36C25618B0308-00003000.docx

5. PROJECT NUMBER (if applicable)

CODE

7. ADMINISTERED BY

2. AMENDMENT/MODIFICATION NUMBER

CODE

6. ISSUED BY

8. NAME AND ADDRESS OF CONTRACTOR

4. REQUISITION/PURCHASE REQ. NUMBER

3. EFFECTIVE DATE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED

PAGE

OF PAGES

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED

BPA NO.

1. CONTRACT ID CODE

FACILITY CODE

CODE

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

E. IMPORTANT:

is extended,

(a) By completing Items 8 and 15, and returning __________ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY is not extended.

12. ACCOUNTING AND APPROPRIATION DATA

(REV. 11/2016)

is required to sign this document and return ___________ copies to the issuing office.

is not, A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO. IN ITEM 10A.

15C. DATE SIGNED

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER

BY

Contractor

16C. DATE SIGNED

14. DESCRIPTION OF AMENDMENT/MODIFICATION

16B. UNITED STATES OF AMERICA

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER

16A. NAME AND TITLE OF CONTRACTING OFFICER

15B. CONTRACTOR/OFFEROR

STANDARD FORM 30

PREVIOUS EDITION NOT USABLE

Prescribed by GSA - FAR (48 CFR) 53.243 (Type or print) (Type or print) (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

(Number, street, county, State and ZIP Code) (If other than Item 6) (Specify type of modification and authority) (such as changes in paying office, appropriation date, etc.)

(If required)

(SEE ITEM 11)

(SEE ITEM 13)

(X)

CHECK

ONE

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

(Signature of person authorized to sign) (Signature of Contracting Officer) 00003 05-16-2018 598-18-2-8726-0001 598-18-102 Department of Veterans Affairs Chief, A&MM (90C/NLR) Central Arkansas Veterans HCS 2200 Fort Roots Drive, Bldg 41, Room 200 North Little Rock

AR

72114 1706 Department of Veterans Affairs Chief, A&MM (90C/NLR) Central Arkansas Veterans HCS 2200 Fort Roots Drive, Bldg 41, Room 200 North Little Rock

AR

72114 1706 To all Offerors/Bidders

36C25618B0308

X c x The purpose of this amendment is to post answers to the RFI's.

All other terms and conditions remain the same.

Contracting Officer

CONTINUATION PAGE

RFI Questions (NLR Security Project) The VA (Central Arkansas Veterans Healthcare System; CAVHS), has an approved, working, functional surveillance (Sony/OnSSI) and access control system (Hirsch/HID). This contract is requesting additional components to be installed to increase the overall system capabilities. All new components specified are standardized as the CAVHS keeps current inventory and supports the current system using these specified components. The VA engineering staff is responsible for meeting compliance requirements. If there are any non-compliance issues, it will not be the responsibility of the awarded contractor.

2.9.A is referenced in terms of equipment grounding, however, 2.9.A does not exist. Request clarification.

Answer: Should have read 2.8.A.

We understand bids are due May 23, 2018, at 10:00 AM. Please clarify the method for delivery; email or in-person?

Answer: Certified mail or in person

Which document takes precedence as it relates to the specifications, the drawings or the VA Master Specifications?

Answer: The specs typically take precedence, but if there is a dispute, the CO has the final authority.

What is the evaluation criteria for determining the award?

Answer:

Per the Wage Scale document, a rate of $19.17 per hour is shown for ELECTRICIAN (Low Voltage Wiring for Internet / Satellite and Video / Voice Data Only) with $0.00 as fringes. What should the dollar amount of fringes be? Also, what is the rate and fringes for a Technician Level I?

Answer: $19.17 per hour with $0.00 fringes is the approved wage rate. There are no alternate approved rates for this project.

Will a bid bond and payment performance bond be required?

Answer: Yes

No warranty is mentioned in the statement of work; what period are we expected to warranty the labor and material? What is the Siemon cable warranty?

