pws_draft_28may19.docx

PERFORMANCE WORK STATEMENT

Maintenance of Electronic Security Systems Directorate of Emergency Services (DES) Fort Hood, Texas As of 15 May 2019

TABLE OF CONTENTS

Part 1 – General 1 Scope

1.1 Background

1.2 NOT USED

1.3 Personnel

1.4 Security Requirements

1.5 Vehicles

1.6 Contract Work Location

1.7 Key Control

1.8 Fraud, Waste, and Abuse

1.9 Environmental and Hazardous Materials Handling

1.10 Fire Protection

1.11 Accident Reporting

1.12 Safety

1.13 Disclosure of Information

1.14 Smoking

1.15 Hours of Operation

1.16 Federal Holidays

1.17 Quality Control

1.18 Quality Assurance/Standards

1.19 Post Award Conference/Periodic Progress Meetings

1.20 Sensitive Compartmented Information Facilities (SCIF) Areas

1.21 Identification of Contractor Employees

1.22 Data Rights

1.23 Phase-In/Phase-Out Period

1.24 OPSEC Awareness for Military Members, DoD Employees and Contractors

1.25 Access to Government Information Systems

1.26 Information assurance (IA)/Information technology (IT) training

1.27 Information assurance (IA)/information technology (IT) certification

1.28 Common Access Cards (CAC)

Part 2 – Definitions and Acronyms

2.1 Definitions

2.2 Acronyms

Part 3 – Government Items and Services

3.1 Incidental Property

3.2 Services.

3.3 Facilities

3.4 Computer Work Station

3.5 Equipment Delivery and Secure Storage

Part 4 – Contractor Furnished Items and Services

4.1 Items

4.2 Services

Part 5 – Specific Tasks

5.1 IDS and ESS Regulatory/Required Installation and Maintenance Criteria

5.2 Electronic Security Systems Patch Management

5.3 IDS (Intrusion Detection System) Preventive/Routine/Scheduled Maintenance, Repair, Replacement, installation and projects

5.4 EECS Preventive/Routine/Scheduled Maintenance, Repair, Replacement, and installation

5.5 CCTV Preventive/Routine/Scheduled Maintenance, Repair, Replacement, and installation

5.6 SLEN Preventive/Routine/Scheduled Maintenance, Repair, Replacement, installation and projects

5.7 Personal Identifier Number (PIN) and EECS Administrative Services Support

5.8 Databases/Repair Records/Reports

5.9 Hazardous material disposal

5.10 Service Calls (Unscheduled)

5.11 NOT USED

5.12 Contingencies

5.13 Project Work

5.14 Contractor Parts, Equipment and Material

5.15 Enterprise Contractor Manpower Reporting Application (eCMRA)

5.16 Deliverables

Part 6 – Applicable Regulations and Manuals

Part 1 – General

1. Scope. This is a Non-Personal Service Contract. The contractor shall provide all necessary personnel, management, equipment, tools, materials, supervision, to perform maintenance, adjustments, installations, surveying, removal, repair, replacement services, projects, system administration, and Cyber Security Information Assurance (IA) for each Electronic Security System (ESS) under this contract at Fort Hood, Texas. The ESS’s covered under the scope of this contract are the Intrusion Detection System (IDS), Closed Circuit Television (CCTV), Electronic Entry Control System (EECS), and the Directorate of Emergency Services Secure Law Enforcement Network (SLEN). The SLEN is also a large scaled system equal in size to the CCTV’s system; however, it has the potential of being downsized or decommissioned during the performance of the contract. The Fort Hood IDS System is the Integrated Commercial Intrusion Detection System (ICIDS-II). There are two separate ICIDS II systems; one for the protection of 600 zones protecting Headquarter buildings, firearm warehouses, document storage buildings, ammunition bunkers, in addition to other type zones. The other ICIDS II system is dedicated to the protection of 20 plus Sensitive compartmented Information Facilities (SCIF). The EECS services 8 facilities and also resides on the larger ICIDS II system utilizing the SAFEnet access control application. The CCTV system has approximately 350 cameras across the installation at various installation access control points and mission essential vulnerable areas. The CCTV system currently resides on the SLEN and are supported with 40 plus digital video recorders. The most recent quantities of the ESS listed above will be found in Attachment 6 (Fielded ESS). The contractor performing the required services shall be a Monitor Dynamics (MD) Certified ICIDS II Service Provider. All Contractor personnel maintaining, servicing, installing, repairing hardware and software of the IDS or EECS shall be certified as an MD trained technician or system administrator depending on services provided for the ICIDS II system. The contractor shall ensure each ESS remains in an operational status and ensure applicable Cyber Security IA measures are applied in accordance with Army Regulations and Department of Defense (DoD) standards provided in Section 6 of the PWS.

