Attachment J.3 - Questions and Answers.pdf

Questions and Answers Solicitation 15BPCC26R00000004

1. Could BOP please confirm whether all cloud-hosted capabilities proposed to satisfy Section C-including evidence ingestion, management, search, sharing, redaction, audit logging, retention, reporting and administrative functionality-must be included within the authorization boundary associated with the FedRAMP package ID submitted by the Offeror?

Answer: Yes, all cloud hosted capabilities must be within the FedRAMP boundary.

2. Attachment J.1 includes a total of 19,775 body cameras. Given that cameras will be pooled, how many total users (both camera and non-camera users) should be accounted for?

Answer: Approximately 20,000.

3. Does the total camera count of 19,775 account for on-hand spares?

Answer: Yes

4. Please confirm the percentage of spare cameras to include with the proposal if not already accounted for in the numbers provided.

Answer: This is already accounted for in the numbers provided.

5. Section 4.4 states that the vendor supports data retention for up to 10-years but section 4.5 states that agency data must remain accessible for 90-days after contract termination. Please confirm that the 10-year data retention requirement is only applicable as long as Bureau of Prisons is under contract with the vendor.

6. Additionally, please confirm that a vendor may request an equitable adjustment should Bureau of Prisons request the vendor to continue to provide access to stored data for longer than 90-days after contract termination.

7. 3.2.4 States "Defective products must be repaired or replaced within 10 business days of receipt within the warranty period." Does the 10-days include receipt back to BOP?

8. To support accurate implementation planning for the 92 institutions in Attachment J.1, will BOP provide available site-specific information regarding network connectivity/bandwidth, electrical capacity, physical checkout locations, PIV infrastructure, radio systems, Active Directory/Okta configuration, and existing BWC infrastructure prior to each site assessment?

9. Does BOP intend to have a BWC program office that will triage support requests before sending to the vendor?

Answer: No

10. How many authorized users need access to redaction tools?

Answer: Approximately 700 users.

11. Is there an intent to utilize the DEMS platform for other than BWC video footage/files, etc?

Answer: The final determination will be made based on the options the vendor provides.

12. Section 4.6 defines "FedRAMP Authorized" as a service holding a Provisional Authorization to Operate (P-ATO) issued via the Joint Authorization Board (JAB).

The JAB P-ATO pathway has since been retired under FedRAMP's revised authorization framework, which now issues authorizations by class (Class A, B, C, or D), with Class D corresponding to the former High baseline. Given this change to the FedRAMP program, can the Government confirm: Whether the solicitation's definition of "FedRAMP Authorized" will be updated to reflect the current class-based authorization structure?

Answer: Yes, we will change it to FedRAMP Class D.

13. Reference: Section C.1, Statement of Work, Item 9 (Site-Specific Assessments) The SOW states that the vendor shall perform site-specific assessments to identify networking, power, mounting, and docking requirements at each institution. Can the Government provide additional detail on the current networking and IT infrastructure environment at FBOP institutions, including:

• Availability of wired Ethernet and/or Wi-Fi network drops in areas where docking stations and kiosks would be installed?

Answer: Network drops will be added as necessary by the FBOP.

• Whether existing network infrastructure (switches, ports, bandwidth) is expected to support the BWC solution, or whether infrastructure upgrades will be required as a separate effort?

Answer: Depending on the number of devices that need to be connected to the network, additional network switches may be required (responsibility of the agency). Current bandwidth at each location provides plenty of overhead for additional network traffic however bandwidth upgrades may be required depending on the amount of traffic from the site to the cloud.

• Whether internet/network access varies significantly by institution (e.g., due to age of facility, security classification, or rural/urban location) that offerors should account for in their deployment approach?

Answer: Yes, internet/network access can vary by institution due to factors such as facility age, security classification, and location. While specific details cannot be provided, offerors should account for these variations in their deployment approach.

14. Reference: Section C.1, Statement of Work, Item 9 (Installation Requirements) The SOW requires the vendor to install, configure, and activate all hardware components, including docking stations and supporting infrastructure. Can the Government clarify:

• Whether docking stations will be desktop/shelf-mounted, wall-mounted, or a mix, and whether this varies by institution?

Answer: Yes, this will be a mixture and vary by institution.