Answer: The minimum warranty requirements are as follows: 3 years parts and labor for all surveillance cameras, servers, software and access control components used in this project. The Siemon structured cabling system (Category 6 and Fiber-Optic cabling) requires a manufacturer 20-year warranty.

Will the contractor be required to provide a manufacturer’s 25-year Siemon warranty for the camera connectivity and cabling?

Answer: The Siemon structured cabling system (Category 6 and Fiber-Optic cabling) requires a manufacturer 20-year warranty.

Statement of work mentions turn-key project but no mention of test results for cable runs, will the awarded contractor need to provide test results for all camera network cables installed?

Answer: Test results for all Category 6 cabling and fiber-optic cabling are required.

To provide a correct 3-year SUP price we will need to know exact number of cameras existing on the VA’s SLC. Can you provide the quantity of cameras that the VA currently has in service on the Onssi system and what the current SUP is?

Answer: Bidding contractors shall bid a 3-year SUP for the North Little Rock campus camera system only.

What do you want the total SUP to be once the VA NLR project is completed, 3 years?

Answer: Yes

Please confirm that Central Arkansas VA Healthcare System-Fort Roots Veterans Hospital has certified EST fire alarm programmers on-staff that can program any new SIGA-CR addressable control relay modules into the existing fire alarm system.

Answer: Confirmed

Will HEPA carts be required? If so, who provides? What percentage of Project will require HEPA carts with HEPA vacs?

Answer: Most areas are considered infection control Class 2. HEPA carts and vacs must be provided by contractor, and will be required for all ceiling tile removal. Any work in SPS, Dental, Supply, Pharmacy may require a class III.

Infection Control – portable vestibules – are portable vestibules with HEPA filtration required for all above ceiling work?

Answer: See answer to previous question.

Will Project require customer Escort?

Answer: The contractor MUST provide at a minimum of 2 personnel that meet the requirements of the Security Investigation Center (SIC) and pass the appropriate background check. This will allow the contractor in question to escort their workers in all Office of Technology (OIT) Intermediate Data Frame (IDF) closets. Note: Please budget $1700.00 per technician to complete SIC background check.

Who will need to be responsible for end user training?

Answer: The contractor

Will end user training require multiple classes?

Answer: Yes. A minimum of two 4-hour training sessions will be required.

Who will be considered "end user" and how many?

Answer: Engineering Electronics Technicians (7)

Will this project be tax exempt, or should Contractor’s make sure to include all taxes in their bid?

Answer: All applicable taxes should be included in your proposal.

Work Hours - What are the hours available to perform the installation?

Answer: Normal hours are M-F 7:30-4. Coordinate with the COR 48 hours in advance for access outside of these hours.

Laydown Area - Will the Contractor have a laydown area(s)? If so, where?

Answer: Space is available for a lockable container or storage trailer. Location to be coordinated.

On-site Storage for Materials - Will the Contractor have a place to store materials on site within the existing facility? If so, where?

Answer: No, there will be no locations inside the facility to store materials.

On-site work trailer - Will the Contractor have a place for an on-site work trailer? If so, where?

Answer: Space is available for a lockable container or storage trailer. Location to be coordinated.

On-site Conex - Will the Contractor have a place to provide and store a Conex container? If so, where?

Answer: Space is available for a lockable container or storage trailer. Location to be coordinated.

Asbestos – Is there any potential for encountering asbestos on the project? If so, to what degree?

Answer: None is anticipated.

Asbestos – If asbestos is encountered, who is responsible for schedule impacts and cost for abatement?

Answer: No ACM is anticipated.

What level of infection control does the VA hospital want us to operate under? And can you provide an example of an infectious control document for this project?

Answer: Answered previously. HEPA carts and vacs must be provided by contractor, and will be required for all ceiling tile removal.

Will the contractor/installers be required to have an Arkansas State Contractors Security License?

