W91QVN23R0132_Attachment B-Performance Work Statement (PWS).pdf

Performance Work Statement (PWS) Installation, Configuration, Maintenance, Repair and Training Services for an Electronic Security System

(ESS) to Include Access Control System (ACS) and Closed Circuit Television System (CCTV) for Brian D. Allgood Army Community Hospital (BDAACH), USAG Humphreys and Outlying Hospital Clinics

(OHC) in Area I, III and IV

GENERAL INFORMATION

1. GENERAL: This is a non-personal service Contract to install, configure, provide maintenance, repair and training service for an ESS to include ACS and CCTV, maintain and integrate reusable existing equipment to be integrated with the new ESS for BDAACH, building P3030 & P3031, USAG Humphreys and provide support to OHC in Area I, III, and IV. Such contract service providers shall be accountable solely to the Contractor, who in turn is responsible for the Government. The Government will not exercise any supervision or control over the contract service providers’ performing the services herein.

1.1 DESCRIPTION OF SERVICE/INTRODUCTION: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to install and maintain the Integrated Electronic Security System (IESS) to BDAACH, USAG Humphreys and OHC in Area I, II, III, and IV as defined in this Performance Work Statement (PWS). The contractor shall perform to the standards in this contract.

1.2 BACKGROUND: There are exiting ESS; ACS, CCTV and Metasys® system at BDAACH which BDAACH is seeking to upgrade the ESS; ACS and CCTV systems with new equipment and to maintain quality security system by replacing current systems with a new system and integrate with the existing system. BDAACH currently has C- Cure 9000 for ACS with two (2) working stations and Bosch Video Management System (BVMS), Video Module System (VMS) with ±73 Fixed Dome Camaras, ±26 Pan Tilt Zoom Dome Cameras, and ±6 Emergency Assistance System (EAS) Pole Intercom with the existing CCTV server and Intercom Server.

1.3 OBJECTIVES: The Contractor shall install an ACS and IP-based CCTV system, in accordance with (IAW) Physical Security Regulations and Requirements covered in AR 190-13 Chapter 5-3 and 9-1(b); AR 380-5 para. 7- 15(b); and ATTP 3-39.32 Chapter 6-11. The Contractor shall install and troubleshoot associated hardware and software for ACS and CCTV, and network interfaces to ensure the capture of real-time day and night activity and record it onto an existing networked storage array via a server. No DVR Hardware can be used for recording real-time images. ACS, CCTV and all other hardware interfaces must be PoE (Power of Ethernet) capable. The Contractor must coordinate with IMD throughout the installing and maintaining to ensure cyber security requirements are met and up to date.

1.3.1. The Contractor shall procure installation and integration of ESS for BDAACH. Installation and Integration Schedule shall depict all major activities necessary to compete the work.

1.3.2. Installation and Integration Schedule shall be completed no later than 60 days. The Contractor rational, reasonable and realistic plan for competing the work, and conform to requirements specified in this clause and elsewhere in this PWS.

1.3.3. The Contractor understands and acknowledges that the preparation and proper management of Installation and Integration Schedule is a material component of the work, and that the Contract price includes all costs of compliance with Installation and Integration requirement for Base Year and maintenance and repair for 4 Option Years.

1.3.4. The Contractor shall provide end-user documentation (in English) as well as technical installation procedures and user operational manual (in English) on all equipment. Technical installation documentation must include schematic of wiring/hardware installation.

1.3.5. The Contractor shall dispose of all scrap material and other construction debris IAW Federal, Host Nation, and Local laws and regulations. The Contractor shall remove exiting ACS equipment that no longer requires at each location and return it to the COR.

1.3.6. Power Requirement. All access controllers, access readers, indoor/outdoor CCTV, and magnetic door locking mechanisms must be powered by PoE. All other installed equipment shall operate on 110V.

1.3.7. Electrical Support

1.3.7.1. Wiring – All existing and new wiring and cables shall be individually marked and identified including reusable existing wires and cable. All installed Ethernet cabling will be CAT6.

1.3.7.2. Conduit for outdoor CCTV – Rigid metal conduct (RMD) shall be steel, hot- dipped galvanized inside and outside. When tested IAW ASTM A90, zinc coating of rigid metal conduit shall be a minimum of 1.5 ounces per square foot inside and out. Electrical metallic tubing (EMT) and intermediate metal conduit (IMC) shall be steel, galvanized on the outside and protected on the inside with a suitable corrosion-resistant material. Fittings shall be watertight. Set screw and pressure cast fittings will not be permitted. Steel compression fittings will be allowed.

1.3.8. Transportation/Site Access & Security. The Contractor shall be responsible for the transportation of personnel and the materials to the work site. Access to the site and material storage shall be coordinated with COR.

