DES PMO PWS Access Control CCTV MR FINAL 12 Aug 26.pdf

PERFORMANCE WORK STATEMENT

Access Control/Closed Circuit TV (CCTV) System Maintenance and Repair

Directorate of Emergency Services (DES), Provost Marshal Office, Fort Bragg, NC 28310

1. General: The DES and Provost Marshal Office has a requirement for a contractor to provide service and maintenance for the Access Control and CCTV Systems. To include but not limited to the following: badging, software, migration tools, both automated and manual security vehicle & pedestrian entry points, and video surveillance systems. which is compatible and interoperable with current Lenel On Guard Card Access and Milestone CCTV software environment. This is a non-personnel services contract, and the Government shall not exercise any supervision or control over the contract service providers performing the services herein.

Such contract service providers shall be accountable solely to the contractor who, in turn is responsible to the Government.

1.1. Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform repairs, service and maintenance of all components as defined in this Performance Work Statement (PWS), except for those items specified as government furnished property and services. The contractor shall perform in accordance with (IAW) the terms and conditions of the contract and consistently with the established standards in this PWS and contract. The contractor shall not divulge any information accessed and obtained while performing this contract with other contractor staff or anyone outside the Government. In addition to any organizational conflict of interest provision, contractor employees assigned to this contract will be required, prior to working, to sign a non-disclosure statement for the

Government agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, which have not signed a non-disclosure statement. The contractor shall perform to the standards in this contract.

1.2 Background: The system interlinks access control, badging, badge access, CCTV, and alarm monitoring activities into one Security System. The purpose of this PWS is to ensure access control and CCTV systems are properly maintained in accordance with manufacturer’s recommended time intervals to ensure appropriate level of security.

1.3 Objectives: Deliver a comprehensive fully functional DES and Provost Marshal Office

Access Control/CCTV System primarily operating on Fort Bragg. However, may extend throughout the Fort Bragg Garrisons area of responsibility, including but not limited to Fort

Bragg, Pope Army Airfield, Simmons Army Airfield, Linden Oaks Housing Area, and Camp

Mackall. Services are being acquired to maintain, configure, test, and update a fully operational

DES and Provost Marshal Office access control/CCTV System in compliance with Army

Regulations and DES SOP. The contractor installs and configures all devices and provides knowledge transfer to ensure the onsite FCCS technicians fully understand the details of the DES

Access Control/CCTV System environment. The basic service objective includes the following:

1.3.1 The contractor shall provide repair, replacement, services, and maintenance to the access control stationary and automated gate systems at the DES compound(s), Fort Bragg, NC.

1.3.2 The contractor shall provide repair, replacement, services, and maintenance to the CCTV system at the DES compound(s), Fort Bragg, NC.

1.3.3 The contractor shall provide repair, replacement, services, and maintenance to the access control system at the DES compound(s) Fort Bragg, NC.

1.3.4 Contractor shall perform maintenance and services for the existing Electronic Security

Systems (ESS) as described in this PWS.

1.4 Scope: The contractor shall furnish all labor, parts, materials, equipment, and transportation necessary to perform maintenance and repairs of all components (includes checking data transmission lines, replacing and repairing hardware, installing software, etc.,) pertaining to the

Government-owned Access Control and CCTV Systems at Fort Bragg, NC, to insure that the systems are fully operational and functional in accordance with manufacturer’s System

Configuration Management Procedures, Operational and Installation manuals, DOD 5200.1-R

(DoD Information Security Program Regulation and AR190-51 Security of Unclassified Army

Property (Sensitive and Nonsensitive). These systems may consist of but are not limited to the following major components: cameras, Network Video Recorders (NVR), monitors and workstations, controllers, badge making/reading equipment, card readers, barrier turnstiles, pedestrian gates, magnetic locks, automated vehicle security arms/gates and associated access devices.

1.4.1 SUMMARY OF REQUIREMENTS.

1.4.2 Maintenance and Service. Contractor shall perform maintenance and service for the existing Electronic Security Systems (Access Control/CCTV) as described in this PWS.

1.4.3 Software License Agreement. During the term of this task order, and as applicable, the contractor shall provide to the Government any new, corrected, or enhanced version of the Lenel

OnGuard Access Control System Software and Milestone XProtect CCTV Software as created by their respective Developers. Such enhancement shall include all modifications to the Software which increase the speed, efficiency, or ease of use of the Security System Software, or add additional capabilities or functionality to the Security System Software, to the latest version. Any software changes must be hardened to the highest level and still operate as intended. Software must be approved by the cybersecurity personnel responsible before implementation. The contractor shall procure and maintain all Service Level Agreement, Software License

Agreement, or Software Service Agreement for all locations listed. Standalone systems can obtain Software agreements via Service Order (SO). All change information must be provided to the Configuration Change Board.

