2043FY-24-Q-00013-Security Garage.pdf

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NO.

7. FOR SOLICITATION

INFORMATION CALL:

3. AWARD/EFFECTIVE

DATE

a. NAME

Patricia Brown

4. ORDER NUMBER 5. SOLICITATION NUMBER

2043FY-24-Q-00013

b. TELEPHONE NUMBER (No collect calls)

6. SOLICITATION ISSUE

DATE

06/28/2024

8. OFFER DUE DATE/

LOCAL TIME

07/03/2024 12:00 ET

9. ISSUED BY CODE 2050 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

Office of Procurement Operations-Operations Branch Southern SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

Region 1285 Carmichael Way Montgomery, AL 36106-3672 Attn: Ladoris Tuck Email: ladoris.r.tuck@irs.gov

11. DELIVERY FOR FOB DESTINA- 12. DISCOUNT TERMS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

SMALL BUSINESS PROGRAM

EDWOSB

8 (A) 13b. RATING

NAICS:

238210

SIZE STANDARD:

$19 M

TION UNLESS BLOCK IS

MARKED

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700) 14. METHOD OF SOLICITATION

SEE SCHEDULE X RFQ IFB RFP

15. DELIVER TO

See Attached Delivery Schedule

CODE 16. ADMINISTERED BY CODE

Office of Procurement Operations-Operations Branch Southern Region 1285 Carmichael Way Montgomery, AL 36106-3672 Attn: Ladoris Tuck Email: ladoris.r.tuck@irs.gov

17a. CONTRACTOR/

OFFEROR

CODE FACILITY

CODE

18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

OFFER BELOW IS CHECKED

SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

See Attached Schedule(s)

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

See Attached Schedule(s)

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE X ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

29. AWARD OF CONTRACT: REF. OFFER

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (Type or print) 31c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print) 30c. DATE SIGNED

X

X mailto:ladoris.r.tuck@irs.gov mailto:ladoris.r.tuck@irs.gov

2043FY-24-Q-00013 Page 2 of 34

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

36. PAYMENT

COMPLETE PARTIAL FINAL

37. CHECK NUMBER

PARTIAL FINAL

38. S/R ACCOUNT NO. 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

2043FY-24-Q-00013 Page 3 of 34

PART I

Line Item Table

Item No. FSC Item Description QTY Unit Unit Price Total Value

001 N063

GU013 - COV2322022 GARAGE

DRS KY2032 KY2032 - IO

CODE GU01353 - Gateway

Center Complex - MISSION

CRITICAL - STAR COV2322022

for installation of new high-speed, spiral, ventilated, garage doors to replace the existing employee parking garage entrance garage doors due to the age and condition of the current doors.

1.000 JB

Delivery Schedule Delivery Address Item No. QTY Delivery Date

IRS Internal Revenue Service

ALUS

001 1.000 11/30/2024

Request for Quote 2043FY-24-Q-00013- Security Garage Doors

The Internal Revenue Service (IRS) intends to award a Firm Fixed Price in accordance with FAR part 13 for installation of new high-speed, spiral, ventilated, garage doors to replace the existing employee parking garage entrance garage doors due to the age and condition of the current doors.

It is the intent of the Government to award a single Purchase Order for all items. No used, refurbished, items will be accepted.

This solicitation and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC 2024-04).

NAICS code for this requirement will be 238210, with a size standard of $19M.

VENDOR INSTRUCTIONS

1. PRICING: Based listed in Section 3.6 Specific Requirements of the Statement of Work.

2. SHIPPING AND HANDLING: Total proposed price shall include all shipping and handling, if applicable.

3. WARRANTY: The vendor’s commercial warranty shall apply and should be stated in the proposal. The information should be a brief statement that a warranty exists, the substance of the warranty, the duration, and claim procedure, if applicable.

4. CANCELLATION: The Government reserves the right to cancel this solicitation, with no obligation to the vendors by the Government.

5. All quotes must remain valid for 60 days after submission.

6. QUESTIONS: All solicitation questions must be received no later than Tuesday July 2, 2024 12:00 Noon, Eastern Standard Time (EST) to the email identified below.

7. CLOSING DATE AND TIME: In accordance with FAR 12.603(a)(3)(ii), Offers are due no later than Wednesday July 03, 2024, 12:00 Noon, Eastern Standard Time (EST) to the email identified below.

8. SYSTEM FOR AWARD MANAGEMENT: Vendor must be active, approved and registered in System for Award Management (www.sam.gov) by the proposal closing date.

9. Include ueiSAM and CAGE CODE on Quote.

10. The following clauses/provisions shall be completed and submitted with your response.

*52.209-11

*IR1052.232-9001

*IR1052.209-9002

*52.212-3

11. SUBMISSION INFORMATION: Please submit a response to Ladoris Tuck, via email ladoris.r.tuck@irs.gov and Contracting Officer Patricia Brown at patricia.e.brown@irs.gov.

No telephone responses will be accepted.

2043FY-24-Q-00013 Page 4 of 34 mailto:ladoris.r.tuck@irs.gov.

Request for Quote 2043FY-24-Q-00013- Security Garage Doors

EVALUATION FACTORS AND CONTRACT AWARD

The Government will award a contract resulting from this request for quotes to the responsible offeror whose quote conforms to this Request for Quote. Award will be made to the lowest priced technically acceptable (LPTA) offeror who meets the requirement.