1.3.9. The Contractor and all associated sub-contractor’s employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The Contractor shall also provide all information required for background check to meet installation access requirements to be accomplished be installation Provost Marshal Office, Director of Emergency Services or Security Office. The Contractor workforce must comply with all personal identity verification requirements as required by DOD, HQDA and/ or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes.

1.3.10. The Contractor shall coordinate all activities, including but not limited to site preparation, network integration, system installation, and system inspection and acceptance with the COR. The Contractor may request access to the sites prior to scheduled installation to conduct site investigations or preparations by coordinating in advance with the COR. Any pre-installation site investigations requested by the contractor shall be conducted at no additional cost to the Government and shall not delay the schedule of installations.

1.3.11. The Contractor shall submit proof of qualifications to include but not limited to experience in ACS installation. The installation shall be done be the manufacture’s certified engineers. The related certification will be submitted during the bid evaluation.

1.3.12. If defects are found in newly purchased equipment within the warranty period, the Contractor must reinstall the same standard or equivalent standard model at no cost to the Government.

1.3.13. The Contractor shall also maintain already existing equipment integrated with newly installed ESS. Such equipment will be replaced at Government expense if required.

1.3.14. The contractor shall provide preventive maintenance (PM) of the ESS which consist of all scheduled, planned and recurring maintenance of infrastructure and equipment with the goal of improving equipment life by preventing excess depreciation and impairment.

1.3.15. Specific maintenance tasks and frequencies will meet or exceed both manufacturers’ O&M recommendations and any applicable code requirements.

1.3.16. The Contractor shall develop an inspection and maintenance data sheet for each equipment item on the ESS list, to include PM schedule and checklist for Service Maintenance Report.

1.3.17. The Contractor shall provide a total of 10 ESS Administrator Training and 10 ESS Operator Training sessions to improve personnel for daily operations and Government emergency first response capability to include equipment and hands-on trainings for ACS, CCTV, and ID/Proximity card/badge system. Each training shall be 2 hours. The training will be presented by manufacturer-certified engineers.

1.3.18. The Contractor shall perform routine and Emergency Corrective Maintenance for ESS ACS and CCTV at BDAACH as required. Emergency Corrective Maintenance Service and Repair shall begin on site within two (2) hours after it is requested by the Government. Repairs should be operational within 8 hours of the service call or 4 hours upon receiving replacement parts.

1.3.18.1. If on-call service is required, the contractor shall dispatch a technician within 72 hours after notification from the time of the COR’s on-call service request. The contractor shall report to the work location, survey, perform repairs, and restore the equipment and/or system to the maximum extent practicable. If the repair is unable to be made at the time of the response, the contractor shall immediately take temporary measures to ensure safety and to minimize/prevent further damages to the systems. The Contractor shall submit a deficiency report in English to the COR within five (5) calendar days.

1.3.19. The Contractor shall provide all labor, materials, equipment, tools, transportation, supervision and other necessary items to complete corrective actions.

1.3.20. Cyber Security Compliance. The Contractor shall agree to support the IA Compliance process for the Equipment/Product. The Contractor shall coordinate with IMD POC prior to installing to identify BDAACH Cyber Security requirements and ensure that ESS complies with BDAACH Cyber Security Standards. The Contractor shall provide the direct contact channel/POC of developer level of manufacturer to IMD if required.

1.3.20.1. The vendor device or system shall pass pre-validation technical screening within 6 months of contract award in accordance with IA Compliance requirements. All technical scans will be provided by the vendor to the Government PM for review. Vendor Device and Equipment shall pass fully credentialed screening given DHA approved template. Successful pre-validation technical screening must meet the Cybersecurity criteria.

1.3.20.2. Using a vendor provided/maintained test/laboratory environment, the vendor shall ensure the IA compliance with all contracted equipment, to include 3rd party components that fall under the authorization boundary, and included in this contract, to support the DHA RMF/Cybersecurity requirements with no cost to the Government. The vendor test lab shall be used for all self-assessment activities, IV&V compliance testing, and post ATO, or RMF Approval continuous monitoring until Term of support including renewed ATO-c or as long as the system is supportable by the vendor, whichever is longer.

1.3.20.3. Supportable is defined as, serviceable by a qualified Service Engineer, or Original Equipment Manufacturer (OEM). Continuous supporting requires within every 14 days software updates/upgrades, patch management, application of DoD required security configurations (STIGS), IVAM/CVE compliance, vulnerability scanning, and remediation of discovered vulnerabilities as IMD POC requested. For each version owned by BDAACH and originally purchased through the vendor’s contract, the vendor will ensure that each component with the authorization boundary is represented in the test and support group.

1.3.20.3.1 The vender must submit a letter of agreement that it has support and access to development level support from Original Equipment Manufacturer (OEM)

1.3.20.3.2. The vender must submit a certification of approved laboratory from the government to prove the vender as approved laboratory.

