PERFORMANCE WORK STATEMENT (PWS)

CCTV/Access Control Installation Building 4411

PART 1

GENERAL INFORMATION

1. General: This is a non-personal services contract to provide and install a complete and operational CCTV and Access Control system at 4411 Llewellyn Avenue, Fort Meade, MD 20755. The Government shall not exercise any supervision or control over the contract service providers. Such contract service providers shall be accountable solely to the contractor, who, in turn, is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform the CCTV and Access Control installation as defined in this PWS. The contractor shall perform all work to the standards specified in this contract. The CCTV and access control system will be a standalone system that will not be in connection with Fort George G. Meade military emergency response personnel. The older CCTV and access control system will need to be removed from the space and an off-network CCTV and access control system will have to be installed to connect to rooms 126, 012A, and 106E. The previous system is obsolete and cannot be used to configure new system. Public Health Command, East has dropped ceilings to create space for the standalone system to be installed to the above-mentioned rooms to monitor the capabilities of the system.

1.2 Background: Building 4411 requires a new, standalone security system to be managed by Public Health Command, East. The existing system is in the controlled space of another tenant agency and does not meet current security requirements. This project will establish an independent standalone system to enhance the safety and security of all building personnel and visitors. The older CCTV system will need to be removed from the space, and an off-network CCTV system will have to be installed to connect to rooms 126, 012A, and 106E. The previous system cannot be used to reconfigure wiring for the new system.

1.3 Objectives:

The goal of this contract is to deliver a complete, turnkey physical security solution. The specific objectives the contractor must achieve are:

1. Engineer, furnish, and install a fully integrated Access Control, CCTV, and Video Intercom system that functions seamlessly as a coordinated security platform (integrated via background APIs/event-linking).

2. Ensure all hardware, software, and edge devices are brand new, fully licensed, and operate strictly in accordance with manufacturer specifications and the performance thresholds defined herein.

3. Deliver a secure, highly reliable, and user-friendly interface optimized for day-to-day monitoring and management by Government personnel on the workstation in Room 012A, 106E, and 126.

4. Provide comprehensive, end-to-end operational and administrative training for all installed CCTV, Video Intercom, and Access Control systems. Training must ensure designated Government personnel are fully proficient in system operation, credential management, video retrieval, and basic troubleshooting.

5. Deliver complete system documentation, including as-built drawings (electronic CAD/PDF and printed), Operations & Maintenance (O&M) manuals, and database logs to support long-term system sustainment.

6. Provide a comprehensive, one-year (12-month) base installation warranty covering all parts, labor, and software configurations. During this base year, the contractor shall fully remediate and repair any equipment or system failures at no additional cost to the Government.

1.4 Scope: The contractor shall engineer, furnish, install, and test complete Access Control and CCTV system. The work includes providing and installing all required cameras, card readers, control panels, servers, workstations, door hardware, power supplies, and cabling.

The system components are detailed in Part 5.

1.5 Key Personnel: The contractor shall provide a contract manager with at least two years of experience who shall be responsible for the performance of the work. The name and resume of this person and an alternate who shall act for the contractor when the manager is absent shall be submitted with the proposal.

The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 0730 - 1630, Monday through Friday except federal holidays or when the government facility is closed for administrative reasons.

1.6 Period of Performance: The period of performance shall be for one (1) base year of 12 months and four (4) option years of maintenance for software/equipment repair. All physical installation, testing, and delivery of documentation shall be completed within the base year period.

Base Year 2026 Option Year I 2027 Option Year II 2028 Option Yeat III 2029

Option Year IIII 2030

1.7 Type of Contract: The Government will award a Firm-Fixed-Price (FFP) contract.

1.8 Place of Performance: Work will be performed at 4411 Llewellyn Avenue, Fort Meade, MD

20755, including the first floor, basement, and building exterior.

1.9 Hours of Operation: The contractor shall conduct business between 0800 and 1600 hours, Monday through Friday, excluding Federal holidays or when the Government facility is closed.

1.9 Federal Government Holidays:

New Year’s Day 1st day of January Martin Luther King Jr. Day 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May Juneteenth Day 19th day of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

Part 2 Quality & Security Requirements

2.1 Quality Control Plan (QCP): The contractor shall develop, implement, and maintain an effective Quality Control Plan (QCP) and submit it to the Contracting Officer's Representative (COR) prior to project mobilization. The QCP is the contractor’s internal framework for ensuring all work meets the standards of this PWS. The QCP must, at a minimum, include:

2.1.1 Roles & Responsibilities: Definition of a QC Manager and Lead Technician responsible for overseeing quality.

2.1.2 Pre-Installation Checks: A process for inspecting and verifying all materials and equipment upon receipt against the bill of materials to identify shipping damage or discrepancies.