OFFEROR REPRESENTATIONS AND CERTIFICATION

Offeror is required to submit a complete copy of FAR 52.212-3, Offeror Representations, Commercial Items, with their offer, or indicate an electronic copy is available on the SAM website.

2043FY-24-Q-00013 Page 5 of 34

2043FY-24-Q-00013 Page 6 of 34

Physical Security

Scope of Work

(Prepared by/Date: Jason White 10/13/2023)

Facility Location and FSL:

FSL IV

Address of the Facility 333 Scott Street

Covington, KY, 41011

2043FY-24-Q-00013 Page 7 of 34

REVISION HISTORY

Revision

No.

Date Description By

3.0 04/04/2022 Change Video Surveillance System

Equipment and updated ePAC req.

EC

3.1 8/4/2022 Video equipment update and Procurement language. Add elevation details.

EC

3.2 12/01/2022 Remove Razberi/ComNET equipment EC

3.3 05/05/2023 MELM2, Video Decoder, POE+, Seneca

NVRs.

EC

3.4 08/14/2023 Remove ADEMCO and add data line to IDS panel.

EC

2043FY-24-Q-00013 Page 8 of 34

I. STATEMENT OF WORK

1.0 OVERVIEW

1.1 Description: The Internal Revenue Service requires the purchase and installation of new high-speed, spiral, ventilated, garage doors to replace the existing employee parking garage entrance garage doors due to the age and condition of the current doors.

1.2 Background: The IRS is required to procure physical security equipment, inclusive of relative construction services and testing for the following project:

Note: This is not considered a construction requirement even though minor construction work may be required for installation of the physical security system.

2.0 RELATED DOCUMENTS

2.1 This scope shall be used in conjunction with documents such as mark-up plans, drawings, and specifications for the project, when applicable. At a minimum, contractor must comply with manufacturer’s specifications found in Section 3.6 below.

FLOOR PLANS AND/OR DRAWINGS INDICATING THE APPROXIMATE DEVICE

LOCATIONS FOR ITEMS IN SECTION 3.6.

2.2 LIST OF ACRONYMS

The acronyms listed below will be used when referring to the corresponding terms:

AEB Alarm Expansion Board

AFF Above Finished Floor ADA American Disabilities Act compliant device

BPA Blanket Purchasing Agreement

CI Criminal Investigation

CO Contracting Officer

COR Contracting Officer’s Representative

CM Configuration Management

CCM Command Control Module

CSIRC Computer Security Incident Response Center

DGDD Door Group Design Document

DPS Door Position Switch

ECC Enterprise Computing Center ePACS Enterprise Physical Access Control System.

EVSS Enterprise Video Surveillance System ES Electric Strike

ESS Electronic Security System

DIGI-TRACK PANEL (ISC) Field Identiv/Hirsch Access Control Panel

FICAM Federal Identity, Credential and Access Management

FIPS Federal Information Processing Standard 201-2 references NIST SP800-73, SP800- 76, and SP800-78, 800-116 standards.

FISMA Federal Information Security Management Act

The scope of this project is to remove and replace the KY2032 & KY3005 Gateway Center Complex parking garage (East and West) garage doors with new high-speed, spiral, ventilated, garage doors that connect to the current access control system.

2043FY-24-Q-00013 Page 9 of 34

FMSS Facilities Management & Security Services

FSL Facility Security Level GFE Government Furnished Equipment

GSA General Services Administration

GSS General Support System

HSPD-12 Homeland Security Presidential Directive 12

IDF Intermediate Distribution Frame / Telecommunication Closets

IDS Intrusion Detection System IPv6 Internet Protocol version 6

IRM Internal Revenue Manuals

IRS Internal Revenue Service

IRS-PM Internal Revenue Service National Office-Program Manager

ISC Inter-agency Security Committee IPT Integrated Project Team

LCP Large Cash Payment (Room)

LEM Law Enforcement Manuals

IT Information Technology Services

MDF Main Distribution Frame / Main Telecommunication Room

NAC National Assistance Center [EPACS]

NACMA National Armored Cable Manufacturer’s Association

NBFAA National Burglar Fire Alarm Association NEC National Electric Code

NIST National Institute of Standards and Technology

NVR Network Video Recorder

OEM Original Equipment Manufacturer

OMB Office of Management and Budget

PAC Physical Access Control

PACS Physical Access Control Systems

PII Personally Identifiable Information

PIV Personal Identification Verification (card)

PIR Passive Inferred Receiver (motion detector)

POA&M Plan of Action and Milestones POC Point of Contact

PTE Push-To-Exit Button

PSS Physical Security Specialist

REB Relay Expansion Board REX Request to Exit (device)

RREB RS485 Expansion Board

SBU Sensitive but Unclassified

SNIB3 Serial Network Interface Board 3

TAC Taxpayer Assistance Center

TIGTA Treasury Inspector General for Tax Administration

TCSIRCTreasury Computer Security Incident Response Center

UNAX Unauthorized Access VSS Video Surveillance System (old CCTV).

2.3 REFERENCES

Services to be performed by the Contractor under this scope of work shall conform to all applicable requirements and criteria indicated in the following handbooks and publications and the latest issues and changes thereto:

a) General Services Administration Facilities Standards for the Public Buildings Service

PBS/PQ-100.1.