1.3.20.4. Software patches and updates: Automate patch updates and software updates for operating systems and IA standard software applications. For applicants such as databases and developed applications, updates are scheduled. Vendors shall notify the assigned IMD Cybersecurity Analyst of any updates/changes to the system, or Application updates, patches, addition/removal of components. Software updates will be analyzed by the Government to determine if reauthorization is required by Department of Defense Instruction (DoDI) 8510.01 Risk Framework (RMF) for DoD Information Technology (IT). Patches m=normally address bug fixes and cybersecurity issues.

1.3.21. Equipment Requirements

1.3.21.1. General

• The ACS shall be of open-architecture, PC-based system based on latest and the most secure Windows Operating System, such as Windows 10 and Windows Server 2022.

• Equipment made in China cannot be used.

• The ACS shall be of modular design providing the flexibility to allow the user to add or remove any components and/or controlled functions or in the event when operating requirements change or as system expands.

• The ACS shall support up to eight (8) different Wiegand card formats simultaneously. The number of formats supported shall be unlimited.

• The ACS shall be designed such that local failures do not entail the failure of the whole system. Local access controllers shall continue to operate even if the network connection to the management software fails.

• The ACS system server shall be provided and structured based on centralized server architecture.

• Communication between access controllers and central server shall be encrypted using minimum AES 256-bit encryption with custom keys and a protocol from the TLS 1.2 shall be used. It shall be possible to set individually customized encryption keys for every access controller to allow highest possible security.

• The ACS can be shared with up to 400 tenants (divisions). Every tenant has access to only his own data.

• All alarms processing, logging, operator’s response, data entry/input, graphical user interface and other system operations and management functions shall be performed at the ACS workstation connected to the ACS network. The operation system shall be a current version of Windows 10 or Windows Server 2022.

• The ACS shall have a multi-level priority interrupt structure proven in multi-tasking and multi-client real time applications. Simultaneous alarms/events monitoring by multiple users, system supervision and history archiving shall be possible without degradation of any functionality specified for system or operation.

• The ACS shall have a modular structure that allow for future system expansion to the local clinics located in other cities with minimum cost and disruption to the existing operational system.

• The ACS shall be integrated with the existing card reader HID Access Control Unit (Aero and Mercury).

• The ACS shall be integrated with the exiting HID FARGO hdp500 Card Printers.

• 2x ACS Working Stations and 1x CCTV Monitor Station

• The Contractor shall provide a quality of switch board to support CCTV rewiring.

• SMA (Software Maintenance Agreement)

- SMA is for software assurance. It will include the comprehensive technical support, patches and hotfixes by the manufacturer, product upgrades let the system evolve the stat-of-art technology and date security improvements.

- The Contractor shall provide this service for the ACS as well as the existing CCTV system during the contract period including option years.

- An official letter issued by the manufacturer stating that the service will be supported through the contractor will be submitted.

• The ACS shall be integrated with the existing Bosch CCTV System to include Control Server (Bosch Video Management System) and Recording Server (Video Recording Manager)

• Spare Parts: The Contractor shall provide the spare parts for commissioning and 5 years maintenance. The list of spare parts shall be submitted, and its quantity will be at least 10% of the total amount of field hardware equipment – access modular controller and modular controller extension module.

1.3.21.2. Access Control Software – QTY: 1

1.3.21.2.1. The Access Control System (ACS) Applications Software (AS) proposed shall be proven to be robust network secured and reliable prior to being supplied, installed tested and commissioned. It shall be user friendly and provide prompting to assist operators who are not familiar with the system.

1.3.21.2.2. The Contractor shall supply both the hardware and the necessary software licenses to provide all required functionalities.

1.3.21.2.3. The ACS AS shall be fully integrated with the existing and newly installed CCTV cameras/Video Management System without any extra software or license.

1.3.21.2.4. The ACS AS shall be capable to support to the following:

• Number of active cardholders - up to 400,000

• Number of readers - up to 10,000

• Number of access groups - up to 255

• Number of time schedules - up to 255

• 4-8 digits programmable (Personal Identification Number) PIN codes

• Remote Online Locks - up to 1,000

• OSS-SO compatible Offline Locks - up to 2,000

• Map viewer floor plans - up to 100

1.3.21.2.5. The software shall also allow the programming of individual operator’s permissions.

• Permission regarding personal data shall be configurable to the following:

- Read only

- Read, write, change, and delete

- Change the current location of persons

- Change the access authorizations of persons

• Permission regarding event log messages shall be configurable to the following:

- View own messages

- View all messages without personal data

- View all messages

• Special permission for the configuration dialog

• Special permission for door management

1.3.21.2.6 The ACS AS shall provide a simple way for the system administrator to configure entrances selecting from a list of pre-defined door models. The following list of door models shall be provided by the system:

