1333MF23QNFFN0052 SF18 (23-423) F.pdf

REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

THIS RFQ IS IS NOT A SMALL BUSINESS SET-ASIDE

15. DATE OF QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

b. TELEPHONE

AREA CODE

NUMBER

STANDARD FORM 18 (REV. 6-95) Prescribed by GSA-FAR (48 CFR) 53.215-1(a)

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

8. TO:

b. COMPANYa. NAME

c. STREET ADDRESS

d. CITY e. STATE f. ZIP CODE

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

c. CITY

d. STATE e. ZIP CODE

7. DELIVERY

FOB DESTINATION

OTHER

(See Schedule)

10. PLEASE FURNISH QUOTATIONS TO THE IMPORTANT: This is a request for information and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or service. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotation must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

ITEM NUMBER

(a)

SUPPLIES/ SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations are are not attached.

13. NAME AND ADDRESS OF QUOTER

a. NAME OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

PAGE OF PAGES

1. REQUEST NUMBER 2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NUMBER 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG. 1

RATING

5a. ISSUED BY 6. DELIVER BY (Date)

5b. FOR INFORMATION CALL (NO COLLECT CALLS)

NAME TELEPHONE NUMBER

AREA CODE NUMBER

NF-FN7300-23-02854 1333MF23QNFFN0052

OFFICE OF MANAGEMENT & BUDGET

1315 EASTWEST HWY

/F/MB SSMC3 RM 14451

SILVER SPRING MD 20910

KAREN BECK

karen.beck@noaa.gov

Please See Continuation Page for Line Item Details

See Schedule

ISSUING OFFICE IN BLOCK 5b ON OR BEFORE CLOSE OF BUSINESS (Date)

AUG 29, 2023

See Schedule

DUNS:

8/14/2023

SCHEDULE Continued

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

PROVIDE DOCUMENTATION DEMONSTRATING

TECHNICAL SPECIFICATIONS IN ACCORDANCE

WITH THE STATEMENT OF WORK (SOW) AND

ACCESS CONTROL SYSTEM UPGRADES

TECHNICAL REQUIREMENTS SHEET.

USE THIS STANDARD FORM 18 FORM FOR YOUR

QUOTE.

VENDOR UNIQUE ENTITY IDENTIFIER

(UEI)# ____________________.

QUOTE CANNOT BE ACCEPTED FROM YOUR

COMPANY IF YOU ARE NOT REGISTERED AND

ACTIVE IN THE FOLLOWING WEBSITE: HTTPS://

WWW.SAM.GOV/

QUOTES RECEIVED FROM CONTRACTORS

WHO ARE NOT ACTIVE IN SAM WILL NOT BE

CONSIDERED.

PLEASE PROVIDE YOUR WILL OR WILL NOT

STATEMENT PER 52.204-24 UNLESS YOUR REPS

AND CERTS HAVE BEEN UPDATED IN SAM PER

52.204-26.

THE GOVERNMENT DOES NOT ACCEPT

RESPONSIBILITY FOR NON-RECEIPT OF QUOTES.

IT IS THE CONTRACTORS RESPONSIBILITY TO

REQUEST A CONFIRMATION OF THE QUOTE

RECEIPT.

100% SMALL BUSINESS SET-ASIDE, PURCHASE

ORDER TO BE AWARDED TO THE LOW PRICED,

TECHNICALLY ACCEPTABLE QUOTE RECEIVED.

PLACE OF PERFORMANCE:

NOAA Mississippi Laboratory Main Laboratory 3209 Frederic Street Pascagoula MS 39567

Job Site Visit: A site visit is highly encouraged.

A consolidated site visit is scheduled Monday, August 21, 2023 at 2:00 PM Eastern Standard Time.

To set up a site visit for this date, please email Karen.beck@noaa.agov. All questions must be submitted in writing to Karen.beck@noaa.gov by 12:00 PM EST on or before August 22, 2023. Telephone inquiries will not be honored.

REQUIREMENT APPLIES TO DEPARTMENT OF

LABOR WAGE RATES: WD 2015-5147, Revision No:

21, dated 07/12/2023, which can be found on: https:// wdolhome.sam.gov/

Invoices shall not be submitted until all work is complete and the government has made acceptance. Any invoices submitted prior to this will be returned to the vendor as unacceptable.

0001 Non-personal services: Furnish all labor, materials and equipment necessary for the upgrade of current CCURE 800 Security Access System in accordance with the Statement of Work and Technical Requirements Sheet.

The Contractor will provide a full parts and labor warranty on all work performed, parts & software installed, etc. (including travel, per diem) for one full year after acceptance by the Government. Software version upgrades shall be available for no charge during this warranty. The software media warranty shall be per the SoftwareHouse CCURE software licensing agreement.

The Contractor will also provide a toll-free number should the Government observe a malfunction during

1.00 JB

PAGE 2 OF 66 1333MF23QNFFN0052

SCHEDULE Continued

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

the one year warranty period and the contractor shall perform all of the necessary repairs needed to keep the equipment at the functional level specified by the Original Equipment Manufacturer and within the SOW.