The Department of the Army approved commercial IDS system for Fort Hood is ICIDS-II, SAFEnet version 6.2.1.6, service pack 4. There is the potential that a new service pack may be installed with supporting hardware during the period of performance of this contract. The Contractor shall ensure the ICIDS primary and secondary servers are maintained and remain Cyber Security IA compliant, at all times. The maintenance and compliance includes all monitoring, work stations, and EECS enrollment stations associated with ICIDS II. The CCTV is a large scale networked system that is spread out across 33 locations and requires continuous monitoring and maintenance by qualified and certified Contractor personnel.

1.1. Background. Work performed under this contract will be at the Fort Hood Main Cantonment, West Fort Hood, North Fort Hood, and in Fort Hood Housing Areas. The DES security systems also includes Uninterruptable Power Supplies (UPS). The DES Alarm Monitoring Station (AMS) for ICIDS-II is located in building 23020 on the Fort Hood Main Cantonment. The Contractor shall provide personnel possessing the skills, knowledge, and training to satisfactorily perform all services required during the performance of this contract. Contractor personnel maintaining, servicing and installing the IDS and EECS shall be trained and certified on Monitor Dynamics, Inc. (MD) SAFEnet systems. The Contractor personnel shall also possess the skills, knowledge, and training to satisfactorily perform services on each of the other security system provided in this PWS. Maintenance and installation of the IDS will be in accordance with Army Regulation 190-11 (Physical Security of Arms Ammunition, and Explosives), Army Regulation 190-13 (The Army Physical Security Program), and Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities (IC Tech Spec-for ICD/ICS 705). All other systems maintenance and installation will be in accordance with the manufacturer’s specifications and as outlined in PWS Section 5. The Contractor shall have experience with a contract approximately equal in size, type and complexity to the Fort Hood systems and shall possess a working knowledge of all security systems covered under this contract.

1.2. NOT USED

1.3. Personnel. The Contractor shall provide personnel possessing the skills, knowledge, and training to perform the services required by this contract. Contractor personnel performing work under this contract shall remain employees of the Contractor and will not be considered employees of the Government. The Contractor shall not employ any person who is an employee of the United States Government, military and civilian, if such employment would create a conflict of interest. The Contractor shall not employ personnel who do not comply with the policies contained in the Department of Defense (DoD) Joint Ethics Regulations (JER), DoD 5500.7-R. The Contractor shall ensure that there are qualified individuals on site to perform the services on this contract, at all times.

The Contracting Officer may require the Contractor to remove from the job site any employee working under this contract for misconduct, security violations, and found to be under the influence of alcohol, drugs, or other incapacitating agents. Contractor personnel shall be subject to dismissal and removal from the premises when the Contracting Officer determines such actions violate the installation policies and are not in the Government’s best interest. In accordance with Department of Defense (DoD) Joint Ethics Regulation (JER), DoD 5500.07-R and 18 U.S.C. 1382 (1972), the Installation Commander has the authority to bar individuals from the installation. The removal of Contractor personnel from the job site or dismissal from the premises for all offences shall not relieve the Contractor of the requirement to provide sufficient personnel to perform the services as required by this performance work statement.

Contractor personnel shall not wear any part of a currently or previously authorized military uniform while performing contract duties, nor clothing such as exercise suits, shorts, tank tops, or t-shirts. The Contractor shall ensure all Contractor personnel clothing and attire are free of all objectionable messages or phrases. Contractor personnel shall practice high standards of personal hygiene and maintain a clean and neat appearance while on duty on the Ft Hood installation.

1.3.1. Project Manager (PM). The Contractor shall provide a full time Project Manager who shall be responsible for the overall management and oversight of the contract. The PM’s position shall not be an entry level management position The PM shall serve as the Contractor point of contact with the Government and shall have the authority to act or make decisions on behalf of the Contractor on all matters during the performance of the resultant contract. The PM shall be available onsite between the hours of 7:30am through 4:30pm Monday through Friday and available by telephone 24 hours a day, Monday through Sunday. The PM shall respond to Contracting Officer (KO) requests within one hour of notification. The PM shall have experience in supervision and management of systems approximately equal in size, type, and complexity to the Fort Hood installation systems and shall possess a working knowledge and experience with all the security systems covered under this contract.

1.3.1.1. Alternate Project Manager. The Contractor shall designate an alternate who shall be authorized to act on behalf of the Contractor when the Project Manager is not available. The Alternate PM shall have the same experience in supervision and management of systems approximately equal in size, type, and complexity to the Fort Hood installation systems and shall possess working knowledge and experience with all the security systems covered under this contract.