• Whether facility modifications (e.g., wall-mount hardware installation, electrical work, network drops) are within the vendor's scope, or whether FBOP facilities/maintenance staff will handle structural or electrical work in coordination with the vendor's installation schedule?

Answer: FBOP will complete this work.

• Any facility-specific security or access restrictions (e.g., controlled housing units, secure perimeters) that may affect the vendor's ability to access installation areas?

Answer: Yes, institution specific.

15. Could FBOP please confirm whether offerors should be evaluated more favorably (i.e. receive a strength) for proposing an alternative deployment schedule that results in a quicker path to full deployment?

Answer: No, additional consideration will not be given for a quicker deployment schedule.

16. General: Who owns the video, who is allowed to view it, and at what organizational level should the system be administered: facility, state, or federal headquarters?

Answer: The owner of the video will be the agency. The agency will determine who will have permission to view the videos.

17. General: How Long are shifts?

Answer: 16 hours

18. Organization Structure and Site Access: Are facilities within the same state operated independently, or centrally managed at the state level?

Answer: Facilities operate independently and are managed on the federal level.

19. Organization Structure and Site Access: Should site supervisors only access evidence from their own facility, or also from other facilities within the same state?

20. Organization Structure and Site Access: Do any state-level administrators need to manage multiple facilities, and can a user be assigned to more than one facility?

21. Cross-State Data Access: Must evidence and user access be completely isolated between states?

22. Cross-State Data Access: Does any federal or headquarters-level administrator need access to evidence across multiple states?

23. Cross-State Data Access: If cross-state evidence sharing is required, should it use direct access, case-based permission, a time-limited link, or an exported copy?

24. Deployment Model: Which deployment model is preferred?

• One system per facility

• One centralized system per state

• One nationwide system

• A hybrid local-and-central model

Answer: One nationwide system.

25. Deployment Model: Must each facility continue uploading and accessing video when its connection to the central system is unavailable?

26. Deployment Model: Do all facilities share the same Active Directory or identity provider, or does each facility manage its own user accounts?

Answer: All FBOP facilities operate under a centralized Active Directory forest and identity management structure. User accounts are not managed independently at each facility.

27. Data Retention: What is retention of non events?

Answer: 14 days

28. Data Retention: What is retention for the classifications of videos?

Answer: 7 days

29. Data Retention: Regarding the "secondary hosting facility with automatic failover" requirement, can you please clarify if this applies to systems that are hosted in the AWS GovCloud? Data redundancy/resiliency across multiple hosting facilities is inherent to a system that is hosted in the AWS GovCloud.

Answer: Yes, the system should be designed to have data retention and data redundancy such as AWS GovCloud East and West if a cloud application is provided.

30. Infrastructure: Regarding "archived files", what is the retention period for an "active" file before it should be automatically archived?

Answer: 2 years

31. Redaction: Regarding the redaction capability to "crop audio or video segments", can you please clarify what you are looking for? For example, are you referring to trimming/clipping the audio/video down? Or are you referring to actually cropping the video to a smaller size and removing everything outside of that area?

Answer: Requesting to have the capabilities of all the above functions.

32. Redaction: Out of the total user base, how many total users and concurrent users will need access to redaction capabilities?

Answer: Approximately 700 users.

33. Redaction: Out of the total user base, how many total users and concurrent users will need access to redaction capabilities?

Answer: Approximately 700 users

34. Redaction: Outside of the BWC footage, what other sources of audio/video need to be redacted in the solution? For each source, please include as much detail as possible such as the name of the vendor, product, and file format.

Answer: None at this time. However, this may be an option in the future.

35. Is there a minimum guaranteed quantity or contract value?

Answer: This is a requirements contract under the Revolutionary FAR Overhaul (RFO) 16.503, and a minimum guarantee is not included. An estimated quantity is established in Attachment J.1 - FBOP Facility Implementation Schedule_V.1. This quantity is a realistic, estimated quantity for information purposes only, and does not obligate the Government to order a minimum amount.

36. Will FBOP provide a standard pricing template, or should offerors create their own?

Answer: A pricing template will not be provided, and the offeror shall create their own.

Refer to the RFP Section L.4, Proposal Preparation Instructions: Volume 3 – Price Proposal.

37. Will the contractor be responsible for migrating any existing digital evidence?

Answer: No.