• Door with entry and exit reader

• Door with entry reader and request to exit button

• Door with time & attendance readers

• Door with reversible turnstile or entrance or exit

• Parking Lot for entrance or exit

• Vehicle boom barrier and rolling gate

• Mantrap

• Door with IDS arming/disarming

• Independent output signals

1.3.21.2.7. Selecting a pre-defined door model shall automatically assigned the corresponding reader.

1.3.21.2.8. Cardholder Enrollment:

• The ACS AS shall provide an easy way of entering cardholders into the database. In addition to basic data, such as first name, last name, badge number and access authorizations, the following information shall be possible, but not limited:

• PIN codes (IDS, Access, Identification)

• Validity period

• Status fields, such as employee, visitor, guard

• Address fields

• Personal data

• Individual fields can be added, deleted or edited by administrator

• Individual fields ca be edited to different data types like text, number, date, time, checkbox, and combo-box

• Individual text fields can contain up to 200 characters

• Individual fields can have editable labels with up to 20 characters

1.3.21.2.9. Card Holder Images

• It shall be a standard feature provided in the ACS management software for taking photos, scanning, or importing cardholder images into the cardholder database. Such that stored cardholder’s image can be displayed automatically on the ACS workstation during access monitoring or for video verification purposes.

1.3.21.2.10. Import and Export of Cardholder Master Records

• The ACS AS shall provide a web-based import and export interface to import cardholder master records from a separate database during installation, or to export the master records for further use by another application.

• The interface shall support at least commonly used comma-separated and fixed field-length file formats for easy adaptation by applications when import or export.

• The interface shall support LDAP for importing cardholder data from Microsoft Active Directory servers.

1.3.21.2.11. Area-Time Authorizations:

• The ACS shall allow the linking of access authorizations with time models. The assigned time models govern the periods where an access authorization is active at an entrance or entrance group.

1.3.21.2.12. Time Models, Day Models, and Special Days

• The ACS AS provided shall allow for the creation of time models for any specific day within the day models.

Configuration for Special days, such as local public holidays, shall also be supported. Time models provide a simple way of defining periodically recurring day models. The time model can activate and deactivate access authorizations at entrances and entrance groups.

1.3.21.2.13. Defining Areas of control: The ACS shall provide the ability to define and manage arbitrary logical area within the premises. These could be single rooms, groups of rooms, entire floors, or parking areas.

1.3.21.2.14. Access Sequence checking: There shall be an access sequence check provided, allowing authorized cardholders to enter an area only when they have swiped their card at the neighboring area.

1.3.21.2.15. Dual or Multiple Authorized Access: The ACS AS shall provide the possibility to permit access only when two or more authorized cardholders present their badges consecutively at the card reader.

1.3.21.2.16. PIN Codes: The ACS AS shall support the input of three kinds of PIN codes for each cardholder. The length of the PIN code (4 or 8 digits) is defined once in the system. the definition of validity periods for the PINs must be supported.

• Verification PIN – This will be requested after presentation of card at an entrance, as an additional security measure.

• Arming PIN – to arm the alarm system.

• A fourth variety of PIN, the Door-PIN, can be assigned separately to individual doors. This code must be known to anyone using the door.

1.3.21.2.17. Blocking Cardholders: The ACS AS shall allow the blocking of cardholders, for example after a defined validity period.

1.3.21.2.18. Visitor Management:

• Administration of visitors shall be provided by the ACS management software in the same database.

The visitor management shall allow the printing of a visitor badge from this data.

• The following information should be assignable to a visitor:

- Identification number

- Access authorizations

1.3.21.2.19. Guard Tour Management and Patrols:

• Up to 200 guard tours can be planed and scheduled in advance

• Up to 8 simultaneous patrols can be monitored and tracked Threat Level Management and planed

• A Route (or Tour) is a predefined sequence of readers that can be prescribed for persons to direct their movements within the premises, regardless of person’s authorizations.

• Typical uses are to enforce strict access sequences in industrial clean environments, hygienically controlled, or high-security areas.

1.3.21.2.20. Threat Level Management

• At least 15 different threat levels can be pre-configured for instant activation in case of emergency.

• A threat level is activated by a threat alert. A threat alert can be triggered in one of the following ways:

- By a command in the software user interface

- By an input signal defined on a local access controller, for instance form a push button or a fire panel.

- By swiping an alert card at a reader.

- Threat alerts can be cancelled by the UI command or hardware signal, but not by alert card.

1.3.21.2.21. ACS AS shall be able to operate on a Microsoft Operating system without any special hardware requirements:

• CCTV Camera integrated

• Biometric integrated

• Multi monitoring

• Web based monitoring

• Unlimited number of access level

1.3.21.2.22. ACS AS shall provide remote management of all installed access controllers and indoor/outdoor cameras over the network using IP address in BDAACH, OHC in Areas I, II, III and IV.

