02_140P8623Q0072_Statement_of_Work.pdf

RFQ No. 140P8623Q0072 - NPS Parking Fee Management Services – Statement of Work

Statement of Work Golden Gate National Recreation Area

Parking Fee Management Services: Golden Gate Bridge Area 2023-2028

Table of Contents

1.0 INTRODUCTION

1.1 Background

1.2 Objectives

1.3 Reference to Other Applicable Documents

2.0 SCOPE OF WORK

2.1 Parking Fee Management Services (CLIN 1, Options 2 & 4))

2.2 Automated Fee Machines (AFMs) (CLIN 2, Option 1 & 3)

2.2.1 General

2.2.2 Equipment Upgrade and Installation (CLIN 2)

2.2.3 New Equipment and Installation (Options 1 & 3)

2.3 Information Technology Requirements

2.4 Banking Requirements

2.5 Accessibility Requirements

2.6 Parking Area Improvements

2.7 Parking Fees and Schedule

2.8 Transfer of Funds

2.9 Reports and Audits

3.0 PERFORMANCE STANDARDS

3.1 Automated Fee Machines (AFMs)

3.2 Mobile Payment Platforms

4.0 TIMELINE AND PERIOD OF PERFORMANCE

5.0 APPENDICES

Appendix A: List of applicable Laws, Regulations, Policies, and Guidelines

Appendix B: Parking Fees and Hours Of Operation

Appendix C: Schedule of Existing AFMs and Representative AFM Photo

Appendix D: Overview Map of In-Scope Parking Areas

Appendix E: Battery East Parking Area - Aerial View

Appendix F: West Bluff Parking Area - Aerial View

Appendix G: Northwest Trailhead Parking Area - Aerial View

Appendix H: Merchant Road Parking Area - Aerial View

Appendix J: Langdon Court Parking Area - Aerial View

1.0 INTRODUCTION

1.1 Background

In 2012, the National Park Service (NPS) authorized the Golden Gate National Recreation Area (GGNRA), a unit of NPS, to collect parking fees at Battery East (77 spaces) and West Bluff parking areas (159 spaces) located in the GGNRA-managed Presidio Area A in San Francisco, CA. Since then, GGNRA has collected fees in both parking areas through a competitive third-party fee management contract. In 2021, NPS authorized GGNRA to collect parking fees at Northwest Trailhead (46 spaces, formerly known as Northwest Commuter or Dillingham), Langdon Court (65 spaces), and Merchant Road (74 spaces) parking areas. The Langdon Court and Merchant Road parking areas are in Presidio Area A in San Francisco, CA while the Northwest Trailhead parking area is north of the Golden Gate Bridge in Sausalito, CA. Parking fee collection has yet to be implemented at these 3 parking areas approved for fee collection in 2021.

Authorization to charge parking fees in all 5 of the above-mentioned parking areas was granted under the authority of the Federal Lands and Recreation Enhancement Act (FLREA) following a public information and outreach process. All parking fees were proposed by GGNRA and approved by NPS to achieve consistency with fees charged in surrounding parking areas, including Presidio Area B in San Francisco, CA which is managed by the Presidio Trust. GGNRA’s goal is to impose parking fees only to the extent necessary to protect parking access for park visitors in these highly visited areas.

GGNRA intends to continue collecting parking fees at Battery East and West Bluff parking areas and implement parking fees at Northwest Trailhead parking area in 2023. GGNRA may also implement parking fees at Langdon Court and Merchant Road parking areas in subsequent years subject to completion of planned site improvements and other management considerations (see Option Items 1-4).

Definitions of Line Items:

CLIN 1 - Parking Fee Management Services at Battery East (77 spaces, every day); West Bluff (159 spaces, every day); and Northwest Trailhead (46 spaces, every day)

CLIN 2 - Automated Fee Machine (AFM) Equipment Upgrade and Install at Battery East, West Bluff, and Northwest Trailhead

CLIN 3 - Parking Area Improvement: Northwest Trailhead Wheel Stops

Option 1 - AFM New Equipment and Install at Merchant Rd

Option 2 - Parking Fee Management Services at Merchant Rd (74 spaces, every day)

Option 3 - AFM New Equipment and Install at Langdon Ct

Option 4 - Parking Fee Management Services at Langdon Ct (65 spaces, every day)

1.2 Objectives

The purpose of this contract is to provide labor, material, equipment, supplies, and supervision necessary for parking fee management at the required locations, including but not limited to advisory support; fee collection and remittance of funds to GGNRA; installation and maintenance of user-friendly, appropriately placed, accessible, and reliable fee collection equipment; and PCI DSS compliant equipment and processes for visitors who park and pay fees with credit cards or mobile platforms.