PR NUMBER: NF-FN7300-23-02854

DELIVERY DATE: 12/02/2024

SHIP TO:

USDC/NOAA/NMFS

3209 FREDERIC STREET

F/SEC3

PASCAGOULA MS 39567

FOB : Destination

PAGE 3 OF 66 1333MF23QNFFN0052

Table of Contents

STATEMENT OF WORK

Technical Requirements

Attachment 2 NOAA IPP Implementation Notice

FAR 52.204-27 PROHIBITION ON A BYTEDANCE COVERED A

Wage Determinations 2015-5147

52.204-7 SYSTEM FOR AWARD MANAGEMENT (OCT 2018)

52.204-13SYSTEM FOR AWARD MANAGEMENT MAINTENANCE (OCT 2018)

52.204-16COMMERCIAL AND GOVERNMENT ENTITY CODE REPORTING (AUG 2020)

52.212-1INSTRUCTIONS TO OFFERORS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (MAR 2023)

52.212-4CONTRACT TERMS AND CONDITIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (DEC 2022)

52.237-2 PROTECTION OF GOVERNMENT BUILDINGS, EQUIPMENT, AND VEGETATION (APR 1984)

1352.201-70 CONTRACTING OFFICER´s AUTHORITY (APR 2010)

1352.209-73 COMPLIANCE WITH THE LAWS (APR 2010)

1352.209-74 ORGANIZATIONAL CONFLICT OF INTEREST (APR 2010)

52.204-24REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR EQUIPMENT

(NOV 2021)

52.204-26COVERED TELECOMMUNICATIONS EQUIPMENT OR SERVICES--REPRESENTATION (OCT 2020)

52.204-27PROHIBITION ON A BYTEDANCE COVERED APPLICATION (JUNE 2023)

52.212-3OFFEROR REPRESENTATIONS AND CERTIFICATIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (DEC

2022)

52.212-5CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS--COMMERCIAL

PRODUCTS AND COMMERCIAL SERVICES (JUN 2023)

52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

52.237-1 SITE VISIT (APR 1984)

52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

1352.233-70 AGENCY PROTESTS (APR 2010)

1352.233-71 GAO AND COURT OF FEDERAL CLAIMS PROTESTS (APR 2010)

1330-52.222-70NOAA SEXUAL ASSAULT AND SEXUAL HARASSMENT PREVENTION AND RESPONSE POLICY (MAY 2018)... 60

1330-52.232-72NOAA Transition to the Invoice Processing Platform Electronic Invoicing System (Feb 2023) 62

1330-52.237-70CONTRACTOR COMMUNICATIONS

1330-52.237-71NOAA GOVERNMENT-CONTRACTOR RELATIONS - NON-PERSONAL SERVICES CONTRACT (SEPT 2017)

1330-52.237-72CONTRACTOR ACCESS TO NOAA FACILITIES (SEPT 2017)

1330-52.242-70SUBMITTAL OF INVOICES

1330-52.243-70REQUESTS FOR EQUITABLE ADJUSTMENT (OCT 2017)

1330-52.270-304NOAA ACQUISITION AND GRANTS OFFICE OMBUDSMAN (OCT 2022)

PAGE 4 OF 66 1333MF23QNFFN0052

CLAUSES

STATEMENT OF WORK

PAGE 5 OF 66 1333MF23QNFFN0052

STATEMENT OF WORK

National Oceanic and Atmospheric Administration (NOAA)

NOAA FISHERIES

Southeast Fisheries Science Center/Mississippi Laboratory

Upgrade CCURE Access Control System

I. Background/Overview -

The Mississippi Laboratory conducts various fisheries research in the Gulf of Mexico and beyond. The Software House CCURE 800 campus-wide access control system software currently used here has been sunset by the manufacturer, and the legacy system now needs upgrading to the latest edition to ensure continuity of operations, OEM support, etc.

II. Scope of Work

Perform all actions needed to fully & seamlessly migrate “everything” connected to the current CCURE 800 access control software (i.e., all cardholder accounts, all hardware, (card readers, REX’s, iStar panels, maglocks, door schedules, all internal configurations, settings, etc.) to the most current version (currently 3.0) of Software House CCURE 9000 in a turn-key, fully licensed & operational final manner. Upon completion of work and before departing the facility, the contractor will provide full onsite user training on all aspects of the new system. Also, upon acceptance of the completed work, the contractor will provide a one-year full “parts & labor” warranty on all work performed, parts & software installed, etc. The contractor will also provide one-year access to the toll-free number for remote technical assistance to coincide with the one-year warranty.

Current system configuration:

- Approx 45 card readers

- Approx 5 iStar panels

- Approx 200 cardholder accounts

- 3 controlled vehicle gates

- 3 buildings on campus

- System uses both HID proximity cards AND DoD Common Access Cards (CAC) - No photo ID making

III. Tasks

Contractor shall supply all software, parts, labor, travel, etc., needed to perform the contents of this Statement of work. The new replacement system shall have the same capability & capacity as the existing system at a minimum. All parts and components installed shall be brand new, not previously installed and delivered on site in the original manufacturer packaging. This will be a hold-point inspection item.

PAGE 6 OF 66 1333MF23QNFFN0052

WARRANTY - The Contractor will provide a full “parts and labor” warranty on all work performed, parts & software installed, etc. (including travel, per diem) for one full year after acceptance by the Government.

Software version upgrades shall be available for no charge during this warranty. The software media warranty shall be per the SoftwareHouse C•CURE software licensing agreement.

The Contractor will also provide a toll-free number should the Government observe a malfunction during the one year warranty period and the contractor shall perform all of the necessary repairs needed to keep the equipment at the functional level specified by the Original Equipment Manufacturer and within the SOW.