Answer: Per specifications: General Requirements 1.5 Construction Security Requirements B.5 “The contractor MUST provide at a minimum 2 personnel that meet the requirements of the Security Investigation Center (SIC) and pass the appropriate background check. This will allow the contractor in question to escort their workers in all Office of Technology (OIT) Intermediate Data Frame (IDF) closets.” Please budget $1700.00 per technician to complete SIC background check. NOTE: It is the responsibility of the bidding contractor to meet all federal/state requirements pertaining to the installation of security/alarm systems.

Is it okay to secure conduit on the underneath side of the solar panel structures in the parking lot area?

Answer: Yes, affixing conduit to the solar panel frame is permitted. Prior to installation, coordination with the VA Engineering group is required. No conduit to be installed without written approval.

Is AC power available at locations of wireless radios on underneath side of solar panels for the wireless radios and are we to provide all power needs for back gate entrance, front entrances, and parking lot cameras?

Answer: No. AC Power to be provided by contractor at all needed locations.

Please confirm that we should penetrate the exterior of the building for wireless radios and then secure power from the nearest non-switched electrical circuit within the building for AC power for the wireless radios.

Answer: Yes. Cabling for radio will pull to nearest closet approved by VA Engineering group.

Penetrating historical buildings, will there be any historical buildings on the VA NLR campus that we will need to penetrate?

Answer: No

On sheet TY502, in the Proposed Equipment, it lists 50,811 feet for Cable/Conduit. Is this a quantity we need to install for cable and conduit?

Answer: Please disregard cable/conduit notation. Not relevant to this project.

Please confirm the total camera count. We came up with a total camera count of 402.

Answer: Confirmed 402

Is the table labeled ‘NLR Distribution Switch Installation’ a list of new equipment that will be required or a list of existing equipment?

Answer: New equipment to be provided and installed by contractor.

Are the tables labeled ‘NLR Infrastructure’ Core Switches, Distribution Switches, PoE Injector, Accessories, and Servers a list of new equipment that will be required or a list of existing equipment?

Answer: New equipment to be provided and installed by contractor.

Are we to install scramble readers or keypad readers for all reader swaps?

Answer: Keypad reader 921PHRNEK0002G.

Are we to assume that all new access control doors will connect to existing access control panels or will there will a be provided list of areas that will require new access control panels?

Answer: All areas require new MX8 panels.

Will manufacturer substitutions on the cameras be acceptable?

Answer: No, All new components specified are standardized as the CAVHS keeps current inventory and supports the current system using these specified components.

Do you want us to design our servers around motion based recording or continuous?

Answer: 3 days continuous with 27 day motion recording to match existing configuration for the Little Rock campus.

Where circumstances deem practical, will surface mounted raceway be acceptable?

Answer: Yes, coordinate with VA Engineering group prior to installation for approval.

Can existing cable trays be utilized, where available?

Answer: Yes, as long as you remain in compliance.

Can J-Hooks be used if they aren’t being connected to fire sprinkler pipes?

Answer: Yes, maximum 4ft. spacing.

If existing conduit does not have space to run fiber/cable, is it the contractor’s responsibility to provide new conduit EMT runs?

Answer: Yes

Are there any existing fiber spares that can be used for this project?

Answer: Bid should include new fiber where fiber connectivity is required.

Is the contractor expected to provide the fiber connectivity between all the network closets?

Answer: Existing fiber backbone already in place.

Can ½” conduit EMT be used for power wiring and low voltage due to space limitations?

“ALL NEW AND EXISTING MAG LOCK INSTALLATIONS FOR DOORS SHALL BE INTERLOCKED WITH THE FIRE ALARM SYSTEM SUCH THAT THE MAG LOCKS RELEASE DURING A FIRE ALARM.” Who is Fire Alarm Contractor and what is their contact information?

Answer: Installation of hardware and wiring is the responsibility of the awarded contractor, programming of the Fire Alarm system to be performed by the VA Engineering Electronics Technicians.

Will the programming and configuration of the ONSSI software be performed by the VA security team or the security contractor?

