36C25519Q0432-0001000.docx

5. PROJECT NUMBER (if applicable)

CODE

7. ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER

3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE OF PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO.

1. CONTRACT ID CODE

FACILITY CODE

CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning __________ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office.

is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO:

Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF AMENDMENT/MODIFICATION

16B. UNITED STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER

16A. NAME AND TITLE OF CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30

PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243 (Type or print) (Type or print) (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code) (If other than Item 6) (Specify type of modification and authority) (such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer) 05-14-2019 657-19-2-2032-0057 None 36C255 Department of Veterans Affairs Network Contracting Office (NCO) 15 3450 S 4th Street Trafficway Leavenworth KS 66048 36C255 Department of Veterans Affairs Network Contracting Office (NCO) 15 3450 S 4th Street Trafficway Leavenworth KS 66048 To all Offerors/Bidders

36C25519Q0432 05-03-2019

X X X

The purpose of this Amendment is to:

1) Provide answers to contractors' questions. (see pages 2-5)

All terms and conditions remain the same for RFQ 36C25519Q0432.

Emilio Ballentos Contracting Officer

Questions and Answers

Question 1: Is the country of origin of the proposed technology weighed in your evaluation? We understand USA-made technology or that which is FAR-25 compliant fulfills the Buy American Act Answer: Not part of the technical evaluation, however, the Buy American Act is applicable.

Question 2: Is the intent of this solicitation to use existing most of the S2 or equal infrastructure (Door hardware, Power Systems, etc.) for your facility?

Answer: The intent is to utilize most of the existing hardware such as door hardware and power systems. The current system is Genetec based.

Question 3: How stable is the power?

Answer: Power is stable with most of this equipment being on emergency generators.

Question 4: Can you provide a layout of your facility?

Answer: Facility Layouts will be provided at the site visit.

Question 5: Is there an inventory and As builts available for the contractor?

Answer: An inventory can be Provided but As Built will need to be accomplished by the Contractor.

Question 6: When was the S2 System installed?

Answer: The current Genetec system was installed in 2013.

Question 7: How many work-stations and servers does the current S2 have?

Answer: 4 workstations and two servers.

Question 8: Are we to assume based on the SOW that there is a need for a new access control server, if yes can you tell us if there is a preference with a brand for the server?

Answer: Yes a new server is required for the entirety of the three required components. Servers must meet VA Office of Information and Technology requirements.

Question 9: If a new server and W/S are required, will the contractor make them in full compliance (FISMA, etc.) for the use into the existing VA Health Care IT infrastructure? Or will the VA Healthcare IT will provide those services?

Answer: The contractor will bring the server and workstations into FISMA compliance.

Question 10: We understand that there are 177 readers, what kind of readers are installed?

Answer: HID RP-40 and RK-40 readers are currently installed.

Question 11: Are these readers communicating to their controllers via Weigant interface?

Answer: Unknown - Contractor will need to verify through site visit.

Question 12: How many of those readers installed in double exit doors?

Answer: Unknown - Contractor will need to verify through site visit.

Question 13: How many of those readers are installed in double doors?

Answer: Unknown - Contractor will need to verify through site visit.

Question 14: What type of locksets is there in your doors?

Answer: Unknown - Contractor will need to verify through site visit.

Question 15: Does your agency use proximity 125Khz? technology? If yes, are you still planning to use those card readers?

Answer: Current HID readers will be utilized.

Question 16: Related to FICAM Policy, does your agency need to authenticate the CAK besides the CHUID or FASCN from the PIV or CAC Card?

Answer: No.

Question 17: Related to FICAM Policy, the fact the authentication of the PIV or CAC card can present major delay upon presenting the card to the readers, especially in areas such as the main entrances; what is the maximum allowable time expected to authenticate both CAK and CHUID? Is it 3 seconds or less?

Answer: 3 Seconds or less would be desired.

Question 18: Related to FICAM Policy, does the contractor have to be certified as a HSPD-12 by GSA approved vendor?

Answer: Approved vendors with approved staff for the PACS software to be integrated would be preferred.

Question 19: Related to FICAM Policy, does the contractor have to provide certified Security ICAM Engineers as recommended by GSA?

Answer: Not a requirement but preferred.

Question 20: Related to FICAM Policy, does the PACS system should be in full FIPS 201-2 compliance?

Answer: Not at this time until further integration is made.

Question 21: Since PACS Systems are now considered part of the IT infrastructure, does the proposed PACS System have to comply with the Federal Energy Management Laws and Requirements?

Answer: This system should comply with all Federal regulations and requirements in regards to Energy Management.

