Am-0004_W9128F24R0019_Attach_Specs_Draws.pdf

B-21: Fuel System Maintenance Dock (Single Bay) - Ellsworth AFB ELB1

SECTION TABLE OF CONTENTS

DIVISION 01 - GENERAL REQUIREMENTS

SECTION 01 14 00

WORK RESTRICTIONS

11/11

PART 1 GENERAL

1.1 REFERENCES

1.2 DEFINITIONS

1.2.1 Controlled Area(s) (CA)

1.2.2 Controlled Area Work Perimeter(s) (CAWP)

1.2.3 Free Zones

1.2.4 Restricted Area (RA)

1.2.5 Secure Area(s)

1.2.6 Construction Secure Area Perimeter

1.2.6.1 CSP and Secure Area Implementation

1.2.7 Security and Site Access Management Plan (SSAMP)

1.2.8 US Persons

1.3 SUBMITTALS

1.4 PROJECT SECURITY AND SITE ACCESS MANAGEMENT PLAN (SSAMP)

1.5 ORDER OF WORK RESTRICTIONS

1.5.1 Desire for Innovation

1.6 DOCUMENT CONTROL

1.6.1 CUI Training

1.7 CYBERSECURITY DURING CONSTRUCTION

1.7.1 Contractor Computer Equipment

1.7.1.1 Operating System

1.7.1.2 Anti-Malware Software

1.7.1.3 Passwords and Passphrases

1.7.1.4 Contractor Computer Cybersecurity Compliance Statements

1.7.2 Temporary IP Networks

1.7.2.1 Network Boundaries and Connections

1.7.3 Government Access to Network

1.7.4 Temporary Wireless IP Networks

1.7.5 Passwords and Passphrases

1.7.6 Contractor Temporary Network Cybersecurity Compliance

Statements

1.8 BASE ACCESS AND SECURITY

1.8.1 General

1.8.2 Base Hours

1.8.3 Resticted Area (RA) Access Hours

1.8.4 Scheduled and Unscheduled No Work Days

1.8.4.1 Operational Delays

1.8.4.2 Right to Deny Entry onto Base

1.8.5 Activity Regulations

1.8.5.1 Subcontractors and Personnel Contacts

1.8.5.2 Identification Badges and Installation Access

1.8.5.3 No Smoking Policy

1.9 RESTRICTED AREA (RA) ACCESS AND SECURITY (AS REQUIRED)

1.9.1 Right to Deny Entry into Restricted Area

1.9.2 RA Badging

SECTION 01 14 00 Page 1Am #0004

1.9.3 Contractor-Provided Escorts

1.9.3.1 Escort Ratios

1.9.3.2 Self-Escort Badging

1.9.3.3 Cleared American Guards (CAGs)

1.9.4 Contractor-Provided Security Expeditor

1.10 FREE ZONE ACCESS AND SECURITY (AS REQUIRED)

1.11 SECURE AREA OVERSIGHT

1.11.1 Secure Area Access Control and Surveillance/Oversight

1.12 PROJECT "SECURE AREA" ACCESS AND SECURITY

1.12.1 US Citizen Requirement During Finishing Phase of Construction

1.13 ACCESS AND SECURITY ROLES AND RESPONSIBILITIES

1.13.1 Access to Construction Site

1.13.2 Access Within Construction Secure Area Perimeter

1.13.2.1 Contractor Responsibilities

1.13.2.2 Government Responsibilities

1.13.3 Access Within RA, Outside Secure Area Perimeter, within established Free Zone

1.13.3.1 Contractor Responsibilities

1.13.3.2 Government Responsibilities

1.13.4 Access Within RA, Outside Secure Area Perimeter, no Free Zone

1.13.4.1 Contractor Responsibilities

1.13.4.2 Government Responsibilities

1.13.5 Work On or Around RA Perimeter Fence

1.13.5.1 Contractor Responsibilities

1.13.5.2 Government Responsibilities

1.13.6 Requesting New or Revised Construction Secure Area

Perimeter(s)

1.13.7 Requesting New Free Zones within RA

1.14 INFORMATION ACCESS

1.15 COMMUNICATIONS SECURITY (COMSEC) MONITORING

1.16 RECORDING DEVICES

1.16.1 Secure Area Sign

1.17 RADIOS

1.18 CELLULAR PHONES

PART 2 PRODUCTS

PART 3 EXECUTION

-- End of Section Table of Contents --

SECTION 01 14 00 Page 2Am #0004

SECTION 01 14 00

WORK RESTRICTIONS

11/11

PART 1 GENERAL

Attachments:

- EAFB Entry Authority (EAL) Instructions.

- Contractor Computer Compliance Statement.

- Temporary IP Netowrk Compliance Statement.

1.1 REFERENCES

The design publications listed below shall be used as sources of criteria for the design. The most current edition of the code or standard (with errata and addenda) available at the RFP proposal submission deadline shall be used as criteria for the design - unless noted otherwise. The criteria from these sources may be supplemented, but not supplanted, by applicable criteria contained in nationally recognized codes and standards.