Response time shall be within twelve (12) consecutive hours of service call, and repair time shall be within twenty four (24) working hours of Response Time as stated above or as scheduled by the Government.

The Contractor shall maintain a written record of all activity associated with the maintenance of these systems, providing a copy to the GPC after each preventive maintenance visit.

IV. Period of Performance

The Project shall be fully completed NLT 60 days after contract award and the 12 month warranty will begin one day after government acceptance

V. Place of Performance

NOAA Mississippi Laboratory Main Laboratory 3209 Frederic Street Pascagoula MS 39567

VI. Deliverable Schedule

The Contractor shall coordinate, schedule and conduct a project kick-off meeting with the Government within 1 week of contract award. Topics to be discussed include but are not limited to: discussing this SOW, the estimated work start date, project duration, any potential show stoppers or concerns on both the government and the Contractor side, and all other routine topics that go with a project of this nature.

The Contractor shall provide submittals, specification sheets, cut sheets, etc. on all items to be installed to the Government for approval within 15 days of contract award.

Contractor shall coordinate start-work date with POC within 10 days of anticipated start date, and employees shall contact the POC upon arrival the first day.

PAGE 7 OF 66 1333MF23QNFFN0052

On-site work shall begin no later than 30 calendar days after contract award.

Documentation - Ensure delivery of all manufacture-supplied installation and operation manuals to the government POC at completion of the project.

VII. Government-Furnished Resources

The Government shall provide adequate utilities, work space and access to the equipment to enable the Contractor to perform the work as specified.

VIII. Security Requirements

All persons employed within the boundaries of the property or restricted-access areas therein, and all persons permitted to enter such property and areas shall comply with the security regulations for the SEFSC Mississippi Laboratory.

The Government reserves the right to close down the job site and order Contractor personnel off the premises in the event of a national emergency or a shut-down, for as long as security problems persist. The Contractor may only return to the site with verbal approval from the Contracting Officer or Project Lead..

The Government reserves the right to exclude or remove from the site or building any employee of the Contractor whom the Government deems incompetent, careless, insubordinate or otherwise objectionable, or whose continued employment on the work is deemed by the Government to be contrary to the public interest.

Personnel may be subject to inspection of their personal effects when entering and leaving the facility. Unscheduled inspections of personnel may be made when entering or while on site.

The contractor shall not employ personnel with felony convictions, or with a record of narcotics use, for work at Mississippi Laboratory.

IX. Applicable Standards

SAFETY - The contractor shall be responsible for all means and methods as they relate to safety and shall comply with all applicable OSHA, NEC, NFPA, EPA, local, state and federal requirements. Safety shall be the responsibility of the contractor. All related personnel shall be instructed daily to be mindful of the full time requirement to maintain a safe environment for the facility’s occupants including staff, visitors, customers and the occurrence of the general public on or near the site.

PAGE 8 OF 66 1333MF23QNFFN0052

The Contractor shall promptly correct any non-complying work or conditions. Contractor shall be responsible to ensure its work does not affect the safety of the public or employees of the Government. Neither the Government nor its representatives shall bear any responsibility for safety precautions at the project work site. If, however, in the opinion of the GPOC a life threatening condition exists, the GPOC will orally (to be confirmed in writing) require the Contractor to immediately suspend work in the affected area until the condition is corrected.

Whenever Contractor’s operations may create a hazardous condition, it shall at its sole expense, furnish, install and maintain such guards, fences, barricades, railing, light, signs, or other devices necessary to prevent accident, injury or damage to people or equipment.

Mishap Notification and Investigation - The Contractor shall promptly report pertinent facts regarding mishaps involving Government property damage or injury to Government personnel and cooperate in any resulting safety investigation. The Contractor shall notify (via telephone) the GPOC, the cognizant CO and/or other applicable members within four (4) hours of all mishaps or incidents. The Government person notified by the Contractor will in-turn notify the Safety office. If requested by the cognizant CO, the Project Lead and/or the cognizant program manager, the Contractor shall immediately secure the mishap scene/damaged property and impound pertinent maintenance and training records until released by the investigating safety office. If the Government investigates the mishap, the Contractor and the sub-contractors shall cooperate fully and assist the Government personnel until the investigation is completed.

X. Special Requirements

** The functionality of the existing access control shall be fully maintained throughout the entire upgrade/migration process. Ensure that at no time during the entire migration project, that the functionality of the current access control system goes “off-line” or is otherwise limited or diminished in any way.

WORKMANSHIP - All work shall be of highest quality and in strict accordance with the manufacturer’s published specifications and IOM’s, and to the GPOC’s satisfaction, most recent codes and standards. Completed installation shall be aesthetically pleasing and professional looking. Equipment exterior shall be clean, scratch and dent free, all screws installed. Clean up all debris from work locations before final departure.

QUALITY ASSURANCE - Unless otherwise noted in the contract documents, contractor shall strictly comply with the manufacturer’s installation instructions, specifications, etc.

The current system is in a 100% working state. The final deliverable shall similarly be in a 100% working state.

There shall be no deviations made from this specification without the prior written approval of the Project Lead. Any deviation from the manufacturer’s installation procedures must be supported by a written certification on the manufacturer’s letterhead and presented for the

PAGE 9 OF 66 1333MF23QNFFN0052

specifier’s consideration.

JOB CONDITIONS, CAUTIONS AND WARNINGS - Safety Data Sheets (SDS) must be on location at all times during the transportation, storage and application of hazardous materials, as applicable.

