36C24222Q0384 0001.docx

5. PROJECT NUMBER (if applicable)

CODE

7.

ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER

3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE OF

PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO.

1. CONTRACT ID CODE

FACILITY CODE

CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning __________ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE

OF YOUR

ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office.

is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERE

D CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES

SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTION OF YOUR

OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendmen t, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF AMENDMENT/MODIFICATION

16B. UNITED

STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER

16A. NAME AND TITLE OF

CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30

PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243 (Type or print) (Type or print) (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code) (If other than Item 6) (Specify type of modification and authority) (such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF

SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer) 36C242 Department of Veterans Affairs Network Contracting Office 2 James J. Peters VA Medical Center 130 West Kingsbridge Road Bronx NY 10468-3904 36C242 Department of Veterans Affairs James J. Peters VA Medical Center Network Contracting Office 2 130 West Kingsbridge Road Bronx NY 10468-3904 To all Offerors/Bidders

36C24222Q0384 02-28-2022

X x x ** HOUR & DATE for Receipt of Offers is EXTENDED to: March

10, 2022 12PM EST

See CONTINUATION Page x The purpose of this amendment is to address the following concerns to solicitation No: 36C24222Q0384.

1. Questions

2. To extend offer due date & time from 02/28/2022, 12PM EST to 03/10/2022, 12PM EST.

3. Providing a copy of the sign in shee t from the walk through on 02/15/2022.

The purpose of this amendment is to correct any ambiguity and thereby correcting any a dministrative errors.

Clifford S. Harrison Contracting Officer

Question #1:

In regard to the requirements for the installation of the cameras, card readers, access control board, and Lync panic button equipment/software. The specifications/requirements document calls for ALL technicians and sub-contractors working on site to possess the individual Manufacturers certifications. Would the Government accept the Lead Technician on each system having the required certifications and junior technicians providing basic install and labor services be experienced but have the ability to work under the Lead Technician’s certification? (The contractor notes and accepts that all technicians responsible for programming any of the systems MUST carry the appropriate certifications as stated on page 13 of the solicitation) It is acceptable to have a Lead technician and junior techs. Lead Technician must be onsite to supervise and coordinate all work done by Junior Techs. Lead Techs will inspect and certify all work. Programming must be performed by certified techs.

Question #2:

The requirements document calls for the supply and installation of sixty-six (66) HID PivClass RPK40 card readers. The Performance Period stated on page 9 of the solicitation calls for a 90-day period of performance. According to the Manufacturer, due to supply chain issues, there is an approximate 4-to-5-month lead time on this model card reader (as of today 2/23/22). Will the Government consider extending the period of performance to allow for this lead time delay?

The SOW states that Albany has 66 PIV Prox readers installed already, these will NOT be replaced. Albany has 128 magnetic stripe readers that WILL be replaced with new prox readers.

The current spec for these is RK40-H – Terminal Strip – UL Number RPK40E.

iCLASS SE® Credentials and Keys / Formats NFC: Enabled Seos®: Enabled iCLASS®: Enabled iCLASS® SR: Enabled iCLASS® SE: Enabled FIPS-201 Standard: Contact/Contactless (CHUID) Enabled HID Proximity® and AWID Proximity: Enabled EM Proximity: Enabled Physical Attributes Reader Model: RPK40 Reader Color: Black Connection Style: Terminal Reader and Format Settings Communication Protocol: Wiegand and PAM-Ready ISO14443-A UID Output Format:Z = CSN Suppressed Keypad Output Format: SE = ASCII, Transmit complete PIN (pivCLASS PAM) FIPS-201 Output Format: FIPS-201 75-BIT Wiegand Tamper Settings: On OSDP Tamper: Off LED Color While Idle: Red (default) LED Color on Credential Read: Flash Green (default) Audio on Card Read: Enabled Velocity Check: Enabled Intelligent Power Management (IPM): Enabled Albany understands current supply issues and is amicable to extending lead times for this requirement. Albany will be satisfied with proof of order and frequent delivery status updates.