38. Who is financially responsible for facility infrastructure upgrades identified during site assessments?

Answer: The FBOP will be responsible.

39. Does the 60-day delivery requirement apply to equipment delivery only or full operational deployment?

Answer: The 60-day delivery is specific for each individual site once the contractor is notified to begin delivery. Full operational deployment is required for the specific site within the 60-days.

40. Can hardware, software, implementation, and training be invoiced separately upon acceptance?

41. Should all travel and deployment expenses be included in firm-fixed pricing?

42. Will schedules be adjusted for Government-caused delays, security processing, or facility-access delays?

43. May offerors use relevant past performance of proposed major subcontractors or OEM partners in Volume II?

Answer: Subcontractor performance may be used.

44. How will service credits for failure to meet the 99.5% availability requirement be calculated?

Answer: It will be calculated based on the value of services not rendered.

45. Is technology refresh mandatory, optional, or ordered at FBOP’s discretion?

Answer: The technology refresh is mandatory.

46. How should licensing, warranty, and support be priced for equipment deployed in different rollout years?

Answer: The Offeror should use their standard commercial practice.

47. Should contract-termination data extraction, transfer, and cloud-egress costs be included in proposed pricing?

48. Who will provide network connection to the cloud? What speed? Who pays for it?

Who maintains it?

Answer: Traffic will be routed using FBOP’s current WAN solution. Bandwidth requirements will be determined based on the solution.

49. Are there spares required?

Answer: Yes, the total camera count accounts for on hand spares.

50. What types and quantities of wearable body worn camera mounts are required?

Magnets, Clips, Bolle etc.

Answer: Magnetic camera mounts are needed for every BWC, a one for one.

51. Define unlimited storage, 10 years of what?

Answer: All videos uploaded to the cloud, along with any associated data or information, must be retained. This includes—but is not limited to—ensuring proper access to the information, implementing access controls for those systems, and maintaining the capability to retrieve the data whenever necessary for the entire 10-year retention period.

52. What are the Warranty requirements?

Answer: Commercial practice and must cover the equipment through the next technology refresh.

53. What is needed for the tech refresh?

Answer: The tech refresh should align with your commercial practice. This is to ensure outdated cameras and tech are upgraded.

54. What is the timeline to complete each site?

Answer: The timeline for each site will be 60-days once the contractor is notified to begin delivery. Full operational deployment is required for the specific site within the 60-days.

55. Will there be concurrent installs and if so, how many?

Answer: Yes, there will be concurrent installs.

56. Are site assessments needed for each location? How is that included in the pricing?

Answer: Yes, the SOW requires site assessments for each institution. This should be incorporated into your pricing schedule.

57. What Radio manufacturer is currently installed in each facility?

Answer: Every radio system in the FBOP at this time is Motorola.

58. How do we present our pricing for the RFP? Is it per site? Is it unit pricing?

Answer: The Offeror shall use Section L.4, Proposal Preparation Instructions: Volume 3 – Price Proposal of the RFP, Attachment J.1 - FBOP Facility Implementation Schedule_V.1, and their standard commercial practice to provide pricing for this requirement.

59. We don’t see a material pricing sheet. Will one be provided?

Answer: No pricing sheets are provided. The Offeror shall use Section L.4, Proposal Preparation Instructions: Volume 3 – Price Proposal of the RFP, Attachment J.1 - FBOP Facility Implementation Schedule_V.1, and their standard commercial practice to provide pricing for this requirement.

60. Will the 10 years of cloud service be bought upfront or invoiced annually?

Answer: This is up to the offeror to propose.

61. Are the subcontracting goals (SB, SDB, WOSB, etc.) mandatory requirements?

Answer: The agency subcontracting goals may be waived if there’s adequate reasons as to why the stated goals cannot be met or if the offeror already has a commercial plan in place.

62. Who installs and pays for iNet?

Answer: There is no requirement to utilize iNet in the SOW. The requirement is that the solution provides technology to facilitate the secure file transfer of large files even in the event of poor connectivity.

63. How does one activate all BWC's at one time if emergency? Transmit or RF needed?

Answer: This function will be evaluated if the vendor has the capability to provide the function.

64. Duress on radios causes BWC to go into record (manufacturer if technically feasible)?

Answer: The contractor’s solution shall support integration with agency issued radios (manufacturer agnostic, where technically feasible) to trigger automatic BWC activation during body alarm/man down events. All radios have this duress feature.