1.4.4 Service Level Agreement (SLA). Contractor shall provide SLA. All SLA work performed shall be recorded in the monthly status report to indicate what efforts were conducted in the last month, identifying any issues, resolutions, mitigations, etc.

1.4.5 Cybersecurity Maintenance and Sustainment. The contractor shall perform Cybersecurity

(CS) maintenance and sustainment activities consistent with Risk Management Framework (RMF) policy requirements to assist the Government in obtaining and maintaining an Authority to Operate

(ATO) for the ACS, and CCTV systems. It is understood that an active ATO is not currently in place for the systems covered under this contract. The ATO/RMF accreditation process is a

Government-led activity that typically requires eight (8) to twelve (12) months to complete and must be completed by the end user (Government). The contractor shall provide guidance and assistance to the system owner in initiating and compiling the RMF package to obtain an ATO.

Once an ATO is granted, the contractor shall maintain the cybersecurity posture of the systems

IAW the approved system Continuous Monitoring Strategy in the approved Authority to Operate

(ATO). This effort includes but is not specifically limited to regular scanning, patching, updating, STIG, and security control review of all associated components of the system. The contractor will comply with all Army and Garrison policies, procedures, and directives.

1.4.6 All monthly Cybersecurity Sustainment work performed shall be required in the monthly status report to indicate what efforts were conducted in the last visit, identifying any issues, resolutions, output of any scans, mitigations, etc.

1.4.7 Cybersecurity Scanning & Patching (S&P) Frequencies: Frequencies shall be dependent on the type of ACS, or CCTV system. Any system that is on the DoD network shall be conducted monthly. Any system that is on a Closed Restricted Network, or standalone system S&P shall be conducted on a quarterly basis.

1.4.8 RMF Accreditation: The contractor will assist the government in obtaining RMF accreditation for systems as required. This support will include but is not limited to assisting the

ISO with categorization efforts, tailoring security controls, creating artifacts, documents, and policies to satisfy assigned RMF controls, implementing approved policy, supporting accreditation assessments, and providing continuous monitoring services as otherwise outlined in this PWS.

1.4.9 Preventive Maintenance (PM). Contractor shall perform all preventive maintenance activities consistent with the operational requirements to ensure continuous operation and reliability of the systems. As a minimum, all possible alarms shall be exercised to confirm operability to include intrusion, tamper, supervision, loss of power or communication, proper annunciation, and proper CCTV alarm (when applicable) and graphics call-up (when applicable).

It shall also include proper voltage readings to equipment. PM is to be conducted to all equipment per the maintenance plan. Additionally, the Contractor is to ensure that the Service Agreements

(SA) and software licenses are up-to-date and current with the labor for this effort included as part of the preventive maintenance. These agreements and licenses may be purchased later under a service order. Exception is if the SLA task is awarded then all software license updates, and upgrades costs are part of the SLA fixed firm price of the SLA tasks. Corrections that can be accomplished without additional parts (except minor screws or wire) such as loss or broken wires, misalignments, cleaning, tightening, and adjustments shall be provided under the PM and no CM

SO shall be required.

1.4.10 Contractor shall have a limited amount of common spare items during PM inspections so that they can be replaced without requiring additional zone access and travel costs. This is especially true for batteries but could include a spare control board, communication board, power supply, etc.

1.4.11 Inspection & Testing Frequencies: Testing and documentation methods shall comply with the referenced codes, standards, and manufacturer’s recommendations. Where there are no records indicating last test performance, Contractor shall assume no test was performed, and schedule accordingly. PM Inspections and testing shall be conducted during the M&S year per the following or the manufacturer’s minimum maintenance recommendations, whichever is more frequent:

All Servers and Headend Equipment (ACS and CCTV) Quarterly

All ESS Components & ESS Communications

Equipment (except AA&E locations)

Semi-Annual *

1.4.12 Corrective Maintenance (CM). The Contractor is to submit a Service Order (SO) for all

CM service requests. The Contractor shall insure that sufficient funds are available to conduct a service order before proceeding. Contractor shall perform corrective maintenance and shall replace, or repair failed, damaged, or defective components, including hardware and software, on the access control and CCTV equipment. Repair may be the overhaul, or the replacement of nonfunctional parts or materials that have failed, that require continual repair, or show signs of imminent failure. Repair work may also include inspection, testing, adjustment, calibration, part or component replacement and programming, modernization, and cybersecurity support as required to complete the service request.