1.3.21.3. Map Viewer – QTY: 1

1.3.21.3.1. The system shall contain a map viewer. This map viewer shall provide a graphical presentation of the premises by means of floor plans, pictures, or any desired graphical representation.

1.3.21.3.2. May Viewer shall have two basic modes: one for viewing and one for editing. The map structure is shown in a map tree at the left side of the active map. The tree allows jumping multiple layers by selecting the target map in the tree directly.

1.3.21.3.3. The Map Viewer shall have navigation buttons, a refresh button, and a home button. On the map entrances and devices like MAC, access door controller, readers and digital input/outputs can be positioned as a dynamic icon. These graphical icons will display the location of the device in the map and the actual status of the device. Every icon can be displayed in several sizes, angle and color and background color. Clicking any of the devices automatically shows the commands available for controlling the respective device. Control commands are automatically linked based on device type.

1.3.21.3.4. Depending on their authorization, operators can cold start or warm start main access controllers and access modular controllers, enable and disable different access codes, grant access, block or unblock doors and readers, set and clear digital outputs.

1.3.21.3.5. An application menu shall offer icons to show a device tree, an area overview or an alarm list.

1.3.21.3.6. The device tree shall be able to show server, main access controllers, access modular controllers, entrances, readers, turnstiles, assembly points (muster points), parking areas, boom barriers, elevators, remote online locks and digital inputs and outputs.

1.3.21.3.7. An area overview shall be able to show names, type (e.g., parking), current count, maximum count and state (e.g., empty, full).

1.3.21.3.8. The alarm list shall coordinate multiple operators working concurrently, ensuring for instance that the handling of an alarm is reserved for the operator who first accepts it.

1.3.21.3.9. In case of alarms, the map will automatically focus on the alarm location. The device that triggered the alarm will show alarm status on the map and play a sound that can be configured for individual event groups.

1.3.21.3.10 The alarm shall appear in the alarm list dialog as an alarm event. Alarm events in the alarm shall list require an acknowledgement by the operator before they can be handled (including deletion).

1.3.21.3.11. Access Control Management Alarms and Events

• The ACS AS shall provide a wide range of standard events. The following events, but not limited to, shall be supported: Card unknown

- Card not authorized

- Card outside time profile

- Card anti-pass back

- Access timeout

- Door open time exceeded

- Door opened unauthorized

- Door blocked

- Tamper alarm controlled

- Tamper alarm reader

- PIN code error

- Duress alarm code

- Access denied

- Wrong card version

- Card blocked

- Card blacklisted

- Card our route

- Guard tour alarms

- Random screening

- Other individual alarm extensions like intrusion alarms and video alarms (e.g., motions)

1.3.21.3.12. All alarm/evets must be logged in the central ACS event log files together with all assigned alarm documents for a complete reporting.

1.3.21.3.13. The ACS AS provided shall have support for central alarm monitoring and management. It shall provide a graphical user interface (GUI).

1.3.21.3.14. The ACS AS shall provide practicable the central configuration platform or tool from where everything concerning system behavior, such as access control cardholder settings, display features, and authorizations are set up.

1.3.21.3.15. The ACS AS shall securely log all events, alarm activations and operator’s actions/responses into the alarm/events log files, so to prevent after-the-fact changes, and to protect data from any manipulation.

1.3.21.3.16. The events log files shall include an advanced filter functions such that archive can be kept small and precise. If required, only desired information shall be archived.

1.3.21.4. Access Control System Integrated Security Management Server System – QTY: 1 LOT (includes following)

• ACS Working Station – QTY: 2 EA

• DB Server License – QTY: 1 LOT

• CCTY License under 300 EA – 1 LOT

• Reader License – QTY 400 EA

1.3.21.4.1. The server system shall fulfil at least the following requirements:

• Support operating systems:

o Windows Server 2022 (64-bit, Standard, Datacenter) o Ensure that the latest software updates are installed. Must coordinate with IMD prior to installation.

• Minimum hardware requirements o Intel Xeon 5220 o 32GB RAM o 500GB of free hard disk space o 2x 240GB M.2 SSD o Graphics adapter with

- 256 MB RAM 4GB

- A resolution of 1280x1024

- At least 32K colors o 1Gbit/s Ethernet card o Free USB port or network share for installation files o USB keyboard and Mouse