2043FY-24-Q-00013 Page 10 of 34

b) Internal Revenue Service Facilities Design Criteria and Physical Security Standards for

IRS Facilities.

c) Federal Information Processing Standards Publication FIPS-Pub; 174-1 and 175

d) National Fire Protection Association (NFPA) Codes and handbooks

i. NFPA72,

ii. NFPA101 Life Safety Codes

iii. NFPA70E

iv. National Electric Code NFPA 70.

e) Electronic Industries Association (EIA/TIA Standard 568-A, related bulletins and 569)

f) All applicable Federal, State and local codes and regulations

g) Interagency Security Committee (ISC) Standards

h) Homeland Security Presidential Directive HSPD-12

i) Occupational Safety and Health Standards.

j) Federal Information System Management Act (FISMA)

k) Federal Information Processing Standard Publication (FIPS 201-1)

l) National Institute of Standards and Technology SP 800-73

m) National Institute of Standards and Technology Standard (draft) SP-800-116

n) Americans with Disabilities Act.

o) Underwriters Laboratories (UL)

a. UL 1076 (1995; Reprint Sep 2010), Proprietary Burglar Alarm Units and Systems.

b. UL 634 (2007; Reprint Mar 2013), Connectors and Switches for Use with Burglar-

Alarm Systems.

c. UL 639 (2007; Reprint May 2012), Standard for Intrusion Detection Units.

d. UL 609 (1996; Reprint Sep 2010) Local Burglar Alarm Units and Systems

e. UL 1610 (1998; Reprint Sep 2010), Standard for Central-Station Burglar-Alarm

Units

f. UL 681 (2014), Installation and Classification of Burglar and Holdup Alarm Systems.

The above items are a standard listing of handbooks and publications. The contractor will utilize only those sections that are applicable to develop and complete the Scope of Work. Where conflicts occur, the more stringent requirement shall take precedence.

3.0 PROJECT/WORK IDENTIFICATION

2043FY-24-Q-00013 Page 11 of 34

3.1 INSTALLATION:

Installation includes all work and materials necessary for a full and complete system. Installation may include, but not be limited to the following:

a) Electrical power to all devices.

b) All wiring, conductor, conduits, and connections.

c) VSS, Access Control, IDS (intrusion detection system), duress and any other physical security system tie-ins.

d) Floor prep, flooring, walls and ceiling finish work.

3.2 – 3.4 NOT USED

3.5 GENERAL REQUIREMENTS:

A. Upon award of contract, the Contractor shall contact the Contracting Officer’s Representatives

(COR) and/or POC: TBD for commencement and coordination of performance.

B. Prepare a project schedule of dates and times when installation will occur, including anticipated completion dates. This information shall be updated, and the revised schedules forwarded on a weekly basis to the Contracting Officer’s Representatives (COR) and IRS POC through email notification: TDB

C. Upon commencement of performance, the IRS POC will review with the Contractor of the proposed location for each device (i.e., alarm keypads, duress buttons, access keypads, motion, cameras, etc.) as shown on the drawing. Major changes will only be approved by the Contracting

Officer.

D. The Contracting Officer (CO) is the person with the authority to enter into, administer, and/or terminate contracts, make related determinations and findings, make constructive changes, and bind the Government in contractual matters. The IRS POC monitors contract performance and provides technical direction within the terms and conditions of the contract. This individual does not have the authority to make constructive contract changes or bind the Government in contractual matters. The Contractor shall document all proposed changes in writing and address them to the

CO with copy to the IRS POC. The CO is the only government official who can modify and approve changes to the original scope of work.

E. Warranty: The contractor shall ensure all components and systems have a minimum one-year warranty, including parts and labor. The IRS shall not provide additional funding for service during the one-year warranty period due to any alarm system malfunction. The one-year warranty period shall commence at the time of government acceptance.

F. The Contractor shall provide a list of all proposed security equipment and devices to be used in this

Contract. This list shall contain and clearly identify the make, model, and technical specifications of proposed security equipment and devices. The security equipment and devices proposed shall be approved by IRS POC.

G. The Contractor shall not substitute equipment/parts for any reason without the prior written approval of the IRS POC. Some items in this scope are part of an enterprise system and substitution mailto:Jason.C.White@irs.gov

2043FY-24-Q-00013 Page 12 of 34 is not allowed. Substitutions of any equipment/parts without the written

Government approval shall be corrected at the Contractor own expense and delay.

H. The Government (IRS) requires an experienced Contractor to install the Security equipment as required and contained in this specification/statement of work. This is defined as a contractor who has been installing electronic physical security equipment for at least five years and has an association with and/or follows the installation standards presented by the National Burglar Fire

Alarm Association (NBFAA), and the state chapters. The Contractor shall install the alarm system according to applicable agency certification and Underwriters Laboratories (UL) guidelines

(installation methods, wire supports, etc).

I. Install all necessary electrical outlets, including hardwiring of circuits by a licensed electrician to ensure that all devices function as designed [Coordinate with General Contractor (GC) Electrician, if applicable; in some projects the GC electrician will provide power]. All electrical work necessary to make the entire physical security system and equipment function properly is the

Security Contractor’s responsibility and may require ‘collaboration’ with local building manager/contractor. Power circuits can be shared to 80% capacity amount security equipment

(ACS; VSS and IDS); but must be dedicated to security devices and in a separate conduit and circuit breaker. All power connections shall be labeled at the breaker panel and at the load device identifying the breaker Number and location.

J. The Contractor shall furnish and install and test all equipment, cable, wire, connectors, labor and any electrical requirements that are necessary for the successful installation of the physical security systems as described in this Statement of Work.

