1462- NBSFS Request for Information.pdf

DEPARTMENT OF THE AIR FORCE

INTRUSION DETECTION SYSTEM SENSITIVE FOR CLASSIFIED INFORMATION

FACILITY INSTALLATION AT NEW BOSTON SPACE FORCE STATION

REQUEST FOR INFORMATION

Classification:

Small Business Set Aside: TBD pending RFI results Product Service Code: 6350- MISC Alarm, Signal, Security Systems NAICS Code: 561621- Security Systems Services (except Locksmiths) Place of Performance: New Boston Space Force Station, New Boston, NH 03070

Description:

Engineer, Design, Furnish, Install, and Test (EDFI&T) of the Installation of an IDS that meets all regulations for a SCIF. This system must protect against various physical ground threats, providing the essential tasks of detection, annunciation, (sounding the alarm), to secure the SCIF resource. IDS installation related components and monitoring stations shall comply with Underwriters Laboratories (UL) Standard for National Industrial Security Systems for the Protection of Classified Material, UL 2050, DAFI31-101_DAFGM2023-01 11 April 2023, and IC Tech Spec for ICD/ICS 705. A NIST (National Institute of Standards and Technology) Certificate will be supplied by the Installer for the Vindicator Panel - Shows that the line from the panel to the monitoring station is 128 bit encrypted. A diagram identifying where the devices will be installed at inside the secure area. Devices necessary: PCU (v-5 or 7 panel), one 360-degree motion sensor, and one high security switch II.

NOTE:

This RFI is issued for informational purposes only and does not constitute a solicitation or commit the government to award a contract now or in the future. Submitting information for this RFI is voluntary, and participants will not be compensated. No funds have been authorized, appropriated, or received for this effort. The information provided may be used by the Air Force in developing its acquisition strategy and performance specifications

Contractual Information:

At this time, no determination has been made as to whether this effort will be a small business set-aside. Therefore, responses will be used to help make a set-aside determination. Please be advised that if any resulting acquisition is conducted as a small business set-aside, each offeror will be required to certify (by completing FAR 52.219-1, Small Business Program Representation) that it is a small business at the time its proposal is submitted for this acquisition.

The Government anticipates utilizing a Firm Fixed Price (FFP) Contract Line Item Number (CLIN) structure. Describe whether your company needs financing arrangements under FAR part 32 and if so, whether your company has an approved accounting system.

If a resulting contract is awarded, supporting documentation to accompany the award may be classified as Controlled Unclassified Information (CUI). Please provide any concerns regarding compliance with the following provisions and clauses:

• FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems

• DFARS 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls

• DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting

• DFARS 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements

• DFARS 525.204-7020, NIST SP 800-171 DoD Assessment Requirements

Technical Description:

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY.

Responders should answer all the following questions in as much detail as possible:

a. Can your company provide the design, installation, certification, and sustainment of a Vindicator Intrusion Detection System (IDS) and Access Control System (ACS) for a Sensitive Compartmented Information Facility (SCIF) at New Boston Space Force Station?

b. Is your company capable to ensure the new Vindicator system will integrate with NBSFS existing Vindicator system?

c. Do you have any suggestions or questions regarding the attached to listed specifications?

This RFI is issued solely for information and planning purposes – it does not constitute as a Request for Quote (RFQ) or a promise to issue an RFQ in the future. This request for information does not commit the Government to contract for any supply or service whatsoever.

Further, the Government is not at this time seeking quotations and will not accept unsolicited offers. Interested vendors are advised that the Government will not pay for any information or administrative costs incurred in response to this RFI. All costs associated with responding to this RFI will be solely at the interested party’s expense.

The New Boston Space Force Station (NBSFS) is conducting market research to identify potential contract opportunities for the Engineering, Design, Furnishing, Installation, and Testing (EDFI&T) of an Intrusion Detection System (IDS) and Access Control System (ACS) for a Sensitive Compartmented Information Facility (SCIF). A critical requirement is that the proposed IDS/ACS must be a Vindicator system and must be fully compatible with our currently installed Vindicator alarm system.

The selected contractor will be responsible for ensuring that the installed IDS complies with all relevant Department of Defense (DoD) directives, Underwriter Laboratories (UL) standards, Department of the Air Force Instructions (DAFI) regulations, Intelligence Community (IC)

Technical Specification, and NBSFS local security protocols. Final acceptance of the installed IDS will not be granted until NBSFS receives official certification of the system from the United States Space Force, Space Operations Command, Special Security Office USSF SPOC/SSO. The contractor is expected to EDFIT a system that will meet all requirements for this certification.

