Attachment_1_-_Statement_of_Work.pdf

SCOPE OF WORK

HARPERS FERRY CENTER

PHYSICAL SECURITY ACCESS CONTROL SYSTEM & SUPPORT

I. BACKGROUND AND PURPOSE

The mission of the U.S. Department of the Interior (DOI) is to protect and provide access to our Nation's natural and cultural heritage and honor our trust responsibilities to Indian Tribes and our commitments to island communities. The responsibility of the National Park Service (NPS), Harpers Ferry Center (HAFC), is to plan, design, produce, and maintain interpretive media for the NPS’s more than 400 areas. Offices are in numerous buildings in Harpers Ferry, West Virginia, and nearby Charles Town, West Virginia.

In addition to HAFC, the Harpers Ferry Camp Hill area is home to the Harpers Ferry National Historical Park (HAFE), the Emergency Incident Coordination Center (EICC), the Appalachian National Scenic Trail (APPA), the Stephen T. Mather Training Center (STMA), the Seasonal Recruitment Operations Center (SROC), and the Distance Learning Group (DLG). Network services are shared among these entities. Only HAFC is applicable for this solicitation.

HAFC also has the Willow Springs facility in Charles Town, West Virginia, about seven miles away. This solicitation will also include Willow Springs. Therefore, the solution(s) will need to function across the Wide Area Network (WAN) of NPS.

Beginning in 2008, as access-controlled system utilizing Government Homeland Security Presidential Directive 12 (HSPD-12) compliant Personal Identity Verification (PIV) cards was installed in three NPS owned buildings and one General Services Administrative (GSA) leased building. This system was subsequently updated in 2015. The current system is outdated, and the access control panels are no longer available, cannot be expanded, and have become obsolete.

Panels and access software are not compatible with the building intrusion alarm system that utilizes Honeywell controllers, which are not configurable in a central application. There is a need for compatibility with all building-controlled access systems, i.e. door locks, control panels, software, proximity access readers, video door bells with remote unlocking, intrusion alarm systems, future security cameras, and a centralized application to configure access via HSPD-12 PIV cards, monitor entryways, and audit access to the facility.

HAFC’s Information Technology Office (IT) and Facilities and Support Services and Property Group (FSP) manage the current security systems. All current systems being addressed are Windows-based or proprietary within security hardware. Currently, IT personnel has limited experience with Linux-based systems and would require support managing it.

The HAFC campus network has been upgraded to CAT-6 Ethernet cabling within the past several years and should be reusable for some existing deployments. Other existing deployments may only have copper phone lines or older CAT Ethernet that would need to be replaced. Any existing copper phone lines are dead and not in use.

HAFC currently employs the following physical security systems. All are over ten years old.

These systems include:

1. A JKW-IP AIPhone exterior remote video doorbell system with remote unlock. This system includes hardware monitors within the building to allow visual confirmation of the party at the exterior door, audio interaction, and the ability to remotely unlock the door. The system also includes software to perform the same operations via a remote PC on the network via client-server software. The client-server software requires special firewall rules to allow it to properly function.

2. A Honeywell WIN-PAK Personal Identity Verification (PIV) Card Door Access System.

The system uses contactless PIV card readers that allows personnel to enter through exterior doors by using their Department of the Interior PIV card. The current system runs on a client desktop personal computer (PC) that communicates with proprietary networked hardware to program the readers. Access attempts and their results are logged in the system for later review. The installation on a client desktop PC is now problematic, and the existing proprietary networked hardware is antiquated and at capacity.

3. A Honeywell Compass v2.0.14 intrusion detection panel system for doorways that alarm

NPS dispatch of unauthorized access. This system is capable of scheduled arm/disarm actions and allows for manual alarm override. This system alerts NPS Dispatch of possible break-ins. Panels are configured on each individual unit, as the means to remotely communicate with the panels is no longer functional.

The purpose of this contract is to upgrade the WIN-PAK PIV Reader Access System, Honeywell Compass Intrusion Detection System, and AIPhone Video Doorbell with remote door unlocking system with a unified solution. The new system ideally could expand to include future security camera monitoring, management, and recording.

II. SCOPE OF WORK

The contractor shall provide all labor, supplies, materials, facilities, equipment, deliverables, documentation, and travel necessary to provide both initial installation and configuration of a new security solution. All delivered goods will become the permanent property of HAFC at the conclusion of the contract.

A. INSTALLATION AND CONFIGURATION

The contractor shall have previous experience with security systems and their installations at United States federal government facilities, complying with all laws and regulations. The contractor shall be knowledgeable concerning industry standards and guidelines and install solutions accordingly.

All hardware shall be new condition, TAA-compliant, 889-B compliant, and industry-leading standards. The contractor shall include compliance documentation in their submission.