1.3.21.5. Access Door Controller - QTY: shall provide a quantity to support the existing 390 doors.

• ACS Control Unit – QTY: 32 EA

• Door Interface Module – QTY: 192 EA

• Input Interface Module – QTY: 36 EA

• Output Interface Module – QTY: 36 EA

• Power Supply – DC 12V 6A (CE, KCC) – POWERBANK BK 75S 12VCD – QTY 96 EA

• Uninterruptable Power Supply Battery – ROCKET ES7-12

• Network Switch – CISCO, SF52-08P-K9-EU (8port) - QTY: 32 EA

• POE Network Switch – CISCO, SG220-26P (24 Port, 2SFP) – QTY 32 EA

• F/O GB – CISCO, MGBH1, 1GB – QTY 64 EA

• FDF-RACK-LC – QTY 32 EA

1.3.21.5.1. OSDP Protocol

1.3.21.5.2. Supports up to 520 inputs and 516 outputs

1.3.21.5.3. Controller/IO expansion connection protected by AES

1.3.21.5.4. Security and Network: FIPS 140-2 user of Open SSL

1.3.21.5.5. Compliance: UL 294 Recognized, FCC Part 15 Class, NIST Certified Encryption

1.3.21.5.6. The access door controller provided shall be of modular design with a download software built-in so that the application program can be easily changed and downloaded without the physically touching the controller itself.

1.3.21.5.7. The connection from the access modular controller to the access modular controller server running the management software shall preferably by Ethernet 100Base T.

1.3.21.5.8. The access door controller shall support and include a standard compact flash memory card for storing cardholder data and access events. The compact flash memory card must be formatted with a standard File Allocation Table (FAT) file system, to allow reading them using a standard card reader connected to a computer, if the access modular controller fails.

1.3.21.5.9. The access door controller memory shall under no circumstance lose a single transaction, not even the last transaction when power fails.

1.3.21.5.10. The access door controller and all devices connected to it shall continue to operate and control access in off-line mode, even if the computer network fails.

1.3.21.5.11. The access door controller memory shall store database that has a capacity with a minimum of

400.000 cardholders, each having a programmable 4-8 digits (Personal Identification Number) PIN codes.

1.3.21.5.12. The cardholder database shall be upgradeable by exchanging the compact flash card. The system shall automatically detect the size of the compact flash card.

1.3.21.5.13. The access door controller provided shall support the connectivity of up to maximum of 4 standard Wiegand interface readers or 8 serial interface readers operation of RS485 bus technology.

1.3.21.5.14. The access door controller provided shall support multiple card formats.

1.3.21.5.15. The access door controller shall provide minimum 8 programmable I/Os on board, and shall be expandable to 32 each, using I/O extensions.

1.3.21.5.16. All inputs provided shall be configurable to provide 2 or 4 statuses selectable, via End-Of-Line (EOL) resistors, namely:

• Input Closed

• Input Opened

• Input Shorted (provided in 4 status mode)

• Input Tamper (Cable cut, provided in 4 status mode)

1.3.21.5.17. EOL resistor’s values shall be flexibly selectable in the Access Control System management software during configuration.

1.3.21.5.18. The access door controller and all devices connected to it shall continue to operate and control access in off-line mode if there is a failure with the computer network.

1.3.21.5.19. The access door controller shall support standard compact flash memory card for storing cardholder date and access events. The compact memory card must be formatted with a connected to a computer if the access modular controller fails.

1.3.21.5.20. The access door controller Firmware shall be updateable through the Host System via download.

1.3.21.5.21. The access door controller memory shall under no circumstance lose a single transaction, not even the last transaction when power fails.

1.3.21.5.22. Uninterruptible power supply shall be provided to continually supply power to the Access Control Hardware and readers for a minimum of 2 hours in the event of power failure.

1.3.21.5.23. The access door controller shall generate a transaction record and save them in its memory for every alarm, they include:

• Time/date of occurrence and restoration

• Location of alarm sensors

1.3.21.6. Access door Controller Extension Module – QTY: shall provide a quantity to support the existing 390 doors. The extension module is equipped with four Wiegand type reader-interfaces plus 8 inputs and 8 outputs.

Hence with this, it is possible to double the number of readers on an Access Modular controller from 4 to 8.

1.3.21.7. ACS Card (badges) – QTY: minimum 2,000

The ACS card shall be the same type as the existing one which uses iCLASS read/write contactless smart card technology. It will meet strict ISO thickness standards for use with the existing card printers.

1.3.21.8. CCTV and Intercom Requirements

1.3.21.8.1. The Contractor shall install additional 5 indoor Fixed Dome cameras and 4 outdoor PTZ Dome cameras inside and outside the BDAACH. BDAACH will provide such cameras. (See attached enclosure 1 for detail.

1.3.21.8.1.1. The CCTV cameras shall be activated and manages by the existing VMS without any limitation, not to require any additional hardware, software, or license when replaced. The Contractor shall provide the license and service for each camera.

1.3.21.8.2. There are ±16 inoperable CCTV and 6 EAS 2 barriers at BDAACH to include overlapping, no connection and blurred. (See attached enclosure 2 for detail.)

1.3.21.8.3. The CCTV Camera will be connected through Ethernet cable to a PoE network switch. The connection interface shall be RJ45.