1.4.13 Any CM shall require a SO. A single SO for CM shall be limited to equipment serviced under a single controller, head-end equipment.

1.4.14 A SO may be utilized to modernize outdated equipment, move equipment, provide Lenel

OnGuard and Milestone XProtect equipment training, or provide additional coverage within the limits of a SO. Cybersecurity support can include software updates and support to run any scans.

If a continuous cybersecurity task is awarded, then all support shall be provided for under that task.

1.4.15 A SO may be utilized to provide life cycle replacement.

1.4.16 A SO may be utilized to provide repairs, replacements, or training for combination locks or other series lock sets.

1.4.17 A SO may be utilized to remove equipment that is no longer required. All sensitive equipment not within an enclosure such as motion sensors, and electronic equipment shall be boxed and packed with packing material and identification labeled on the box exterior. All applicable equipment with memory (i.e., Computers, primary control units, and Network Video

Recorders (NVR)) removed from service shall have all memory wiped after coordination with the government representative. In the event of providing CM, it is determined by the contractor that a broken electronic component cannot be replaced with a one for one component, the contractor shall provide information concerning compatibility and cybersecurity risk on the replacement part. Approval shall be obtained from the Government Ordering Officer before the replacement can be utilized

1.5 Period of Performance: One (1) Base Year period of 12 months and three (4) 12-month option periods.

• Base Year: 27 March 2026 to 26 March 2027

• Option Year 1: 27 March 2027 to 26 March 2028

• Option Year 2: 27 March 2028 to 26 March 2029

• Option Year 3: 27 March 2029 to 26 March 2030

• Option Year 4: 27 March 2030 to 26 March 2031

1.6 General Information

1.6.1 Quality Control: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1

Contractor Inspection Requirements).

1.6.1.1 Quality Control Program: The Government is committed to a highly interactive relationship between quality control by the contractor and quality assurance by the government recipient of services. This relationship shall be achieved through an effective Prevention Based

Quality Control Program dedicated to ensuring the best possible products and services to end users. The contractor shall provide their final written Quality Control Plan (QCP) no later than

(NLT) 10 days after contract award and within five (5) days of any proposed changed to the

COR and KO.

1.6.1.1.1 The contractor’s quality program shall demonstrate its prevention-based outlook by meeting the objectives stated in the PWS throughout all areas of performance. The QCP shall be developed to specify the contractor’s responsibility for management and quality control actions to meet the terms of the contract. The QCP as a minimum shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspection;

discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies;

procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints.

1.6.1.1.2 Within 24 hours of completion, or upon request from the COR, the contractor shall provide all reports generated as a result of the contractor’s quality control efforts. This shall include any summary information used to track quality control, including any charts/graphs.

1.6.1.1.3 The contractor’s QCP shall be incorporated into and become part of this contract after the plan has been accepted by the KO. Proposed changes made after KO acceptance shall be submitted in writing through the COR to the KO for review and acceptance prior to implementing any revision. The contractor’s QCP shall be maintained throughout the life of the contract and shall include the contractor’s procedures to routinely evaluate the effectiveness of the plan to ensure the contractor is meeting the performance standards and requirements of the contract.

1.6.1.2. Non-Conformance Report (NCR): When the contractor's performance is unsatisfactory, an NCR will be issued. The contractor shall reply in writing within five (5) workdays from the date of receipt of the NCR, giving the reasons for the unsatisfactory performance, corrective action taken, and procedures to preclude recurrence.

1.6.1.3. Quality Assurance: The COR will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the COR must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). When an observation indicates defective performance, the COR will require the contractor or designated on-site representative to initial the observation to acknowledge the defective performance. The acknowledgement of the observation does not necessarily constitute contractor concurrence with the observation, only that the contractor has been made aware of the defective performance.

1.6.2. Property Management System: If applicable, the contractor shall establish a system to manage Government Furnished Equipment (GFE), Government Furnished Property (GFP), and

Government Furnished Material (GFM) in its possession to control, use, preserve, protect, repair, and maintain. The Property Management System (PMS) must be adequate to satisfy the requirements of Property Management in accordance with (IAW) FAR clause 52.245-1

Government Property.