INTELLIGENCE COMMUNITY STANDARD (ICS)

ICD/ICS 705 Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities (IC Tech Spec - for ICD/ICS 705, Version 1.5.1, dated July 2021)

ICS 705-1 Physical and Technical Security Standard for Sensitive Compartmented Information Facilities

ICS 705-2 Standards for the Accreditation and Reciprocal Use of Sensitive Compartmented Information

U.S. AIR FORCE (USAF)

AFI 31-101 Integrated Defense

AFI 16-1404 Air Force Information Security Program

AFI 16-1406 Air Force Industrial Security Program

U.S. ARMY CORPS OF ENGINEERS (USACE)

EM 385-1-1 (2014) Safety and Health Requirements Manual

U.S. DEPARTMENT OF DEFENSE (DOD)

DoDI 5200.48 CONTROLLED UNCLASSIFIED INFORMATION (CUI)

DODM 5200.01 DoD Information Security Program (Volumes 1-3)

SECTION 01 14 00 Page 3Am #0004

DODM 5205.07 (Volume 3) DoD Special Access Program (SAP) Security Manual: Physical Security

DODM 5200.08 (Volume 3) Physical Security Program:

Access to DoD Installations

UFC 4-010-05 Sensitive Compartmented Information Facilities Planning, Design, and Construction, with Change 1, dated 1 October 2013

1.2 DEFINITIONS

See the design drawings and specifications for descriptions of major components of work under this project to include, but not limited to "Secure Area," "open-storage area," etc.

1.2.1 Controlled Area(s) (CA)

An area within an installation with special access restrictions and security constraints - not otherwise defined by AFI 31-101 or as an installation Restricted Area. Access requirements may exceed "typical" base access requriements. Both base and CA access requirements are defined herein. Controlled area perimeter and access constraints are defined herein. CAs may be permanent or temporary. All work within a defined CA must be escorted unless work is being performed within a Government-approved CAWP, defined herein. When the CAWP cannot be directly accessed from outside of the CA, contractor personnel must be escorted to and from the CAWP.

1.2.2 Controlled Area Work Perimeter(s) (CAWP)

An area defined in the project plans and specifications that will function similar to a Free Zone defined by AFI 31-101 and herein. A controlled area work perimeter will typically be accessed from outside of a Controlled Area, but will require will require establishment of a perimeter and maintenance of that perimeter as described herein. See the design drawings for further definition of extents, phasing, and requirements for this project.

1.2.3 Free Zones

A temporary work area withing an established RA. Free zones in general are defined by AFI 31-101, with project-specific constraints defined herein.

See the design drawings for further definition of extents, phasing, and requirements for this project. Free zones are established within restricted areas when construction projects and similar activities make it inappropriate or impractical to apply normal circulation controls.

1.2.4 Restricted Area (RA)

An installation commanders approved area within an installation with special access restrictions and security constraints. Access requirements may exceed "typical" base access requriements. Both base and RA access requirements are defined herein. Restricted Areas in general are defined by AFI 31-101, with project-specific constraints defined herein. RAs may be permanent or temporary. All work within a defined RA must be escorted unless work is being performed within a Government-approved free zone, SECTION 01 14 00 Page 4Am #0004 defined herein. When the free zone cannot be directly accessed from outside of the RA, contractor personnel must be escorted to and from the free zone.

1.2.5 Secure Area(s)

Areas identified in the design documents as "secure areas" shall be designed, constructed, and accredited to the criteria listed below. The contractor shall design and construct the perimeter and all spaces within the boundary in compliance with the following criteria:

The listed criteria carries impacts to all building systems within the designated boundary. Use the most current version of the referenced criteria available at the bid submission deadline:

a. ICD/ICS 705 - Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities.

https://www.dni.gov/files/NCSC/documents/Regulations/IC_Technical_Specifications_f

b. ICS 705-1 - Physical and Technical Security Standards for Sensitive Compartmented Information Facilities.

c. ICS 705-2 - Standards for the Accreditation and Reciprocal Use of Sensitive Compartmented Information.

d. UFC 4-010-05 - Sensitive Compartmented Information Facility Planning, Design and Construction.

e. DODM 5205.07 - DoD Special Access Program (SAP) Security Manual:

Physical Security

The design drawings and specifications indicate the technical mitigations required by the project. This specification indicates the Contractor and Government's role(s) in administering the secure areas during construction for accreditation by assigned authorities.

1.2.6 Construction Secure Area Perimeter

A potentially moving boundary established during project construction by which the SSO and SSM assign layers of oversight for purposes of Construction Security Plan (CSP) implementation in compliance with ICD/ICS 705 and DODM 5205.07. This perimeter is established by a site perimeter fence (described below and in the design drawings) early in construction and prior to the construction of the physical, permanent secure area boundaries as defined in the facility floor plans. Once the permanent secure area boundaries are substantial enough to establish effective access control (as determined by the SSM), the boundary may be re-established by the SSM to isolate secure area construction and materials from non-secure area construction for more effective secure area oversight. Continuity of the secure area perimeter must be maintained by the Contractor (via a combination of temporary and/or permanent construction) for the entirety of contruction from CSP implementation through facility turnover. Coordinate the perimeter(s) and transtions from one CSP implementation perimeter to another with the SSM and with the anticipated order of construction, through the duration of the project.