1.3 Reference to Other Applicable Documents

• Federal Lands and Recreation Enhancement Act (FLREA)

• Section 508 of the Rehabilitation Act

• Americans with Disabilities Act (ADA) Accessibility Standards

• Architectural Barriers Act (ABA) Accessibility Standards

• Payment Card Industry Data Security Standards (PCI DSS)

• National Environmental Policy Act (NEPA)

• Federal Information Security Management Act (FISMA)

• Office of Management and Budget (OMB) Circular A-123 Management Responsibility for Internal Control

2.0 SCOPE OF WORK

2.1 Parking Fee Management Services (CLIN 1, Options 2 & 4)

The Contractor shall provide all labor, material, equipment, supplies, and supervision necessary and shall plan, schedule, coordinate and assure effective and cost-efficient delivery of all parking fee management services, as described herein.

The Contractor shall be responsible for the collection of all parking fees at the designated NPS parking areas within scope of this contract and the maintenance of associated fee collection equipment including automated fee machines (AFMs). Parking fees shall be collected on a pay-by-plate basis whether through AFMs or mobile platforms.

Credit card transactions shall be batched and settled directly into the NPS designated payment processor on a daily basis. All credit card batch settlement transactions shall be processed according to Payment Card Industry Data Security Standards (PCI DSS).

The Contractor shall provide mobile payment options including but not limited to pay-by-text, QR codes linked to payment sites and posted on equipment and parking area signage, tap-to-pay via Apple Pay, Google Pay, and other commonly used mobile payment platforms.

NPS is not seeking any cash or coin collection capabilities for parking fees within the scope of this contract.

The Contractor shall be responsible for furnishing all visitor instruction signs involving machine and mobile platform operations, signage for pricing, and signage in case of equipment malfunction. The Contractor shall update signage and reprogram AFMs anytime there is a change in parking fees or schedule of operation.

At least daily, the Contractor shall remotely monitor mobile payment platforms and AFMs to ensure the platforms and equipment are operating properly. Contractor shall be responsible for immediately repairing any AFM that is not functioning properly. Service repairs must be completed within twenty-four (24) hours from notice to the contractor of a malfunctioning machine. Contractor is responsible for notifying NPS of any malfunction or service delay as they occur. Contractor is responsible for providing notice to NPS once service is restored.

Contractor representatives performing on-site tasks shall have uniforms, official identification and name badges identifying their organization. The Contractor shall be required to furnish uniforms, identification, and name tags at the Contractor’s expense.

2.2 Automated Fee Machines (AFMs) (CLIN 2, Option 1 & 3)

2.2.1 General

The Contractor shall furnish, install, upgrade, and maintain all pay-by-plate fee collection machines required under this contract. These machines are referred to as automated fee machines (AFMs), which typically function by solar power and are capable of wirelessly connecting to IT networks. NPS requires all AFMs to be capable of accepting credit card payments via both magnetic swipe and EMV chip readers. The Contractor shall keep AFMs in good working order, including routine maintenance such as cleaning, refilling paper, replacing batteries, and replacing other incidental parts.

All AFMs shall meet the following requirements:

• AFMs shall accept debit cards, credit cards, and tap-to-pay mobile payment platforms. All Treasury-designated credit cards shall be accepted including Visa, MasterCard, American Express, Discover, Diner’s Club, JCB, and China Union Pay. No bills or coins are to be accepted.

• AFMs shall have a screen with visual prompts displaying rates.

• The display screen shall be user friendly, easily read from different angles and under varying lighting conditions, and resistant to extreme weather conditions.

• AFMs shall be capable of printing a receipt for patron to display on dashboard of vehicle. Receipts shall be printed on durable, weather-resistant paper stock that is impervious to fading. The printed receipt shall include the following information: unique machine identifier; date and time of transaction; unique transaction identification number; purchase total; date and time of entry; date and time of expiration;

type of tender paid (coins or credit card); and park specific header including park name and location where receipt is purchased.

• AFMs shall be accessible by NPS personnel at any time for audit purposes with the assistance from Contractor.

• AFMs shall provide instructions in English, Spanish (Español), Chinese (中文), French (Français), German (Deutsch).

