1918 Addendum One.pdf

RFP #1918 Addendum One Page 1 of 3

Revisions and Clarifications:

Revised Bid Offer Form: Modifications have been made to the Bid Offer Form and it has been included with this addendum. Please be sure to submit the new form or your bid may be rejected.

Room 1314 had the following contents that need to be moved and is not represented on the drawings:

o 43 Vertical File Cabinets o 4 Lateral File Cabinets o 20 Banker Boxes

The Staging Area for Phase 2 is approximately 17’ x 26’ and will be located on the west side of Room A. Just to clarify, the awarded Contractor shall bring items up to the staging area from the temporary storage location. The Contractor will not be responsible for putting items in their new location in the remodeled evidence room. Joint Services staff will put the items in their new locations in Phase 2.

Background Check and Fingerprinting process: All individuals will follow this process for fingerprinting and to obtain an ID card.

o Three forms must be completed by the awarded Contractor and emailed to Joint Services. These forms do NOT need to be including in your bid response. The three forms include:

The Kenosha County Sheriff's Department Authorization for Criminal Background Check.

The Kenosha County Sheriff's Department Employee Fingerprint Information Form.

The Wisconsin Time System Security Awareness Handout.

o Once received, Kenosha County Sheriff's Department will run a criminal background check.

Anyone with a felony conviction will be denied.

All misdemeanor convictions will be reviewed on a case by case basis.

o Individuals who pass the background will schedule an appointment to be fingerprinted with Kenosha Joint Services.

The fingerprinting process will include taking photos.

KENOSHA COUNTY

RFP #1918 ADDENDUM ONE DATED 11/18/2019

EVIDENCE RELOCATION

RFP #1918 Addendum One Page 2 of 3 o Once fingerprinted the individuals will sent to Kenosha County Human Resources (Administration Building next door) in order to process ID cards.

o Expect fifteen to thirty minutes per individual to complete the fingerprinting process and to receive an ID Card.

Contract Work Hours: The evidence room is operational 24/7, but we would prefer that the moving service occur Monday thru Friday 8:00 AM to 5:00 PM.

Questions and Answers:

Q. What about the “KDS cubbies”. Do you want us to build you new cubbies?

They’re not shaded in blue? I think we would be best to put and leave those envelopes in order on library carts and leave them on the carts. I have attached a picture of a library cart.

A. Using library carts is a viable option. We have also considered placing those envelopes in plastic tubs (will be done by Joint Services) with lids then store them that way for the duration of the project.

Whichever option is selected, no new cubbies will be constructed.

Q. I might want to send a separate crew to set up the shelving. Will that crew need to be background checked and fingerprinted?

A. Yes, anyone working in the Public Safety Building will need the background check and fingerprinting.

Q. We have shelving that we would like to use and leave for you to keep at no cost to the county. The majority of the shelving that we have is 69”x48”x32” units in perfect condition and we have more than enough. I have attached a couple of picture of the actual shelving. When matching up to the pallet racking they would be too small. We could give multiple shelves per rack to make up for the loss of height, width & depth. Is this an acceptable alternative?

A. These shelves would not be acceptable. The shelving needs to closely mimic the current shelving in order for Joint Services to be able to keep operations smooth during the remodeling.

Q. I wanted to verify one more time that documentation process when moving will only take a matter of second per load, correct?

A. We will document who is taking from specific locations. We will not document every single piece individually. The chain of custody will be maintained by Joint Service staff presence. Joint Service staff members will be present and working alongside Contractor staff to document while they are moving in order to not impede the moving process. We anticipate the disruption to Contractor staff to be minimal.

RFP #1918 Addendum One Page 3 of 3

Attachments:

Revised Bid Offer Form

Time System Security Awareness Handout

Authorization for Criminal Background Check

Employee Fingerprint Information Form

End Addendum 1

KENOSHA COUNTY BID #1918

WISCONSIN PAGE 1 OF 1

ATTACHMENT C

REVISED BID OFFER FORM

Vendor:____________________________________________________________________________

Phase One: Initial move of evidence room contents prior to the remodeling of the evidence room.

Base Bid: Provide all labor, materials, and equipment to complete all Phase One work per bid terms, conditions, and specifications. Includes the cost of shelf rental for the entire project period.