SECTION 01 14 00 Page 5Am #0004

1.2.6.1 CSP and Secure Area Implementation

This project contains multiple secure areas within a combined facility perimeter. CSP implementation will occur on the entirety of this project within the parameters described below:

a. Secure area oversight and administration per secure area criteria referenced below will occur on the hangar bay as well as approximately

(2) rooms totaling approximately 1,000 SF in the admin/shop area of the proposed facility. Each of the spaces will be bound by their own secure area boundary. Exact room(s) to be identified to the awarded contractor after construction contract award. All other work under this project is not considered secure area work unless referenced otherwise.

b. The Government does not intend to establish secure area access control until site preparation and grading for the Fuel Dock is complete, but the contractor shall submit an approach for Government approval in the SSAMP - to include free zone establishment and access control by the contractor prior to Government secure area access control being established. Excavation for foundations may occur without a secure perimeter or Government access control established at the site, but any construction or placement of construction materials (concrete, steel, masonry, reinforcing, conduit, etc.) within the facility footprint must occur after a perimeter is secured and Government access control is established. Initial secure boundaries will be established at the construction site perimeter fence and may be reduced upon SSM approval as decribed in "Construction Secure Area Perimeter" paragraph above. Note that this project site sits fully within an established Restricted Area, so free zone [*Am-4] establishment, access control, [**Am-4] and escorting requirements as described herein will apply through the duration of the project.

c. During construction, the Contractor shall continuously notify the Government when construction secure area perimeters and secure material storage areas, and free zones are intented to be established and/or revised depending upon the nature of work being performed. This shall be discussed during established weekly meetings so that the Government may position personnel to carry out inspection and oversight of those activities, materials, and features of work. The Government reserves the right to segregate and compartmentalize materials from the established stock for installation and/or inspection as part of the secure area perimeter. All materials intended to be installed in a project secure area shall be stored within a fenced perimeter on the project site - unless approved otherwise, in writing, by the SSM or Security Forces Squadron (SFS) as appropriate. The Contractor shall provide a high security lock and keys by which to secure each perimeter at the end of each work day.

The SSM shall be provided with sole keyed access to any secure material storage area(s) and the SSM reserves the right to track entry and egress from the storage area(s). Secure area material storage areas will be secured by the SSM after the end of each work day and re-opened by the SSM each day.

d. The Government will establish and man the access-controlled secure area and secure area material storage perimeter(s) - either at secureable building and/or room boundaries, or at contractor-provided fenced boundaries as indicated in the design drawings. The point at which access control is established may vary as each respective

SECTION 01 14 00 Page 6Am #0004

[*Am-4] establishment, access control, [**Am-4] facility (and perimeter) is constructed and secured. The Government does not intend to dictate the specific time at which individual perimeters are established as long as the security of each facility is continually maintained as each facility is constructed. The Contractor shall notify the Government NLT 30 Days in advance when they anticipate any features of work will be ready for access control to be established.

e. CSP implementation will only occur on the project onces the SSAMP is approved and the secure area and secure area material storage perimeter(s) are constructed (by the Contractor) and secureable by the SSM. The contractor may perform work around and outside the secure area perimeter, but no construction that conceals a volume, void, or that transverses or penetrates the secure area perimeter/volume on the secure or unsecure side will be allowed without written approval by the Government. This would include ductwork, piping, conduit, and equipment that occurs within the secure perimeter walls, plenum, or within the secure space itself. These features may be routed to the perimeter of the secure area, but shall not penetrate that boundary until Government oversight is in place. CSP implementation will occur from that point through the entire duration of construction to include procurement and installation of any bid options.

f. Once the perimeter is coordinated and established, access to the space will be exclusively through the Government's access control procedures as defined herein. Any deviations from the procedures herein must be coordinated with USACE and the SSM in writing.

Contractor responsibilities associated with CSP implementation will only terminate upon full Government acceptance of all work on and within the secure area perimeter and upon the Contractor's departure from the project site - including procurement and installation of any bid options awarded under this contract. While it is the Contractor's responsiblity to establish the order of work within the constraints established within this Contract, no work on or within the 6-sided perimeter of the secure area shall occur without implementation of Government and Contractor responsibilities associated with the approved CSP - as described herein.

The Contractor shall document their intended order of work and required points of interface with CSP requirements in the Security and Site Access Management Plan as defined below - as well as reflect this requirement in the project schedule.

1.2.7 Security and Site Access Management Plan (SSAMP)

A detailed plan that acknowledges, describes, and details all unique access control, security, and phasing requirements in this Contract.

Project-specific requirements for the SSAMP are described below.

1.2.8 US Persons

Individuals lawfully admitted for permanent residence as defined in U.S.C.

§ 1101(a)(20) or who is a protected individual as defined by Title 8 U.S.C. §1324b (a)(3)).

1.3 SUBMITTALS

Government approval is required for submittals with a "G" designation;

submittals not having a "G" designation are for information only. When

SECTION 01 14 00 Page 7Am #0004 used, a designation following the "G" designation identifies the office that will review the submittal for the Government. Submit the following in accordance with Section 01 33 00 SUBMITTAL PROCEDURES:

SD-01 Preconstruction Submittals

Project Security And Site Access Management Plan; G, RO

CUI Training; G, RO

Contractor Computer Cybersecurity Compliance Statements; G, RO

Contractor Temporary Network Cybersecurity Compliance Statements

G, RO

1.4 PROJECT SECURITY AND SITE ACCESS MANAGEMENT PLAN (SSAMP)

This project sits within the Ellsworth Air Force Base (EAFB) Flightline Restricted Area (RA). All work on this project requires access to the RA and is subject to the access control, security, escorting, and oversight requirements defined in the contract drawings and herein. It is the Government's intent that the Contractor perform all work under the fewest constraints allowable under the applicable criteria, and as applicable to the individual component of work. This specification and the entirety of the design drawings and specifications communicate all applicable requirements, and the Contractor is responsible for provide a plan for compliance with these constraints that is consistent with their technical approach for construction.