Question #3:

On page 8 of the requirements document, the government makes the statement that the “Albany VA Medical center currently operates 105 camera feeds managed by Milestone XProtect”. Then in the next sentence the Government states that a “site survey revealed the need for 171 new cameras to be installed throughout the interior”. Please confirm that the exact number of cameras to be provided by the contractor is one-hundred seventy-one (171) and not two-hundred seventy-six (276) (105 original +171 new =276 total).

171 new cameras the current 105 will continue to be utilized.

Due to new part numbers from AXIS the updated part numbers are as follows:

Original SOW and new part number 48 (forty-eight) AXIS P3245-V cameras replace with P3265-LVE with 9MM wide lens (P3245-LVE will be phased out to P3265-LVE in 2022) 63 (sixty-three) AXIS P3717 cameras replace with AXIS P3727-PLE 48 (forty-eight) AXIS P3715 cameras replace part with AXIS P3715-PLVE 12 (twelve) AXIS P6074-E PTZ cameras replace with Q6075 PTZ 12 AXIS 6075 PTZ require AXIS TQ6501-E parapet mount

12 exterior cams might require AXIS T8129-E POE extender Five installation locations will require AXIS T91D61 Wall Mount 1.5” NPS

· Are the (66) existing RPK40 reader/kaypads to be reutilized? If so, are these in addition to the (128) new readers?

The SOW states that Albany has 66 PIV Prox readers installed already, these will NOT be replaced. Albany has 128 magnetic stripe readers that WILL be replaced with new prox readers.

The current spec for these is RK40-H – Terminal Strip – UL Number RPK40E.

iCLASS SE® Credentials and Keys / Formats NFC: Enabled Seos®: Enabled iCLASS®: Enabled iCLASS® SR: Enabled iCLASS® SE: Enabled FIPS-201 Standard: Contact/Contactless (CHUID) Enabled HID Proximity® and AWID Proximity: Enabled EM Proximity: Enabled Physical Attributes Reader Model: RPK40 Reader Color: Black Connection Style: Terminal Reader and Format Settings Communication Protocol: Wiegand and PAM-Ready ISO14443-A UID Output Format:Z = CSN Suppressed Keypad Output Format: SE = ASCII, Transmit complete PIN (pivCLASS PAM) FIPS-201 Output Format: FIPS-201 75-BIT Wiegand Tamper Settings: On OSDP Tamper: Off LED Color While Idle: Red (default) LED Color on Credential Read: Flash Green (default) Audio on Card Read: Enabled Velocity Check: Enabled Intelligent Power Management (IPM): Enabled Albany understands current supply issues and is amicable to extending lead times for this requirement. Albany will be satisfied with proof of order and frequent delivery status updates.

· We believe the HID RPK40 reader/keypads are discontinued, can you please identify which reader/keypad is the current basis of design?

The current spec for these is RK40-H – Terminal Strip – UL Number RPK40E.

iCLASS SE® Credentials and Keys / Formats NFC: Enabled Seos®: Enabled iCLASS®: Enabled iCLASS® SR: Enabled iCLASS® SE: Enabled FIPS-201 Standard: Contact/Contactless (CHUID) Enabled HID Proximity® and AWID Proximity: Enabled EM Proximity: Enabled Physical Attributes Reader Model: RPK40 Reader Color: Black Connection Style: Terminal Reader and Format Settings Communication Protocol: Wiegand and PAM-Ready ISO14443-A UID Output Format:Z = CSN Suppressed Keypad Output Format: SE = ASCII, Transmit complete PIN (pivCLASS PAM) FIPS-201 Output Format: FIPS-201 75-BIT Wiegand Tamper Settings: On OSDP Tamper: Off LED Color While Idle: Red (default) LED Color on Credential Read: Flash Green (default) Audio on Card Read: Enabled Velocity Check: Enabled Intelligent Power Management (IPM): Enabled

Albany understands current supply issues and is amicable to extending lead times for this requirement. Albany will be satisfied with proof of order and frequent delivery status updates.