1.3.1.2. The Project Manager or Alternate shall be available on site during normal duty hours, 7:30am through 4:30pm, Monday through Friday (central time). The PM shall respond to Contracting Officer request within one hour of notification (written or verbal) to meet to discuss non-conforming terms and conditions under the contract. The PM or Alternate PM shall be readily available after normal duty hours within 24 hours of notification (written or verbal) from the KO.

1.3.2. System Administration (SA) and Network Administration (NA). The Contractor shall provide services for both System and Network Administration during normal duty hours, 7:30am through 4:30pm (central time), Monday through Friday, to perform administration over each security system under this contract. The SA administration and NA administration services may be required after normal duty hours (refer to PWS section 5). The Contractor shall ensure there are Contractor personnel available to provide SA administration and NA administration after normal duty hours. Overtime is not authorized during the performance of the contract. The Contractor shall ensure the SA Administration and Network Administration positions meet the requirements outlined in AR 25-2 (Army Information Assurance). System and Network Administrators are responsible for overseeing the proper operation of each ESS maintained under the terms of this contract. The SA and NA shall ensure all daily tasks are reviewed, submitted, documented, updated, or otherwise completed as required.

1.3.2.1. Alternate System and Network Administration. The contractor shall designate an alternate as needed to cover periods when the SA and/or NA is not available. The alternate shall hold the same level of certifications as the primary and reported as identified in part 1.3.2.2.

1.3.2.2. System Administrator and Network Administrator Certifications. The Contractor shall ensure that all SA and NA certifications are uploaded to the Army Training & Certification Tracking System (ATCTS). The Contractor shall ensure all SA and NA certifications are released to the Department of Defense (DOD). The process for releasing the SA and NA certifications to DOD are as follows:

Release of Contractor SA and NA certification to DOD: ALL Cyber Security IA workforce personnel must release their certifications at DMDC link for the certification to show up as verified by DMDC in your ATCTS profile.

DMDC Link: https://pki.dmdc.osd.mil/milconnect/protected/portlet/ecorr/

· Select Correspondence/Documentation tab

· Select DoD Workforce Certification

· Select Authorize Certifications tab

· Select provider: follow the steps to register your certs with all different providers. Once all registered they will automatically load up in the ATCTS site.

1.3.2.3. Appointment Orders. The Primary and Alternate SA and NA shall be on Appointment Orders with the DES (within 30 calendar days after start of performance and when personnel change). The Contracting Officer Representative (COR) will provide the following forms to the Contractor for completion:

· DD Form 2875 (System Authorization Access Request (SAAR)).

· Fort Hood User Agreement.

· Fort Hood Privileged-Level Access Agreement Acceptable Use Policy (AUP).

The required Contractor personnel shall submit the completed forms through the Contracting Officer Representative (COR) to the DES Information Management Specialist with the Support Services Branch for approval before being placed on orders.

1.3.3. Maintenance and Repair Technicians. Contractor personnel performing maintenance, repair, and system administration services on the ICIDS II, MD SAFEnet 6.2 service pack 4 or latest version system shall be a MD certified trained technicians, system administration and system integrator. Level of certification shall commensurate with each Contractor personnel role and responsibility to perform maintenance, repair, and installation during the performance of the contract. The Contractor shall schedule Maintenance during normal duty hours, 7:30am through 4:30pm (Central Time), Monday through Friday. Technicians, or SA’s system administrators performing maintenance, repair or installation on SCIF zones or any components of a SCIF shall be required to have a Secret Security Clearance. The Contractor shall and must ensure all other technicians servicing other ESS components and zones other than a SCIF are granted and possess a minimum Confidential Security Clearance, in accordance with (IAW) AR 380–67 (Personnel Security Program). In accordance with Army Regulation 190-11(Physical Security of Arms, Ammunition, and Explosive); a check of the National Crime Information Center (NCIC) for installers and maintainers of unclassified IDSs is a command decision. The decision will be based on the sensitivity of the area to be protected and the need for quality control over personnel having access. The Government may conduct annual checks to ensure fitness and suitability of all contract employees.

1.3.4. Personal Identification Number (PIN) and EECS Administration Services Support. The Contractor shall provide PIN and badging services Monday through Friday, 7:30 am through 4:30 pm. The PIN and EECS Administration Services is a customer service requirement that will require excellent writing and communication skills. The Contractor shall ensure that Contractor personnel are fluent in English with excellent writing and communication skill. The Contractor shall ensure Contractor personnel are MD trained and certified (at start of contract and when personnel change) to manage SAFEnet IDS accounts, all badging functions within the SAFEnet application which includes designing and creating new badges. The Contractor personnel must be able to generate standard and customized reports, database querying, and log review/analysis. The Contractor personnel must possess a minimum Confidential Security Clearance that is IAW AR 380–67 (Personnel Security Program).

