Security Design Narrative.pdf

VA PROJECT NUMBER

PROJECT NAME

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SUBMITTAL Final Bid Documents

SUBJECT Security Design Narrative

SECURITY - 1

ELECTRONIC SAFETY & SECURITY

1. GENERAL – Project Overview and Background

A. Project Information:

This project is to upgrade the facility’s infrastructure to support the new Electronic

Health Record Modernization (EHRM) system in accordance with VA OEHRM Site

Infrastructure Requirements for the Dallas VA Medical Center as part of the VA North

Texas Health Care System. The project shall include the following:

• Upgrading facility fiber-optic cabling throughout the buildings to each

Telecommunication Room (TR) or Telecommunication Enclosure (TE).

• Provide redundant fiber-optic cabling ring topology throughout each facility on campus to each TR and TE.

• Provide secondary fiber-optic cabling run to demarcation room from the provider point-of-presence (ISP).

o This will provide the required dual internet service providers to the campus.

• Design or remodel one hundred twenty-six IT closets throughout the facility adhering to the EHRM guidelines.

o Providing design for new compliant TR’s and TE’s dedicated for OIT equipment.

o Maintain operations in existing TR’s that will continue to function housing

FMS/BioMed equipment after the OIT equipment is housed in the new

TR’s.

• Upgrade facility HVAC and electrical distribution systems as required for TR and TE locations.

• Provide a physical security assessment and upgrades as part of the design.

• Hazardous material assessment and plan of abatement as part of the design

Buildings within scope of work are as follows:

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SECURITY - 2

• 1, 2, 2J, 3, 5, 6, 7, 8, 9, 11, 13, 43, 44, 45, 60, 68, 69, 70, 71, 72, 74, 75, 77, 79, 80, 81, 82, 87, TT46, TT47, TT48, TT49, TT50, TT51, TT52, TT53, TT54, TT55 and (3) buildings at Herzog Campus.

Field conditions have been verified with site surveys prior to this submittal package.

B. Scope of Work

The electronic safety and security systems (Divisions 28) scope of work will include the following:

i. Provide a design for the modification and/or addition of equipment, devices, and systems for securing, monitoring, and reporting activity within the TR’s and

TE locations in the scope of work buildings including but not limited to:

buildings 1, 2, 2J, 3, 5, 6, 7, 8, 9, 11, 13, 43, 44, 45, 60, 68, 69, 71, 72, 74, 75, 77, 79, 80, 81, 82, TT46, TT47, TT48, TT49, TT50, TT51, TT52, TT54, TT55, and 3 buildings at Herzog.

ii. Buildings 1, 2, 2J, 3, 6, 8, 43, 70, 74, and 87 are to be treated as critical buildings. Buildings 60 and 72 are to be treated as essential.

iii. These systems will include but not be limited to the following:

Physical Access Control electrified door hardware on all TR doors or spaces housing

TE’s, surveillance cameras inside of each TR or spaces housing TE’s, and Intrusion

Detection where required or recommended by the risk mitigation report.

All systems shall be integrated into the existing campus infrastructure in order to report to campus Security Control Center Located in room BA-116 in the basement of Building

2J. Systems shall be designed to ensure rooms adhere to PSRDM compliance and site-specific risk mitigation report provided by the Physical Security Professional (PSP).

i. Provide a design for a Physical Access Controls System to protect the TRs and TE’s within scope of work buildings including but not limited to: buildings 1, 2, 2J, 3, 5, 6, 7, 8, 9, 11, 13, 43, 44, 45, 60, 68, 69, 70, 71, 72, 74, 75, 77, 79, 80, 81, 82, 87, TT46, TT47, TT48, TT49, TT50, TT51, TT52, TT54, TT55, and

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SECURITY - 3

3 buildings at Herzog, per the 2021 campus wide physical security risk assessment.

ii. Provide a design for an Intrusion Detection System to protect the TRs and TEs within scope of work buildings including but not limited to: buildings 1, 2, 2J, 3, 5, 6, 7, 8, 9, 11, 13, 43, 44, 45, 60, 68, 69, 70, 71, 72, 74, 75, 77, 79, 80, 81, 82, 87, TT46, TT47, TT48, TT49, TT50, TT51, TT52, TT54, TT55, and 3 buildings at Herzog, per the 2021 campus wide physical security risk assessment.

iii. Provide a design for a Security Surveillance Television System to protect the

TRs and TEs within the scope of work buildings including but not limited to:

buildings 1, 2, 2J, 3, 5, 6, 7, 8, 9, 11, 13, 43, 44, 45, 60, 68, 69, 70, 71, 72, 74, 75, 77, 79, 80, 81, 82, 87, TT46, TT47, TT48, TT49, TT50, TT51, TT52, TT54, TT55, and 3 buildings at Herzog, per the 2021 campus wide physical security risk assessment.