· What is the require number of days of video retention to be provided on the NVR? The Physical Security & Resiliency Design Manual does not identify. Can you please define which TRM is specifically referenced for this project as identified in Applicable Documents, Item 3?

Albany requires 30 days of video storage.

- TRM is only for software – Lynx Client https://www.oit.va.gov/Services/TRM/ToolPage.aspx?tid=6034

· Are the existing network switches capable of supporting (171) cameras and requisite PoE+ power to the new cameras? If not, who is to provide network switches? If Contractor, how many existing switches are in place for reuse?

This will be based by an area survey to be conducted prior to installation of each wing and floor – as an example when we get to a floor, and we are looking for 5 open ports, we will trace to installation point (Tipps Closet) and if there are not enough open ports for use, then I request through IT. They install the needed switches or provide ports by re-purposing ports that might not be in use but currently are connected.

· Is the existing camera cabling in good condition and Cat 6 or better?

Yes, all current installations are CAT 6 and in good condition.

· It appears that some of the basis of design part numbers are discontinued, can you please provide updated part numbers for the basis of design?

The Lenel part numbers as of today’s web page are

RK40-H – Terminal Strip – UL Number RPK40E.

iCLASS SE® Credentials and Keys / Formats NFC: Enabled Seos®: Enabled iCLASS®: Enabled iCLASS® SR: Enabled iCLASS® SE: Enabled FIPS-201 Standard: Contact/Contactless (CHUID) Enabled HID Proximity® and AWID Proximity: Enabled EM Proximity: Enabled Physical Attributes Reader Model: RPK40 Reader Color: Black Connection Style: Terminal Reader and Format Settings Communication Protocol: Wiegand and PAM-Ready ISO14443-A UID Output Format:Z = CSN Suppressed Keypad Output Format: SE = ASCII, Transmit complete PIN (pivCLASS PAM) FIPS-201 Output Format: FIPS-201 75-BIT Wiegand Tamper Settings: On OSDP Tamper: Off LED Color While Idle: Red (default) LED Color on Credential Read: Flash Green (default) Audio on Card Read: Enabled Velocity Check: Enabled Intelligent Power Management (IPM): Enabled Questions for Solicitation 36C24222Q0384 Bid Date Extension:

· Given the scope and scale the project, and the engineering required, can we have an extension out to 3/14/2022?

The NC02 Contracting Department will be extending the submission date from 02/28/2022 12PM EST to 03/10/2022 12PM EST.

FICAM Requirements for Visitor Management:

Significant effort has been expended over the past fifteen years to bring robust PIV- enabled PACS to market to facilitate High Assurance Physical Access Control for facilities used by Federal agencies. A stated goal of HSPD-12 and Memo 19-17 is cross-organizational trust: the reliance on any one agency’s PIV/CAC credential by any other agency’s PACS. PIV-enabled PACS can accept credentials from multiple issuers across multiple agencies.

· Does the VA intend to comply with 800-53 related to Visitor Management?

· Does VA intended to comply with OMB memo 19-17 and HSPD-12 related to visitor management?

· Does VA intend to comply with M-19-17 and NIST SP 800-116-Rev.1. I? (It enables approved visitors who have been issued suitable credentials by either the same agency, or another, to be able to use those credentials to facilitate physical access to a facility for the duration of a visit. Where approved visitors do not possess such credentials, they shall be furnished with locally produced, temporary credentials that interoperate with the PACS in the same electronic fashion. Automatic Provisioning for Limited Access)

1 HSPD-12, https://www.dhs.gov/homeland-security-presidential-directive-12 2 FIPS 201, https://csrc.nist.gov/publications/detail/fips/201/2/final 3 M-11-11, https://www.cac.mil/Portals/53/Documents/m-11-11.pdf 4 NIST SP 800-116-1, https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-116r1.pdf 5 M-19-17, https://www.whitehouse.gov/wp-content/uploads/2019/05/M-19-17.pdf

Yes, Albany intends to phase in all the requirements stated. The equipment being installed should be capable of these requirements, although future programming and/or upgrades may be necessary. Primary installation will focus on Employee Access Control. Visitor Access will be phased in later by Albany.