1.3.5. Certifications. The Contractor shall submit copies of all required training and certifications for all Contractor personnel to the Contracting Officer no later than 3 calendar days after the start of contract performance. The Contractor shall provide copies of certifications for newly-hired Contractor personnel to the Contracting Officer not later than 24 hours after the initial submittal of this data, and prior to the new employee performing any services on contract.

1.4. Security Requirements. Contractor personnel or any representative of the Contractor entering the Fort Hood, Texas installation shall adhere to all security regulations and shall be subject to security checks (random and scheduled). The Contractor shall maintain security vigilance and awareness over all aspects of services to be performed under this contract. An aspect of work includes the protection of material in transit or storage, during any repair or replacement or at any other time prior to being placed on a “live” system. Protection means, unintended/unauthorized disclosure, or exposure of any drawing, specification, or program language associated with a component, sub-system, system, software, or hardware that would potentially pose a security threat to the system or the protected asset.

1.4.1 Search and Seizure. Contractor personnel and Contractor property shall be subject to search and seizure upon entering the confines of Fort Hood, while on Fort Hood, and upon leaving the confines of Fort Hood in accordance with AR 190-13 (The Army Physical Security Program).

1.4.2. SECRET Facility Clearance Level (FCL). The Contractor shall possess a Secret Facility Clearance Level upon contract award. The Contractor shall follow the Facility Clearance Level procedures outlined in Technical Exhibit (TE) B (DD Form 254).

1.4.3. Personnel Security Clearances. All Contractor personnel performing services under this contract shall possess a minimum-security clearance of SECRET or CONFIDENTIAL, granted in accordance with AR 380-67 (Personnel Security Program) prior to performance.

1.4.4. Installation Access/Common Access Card (CAC). The Contractor shall be responsible for ensuring all Contractor personnel authorized to perform work under this contract obtain installation access as required by Army Regulation 190-13 (The Army Physical Security Program, Chapter 8 Access control 8-2.b).”Non-CAC holder visitors, contractors, and vendors must have a DOD component-validated need for one-time, intermittent, or routine physical access to installations. All other applicable of the AR apply.

1.4.5. Identification Badges. Contract personnel and Contractor representatives, while on duty shall wear Contractor provided identification badges. The badge shall display at a minimum: company name, employee name, employee photo, contract title, contract number, and contract expiration date for the current option period of performance. The badge shall be worn and visibly displayed outside of all clothing in the upper body, chest area.

1.5.1. Vehicle Operation. Contractor personnel operating motor vehicles on the installation shall have a valid state operator’s license for the category of vehicle being operated and shall comply with FH Regulation. 190-5 (Fort Hood Traffic Code), regarding motor vehicle use on the installation.

1.5.2. Contractor Vehicle Identification. Contractor owned or Contractor privately owned vehicles used in the performance of services under this contract on the Fort Hood, TX installation shall be marked as commercial Contractor vehicles with the Contractor’s company name in 3” block letters or a company logo of a color that contrasts with its background on both sides of the vehicle. Contractor personnel operating multiple Contractor-owned vehicles on the installation shall be required to place identifying numbers on the front and rear bumpers of the vehicles.

1.6. Contract Work Location. The Contractor shall perform contract work at Fort Hood, Texas which consists of the Main Cantonment, West Fort Hood, North Fort Hood, and in Fort Hood housing areas. Fort Hood is located approximately 60 miles north of Austin and 50 miles south of Waco, Texas. The main cantonment area is approximately 20 miles West of Interstate Highway 35 at Belton, Texas, and adjacent to Killeen, Texas. West Fort Hood is south of and immediately adjacent to the main cantonment and North Fort Hood is approximately 25 miles north of the main cantonment. A map of the three cantonment areas, if requested, will be furnished to the Contractor after contract award.

1.7. Key Control. The Contractor shall be responsible for keys provided to the contactor by the Government. All keys provided to the Contractor shall neither be lost, misplaced, or duplicated by Contractor personnel, nor used by unauthorized Contractor personnel. The Contractor shall develop and implement procedures to ensure that keys issued to the Contractor by the Government are safeguarded at all times. The Contractor shall document procedures implemented in the physical security plan (plan due 5 calendar days after contract award). The Contractor's key control program will be subject to inspection, by the Fort Hood Physical Security Branch for compliance to existing regulations. The Fort Hood DES Key Control Officer will advise (if necessary train) the Contractor in maintaining a successful Key Control Program. The Contractor shall sign for all keys issued and needed to accomplish the services to be performed under the contract. The Contracting Officer will be responsible for ensuring the keys are provided to the Contractor and the Contractor signs for all keys required under this contract.