NLT 30 days prior to anticipated on-site mobilization, the Contractor is to provide a Project Security and Site Access Management Plan (SSAMP) for approval by the Government. The SSAMP shall incorporate the constraints described below and throughout the Contract. This shall include, but is not limited to, the following information. Clearly separate the plan into "Secure Area" work and non-"Secure Area" Work to address the following:

a.List of primary and secondary Contractor POCs for Project security and access management.

b. List of Contractors and Subcontractors requiring site access.

c. Anticipated secure area and secure area material storage perimeter(s), and free zone(s) with specs, dates, and durations. Indicate any anticipated changes to the perimeters(s) during the duration of the project.

d. Anticipated construction perimeter(s) (fence(s) and/or room(s)) with specs, dates, and durations. Indicate any anticipated changes to the perimeters(s) during the duration of the project. Communicate a plan for continuity of secure area and secure area material storage perimeter(s), and free zone(s) for the entirety of construction once CSP implementation has begun.

e. Anticipated dates and durations of various work activities that will require Government oversight and/or escorts per the requirements in this Contract.

f. Description of Contractor processes and procedures associated with Secure Area construction, oversight, accreditation, and associated

SECTION 01 14 00 Page 8Am #0004 security requirements.

g. Anticipated procedures for Contractor site security and access management for each work activity.

h. Anticipated usage of temporary and/or permanent gates and/or doors (with locks), barriers and similar at secure area perimeters, etc.

j. List of anticipated closures/outages, etc that may impact Government oversight, or work outside of normal hours as listed in 01 30 00.24

OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS.

k. CONTROLLED UNCLASSIFIED INFORMATION (CUI)document storage and handling procedures.

l. Procedures for advising Subcontractors and delivery activities on the location of the project site and appropriate POCs (primary and secondary) for Security Forces to verify project deliveries against.

m. Describe the technical approach to design and construction of the facility(ies). Include considerations for management of both the "Secure Area" construction security (in accordance with UFC 4-010-05, ICD/ICS 705, DODM 5205.07, AFI 31-101, AFI 16-1404, AFI 16-1406, and

DODM 5200.01.

n. Processes and procedures for isolating construction under "finishing phase" from other construction for implementation of "US Citizen Requirement During Finishing Phase" paragraph described herein.

The SSAMP must be treated as a living document that records the Contractor's approach for compliance with work restrictions documented herein. As Contractor requirements and activities evolve, update the SSAMP for use, evaluation, approval, and reference by the Government. Coordinate SSAMP updates with overarching construction schedule and "lookahead" activities defined in 01 32 01.00 10 PROJECT SCHEDULE.

1.5 ORDER OF WORK RESTRICTIONS

The order in which work is performed shall conform to the following constraints:

a. See the design drawings and other specifications for project-specific order of work and phasing restrictions. This may include, but is not limited to phasing constraints relating to work occuring on adjacent construction projects, demolition of the existing facilies on the site, relocation of utilities, construction and removal/relocation of the construction perimeter fence(s) and free zones, and placement, phasing, and tie-in of new and existing airfield paving.

b. This project is one of several that serve as part of the B-21 facilities beddown at Ellsworth AFB, SD. The contractor shall continually coordinate work with other construction activities that serve as part of the EAFB B-21 Beddown. See 01 30 00.24 OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS for contractor coordination meeting partcipation requirements.

c. The EAFB Flightline Restricted Area (RA) and associated flightline activities will remain in operation during the entire construction period. The Contractor must conduct their operations so as to cause

SECTION 01 14 00 Page 9Am #0004 the least possible interference with normal operations of RA activities. See the design drawings for additional accomodations and requirements.

d. This project sits within an established Restricted Area. Once a continuous free zone and perimeter fence for the construction site is erected and approved by the Government, the project site will be considered in a 'free work zone' of the EAFB Flightline Restricted Area. Until that time, all work on the project site within the EAFB Flightline Restricted Area must be escorted with Contractor-provided escorts per the RA escort requirements herein. This also includes coordination of construction boundary realignments as illustrated in the design drawings to accommodate construction site availability for the FY24 Renovate Dock 81 and FY26 80 Row EPS projects as described in the design drawings. These projects are anticipated to be awarded in August 2024 and April 2026, respectively; site availability for those respective projects must be scheduled and accommodated accordingly.

Any work required outside of the established construction perimeter fence and within EAFB Flightline Restricted Area at any time during construction shall also be escorted with Contractor-provided escorts per the RA escort requirements herein.

[*Am-4] Note that other concurrent construction associated with the broader EAFB B-21 beddown (including the referenced FY24 Renovate Dock 81 and FY26 80 Row EPS projects) will require access via ECP 3 (and associated free zone) during the duration of this project. The Contractor (under this contract) must accommodate other Contractor and Government personnel, vehicle, equipment, and material access via the 80 Row free zone entry near ECP 3 through the duration of the project.