K. Fasten all wires in the ceiling to overhead wire supports in order to prevent damage that may occur from existing or future wire runs in the ceilings. Wires shall not be supported solely by suspended ceiling. Periodic labels (no more than 20ft) shall be placed on expose wire(s) or conduits to indicate type of wire (i.e., alarm, access, video and device connected). All wiring shall be concealed and of a gauge no less than 18 with 4 conductors and copper stranded in composition, unless otherwise noted. Mechanical pulling of wires is prohibited.

L. Each wire/cable/etc. shall be properly labeled as it enters its termination location on the head end.

This is needed for long term troubleshooting purposes. Wire numbers shall be used with a wire legend posted on panels on site with a full description of each device detailing where it is going and where it terminates. The labels shall be printed on letter size label sheets that are self-laminated vinyl that can be printed from a computer data base or spread sheet. The labels shall be

9-1/2 in Length, 8 in Width, White, Polyester, For Use With: Dot Matrix Printer or equal.

M. Every detector, sensor, button, junction box, control panel, transformer, phone jack, etc. shall be labeled in order to show the device, security system (i.e. ACS, IDS or VSS) and/or zone number on the front cover of the specific device. Each label shall be large enough to be seen from a standing position 12 in. distant without the use of a ladder.

N. Conceal all wires that are in the agency-protected space by “fishing” wire in the walls, ceilings, and doorframes to ensure tamper resistance. At various locations in which walls cannot be fished or channeled place wire in EMT. Wires are not allowed to be exposed or visible. Wire-mold is not

2043FY-24-Q-00013 Page 13 of 34 permitted. The Contractor shall first attempt to fish wire in walls prior to using EMT in the agency-protected space.

O. Conceal all wires that are outside the agency-protected space by placing wiring in conduit, EMT, metallic tubing, etc. The size of the conduit, EMT, metallic tubing, etc. shall be large enough (i.e., 50% larger than needed) to permit additional wire pulls.

P. Homerun a wire from each device, keypad, receiver, etc. to the alarm control panel, enclosure, spare cabinets, or auxiliary power supply. Splices, t-taps, etc. are not permitted, except inside the control panel, spare enclosure, cabinets, or auxiliary power supply. All wire(s) shall be installed in accordance with UL Standards for alarm, access, and/or VSS.

Q. Contractor shall provide any devices, appliance, material or work not shown on Drawings but mentioned in this Specifications, or vice versa, and any incidental accessories necessary to make the work complete and perfect in all respects and ready for operation, even if not particularly specified, shall be provided without additional expense. The Drawings and Specifications are intended to supplement each other so that any details or equipment shown on either shall be executed the same as if mentioned in both. Note that not all devices required in the specification can be shown in drawings as it is mainly to show location.

R. The Contractor assumes responsibility for all necessary patching, repairing, painting, etc. as a result of installation or removal of items in the scope of this project, or in the event of an accident

(i.e., drilling through drywall by mistake). The Government (IRS) shall not incur any additional costs for patching, repairing, painting, etc.

S. Contractor shall perform a pre-installation and final walk-through of all physical security system with the IRS POC and U.S. Department of Homeland Security/FPS representative to ensure system is complete and acceptable before final invoice and payment. The IRS POC shall coordinate the pre-installation and final walk-through.

T. Contractor shall demonstrate and train the IRS POC on the full operation of all security systems installed to government personnel. The Contractor shall ensure that required government employees selected by IRS POC, can operate the systems in a competent manner. Contractor shall provide the Government (IRS) with manufacturers technical and/or maintenance booklets of installed physical security equipment.

U. All installed equipment shall remain the property of the United States Government. The

Contractor shall retain no liens, titles, etc. against any installed or uninstalled equipment once payment is received from the government.

V. Remove all old non-operative security equipment, power supplies and wiring from interior of current IDF/MDF/Security room location. No security equipment, wiring, or pathways shall be abandoned in place. Conduit can be abandoned if label property as abandoned and location of the other end at both ends and sealed.

W. Compliance with Manufacturer’s Specifications: The Contractor shall obtain all necessary equipment manufacturer’s installation specifications and drawings to complete all installation and

2043FY-24-Q-00013 Page 14 of 34 contract work. The Government will not furnish any manufacturer’s information except that which is included in the contract documents. It is the Contractor’s responsibility to see that the equipment is installed to manufacturer’s specifications.

3.6 SPECIFIC REQUIREMENTS: The Contractor will perform the following tasks.

Task

No.

Name of Item Description of Scope of Work

3.6.1 – HI SPEED SPIRAL LH-VT ROLL UP GARAGE DOORS

1. GARAGE

DOORS

(EAST

GARAGE)

East Garage:

The Contractor is to provide and Install a total of (2) High Speed, Spiral, Ventilated

Garage Doors in the East parking garage. One door will be installed for the entrance ramp, and one door will be installed for the exit ramp.

The following items are too be installed by the contractor:

a) (2) Spiral LH-VT – Garage Doors - L- 138" wide X 113" high - East Garage

Entrance - create (2) door openings where current garage door is installed after removal of current garage door.

b) (2) Motor Heaters.

c) (2) Padlock Hasp for Side Column Brake Release.

d) (2) NEMA 4X SYS 4 Control Box (Standard) 8.5" x 16.5".

e) (2) Control Box Heaters, All Voltages.

f) (2) On/Off Key Switch.

g) (2) SmartSurround Advanced Detection and Alert Systems.