1.7.1. The Contractor shall immediately report to the Physical Security Key Control Officer, Physical Security Branch Supervisor, Contracting Officer any occurrences of lost, duplicated, or misplaced keys issued by the Government. The Contractor shall also provide a verbal notification within 3 hours followed by a written report to the Contracting Officer within 24 hours of any occurrences of lost or duplicated keys issued by the Government. The written report shall provide complete details relating to loss, duplication, or misplaced keys in addition to the following information:

· Facility and door or item opened

· Number of key

· Person to whom the key was assigned

· Date key was discovered to be missing

1.7.2. The Contractor shall prohibit the use of keys issued by the Government to any persons other than the Contractor personnel. Opening of locked areas by Contractor personnel to permit entrance of persons other than Contractor employees engaged in the performance of contract work requirements in those areas is strictly prohibited. Failure to comply with this guidance may result in the removal of the employee(s) from the job site or removal from the contract and the Fort Hood, TX installation. The removal of the employee(s) may be at the KO’s discretion. The Contractor shall obtain duplicate keys from the Government only through written approval of the Contracting Officer.

1.8. Fraud, Waste, and Abuse. The Contractor shall maintain proper conduct and good discipline within its occupied work area(s). Contractor personnel shall be encouraged to be alert to and report suspected situations of fraud, waste, and abuse, or other intentionally dishonest conduct against the Government observed during the performance of this contract.

1.9. Environmental and Hazardous Materials Handling. Contractor personnel will properly dispose of batteries and all other material deemed hazardous in accordance with Fort Hood Regulation 200-1 (Environmental and Natural Resources) and Army Regulation 200-1, Chapter 9 (Environmental Protection and Enhancement). The Contractor shall properly dispose of recyclable materials IAW all Federal and Fort Hood regulations. The Contractor shall be responsible for providing acceptable storage containers for authorized hazardous material that will be maintained by the Contractor during the course of this contract. The Contractor shall store all material deemed hazardous in appropriate locations and containers.

1.10. Fire Protection. The Contractor shall comply with FH 420-1 (Fire Regulation), for fire protection and fire prevention.

1.11. Accident Reporting. The Contractor shall maintain an accurate record of all accidents and/or damage to Government property, supplies, and equipment. The Contractor shall report accidents in accordance with the requirements indicated in AR 385-10 (Army Safety Program).

1.12. Safety. The Contractor shall safeguard and maintain all Government property as well as provide for the safety and well-being of Contractor personnel employed in the performance of this contract. The Contractor shall comply with the provisions of AR 385-10 (Army Safety Program), to include the National Fire Protection Association (NFPA) 70E, Electrical Safety in the Workplace. The Contractor shall develop and implement a safety program for employees performing work under this contract. The Contractor shall submit the Safety Plan to the Contracting Officer 5 calendar days after contract award. Revisions shall be submitted 10 calendar days prior to the effective date of the change. The Contractor shall comply with the Occupational Safety and Health Act (OSHA) standards. Contractor personnel shall wear safety items required by OSHA during the performance of tasks requiring protective equipment and clothing. The Contractor shall ensure all Contractor are equipped with the proper protective equipment and clothing. The Contractor shall provide the proper safety equipment and clothing at no cost to the Government.

1.13. Disclosure of Information. Performance under this contract may require the Contractor to access data and information proprietary to Government agency(s), another Government Contractor, or of such nature that its dissemination or use other than as specified in this performance work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge nor release data nor information developed or obtained under the performance of this contract, except as required by Government-authorized personnel with a need to know, or upon written approval of the Contracting Officer. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in the performance of this contract.

1.13.1. Disclosure of information regarding operations and services of the activity to persons not entitled to receive it, or failure to safeguard any classified information that may come to the Contractor (or any persons under the Contractor’s control) in connection with work under this contract, may subject the Contractor, Contractor's agent, or employees to criminal liability under Title 18, Sections 793 and 798 of the United States Code (U.S.C.). Neither the Contractor nor the Contractor's employees shall disclose or cause to be disseminated, any information concerning the operations of the activity, which could result in, or increase the likelihood of, the possibility of a breach of the activities’ security, or interrupt the continuity of its operation.

1.13.2. The Contractor shall direct all inquiries, comments, or complaints arising from matters observed, experienced, identified or learned as a result of, or associated with the performance of this contract, the resolution of which may require the dissemination of official information.

1.13.3. Inquiries received by the Contractor for work performed under this contract shall be referred to the Government for evaluation under the Freedom of Information Act of 1975, Public Law 93-502, 5 U.S.C. Section 552. The determination of whether records will be released will remain with the Government. The Contractor shall be responsible for search and submission of records upon request by the Government under this contract.