2.1.3 In-Process Inspections: Checklists for verifying installation quality during work, including cable routing, hardware mounting, and weatherproofing.

2.1.4 Configuration & Integration QC: Procedures for testing the logical setup, including software programming, network configuration, and system integrations.

2.1.5 Deficiency Tracking: A log and correction process for any item that fails a quality check.

All deficiencies must be corrected and re-tested at the contractor's expense.

2.2. Quality Assurance (QA): The Government will evaluate the contractor’s performance in accordance with the Quality Assurance Surveillance Plan (QASP). The QASP enables the Government to verify that the contractor’s quality control efforts are effective and that services meet the performance standards of the contract, as detailed in Technical Exhibit 1.

2.3 Security Requirements:

2.3.1 Personnel Vetting: All contractor personnel must be thoroughly vetted through the Fort Meade visitor center to gain installation access. A formal security clearance is not required. The Government sponsor for visitor access will be Public Health Command, East Security Manager.

2.3.2 Required Training: All contractor personnel must complete AT Level 1, OPSEC Level 1, iWATCH, and TARP training prior to commencing work on the installation. Certificates of completion must be provided to the COR.

Antiterrorism (AT) Level I Training. This provision is for Contractor HCWs with an area of performance within an Army controlled installation, facility, or area. All Contractor HCWs, to include subcontractor HCWs, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after start date. The Contractor shall submit certificates of completion for each affected Contractor HCW and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 7 calendar days after completion of training by all HCWs and subcontractor personnel.

AT Level I awareness training is available at the following website:

https://jkodirect.jten.mil/Atlas2/page/desktop/DesktopHome.jsf or at https://atlevel1.dtic.mil/at

OPSEC TRAINING. Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. Level I OPSEC training is available at the following website:

http://cdse.edu/catalog/elearning/GS130.html (Duration: 45 minutes).

iWATCH Training: The Government will brief all Contractor personnel on the local iWATCH program. This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activities to their COR.

Contractor employees must complete iWATCH training within 30 calendar days of reporting to duty.

TARP Training. Per AR 381-12, This regulation applies to all AD, ARNG, USAR, and applies to Department of Army Civilian personnel, Army Contractors as incorporated by the terms of the contract. Training will be either a stand-alone briefing tool (SBT_ and/or a computer Web-based alternative training (CBT) Makes the training and reporting requirements of this regulation applicable to all Army contractors if included in the applicable contract, not just those with https://jkodirect.jten.mil/Atlas2/page/desktop/DesktopHome.jsf https://atlevel1.dtic.mil/at http://cdse.edu/catalog/elearning/GS130.html security clearances. Subject to the incorporation of these requirements into the contract, ensure that contractors, over whom they have cognizance attends live TARP training at least annually and report threat-related incidents, behavioral indicators, and other matters of CI interest specified in chapter 3, to the facility security officer, the nearest military CI office, the FBI, or the Defense Security Service.

2.3.3 Physical Security The contractor is responsible for safeguarding all Government property and equipment in their work areas. All work areas, tools, equipment, and materials shall be physically secured at the close of each work period.

2.3.4 Key/CAC Control: The contractor will not be provided keys or Common Access Cards (CAC) to the building. Contractor personnel will be escorted to the area of work by authorized Public Health Command, East personnel.

2.3.5 The contractor shall perform all work in strict compliance with the Fort Meade physical security requirements and AR 190-13. All physical equipment installations, exterior building penetrations, mounting brackets, and security racks must be coordinated with and approved by the Public Health Command, East Security Manager and Fort Meade Physical Security personnel prior to mounting to preserve the building's physical security envelope.

2.3.6 Cybersecurity Maturity Model Certification (CMMC) Compliance: The contractor shall meet and maintain the requirements of Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self-Assessment). The contractor must certify compliance and provide documentation verifying self-assessment milestones to the COR before the physical start of performance. The contractor shall ensure that any corporate networks, systems, or tools used to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) under this contract satisfy the CMMC Level 2 requirements for the entire duration of the contract period.