The Contractor is responsible for the following tasks:

a) Mechanical & Electrical Installation of garage doors and necessary equipment.

b) Offloading of material delivered to site, Lifting equipment for installation, removal, and disposal of existing door.

c) Cleanup of all scope debris with offsite disposal.

d) Create 2 separate door openings with 24" of steel column installed between openings.

e) Cutting concrete curbs as necessary.

f) Door activation signals via 24V DC signal brought to door controls by other contractor, installer to terminate and work with access controls team for startup and testing of new garage doors.

3.6.2 - HI SPEED SPIRAL LH-VT ROLL UP GARAGE DOORS

GARAGE

DOORS

(WEST

GARAGE)

West Garage:

The Contractor is to provide and Install a total of (2) High Speed, Spiral, Ventilated

Garage Doors in the West parking garage. One door will be installed for the entrance ramp, and one door will be installed for the exit ramp.

The following items are too be installed by the contractor:

a) (2) Spiral LH-VT – Garage Doors - L- 132" wide X 102" high - West Garage

Entrance - create (2) door openings where current garage door is installed after removal of current garage door.

b) (2) Motor Heaters.

2043FY-24-Q-00013 Page 15 of 34

c) (2) Padlock Hasp for Side Column Brake Release.

d) (2) NEMA 4X SYS 4 Control Box (Standard) 8.5" x 16.5".

e) (2) Control Box Heaters, All Voltages.

f) (2) On/Off Key Switch.

g) (2) Smart Surround Advanced Detection and Alert Systems.

The Contractor is responsible for the following tasks:

g) Mechanical & Electrical Installation of garage doors and necessary equipment.

h) Offloading of material delivered to site, Lifting equipment for installation, removal and disposal of existing door.

i) Cleanup of all scope debris with offsite disposal.

j) Create 2 separate door openings with 24" of steel column installed between openings.

k) Cutting concrete curbs as necessary.

l) Door activation signals via 24V DC signal brought to door controls by other contractor, installer to terminate and work with access controls team for startup and testing of new garage doors.

3.6.3 -

1. INVENTORY After installation, completion and acceptance by IRS POC, Contractor shall provide the government an inventory of all equipment installed within five working days of testing and acceptance. Contractor shall provide IRS POC with a Microsoft Excel spreadsheet inventory delineating all equipment installed that includes a description and product name, quantities, and brief location where the equipment is located within the facility and redlined Drawings (showing any field installation update/deviation from original drawings).

In addition, for ePACs access control (MX) panels only, the vendor must fill out an

IRS provided excel spreadsheet called Assets Management Report (AMR) and emails it to the PSS AND the following address: iteuesambatch@irs.gov

The following fields are mandatory:

Barcode

Serial number

Purchase Order Number

Manufacturer

Model

Price

Category

CPU Type (If computer or server)

CPU Speed (If computer or server)

Memory (If computer or server)

Ship Date

Warranty End date

IRS Contact Person (SPIF list will be provided to vendor)

Ship to Address / Location

Building Code (will be provided to vendor)

CERTIFYING ORGANIZATION

mailto:iteuesambatch@irs.gov

2043FY-24-Q-00013 Page 16 of 34

The Government estimates that the Contractor will need to supply and install manufacturer’s equipment. It is the Contractor’s responsibility to double check and be certain that all materials/equipment and/or labor are accounted for prior to quote submission. “HOMERUN” each device on its own stranded plenum rated wire or plenum coax with copper core and copper braid to the panel with no splices, “T” taps, no surface wire, etc:

2043FY-24-Q-00013 Page 17 of 34

3.7 OTHER INFORMATION

3.7.1 Government Furnished Equipment:

• Analog telephone line for burglar panel.

• Provide the room location for the electronic equipment to be wall mounted in a secure location under lock and key.

• IP address for each door control panel and data drop for each panel by IT

3.7.2 Related Work: Contract documents indicate the work of contract, and related requirements and conditions that have an impact on the project. Related requirements and conditions that are indicated on the contract documents include but are not necessarily limited to the following: (1)

Existing site conditions and restrictions; (2) Alterations and coordination with existing work;

(3) Other work to be performed concurrently by the Government; and (4) Other work to be performed concurrently by separate contractors.

3.7.3 Working Hours: Work shall be performed Monday through Friday (excluding holidays and weekends) from 7 AM – 6 PM. Any afterhours work will require prior written approval.

3.7.4 Trash Disposal: Contractor shall provide garbage/waste receptacles for disposal of trash (such as wrapping paper, boxes, etc.) and be removed by Contractor upon completion of work.

3.7.5 Anticipated period of performance is 12 weeks after award date of award.

3.8 CONTRACTOR RESPONSIBILITIES

3.8.1 Contractor shall furnish all labor, materials, and equipment necessary to perform the job.

3.8.2 Contractor is required to (i) be licensed; (ii) maintain insurance coverage that is common within the industry and for the nature of work.

3.8.3 All Contractor personnel shall be required to wear proper identification, which may include company attire with logo, badge, etc. when working in the government facility. [Identification card or badge (if needed) is to be displayed on contractor employees at all times.]

3.8.4 Contractor shall provide personnel who are professional, reliable, trained, and experienced in performing the job requirements.