All communications shall be encrypted, complying with industry-leading encryption standards.

Cloud-based solutions are generally restricted by policy except when they meet a stringent list of requirements. If a proposed solution is already FEDRAMP authorized and approved for use within DOI, it may be acceptable. However, HAFC must clear all DOI and NPS requirements for this specific request regardless of prior DOI/NPS approvals prior to implementation. Due to cost-restraints, HAFC cannot sponsor a new FEDRAMP applicant. If prospective contractors have questions regarding cloud-based solutions, please submit questions during the open period of this solicitation.

For local solutions requiring network switch(es), all equipment shall be compatible with either Cisco or Aruba.

The contractor shall install CAT-6 Ethernet network cabling for new installations where needed to conform with current network architecture. The contractor shall replace substandard cabling and not reuse it. Work will be coordinated with HAFC FSP and IT to ensure compliance. Network disruptions will be coordinated in advance with documented change management. Unplanned outages during installation and configuration will be resolved by the contractor.

The contractor shall survey locations for the installation of equipment and provide requirements for electrical and networking. If changes are required, the contractor will work with FSP and IT to develop plans of action.

For local solutions requiring a non-Windows based security appliance, the appliance will comply with the previously mentioned requirements for hardware and encrypted communications. The operating system will be updateable and capable of receiving security patches to address vulnerabilities. The contractor shall provide support for addressing any security vulnerabilities that may arise during the contract’s duration.

For local solutions requiring a Windows-based server, the contractor shall supply Dell (or equal) server hardware that meets the following requirements:

(1) The server will become the permanent property of HAFC.

(2) Located in the OIM server room of the main IDC building.

(3) Imaged locally by HAFC IT with NPS supplied Microsoft Windows Server OS.

(4) TAA-Compliant

(5) Trusted Platform Module 2.0

(6) RAID 10 for SSDs in pairs (Matching Type/Speed/Capacity)

(7) iDRAC Enterprise

(8) iDRAC Factory-Generated Password

(9) Two 10GbE BASE-T Ethernet Ports

(10) Dual, Hot-plug, Redundant Power Supply (1+1)

(11) Quantity 2 of C13 to C14, PDU Style, 12 AMP, 6 Feet Power Cord, North America

(12) Performance BIOS Settings

(13) UEFI BIOS Boot Mode with GPT Partition

(14) Rack Mountable w/Drop-In/Stab-In Rails

(15) USB 3

(16) ProSupport Plus and Next Business Day Onsite Service, 84 Month

(17) Keep Your Hard Drive For Enterprise, 84 Month(s)

(18) Next Business Day Onsite Diagnosis Service, 84 Month(s)

The server will be imaged on the network with an officially provided NPS Microsoft Windows Server image provided by HAFC IT. Once imaged, the contractor will install and configure all software components, provide support for software components during the term of the contract, and train HAFC IT on the management of the software components.

DOI classifies IT administrators as personnel classified with a 2210 position description.

However, the daily users of the physical security system do not have the 2210 position description, as they are not IT professionals. Therefore, the software’s primary daily function must allow for non-2210 users to remotely access the solution for its daily use by means of either client-server or web-based interfaces. Non-administrative users, i.e., those who lack the 2210 DOI position description, will not have direct access to the server. Web-based interfaces will be HTTPS (PKI Encrypted).

All software must be approved by the NPS OneGSS CAB council before use. The contractor will propose all software solutions in advance and work with HAFC Information Technology (IT) group on the composition of the submission form. HAFC IT will submit the form as (a) request(s) for software approval. A negative result will result in the software being disallowed for use on the network, requiring another solution.

The contractor shall remove and dispose of all replaced equipment.

B. EXISTING AND NEW LOCATIONS

Below outlines where hardware currently exists and where new hardware is needed. Both existing and new locations for proposed equipment will be integrated together with their counterparts in the proposed solution(s).

A client-server or web-based solution allowing (a) remote client(s) on a locally networked PC to see and hear the party at the exterior door and remotely interact via audio. The remote PC user will have the ability to remotely unlock the door.

1. LOCATIONS FOR VIDEO DOORBELLS:

Exterior, remotely administered video doorbell systems capable of sending video and audio from a party at the exterior door, receiving audio from a system user for safe interaction, and remotely unlocking the exterior door on command by the system user.

A. IDC Building, 2nd Floor, Front Entrance (Existing) B. Lewis Anthony Building, 1st Floor, Front Entrance (Existing) C. Bird Brady Building, 2nd Floor, Front Entrance (Existing) D. Willow Springs Building, Front Entrance (New)

2. LOCATIONS FOR THE VIDEO HARDWARE:

Video doorbell hardware monitors located within the building with the doorbell to allow onsite user lacking a PC to safely interact with the party at the exterior door with the door remaining closed and locked. The onsite personnel will be able to see and hear the party at the exterior door and be able to interact via audio.