The Contractor shall not cause or permit any hazardous material to be brought upon, kept or used in or about the premises by its agents, employees, or subcontractors without the prior consent of the PL. Hazardous materials that are necessary to the performance of this contract shall be used, kept and stored in a manner that complies with all laws regulating any such hazardous material brought upon or used or kept at this site.

The Contractor shall provide Safety Data Sheets to the POC for any hazardous materials used in the performance of this contract.

“Hazardous Material” means any hazardous or toxic substance, material, or waste, including but not limited to, those substances, materials, and wastes listed in the Department of Transportation Hazardous Material Table (49 CFR 172.101) or by the Environmental Protection Agency as hazardous substances (40 CFR Part 68.130) and amendments thereto, petroleum products, or such other substances, material, and wastes that are or become regulated under any applicable local, state, or Federal law.

USE OF THE PREMISES - Before beginning work, the contractor shall secure approval from the building owner’s representative for the following -

• Areas permitted for personnel parking.

• Access to the site.

• Areas permitted for storage of materials, equipment, etc.

• Security - Comply with the government’s requirements for personnel identification, inspection and other security measures.

The Mississippi Laboratory is a smoke free environment. The Contractor and its employees shall adhere to all applicable rules and regulations regarding maintenance of a smoke free environment on the job site.

STORAGE - Contractor shall provide storage for tools and materials. The Government is not responsible for providing storage or security of materials, tools, or equipment.

The area surrounding the job site will be occupied during the performance of the work. Prior to work commencing, the Contractor shall schedule and coordinate a proposed work start and provide a schedule to the government POC, to accommodate the government’s work schedule, continued access to the facility and completion date.

CONDUCT OF CONTRACTOR PERSONNEL - The contractor’s employees are subject to and shall observe and comply with applicable regulations, policies, and procedures.

PAGE 10 OF 66 1333MF23QNFFN0052

Contractor employees shall not enter restricted areas in accordance with security regulations and safety policies.

The Contractor shall be responsible for the selection, certification, assignment, supervision, management, and control of employees in the performance of all contract work.

The removal from the job site of any employee shall not relieve the Contractor of the requirement to provide sufficient personnel to perform the terms and conditions of the contract.

The Contractor’s employees shall not use offices, rooms, work areas, etc. for their own use.

When a task is completed, such employees shall immediately leave the area. Contract personnel shall not use or operate telephones, radios, computer terminals, or any other Government or privately owned equipment or property without the express permission of the Facility Manager.

The Contractor’s employees shall not disturb papers on desks, nor open desk drawers or cabinets.

Breaks shall not be spent in offices or room areas, but taken only in the assigned rest areas. The Contractor’s employees shall not loiter in any working, patron, or other unauthorized areas. Use of Government restrooms is permitted.

While waiting for transportation, or while on work breaks, etc., employees shall not block or impede movement on ramps, doorways, corridors or walkways.

FACILITIES AND CONTROLS -

The contractor shall keep the project site in a neat and orderly condition at all times. Remove and properly dispose of all debris and trash from the job site in a timely and legally acceptable manner so as to not detract from the aesthetics or the functions of the building. No trash, cigarette butts, etc. left above ceiling inside mechanical rooms or outside upon completion.

Contractor shall comply with all applicable Federal, State, and local laws and regulations concerning environmental pollution prevention, control and waste disposal, and shall immediately inform the PL of any environmentally hazardous situations that they cause as well as contact required regulatory agencies.

JOB SITE PROTECTION -

The contractor shall adequately protect the work site from damage while performing the required work. Provide canvas, boards, barriers, signs, and other devices as necessary for protection of facility and occupants. Remove protection materials, devices at the completion of the project.

The contractor shall repair or be responsible for costs to repair all property damaged during the performance of work.

XI. Required Knowledge and Experience -

The Contractor (and/or system integrator subcontractor) shall be fully authorized by Software House to install their products, and also be a member of Software House’s Connected Partner

PAGE 11 OF 66 1333MF23QNFFN0052

Program (provide documentation from Software House)

Contractor shall provide adequate number of experienced technicians regularly engaged in this type of work who are specifically trained and skilled in physical access control system installation, maintenance and repair.

XII. Job Site Visit – A site visit is highly encouraged. A consolidated site visit is scheduled Monday, August 21, 2023 at 2:00 PM Eastern Standard Time. To set up a site visit for this date, please email Karen.beck@noaa.agov. All questions must be submitted in writing to Karen.beck@noaa.gov by 12:00 PM EST on or before August 22, 2023. Telephone inquiries will not be honored.

XIV. Project Lead - Provided at time of Award

XV. Contractor's invoice .

Prior to October 1, 2023, the Contractor shall prepare and submit proper invoices to MB.Invoices@noaa.gov . However, beginning October 1, 2023 the Contractor must submit payment requests electronically through the U.S. Department of the Treasury's Invoice Processing Platform (the IPP) System in accordance with Clause 1330-52.232-72 NOAA Transition to the Invoice Processing Platform Electronic Invoicing System (Feb 2023) and Attachment 2. Invoices shall not be submitted until all work is complete and the government has made acceptance. Any invoices submitted prior to this will be returned to the vendor as unacceptable. The Government will take into account untimely notification when computing any interest penalty owed the Contractor. Terms are Net 30. Please do not seek payment information until the 30 days have passed from acceptance. NOAA does make every attempt to make prompt payments.

(i) Name and address of the Contractor.