• AFMs shall use a PCI compliant payment application to process credit card transactions for payment.

AFM software must communicate with the payment application used for processing credit card payments and must be certified with the Treasury-designated payment processor (currently WorldPay). This application and version must appear on PCI’s Validated Payment Application list:

https://listings.pcisecuritystandards.org/assessors_and_solutions/payment_applications

• AFMs shall be solar powered and capable of wirelessly connecting to a network. No electricity or data connections will be provided by the NPS.

• All credit card batch settlement transactions shall be processed according to Payment Card Industry Data Security Standards (PCI DSS).

• All AFMs shall include an EMV chip card reader to comply with the US Treasury's directive mandated through Executive Order 13681 (EO) – Improving the Security of Consumer Financial Transactions, dated October 17, 2014: https://obamawhitehouse.archives.gov/the- press-office/2014/10/17/executive-order-improving-security-consumer-financial-transactions

The Contractor shall furnish and maintain control of the supply of fee receipts or other ticket / fare media. For each parking area, the Contractor shall maintain a daily receipt / ticket log showing the beginning and ending serial numbers of receipts / tickets in supply and number sequences for all fee collection equipment. The starting and ending numbers shall correspond with those shown in the AFM.

2.2.2 Equipment Upgrade and Installation (CLIN 2)

In the Base Year, the Contractor will be required to furnish and install equipment upgrades for five (5) of the park’s existing AFMs. Contractor will furnish and install brand new (not reconditioned or remanufactured) electronic AFM equipment while reusing existing foundations and primary housing or cabinet. New equipment will meet all the requirements of this contract and must be compatible with mobile payment technology.

Contractor shall provide all equipment, parts, labor, supplies, materials, supervision, insurance, subcontractors, and any other costs necessary to complete such equipment upgrades.

There are currently eight (8) AFMs installed in the West Bluff (5) and Battery East (3) parking areas all of which are government property owned by NPS. The existing AFMs were installed between 2013 and 2015. These AFMs will need to be upgraded or replaced with new equipment during the term of this contract and some may be removed in favor of signage enabling mobile payments or repurposed for use in the Northwest Trailhead parking area, per the quote sheet. No AFMs are currently installed in the Northwest Trailhead parking area. NPS requires a minimum of one (1) AFM in all parking areas within the scope of this contract.

https://listings.pcisecuritystandards.org/assessors_and_solutions/payment_applications https://obamawhitehouse.archives.gov/the-https://obamawhitehouse.archives.gov/the-press-office/2014/10/17/executive-order-improving-security-consumer-financial-transactions https://obamawhitehouse.archives.gov/the-press-office/2014/10/17/executive-order-improving-security-consumer-financial-transactions

Placement and installation of AFMs and concrete pads must adhere to the ADA, ABA, and NEPA standards, and must be approved by GGNRA’s Environmental Review Committee and Senior Management Team prior to placement and installation. The Contractor shall be responsible for complete removal of the AFMs and related equipment if NPS elects to have the equipment removed. The Contractor will be responsible for restoring installation sites to their original condition. Excess installation material including concrete, soil and the like shall be disposed of in accordance with all Federal, State and Local laws.

2.2.3 New Equipment and Installation (Options 1 & 3)

At NPS’s option in Options Year One, the Contractor will be required to furnish and install one (1) new AFM at Merchant Road parking area. At NPS’s option in Options Year Two, the Contractor will be required to furnish and install one (1) new AFM at Langdon Court parking area. Contractor will furnish and install brand new (not reconditioned or remanufactured) AFMs, including foundations or bases, and primary housing or cabinets. Each AFM will meet all the requirements of this contract and must be compatible with mobile payment technology.

Contractor shall provide all equipment, parts, labor, supplies, materials, supervision, insurance, subcontractors, and any other costs necessary to complete new equipment replacement or installation. All new AFMs purchased under this contract will become government property and owned by NPS once installed.

Placement and installation of AFMs and concrete pads must adhere to the ADA, ABA, and NEPA standards, and must be approved by GGNRA’s Environmental Review Committee and Senior Management Team prior to placement and installation. The Contractor shall be responsible for complete removal of the AFMs and related equipment if NPS elects to have the equipment removed. The Contractor will be responsible for restoring installation sites to their original condition. Excess installation material including concrete, soil and the like shall be disposed of in accordance with all Federal, State and Local laws.