65. How long does the system need to keep redundant backups?

Answer: The retention period is 10 years.

66. What percentage of storage is quick access and how much is long term?

Answer: 20 Percent storage should be quick access, and 80 percent would be long term storage.

67. Can owner view video in real time on officer's BWC?

Answer: This will be evaluated if the vendor has the capabilities to provide this function.

68. Who provides network switches in building?

Answer: BOPNet switches are already installed and have sufficient available interfaces to support kiosk requirements. If additional switches are necessary, the agency will provide them.

69. Who provides viewing PC's or they just use their computers?

Answer: The FBOP.

70. Do we have to turn in the Implementation and Deployment Plan per facility for the

RFP?

Answer: No. The Offeror shall provide their Implementation & Deployment Approach (Contractors proposed approach to successfully implement and deploy BWC’s) as part of their proposal which will be evaluated.

71. Does owner setup initial database with users/officers and make groups, access ability, etc?

Answer: ITDD will always maintain security of users, Groups and access control, with the assistance of the vendor.

72. Explain warranty time for all products from start of purchase through technology refresh. Does it restart after refresh? What if the refresh is scheduled every 6 months?

Answer: The warranty should be in line with commercial practices and cover the equipment through the tech refresh. The tech refresh should include the issuance of new cameras. The contractor will propose a refresh schedule.

73. Who provides PIV cards?

Answer: The FBOP provides PIV cards.

74. Who provides the installation onsite (conduit, wire, UPSs)?

Answer: FBOP will complete this work; however, appropriately sized UPSs will need to be provided as part of this contract.

75. Who provides transmitters around campus to activate the record on all cameras with either a duress on a radio or control room activation?

Answer: The offeror shall provide the necessary transmitters determined as part of their facility site assessment.

76. Regarding 800 simultaneous uploads: Please clarify whether the statement “at least 800 videos simultaneously” means 800 concurrent upload sessions across the FBOP enterprise/tenant, 800 concurrent uploads at a single institution, or another concurrency model. Please also confirm whether queued upload operations satisfy the requirement after the 800-concurrent threshold is reached, provided uploads are completed without loss and chain of custody is preserved.

Answer: Concurrent upload session across the FBOP enterprise/tenant.

77. Regarding bandwidth/site connectivity: Will FBOP provide institution-level WAN bandwidth, latency, and utilization profiles during site assessment?

Answer: ITDD can provide WAN bandwidth statistics, latency, and utilization profiles during the assessment upon request.

78. May the solution use local buffering/edge storage and bandwidth-aware queuing to stage BWC uploads to the cloud when WAN capacity is constrained, provided no media is lost and evidentiary integrity is preserved?

79. Are the BWC utilizing Wi-Fi or cellular uploads or are they local storage then upload after the fact? If Wi-Fi, have the local wireless networks been scoped for large simultaneous volumes of video data?

Answer: They will be local storage then uploaded after the fact. There are no plans in the immediate future to leverage the BOP managed WiFi to support this solution.

80. Regarding Hybrid architecture: Would FBOP accept hybrid architecture in which BWC video is ingested and temporarily retained on-premises/at the edge for active operational use, while case/evidence files are synchronized or moved to the FedRAMP-authorized cloud for long-term retention and management? If acceptable, must the cloud be the system of record from initial ingest, or may on-premises storage serve as the authoritative repository until case closure, or another defined archival event?

Answer: Yes, it can be temporarily stored on-premises and then moved to the cloud. The cloud storage would be authoritative once ingested.

81. What are the requirements for a failover in the event of connectivity loss to Cloud storage?

Answer: If connectivity to the cloud is lost, the vendor must automatically establish an already-approved secondary route to maintain upload capability. In the event of a local outage where no external path is available, all video and associated metadata must be queued securely and transmitted once connectivity is restored, with no loss of media or chain-of-custody integrity.

82. Regarding unlimited storage: Please clarify whether “unlimited cloud storage capacity” means no contractual storage cap/no per-GB overage to FBOP, or whether all retained BWC media must remain in online/hot cloud storage?