(ii) Invoice date and invoice number. (The Contractor should date invoices as close as possible to the date of the mailing or transmission.)

(iii) Contract number or other authorization for supplies delivered or services performed (including order number and line item number).

(iv) Description, quantity, unit of measure, unit price, and extended price of supplies delivered or services performed.

(v) Shipping and payment terms (e.g., shipment number and date of shipment, discount for prompt payment terms). Bill of lading number and weight of shipment will be shown for shipments on Government bills of lading

PAGE 12 OF 66 1333MF23QNFFN0052

(vi) Name (where practicable), title, phone number, email, and mailing address of person to notify in the event of a defective invoice.

(vii) Any other information or documentation required by the contract (e.g., evidence of shipment, Bill of Lading (BOL) invoice showing exact charges if freight exceeds $100. The government will only pay exact costs for freight when the charge exceeds $100, must be supported by airway or BOL invoice).

Technical Requirements

PAGE 13 OF 66 1333MF23QNFFN0052

NOAA PASCAGOULA ACCESS CONTROL SYSTEM UPGRADE

TECHNICAL REQUIREMENTS

GENERAL DESCRIPTION

These Security Management System (SMS) upgrades, which are also known as – the system migration process from the current SoftwareHouse CCURE 800 software to the most current version of SoftwareHouse CCURE 9000 , shall become part of a powerful, flexible, multi-function and object oriented security and event management system that features a variety of customizable interfaces for maintaining the system and for monitoring the desired secure sites. These SMS upgrades shall provide an option to display these management and monitoring interfaces in the native languages of the people using the system. The security and event management system shall maintain flexibility in order to meet specific requirements and quickly respond to evolving security challenges.

The SMS upgrades shall maintain a scalable platform, simple and economical enough to support a single site, yet upgradeable enough to manage a multi-site network. The SMS upgrades shall use an open, distributed architecture, where database servers could reside in geographically separate locations.

The SMS upgrades shall provide extensive information management capability using Microsoft .NET Framework latest version. They shall operate in a Client/ Server configuration on personal computers with a Windows-based platform. Its distributed client-server architecture shall be capable of supporting up to 128 simultaneous clients, multiple types of controllers, and over 10,000 input devices, including cameras and multiple types of card readers. The SMS upgrades shall be constructed to be database independent and shall support at a minimum Microsoft SQL Server 2005 (Express, Standard, Data Center, or Enterprise), and Oracle 10g Databases for data protection, redundancy and manageability.

The SMS upgrades shall have true multi-tasking, multiprocessor and remote client support; allowing independent activities and monitoring to occur simultaneously at different locations. The operator workstation (Client) shall be user friendly, employing icon-based menus and providing a mouse-driven interface for system operation and the creation of color graphic maps. The user interface shall be customizable, capable of delivering a unique look and feel without a unique version release.

The SMS upgrades shall integrate with the existing intuitive user interface similar to Microsoft's Outlook and Explorer with its easy navigation and tree structures. A practical application layout editor allows users to drag and drop any application onto one screen and create a customized hub for all activities via a single "command and control" center.

Field devices such as card readers, alarm inputs, control points, etc. shall be connected to fully distributed intelligent field controllers or directly through a Software Development Kit or Web Services, and be capable of operating without host computer intervention. All objects within the SMS upgrades, i.e. doors, readers, time intervals, etc. shall be addressed by a unique name as opposed to point numbering or mnemonics.

No part of the completed SMS upgrades shall be connected to the World Wide Web/Internet in any manner whatsoever.

PAGE 14 OF 66 1333MF23QNFFN0052

Product Data

Prior to installing the SMS upgrades, the Contractor shall provide the following:

1. A system description, including analysis and calculations used in sizing equipment required by the SMS upgrades. The description shall show how the equipment shall operate as a system to meet the performance requirements of the SMS upgrades. The following information shall be supplied as a minimum, so the government can provide the correctly configured server:

a. Central processor configuration and memory size.

b. Description of site equipment and its configuration.

c. Protocol description.

d. Rigid disk system size and configuration.

e. Backup/archive system size and configuration.

f. Start-up operations.

g. System expansion capability and method of implementation.

h. System power requirements and lJPS sizing.

i. A description of the operating system needed and application software

Manuals

The Contractor shall provide copies of the manuals as described herein. Each manual's contents shall be identified on the cover. The manual shall include names, addresses, and telephone numbers of each security system integrator installing equipment and systems and the nearest service representatives for each item of equipment for each system. The manuals shall have a table of contents and labeled sections.

The manuals shall include all modifications made during installation, checkout, and acceptance. The manuals shall contain the following:

Software Manual

The software manual shall describe the functions of all software and shall include all other information necessary to enable proper loading, testing, and operation. The manual shall include:

a. Definition of terns and functions.

b. Use of system and applications software.

c. Initialization, start-up, and shut down.

d. Alarm reports.

e. Reports generation.

f. Data base format and data entry requirements.

g. Directory of all disk files.

Operators Manual

The operator's manual shall fully explain all procedures and instructions for the operation of the system including:

a. Computers and peripherals.

b. System start-up and shut down procedures.

PAGE 15 OF 66 1333MF23QNFFN0052

c. Use of system, command, and applications software.

d. Recovery and restart procedures.

e. Graphic alarm presentation.

f. Use of report generator and generation ofreports.

g. Data entry.

h. Operator commands.

