-participants. The purpose of this exercise is to validate the AT Plan and PSP, identify weaknesses and develop corrective actions. The exercise shall be IAW the requirements of AR 525-13 paragraphs 4-9 and 5-24, AMC-R 525-4 Standard 23, and DOD Instruction 0-2000.16 volume 1 paragraph 3-25.