3.8.5 Contractor must ensure that all personnel working on this requirement be: (I) a U.S. citizen or have lawful permanent resident status, and (ii) fluent in the English language. Contractor shall not employ any person to perform work under this requirement with any of the following background history: conviction of a felony, a crime of violence or a serious misdemeanor, a record of arrest for continuing offenses, or failure to file or pay federal income tax.

3.8.6 Contractor shall provide timely and professional customer service (i.e., address concerns, issues, and other administrative functions). For purposes of this contract timely means no later than by the close of business next business day.

3.8.7 Contractor personnel shall maintain a neat, clean, and hazard-free working environment to the extent practicable. All work shall be done using the highest standards of the trade and in compliance with all federal, state, and local codes. Contractor personnel shall take all necessary precautions to avoid scarring, marring or damaging government’s property.

Contractor(s) shall incur any cost to repair or restore to its original condition Government property damaged during the performance of this work. Upon completion, all packing

2043FY-24-Q-00013 Page 18 of 34 materials, debris, dust, etc. shall be removed from the premises and discarded in accordance with local and state regulations. The work area shall be left in “ready to occupy” conditions.

3.8.8 The work shall be carried out in such a manner so that there will be little no interference with the proper execution of Government business. All persons employed in contract work shall, while on the premises, comply with all building regulations.

3.9 IRS RESPONSIBILITIES

3.9.1 IRS POC shall provide access to the respective work area(s).

3.9.2 IRS POC shall assist in making the appropriate decisions with regards to specific location/placement, procedures, and programming. The IRS POC shall be readily available during the contract term and shall make decisions without delay. All required and applicable changes shall be executed through contract modification. Contract modifications shall be executed by the Contracting Officer.

II. INFORMATION SYSTEM SECURITY REQUIREMENTS FISMA SECURITY

CONTRACT LANGUAGE (MAJOR IT SYSTEMS / APPLICATIONS or SERVICES)

1. CONTRACTOR SECURITY TRAINING

IR1052.224-9001 Mandatory IRS Security Training for Information Systems, Information Protection and Facilities Physical Access (JUN 2021)

The Federal Information Security Modernization Act of 2014 (FISMA) requires each federal agency to provide periodic information security awareness training to all contractors/subcontractors involved in the management, use, or operation of Federal information and information systems. In addition, contractor/subcontractor personnel are subject to the Taxpayer Browsing Protection Act of 1997, which prohibits willful unauthorized inspection of returns and return information and details that any violation of the Act could result in civil and criminal penalties. Contractor/subcontractor personnel are subject to the Privacy Act of 1974 (5 U.S.C. 552a; Pub. L. No. 93-579), December 1974.

Contractor/subcontractor personnel are bound by the Records Management by 93 Federal Agencies (44

U.S.C. Chapter 31) regarding the care and retention of federal records.

a. The contractor must ensure all new contractor/subcontractor personnel complete all assigned briefings which are based on the responses provided on the Risk Assessment Checklist Form 14606.

These responses pertaining to access to any IRS system, including basic LAN, email and internet;

access to any Sensitive but Unclassified (SBU) data; and access to any IRS facility. Since new contractor/subcontractor personnel will not have access to the IRS training system, the COR shall provide softcopy versions of each briefing.

i. Exception: Contractor personnel (including subcontractors) performing under IRS contracts with Nonprofit Agencies Employing People Who Are Blind or Severely Disabled (as described in FAR Subpart 8.7) are exempted from the aforementioned briefing requirements, unless the contractor requests access to the training, or there is a compelling justification for requiring the training that is approved by the Contracting Officer (CO). An example of this would be in an instance where visually impaired personnel is assigned to perform systems development and has potential staff-like access to IRS information.

ii. Contractor/subcontractor personnel working with IRS information at contractor-controlled facilities with no access to the IRS network will be subject to all mandatory briefing excepting the Facilities Management Physical Security briefing as outlined in Publication 4812.

2043FY-24-Q-00013 Page 19 of 34

iii. Service Personnel: Inadvertent Sensitive Information Access Training

Contractor personnel performing: (i) janitorial and cleaning services (daylight operations), (ii) building maintenance, or (iii) other maintenance and repair and need staff-like access to IRS facilities are required to complete Inadvertent Access to Sensitive Information (SBU) Access training.

iv. Service Personnel Security Awareness Training: Contractor personnel providing services in the following categories are required to complete FMSS Physical Security Training:

1. Medical;

2. Cafeteria;

3. Landscaping;

4. Janitorial and cleaning (daylight operations);

5. Building maintenance; or

6. Other maintenance and repair

b. In combination these mandatory briefings are known as IRS Security Awareness Training (SAT).

The topics covered are: Cybersecurity Awareness, Privacy Information Protection and Disclosure, Unauthorized Access to Taxpayer Data, Records Management, Inadvertent Sensitive Information

Access, Insider Threat and/or Facilities Physical Security. The completion of the assigned mandatory briefings constitutes the completion of the Security Orientation.

c. The SAT must be completed by contractor/subcontractor personnel within 5 business days of successful resolution of the suitability and eligibility for staff-like access as outlined in IR1052.204-

9000 Submission of Security Forms and Related Materials and before being granted access to SBU data. The date listed on the memo provided by IRS Personnel Security shall be used as the commencement date.

d. Training completion process:

The contractor must submit confirmation of completed SAT mandatory briefings for each contractor/subcontractor personnel by either:

i. Using Form 14616 signed and dated by the individual and authorized contractor management entity and returned to the COR. This option is used for new contractor/subcontractor personnel and any that do not have an IRS network account.