1.13.4. The Contractor shall not release any information (including photographs, files, public announcements, statements, denials, electronic mail, software, or confirmations) on any part of the subject matter of this contract or any phase of any program hereunder without the prior written approval of the Contracting Officer. The Contractor shall not release information regarding individuals without prior authorization of the Contracting Officer. All documentation showing individuals’ names or other personal information will be controlled and protected. The provisions of the Privacy Act of 1974, Public Law 93-579, 5 U.S.C., Section 552a, will apply.

1.14. Smoking. The Contractor shall comply with AR 600-63 (Army Health Promotion, Chapter 7-3) policy for controlling tobacco use which establishes uniform policies governing smoking within Department of the Army facilities.

1.15. Hours of Operation. The Contractor shall perform the required services stated below, except for Federal Holidays, installation closures, and unscheduled maintenance.

The Contractor shall at all times maintain an adequate work force and ensure there is uninterrupted performance of all tasks defined within this performance work statement. When hiring personnel, the Contractor shall ensure there is stability and continuity of Contractor personnel, essential to the performance of this contract.

1.15.1. Inclement Weather. The Contractor shall follow guidance listed weather the contractor shall follow guidance listed on the Fort Hood Home page http://www.hood.army.mil/ for road conditions, delayed reporting, or base closures, during periods of inclement weather. During periods of delayed reporting and base closures, IDS technicians are mission critical and shall be on standby to respond within 1 hour of notification to ensure everyone’s safety standby may be from their home residence. Note: During normal business hours a response during these conditions does not result in unscheduled service call time or any other additional pay during the performance of this contract.

1.16. Federal Holidays. Contractor performance shall not be required on the Federal holidays listed below unless otherwise notified by the Contracting Officer.

When one of the above designated Federal holidays falls on a Sunday, the following Monday will be observed as a Federal holiday. When a Federal holiday falls on a Saturday, the preceding Friday is observed as the Federal holiday. This list of Federal holidays relates to Government duty days, and is not intended to supplement or otherwise alter the provisions of the Department of Labor Wage Determination guidance regarding paid holidays.

1.17. Quality Control. The Contractor shall establish and implement a thorough Quality Control (QC) Plan that identifies potential and actual problem areas in executing requirements of the contract as specified and results in corrective action throughout the life of the contract. The QC Plan shall be submitted to the Contracting Officer for approval 5 calendar days after contract award and shall be updated thereafter to maintain an effective and efficient quality control program. Control measures and features defining QC activities must be specified and metrics developed to ensure adequate program monitoring. The Government has the right to inspect all services called for by this contract, to the extent practicable, at all times, and places during the term of the contract. The Government will perform these inspections in a manner that will not unduly delay the work. Any changes to the QC Plan shall be submitted to the Contracting Officer a minimum of five working days prior to implementation. Written acceptance or non-acceptance of proposed changes will be provided to the Contractor by the Contracting Officer.

1.18. Quality Assurance/Standards. The Government will ensure the Contractor’s performance under this contract is in accordance with the standards listed in the Attachment 2 (Performance Requirements Summary (PRS)).

1.19. Post Award Conference/Periodic Progress Meetings. The Contractor shall attend any post award conferences/meetings convened by the Contracting Office in accordance with Federal Acquisition Regulation Subpart 42.5. The Contracting Officer, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor’s performance. The Government will prepare and distribute a signed minutes of each meeting to attendees within 3 to 5 business days. Contractor attendance of these meetings shall be at no additional cost to the Government.

1.20. Sensitive Compartmented Information Facilities (SCIF) Areas. SCIFs are designated as controlled and restricted. Entrance requires an agency SCIF badge displayed on the outer garment and signing in. Portable electronic devices are not allowed unless approved by the Cognizant Security Officer or Senior Intelligence Officer. Contractor personnel may require a security escort at all times when working in SCIF facilities. The Contractor shall notify DES/Physical Security when the need for a Government escort is required to enter a SCIF or other restricted area(s).

1.21. Identification of Contractor Employees. All Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. Contractor personnel must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products and that Contractor participation is appropriately disclosed.

1.22. Data Rights. The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights. All records generated in performance of this effort are Government property and subject to inspection upon request.

1.23. Phase-In/Phase-Out Period

1.23.1. Phase-In Period. The Contractor shall establish a Phase-In plan detailing all actions for a smooth transition to assume full responsibility for full performance in all areas of operations. Phase-In Plan shall be submitted with proposal. During the Phase-In period the Contractor shall hire necessary personnel, obtain all required certifications and clearances. The Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date.

1.23.2. Phase-Out Period. Phase-out period shall begin 30 days prior to contract expiration. The Contractor shall establish a Phase-Out plan to affect a smooth and orderly transfer of contract responsibility to successor Contractor. A Phase-Out plan shall be submitted to Contracting Officer for approval not later than 120 calendar days prior to end of the contract period.