2.4 Equipment Sourcing and Compliance

2.4.1 NDAA Section 889 Compliance: In accordance with Section 889 of the National Defense Authorization Act (NDAA) for Fiscal Year 2019, the contractor is strictly prohibited from providing or using any covered telecommunications and video surveillance equipment or services from prohibited companies listed in the Act, including but not limited to Huawei, ZTE, Hikvision, Dahua, Hytera, and their subsidiaries or affiliates. The contractor must certify that all provided equipment, chipsets, and software services are fully compliant with Section 889.

2.4.2 Trade Agreements Act (TAA) Compliance: All products and hardware furnished under this contract must be fully compliant with the Trade Agreements Act (TAA) (19 U.S.C. § 2501- 2581). This requires that all end products (including cameras, servers, workstations, switches, door controllers, and power supplies) be manufactured or "substantially transformed" in the United States or a TAA-designated country. China, Russia, India, and Brazil are non-compliant countries. Bidders must provide country-of-origin certification for all proposed hardware.

PART 3

GOVERNMENT-FURNISHED ITEMS

3.1 Facilities & Utilities: The Government will provide access to the building and necessary installation spaces, including Rooms 105, 106E, 012A, and 126. The Government will also provide access to existing electrical utilities required for the installation. The contractor shall use utilities conservatively.

PART 4

CONTRACTOR-FURNISHED ITEMS

4.1 General: The contractor shall furnish all supplies, equipment, tools, software, licenses, and services required to perform the work under this contract that are not explicitly listed under Part 3.

PART 5

SPECIFIC TASKS

5.1. Task: Integrated Security System Installation: The contractor shall provide, install, and test the following integrated systems:

5.1.1. Access Control System:

The Access Control System must be a standalone system.

• Controllers: One (1) Lenel 32ES or equivalent standalone access control system.

• Boards: One (1) Lenel or equivalent Intelligent Controller board, and One (1) Lenel or equivalent Dual Reader Board.

• Card Readers: Four (4) total card readers configured to communicate exclusively via secure, encrypted OSDP (Open Supervised Device Protocol) utilizing AES-128 encryption (legacy unencrypted Wiegand protocol is strictly prohibited).

• Locations:

Two (2) on the First Floor (Front/Rear main egress doors) One (1) at the Basement Ambulance Entrance One (1) in the Stairwell

• Door Hardware: Electrified door hardware as required for full functionality.

• Sensors & Contacts: Four (4) request-to-exit (REX) motion detectors and Seven (7) door contacts (Door Position Switches).

• Power Supply: One (1) Altronix or equivalent power supply with battery backup.

• Credentials: Two hundred (200) reprogrammable, secure access cards compatible with the OSDP readers.

• Egress and Locking Hardware Compliance (NFPA 101): All electrified locking mechanisms and associated hardware installed on doors in a path of egress must comply with the National Fire Protection Association (NFPA) 101 Life Safety Code (2024 Edition), Section 7.2.1.6.2, regarding special locking arrangements. Specifically, the system must ensure that:

1. The locks shall unlock automatically upon activation of the building's protective signaling system (fire alarm).

2. The locks shall unlock automatically upon loss of power controlling the lock or locking mechanism.

3. A manual release device (such as an emergency exit button) must be located on the egress side, 40 to 48 inches above the floor, which directly interrupts power to the lock, independent of the access control software, and remains unlocked for at least 30 seconds.

4. All occupants must maintain unimpeded "free egress" from the interior at all times via mechanical panic hardware.

5.1.2. CCTV System:

The CCTV system must be a standalone, high-definition system.

• Cameras: Twenty (20) total fixed-view, IP-based cameras:

• Eleven (11) Interior Cameras: Minimum 2 Megapixel (1080p) fixed dome cameras equipped with Forensic WDR and Lightfinder.

• Seven (7) Exterior Cameras:

• At least one (1) camera positioned at a high-priority entry/exit point (such as the basement ambulance entrance or front door) must be a Weatherproof Exterior camera with integrated floodlight capability. This integrated white-light floodlight must not exceed 2,000 lumens, must be fully dimmable, and must be rule-configurable via the VMS (e.g., to activate/dim upon motion detection).

• Remaining exterior cameras must be vandal-resistant (IK10), weatherproof (IP66), minimum 4 Megapixel (2K) fixed domes with Optimized IR night vision.

• Two (2) 180-Degree Panoramic Exterior Cameras: Minimum 8 Megapixel (4K) multi-sensor stitched cameras that present a single, seamless 180-degree panoramic stream to the VMS, utilizing a single VMS camera license.

• Recording Server: One (1) Axis or equivalent S1216-series recording tower server.

• VMS Camera Licenses: The server must include twenty (20) fully active, permanent camera licenses (the contractor must purchase any additional licenses required over the factory standard to support all 20 camera feeds).