Phase One: Alternate A - Purchase of Shelving

Contractor shall provide and install/setup the temporary shelving as a permanent purchase by the owner instead of renting and removing the shelves. The Contractor shall leave the shelves in place in the designated temporary storage area after the project is complete and the shelves shall be the property of the Owner.

Add or

Delete (circle one) to/from Base Bid

Phase One: Alternate B - Reuse of Shelving

Contractor may reuse some or all of the existing shelving by moving the existing shelving (disassemble/reassemble, etc.)

Contractor shall provide and install/setup temporary shelving as a rental or permanent purchase by the owner for any shelving that could not be reused. The Contractor shall leave the shelves in place in the designated temporary storage area after the project is complete and the shelves shall be the property of the Owner if purchased, or remove the rented shelving.

Add or

Delete (circle one) to/from Base Bid

Phase Two: Returning items back to the newly remodeled evidence room

Base Bid: Provide all labor, materials, and equipment to complete all Phase Two work per bid terms, conditions, and specifications.

Can complete all Phase One work within 14 days after work begins? Yes_____ No______

If no, state the number of days to complete the work: _________________________

Can complete all Phase Two work within 16 weeks after work begins? Yes_____ No______

If no, state the number of weeks to complete the work: _________________________

Phase Two – Lead Time to mobilize for return trips to staging area: ______________________

Bid Bond is included? Yes_____ No______

Kenosha County is exempt from Federal Excise and Wisconsin Sales Taxes, 77.54(9a)(b) WI Stats.

Kenosha County’s CES number is 006193.

WISCONSIN

TIME SYSTEM

Training Materials

TIME SYSTEM SECURITY

AWARENESS HANDOUT

Revised 1/10/2017

2017 Security Awareness Handout All

System Security

The TIME/NCIC Systems are criminal justice computer networks that provide access to sensitive and sometimes confidential information, such as driver's license records, criminal history records, wanted person records, etc. This information must be protected from those who would try to gain unauthorized access to the system and those who would use information obtained from the system for unauthorized purposes.

Various agencies have agreed to make their information available to law enforcement and criminal justice via the TIME and NCIC Systems for the specific purpose of facilitating the administration of criminal justice. Any misuse of this information or violation of the understandings and policies of the system jeopardizes the availability of information for all participating agencies.

The FBl's CJIS Security Policy establishes minimum information security requirements to protect information sources, transmission, storage, and creation of criminal justice information. The TIME System has adopted the CJIS Security Policy as the TIME

System Security Policy. Each agency and user accessing the system is responsible for ensuring the security of the system and criminal justice information.

Authorized Personnel

TIME/NCIC System information is only to be used by authorized law enforcement/criminal justice personnel for law enforcement/criminal justice purposes as outlined in CJIS

Security Policy Section 5.12. Authorized personnel are those that have undergone the required fingerprint based background check, completed security awareness training and appear on the agency's list of authorized personnel.

System Usage

TIME/NCIC System information is only to be used by authorized law enforcement/criminal justice personnel for law enforcement/criminal justice purposes. Both conditions must be met. For example, a law enforcement officer may not obtain license plate/vehicle registration information for personal reasons.

Each criminal justice agency authorized to access the TIME/NCIC Systems is required to have a written policy for discipline of policy violators. Misuse of the TIME System or information obtained from it may be a violation of state or federal laws, and violations may subject individuals and agencies to criminal prosecution and/or other penalties. The unauthorized request, receipt, or release of TIME/NCIC System information can and has resulted in criminal/civil proceedings.

Physical Access & Visitors

Agencies must control all entrances to the secure area and must verify that an individual qualifies for access before granting admission. Remember, authorized personnel are those that have undergone the required fingerprint based background check, completed security awareness training and appear on the agency's list of authorized personnel. If a person has not met these requirements, they may only access the secure area if they are escorted by someone who is authorized.

Before granting such a visitor escorted access to the secure location you should verify the visitor's identity. Visitors must be escorted at all times and visitor activity must be monitored.

Personnel should be aware of their surroundings and take steps to ensure unauthorized persons do not access criminal justice information or the TIME/NCIC Systems. This may include challenging or questioning unescorted subjects, verifying credentials of strangers, and/or ensuring visitors and other unauthorized users are not looking over someone's shoulder to get information. Numerous techniques and tools exist to help ensure the security of data. These may include the use of screensavers, screen shields, terminal location and positioning, etc.