1.6.3. Recognized Federal Holidays: The contractor is normally not required to perform services on recognized Federal holidays. However, that requirement is subject to mission execution requirements. The recognized Federal holidays include:

New Year’s Day Labor Day

Martin Luther King Jr.’s Birthday Columbus Day

Washington’s Day Veteran’s Day

Memorial Day Thanksgiving Day

Juneteenth Day Christmas Day

Independence Day

1.6.3.1. When a holiday occurs on a Saturday, Federal employees are normally granted the previous Friday as the holiday observance. When a holiday occurs on a Sunday, Federal employees are normally granted the following Monday as the holiday. The contractor shall work on the days the Government is scheduled to work.

1.6.3.2. When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor will have the following options:

1.6.3.2.1. Reschedule the work so it is performed the following day unless the following day falls on a weekend.

1.6.3.2.2. Reschedule the work on any day that is mutually satisfactory.

1.6.4 Hours of Operation: The contractor is responsible for providing services, between the hours of 0700-1600 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar

Government directed facility closings. The contractor shall always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the government facility is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential to successful performance under this contract. No overtime (OT) or compensatory time (CT) is authorized.

contractor personnel shall not exceed a 40-hour work week; flexible work schedule may be considered.

1.6.5 The Contractor shall contact the Point of Contact (POC) provided on the Service Work

Order (SWO) Form within 24 hours of notification to establish the date and time to initiate the

SWO. Performance of services outside the locally established hours of operation shall be coordinated with the COR at the request of the Program Manager and at no cost to the

Government. Contractor personnel shall not be scheduled for overtime work. The Program

Manager shall be available during normal hours to serve as the central point of contact for

Contractor operations.

1.6.6. Installation Closures. When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor shall:

a. Reschedule the work to be performed the following day unless the following day is on a

Saturday, Sunday, a legal federal holiday, and when routine work is not scheduled for that day; or

b. Reschedule the work on any day that is mutually satisfactory.

1.6.6.1. Inclement Weather Delay. If the Contractor determines unsafe weather conditions for continued operations, then the Contractor shall notify the KO if inclement weather suspends operations within 4 hours. The Contractor shall resume operations as soon as weather permits;

Contractor shall notify the KO of resumption.

1.6.7. Place of Performance: The work to be performed under this contract will be performed primarily at the DES compound, buildings 2-5935 and 2-5634, located at the intersection of

Butner and Stiner Road, Fort Bragg, NC 28310. The contractor shall have routine access to

Government-controlled facilities.

1.6.7.2. Physical Security: For contractors that do not require CAC but require access to a DoD facility or installation. Contractors and all associated sub-contractors employees shall be screened using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations. Contractors or

Contract Leads will coordinate with the COR to receive an entry badge (AIE). All issued badges will not exceed the issuance of three years or the length of the contract. Contractors requiring access to the installation will go to the visitor center to obtain a badge of access. Contractors will turn in the badge to the COR upon expiration of the contract or separation from the contract.

Lost, damaged, or stolen badges will be reported immediately to the COR. IAW AR 190-51, at no point will a contractor use a retiree, or other DoD ID to access the installation unless it is a

CAC ID, issued by the US Government and sponsored locally.

1.6.7.3. Access Badge Control: The contractor shall establish and implement methods of making sure all Access Badges issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons. No badges issued to the contractor by the Government shall be duplicated. The contractor shall develop procedures covering Access Badge Control that shall be included in the QCP. Such procedures shall include turn-in of any issued access badges by personnel who no longer require access to restricted areas. The contractor shall immediately report any occurrences of lost or Access Badges to the KO and COR.

1.6.7.4. The contractor shall prohibit the use of Government issued Access Badges by any persons other than contractor’s personnel. The contractor shall prohibit the opening of locked areas by contractor personnel to permit entrance of persons other than contractor personnel engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR.

1.6.8. Special Qualifications. The contractor shall maintain, at a minimum of three (3) years’ experience on Card Access/CCTV Systems. The contractor shall:

• Have the Lenel Certified Professional (LCP) - OnGuard Access Control certification.

This certification covers system installation, configuration, operation, maintenance, and troubleshooting of the Lenel OnGuard System. All aspects of system administration, monitoring, and OnGuard badging are covered. There is also comprehensive hardware coverage including Lenel LNL-X series controllers, reader interface modules, and associated devices. Network connections and interface parameters are fully covered.

• Have the Lenel Certified Expert (LCE) certification, or senior-level technical training on the Lenel OnGuard platform. This includes advanced administration topics, such as advanced database configuration, custom reporting, partitioning, and system integration techniques. The contractor has knowledge of advanced diagnostics, database queries, and system maintenance troubleshooting.