• VMS Storage Retention: The server must be configured with a minimum of 5TB of storage capacity (utilizing H.265/HEVC compression codecs) to provide a minimum of thirty (30) days of continuous, high-definition recording retention at a minimum of 15 Frames Per Second (FPS) across all twenty (20) cameras simultaneously.

• Workstation: One (1) BCDT04 or equivalent video workstation with a 50-inch monitor, to be in Room 126

5.1.3. Video Intercom System:

• Four (4) Aiphone or equivalent video door stations.

• One (1) master intercom unit located in room 126.

• Two (2) submaster stations located in Room 106E and room 012A.

5.1.4 Network Infrastructure (PoE Switches):

The contractor shall provide and install dedicated PoE network switches to support the standalone CCTV and Video Intercom network. All switches must be installed in Room 126 and fully configured as part of the turnkey security solution:

• One (1) 8-Port Power over Ethernet (PoE) Switch: Located in Room 126, configured for high-bandwidth physical security connectivity.

• One (1) 24-Port Power over Ethernet (PoE) Switch: Located in Room 126, configured to manage the main distribution of security system devices.

5.1.5 Cabling and Infrastructure Restrictions All physical installation, testing, and cabling must be completed within the base year period.

• Lab Space Cable Routing Prohibition: Lab spaces in Building 4411 cannot be used to run or route camera, ACS, or intercom cabling due to the sensitive contents and operations in these spaces. The contractor must route all cabling through corridors, administrative spaces, and public hallways using existing drop ceilings. No penetrations or cabling paths are permitted inside lab rooms

5.1.6 Standalone Software Architecture (Separate but Integrated) The CCTV Video Management System (VMS) and the Access Control System (ACS) shall operate as separate software platforms running side-by-side on the Room 012A workstation (e.g., Axis Camera Station and Lenel OnGuard) to ensure lightweight, rapid, and stable local performance. A unified "single-pane-of-glass" interface is not required. However, the systems must be fully integrated via background APIs to support the following coordinated operations:

• Alarm-to-Video Linking: Access control alarm events (such as 'Door Forced Open' or 'Door Held Open') must automatically transmit to the VMS, triggering real-time video pop-ups and bookmarked video recordings of the corresponding camera.

• Intercom-to-Video Linking: Call requests from the Aiphone door stations must trigger the VMS to display the corresponding entry camera feed on the workstation.

• Intercom-to-Door Release: Operators must maintain the ability to remotely unlock the corresponding door lock directly from the Aiphone master and submaster stations.

5.2 Post-Award & Progress Meetings: The contractor shall attend a post-award conference and periodic progress meetings (minimum quarterly) with the Contracting Officer and COR to review performance and resolve any issues.

PART 6

APPLICABLE PUBLICATIONS

6.1. Compliance: The contractor must abide by all applicable regulations, publications, and local policies, including but not limited to:

• Army Regulation (AR) 190-13 (Physical Security)

• Army Regulation (AR) 530-1 (Operations Security)

• Federal Acquisition Regulation (FAR) 52.222-50 (Combating Trafficking in Persons)

• National Defense Authorization Act (NDAA) Section 889 (Prohibitions on Covered

Telecommunications and Video Surveillance Services or Equipment)

• NFPA 101, Life Safety Code (2024 Edition) (specifically Section 7.2.1.6.2 regarding

Special Locking Arrangements)

• Trade Agreements Act (TAA) (19 U.S.C. & 2501-2581)

• Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self-Assessment)

TECHNICAL EXHIBIT 1

Performance Requirements Summary

The Contractor service requirements are summarized into performance objectives that relate directly to mission failure if not accomplished. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective Standard Performance

Threshold Method of

Surveillance

PRS #1

System Installation (Access Control, CCTV, Intercom) ((Reference PWS Para 1.1, 1.4,5.1)

Provide and install a fully integrated, off-network security system including Room 126 PoE network switches.

Hardware/software must be brand new and meet manufacturer specs.

No cabling through lab spaces.

100% compliance with PWS specifications and Bill of Materials; zero cabling routed through sensitive lab spaces.

Pre-installation checks (Para 2.1.2) & In-process QASP inspections (Para 2.2).

PRS #2 System Functionality & Retention(Reference PWS Para1.2, 1.3, 5.1.2)

Deliver a secure, highly reliable interface in rooms 126, 012A, and 106E.

. VMS must retain a minimum of 30 days of continuous recording across all 20 cameras.