The onsite personnel will have the ability to remotely unlock the door from this hardware console.

A. IDC Building, 2nd Floor, Front Desk (Existing) B. Lewis Anthony Building, 1st Floor, Hallway (Existing) C. Bird Brady Building, 2nd Floor, Hallway (Existing) D. Willow Springs Building, Front Entrance (New)

3. LOCATIONS FOR CARD READERS FOR DOOR ACCESS:

Department of the Interior Personal Identity Verification (PIV) contactless card readers for door access. The card readers will be capable of operating on the exterior walls of the HAFC facilities, potentially withstanding a range of weather conditions and temperatures without a loss of function. The readers will be a recent model capable of reading PIV v.7 and PIV v.8 cards, i.e., proximity and CHUID capable. This functionality will be verified before deployment. The readers will indicate both visual and auditory cues for success/failure of the access attempt. In the event of a successful attempt, the reader will unlock the door for enough time to allow the party to enter and then lock immediately afterwards.

Each access attempt will be logged in the security solution for later review. Units will be configured remotely through a remotely accessible security solution.

IDC Building Existing locations:

IDC Building, 1st Floor, Loading Dock Interior Door (Existing) IDC Building, 1st Floor, Back Door (Existing) IDC Building, 2nd Floor, Main Entrance (Existing) IDC Building, 2nd Floor, Front Stairwell Entrance (Existing) IDC Building, 2nd Floor, East Patio Rear Entrance (Existing) IDC Building, 2nd Floor, West Patio Rear Entrance (Existing)

IDC Building New locations:

IDC Building, 1st Floor, Loading Dock Exterior Door (New) IDC Building, 1st Floor, Admin Office Room 1008 Entrance (New) IDC Building, 1st Floor, Admin Office Room 1008, At PC with Security

System Access, To Manage Users (New) IDC Building, 1st Floor, Storage Room 1011 (New) IDC Building, 1st Floor, Storage Room 1014 (New) IDC Building, 1st Floor, Exterior Northwest Entrance (New) IDC Building, 1st Floor, Exterior Southwest Entrance (New)

Lewis Anthony Existing locations:

Lewis Anthony Building, 1st Floor, Front Entrance (Existing) Lewis Anthony Building, 1st Floor, Stairwell Door (Existing) Lewis Anthony Building, Basement Floor, Northwest Entrance (Existing)

Lewis Anthony Building, Basement Floor, Southwest Patio Entrance (Existing)

Lewis Anthony New locations:

Lewis Anthony Building, Basement Floor, Northeast Entrance (New) Lewis Anthony Building, Basement Floor, Southeast Patio Entrance (New)

Bird Brady Existing locations:

Bird Brady Building, 2nd Floor, Main Entrance (Existing) Bird Brady Building, 2nd Floor, Admin Office Room 5, At PC with Security

System Access, To Manage Users (Existing)

Bird Brady New locations:

Bird Brady Building, Basement Floor, Back Entrance (New) Bird Brady Building, 1st Floor, Back Entrance (New) Bird Brady Building, 1st Floor, Storage Room (New) Bird Brady Building, 2nd Floor, Back Entrance (New) Bird Brady Building, 3rd Floor, Back Entrance (New)

Willow Springs Existing location:

Willow Springs Building, Main Foyer Entrance (Existing)

Willow Springs New locations:

Willow Springs Building, Main Exterior Entrance (New) Willow Springs Building, Corridor 136 Loading Dock #1 (New) Willow Springs Building, Room 132 Loading Dock #2 (New) Willow Springs Building, Rear Server Room (New) Willow Springs Building, Front Security/Switch Room (New)

4. INTRUSION DETECTION PANEL LOCATIONS:

Intrusion detection panels for interior doorways that alarm NPS dispatch of unauthorized access when armed. This system is capable of automatically scheduled arm/disarm functions and allows for manual alarm override. These panels will reside in climate-controlled interior environments and will not control door mechanisms. They will be configurable at either the panels themselves or remotely through a remotely accessible security solution.