Agency personnel should ensure that all people abide by entrance and exit procedures, visitor control, handling procedures, and access control points. Personnel should report violations or suspected violations, including areas that may not be secure.

Using publicly accessible computers to access, process, store or transmit criminal justice information is prohibited. Publicly accessible computers include but are not limited to:

hotel business center computers, convention center computers, public library computers, public kiosk computers, etc.

Logins

A unique login id is required for each individual who is authorized to store, process, and/or transmit criminal justice information. This includes all persons who administer and maintain the system/network that accesses and/or transmits TIME/NCIC information.

Users are required to uniquely identify themselves before they are allowed to perform any actions on the system.

By logging in to and accessing the system and the information contained therein, users are signifying their agreement to abide by all system policies and procedures and acknowledging the possible consequences of misuse of system resources or criminal justice information. Users should protect their logins and not share them with anyone.

Users are responsible for any and all system activity that happens under their login.

If a user is unable to login after 5 consecutive invalid access attempts, their account will be automatically locked for at least 10 minutes unless released by an administrator. In addition, the system will initiate a session lock after a maximum of 30 minutes of inactivity.

The session lock will remain in effect until the user once again establishes access using appropriate login and authentication. In the interest of officer safety, devices that are part of a criminal justice conveyance, used to perform dispatch functions or designated solely for the purpose of receiving alert notifications and are staffed when in operation and located within a physically secure location are exempt from this requirement.

Passwords

Passwords used to access the TIME/NCIC Systems must meet criteria to be secure passwords. Passwords must be at least 8 characters, must not be a dictionary word or proper name, and cannot be the same as the userid. Passwords must expire at least every 90 calendar days and cannot be identical to the previous ten passwords used.

Passwords cannot be displayed on screen when entered, and must not be transmitted in the clear outside the secure location. Users should protect their passwords and not share them with anyone.

System users should be aware of subjects attempting to obtain computer system access or password/login information by using 'social engineering'. Social engineering means manipulating people into doing something or divulging confidential information.

This may include emails from unknown sources, email attachments containing spyware programs, telephone callers purporting to be from another authorized agency, etc.

When in doubt, system users should verify the source or identity behind the email, telephone call, etc. before potentially misusing system resources or providing criminal justice information to unauthorized subjects.

Proper Handling of Criminal Justice Information

Information obtained via the TIME/NCIC systems, whether in paper form or saved digitally, must be stored in a secure area inaccessible to the public.

Criminal justice information obtained from the TIME/NCIC Systems should remain in the secure area unless there is specific authorization and procedures for taking the information out of the secure area. When TIME/NCIC information (paper or digital) is transported outside of the secure areas it must continue to be protected, thus transport of

TIME/NCIC information is restricted to authorized personnel.

TIME/NCIC information must be securely disposed of when no longer needed.

Destruction of paper information may be accomplished by shredding, incineration, etc.

Digital media storing TIME/NCIC information (hard drives, flash drives, CD's, etc.) must be sanitized or degaussed using approved sanitizing software that ensures a minimal 3-pass wipe. Inoperable digital media should be destroyed (cut up, smashed, shredded, etc.). The disposal or destruction of TIME/NCIC information must be witnessed or carried out by authorized personnel to avoid the possibility of inadvertent release of system information to unauthorized persons.

Dissemination of Criminal Justice Information

Any individual authorized to use the TIME/NCIC System who receives a request for system information from another individual must ensure the person requesting the information is authorized to receive the data. The correct Originating Agency Identifier

(ORI) must be used in each transaction to identify the agency receiving the information to ensure the proper level of access for each transaction.

Each data service has its own rules for secondary dissemination of records, which may include requirements for logging, identification of the purpose of the request, and identification of the specific individual receiving the record. Most records may be legitimately disseminated to another criminal justice employee/agency when the purpose of the request is criminal justice related.

Any secondary dissemination of this information must meet state and federal statutes and/or regulations.

Criminal justice information obtained from the TIME/NCIC Systems may not be included in an internet email transmission unless the email is encrypted to the FIPS 140-2 standard.

When email contains sensitive information, it should be standard practice to label those items as well.