• Have the Milestone Certified Integration Technician (MCIT) or Milestone Certified

Integration Engineer (MCIE) credential. This certifies the contractor in designing, deploying, configuring, and supporting Milestone XProtect enterprise-class IP video management solutions to ensure the success of the installed CCTV systems.

• Have intimate knowledge of the following appliances and software to support them:

Milestone XProtect Recording Servers, Smart Clients, and IP-based cameras (e.g., Bosch, Hanwha, Axis).

• Have intimate knowledge of Lenel access control hardware and interface boards (such as

LNL-X series or compatible controllers).

• Have at a minimum of two (2) years designing, implementing, and maintaining Lenel

OnGuard and Milestone XProtect security suites.

• Have at a minimum two (2) years' experience with Windows Server 2022 (or most current Microsoft-supported equivalent) Active Directory configuration and administration, server network infrastructure, and system administration.

• Current security inventory includes Lenel OnGuard, Milestone XProtect, Bosch, Axis, Hanwha, and other brand‐name products; however, the Contractor must be able to service other brand names through coordination with a third-party vendor.

• The Contractor must hold a current equivalent Electronic Protection Systems License:

(Locksmith, Access Control, and CCTV) license from a State Licensing Board. This license must be maintained in a current status throughout the contracted period of performance.

1.6.8.1. General Qualifications:

1.6.8.1.1. The contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current certifications as indicated in PWS 1.6.8.; security requirements during the execution of this contract.

1.6.8.1.2. Contractor personnel performing work under this contract shall be able to read, write, speak, and understand the English language to effectively carry out all contract requirements.

They shall have a command of both the written and spoken English language to properly clearly and effectively communicate in person or via electronic devices (telephone or Email) with co-workers, customers, and the general public.

1.6.8.1.3. Contractor personnel performing work under this contract shall be U.S. citizens unless the provisions of Army Regulation 25-2, Information Assurance have been fully completed and approval has been granted by the Government for the non-U.S. citizen to perform the required support.

1.6.8.1.4. The Contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current Information Assurance Technician (IAT) Level I professional certification during the execution of this contract.

1.6.8.1.5. Access and General Protection/Security Policy and Procedures: All Contractor personnel performing work under this contract shall comply with applicable installation, facility and area commander installation/facility access, local security policies and security procedures provided by the Security Manager Government representative. Contractor personnel shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor personnel shall comply with all personal identity verification requirements as directed by Department of Defense (DoD), HQ Department of Army (DA) or local policies. In addition to the changes otherwise authorized by this contract, should the Force

Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor and subcontractor security matters or processes.

1.6.8.1.6. Anti-Terrorism Program: Anti-Terrorism (AT) Level I Training: Contractor personnel performing work under this contract that requires access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after commencing performance under this contract. The Contractor shall submit employee certificates of completion within 30 calendar days after completion of the training. AT Level I awareness training is available at the following website: https://atlevel1.dtic.mil/at

1.6.8.1.7. iWATCH Training: The Contractor shall brief all personnel performing work under this contract on the local iWATCH program [training standards provided by the requiring activity Anti-Terrorism Office (ATO)]. This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award with the results reported to the COR NLT 45 calendar days after contract award. New employees shall complete the training within 10 calendar days of commencing performance of work under this contract.

1.6.8.1.8. The contractor will develop an OPSEC standing operating procedure (SOP)/plan within 90 calendar days after the contract is awarded, to be reviewed and approved by the responsible Government OPSEC officer, according to AR 530-1. This SOP/plan will include the

Government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor will identify an individual who will be an OPSEC coordinator. The contractor will ensure this individual becomes OPSEC

Level II certified according to AR 530-1.

1.6.8.1.9. Contractor personnel shall have a favorable National Agency Check (NAC) with inquiry in accordance with Security definition for personnel who occupy “ADP (Automated Data

Processing) Sensitive” positions, as per AR 380-67, paragraph 3-601, “The Personnel Security

Program” no later than 30 calendar days after award.

1.6.8.1.10. IAW PARC Policy Alert 14-3, Homeland Security Presidential Directive 12 (HSPD-

12) issued 31 Dec 13) Contractor shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of support services and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems. Training shall be required annually after the initial training. Completion certificates shall be submitted to the COR within fifteen (15) calendar days from date of commencing performance under this contract.