Each project Contractor will submit vetted EALs, logs, lists, etc.

consistent with the requirements herein for security specialist tracking and documentation.[**Am-4]

e. Permission to interrupt any roads, railroads, or utility service must be requested in accordance with requirements listed in 01 30 00.24

OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS.

f. Permission to establish new free work zones, as well as Government escorts and oversight shall be coordinated in compliance with the requirements listed below.

g. Any utility outages associated with the project shall be planned well in advance. Contractor shall notify the Government of any required outages that may impact any RA facilities in compliance with utility outage request requirements in 01 30 00.24 OTHER ADMINISTRATIVE AND

SPECIAL REQUIREMENTS.

h. The Contractor is responsible for all labor and materials required to construct the entirety of the work sited within the flightline RA at Ellsworth AFB. Work within an approved free zone perimeter does not require escorts. Work within the the Ellsworth AFB RA, but outside of an approved free zone requires escorts or Cleared American Guard (CAG) oversight as defined herein. Work required to establish or remove free zone perimeter(s) also requires escorts or CAG oversight as defined herein. Finally, work inside and on the existing RA perimeter fence serving the Ellsworth AFB RA requires escorts or CAG oversight as defined herein. The Contractor is required to obtain RA escort badging and/or employing the services of escorts (CAGs) as to fully execute the work within the constraints defined herein.

SECTION 01 14 00 Page 10Am #0004

[*Am-4] Note that other concurrent construction associated with the broader EAFB B-21 beddown (including the referenced FY24 Renovate Dock 81 and FY26 80 Row EPS projects) will require access via ECP 3 (and associated free zone) during the duration of this project. The Contractor (under this contract) must accommodate other Contractor and Government personnel, vehicle, equipment, and material access via the 80 Row free zone entry near ECP 3 through the duration of the project.

Each project Contractor will submit vetted EALs, logs, lists, etc.

consistent with the requirements herein for security specialist tracking and documentation.[**Am-4]

j. Coordination of the use of secure area oversight shall occur in compliance with the requirements listed below.

k. The Contractor is responsible for all labor, costs, and materials required to construct the entirety of the work described in this contract. For clarification, oversight and administration of the secure area per ICD/ICS 705 and DODM 5205.07 is a Government-led function. Comply with secure area oversight and administration requirements through the duration of the project.

l. This project requires that the hangar bay roof structure(s) and perimeter(s) be constructed and covered prior to the installation of the hangar bay floor system. The hangar bay roof shall be installed to a level of completeness that will provide shade and water diversion over the entire hangar floor surface during slab system placement. The hangar bay perimeter shall also be enclosed to a level of completeness that the enclosures will provide freeze/thaw protection to the hangar slab(s) after placement and prior to HVAC system startup. The Contractor shall obtain Contracting Officer approval on the roof and wall systems prior to slab system installation. Required level of completeness shall be discussed at the hangar slab pre-constuction conference.

1.5.1 Desire for Innovation

The Government is looking for ways to streamline construction and manage labor and other resource constraints in an effort to mutually reduce costs and achieve an aggressive schedule while minimizing impact to the Base and Base operations. The Contractor should consider these constraints when developing the project schedule and work activities, and should propose innovative and/or alternative solutions for Government consideration. Any non-standard solutions require Government review and formal acceptance prior to implementation.

1.6 DOCUMENT CONTROL

All contract documents (including the design analysis, plans, and specifications) shall be treated as For Official Use Only (FOUO) or Controlled Unclassified Information (CUI) by the Contractor - regardless of labeling on the reference documents. The Contractor shall track and control access to the contract documents in compliance with DoDI 5200.48, and DODM 5200.01. The Contractor shall log personnel and entities that have access to documents and hardcopies. Those logs shall be available to the Government for review and should include the entity and responsible party to which documents were issued.

Attach CUI markings/caveats at the direction of the Government to contract documents after construction contract award.

Distributed hardcopies of documents shall be stored within the secure area perimeter or locked in the contractor's construction office when not in use and during non-work hours. Plans shall be returned to the Contractor as entities complete their work activities. Contractor shall destroy all hardcopy documents not turned over to the Government upon project completion.

[*Am-4] Distribution of electronic copies of of plans, specs, and associated files should be minimized to the extent necessary to perform

SECTION 01 14 00 Page 11Am #0004

[*Am-4] Distribution of electronic copies of of plans, specs, and associated files should be minimized to the extent necessary to perform the work under this contract, within the constraints and restrictions defined herein. Drawings, specs, and associated native files must only be provided to federal personnel or federal contractors/subcontractors with a direct need to construct, support, and/or coordinate work being performed under this contract. [**Am-4]

1.6.1 CUI Training

In accordance with DoDI 5200.48 "Controlled Unclassified Information", comply with initial and annual refresher CUI training requirements by taking the course "DoD Mandatory Controlled Unclassified Information (CUI) Training" at https://securityawareness.usalearning.gov/cui/index.html and print or save a copy of certificate for each individual with access to CUI in performance of the contract and maintain documentation of this training.

1.7 CYBERSECURITY DURING CONSTRUCTION

{For Reference Only: This subpart (and its subparts) relates to AC-18, SA-3, CCI-00258.} Meet the following requirements throughout the construction process.