ii. Using the IRS training system which is available to all contractors with IRS network accounts

e. Annual Training. For contracts/orders/agreement exceeding one year in length, either on a multiyear or multiple year basis, the contractor must ensure that personnel complete assigned SAT mandatory briefings annually no later than October 31st of the current calendar year. The contractor must submit confirmation of completed annual SAT on all personnel unable to complete the briefings in the IRS training systems by submitting completed Form 14616 assigned to this contract/order/agreement, via email, to the COR, upon completion.

f. Contractor’s failure to comply with IRS privacy and security policy (to include completion and certification of SAT requirements within the timeframe specified) may be subject to suspension, revocation or termination (temporarily or permanently) of staff-like access to IRS IT systems and facilities.

g. Flow down of clauses. The contractor shall include and flow down, in its subcontracts (or arrangements or outsourced service agreements) that entails staff-like access to SBU information by a subcontractor, at any tier, the same Federal Acquisition Regulation (FAR) and local privacy and security or safeguard clauses or provisions for protecting SBUSystem Review / Site Visit

2043FY-24-Q-00013 Page 20 of 34

2. SAFEGUARDING / PROTECTING SENSITIVE PERSONALLY IDENTIFIABLE

INFORMATION (PII)

Sensitive PII is defined as any information that permits the identity of an individual to be directly or indirectly inferred, including any information that is linked or linkable to that individual, regardless of whether the individual is a U.S. citizen, legal permanent resident, or employee or contractor to the

Department. Sensitive PII is Personally Identifiable Information, which if lost, compromised, or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

Information Systems can be either electronic or manual. IRM 10.8.1 requires IRS sensitive information is to be handled and protected at the contractor's site, including any information stored, processed, or transmitted using the contractor's computer systems. Contractor personnel shall perform a background investigation and/or clearance required; receive security awareness and specialized IT security training required for contractor activities or facilities; and any facility physical security requirements.

IRS sensitive data (e.g., Sensitive But Unclassified (SBU), Personally Identifiable Information (PII) that is processed, stored, or transmitted by an information system outside of IRS facilities or IRS IT information system shall be protected with FIPS 140-2 or later validated cryptographic modules with approved modes of operation.

A list of NIST validated modules is available at the following link:

http://csrc.nist.gov/groups/STM/cmvp/validation.html.

a. The CSP/Contractor shall ensure that individuals accessing an information system processing, storing or transmitting information requiring special protection satisfy the personnel screening criteria.

Note: This requirement is defined by FedRAMP.

b. The organization shall:

Screen individuals prior to authorizing access to the information system; and

Rescreen individuals according to FedRAMP Assignments: for national security clearances; a reinvestigation is required during the 5th year for top secret security clearance, the 10th year for secret security clearance, and 15th year for confidential security clearance. For moderate risk law enforcement and high impact public trust level, a reinvestigation is required during the 5th year. There is no reinvestigation for other moderate risk positions or any low-risk positions.

The CSP/Contractor shall ensure that data is used, only as identified, in the IRS contract and that the data will be used for nothing else to ensure the privacy of the individual.

The CSP/Contractor is responsible for maintaining an inventory of all PII provided to the contractor, generated by the contractor, or used by the contractor sufficient to enable notification to taxpayers, if disclosed. The inventory of PII must be updated semi-annually with a final inventory notification provided to the COR.

Most IRS information is categorized as Sensitive But Unclassified (SBU). This includes:

i. Federal Tax Information (FTI)

ii. Personally Identifiable Information (PII) http://csrc.nist.gov/groups/STM/cmvp/validation.html

2043FY-24-Q-00013 Page 21 of 34

iii. Protected Health Information (PHI)

iv. Certain procurement information

v. System vulnerabilities

vi. Case selection methodologies

vii. Systems information

viii. Enforcement procedures

ix. Investigation information

x. Proprietary processes or algorithms used in investigative work or tax processing

Note: Live data, which is defined as production data in use (production, testing, development), often contains SBU.

IRM 10.8.2, Information Technology (IT) Security, Security Roles and Responsibilities, defines IRS-wide roles and responsibilities related to IRS information and computer security.

a. The IRS shall designate an Authorizing Official for the Cloud Computing Service per IRM

10.8.2.

b. Each Business Unit shall assign at least one (1) Information System Security Officer

(ISSO) or Security Program Management Officer (SPMO) to the Cloud authorization process.

Various laws and regulations have addressed the need to protect sensitive information held by government agencies including the Federal Information Security Modernization Act (FISMA), the

EGovernment Act of 2014, the Privacy Act of 1974, and OMB Circular A-130, Management of

Federal Information Resources. FISMA requires agencies to have a security program and controls for systems to protect their sensitive information. Therefore, the contractor shall comply with OMB policies and Treasury / IRS specific policies, procedures or guidance to protect sensitive information.

IRM 10.8.24.2, Internal Revenue Manual (IRM) 10.8.24, Information Technology (IT) Security, Cloud

Computing Security Policy, CSP roles and responsibilities related to IRS information and computer security.

Unless specifically identified, the scope of the CSP’s responsibility for the protection of IRS assets depends on the service delivery model being used (SaaS, PaaS, IaaS) and their contractual agreement.

The IRS personnel with technical responsibilities for the use, implementation, and acquisition of cloud service shall ensure the CSP is made aware of and adheres to, as part of their contract, all applicable

CSP responsibilities according to their Cloud Service Offering (CSO).