1.6.8.1.11. OPSEC Training: Per AR 530-1, Operations Security, the contractor shall complete

Level I OPSEC training within 30 calendar days of their reporting for duty and annually thereafter.

https://atlevel1.dtic.mil/at

1.6.8.1.12. Information assurance (IA)/information technology (IT) training: The contractor employees working IA/IT functions shall comply with DoD and Army training requirements in

DoD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

1.6.8.1.13. Ensuring all employees take the DoD mandated initial and annual IA awareness training and register into the Army Training and Certification Tracking System (ATCTS). The

Contractor shall require all new employees, as part of their in-processing, to complete this training which is a one-hour IA Training for access to the Fort Bragg Network. The link for the

DoD IA awareness training is: (https://atlevel1.dtic.mil/at). The link for ATCTS is:

https://atc.us.army.mil/iastar/. Contractor personnel shall be appropriately certified prior to beginning work on this contract. Contractor is responsible for ensuring all employees possess and maintain current Information Assurance professional IA Management (IAM) and IA

Technical (IAT) baseline and computing environment certifications (IAT I-III and/or IAM I-III), as required, in accordance with the current DoD 8570, AR 25-2, and applicable Army Best

Business Practices (i.e., 05-PR-M-0002) during the execution of this contract.

1.6.8.1.14 Threat Awareness Reporting Program. Per AR 381-12 Threat Awareness and

Reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trainer as specified in 2-4b.

1.6.8.2. Other Qualifications: The contractor shall designate a Project Manager (PM) who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the PM is absent shall be designated in writing to the contracting officer within five (5) days after award. The PM or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The

PM or alternate shall be available between the hours 0600-1800 hours, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons.

1.6.9. Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The post award conference will also be utilized to ensure contractor understands all HSPD-12 requirements. The

KO, COR (and other government personal) will hold a quarterly progress meet with the

Contractor to review the Contractor's performance. At these meetings the KO and COR will apprise the Contractor of how the Government views the Contractor's performance and the

Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.10. Contracting Officer Representative (COR): The COR will be identified by separate letter of appointment. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: Assures that the contractor performs the technical requirements of the contract; performs inspections necessary in https://usg01.safelinks.protection.office365.us/?url=https%3A%2F%2Fatlevel1.dtic.mil%2Fat&data=05%7C02%7Cjason.j.tatro.civ%40army.mil%7Cd60b3eafa7d040b8da2a08def895dc4a%7Cfae6d70f954b481192b60530d6f84c43%7C0%7C0%7C639221519701088435%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2F2nqXUHfMSSWsHvCO75ew2bua%2BQ%2FninFhTIeTlagYnM%3D&reserved=0 https://atc.us.army.mil/iastar/ connection with contract performance; maintains written and oral communications with the contractor concerning technical aspects of the contract; issues written interpretations of technical requirements, including government drawings, designs, specifications; monitors contractor's performance and notifies both the KO and contractor of any deficiencies; coordinates availability of government furnished property, and provides site entry of contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the contractor, states the responsibilities and limitations of the COR, especially regarding changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting contract.

1.6.11. Key Personnel: Key personnel shall not be added to or removed from the contract without express acknowledgement of the COR. Any changes to the working status of these key personnel shall be transmitted (in writing) to the KO/COR within ten (10) workdays of the proposed change. If, for any reason, any of the key personnel becomes, or is expected to become, unavailable for work under this contract for a continuous period exceeding 30 workdays the contractor shall promptly replace personnel with personnel who possess qualifications equal to or better than that of the original employee. The contractor shall ensure all key personnel terminated or released from employment under this contract are replaced within ten (10) workdays of the termination.

1.6.11.1. The follow is considered key personnel by the Government: The contractor shall provide a Program Manager (PM) who shall be responsible for the performance of the work under this contract. The name of this person, and an Alternate PM (APM), who shall act for the contractor when the PM is absent, shall be designated in writing to the KO at the post award conference. The PM shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The PM or APM shall be available between the hours of 7:30 AM to 4:30 PM, Monday through Friday, except federal holidays or when the government facility is closed for administrative reasons.

1.6.11.2. Qualifications for all Key Personnel: The contractor shall designate a Project Manager

(PM) and provide in writing this person’s name and contact information at the post award conference. The contractor shall notify the Contracting Officer in writing at least one week prior to any change to the Project Manager. The Project Manager shall be empowered with authority to make management decisions, which may arise in day-to-day operations without undue delay.

1.6.11.2.1. Program Manager (PM): The PM shall meet or exceed the following qualifications as indicated in 1.6.8.

1.6.11.2.2. Assistant Program Manager (APM): The APM shall meet or exceed the same qualifications as the PM.

1.6.12. Contractor Personnel:

1.6.12.1. Identification of Contractor Personnel: All Contractor personnel attending meetings, answering government telephones, and working in other situations where their contractor status is not obvious to third parties, are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are government officials.