· How many users are in Active Directory? Approx 2800

· How many visitors are received weekly? Monthly? 10-15 weekly

· Do you know how many visitors have valid PIV, CAC or PIVI credentials? Under 10

· Will a fully compliant PACS on the GSA APL be installed and utilized in a compliant?

Yes, the equipment requested is within https://www.idmanagement.gov/docs/apl-10113-level-validation.pdf

· Will VA utilize the interoperability of temporary badges with PIV readers and authentication mechanisms (especially PKI-CAK for physical access)?

Albany intends to utilize iCLASS Clamshell Smart Card for Temp access.

· Will VA use the assignment of unique identifiers (FASC-N or UUID) to temporary badges, to foster interoperability with PIV readers?

YES, iCLASS Clamshell Smart Card will be utilized with unique ID’s

· Does the VA intend to utilize the suitability of contactless-only temporary badges for physical access?

YES, iCLASS Clamshell Smart Card are contactless.

· Does the VA intend to comply FIPS 201-2? http://nvlpubs.nist.gov/nistpubs/FIPS

Phased in after all equipment is installed.

· Would the VA like to utilize kiosks for visitor management? If yes, how many?

No not under this project. Please follow all needs included in the Statement of Work.

Performance Areas 1-3:

· Access Control (Lenel OnGuard/HID)

· 10-20 new readers will require new conduit and spacers to mitigate interference. Who will be responsible for providing that?

Contractor will provide and install as needed for proper function of readers.

· CCTV (Axis Cameras)

· Replace up to 12 of the existing 105 Cameras.

· Where are the locations of the replacement cameras?

· Replacements will be usually where Albany already has a single lens camera in a corridor, such as elevator lobbies, or hallway locations. They are indicated on the pdf of the facility.

· Can the existing wiring support the needs of the new camera being installed?

YES, current cabling is CAT6 and in good working condition.

· What are the requirements for the replacement cameras?

Most replacements will be done with AXIS P3715 Dual Lens cameras.

· Distance limitations for areas without IT closets. What are acceptable measures to overcome the 100M cable run limitations for some locations?

We at Albany have not encountered this with any of our current installations for our interior cameras. Actually, not even with our exterior ones either. But I have included the POE extender’s part number if needed. (AXIS T8129-E POE), contractor will provide and install as needed.

· Emergency Response (Lynx)

· “This installation must provide software to support 4,000 computers for duress alarms expansion capabilities as needed for the Albany Stratton Medical Center and networked Community Based Outpatient clinics.”

· The documents state that all work will be done at 113 Holland Ave, Albany, NY. However, under “Area of Performance 3” there are 11 additional off site locations mentioned. What work will be required if any at the offsite locations?

These are our off-site clinics, although the software is usually installed via IT software push out. It might be required to visit to configure or confirm operability of the software. There is no hardware installation at these sites. This is for Lynx only. No cameras or readers are being installed off site.

Will the site visit form for be provided to all parties?

The NC02 Contracting Department has attached the site Visit form to this amendment.

According to the solicitation posting, Original Set Aside was left blank but inside the Description it was stated as Service Disable Veteran Owned Small Business Set Aside. Can you please acknowledge what type of set aside this is?

This requirement has been set aside for all Services Disable Veteran Owned Small Businesses.

See attached document: S04. Site Visit Sign In.

The purpose of this amendment is to address all of the vendors concerns. As a result, all vendors must sign and return this amendment signed with there proposals on March 10, 2022.