2.3 Information Technology Requirements

A. Credit card payment application (software): AFMs and mobile payment platforms will have a payment application/software to accept and process credit card transactions for payment.

1. Requirement: The credit card application/software that captures the credit card payment information and transmits the transaction to the payment processor must meet the Payment Card Industry Data Security Standards (PCI DSS) and use an approved payment application that has been validated by the Payment Card Industry Security Standards Council (PCI SSC).

The Contractor must deliver documentation that the product suite is:

a) validated by the PCI SSC as a payment application; and

b) is deployed in accordance with the PCI SSC’s Software Security Framework (SSF)

The list of Validated Payment Applications is available from:

https://listings.pcisecuritystandards.org/assessors_and_solutions/payment_applications

B. PCI Compliance for Services: For support services provided under this SOW that allow the Contractor any administrative access to NPS cardholder data or any key systems that comprise the Cardholder Data Environment (CDE), the Contractor must achieve, show proof of, and maintain PCI DSS compliance for the services they are providing against the current version of PCI DSS published on the PCI Security Standards Council website.

1. Requirement: As evidence of compliance, the Contractor must provide when requested, a https://listings.pcisecuritystandards.org/assessors_and_solutions/payment_applications current attestation of compliance (AOC) signed by a PCI Qualified Security Assessor (QSA) along with the scoping or other such sections from their Report on Compliance that verifies that the services provided to the NPS were included.

2. Requirement: Contractor must create and maintain reasonable detailed, complete, and accurate documentation describing the systems, processes, network segments, security controls, and dataflow used to receive, transmit, store, and secure the NPS’ cardholder data or administer systems that do. Such documentation must conform to the most current version of the PCI DSS.

Contractor will, upon written request by the NPS, make such documentation and the individuals responsible for implementing, maintaining, and monitoring those system components and processes available to QSAs, forensic investigators, consultants or attorneys retained by the NPS to facilitate audit and review of the NPS’ PCI DSS compliance. Contractor must retain such documentation until one (1) year after the expiration or termination of this contract.

3. Requirement: If data is transmitted to a vendor’s data processing or storage facility, the facility must meet the Payment Card Industry Data Security Standards (PCI DSS) for Third Parties which requires the following:

• Compliant Report on Compliance (ROC) signed by a Qualified Security Assessor (QSA)

• Passing quarterly vulnerability scans by an Approved Scanning Vendor (ASV)

• Completion of the Attestation of Compliance

C. Connectivity for Data Transfer: AFMs may connect to either the payment processor or a vendor’s data processing facility via an external (non-Department of Interior network) communication line such as satellite or cellular.

1. Requirement: The Contractor must identify the communications technology the AFM will use to connect to the bank or third-party data processing facility in order to process credit card transactions, perform updates, and download transactional data from the AFM. The communications technology must either be satellite-based or cellular-based.

D. Remote Monitoring: Remote monitoring of AFMs and mobile payment platforms must be done on a frequent and regular basis, daily at a minimum. This ensures that each AFM is functioning properly and has the most current firmware, and that AFMs and mobile payment platforms have transmitted all transactional information.

1. Requirement: AFMs must have the capability to be monitored remotely to ensure that the machine is functioning properly and to retrieve reports.

E. Data Compatibility:

1. Requirement: AFMs and mobile payment platforms shall be capable of exporting all transaction details to an electronic data file in Comma Separated Value (CSV) format or equivalent including, but not limited to item(s) purchased, date and time purchased, quantity, price(s), amount tendered, method of tender, last four digits of credit card number, and credit card authorization codes.

2. Requirement: All reports must be capable of being imported into Microsoft Excel™.

2.4 Banking Requirements

A. Credit Card Processing Platform:

1. Requirement: The payment application used for processing credit card payments must be certified with the Treasury-designated payment processor (currently WorldPay). This can be a third-party credit card payment application, or it can be the vendor’s proprietary payment application as long as it connects directly to the WorldPay processing platform.

B. Credit Card Batch Settlement and Sales Report:

1. Requirement: The credit card payment application / software shall be programmed so that

WorldPay is the host and a daily ET Auto Close (batch settlement) of the transactions is performed at 22:00 hours.

2. Requirement: If an AFM does not have connectivity to the payment processor to obtain authorization, the AFM may store the transactions according to PCI DSS guidelines until connectivity is restored.