1.6.12.1.1. All contractor personnel performing work under this contract shall obtain a

Department of Defense (DoD) Common Access Card (CAC). This shall be always worn, when performing work under this contract, to include attending government meetings and conferences.

Unless otherwise specified in the contract, contractor personnel shall wear the badge in a conspicuous place on the front of exterior clothing and above the waist, except when safety or health reasons prohibit such placement or when being used for computer access.

1.6.12.1.2. Contractor personnel shall be required to obtain a CAC at least ten (10) workdays prior to start of base contract period or prior to performance under this contract, whichever comes first.

1.6.12.1.3. The contractor shall develop, maintain, and provide to the COR an updated roster which shall include names and positions of all Contractor personnel as well as indicating which employees were issued CAC or other forms of government identification cards. The contractor shall submit initial roster to the COR within ten (10) calendar days after commencement of base period of performance.

1.6.12.1.4. The Contractor shall immediately report any lost CAC or government issued identification cards to the COR and Military and/or DoD police agencies. The contractor shall immediately collect the CAC and other government issued forms of identification upon termination of employee, or at the end of the contract performance period. The CAC and other government issued forms of identification shall be returned to the COR within one (1) hour of employee termination, or at the end of contract performance period, whichever comes first. IAW

PARC Policy Alert 14-33, Homeland Security Presidential Directive 12 (HSPD-12) issued 31

Dec 13.) Final payment may be delayed if contractor fails to comply with these requirements.

1.6.12.2. Contractor Personnel Appearance and Performance: It is essential that all contractor personnel meet the highest standards of professionalism and personal integrity. The contractor shall ensure their personnel do not perform work under the influence of alcohol, illegal prescribed drugs, or any other incapacitating agents. Contractor personnel shall be neatly groomed and dressed in business casual attire to always present a professional appearance.

1.6.13. Contractor Travel: N/A

https://www.us.army.mil/suite/doc/41924024

1.6.14. Other Direct Costs (ODC): During the performance of this requirement, the contractor shall be required to provide materials and parts to satisfy requirements listed in this PWS. An

Other Direct Cost (ODC) Contract Line-Item Number (CLIN) will be incorporated into this contract for parts and materials ordered to satisfy contract requirements.

1.6.15. Data Rights: The government has unlimited rights to all documents/material produced under this contract to the extent permitted by the data rights clauses. The parties mutually acknowledge their understanding that this is the government’s intent. All documents and materials, to include the source codes of any software, produced under this task order shall be government owned and are the property of the government with all rights and privileges of ownership/copyright belonging exclusively to the government. These documents and materials may not be used or sold by the contractor without written permission from the contracting officer. All materials supplied to the government shall be the sole property of the government and may not be used for any other purpose. This right does not abrogate any other government rights.

1.6.16. Organizational Conflict of Interest:

1.6.16.1. Purpose. To aid in ensuring that:

1.6.16.1.1. The contractor does not obtain an unfair competitive advantage by establishing the ground rules for a future competition.

1.6.16.1.2. The contractor's objectivity and judgment are not biased because of its present or future interests (financial, contractual, organizational, or otherwise) which relate to work performed under this contract; and

1.6.16.1.3. The contractor does not obtain an unfair competitive advantage by virtue of its access to non-public or proprietary information belonging to others.

1.6.16.2. Definitions.

1.6.16.2.1. The term “Contractor” herein used in section 1.6.16., Organizational Conflict of

Interest, means: (a) the organization (hereinafter referred to as "it" or "its") entering into this agreement with the Government; (b) all business organizations with which it may merge, join or affiliate now or in the future and in any manner whatsoever, or which hold or may obtain, by purchase or otherwise, direct or indirect control of it; (c) it’s parent organization, if any and any of its present or future subsidiaries, associates, affiliates, or holding companies, and; (d) any organization or enterprise over which it has direct or indirect control now or in the future.

1.6.16.2.2. The term "proprietary information" for purposes of section 1.6.16., Organizational

Conflict of Interest, means any information considered so valuable by its owners that it is held secret by them and their licensees. Information furnished voluntarily by the owner without limitations on its use, or which is available without restrictions from other sources, is not considered proprietary.

1.6.16.3. Organizational Conflicts of Interest Examples. The following examples illustrate situations in which organizational conflicts of interest may arise. These examples are not all inclusive.