The contractor shall be liable for any modifications or corrective actions required to achieve USSF SPOC/SSO certification. All such modifications and corrective actions shall be performed at no additional cost to the government.

All IDS installation components and monitoring stations shall adhere to UL Standard UL 2050 for National Industrial Security Systems for the Protection of Classified Material, DAFI 31- 101_DAFGM2023-01 11 April 2023, IC Tech Spec for ICD/ICS 705, and be installed by a UL 2050 certified installer. The contractor will provide a NIST (National Institute of Standards and Technology) Certificate for the Vindicator Panel demonstrating 128-bit encryption between the panel and the monitoring station.

Project could be viewed in phases as outlined below:

Phase 1: Design

The contractor shall deliver a comprehensive design that meets the requirements outlined in UFGS 01 33 16.00 10 DESIGN DATA (DESIGN AFTER AWARD). The contractor will coordinate with the government on any potential deviations from this guideline, particularly related to implementation on an information technology system. Required design documentation shall include drawings (in Adobe PDF format, stamped and signed by the Designer of Record) and specifications.

The design phase will include the following activities and deliverables:

• Site Survey: A comprehensive, physically on-site survey to assess existing infrastructure, determine optimal cable runs, and identify suitable locations for new equipment.

• System Architecture: A detailed, documented description of the proposed system architecture, including building layout, blueprints, cabling infrastructure, equipment locations, network diagrams, component specifications, communication protocols, and installation procedures.

• Software Design: Specifications for all system software, including user interfaces, licensing, functionality, and security features, as well as baseline configurations. All software must be approved for use on DoD systems IAW DAFM 17-1203.

• Security Procedures: Documented security procedures, adhering to DAFI 31-101 and

SECTION 01 80 00, NBSFS SECURITY REQUIREMENT.

• Interoperability Assessment: A detailed assessment of the system's interoperability with existing base IDS systems, identifying potential challenges and proposing solutions.

• Training Plan: A comprehensive plan for training NBSFS user and maintainer personnel on the operation and administration/sustainment of the new IDS, including specific training requirements for different user roles (e.g., SCIF administrator, BDOC operator, general SCIF users). The contractor will deliver training products for future reference.

• Implementation Plan: A high-level, government-approved master schedule (e.g., POAM, Gantt Chart, Venn diagram) outlining the steps, timeline, and resources required for the system's implementation. This plan should include:

o A phased implementation schedule with clear milestones and estimated durations.

o A resource allocation plan detailing personnel, equipment, and materials required for each phase. The contractor shall define all support requirements needed from the government within 14 calendar days from award.

o A risk assessment and mitigation plan identifying potential risks and proposed mitigation strategies.

o A communication plan for regular communication and reporting to customer stakeholders.

The design will be reviewed at various stages, with the following schedule:

• Project Kick-Off Meeting: Within 21 calendar days after award

• Title 1A 35% Design Submittal: Within 60 calendar days after Kick-Off Meeting

• Title 1A 35% Submittal Review: Within 14 calendar days after receiving the 35% Design Submittal.

• Title 1A 35% Comment Review Meeting: Within 1 calendar day after receiving 35% Submittal Review.

• Title 1B 65% Design Submittal: Within 28 calendar days after approval of 1A Report.

• Title 1B 65% Submittal Review: Within 14 calendar days after receiving the 65% Design Submittal.

• Title 1B 65% Comment Review Meeting: Within 1 calendar day after receiving 65% Submittal Review.

• Title 1D 90% Design Submittal: Within 28 calendar days after approval of 1B Report.

• Title 1D 90% Design Submittal Review: Within 14 calendar days after receiving the 90% Design Submittal.

• Title 1D 90% Comment Review Meeting: Within 1 calendar day after receiving 90% Submittal Review.

• Title 1D 100% Design Submittal: Within 28 calendar days after approval of 1C

• Title 1D 100% Design Submittal Review: Within 7 calendar days after receiving the 100% Design Submittal.

• Title 1D 100% Comment Review Meeting: Within 1 calendar day after receiving 100% Submittal Review.