1. Alarm messages and reprinting formats.

J. System access requirements.

Maintenance Manual

The maintenance manual shall include descriptions of maintenance for all equipment including inspection, periodic preventive maintenance, fault diagnosis, and repair or replacement of defective components.

QUALITY ASSURANCE

Manufacturer Qualifications

The manufacturers of all hardware and software components employed in the SMS upgrades shall be established vendors to the access control/security monitoring industry for no less than five (5) years and shall have successfully implemented at least 5 systems of similar size and complexity.

Contractor/ Integrator Qualifications

∙ The security system integrator shall have been regularly engaged in the installation and maintenance of integrated access control systems and have a proven track record with similar systems of the same size, scope, and complexity.

∙ The security system integrator shall supply information attesting to the fact that their firm is an authorized product integrator certified with the SMS upgrades. A minimum of one technician shall be a Certified C•CURE 9000 installer.

∙ The security system integrator shall supply information attesting to the fact that their installation and service technicians are competent factory trained and certified personnel capable of maintaining the system and providing reasonable service time.

∙ The security system integrator shall provide a minimum of three (3) references whose systems are of similar complexity and have been installed and maintained by the security system integrator in the last five (5) years.

∙ There shall be a local representative and factory authorized local service organization that shall carry a complete stock of parts and the capability of providing 24/7 /365 maintenance for these systems.

Testing Agencies

• The SMS upgrades shall be tested and listed by Underwriters Laboratories (UL) for UL/cUL 294 for Access Control System Units (Pending)

PAGE 16 OF 66 1333MF23QNFFN0052

• The SMS upgrades shall be tested and listed by Underwriters Laboratories (UL) for UL/cUL 1076 for Proprietary Alarm Units (Pending)

• The SMS upgrades shall employ a FIPS 197-listed AES 256-bit encryption between C•CURE 9000 Servers, Clients, and iSTAR eX Controllers

• The SMS upgrades shall include full support for FIPS 201 initiative:

- Ability to customize a system-wide Card Holder Unique IDentification number (CHUID) - Ability to configure custom, extended card formats, including the GSA 75-bit Wiegand Standard and also especially the Federal government/DoD Common Access Cards (CAC), and to download them to the local card access panels

- Ability to use Hashed Message Authentication Codes (HMAC) for medium assurance profile - Enhanced data fields per the FIPS 201 standard, including Agency Code, System Code, Credential Series mid Credential Issue Code

• The SMS upgrades hardware (as applicable) shall comply with the following regulatory requirements:

- FCC Class A

- FCC Class B

- CE

- Canadian Radio Emissions requirements

- Restriction ofHazm-dous Substances Directive (RoHS) 2002/95/EC

- FIPS 140-2 encryption (certified for the iSTAR eX controller)

• The SMS upgrades shall support Americans with Disabilities Act (ADA) compliance in door and access operation

Licensing

Licensing shall be required for the SMS upgrades software. The licensing shall include:

- Series (Model)

- Number of online readers

- Number of online inputs

- Number of online outputs

- Number of cm-d holders

- Number of simultaneous clients

- Number of simultaneous badging stations

- Digital Video Integration option

WARRANTY

The Contractor will provide a full “parts and labor” warranty on all work performed, parts & software installed, etc. (including travel, per diem) for one full year after acceptance by the Government.

Software version upgrades shall be available for no charge during this warranty. The software media warranty shall be per the SoftwareHouse C•CURE software licensing agreement.

PAGE 17 OF 66 1333MF23QNFFN0052

The Contractor will also provide a toll-free number should the Government observe a malfunction during the one year warranty period and the contractor shall perform all of the necessary repairs needed to keep the equipment at the functional level specified by the Original Equipment Manufacturer and within the SOW.

Response time shall be within twelve (12) consecutive hours of service call, and repair time shall be within twenty four (24) working hours of Response Time as stated above or as scheduled by the Government.

The Contractor shall maintain a written record of all activity associated with the maintenance of these systems, providing a copy to the GPC after each preventive maintenance visit.

PRODUCTS

MANUFACTURERS

The Security Management System (SMS upgrades) shall be the SoftwareHouse C•CURE 9000 system

PRODUCTS, continued

DESCRIPTION

The Security Management System (SMS upgrades) upgrades shall become part of a fully integrated system that utilizes a single, industry-standard relational database management system for the storage and manipulation of related data. The existing SMS includes a server with operating system and applications software, and operator/administrator terminals with appropriate software. The security devices communicate with the field panels via a dedicated cable network. The field panels communicate to the server via a Fast Ethernet 10/100, TCP/IP network or a serial (RS-232, RS-485) connection.

The SMS upgrades shall allow for growth and scalability from a low-end or entry level system to a high end or enterprise system by increasing CPU power, memory and database. The SMS upgrades shall be modular in nature, allowing system capacities to be easily expanded without requiring major changes to system operation. All defined system data as well as historical information shall be maintained.

Customizable user interfaces shall allow management of system information and activity for administrators and operators.

SMS Upgrades Functionality

Partitioning

The SMS upgrades shall allow system administrators to separate the creation and viewing of objects into partitions. SMS upgrades operators shall be associated with partitions and this shall determine which objects operators have the ability to create and or view. The SMS upgrades shall support an unlimited number of partitions.