1.6.16.3.1. Biased Ground Rules. This type of conflict may arise in situations where a company sets the ground rules for a future competition. For example, when a contractor develops requirements then competes to provide products or services to satisfy those requirements, thus obtaining a competitive advantage.

1.6.16.3.2. Impaired Objectivity. This type of conflict may exist where a contractor’s obligations under a contract require objectivity, but another role of the contractor casts doubt on its ability to be truly objective. An example of this type of conflict is where a contractor’s work under one contract entails evaluating itself, its affiliates, or its competitors under a separate contract.

1.6.16.3.3. Unequal Access to Information. This type of conflict may arise when a contractor has access to nonpublic or proprietary information as part of its performance under a contract that gives it an unfair advantage in a competition for a later contract.

1.6.16.4. General Constraints. The provisions of FAR Subpart 9.5, Organizational and

Consultant Conflicts of Interest, concerning organizational conflicts of interest govern this contract. Potential conflicts may exist in accordance with FAR 9.505-1, Providing Systems

Engineering and Technical Direction, through 9.505-4, Obtaining Access to Proprietary

Information. In this regard, the Contractor is responsible for identifying any actual or potential organizational conflicts of interest to the KO that arise as the result of performance under this contract. To avoid or mitigate a potential conflict related to performance under this contract, the

KO will impose appropriate constraints such as the constraints discussed below. Since it is impossible to foresee all the circumstances that might give rise to organizational conflicts of interest, the constraints discussed below are not all inclusive and the KO may impose constraints other than, or in addition to, the constraints listed below.

1.6.16.4.1. The contractor agrees that if it provides, under a contract or task order or delivery order, systems engineering and technical guidance for systems and programs, but does not have overall contractual responsibility, it will not be allowed to be awarded a contract or task or delivery order to supply the system or any of its major components or be a subcontractor or consultant to a supplier of the system or any of its major components (FAR 9.505-1).

1.6.16.4.2. The contractor agrees that if it prepares complete specifications for non-developmental items or assists in the preparation of work statements for a system or services under a contract or task order or delivery order, it will not be allowed to furnish these items, either as a prime contractor, a subcontractor or as a consultant (FAR 9.505-2).

1.6.16.4.3. The contractor agrees that it will neither evaluate nor advise the Government regarding its own products or activities. The contractor will objectively evaluate or advise the

Government concerning products or activities of any prospective competitors (FAR 9.505-3).

1.6.16.4.4. The contractor agrees that if it gains access to proprietary information of other companies, it will exercise diligent effort to protect such proprietary information from unauthorized use or disclosure (FAR 9.505-4). In addition, the contractor agrees to protect the proprietary information of other organizations disclosed to the contractor during performance of this contract with the same caution that a reasonably prudent contractor would use to safeguard highly valuable property. The contractor also agrees that if it gains access to the proprietary information of other companies it will enter into written agreements with the other companies to protect their information from unauthorized use or disclosure for as long as it remains proprietary and to refrain from using the information for any purpose other than that for which it was furnished. The contractor shall provide copies of such agreements to the KO.

1.6.16.4.5. If the contractor, in the performance of this contract, obtains access to plans, policies, reports, studies, financial plans, data or other information of any nature which has not been released or otherwise made available to the public, the contractor agrees that without prior written approval of the KO, it shall not: (a) use such information for any private purpose unless the information has been released or otherwise made available to the public, or (b) release such information unless release is otherwise authorized under the contract or such information has previously been released or otherwise made available to the public by the Government.

1.6.16.5. Non-Disclosure Agreements. The contractor shall obtain from each employee who has access to proprietary information under this contract, a written agreement which shall in substance provide that such employee shall not, during his/her employment by the contractor or thereafter, disclose to others or use for their benefit, proprietary information received in connection with the work under this contract. The contractor will educate its employees regarding the restrictions imposed by FAR 9.505-4, so that they will not use or disclose proprietary information or data generated or acquired in the performance of this contract, except as provided herein.

1.6.16.6. Training. The contractor shall effectively educate its employees, through formal training, company policy, information directives and procedures, in an awareness of the legal provisions of FAR Subpart 9.5 and its underlying policy and principles, so that each employee will know and understand the provisions of that Subpart and the absolute necessity of safeguarding information from anyone other than the contractor's employees who have a need to know, and the U.S. Government.

1.6.16.7. Subcontracts. The contractor agrees that it will include the provisions in paragraphs

1.6.16.4., 1.6.16.5., and 1.6.16.6., above and this paragraph in consulting agreements, teaming agreements, and subcontracts of all tiers, which involve access to information, or the performance of services described in paragraph 1.6.16.4., above.