• Title 1D 100% Design Submittal Corrections: Within 7 calendar days after 100% review meeting

• Title 1F Final Design Submittal: Within 7 calendar days after 100% Design Submittal Corrections for final review

The design review will focus on:

• Project progress, milestones, and challenges

• Compliance with all stated requirements.

• Technical feasibility and soundness of the design.

• Cybersecurity posture and adherence to DoD security standards.

• Interoperability with existing base systems.

• Clarity and completeness of documentation.

• Adherence to all requirements listed in the "Applicable Documents and Standards" section.

Phase 2: Installation

The contractor shall be responsible for the complete and correct installation of the IDS, adhering to all specifications and requirements outlined in this RFI and the approved design. The installation period of performance to complete the installation is three months after final design submittal is approved.

This phase includes, but is not limited to, the following:

• Site Preparation: Preparing the installation site, including any necessary modifications to existing infrastructure and ensuring compliance with all safety and security regulations. This includes coordinating with NBSFS personnel for utility shutdowns or disruptions if required.

• Equipment Installation: Installing all IDS components (sensors, control panels, wiring, communication equipment, Vindicator Site Commander (VSC), Security Archive Workstation (SAW), and Vindicator Command and Control (VCC) ) system in accordance with manufacturer specifications and industry best practices.

• System Configuration: Configuring the IDS software and hardware, including programming alarm zones, setting access levels, and establishing communication links with monitoring stations. This includes configuring the encryption settings for secure communication.

• Cable Management: Installing and managing all cabling in a neat, organized, and secure manner IAW ICD-ICS-705. All cabling outside the SCIF shall be protected per the specifications outlined in this RFI and the approved design.

• Testing and Verification: Conducting thorough testing and verification of all installed components and system functionality, ensuring compliance with the provided test plan and achieving all performance objectives. Detailed documentation of test results is required.

• Cleanup and Restoration: Cleaning up the installation site upon completion of the work, restoring any affected areas to their original condition, and removing all debris and waste materials.

• Documentation: Providing complete and accurate as-built documentation, including diagrams, schematics, and configuration settings.

• Training: Delivering comprehensive training to designated NBSFS personnel on the operation and maintenance of the IDS, as detailed in the training requirements section (Phase 3).

• Warranty Support: Providing a one-year warranty (or manufacturer's standard commercial warranty, whichever is longer), including workmanship and 24/7 response (within 4 hours of notification) for alarm conditions and troubleshooting beyond site capabilities.

• Security Compliance: Adhering to all security requirements and regulations throughout the execution of this effort, ensuring the protection of classified information and the integrity of all secure resources and areas, including the SCIF. This includes obtaining necessary clearances and access badges for all contractor personnel.

The contractor shall coordinate all installation activities with the designated NBSFS point of contact and obtain all necessary approvals before commencing any work. The contractor is responsible for ensuring that all installation work is performed in a safe, supervised, and professional manner, minimizing disruption to ongoing operations at NBSFS.

• Install IT cabinets of appropriate size for the facility to house Vindicator equipment, network switch, and Uninterruptible Power Supply (UPS) devices. The cabinet must account for limited space within involved rooms and should not be overly obstructive.

• Install a fiber optic patch cable to link the IT equipment cabinet with the existing fiber optic network patch panel.

• Program and configure the Vindicator system both locally and at the Base Defense Operations Center (BDOC).

• Ensure all installation work is in accordance with applicable DAFI, DoDM, and AFMAN regulations, including requirements for conduit, wiring, and tampering protection.

Phase 3: Training

The contractor will develop a comprehensive plan for training NBSFS user and maintainer personnel on the operation and administration/sustainment of the new IDS. Deliver training products for future reference. Also, define the specific training requirements or best practices for different user roles (e.g., SCIF administrator, BDOC operator, general SCIF users).

Phase 4: Testing

The contractor shall perform thorough testing of all phases (Design, Installation, Training) as prescribed in DAFI 31-101_DAFGM2022-01 and IAW ICD-ICS-705. Testing will include verification of all installed components and system functionality, ensuring compliance with the provided test plan and achievement of all performance objectives. Detailed documentation of test results is required.

The contractor will coordinate closely with the Government on scheduling and testing.

Phase 5: Sustainment

The contractor will provide details on the requirements for system maintenance, including preventive maintenance schedules, troubleshooting procedures, and the process for reporting and resolving system malfunctions.

The IDS shall be designed for ease of maintenance, including the delivery of a complement of high-failure replacement parts at project turnover, readily available replacement parts, and clear troubleshooting procedures.