Answer: Programming and configuration of the ONSSI VMS to be performed by the contractor. Technicians must be OnSSI certified.

Who is responsible for configuring the VA’s new surveillance network switches?

Answer: The contractor.

Will the VA be able to provide the contractor with switch configuration settings if we are to configure?

Answer: Yes.

Will the outdoor cameras require surge protection?

Answer: Yes.

If surge protection is required, who will provide the grounding? The VA or the security contractor?

Answer: Contractor.

What level of RAID do you prefer in your recording servers?

Answer: 6

Do you want the UNI-BBB1 and UNI-BBB2 wall mounts for the outdoor cameras?

Answer: Yes.

Are all fiber jumpers from IDF closets to the MDF, in Building 170, included in the quantity on sheet TY502?

Answer: Contractor to provide the necessary quantity of jumpers to provide operational system.

On TI001, can you please clarify what the following symbols are:

a. Camera icon with a circle and an E – SNC-EB632R – Is this correct?

b. Camera icon with nothing – UNIONEP580C7 – Is this correct?

c. Camera icon with the arrows – UNIONEP580C7 – Is this correct?

Answer: a. should be SNC-EM632RC, b. should be SNC-EB632R, c. Correct, however there are NO PTZ cameras in this project.

Are we to provide trenching and/or borings needs for the back-gate camera installation?

Answer: Yes

Is the VA providing the patch cables or is the contractor expected to provide patch cables for the comm room end and the camera end?

Answer: Contractor

Will any Hirsch or access control cable substitutions be accepted per the TY502 document?

Answer: No.

Will any UPS manufacturers substitutions be accepted per the TY502 document?

Answer: No.

Please verify the Period of Performance is only 120 days Answer: Check Fed-Bizopps for period of performance per the contract specialist.

Description states that all Servers shall be IOMNIS. Do you want IOMNIS for all servers or just the video recording servers?

Answer: The IOMNIS part numbers originally provided are no longer manufactured. Please provide servers that meet the “Recommended” OnSSI recorder requirements (https://onssi.com/hardware-recommendations/), the minimum storage requirements specified below, and a minimum 3-year parts and labor warranty.

The Solicitation 1 states that cameras shall have a minimum resolution of 1280x720 and be capable of 10FPS. The section further states that the surveillance server(s) shall provide for a minimum of 30 days of storage for all cameras. Is video storage capacity to be based on all cameras recording at 1280x720 resolution and 10FPS for 30 days?

Answer: Disregard 1280x720p, all camera minimum resolutions must be 1920x1080p. Video storage capacity will be based on all cameras recording at 1920x1080p at 10 FPS for 30 days.

The camera models specified are all 1920x1080P resolution. This is double the minimum resolution stated elsewhere in the Solicitation. Should the cameras that are 1920x1080P be set to record at 1920x1080P, 10FPS? If set to record at 1920x1080P, should the video storage capacity be adjusted to handle the space required for cameras recording at 1920x1080P?

Answer: See answer to previous question.

Referencing the above question about the video storage capacity; If a camera has the capability to record at a higher resolution, should the video storage calculation be based on 1280x720P or based on the expected recording resolution of the camera?

Answer: See answer to previous question.

These sections appear to apply to organizations that operate information system on behalf of the VA at non-VA facilities. As this system will be located at a VA facility and used on a daily basis by the VA, do the referenced sections apply to the solicitation?

Answer: Insufficient information to answer this question.

This section did not list any attachments. Are the attachments that were provided, including but not limited to the Specifications and Drawing Sets, to be considered official sections of the solicitation?

Answer: Insufficient information to answer this question.

Does this solicitation require a bid guarantee and, if so, what is required?

Answer: A bid bond is required.

Evaluation Factors for Award – The Solicitation states that for this Solicitation there are NO provisions for this section. Does this mean that there are no specific criteria for evaluating the responses provided? If there are criteria, please provide the criteria for evaluating the response for this solicitation.