1.7.1 Contractor Computer Equipment

Contractor owned computers may be used for construction. When used, contractor computers must meet the following requirements:

1.7.1.1 Operating System

The operating system must be an operating system currently supported by the manufacturer of the operating system. The operating system must be current on security patches and operating system manufacturer required updates.

1.7.1.2 Anti-Malware Software

The computer must run anti-malware software from a reputable software manufacturer. Anti-malware software must be a version currently supported by the software manufacturer, must be current on all patches and updates, and must use the latest definitions file. All computers used on this project must be scanned using the installed software at least once per day.

1.7.1.3 Passwords and Passphrases

The passwords and passphrases for all computers must be changed from their default values. Passwords must be a minimum of eight characters with a minimum of one uppercase letter, one lowercase letter, one number and one special character.

1.7.1.4 Contractor Computer Cybersecurity Compliance Statements

Provide a single submittal containing completed Contractor Computer Cybersecurity Compliance Statements for each company using contractor owned computers. Contractor Computer Cybersecurity Compliance Statements must use the template published at http://www.wbdg.org/ffc/dod/unified-facilities-guide-specifications-ufgs/forms-graphics-tables. Each Statement must be signed by a cybersecurity representative for the relevant company.

SECTION 01 14 00 Page 12Am #0004 the work under this contract, within the constraints and restrictions defined herein. Drawings, specs, and associated native files must only be provided to federal personnel or federal contractors/subcontractors with a direct need to construct, support, and/or coordinate work being performed under this contract. [**Am-4]

1.7.2 Temporary IP Networks

Temporary contractor-installed IP networks may be used during construction. When used, temporary contractor-installed IP networks must meet the following requirements:

1.7.2.1 Network Boundaries and Connections

The network must not extend outside the project site and must not connect to any IP network other than IP networks provided under this project or Government furnished IP networks provided for this purpose. Any and all network access from outside the project site is prohibited.

1.7.3 Government Access to Network

Government personnel, as defined, prescribed, and identified by the Contracting Officer, must be allowed to have complete and immediate access to the network at any time in order to verify compliance with this specification. Or if there is a Government agency that's responsible, identify that agency.

1.7.4 Temporary Wireless IP Networks

In addition to the other requirements on temporary IP networks, temporary wireless IP (WiFi) networks must not interfere with existing wireless network and must use WPA2 security. Network names (SSID) for wireless networks must be changed from their default values.

1.7.5 Passwords and Passphrases

The passwords and passphrases for all network devices and network access must be changed from their default values. Passwords must be a minimum 8 characters with a minimum of one uppercase letter, one lowercase letter, one number and one special character.

1.7.6 Contractor Temporary Network Cybersecurity Compliance Statements

Provide a single submittal containing completed Contractor Temporary Network Cybersecurity Compliance Statements for each company implementing a temporary IP network. Contractor Temporary Network Cybersecurity Compliance Statements must use the template published at http://www.wbdg.org/ffc/dod/unified-facilities-guide-specifications-ufgs/ forms-graphics-tables. Each Statement must be signed by a cybersecurity representative for the relevant company. If no temporary IP networks will be used, provide a single copy of the Statement indicating this.

1.8 BASE ACCESS AND SECURITY

1.8.1 General

The US Army Corps of Engineers (USACE) (in collaboration with Base Civil Engineering Squadron) will coordinate installation and secure area entry with resource managers on Ellsworth Air Force Base (EAFB). Base Security Forces Squadron (SFS), and will assist the Contractor with initiating security reviews (e.g. local and national agency checks) and requesting access and/or badges as described below. The Contractor shall furnish a list of Contractor personnel requiring entry to EAFB and the secure area.

This list will be provided as soon as possible, but not later than ten

(10) days, after contract award and maintained current as Contractor

SECTION 01 14 00 Page 13Am #0004 personnel are added or dismissed from the contract/project. EAFB Entry Authority (EAL) instructions.

After initial acceptance of the list, submit changes and updates a minimum of 10 working days prior to the date of required access.

1.8.2 Base Hours

See 01 30 00.24 OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS for base hours. Work outside those hours shall be coordinated with USACE and Security Forces Squadron per the requirements of this specification and

01 30 00.24 OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS.

1.8.3 Resticted Area (RA) Access Hours

RA operating and access hours are 7:00 a.m. to 4:00 p.m. daily (Monday through Friday), excluding federal holidays. Access to the RA during other times must be requested in writing from the Contracting Officer and will be granted only for extenuating circumstances. Federal Holidays and weekends are considered as scheduled non-workdays.

1.8.4 Scheduled and Unscheduled No Work Days

See 01 30 00.24 OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS, for requirements relating to weather delays and federal holidays. Official snow call or late reporting may affect the Contractor's production for which the KO will not consider reimbursement for lost work time.

In addition to weather delay days and other scheduled no work days, the Contractor shall accommodate not less than 30 mission delay days as unscheduled no work days in the project schedule.

These days will be invoked by the Government for exercises, events, operations, SSM or SFS-dictated non-work days, and other mission-specific events that inhibit or prohibit the Contractor's ability to work on the project site and/or secure area. Mission delay days will be coordinated with the Contracting Officer (or designee) prior to invocation and application to the project, similar to procedures for use of weatehr delay days.