The SMS upgrades partitions shall include but not be limited to the following objects:

• Personnel

• Clearances

PAGE 18 OF 66 1333MF23QNFFN0052

• Doors

• Controllers with all associated hardware (readers, inputs, outputs, etc)

• Video servers with all associated objects (cameras, tours, views, etc)

• Application layouts

• Events

• Dynamic views

• Maps

• Reports, forms, results

• Holidays

• Badge layouts

• Queries

• Images

Through the use of privileges, the SMS upgrades System Administrator shall be able to determine which objects are associated with a particular partition. These objects shall then be assigned to System Operators with the appropriate privilege.

The SMS upgrades shall support a super-user assigned the 'System All' privilege who shall have full access to all objects in all partitions.

∙ Any operator shall have the ability to be assigned access rights to any partition. Individual Access rights shall be created and have the ability to be assigned to any users of the SMS upgrades. ∙ The SMS upgrades shall allow objects to be created in any partition. The SMS upgrades shall have the ability to grant or remove permission from any object in any partition ∙ The SMS upgrades shall provide the ability to move objects from one partition to another ∙ partition without the requirement of deleting and recreating ∙ Partitions shall have the ability to be moved between application servers by way of drag and drop control ∙ The SMS upgrades shall provide the ability to import/export any configured object ∙ including partitions and privileges ∙ The SMS upgrades shall support the display of all associated objects contained within a Partition

Application Server Architecture

The SMS upgrades shall support Multiple Application Servers. Application Servers shall provide the ability to distribute d1iver communication to user defined SMS upgrades hardware. Strategically placed applications servers shall provide a flexible, scalable SMS upgrades solution. These regionalized Application Servers shall be flexible to accommodate various network design models. Application Servers shall support the following features:

∙ The assignment of hardware via an SMS upgrades partition(s) ∙ Locally or regionally group application servers and incorporate a communication failover subsystem ∙ The SMS upgrades shall allow for a manual transfer of selected partitions between application servers ∙ Automatic failback shall apply to Client applications whereby when the primary application server is put back on line, the client application will automatically reconnect to the Primary application server ∙ Manual failback shall apply to Field Controllers to ensure that communication to field panels is properly maintained and facilitated

PAGE 19 OF 66 1333MF23QNFFN0052

∙ The system shall allow for the designation of a specific application server to a specified task such as reporting, importing, hardware communication such as controller communication and or any driver ∙ The system shall support enterprise-wide administration of personnel and reporting

Graphical User Interface (GUI)

The existing SMS upgrades employs a standard Windows XP™ Professional graphical user interface (GUI). A mouse and keyboard are the primary operator interface with the system. Operator screens utilize all standard Windows-style functions such as drop-down menus, context menus, radio buttons, and lists, as appropriate. The interface utilizes a 'tree structure' similar to Windows Explorer.

LDAP Interface with role support

The system shall have the ability to connect to a directory service source via the Lightweight Directory Application Protocol (LDAP). The connection to the LDAP source shall be user-configurable directly from the SMS upgrades and shall not require custom code. The LDAP interface shall also support tbe automatic assignment of SMS upgrades clearances based on data contained in the LDAP record. The LDAP feature shall support the following features:

∙ LDAP server name and user-defined port number ∙ A base distinguished name for the root of searches ∙ A user-definable LDAP search filter to refine object search ∙ User-defined mapping of attributes to SMS upgrades personnel fields ∙ The use of a Distinguished Name (DN) entry for the SMS upgrades to authenticate to LDAP ∙ Option to search all sub-levels of the directory from the base DN ∙ Preview sample-data based on SMS upgrades LDAP import settings ∙ Automatic roles-based SMS upgrades clearance(s) based on two fields of source data ∙ Automatic import of directory entries from the LDAP source ∙ Authentication via a user-definable LDAP user account and SSL ∙ Automatic SMS upgrades clearance assignment

Information Storage, Backup and Transfer

• All programmed information, as well as transactional history, shall be automatically stored in the database for later retrieval and backup. The SMS upgrades shall support configurations where the SMS upgrades database(s) may be installed on a hard drive on the SMS upgrades server, on an independent database server, or in an existing corporate database server.

• The SMS upgrades shall be capable of backing up and restoring all card holder and system configuration data and transactional history. The server shall be capable of transferring all programmed system and cardholder data and transactional history to USB thumb drive or external USB Hard Drive (including networked drives) for use in a “system restore” capacity in the event of server crash or similar.

• The SMS upgrades shall allow activity history to be written to a database. The system shall have the capacity to store a minimum of 50 million transactions. There shall be a method of backing up the activity history on external media and then restored and replayed.

• The SMS upgrades shall support AES 256-bit encrypted communications between server and user

PAGE 20 OF 66 1333MF23QNFFN0052

client.

• The SMS upgrades shall support AES 256-bit encrypted communications between server and controller.

The encryption shall support both local and third pa11y digital certificates.

Communication Ports

• The SMS upgrades shall be able to support multiple serial devices. In addition to COM1 and COM2, up to [8, 16, 32, to 256] additional ports may be configured through the use of a port expander or its equivalent. These serial ports may be used for connection to CCTV matrix switchers, or apC panels.

• The SMS upgrades shall support the use of Ethernet networks as the communications path between the host computer and field devices such as ETHERL'\/ET ISC, iSTAR, apC, apC 8/x, ApC Lite controllers, and CCTV matrix switchers. This communications path shall be the same network used for communications between the host server and the operator workstations. The communications between the host computer and the field devices shall be encapsulated in a TCP/IP network/transport layer.