The contractor will provide a one-year warranty and service support (or manufacturer's standard commercial warranty, whichever is longer), including workmanship and 24/7 response (within 4 hours of notification) for alarm conditions and troubleshooting beyond site capabilities.

The government cannot accept the use of a company-owned laptop to update the system over the long term. The contractor must account for system software updates and information transfer requirements when considering sustainment.

System Acceptance

Upon completion of the installation and testing, the contractor shall initiate the System Acceptance phase. This phase will involve the following activities:

• Final Inspection: A joint inspection by the contractor and the designated NBSFS point of contact to verify correct installation, proper cable management, and adherence to aesthetic and functional requirements.

• System Demonstration: A demonstration of the full IDS functionality to the NBSFS point of contact, including alarm activation, notification procedures, access control integration, and system reporting capabilities. This demonstration should cover all normal operating scenarios and emergency procedures.

• Documentation Review: A review of all as-built documentation by NBSFS to ensure completeness and accuracy.

• Training Validation: Validation of the effectiveness of the training provided by the contractor through observation of designated personnel operating the system and responding to simulated alarm scenarios.

• Final Acceptance Report: Preparation of a Final Acceptance Report documenting all activities undertaken for the project and the results of the acceptance process. A copy of this report shall be provided to NBSFS.

APPLICABLE DOCUMENTS AND STANDARDS

The following list does not include all standards. The contractor will use the latest version of all applicable documents and standards. The contractor shall obtain and comply with any other applicable manuals not identified in this list that would be required to meet industry standards.

• DAFMAN 17-1203 INFORMATION TEHNOLOGY ASSET MANAGEMENT AND

ACCOUNTABLIITY

• DAFMAN 91-203 AIR FORCE OCCUPATIONAL SAFETY FIRE, AND HEALTH

STANDARDS

• DAFI31-101_DAFGM

• DoDI 6055-17, DoD Installation Emergency Management (IEM) program

• IC Tech Spec for ICD/ICS 705

• SECTION 01 08 00, NBSFS SECUIRTY REQUIREMENT

• NFPA 70 - National Electric Code.

• NFPA 70E, Standard for Electrical Safety in the workplace.

• NFPA 72 - National Fire Alarm Code.

• Non-Nuclear Configuration Management Database (CMD) Equipment Approval List -

AFLCMC/HBU

• UFC 3-520-01 Interior Electrical Systems.

• UFGS 01 33 16.00 10 DESIGN DATA (DESIGN AFTER AWARD)

• UFGS 01 35 26 GOVERNMENTAL SAFETY REQUIREMENTS

• UFGS 01 45 00 QUALITY CONTROL

• UFGS 01 74 19 CONSTRUCTION WASTE MANAGEMENT AND DISPOSAL

• UFGS 01 78 00 CLOSEOUT SUBMITTALS

Important Considerations for Vendors:

• Citizenship: All contractor personnel must be US Citizens without a felony criminal record. Security checks will be conducted.

• Cybersecurity: The IDS shall incorporate robust cybersecurity measures to protect against unauthorized access and cyberattacks, complying with NIST SP 800-53 and other relevant cybersecurity standards. This includes secure communication between system components.

• Power: The IDS/ACS requires a dedicated and independent emergency power system to ensure uninterrupted operation in case of primary power failure. This system must automatically engage without causing alarm activation and provide a minimum of twenty-four (24) hours of continuous power. Acceptable sources include dedicated battery banks, uninterruptible power supplies (UPS), or generators specifically designated for the IDS/ACS. Utilizing existing base generators or UPS systems intended for general purposes does not fulfill this requirement. The contractor is responsible for providing a separate and independent power solution to guarantee the continuous functioning of the IDS/ACS during any outage.

• Escort: The area of work is in a restricted area. The contractor will provide escorts to fulfill escort requirements IAW DAFI 31.101 as outlined in SECTION 01 80 00, NBSFS

SECURITY REQUIREMENT.

• Accreditation: The contractor will be responsible for the accreditation to include final ATO/ATC of the system on AFNET or as an independent system.

• Scalability: The system shall be scalable to accommodate future expansion of the SCIF (or the IDS infrastructure supporting the SCIF) or changes in its layout, including a minimum of 20% additional capacity for alarm points.

Please provide information regarding your company's capabilities and experience in meeting these requirements.