Answer: All videos uploaded to the cloud, along with any associated data or information, must be retained. This includes—but is not limited to—ensuring proper access to the

83. May the contractor use tiered hot/cool/archive cloud storage if retention, chain of custody, searchability, and the required archive retrieval times are maintained?

ITDD

Answer: Yes, All videos uploaded to the cloud, along with any associated data or information, must be retained. This includes—but is not limited to—ensuring proper access to the information, implementing access controls for those systems, and maintaining the capability to retrieve the data whenever necessary for the entire 10-year retention period.

84. Regarding 10-year retention: Does “retention up to 10 years” mean the solution must support configurable retention periods up to 10 years, or that all BWC recordings will be retained for 10 years? Please provide representative retention categories/schedules or expected percentages by retention duration for storage sizing and pricing?

Answer: All videos uploaded to the cloud, along with any associated data or information, must be retained. This includes—but is not limited to—ensuring proper access to the

85. Regarding sizing/pricing assumptions: For firm-fixed pricing of storage and bandwidth, can FBOP provide planning assumptions for average recording hours per camera per shift/day, expected bitrate/resolution, percentage of recordings promoted to cases, annual ingest volume, and expected long-term retention mix? If not, may offerors state explicit sizing assumptions in Volume 3?

Answer: Cameras will be active for up to 18 hours per day.

86. Regarding Case Management lifecycle: If a hybrid design is acceptable, may the storage solution Case Management use on-premises/edge storage for active cases and move the complete closed case package to the FedRAMP-authorized cloud for long-term retention, while preserving search, reporting, audit trail, and chain of custody?

Answer: No, edge storage should be temporary storage only until the information can be uploaded to the FedRAMP cloud.

87. Regarding ATO boundary for hybrid storage: If on-premises NVR/edge storage is used as part of a hybrid architecture, will FBOP treat the on-premises component as a separate Covered Information System requiring a separate ATO, or may the on-premises and FedRAMP cloud components be assessed under a single FBOP authorization boundary/package?

Answer: They will be under a single authorization boundary.

88. The request for 20,000+ concurrent users does not mention if this would be continuous or burst workload. Is the expectation to scale cloud resources up and down automatically?

Answer: Yes, if the demand requires we would expect automatic scaling and a burst workload.

89. What is the expected workflow? Are users expected to grab any camera, have a recording case assigned to the user automatically, and when done it’s closed as its own evidence?

Answer: Cameras will be assigned/checked out by the user with their PIV card.

90. Is FBOP expecting the storage solution to have all redaction capabilities, or the cameras to have this or can third party software be used after the fact?

Answer: The storage solution software shall have all redaction capabilities.

91. Is the expectation that all video evidence is backed up to failover facilities?

Answer: Yes – The Contractor shall provide the Agency with regular failover-testing reports, delivered monthly or quarterly as directed by the Agency, documenting the results of all failover exercises, verification of system recovery processes, and confirmation of data retention integrity. Each report shall include the testing methodology, execution date, observed outcomes, identified deficiencies, and any corrective actions taken or proposed.

92. Does the 99.5% availability include scheduled maintenance?

93. Is it expected that the storage solution software has video editing capabilities or can this be done with third party apps?

Answer: The storage solution software shall have video editing capabilities.

94. What does the expected outlook integration look like? Can a hyper link with login or a direct download of MP4 file with third party sharing software qualify?

Answer: An embedded online video that can be played and is compliant with modern browsers (Microsoft Edge), with an option to download and play offline.

95. Does chain of custody reporting in the storage solution need to include what happens after export or will this be handled by the customer/internal COC tracking?

96. Define radio integration. Is this mesh-style network or audio from radios/walkie talkie?

Answer: Both

97. What level of IPV6 is expected? Server side only or down to camera connections?

Answer: There is no current requirement to implement IPv6. However, any proposed solution must be capable of supporting both IPv4 and IPv6 in a dual-stack configuration to accommodate future needs.

98. If the BWC device supports activation based on fall detection. Does the agency intend automatic recording to be triggered only by the BWC’s own man-down/fall detection, or must recording also be triggered by external radio emergency/body alarm events? If both are required, what is the priority/override logic and how should conflicts be handled?

Answer: BWC should be activated by the man-down detection and any other safety equipment utilized by agency systems.

99. What brand and format are your RFID cards?

Answer: ID-One PIV 2.4 from IDEMIA