Question 22: When were the cameras installed?

Answer: Most of the cameras were installed in 2015 but have had additions since.

Question 23: Can you tell us how many buildings are being monitor?

Answer: Approximately 7.

Question 24: Is the existing Command Control (SOC) well ventilated?

Answer: Yes.

Question 25: Are you planning to use the existing Command Control (SOC) for the new CCTV System?

Answer: Yes.

Question 26: How many monitors does the Command Control have?

Answer: 4.

Question 27: Is there a plan new for a new command control system?

Answer: Not at this time.

Question 28: Are the specified 4 work-stations going to be supplied by the VA Health Care? If not, do these work stations need to be in full compliance to FISMA Standards?

Answer: Current workstations will be utilized. If upgrades are required to function on the newly supplied system, then the Contractor will provide these upgrades to ensure a fully operational system.

Question 29: Do you need redundancy for the new SOC?

Answer: Not at this time but the capability must exist.

Question 30: Does your SOC have UPS System?

Answer: Yes.

Question 31: Do we need to replace the existing monitors, if yes how many?

Answer: Monitor replacement will only be necessary if current monitors are not compatible or optimal for newly installed system.

Question 32: If yes, how far apart will the new Command Control be from the old command control system?

Answer: N/A

Question 33: Is there a special room with HVAC allocated for the new Servers?

Answer: Yes.

Question 34: Can you provide a layout of the 120 existing cameras?

Answer: Unavailable - Contractor will need to verify through site visit.

Question 35: How many cameras are using coaxial communication?

Answer: Unknown - Contractor will need to verify through site visit.

Question 36: How many of the 120 Axis cameras are IP, and what are the models of those cameras?

Answer: All cameras are IP based. These cameras are all manufactured by Axis. Models will be verified at site visit.

Question 37: How many cameras are interior?

Answer: Unknown - Contractor will need to verify through site visit.

Question 38: How many cameras are installed outside the building?

Answer: Unknown - Contractor will need to verify through site visit.

Question 39: Do you use 360 Degree view in some areas?

Answer: Yes.

Question 40: Do you use Pan/Tilt/Zoom for some areas?

Answer: Yes.

Question 41: Is there a parking area being viewed by any camera? If yes, please specify what type of cameras and how many?

Answer: Several parking areas are being viewed. Contractor will need to verify the number and type through a site visit.

Question 42: Is there any camera mounted on poles? How many?

Answer: Yes. Number should be verified through a site visit.

Question 43: If yes, is there an existing connection to existing conduit to the poles?

Answer: Yes.

Question 44: Are they going to be standalone cameras, as in not connected to the facility’s network?

Answer: Yes.

Question 45: Does the video storage need to have redundancy?

Answer: Yes.

Intrusion Detection:

Question 46: Based on the SOW, is there is a need for an intrusion detection system (IDS) upgrade?. Can you tell us how many IDS points (Door Contacts, Motion Detectors, Arm/Disarm Key Pads)are to be integrated into the new system by area as follows?

Answer: Unknown - Contractor will need to verify through site visit.

· Pharmacy Main

· Pharmacy Vault

· Agent Cashier

· Police Armory

· Linen Room

· Canteen/Retail Store

· IT Server Room, Telecom Room, and Storage Room

· Warehouse

Question 47: Is the facility using Ademco or Bosch Control Panels for the IDS System?

Answer: Bosch.

Question 48: How many zones are currently programmed in the existing system?

Answer: Unknown - Contractor will need to verify through site visit.

Question 49: Do we need to be compliant to FISMA?

Answer: FISMA regulations apply to all Federal Agencies as well as government contractors if they operate federal systems, however, in this case with the Marion VA PACS system, it is an isolated systems and therefore not applicable. The PACS system is air gapped and monitored by the Marion VA police from their own internal network. It is outside the VA network and therefore serves as a non-threat entity to and from outside network intrusions.

Question 50: Is it the responsibility of the security integrator to address the cyber risk of these systems?

Answer: Negative, not applicable.

Question 51: Background: GAO came up with a report, in which it states that DHS and GSA Should Address Cyber Risk to Building and Access Control Systems. If yes, are we to provide cyber security to the systems we are proposing?

Answer: This Access Control Systems are not applicable to this guidance due to air gapped network infrastructure. - Not applicable

Question 52: Does the proposed system need to demonstrate a cyber security vulnerabilities test? Answer: Negative, not applicable.

Question 53: So it went total small business instead of SDVOSB?

Answer: Yes, this is SDVOSB Set Aside, the NMR “Exception” is applicable

End of questions and Answers