1.3.21.8.4. The CCTV cameras shall provide continuous surveillance of designated location (over the existing LAN network) by manual command and/or automated selection. The Contractor must consult and coordinate with IMD prior to start installing CCTV cameras.

1.3.21.8.5. The Contractor shall provide the maintenance services to all existing intercoms throughout BDAACH to include 6x attached to EAS and 2x attached Active Barriers. (See attached enclosure 2 for detail.)

1.3.22. Installation Instruction by Location

1.3.22.1. Location: Camp Humphreys, BLDG P3030 and P3031

1.3.22.2. Diagrams are attached for the location of all components. (See attached enclosure 1)

1.3.23. Warranty:

1.3.23.1. The Contractor shall provide one (1) Year warranty (including parts and labor) for all equipment installed. The warranty will be one year from the date of the system acceptance by the Government.

1.3.23.2. For any malfunctions, the Contractor shall be on-site within 2 hours and ensure the system is fully operational within 48 hours. The Contractor shall provide name and phone number to report problems, or malfunctions.

1.3.23.3. The Contractor shall provide all software upgrades in “English” throughout the warranty period at no additional coast to the Government.

1.3.24. Contractor Personnel:

1.3.24.1. All Contractor employees will be escorted by government personnel.

1.3.24.2. The Contractor shall ensure that its employees entering Army-controlled installations or facilities have obtained access badges and passes IAW facility regulations as required.

1.3.25. Delivery and final installation:

1.3.25.1. All work cited in this PWS shall be completed no later than sixty (60) days after contract award.

Detailed installation schedule, priority, and acceptance testing will be discussed during post award meeting. A maximum of four (4) days per location shall be allowed for installation of equipment to include testing and acceptance.

1.3.25.2. Acceptance testing will be conducted during final inspection and minimum include the following:

• Verification that ACS Server is properly operating IAW the PWS guidance

• Verification with IMD that ESS complies with BDAACH Cyber Security requirements

• Verification that access door controller and access door controller extension modules function IAW this PWS without any failure

• Verification that Access Control Management Alarms perform properly

• Verification that cards/badges are capable of performing ACS requirements

• Verification that videos from each camera are being captured 24/7

• Verification that all cameras are aimed and focused properly

• Verification that the access controls are working properly

• Verification that all access control activities are properly recorded for future auditing

• Verification that each access control can be remotely managed (open/lock)

• Verification of single-motion exit capability for access controls in each communications closet

1.3.26. Other References:

• American National Standards Institute (ANSI)/Electronic Industries Association (EIA)

• Installation Information Infrastructure Architecture (I3A) Implementation Guide, dated: July 2008

1.3.27. Other Project Support

1.3.27.1. Damage: The Contractor shall repair and/or replace all equipment damaged during the course of work. All area affected shall be restored to their original condition.

1.3.27.2. Safety: The Contractor shall comply with Occupational Safety and Health Administration (OSHA) Standards 29 CFR 1910 & 1926 and Corps of Engineer Safety and Health Manual EM 385-1-1

1.4 SCOPE: This requirement is to provide an ESS installation for BDAACH and provide comprehensive preventive and corrective maintenance on the entire ESS to include ACS and CCTV system in BLDG P3030 and P3031 and to provide scheduled training on the ESS The Contract only convers work from the Government furnished switch hub to installed head end building, to support OHC in Areas I, III and IV throughout Republic of Korea. IP address assignment, update to existing Risk Management Framework (RMF) Authorization to Operate (ATO), and the network infrastructure work between buildings and installations are responsibility of BDAACH.

The Contractor shall plan, procure, and provide all necessary materials for Installation, Integration, Repair, Maintenance and Trainings as described int this PWS. The contractor shall provide a complete statement of work (SOW) that meets the requirements of the PWS and attachments, to include all equipment materials, documents and labor.

1.5 PERIOD OF PERFORMANCE (PoP): The period of performance shall be for one

(1) Base Year of 12 months and four (4) 12 months option years. The period of Performance reads as follows:

Base Years 30 September 2023 – 29 September 2024 Option Year I 30 September 2024 – 29 September 2025 Option Year II 30 September 2025 – 29 September 2026 Option Year III 30 September 2026 – 29 September 2027 Option Year IV 30 September 2027 – 29 September 2028

The Government reserves the right to extend the term of this Contract at the prices set forth in Section B in accordance with the terms and conditions contained in clause 52.217-9 entitled, “Option to Extend the Term of the Contract”.

1.6 GENERAL INFORMATION

1.6.1. QUALITY ASSURANCE: The Government shall evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government will do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). The Government will conduct QA inspections on all phases and types of work performed. The government reserves the rights to perform QA inspections at any time.