Answer: Price, Compliance with Specifications, Drawings, and Statement of Work.

Please define BESDB.

Answer: A/E.

The Solicitation calls for Riser rated cable. Does this mean that there are no plenum spaces where cable will be installed?

Answer: All camera locations will utilize plenum rated cable. See TI001.

The drawing legend refers to 14 drawing sheets. We were provided 10 drawing sheets. Please provide Ty131, TY132, TY501, and TY502 Answer: See Fed-Biz Opps for updated missing attachments per the contract specialist.

Requires the submission of a ‘Current Site Conditions’ report. Is it the expectation that, after award, the contractor come on site and verify the operation or non-operation of the existing system?

Answer: Disregard for this contract.

FIPS 201 Compliance Certificates – Include components that are not part of the PACS. Are we required to submit compliance statements for all listed components?

Answer: No

FIPS 201 and NIST SP800-116 require that the organization have a policy that specifies when various types of readers are to be used; contact only, contact + PIN, contact + PIN + Biometric. The organization’s standard is to be based on the asset being protected. Is the contractor required in any way for ensuring adherence to VA’s policy in this matter? If yes, please provide the policy.

Answer: VA Standards have been identified, please refer to TY502 for correct part number of card reader and access control components for this project.

OMB Circular A130 “Managing Information as a Strategic Resource” is not in the list. Who is responsible for compliance with requirements of OMB Circular A-130?

Answer: The VA follows the standards based on security police requirements.

OMB requires that all computer systems, even stand-alone system, are issued an Authorization to Operate (ATO) and conform with the requirements for continuous monitoring. Who is responsible for these requirements? If the contractor is responsible for these requirements, to what standard must we conform?

Answer: Not applicable

Is the contractor required to perform a system inspection on existing components that are incorporated into the upgraded system? If yes, please provide a list of all existing components that it is reasonable to expect will be incorporated into the upgraded system.

Answer: No

This reader is not currently listed on the GSA Approved Products List for products approved to be used in FIPS 201 compliant systems. Are we to use the specified reader and thereby provide a system that is not complaint the FIPS 201?

Answer: Use following part numbers for readers: Standard reader 920PHRNEK00005 / Keypad reader 921PHRNEK0002G.

There is a side note to ‘Ensure device installed is compatible with existing facility’s access control’.

Answer: See previous answer for standardized card readers and TY502 for part numbers.

Please define compatible. Does this mean that the card reader used is to be approved by the manufacturer to work with the control hardware provided under this request?

Answer: See previous answer for standardized card readers and TY502 for part numbers.

Does compatible mean that the reader provided is to function with credentials currently in use? If so, please provides details of the credentials in use. Details should include manufacturer, bit structure, and technology such as 125Khz prox, Mifare, iClass, Desfire, Mifare EV1, or iClass SEOS.

Answer: See previous answer for standardized card readers and TY502 for part numbers.

If the credentials in use include something other than a PIV or CAC, and the intent is to have this non-PIV compliant credential to continue to be used, they system will not be complaint with FIPS 201. If we are to have non-PIV compliant credentials operate the access control, please confirm that you are requesting a system that is not in compliance with FIPS 201.

Answer: All readers are PIV class HID. See previous answer for card readers and TY502 for additional part numbers.

Please define and provide details of the existing facility’s access control. Please provide the make, model, and software version of the application. Please provide make, model, and configuration of the servers on which the application is installed. Please provide the version of the OS and SQL currently utilized for the application server.

Answer: Refer to parts listed in TY502 and amendments. These parts will be compliant with our current system.

Statement of Work calls of the installation of upgrades to the video and access control systems. There is no discussion of integration between the video and access systems. If the systems are to be integrated, please define the level of integration.

Answer: No integration.

The Notes for all equipment in the Equipment Table state the ‘Equipment must meet the requirements listed in the statement of work.’ Please clarify this Note.

Are we to provide the equipment models specified?