3. Requirement: Each AFM and mobile payment platform shall provide a credit card sales summary report for a 24-hour period that correlates to the bank’s Auto Close settlement time.

C. Deposit of Funds:

1. Requirement: US Treasury regulations require that all monies (including cash and credit card transactions) collected by or on behalf of the government shall be deposited directly into a US Treasury account. The account shall be an NPS account.

D. Reporting: AFMs and mobile payment platforms must have the capability to produce reports of parking fee collections based on the financial transactional data. The reports are used to verify that all funds collected have been accounted for and to perform the reconciliation of credit card collections.

1. Requirement: AFM and mobile payment software must be capable of producing reports based on the transactional data that reflect the date and time of sale, products sold by product type and revenue account, and by tender type. The software must be able to query reports on a date and time range basis (e.g., April 1 @ 22:00 PST to April 2 @ 21:59 PST).

2. Requirement: AFM and mobile payment software must be capable of producing a sequentially numbered detailed collection report.

2.5 Accessibility Requirements

In 1998, Congress amended the Rehabilitation Act of 1973 to require Federal agencies to make their electronic and information technology (EIT) accessible to people with disabilities. Inaccessible technology interferes with an ability to obtain and use information quickly and easily. Section 508 was enacted to eliminate barriers in information technology, open new opportunities for people with disabilities, and encourage development of technologies that will help achieve these goals. The law applies to all Federal agencies when they develop, procure, maintain, or use electronic and information technology. All EIT procured under this Solicitation, including AFM units, mobile payment platforms, and software applications, must comply with the requirements of Section

508. Additional information about Section 508 compliance can be found at: https://www.section508.gov/

Physical AFMs must comply with the Americans Disabilities Act (ADA) accessibility requirements and Architectural https://www.section508.gov/

Barriers Act (ABA) requirements applicable to their design, user options, and interfaces. More information on the relevant laws and regulations relating to accessibility can be found at: https://www.access-board.gov

2.6 Parking Area Improvements

In the Base Year, the Contractor will be required to furnish and install wheel stops for 46 parking spaces at Northwest Trailhead parking area. Wheel stops help to ensure that vehicles do not protrude into pedestrian areas adjacent to parking spaces where visitors may be standing while reading fee signage or paying for parking fees.

There are currently no wheel stops installed at Northwest Trailhead parking area.

Placement and installation of wheel stops must adhere to ADA, ABA, and NEPA standards and must be approved by GGNRA’s Environmental Review Committee and Senior Management Team prior to placement and installation. Excess installation material including concrete, soil and the like shall be disposed of in accordance with all Federal, State and Local laws.

2.7 Parking Fees and Schedule

A. Parking Fees: Parking fees are established and approved at the sole discretion of NPS. The Contractor has no authority over the fees charged for parking. A schedule of approved parking fees is provided in Appendix B.

NPS anticipates adjusting or increasing parking fees during the term of this contract, typically on an annual basis. NPS will provide the Contractor with adequate advance notice, no less than sixty (60) days prior to any parking fee adjustment or increase becoming effective.

B. Schedule: The Contractor shall be responsible for parking management services during the fee collection days and hours specified in Appendix B for each parking area awarded under this contract. NPS maintains the sole discretion to set and change paid parking fee collection hours.

2.8 Transfer of Funds

The Contractor shall follow the guidelines below for transferring revenues and payments to NPS:

• The Contractor shall transfer all revenues collected to the NPS by electronic banking.

• Credit card transactions shall be batched and settled directly into the Government-designated bank on a daily basis.

• Merchant IDs shall stay with the assigned AFM.

• The Contractor shall use the same platform used by the designated Government bank. The payment application used for processing credit card payments must be certified with the Treasury-designated payment processor (currently WorldPay).

• The Government will reconcile the previous month’s credit card transactions and deposits within 15 business days from the end of each month.

• The Contractor will have no more than 15 business days to review the reconciliations and then provide an electronic invoice to the Government.

• All discrepancies in revenues collected shall be reported daily to the Contracting Officer’s Representative (COR). All discrepancies are the sole responsibility of the Contractor and shall be paid to the NPS. If the Contractor justifies such discrepancy in writing to the satisfaction of the NPS, the Contractor shall not owe amount undercharged or not collected. If the Contractor cannot justify such discrepancy to the https://www.access-board.gov/ satisfaction of the NPS, the Contractor shall pay the amount undercharged or not collected to the NPS.