2. ELECTRONIC SAFETY & SECURITY CODES AND STANDARDS

A. IBC 2021 – International Building Code

B. IEBC 2021 – International Existing Building Code

C. NFPA 70-2023 - National Electrical Code (NEC)

D. NFPA 99-2021 – Health Care Facilities Code

E. NFPA 101-2021 – Life Safety Code

F. VA PG-18-10 Electrical Design Manual, December 2019

G. VA PG-18-10 Fire Protection Design Manual, June 2021

H. VA Physical Security & Resiliency Design Manual, (PSRDM) 2020, 1 June 2023

Revision

3. BUILDING ELECTRONIC SECURITY SYSTEM (ESS) DEMOLIITON

Demolition of ESS work shall include:

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SECURITY - 4

A. Existing PACS equipment and/or devices deemed inept for continued service which may include but is not limited to card readers, door strikes, request to exists, and magnetic locks within the scope of work area which shall be disconnected and removed along with all abandoned cabling and raceways.

New PACS devices will be provided at doors as indicated in the new work description below. Existing cabling and raceway will be reused where possible.

B. Existing IDS equipment and/or devices will include existing position switches deemed inept for continued service within the scope of work area which will be disconnected and removed along with all abandoned cabling and raceways.

New PACS devices will be provided at doors as indicated in the new work description below. Existing cabling and raceway will be reused where possible.

C. Existing SSTV system components, cabling, and raceways for devices deemed inept for continued service shall be disconnected and removed within the scope of work area. New SSTV devices, cabling, and raceways will be provided as indicated in the new work description below. Existing cabling and raceway will be reused where possible.

4. CAMPUS PHYSICAL ACCESS CONTROL SYSTEM (PACS)

A. The telecommunications operation is to be restricted to staff only, therefore all of the entrances to the TRs within the scope of work shall be secured with Dual authentication card readers (PIV and PIN), electrified mortises, and dual technology motion activated request to exit devices, per the 2021 campus wide physical security risk assessment. Card readers shall be FIPS-201 compliant and compatible with US access badges.

5. CAMPUS INTRUSION DETECTION SYSTEM (IDS)

A. The telecommunications operation is to be restricted to staff only, therefore all of the entrances to the TRs within the scope of work shall be secured with

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SECURITY - 5

door/window contacts with anti-prop/forced entry alarm, tied to the SCC alerting them immediately of an unauthorized door entry attempt, per the 2021 campus wide physical security risk assessment.

6. CAMPUS SECURITY SURVEILLANCE TELEVISION SYSTEM (SSTV)

A. All of the entrances to the TRs within the scope of work shall be protected with

SSTV coverage, per the 2021 campus wide physical security risk assessment.

The security surveillance cameras shall be motion activated and shall be tied to the Security Control Center (SCC), notifying them immediately when a room is entered and recording to NVR when activated.

7. CAMPUS SECURITY SURVEILLANCE TELEVISION SYSTEM

B. All of the entrances to the TRs within the scope of work shall be protected with

SSTV coverage, per the 2021 campus wide physical security risk assessment.

The security surveillance cameras shall be motion activated and shall be tied to the Security Control Center (SCC), notifying them immediately when a room is entered and recording to NVR when activated.

8. GENERAL SECURITY SYSTEM REQUIREMENTS

A. Typical TR configuration:

i. The entrance to each TR shall be armed with dual authentication card readers

(PIV and PIN), electrified mortises, dual technology motion activated request to exit devices, and door/window contacts with anti-prop/forced entry alarm, tied to the SCC alerting them immediately of an unauthorized door entry attempt, per the 2021 campus wide physical security risk assessment.

ii. The entrance to each TR shall be covered by SSTV camera coverage. The security surveillance cameras shall be motion activated and shall be tied to the

Security Control Center (SCC), notifying them immediately when a room is

549-21-700 (2302) EHRM Infrastructure Upgrades - Dallas, TX

SECURITY - 6

entered and recording to NVR when activated, per the 2021 campus wide physical security risk assessment.

iii. Each TR shall be provided with a duress pushbutton located as indicated on the security drawings that shall be tied to the campus Security Control Center

(SCC), notifying them immediately when pressed.

B. All security devices will be connected to the local panel served with control cables through conduit. All new electronic security panels within the TRs shall be mounted to 0.75-inch fire-rated plywood.

9. GROUNDING AND BONDING

A. Grounding and bonding will be provided in accordance with the NEC, VA PG-18-

10 and EIA/TIA 607 standards latest additions.

B. A main telecommunications ground bar (TGB) will be located in the

Telecommunications Room and connected to the main electrical service ground for the building.

C. All metallic raceways, cable trays and basket trays will be grounded and bonded.

D. All equipment racks will be bonded to the TGB with a minimum #6 AWG stranded copper wire.

END DIVISION 28