Inputs

• The SMS upgrades shall monitor both supervised and unsupervised hardware inputs as well as virtual inputs such as predefined system messages. These inputs include door / elevator inputs and monitor points. The SMS upgrades shall also monitor controller inputs such as tamper, AC fail, and low battery

• The SMS upgrades shall have the ability to nan1e and allow for user defined descriptions for individual inputs, outputs, and readers as well as input and output modules

• There shall be three separate and distinct states for inputs which can be defined on the input configuration screen: Disabled, Enabled/ Disarmed and Enabled/ Armed

• The SMS upgrades shall allow configuration to link the state of an input to an output. The system shall allow multiple inputs to activate a single output or group of outputs

Outputs

• The SMS upgrades shall have outputs, also known as Control Points that associate an input or event action with a relay. These output uses include doors / elevators, alarms and industrial control

• There shall be two types of outputs available: dry contact / Form C relays and Open Collectors. Outputs shall be configured such that they can be activated, deactivated or pulsed by system actions.

Card and Reader Support

The SMS upgrades shall be designed to support multiple card formats and card reader types. The SMS upgrades shall support the following features for directly connected readers:

∙ Federal government/DoD Common Access Cards (CAC) ∙ User defined card formats up to 256 bits ∙ Unlimited number of SMS upgrades card formats ∙ The ability to assign up to 10 card formats per reader

PAGE 21 OF 66 1333MF23QNFFN0052

∙ The ability to show reader status on RM LCD ∙ Support Wiegand and 3x4 matrix keypads ∙ The enrollment of biometric templates to smartcards ∙ Custom CHUID FIPS201-compliant supporting full 256-bit data

The SMS upgrades shall support readers that provide Wiegand signaling and magnetic signaling to include:

∙ Software House RM readers ∙ Software House Multi-technology readers ∙ Wiegand swipe/insert readers ∙ Proximity readers ∙ Biometric readers ∙ Smart card readers ∙ Magnetic readers

Door Configurations / Elevator Control

The SMS upgrades shall allow doors to be configured to operate in any of the following access control modes:

∙ Unlocked ∙ No Access (Secure mode)

∙ Any combination of the following, as defined by schedule, event: card only, PIN only, Card+ PIN, Card entry through keypad.

The SMS upgrades shall allow a door to be configured to operate using the following functions:

∙ Readers shall read cards while the door is in the open position ∙ Door lock relay shall automatically lock upon the door being opened ∙ Allow for a user-defined delay relock time period ∙ Allow for a user-defined door unlock time and door held open time ∙ A separate (alternate) shunt timer for ADA flagged cardholders ∙ The operator shall be able to specify a shunt expiration output to be trigered for a configurable time

(in hh:mm:ss) before the expiration of the door open or alternate shunt. Can be enabled for ADA only, or all the time.

∙ Allow for a user-defined door unlock and door held time, in seconds ∙ PIN-only access (keypad) ∙ PIN-entry on the reader keypad shall be required during a specified schedule after a card access

(unless a manual action or event has disabled PIN) ∙ Card entry through keypad

The SMS upgrades shall allow each door to be configured to cause a variety of events such as alarms to occur based on activity at that door

The SMS upgrades shall support an extended unlock function initiated via two valid card presentations to a single reader or a 'double swipe'. The double swipe feature provides the ability to designate doors at which cardholders with double swipe privileges may perform an extended lock or unlock of the door.

PAGE 22 OF 66 1333MF23QNFFN0052

The double swipe feature shall support the following:

∙ Modified reader beeper pattern to reflect the extended unlock mode ∙ Individual card access privileges to perform double swipe action ∙ Unique parameters assignable to any door ∙ Reset of a double swipe unlock (relock) via scheduled event ∙ Event activation to reflect double swipe state (Lock, Unlock)

Schedules

The SMS upgrades shall support unlimited operator configurable schedules. Each schedule shall allow unlimited individual time intervals.

Each system controller shall support a minimum of 128 schedules and a minimum of 18 time intervals per schedule.

Each schedule shall consist of operator-defined time segments. Each time segment shall be day(s) of the week and include holidays and starting and ending times. The system shall provide grouping of days.

Holidays

The SMS upgrades shall support unlimited holidays

The SMS upgrades shall support holiday type designations as Recurring Day of Month, Recuning Relative Monthly, Non-Recurring or Day of Week.

The SMS upgrades shall allow assignment of duration to each holiday. Holiday groups can be assigned to a Schedule.

Time Zones

The SMS upgrades shall maintain time zones to be used when configuring certain system objects. A time zone shall adhere to standard international Time Zone behavior, and the system shall support all time zones supported by the Windows OS

The SMS upgrades shall allow time zones to be assigned to IP devices, controllers, CCTV matrix switchers, DVRs, and scheduled Manual Actions

Clearances

The SMS upgrades shall support configuration of unlimited Clearances

The SMS upgrades shall support up to 20 clearances per person

The SMS upgrades shall support clearance activation and expiration date and time.

Events

The SMS upgrades shall support unlimited operator configurable events, including the scheduling of events, and action-based trigger of events.

PAGE 23 OF 66 1333MF23QNFFN0052

The system shall provide 8 configurable event priority levels with a total of 200 numbered event priorities. The system shall allow the operator to define custom colors and labels per individual priority level

The system shall allow an event to be configured to:

∙ Be sortable by event name, date/time, priority, state, and any other displayable information ∙ Be routed to operators by operator privileges, including support for the routing by time of day feature ∙ Require or not require operator acknowledgment ∙ Require or not require a log message to be entered by…