• All amounts overcharged by the Contractor and all cash overages (amounts received by the Contractor in excess of amounts reported) shall be paid to the NPS. Amounts undercharged or shortages by the Contractor shall not be deducted from overcharges. All monies owed to the NPS by the Contractor pursuant to this paragraph shall be paid to the NPS on a monthly basis. Shortages are monies the Contractor cannot account for, and overages are monies that customers pay to the Contractor in excess of the cost of parking. Both are to be paid to the NPS. The Contractor is not allowed to cover their shortages with overages.

The NPS will review monthly invoice documentation and follow up with the Contractor as necessary for questions and requests to revise any incorrect information.

2.9 Reports and Audits

The Contractor shall be responsible for the preparation and delivery of all reports described below. Reports will be available on a daily, weekly, and/or monthly basis as determined by NPS in conjunction with the Contractor.

All reports shall be web-based and shall be accessible for auditing and reconciliation purposes. Data file formats shall be compatible with the Microsoft Office suite. AFM and mobile payment platform software must be capable of producing reports based on the transactional data that reflect the date and time of sale and by tender type.

AFM and mobile payment platform software must be able to query reports on a date and time range basis.

AFMs and mobile payment platforms must be capable of providing the following:

• Operator non-resettable totals to control grand total sale

• Automatic resettable collection totals, to be reset after each close out

• Sales breakdown by location, time, date, and by type of sales transaction

• Hourly breakdown of total sales

• Detailed record of transactions through a transaction log

• Sequentially numbered detailed collection reports

• Revenue reconciliation report

The Contractor will be responsible for preparation and delivery of the following reports.

• Payment Settlements o This report provides information on transaction amounts that have been deposited into NPS’s account via respective Merchant IDs. Search filter options should be configurable by date (from, to), machine location, daily summary, and/or transaction detail. This report is a necessary component in the credit card reconciliation process and may also be requested by NPS-AOC for audit purposes.

• Transaction Lookup o This report allows for review of transactions by the last 4 digits of a credit card number. Search filter options should include configuration by date (from, to), machine location, and batch settlement status. Generated reports should also include the transaction’s credit card authorization code.

• Supporting Documentation o The Contractor shall submit to NPS supporting documentation for all parking revenues collected on a monthly basis by no later than the 15th of the following month. The Contractor shall separately identify these revenues by parking area and as otherwise required by NPS.

The NPS shall conduct annual fee collection audits in accordance with NPS Reference Manual 22A for Recreation Fee Collection (RM-22A). The Contractor shall provide documentation and access to staff, facilities, and equipment related to parking fee collection upon NPS’s request in compliance with the annual fee collection audits.

3.0 PERFORMANCE STANDARDS

3.1 Automated Fee Machines (AFMs)

Beyond the physical features of AFMs that meet the functional and performance requirements described herein, the Contractor is responsible for maintaining all AFMs awarded under this contract in fully operational condition, capable of collecting parking fees during the operating hours and days of the specific parking area, as specified in Appendix B. It is understood that equipment malfunctions occasionally occur. For the purposes of this paragraph, a malfunction is defined as any machine error which renders the AFM incapable of properly collecting parking fees during the operating hours and days of the specific parking area. On a monthly basis, there shall be no more than one (1) AFM malfunctioning at a time. No AFM shall malfunction for a period of more than 24 hours. This is the expected performance level. For any performance below this level, deductions will be taken from the Contractor’s firm fixed price monthly fee on a pro-rata basis. For the purposes of calculating the daily payment rate on which deductions may be taken, the monthly firm fixed price will be divided by the number of days in the given month and divided again by the number of parking areas affected for more than 24 hours.

For example, if an AFM malfunctions at Battery East parking area for a period of more than 24 hours, a deduction equivalent to 1/3rd of the daily payment (assuming a total of 3 paid parking areas under the base contract) will be taken for each 24-hour period beyond the initial 24-hour period the AFM continues to malfunction.

3.2 Mobile Payment Platforms

The Contractor is responsible for maintaining all mobile payment platforms under this contract to ensure mobile parking fee collection capabilities during the operating hours and days of the specific parking area, as specified in Appendix B. It is understood that software malfunctions occasionally occur. For the purposes of this paragraph, a malfunction is defined as any error which renders the mobile payment platform incapable of properly collecting parking fees during the operating hours and days of the specific parking area. No mobile payment platform malfunction shall be allowed to persist for a period of more than 24 hours. This is the expected performance level. For any performance below this level, deductions will be taken from the Contractor’s firm fixed price monthly fee on a pro-rata basis. For the purposes of calculating the daily payment rate on which deductions may be taken, the monthly firm fixed price will be divided by the number of days in the given month and divided again by the number of parking areas affected for more than 24 hours.