Voice transmission of criminal justice information (via police radio, cellular phone, etc.) is exempt from the encryption and authentication requirements when an officer determines there is an immediate need for the information in a situation affecting the safety of the officer or the general public, or the information is needed immediately to further an investigation.

Fax transmission of criminal justice information is acceptable with certain encryption specifications. Fax transmission of criminal justice information over a standard phone line is exempt from encryption. If a facsimile server, application or service which implements email-like technology to send CJI to an external physically secure location, encryption requirements for CJI in transit must be met (CJIS Security Policy Section 5.10).

Security Incidents & Response

A security incident is a violation or possible violation of policy that threatens the confidentiality, integrity or availability of criminal justice information. There has been an increase in the number of accidental or malicious computer attacks against both government and private agencies, regardless of whether the systems are high or low profile.

Indicators of a security incident may include system crashes without a clear reason, new files with novel or strange names appearing, changes in file lengths or modification dates, unexplained poor system performance, etc.

Personnel should know how to report a security incident, who to report an incident to, when to contact that person, and what basic actions to take in case of a suspected compromise of the system. This may include contacting a supervisor, contacting on-call information technology staff, disconnecting the affected computer from the network, etc.

Agency staff should document any security incidents/possible security incidents, and promptly report incident information to the Crime Information Bureau. Evidence of the security incident may need to be collected and retained to conform to the rules of evidence in case of legal action (either civil or criminal).

Agencies must monitor physical access to the information system to detect and respond to physical security incidents,.and where ever feasible the agency shall employ automated mechanisms to make security alert and advisory information available throughout the agency as appropriate.

Virus/Spam/Spyware & Malicious Code Protection

To ensure information security, agencies connecting to the TIME/NCIC Systems are required to have in place malicious code protection, virus protection, spam protection and spyware protection. Users should be cautious when downloading internet content or clicking on web-based pop-ups/windows, unknown emails, email attachments or embedded objects. Removable devices such as flash drives, CDs, etc. may also possibly introduce viruses/malware and caution should be used before they are introduced to the system. Follow your agency's policies regarding use of such items.

Technical Considerations

Mobile Devices - Handheld Devices, Laptops, etc.

As digital handheld devices continue to become more integrated into the mobile workforce, security measures must be employed since such devices may be used outside of physically secure locations. Wireless devices, even in physically secure areas, are susceptible to penetration, eavesdropping and malware. Furthermore, compromised or lost wireless devices may introduce risk to the overall security of an agency's network, criminal justice information and/or the TIME/NCIC Systems. The use of digital handheld devices and/or laptops to access TIME/NCIC information is allowed, provided the agency implements the security requirements for such access as outlined in the CJIS Security

Policy. This may include mobile device management, advanced authentication, encryption, security-related updates, official use guidance, data at rest encryption, and prevention of data compromise in case of possible loss of the device. The requirement to use or not use advanced authentication is dependent upon the physical, personnel and technical security controls associated with the user location as specified in the CJIS

Security Policy.

Personally owned information systems shall not be authorized to access, process, store or transmit criminal justice information unless the employing agency has established and documented policies and procedures for such use. All devices must be authorized and must meet the requirements set forth by the CJIS Security Policy.

A personal firewall must be employed on all devices that are mobile by design (i.e. laptops, handhelds, personal digital assistants, etc.).

Mobile devices used to access the TIME/NCIC Systems may be agency owned or personally owned. Personally owned equipment used to access the TIME/NCIC

Systems or used to access data obtained from those systems must meet all the requirements set forth in the CJIS Security Policy. Agencies wishing to use personally owned devices for system access must first document the specific terms and conditions for such use. Such documentation should consider licensing issues, agency control, security requirements, and sanitization of the device if the owner no longer carries out law enforcement duties, etc.

Account Management

User logins/accounts should be kept current, when a user is terminated, leaves employment or job duties no longer require TIME/NCIC System access the user's system account should be disabled. An agency must validate system accounts at least annually.

User TIME/NCIC accounts will be assigned according to the principle of 'least privilege'.

Least privilege means giving a user account only those privileges which are essential to perform assigned duties. Assigned authorizations will control access to the system and system information.