Answer: Yes

If the answer to the above is yes, then what are we to do if the equipment models specified do not meet the requirements in the Statement of Work.

Answer: Please reference TI001 and TY502.

If the answer is yes, and it is our belief that the specified equipment will not function in a manner consistent with normal operation or industry standards, what are we to do? An example may be a workstation that is not configured appropriately to display 16 or 20 concurrent video streams which will occur of the operator has 16 cameras on 1 monitor and 4 cameras on the 2nd monitor for a dual monitor station.

Answer: Please reference TI001 and TY502. Equipment specified is currently in use and operating to our standards.

Please define ‘a dual level prox card reader/PIN code.’ Is this different than the symbol legend for a DS47L-SSP-TS reader?

Answer: For the dual level prox use part number 921PHRNEK0002G.

Is it the intent that all cameras are within 300’ of the associated network switch?

Answer: Yes

If the distance between the camera and the switch exceeds reasonable distances, usually in excess of 300’, how is that situation to be handled? An example would be Sheet TY101, top left corner, the camera watching the elevator next to room GP101-170.

Answer: All camera locations are within the 300 ft range. Any discrepancies will be addressed after contract is awarded.

Installation Instructions state that very specific versions of software are required. Please provide the versions of all hardware and software to which we must adhere.

Answer: See TY502 for Identiv software version. Onssi software will be Enterprise level version 5.5 with 3 year “stay current” for each camera and base.

There is a table that refers to changes in the number of cameras to be provided in various sections of the building. Please provided updated drawings indicating where the cameras are to be located so we can determine appropriate cable and network switch requirements.

Answer: VA North Little Rock camera locations are correct on the design drawings, number of cameras on TY502 were updated utilizing Attachment A.

The Hirsch Parts refer to the MXM8. This part is an upgrade to and existing M8 controller. This is a board only upgrade. Are all MXM8 controllers specified going to be installed in existing enclosures?

Answer: All Hirsch panels will be new installs. No upgrades will be made to existing.

The Hirsch Price List does not reference an MXM4 controller. There is an MXM2 controller. Please clarify if the existing M2 controller is to up upgraded to a new 2 door controller (MXM2) or upgraded to a new 8 door controller (MXM2-RK-Mx8).

Answer: All Hirsch panels will be new installs. No upgrades will be made to existing. All controllers will be MX8.

This question may be answer but Drawing Sheet TY502 was not provided in the drawing set. The Upgraded controllers will each require a separate SNIB-3 and RREB in order to to comply with FIPS 201. Should the SNIB3 and RREB be included with each new or upgraded controller?

Answer: All Hirsch panels will be new installs. No upgrades will be made to existing.

There is a new MX4 Controller. Are there locations that will require an MX4 controller rather than an MX8 controller?

Answer: The VA expands the size of our PACS system on a regular basis. Due to this, consider all controllers will be MX8.

Does the Hirsch Controller riser indicate which panels are connected to the network and which panels are connected to a networked panel via RS485?

Answer: All panel locations are connected via TCP/IP network.

The use of PIN-to-PACS, a reader that uses the contactless interface to validate the CAK and sends the PIN to the controller for verification, is not recognized by FIPS 201 as a validate form of 2 factor authentication. Do any of the locations receiving readers require FIPS 201 complaint 2 factor authentications through contact card + PIN-to-card functionality?

Answer: Yes, dual authentication card reader part number 921PHRNEK0002G.

FIPS 201 requires the authentication and validation of credentials at the time the credentials are enrolled into the PACS. Please describe how existing credentials are enrolled. Is the HID pivCLASS enrollment station in use? Is the Hirsch embedded enrollment client in use?

Answer: PIV enrollment processes is beyond the scope of this SOW.

FIPS 201 requires that only PIV or PIV-like credentials be used on a FIPS 201 complaint system. Please describe the credential issued to personnel that do not have a PIV. How is this credential issued? Should the issuance process be incorporated into the PACS upgrade?