For example, if a software malfunction prevents mobile payments for parking fees at Battery East parking area for a period of more than 24 hours, a deduction equivalent to 1/3rd of the daily payment (assuming a total of 3 paid parking areas under the base contract) will be taken for each 24-hour period beyond the initial 24-hour period the mobile payment platform continues to malfunction.

4.0 TIMELINE AND PERIOD OF PERFORMANCE

The contract will have one (1) base year, plus four (4) option years, for a total of up to five (5) years, as follows:

Base Year: October 1, 2023 through September 30, 2024 Option Year 1: October 1, 2024 through September 30, 2025 Option Year 2: October 1, 2025 through September 30, 2026

Option Year 3: October 1, 2026 through September 30, 2027 Option Year 4: October 1, 2027 through September 30, 2028

Option years may be awarded at the sole discretion of NPS but are not guaranteed.

5.0 APPENDICES

• Appendix A: List of Applicable Laws, Regulations, Policies, and Guidelines

• Appendix B: Parking Fees and Hours Of Operation

• Appendix C: Schedule of Existing AFMs and Representative AFM Photo

• Appendix D: Overview Map of In-Scope Parking Areas

• Appendix E: Battery East Parking Area - Aerial View

• Appendix F: West Bluff Parking Area - Aerial View

• Appendix G: Northwest Trailhead Parking Area - Aerial View

• Appendix H: Merchant Road Parking Area - Aerial View

• Appendix J: Langdon Court Parking Area - Aerial View

Appendix A: List of applicable Laws, Regulations, Policies, and Guidelines

Law / Regulation / Policy / Guideline

Applies to Requirement

Federal Information Security Management Act of (FISMA) 2002

NIST 800-53A

Department of Interior (DOI) OCIO IT Security Handbook

Information Security

Requires attention to IT security in all agency applications, and accountability to OMB and Congress. It requires:

“Standards to be used by all agencies to categorize all information and information systems” according to risk levels.

“Guidelines recommending the types of information and systems” for each risk category.

“Minimum information security requirements” for information and systems in each category.

National Institute of Standards and Technology (NIST) Special Publications and Federal Information Processing Standard Publications (FIPS)located at http://csrc.nist.gov/publications/nistpubs/800- 53A-rev1/sp800-53A-rev1-final.pdf

The DOI OCIO IT Security Handbook is available upon request.

US Treasury Card Acquiring Service (CAS) Rules and Security Requirements

Financial Management

Agencies will use the US Treasury’s CAS Rules and Security Requirements as a guide when processing Credit and Debit Card transactions. https://www.fiscal.treasury.gov/cas/rules-and-security-requirements.html

National Environmental Policy Act (NEPA)

NPS Director’s Order

Installation of AFMs

NEPA ensures that agencies fully consider the environmental costs and benefits of their proposed actions before they make any decision to undertake those actions. Link to the NEPA statute: https://ceq.doe.gov/laws-regulations/laws.html

NPS Director’s Order 12, further defines the NEPA process in the NPS:

https://www.nps.gov/subjects/policy/upload/DO_12_10-5- 2011.pdf

Payment Card Industry Data Security Standard

(PCI DSS)

Financial Management and Information Security

The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

https://www.pcisecuritystandards.org/

NPS Reference Manual 22A for Recreation Fee Collection (RM-22A)

NPS Recreation Fee Collection Operations

NPS RM-22A contains operational guidance for parks on recreation fee collection, which includes parking fees. This document is available through the NPS intranet or available upon request as a PDF document.