1.23.3. AT Level I Training. All Contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable and annually thereafter. The Contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the Contracting Officer, if a COR is not assigned, within five (5) calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: https://Jkodirect.jten.mil

1.24. OPSEC Awareness for Military Members, DoD Employees and Contractors. IAW AR 530‐1, Operations Security, the Contractor and all associated subcontractors shall complete the training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable and annually thereafter. OPSEC Awareness for Military Members, DoD Employees and Contractors is available at http://cdsetrain.dtic.mil/opsec/index.htm

1.25. Access to Government Information Systems. All Contractor personnel with access to a Government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services on the contract, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter IAW AR 380‐67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors).

1.26. Information assurance (IA)/Information technology (IT) training. All Contractor employees and associated subcontractor employees shall complete the DoD IA awareness training before issuance of network access and annually thereafter. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25 -2 within six months of employment.

1.27. Information assurance (IA)/information technology (IT) certification. All contractor employees supporting IA/IT functions shall be appropriately certified upon contract IAW DoD 8570.01‐M, DFARS 252.239‐7001 and AR 25‐2. The baseline certification as stipulated in DoD 8570.01‐M must be completed upon contract award.

1.28. Common Access Cards (CAC). All Contractor employees requiring computer access will be required to obtain a CAC through the Trusted Associate Sponsorship System (TASS). All Contractor employees requiring a CAC must have at least a National Agency Check with Inquiry (NACI) investigation submitted through the Office of Personnel Management. This is a requirement for all Contractors to receive a CAC through the TASS and to have access to the any Department of the Army Local Area Network (LAN). Industrial/Company background investigations are unacceptable to receive a CAC or to have access to the LAN.

Part 2 – Definitions and Acronyms

2. Definitions and Acronyms.

2.1. Definitions.

ACCEPTABLE QUALITY LEVEL (AQL): The maximum percent defective, maximum number of defects per hundred units, or number of defects in the lot that can be considered satisfactory on the average or degree of deviation from perfect performance for such specific contract requirements before the Government will consider contract performance unacceptable. As long as the defective performance does not exceed the AQL, the service will not be rejected by the Government. An AQL does not imply that the Contractor may knowingly perform in an unsatisfactory manner. It implies that the Government recognizes that defective performance sometimes happens unintentionally.

ACCESSIBLE: Capable of being reached or inspected without the requirement to remove permanent or fixed construction. Facility can be readily restored to its previous state at the conclusion of activity. As an example, duct work or piping above a plaster ceiling is not accessible if no provisions such as access or inspection openings were provided. Ductwork or piping above a lay-in acoustical ceiling is accessible as the ceiling can readily be restored to its original condition at the conclusion of the work.

ADJUST: Performing the necessary modifications to return the performance of the part to within the stated acceptable range.

ADVISORY DOCUMENT: A directive which the Contractor may use for information and guidance but is not binding for compliance.

AS INDICATED: Shall be defined to mean "as shown on the drawings and described in the specifications.”

BENEFICIAL OCCUPANCY DATE (BOD): The beneficial occupancy date is the date on which beneficial occupancy is granted to the agency requiring use of the facility following construction. By mutual agreement, the occupying agency will allow the construction agency access as required to complete remaining items of construction pursuant to the construction contract.

CATASTROPHIC FAILURE REPORT (CFR): SAFEnet “custom” generated report to identify account failures, typically during multiple account outages. Report identifies by category of asset, location, Major Subordinate Command (MSC) by letter priority. Report is distributed electronically and/or hand delivered to the Contracting officer and COR (or Chief Physical Security if the COR is unavailable). Report is updated periodically as required to report accounts returned or additional account failures.

CHECK: To observe a system or its components for satisfactory operating performance, condition, and accuracy as compared to its designed operating parameters and to repair all deficiencies discovered.

CLEAN: Free from dirt, foreign material, debris, contamination, or impurities; unsoiled, unstained, recently laundered.

CONTINGENCIES: A future event or circumstance that is possible but cannot be predicted with certainty.

CONTRACT ADMINISTRATOR: This is official Government representative delegated authority by the Contracting Officer to administer a contract. This individual, normally working in an appropriate contracting or procurement career field, advises on all contractual matters.

CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. The term includes certain authorized representatives of the contracting officer acting within the limits of their authority as delegated by the Contracting Officer. Note: The only individual who can legally bind the government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR): An individual designated in writing by the Contracting Officer to act as an authorized representative of the Contracting Officer to perform specific contract administrative functions within the scope and limitations as defined by the Contracting Officer. The COR has no authority to change contract requirements.

CONTRACTOR: The Contractor, its employees, its subsidiaries and affiliates, joint ventures involving the Contractor, or any entity which the Contractor may have merged with or any individual or entity that assisted or advised the Contractor in the preparation of a proposal or bid under this solicitation.