100% operational capability with 30-day minimum continuous video storage retention; zero initial critical system failures.

Configuration & Integration QC testing (Para 2.1.4) by Contractor;

QASP

validation and storage verification by

COR.

PRS #3 Provide comprehensive, end-

100% of designated

Verification and sign-in

Door Hardware & Egress Compliance | Reference PWS Para 5.1.1

Electrified hardware in paths of egress must comply with

NFPA 101 (2024)

para 7.2.1.6.2.

100% compliance with life-safety codes; zero locked-in failures during fire alarm or power loss tests.

Demonstration and testing of fail-safe mechanisms witnessed by COR and local Fire Marshal.

PRS #4 Training Execution (Reference PWS Para. 1.3(Obj 4))

Provide comprehensive, end-to-end operational and administrative training.

100% of designated Government personnel trained prior to final system sign-off.

Verification and sign-in sheet review by COR.

PRS #5 System Documentation (Reference PWS Para 1.3 (Obj 5))

Deliver complete as-built drawings, O&M manuals, and database logs.

100% complete and accurate documentatio n provided prior to the end of the Base Year.

Document review and acceptance by COR. Manual audit of the database log mapping.

PRS #6 Warranty and Repair (PWS Reference Para 1.3, (Obj 6))

Provide a 12-month base warranty covering all parts, labor, and configurations.

100% of equipment/sy stem failures fully remediated at no additional cost during the base year.

Deficiency tracking log review (Para

2.1.5) & COR

performance monitoring

Quality Control (PWS Reference Para 2.1, 2.2)

Develop and maintain an effective Quality Control Plan (QCP).

QCP

submitted and approved prior to mobilization;

zero uncorrected inspection deficiencies.

QASP

evaluation by Government (Para 2.2).

Security & Training Compliance (PWS Para 2.3.1, 2.3.2, 2.3.5, 2.3.6)

Personnel vetted;

complete AT Level

1, OPSEC,

iWATCH, and TARP. Coordinate

100% of personnel complete training within 30

Verification of training certificates;

Visual inspections of with Ft. Meade Physical Security.

Meet CMMC Level 2 standards.

days; zero physical security or compliance breaches;

timely CMMC self-assessment verification.

work areas (§ 2.3.3), Fort Meade security alignment, and CMMC submission receipt.

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To Quality Control Plan (QCP) (PWS Para 2.1)

Once, prior to mobilization

1 Electronic (PDF/Word) Contracting

Officer's Representative

(COR)

CMMC Level 2 Self-Assessment Proof (PWS Para 2.3.6)

Once, prior to mobilization

1 Electronic (PDF) Contracting Officer & COR

AT Level I Training Certificates (Ref:

PWS Para 2.3.2)

Complete within 30 calendar days after start;

Submit within 7 calendar days of completion

1 Copy per employee

Electronic (PDF / JKO Export) Security Manager and COR

OPSEC Level I Training Certificates (Ref:

PWS Para 2.3.2)

Within 30 calendar days of reporting; Annuall y thereafter

1 Copy per employee

Electronic (PDF / CDSE Export) Security Manager and COR iWATCH Training Certificates (PWS Reference Para 2.3.2)

Within 30 calendar days of reporting to duty

1 Copy per employee

Electronic (PDF) Security Manager and COR

TARP Training Verification (Ref:

PWS Para 2.3.2)

Annually 1 Copy per employee

Electronic (PDF or live roster)

Security Manager and COR

Integrated Security System Installation (Ref: PWS Para 1.3,5.1)

Once, physical installation fully completed within Base Year (2026)

1 Complete System

Fully configured physical hardware, software, switches, & licenses

COR

Deliverable Frequency # of Copies Medium/Format Submit To Programmed Access Cards (Ref:

PWS Para 5.1.1)

Once, at time of system delivery

200 Cards Physical Cards COR, & Security Manager

System Training (Ref: PWS Para

1.3 (Obj 4))

Once, within Base Year (2026) prior to final acceptance

N/A (Event) Live, hands-on instruction (with sign-in sheet)

Designated Government Personnel (via COR)

System Documentation (A s builts/O&M) (Ref:

PWS Para 1.3 Obj 5, 1.6)

Once, completed within Base Year (2026)

1 Complete Set Electronic

(PDF/CAD) &

Printed Hardcopy

COR

Post-Award & Progress Meetings (Ref: PWS Para 5.2)

Minimum Quarterly, starting with the Post- Award conference

N/A (Event) In-person or Virtual (with meeting minutes)

Contracting Officer & COR