Answer: Not applicable for this project.

FIPS 201 requires that only PIV or PIV-like credentials be used on a FIPS 201 complaint system. Please describe how contractors, visitors, and other temporary personnel that do not have a PIV or CAC are handled.

Answer: Not applicable for this project.

Is the currently licensed version of Velocity the standard Velocity or the Federal version of velocity?

Answer: CAVHS is running Velocity 3.5 SP2 Federal edition.

Please indicate the current software version of Velocity along with the version of the OS and SQL for the server on which Velocity runs.

Answer: CAVHS is running Velocity 3.5 SP2 Federal edition, Windows Server 2008 R2, Microsoft SQL.

Is Velocity currently licensed for the VEL-VCCS, Velocity Certificate Checking Service?

Answer: No.

Is Velocity currently licensed for the integration with OnSSI? If so, is the annual support for this license current?

Answer: No integration.

Is piv CLASS currently licensed for use with Velocity? If yes, which modules are licensed? If yes, is the annual support for these licenses current?

Answer: Not sure of what is being asked.

Please indicate if there are any other software options licensed for Velocity? If so, which options? Are the annual support agreements for these options current?

Answer: We maintain our own system and have no licenses.

Is velocity currently licensed for the PV-RE, piv-CLass Registration Engine?

Answer: No.

Is Velocity currently licensed for the PS-VELCONN, Velocity Connector?

Answer: No.

Are there any HID PAM modules currently in use? If not, how is the authenticity of a credential verified at the reader?

Answer: No.

GSA requires that a Certified System Engineer ICAM PACS (CSEIP) be involved in the design and deployment of any system that is certified as compliant with FIPS 201. Does this solicitation require that a CSEIP be involved in the design and installation of the PACS?

Answer: No.

OMB Circular A130 requires that all computer systems, even systems not connected to the institutional network, be issued an ATO by the office of the CIO. Who is responsible for working with the CIO's office to get the ATO issued?

Answer: The VA has an approved current operating access control system. An ATO will be generated by local Engineering personnel to the CIO prior to contract start date. This is only a hardware install; the VA will be responsible for any configurations.

Do the existing PACS and VMS have an ATO? If yes, will this upgrade be considered a modification to the existing ATO?

Answer: The VA has an approved current operating access control system. An ATO will be generated by local Engineering personnel to the CIO prior to contract start date. This is only a hardware install; the VA will be responsible for any configurations.

Will with request for an ATO be for two separate, interconnected system, such as a PACS and a VMS? Or will the requites for the ATO for a single security management system?

Answer: The VA has an approved current operating access control system. An ATO will be generated by local Engineering personnel to the CIO prior to contract start date. This is only a hardware install; the VA will be responsible for any configurations.

For purposes of getting an ATO, are there other interconnected systems, such as intercom, visitor management, intrusion detection, patient wandering, or infant monitoring that would interconnected with the security management system?

Answer: No.

Since the specified Velocity controllers are upgrades to existing controllers, please provide the model and firmware of any existing auxiliary modules that are expected to be re-used. This would include any memory expansion, auxiliary input, or auxiliary output modules.

Answer: Memory boards will be provided by VA and the VA will handle all firmware updates.

How many workstations are in use now and will all be part of the new system?

Answer: The number of current work stations is irrelevant to this contract. New installs will not affect our current system.

What power supplies are in use?

Answer: Change existing part number on TY502 from AL600ULACMCB to AL600ULACM.

What types of locks are in use?

Answer: TY502 indicates ALAC 1200L change to ALAC 1200LB.

The Statement of Work references cameras from Sony. These cameras are manufactured in China. This is contrary to the Buy American stated elsewhere in the Solicitation. Are these specific camera models required or should we use cameras that are Buy American or TAA complaint?

Answer: The component test of the Buy American statute is waived for construction material that is a COTS item. (See FAR 12.505(a)(2)). This requirement does not apply to information technology that is a commercial item.