1.6.2. HOURS OF OPERATION/PLACE OF PERFORMACE: The Contractor shall be responsible for conducting service and maintenance between the hours of 0800 to 1700, Monday through Friday except holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings at BDAACH, USAG Humphreys. The Contractor shall at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this statement of work when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential. The Contractor is not required to conduct maintenance during the following holiday periods, except on an emergency by USFK are as below:

New Year’s Day – January 2 Martin Luther King Jr’s Birthday – January 16 President’s Day – February 20 Memorial Day – May 29

Juneteenth Day – June 29 Independence Day- July 4 Labor Day – September 4 Columbus Day – October 9 Veteran’s Day – November 10 Thanksgiving Day – November 23 Christmas Day – December 25

1.6.2.1. Installation Closures: When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor shall:

• Reschedule the work to be performed the following day unless the following day is a Saturday, Sunday, a legal public holiday, and when routine work is not scheduled for that day; or

• Reschedule the work on any day mutually satisfactory.

1.6.2.2. Inclement Weather Delay: If the Contractor determines unsafe weather conditions for continued operations, then the Contractor shall notify the COR if inclement weather suspends operations within (2) hours. The Contractor shall resume operations with COR approval.

1.6.3. QUALITY CONTROL PLAN (QCP): The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS.

1.6.3.1 The Contractor shall develop and maintain an effective QCP to ensure services are performed in accordance with this PWS and applicable documents listed in paragraph 6. The Contractor shall develop and implement procedures to install, identify, prevent, and ensure non-recurrence of deficiencies. The Contractor’s QCP is the means by which the Contractor assures that the work complies with the requirement of the contract.

1.6.3.2. At a minimum, the Contractor shall develop QCP addressing the following details:

• Description of the Contractor’s ESS installing schedule plan.

• Description of the Contractor’s inspection system to include specifics as to area to be inspected on a scheduled and unscheduled basis

• Frequency of inspections

• Title and organizational placement of the Contractor’s Inspections

1.6.3.3. An electronic copy of a comprehensive written QCP shall be submitted to the Contracting Officer (KO) and the Contracting Officer Representative (COR) within 14 calendar days after contract award and 5 working days when changes are made thereafter. After acceptance of the QCP the Contractor shall receive the COR’s acceptance in writing of any proposed changed to the QCP.

1.6.3.4. The contractor shall keep records of inspection and make them available to the Government throughout the Contact performance period and for the period after Contract completion until final settlement of any claims under this Contract. The Contractor shall collect data, perform self-evaluation and document performance against standards associated with each specific requirement. The contractor shall address all tasks in the PWS based on the example below.

Objective (Contract Requirement)

Performance Standard (What level of performance is required to meet the performance objective or tasks?)

Acceptable Quality Level (AQL) or Performance Threshold

What/Data Source (What is the Contractor going to inspect?)

Calculation (How will the Contractor determine if the AQL and standard are being achieved?

This information comes from the contract requirement in the

PWS

This information comes from the PWS

This information comes from the PWS

Contractor shall submit

Contractor shall submit

1.6.3.5 The QCP and other related documents shall be maintained by the Contractor. The documents shall be readily available to the Government at any time during the term of the Contact.

1.6.4. GOVERNMENT REMEDIES: The Contracting Officer shall follow FAR 52.212-4, “Contract Terms and Conditions-Commercial Items” or 52.246-4, “Inspection of Services-Fixed Price” for Contractor’s failure to perform satisfactory services or failure to correct non-conforming services.

1.6.5. SECURITY REQUIREMENTS: The Contractor personnel performing does not require classified clearance to perform work under this contract.

1.6.6. PHYSICAL SECURITY: The contractor shall be responsible for safeguarding all Government equipment, information and property provided for contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured.

1.6.6.1. Key Control. The Contractor shall establish and implement methods of making sure all keys and key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.6.2. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor at the KO’s discretion. In the event a master key is lost or duplicated, all locks and keys for that system will be replaced by the Government and the total cost deducted from the monthly payment due the Contractor at the KO’s discretion.

1.6.6.3. The Contractor shall prohibit the use of Government issued keys and key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.6.4. Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7. POST AWARD CONFERENCE/PERIODIC PORGRESS MEETINGS: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. The appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.8 CONTRACTING OFFICER REPRESENTATIVE (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.9. CONTRACTOR QUALIFICATION:

1.6.9.1. Prime Contractor’s Business Registration Certificate. The Prime Contractor shall possess current and valid business registration certificate for “Information and Communication Construction Business”, or Electrical Work issued by ROK Government

1.6.9.2. KEY PERSONNEL. The following personnel are considered key personnel by the Government:

1.6.9.2.1. Contract Manager (CM): The Contractor shall provide a CM who shall be responsible for the performance of the work. The name of this person who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The CM shall be available within two

(2) hours during normal duty hours (0800 – 1700), Monday thru Friday except Federal holidays…