Users may only have one active computer session accessing the TIME/NCIC Systems at a time. Multiple concurrent active sessions for one user are prohibited unless the agency can document a business need for such multiple session access.

System Updates

Malicious code protection, virus protection, spam protection and spyware protection must be in place at critical points throughout the networks and on all workstations, servers, and mobile computing devices on the network. Malicious code protection must be enabled, and must include automatic updates for all systems with Internet access. Agencies with systems not connected to the Internet must implement local procedures to ensure malicious code protection is kept current (i.e. most recent definitions update available).

Resident scanning must be employed.

Agencies must monitor applications, services, and information systems containing software or components affected by recently announced software flaws and potential vulnerabilities resulting from those flaws. System patches shall be installed in a timely manner.

Backup & Storage Procedures

Agencies must consider the requirements for secure storage of digital media and hardware containing criminal justice information, and ensure that such backup procedures, archiving, and storage, whether centralized or de-centralized (off site) meet the security requirements outlined in the CJIS Security Policy.

TIME System Security Awareness

Certification Statement

I certify that I have read and understand the contents of the TIME System Security

Awareness handout and agree to follow all TIME/CJIS Systems requirements regarding the proper access to, use of, storage, and disposal of TIME/CJ IS System information.

I understand that the criminal justice information made available via the TIME/CJIS

Systems is sensitive and has potential for great harm if misused; therefore access to this information is limited to authorized personnel. I understand that misuse of the TIME/CJ IS systems or information received from these systems may subject me to system sanctions/penalties and may also be a violation of state or federal laws, subjecting me to criminal and/or other penalties. Misuse of the TIME/CJ IS Systems includes accessing the systems without authorization or exceeding my authorized access level, accessing the systems for an improper purpose, using or disseminating information received from the systems for a non-work related or non-criminal justice purpose, etc.

Your signature: ---------------------------

Print your name: --------------------------

Agency name: ---------------------------

Date: ------------------------------

2016 SA Handout ALL

Kenosha Sheriff's Department

KSD/KPD/KCCJS/Kenosha County - Service Provider Information Form

Authorization for Criminal Background Check

Applicant Information:

Last Name First Name Middle

Address

Date of Birth:

Phone Numbers:

City State Zip

Work

Physical Description:

Home/Cell

Sex Race Eye Color Height Weight

Program/Area you will be working in: _

(Please be specific - i.e. Delivery service, Contracted employee, etc.)

Have you used any other names previously?

Yes No

If yes, please list and the date(s) that name(s) was (were) used:

Do you have any medical condition that may warrant immediate treatment?

Yes No

If yes, please explain:

Who should be notified in case of emergency?

Name: Phone Number:

Name: Phone Number:

You acknowledge that the Kenosha Sheriff's Department needs to conduct a criminal background check to evaluate your qualifications and discover and relevant information before granting you unescorted access to Kenosha County Buildings, equipment and/or information.

The intent of this authorization is to provide full and free access to your criminal history. You hereby consent to the release of any and all public and private information relating to your criminal history, including but not limited to any arrest records and convictions.

You understand that the Kenosha Sheriff's Department may convey this information to other departments within Kenosha County.

By signing this authorization, you agree to hold Kenosha County, its departments, divisions, agents and employees harmless and to indemnify Kenosha County from any and all claims and liability associated with the release of this information.

You also certify that all information provided in this authorization is true, complete and correct to the best of your knowledge and belief. You understand that providing false information or omitting information may be cause for Kenosha County to take action against you, including but not limited to revoking your access to any Kenosha County building, equipment and information.

Applicant Signature: _ Date:

Background Check Date:

Approved:

Denied: B Comments: I

I I

I I

KENOSHA COUNTY SHERIFF'S DEPARTMENT

Employee Fingerprint Information Form

OCCUPATION: --------------------

ST ART DATE:

UNIT#: --------------------

LAST, FIRST & Ml: --------------------

DOB: --------------------

SEX/RACE -----......------,------..------

DESCRIPTORS: __ H_ei..,.g_ht_---+- __ W_e __ ig,._h_t_-+--_E ...... Y._e_s_---+- __ H_a_ir __

PLACE OF BIRTH

{CITY/STATE): ----------------------

MAR ITAL STATUS: --------------------

oo_uno_temp14113638313739334493.doc 11/14/19