IDC Building IDC Building, 1st Floor, Loading Dock Stairwell (Existing) IDC Building, 1st Floor, OIM Server Room (Existing) IDC Building, 1st Floor, Hallway at Foot of Main Stairwell #1 (Existing) IDC Building, 1st Floor, Hallway at Foot of Main Stairwell #2 (Existing) IDC Building, 1st Floor, Exterior Southwest Entrance (Existing) IDC Building, 2nd Floor, Main Stairwell (Existing) IDC Building, 2nd Floor, Main Entrance (Existing) IDC Building, 2nd Floor, Pin Oak Hall Entrance (Existing)

IDC Building, 3rd Floor, Main Stairwell (Existing) IDC Building, 3rd Floor, East Stairwell (Existing)

Lewis Anthony

Lewis Anthony Building, 1st Floor, Front Entrance (Existing) Lewis Anthony Building, Basement Floor, Northwest Entrance (Existing) Lewis Anthony Building, Basement Floor, Southwest Patio Entrance

(Existing)

Bird Brady Bird Brady Building, Basement Floor, Back Entrance (Existing) Bird Brady Building, 2nd Floor, Front Entrance (Existing)

Willow Springs

Willow Springs Building, Foyer Entrance (Existing) Willow Springs Building, Back Hallway (Existing)

III. FUTURE POTENTIAL UPGRADES:

Not within the scope of this solicitation, but the ideal security solution would include the previously mentioned features and allow for future expansion of integrated security cameras.

IV. MAINTENANCE

The contractor shall provide one year of support including one regularly scheduled onsite maintenance visit and 48 hour response time for onsite troubleshooting support to ensure functionality and availability of the security solution.

V. PERIOD OF PERFORMANCE

The period of performance shall be 120 days after date of award. The contractor will perform the work during normal daytime work hours between 8:00 AM and 5:00 PM Monday through Friday local time. No work will be performed on Federal Holidays or weekends unless approved at least 48 hours in advance by the Contracting Officer. The period of performance for support will be one (1) year after acceptance of the installation.

VI. FACILITY SECURITY POLICY

Contractors attending meetings or accomplishing work within the buildings or real property of the National Park Service shall adhere to the security policy of each office. It shall be the responsibility of the contractor to attend a briefing on security policies if required by local policy before work begins.

The places of performance are:

Interpretive Design Center (IDC) Building, 67 Mather Place, Harpers Ferry, WV 25425 Lewis Anthony Building, 68 Mather Place, Harpers Ferry, WV 25425, Bird Brady Building, 253 Hartzog Drive, Harpers Ferry, WV 25425 Willow Springs Building, 31 Maple Tree Drive, Charles Town, WV 25414

VIII. GOVERNMENT-FURNISHED PROPERTY

The contractor shall be responsible for security and protection of all government-furnished property or materials provided in connection with this contract. Following acceptance of all work by the government, the contractor shall return to the COR all government-furnished property.

IX. ADDITIONAL WORK

Any additional work not detailed in this contract shall be approved, in writing, by the Contracting

Officer via a modification.

X. INSPECTION AND ACCEPTANCE

All service and work performed under this contract shall be subject to inspection and acceptance by the designated Contracting Officer’s Representatives (COR) at any time during performance.

If the COR determined that services, work, or materials being furnished do not meet the required standards, the government reserves the right to have the work performed elsewhere, charging the contractor with costs involved, subject to the provisions of FAR 52.249-8.

XI. WARRANTY

The contractor shall guarantee the workmanship against defects in work and material for a minimum of one year. The warranty period shall commence with final acceptance of work. This shall include all labor and parts at no additional cost to the government.

If during this warranty period, the government identifies defective workmanship, materials, or equipment, the contractor will be notified, in writing, as to liability and responsibility for corrective action at no cost to the government. Action may include, but is not limited to:

A. Placing all work into satisfactory condition;

B. Making good all damages to equipment, the site, the building, or contents thereof, that have resulted from such unsatisfactory work; and

C. Making good any work, materials, or equipment that are disturbed in fulfilling the guarantee including any work, material, or equipment that may have been guaranteed under another contract.

Should the contractor fail to proceed with work in accordance with the guarantee within seven calendar days from the Notice of Corrective Action(s), the government will have such work performed at the expense of the contractor.

In no event will the government be responsible for any extension or delays in the scheduled deliverables or periods of performance under this contract as a result of the contractor's obligations to correct defects, nor shall there be any adjustment of the delivery schedule or period of performance as a result of the correction of defects unless provided by a supplemental agreement with adequate consideration.

If the government returns any work to the contractor for correction or replacement under this contract, the contractor shall be liable for transportation charges up to an amount equal to the cost of transportation by the usual commercial method of shipment from the place of delivery specified in the contract (irrespective of the F.O.B. Point or the point of acceptance) to the contractor's plant and return to the place of delivery specified in the contract. The contractor shall also bear the responsibility for the work while in transit.

The contractor shall be liable for the reasonable costs, including travel of personnel, and disassembly and reassembly of larger items when it is necessary to remove the work to be inspected and returned for correction or replacement.

Warranties included in the contractor’s proposal will become a part of the resultant contract.