1.8.4.1 Operational Delays

The Contractor and their personnel shall leave Ellsworth Air Force Base (EAFB) immediately and safely upon notification by the Contracting Officer (CO), his technical representative, or constituted authority when directed, that operational requirements or emergencies dictate. Normal delay should not exceed one hour in duration.

1.8.4.2 Right to Deny Entry onto Base

The Installation Commander or designated representative reserves the right to deny entry to any Contractor whose National Agency Check is unfavorable, and the right to terminate the entry authorization of any Contractor employee upon disclosure of information which indicates the individual's continued entry to EAFB is not in the best interest of national security. Additionally, the violation of or any deviation from established security procedures by the Contractor's employee may result in the confiscation of badges and the denial of future entry to EAFB.

SECTION 01 14 00 Page 14Am #0004

1.8.5 Activity Regulations

Ensure that Contractor personnel employed on the activity become familiar with and obey activity regulations including safety, fire, traffic and security regulations. Keep within the limits of the work and avenues of ingress and egress. Wear hard hats in designated areas. Do not enter any restricted areas unless required to do so and until cleared for such entry. Mark Contractor equipment for identification.

1.8.5.1 Subcontractors and Personnel Contacts

Provide a contact list of personnel for the Contractor and subcontractors

- including addresses and telephone numbers for use in the event of an emergency. As changes occur and additional information becomes available, correct and change the information contained in previous lists.

1.8.5.2 Identification Badges and Installation Access

a. Each Contractor employee to work on the project at Ellsworth AFB must obtain a base pass to enter the base. The pass must be obtained prior to entry on EAFB. To obtain the base pass, personnel must have in their possession, a current, valid driver's license and if driving a vehicle onto base a current vehicle registration, and current proof of insurance. Procedures for obtaining a base pass will be identified at the Pre-Construction Meeting. Expired/unregistered vehicles will not be allowed on base.

Employees who are terminated from employment will surrender any and all identification media and base passes to their immediate supervisor, who will in turn surrender same to the EAFB Pass and ID Office, and the supervisor will immediately escort the terminated employee off base, and notify SFS of the termination.

Access to EAFB shall be through the commercial gate (Bismark Gate) Gate indicated in the design drawings. The Contractor shall provide USACE and SFS a copy of a completed "Entry Authority List (EAL)", which is to include the names of all subcontractors and suppliers, and the names and driver's license numbers of all employees requiring access to the Base.

The commercial gate to EAFB is open from 0600-1800 Monday-Friday and 0600-1300 on Saturdays except when directed by the base commander under conditions of National Security. All commercial vehicles shall use the right lane of the gate - or as directed by SFS personnel. A commercial vehicle is defined as any vehicle that has signage on it, is carrying materials such as in a pickup truck, a moving van, a panel truck, a supply truck, and any vehicle that the SFS shall designate a commercial vehicle. All commercial vehicles will be searched. The gate experiences up to 60 minute delays during morning congestion between the hours of 0630 to 0800. After 0800, delays of approximately 20 minutes are typical. The contractor is asked to keep large truck deliveries between the following hours: 0600-0700, 0800-1200 and 1300-1800. This will reduce the congestion at the gate for everyone.

b. All drivers on EAFB will have in their possession a valid driver's license, valid vehicle registration, and proof of vehicle insurance while operating any vehicle. If vehicle is registered to someone other than the operator, the operator must provide a notarized letter from the registered owner, authorizing the operator permission to operate

SECTION 01 14 00 Page 15Am #0004 the vehicle. Access by vehicles to the Base and project site is at the sole discretion of the Government. Security process and procedures at the Base change over time. Coordinate specific access details with the Government after contract award.

The company name shall be prominently displayed on all vehicles operated on EAFB.

c. The Contractor's Superintendent must notify SFS through the Contracting Office prior to any work to be performed on non-scheduled hours/days (evenings, weekends, holidays). Any personnel working on non-scheduled hours/days must check in with SFS, prior to and at the completion of the work.

d. All equipment and materials are the responsibility of the Contractor.

Make sure that all equipment and materials are properly secured at the end of the work day. Assure that materials and equipment are stored at least 30 feet away from the secure areaor any restricted area perimeter fence, unless approved otherwise by Base Security Forces and the project SSM. Any work area found by Base Security Forces to be unsecured (or improperly secured) will be checked for intruders and the responsible Contract Superintendent will be called in to secure the areas/equipment.

e. If any roadway is to be blocked for any reason, the Contractor must notify, through the Contracting Office, the Base Security Forces of the blockage, prior to the blockage, and must ensure that proper signs are provided by the contractor and installed to divert traffic around the affected area. Notifications for closure and/or blockages less than 1 week in duration shall be submitted to USACE for coordination no later than 14 days prior to required outage. As much lead time notification as possible is appreciated for proper coordination, and notification of other activities on base. Any outages for more than 1 week in duration shall be submitted no less than 28 days in advance.

f. Contractors, Subcontractors and all personnel who report for work, and do not know the location of the job site, will be held at the entry gate to await escort service from the Construction Superintendent.

g. Base speed limits are strictly enforced with the use of radar equipment. The base speed limit is 25 MPH, unless otherwise posted.

Motorcycle operator/riders must wear protective headgear (helmets) while riding on base. Mandatory seatbelt laws are in effect on base.