3. HANDLING INFORMATION SECURITY INCIDENTS

The IRS Computer Security Incident Response Capability (CSIRC) defines a security incident as: “any adverse event whereby some aspect of computer security could be threatened.

Adverse events may include the loss of data confidentiality, disruption of data or system integrity, disruption or denial of availability, loss of accountability, or damage to any part of the system.” User

Compromise, Disclosure of Taxpayer/Sensitive Data, Malicious Code (successful or unsuccessful), Denial of Service (DoS) (successful or unsuccessful), Website Defacement, Identity Theft, Misuse of

Resources or Policy Violation, Loss or Theft of IT Equipment, IRM/LEM Non- Compliance, Unauthorized Access Attempt, Probe/Scan, and any other security incident that may threaten or damage any IRS or federal agency information or information system(s).

2043FY-24-Q-00013 Page 22 of 34

Contractors and their employees must be aware of their responsibilities under the law to safeguard PII and sensitive information, the procedures to follow when data is lost or compromised and the penalties for unauthorized disclosure of PII and sensitive information. Contractors should refer to Data Breach

Information for IRS Contractors on irs.gov https://portal.ds.irsnet.gov/sites/vl003/RelatedResources/Doc13347-2020-01-

Data%20Breach%20Response%20Playbook.pdf#search=contractors%20data%20breach Pub 4465-A;

Protecting Federal Tax Information for Contractors, and Pub 4812, Contractor Security Controls, for information about a contractor’s responsibilities to protect Federal Tax Information (FTI) and incident/data breach response and reporting procedures.

It is critical to report an incident/data breach as soon as actionable information is available so a response/reaction can be initiated. Incident/data breach updates and any additional notifications to

Treasury Inspector General for Tax Administration (TIGTA) and/or Local Law Enforcement can be completed after the initial report to the Office of Taxpayer Correspondence (OTC), Privacy, Governmental Liaison and Disclosure/Incident Management Office (PGLD/IM), or the Computer

Security Incident Response Center (CSIRC) is submitted.

All physical security incidents and/or threats should be reported to the SAMC within 30 minutes of incident discovery. SAMC operates 365 days a year, 24 hours a day, seven days a week. Incidents may be reported to the SAMC through any of the following methods:

Primary Method of Reporting: Website incident reporting link, https://tscc.enterprise.irs.gov/irc/

Alternate Reporting Methods:

Telephone: 202-317- 6124 or 1-866-216-4809 (toll free hotline)

Fax: 202-317-6129

Email: samc@irs.gov

The CSP/Contractor shall report security incident information according to U.S. Computer Emergency

Response, Department of Treasury, IRS, and the FedRAMP Incident Communications procedures.

All incidents related to IRS processing, information or information systems shall be reported within one (1) hour to the CO, COR, and CSIRC. Contact the CSIRC through any of the following methods:

CSIRC Contacts: Telephone: 240.613.3606 E-mail to csirc@irs.gov

The CSP/Contractor shall be accountable for incident responsiveness, including providing specific time frames for restoration of secure services in the event of an incident.

The CSP/Contractor shall provide and maintain insurance, to include cybersecurity insurance, throughout the performance of this contract, as specified in the Schedule or elsewhere in the contract.

Before commencing performance under this contract, the CSP/Contractor shall provide proof of insurance to the Agency. The CSP/Contractor shall resubmit the proof of insurance within 30 days of notification of any material change that occurs during the performance of the contract.

The CSP/Contractor shall insert the substance of this clause, including this paragraph (c), in subcontracts under this contract that require work with or in support of storage and retrieval of https://tscc.enterprise.irs.gov/irc/ mailto:samc@irs.gov mailto:csirc@irs.gov

2043FY-24-Q-00013 Page 23 of 34 electronic/digital government data and shall require subcontractors to provide and maintain the insurance required in the Schedule or elsewhere in the contract. The CSP shall maintain a copy of all subcontractors’ proofs of required insurance and shall make copies available to the Contracting Officer upon request.

4. TERMINATION OF CONTRACT

At the end of the contract period, or if the contract is terminated within the contract period, the

CSP/Contractor shall coordinate with the IRS to ensure contractor and contractor employee access privileges to IRS information, IRS systems and facilities are revoked in a timely manner, as necessary.

CSP/Contractor shall confirm to IRS officials that information furnished under the contract has been properly returned, disposed, or destroyed.

Information and IT assets shall be returned to the IRS, destroyed and/or sanitized, as required or directed by the IRS. This includes assuring the IRS that all IT assets, including laptops, information systems, servers, routers, printers, faxes, switches, voice recordings, and all removable and fixed media have been sanitized of all IRS information prior to returning into production for other use.

CSP/Contractor required to return IRS information and property (as a part of the contract requirements) shall use a process that ensures that the confidentiality of the SBU information is always protected during transport.

A log shall be maintained to ensure that all media destroyed has identified the date of destruction, content of media, serial number, type of media (CD, DVD, Closed Caption Television (CCTV), etc.)

destruction performed, personnel performing destruction, and witness.

All VoIP shall be sanitized prior to returning to production, when SBU information is stored on these devices.

All hard drives and removable media shall be inventoried, sanitized, and logged to demonstrate data destruction for all IT assets used to handle SBU data.

All hard copies shall be returned using double-wrapped envelopes and traceable mail.

5. Contractor Security Requirements

It is the contractor’s responsibility to know and understand which regulations and…