CUSTOMER SERVICE ORDER: Service document that identifies repair, materials and a detailed write up of work completed. This service order requires time sensitive submission and Government signature for acceptance of work. It is used to validate work completed for the monthly billing cycle.

DEFECT: Any nonconformance of a unit of service with specified requirements.

DEFICIENCY LIST: List or report of deficiencies noted on an inspection.

ELECTRONIC SECURITY SYSTEMS: Electronic security systems consist of access control systems (card reader systems), closed-circuit television (CCTV) system, intrusion detection systems, transmission media systems, and provision of local or regional dispatch centers (also known as security command centers). Electronic security systems are one part of an overall physical security plan.

FAMILY OF SYSTEMS (FOS): All sub-systems and components used in support of the primary system or a group of systems used in support of a specific program. All parts and components added or renewed are equal to or like in kind in order to maintain the FOS.

FACILITY: Includes everything Government owned within Government boundaries.

GOVERNMENT: All persons employed by the United States Government and involved in ensuring the Contractor's fulfillment of the terms of the contract; the Contracting Officer or his/her designated representative.

ICIDS II: Integrated Commercial Intrusion Detection System; generation II is the DA approved system for Fort Hood.

INCIDENTAL PROPERTY. Property provided to the Contractor and not considered Government Furnished Property or Contractor Acquired Property.

INSPECT: To conduct a close, thorough, and critical appraisal of the systems, equipment, components, and services covered by this contract and to provide detailed written reports on the conditions observed.

INSTALLATION: Installation is to install a fully functional system.

KEY CONTROL: The establishment, implementation and maintenance of systems and records to identify holders of all keys; verify authorization of key cutting orders; cross-reference keys, room numbers, lock/key brand/type; document lost keys; and restrict access to keys and key records.

LEAD TIME: The total time from the receipt of a work requirement by the Contractor until the work must be completed.

MAINTAIN: To furnish necessary resources including repairs to keep systems and components operating in a safe, effective, and reliable manner, to extend its useful life, and to minimize unscheduled downtime.

MANDATORY DOCUMENT: A directive which the Contractor is obliged to follow and must perform the effort strictly in accordance with the method specified in the directive to meet the stated results of the directive.

NETWORTHINESS: The Net worthiness Certification Program is a collaborative effort between several Department of Defense organizations. In the program, applications are assessed to verify and validate several requirements including network security, network impact, compatibility with the infrastructure, communications and information support. The Net worthiness Certification applies to all organizations fielding, using, or managing applications that alter, reside, or require support from any portion of the Army Enterprise Infrastructure (AEI) and managed by the Network Enterprise Command (NEC).

OCCUPIED: A facility is occupied if it contains personnel, equipment, or any other Government-owned/supported property.

OPERATE: To furnish all labor to systematically ensure that systems and equipment are properly performing their intended and designed functions and are functioning safely, effectively, and efficiently for reliable, trouble free service.

OPERATION: To adjust, control or guide a specific thing so as to produce a specific performance or result in accordance with a specific operating procedure.

O&M PACKAGE: Operations & Maintenance Manuals, package is provided by the Contractor responsible for the security contract work on any project, regardless of execution agency and includes as minimum, but not limited to; Contractor Information i.e., name, supervisor, contact information, address or corporate or local office, Warranty Information and contact number, Installed parts list, spare parts list, model/serial number, component cut sheets, quantity, drawings for construction that show all device locations, type of device, complete power and communication path, IP address, routing points, bldg., room and communication switch numbers, switch port. Drawings typically include a legend and to scale dimensions.

OPERATIONAL MAINTENANCE: Routine, recurring maintenance required whenever systems or components are operating to ensure that such operation is safe, efficient, and effective and that the operation will not result in damage or accelerated deterioration of the system or component.

PATCH: A patch is a piece of software designed to update a computer program or its supporting data, to fix or improve it. This includes fixing security vulnerabilities and other bugs, with such patches usually called bugfixes or bug fixes, and improving the usability or performance.

PATCH MANAGEMENT: Is the process of using a strategy and plan of what patches should be applied to which systems at a specified time.

PERFORMANCE INDICATOR: A characteristic of an output of a work process that can be measured.

PERFORMANCE REQUIREMENTS SUMMARY (PRS): Identifies the key service outputs of the contract that will be evaluated by the Government to assure contract performance standards are met by the Contractor.

PERFORMANCE VERIFICATION TEST (PVT): A test and inspection acceptance process for installation or removal and warranty repairs of system components (Hardware or Software). PVT shall be conducted with prime Contractor, subcontractors (as required), Project Manager and COR or their designated representative.

PREVENTIVE MAINTENANCE (PM): Inspection and testing of required systems and components on a recurring schedule in an effort to reduce system failures and maintain those systems operational.