Seatbelts must be fastened prior to entering the base. Cell phones may not be used while driving on any Air Force Base, including EAFB.

h. Normal contractor access to the Base will be as indicated in the design drawings. See requirements above regarding scheduled and unscheduled no work days, as well as weather and federal holidays listed in Section 01 30 00.24 OTHER ADMINISTRATIVE AND SPECIAL REQUIREMENTS.

Access on dates when the assigned contractor access gate is closed will be coordinated with the Contracting Officer. Deliveries cannot be accepted on these dates unless requested in writing from the Contracting Officer and access will be granted only under extenuating circumstances.

i. The base security police can at any time enter the construction site and sweep the area with K-9 Patrol. They can search any container, vehicle, or contractor personnel on the installation, or within the

SECTION 01 14 00 Page 16Am #0004 construction boundaries. The security police can also detain and question any person(s) deemed a potential threat by the Air Force.

j. The Base Security Forces emergency number can be obtained at the Pre-Construction Meeting. This number provides emergency police, fire, and ambulance service, 24 hours a day, 7 days/week.

k. No privately owned weapons or contraband (drugs, etc.) are permitted on any military installation, at any time. Violators will be prosecuted through the Federal Magistrates Court in Denver. Cameras are also considered to be contraband on this installation.

l. The Contractor shall provide a 24-hour, 7-day-a-week contact number to SFS in case of suspicious activity at the construction site or if the site is found insecure. If required by SFS, the contractor will have someone respond to the construction site within 4 hours.

j. Ellsworth AFB is considered to be a closed facility. No unauthorized tours or visitors will be allowed on the installation.

1.8.5.3 No Smoking Policy

Smoking is prohibited within and outside of all buildings on installation, except in designated smoking areas. This applies to existing buildings, buildings under construction and buildings under renovation. Discarding tobacco materials other than into designated tobacco receptacles is considered littering and is subject to fines. The Contracting Officer will identify designated smoking areas.

1.9 RESTRICTED AREA (RA) ACCESS AND SECURITY (AS REQUIRED)

EAFB is a closed base. Within the installation boundary there is a permanent Restricted Area (RA) around the flighline area. Restricted Areas, by definition, contain priority resources and are established pursuant to DODM 5200.08, Security of DoD Installations and Resources.

Because priority resources are contained within the restricted area, a single security system and circulation controls are required and employed.

Access into this area is separately secured from the EAFB installation iteslf. Access is highly controlled and construction activities associated by this contract shall be coordinated with existing RA access control and security procedures.

The process and procedures to enter the EAFB RA are different than the general requirements to enter the installation boundary. As referenced, the US Army Corps of Engineers (in collaboration with Base Civil Engineering Squadron) will coordinate restricted area entry with the resource managers of the areas on EAFB and with the Base Security Forces Squadron (SFS).

1.9.1 Right to Deny Entry into Restricted Area

The Installation Commander or designated representative reserves the right to deny entry to any Contractor whose NAC is unfavorable, and the right to terminate the entry authorization of any Contractor employee upon disclosure of information which indicates the individual's continued entry to EAFB and the RA is not in the best interest of national security.

Additionally, the violation of or any deviation from established security procedures by the Contractor's employee may result in the confiscation of

SECTION 01 14 00 Page 17Am #0004 restricted area badge and the denial of future entry to EAFB.

1.9.2 RA Badging

A Restricted Area Badge for Unescorted Entry only (i.e. not requiring or authorized access to classified information) may be issued to Contractor personnel meeting the following qualifications:

a. Subject will be employed for six or more months.

b. Contract is for more than six months.

c. Subject has initiated a National Agency Check (NAC).

d. Subject has received a favorable local agency/files check initiated by SFS. NOTE: Badges authorized under the aforementioned provisions are only for the flightline Restricted Area on EAFB. No other areas, restricted or controlled, will be entered on the badge. Badges will not be electronically coded for any module or controlled by the Advance Entry Control System (AECS). The Governmnet may issue RA badges to Contractor personnel, but escort authority is not granted to Contractor personnel unless specifically indicated on the RA badge. See "Contractor-Provided Escorts" paragraph below. If any other areas are required, the badge will be issued only upon completion of the NAC.

e. Security Forces personnel will verify the identity and authorization of each Contractor employee requesting entry to the installation or restricted area, and may conduct searches of any hand-carried item, container, or vehicle used by the Contractor under this contract.

f. The contractor shall absorb all costs associated with delays at the installation entry points, restricted area entry points, or any other locations affected by security entry/circulation control measures. Assume the RA badging process may take up to 60 days upon Government receipt of documentation from the contractor (including CAGs or Contractor-Provided Escorts as described below).

g. Complete any Air Force required training for safe and secure movement and operations within the restricted area. This includes, but is not limited to airfield drivers training, AT/OPSEC training, etc.

1.9.3 Contractor-Provided Escorts

The Contractor shall provide escorts (as part of the contract base bid) and/or CAGs as required to fully execute the scope of work defined by this contract in compliance with the security requirements established herein and in the approved SSAMP. This may be accomplished by self-escorting personnel, employing Cleared American Guards (CAGs), and/or a combination of both - as indicated in the approved SSAMP.

While significant escorting is not anticpiated to be required as part of contract bid…