https://doimspp.sharepoint.com/sites/nps-in2-manage-fees/SitePages/home_recreation-fees_rm-22-recreation-fees-and-fee-policy.aspx (access to NPS employees) http://csrc.nist.gov/publications/nistpubs/800-53A-rev1/sp800-53A-rev1-final.pdf http://csrc.nist.gov/publications/nistpubs/800-53A-rev1/sp800-53A-rev1-final.pdf http://csrc.nist.gov/publications/nistpubs/800-53A-rev1/sp800-53A-rev1-final.pdf https://www.fiscal.treasury.gov/cas/rules-and-security-requirements.html https://www.fiscal.treasury.gov/cas/rules-and-security-requirements.html https://ceq.doe.gov/laws-regulations/laws.html https://ceq.doe.gov/laws-regulations/laws.html https://www.nps.gov/subjects/policy/upload/DO_12_10-5-2011.pdf https://www.nps.gov/subjects/policy/upload/DO_12_10-5-2011.pdf https://www.pcisecuritystandards.org/ https://doimspp.sharepoint.com/sites/nps-in2-manage-fees/SitePages/home_recreation-fees_rm-22-recreation-fees-and-fee-policy.aspx https://doimspp.sharepoint.com/sites/nps-in2-manage-fees/SitePages/home_recreation-fees_rm-22-recreation-fees-and-fee-policy.aspx https://doimspp.sharepoint.com/sites/nps-in2-manage-fees/SitePages/home_recreation-fees_rm-22-recreation-fees-and-fee-policy.aspx

Office of Management and Budget (OMB) Circular A-123

Federal Internal Control Policies

OMB Circular A-123 outlines management's responsibility for internal control in Federal agencies.

https://obamawhitehouse.archives.gov/omb/circulars_a123_r ev/

Rehabilitation Act

Americans with Disabilities Act (ADA)

Architectural Barriers Act ABA)

Accessibility Legislation governing Federal accessibility requirements and associated guidelines.

https://www.access-board.gov/guidelines-and-standards https://obamawhitehouse.archives.gov/omb/circulars_a123_rev/ https://obamawhitehouse.archives.gov/omb/circulars_a123_rev/ https://www.access-board.gov/guidelines-and-standards

Appendix B: Parking Fees and Hours Of Operation

Parking Area # of Parking Spaces

Target # of AFMs

Days of Operation (1)

Fee Collection Hours (2)

Hourly Parking Fee

Daily Parking Fee

Base Contract Battery East Parking Area 77 1

(currently 3) Every day 8:00am – 6:00pm $ 3.00 $ 10.00

West Bluff Parking Area 159 3

(currently 5) Every day 8:00am – 6:00pm $ 3.00 $ 10.00

Northwest Trailhead Parking Area 46 1

(currently 0) Every day 8:00am – 6:00pm $ 3.00 $ 10.00

NPS Options Merchant Road Parking Area 74 1

(currently 0) Every Day 8:00am – 6:00pm $ 3.00 $ 10.00

Langdon Court Parking Area 65 1

(currently 0) Every Day 8:00am – 6:00pm $ 3.00 $ 10.00

1 Parking fees not charged on Federal holidays and NPS Fee-Free Days.

2 Hours are in Pacific Standard Time (PST) or Pacific Daylight Time (PDT).

Appendix C: Schedule of Existing AFMs and Representative AFM Photo

Meter

Name Make Model # Serial # Parking Area

Location Type Install Date

1 Battery-1 Cale MPC104 0400A0116X15240 Battery East

By ADA stalls

Coin / Credit 1/15/13

2 Battery-2 Cale MPC104 0400A0116X15241 Battery East

Center lot Coin / Credit 1/15/13

3 Battery-3 Cale MPC104 0400A0116X15242 Battery East

Rear corner

Coin / Credit 1/15/13

4 Bluff-1 Cale MPC104 0400A0116X15459 West Bluff

Entrance on RT

Coin / Credit 1/26/15

5 Bluff-2 Cale MPC104 0400A0116X15407 West Bluff

2nd meter on RT

Coin / Credit 1/26/15

6 Bluff-3 Cale MPC104 0400A0116X15454 West Bluff

3rd meter on left

Coin / Credit 1/26/15

7 Bluff-4 Cale MPC104 0400A0116X15402 West Bluff

4th meter on RT

Coin / Credit 1/26/15

8 Bluff-5 Cale MPC104 0400A0116X15456 West Bluff

End of lot Coin / Credit 1/26/15

Representative photo of existing automated fee machines circa 2012:

Appendix D: Overview Map of In-Scope Parking Areas

Northwest Trailhead

West Bluff

Battery East

Langdon Court

Merchant Road

Appendix E: Battery East Parking Area - Aerial View

Appendix F: West Bluff Parking Area - Aerial View

Appendix G: Northwest Trailhead Parking Area - Aerial View

Appendix H: Merchant Road Parking Area - Aerial View

Appendix J: Langdon Court Parking Area - Aerial View