3a RLP 57-37133-23-FA.pdf

For the best experience, open this PDF portfolio in

Acrobat X or Adobe Reader X, or later.

Get Adobe Reader Now!

http://www.adobe.com/go/reader

Wiring and Cabling: Guidelines for FPAC and RD Offices Version 0.5

Introduction Recent updates to two Department Regulations (DRs), DR 3300-001-G and 3300-001-K, supersede the outdated guidance in DR 3902-001, “Service Center Technology Modernization Project (SCTMP) Wiring/Cabling Specifications for Service Center Agencies’ (SCA) Computer Rooms.” As a result, 3902-001 has been cancelled and should no longer be used. Though it is cancelled, it did have some information that was still useful and applicable.

Therefore, the Office of the Chief Information Officer’s Client Experience Center (OCIO-CEC) has taken that information and documented it in these guidelines to help supplement the references below.

References

1. DR 3300-001-G, “Sharing of Telecommunications Resources”

2. DR 3300-001-K, “Installation of Telecommunications Cables in Federal Buildings”

3. Departmental Manual (DM) 3410-001, “Physical Security Standards for Information Technology (IT) Restricted Space”

4. (In DRAFT), “CEC Space and ADP Room Guidelines” Available from OCIO-CEC-Business Services Division.

(BSD)

5. Technical Support Division (TSD) Site Moves Standard Operating Procedure. (SOP)

Scope It is expected that with End User Consolidation (EUC) and the award of the new Enterprise Infrastructure Solutions (EIS) contract that there will be more opportunity and formal guidance forthcoming on facility and information technology services consolidation. However, until then, these guidelines should be used to assist with the wiring/cabling needs for only Farm Production and Conservation (FPAC) & Rural Development offices.

(RD)

Responsibilities The TSD Group Manager (GM) has the authority and responsibility for oversight of the office Automated Data Processing (ADP) rooms and cabling. They are responsible for providing approval of all cabling plans. The Mission Area leasing agent is responsible for including all applicable requirements and standards in solicitations.

Questions on these guidelines can be directed to OCIO-CEC’s Infrastructure Operations Division, Telecommunications Administration Services Branch (OCIO-CEC-IOD-TASB).

Page 1 Lessor_____________ Gov't ____________

Solicitation No: 57-37133-23-FA Onslow(Jacksonville)NC

Attachment F Exhibit F

FPAC V4.14.21

Computer Room Physical and Security Requirements Refer to Departmental Manual (DM 3510-001) “Physical Security Standards for Information Technology (IT) Restricted Space” and the “CEC Space and ADP Room Guidelines”.

Dedicated Electrical Circuits and Outlets for ADP Equipment

1. ADP Room and Demarcation Point Circuits: Provide and install dedicated electrical circuits with isolated grounds in the computer room. Dedicated circuits must be 110 volt, 20-amp standard three-prong circuits with true earth ground terminated into orange or other uniquely marked (computer use only) duplex outlets. Provide and install duplex outlets for each dedicated electrical circuit in the computer room and any distribution closets. One dedicated outlet for the explicit use of USDA/OCIO/CEC should also be provided at the demarcation point. The main electrical panel for the computer/voice equipment will be properly grounded.

2. General Office Space Circuits: Provide enough dedicated electrical circuits and multiple outlets at designated locations throughout the service center to accommodate workstations, copiers, etc.

3. Electrical Requirements for Uninterruptible Power Supply (UPS) Circuit: All CEC network equipment in the computer room is required to be connected to a UPS.

4. Number and Type of Circuits: There will be a minimum of one 120 volt, 30-amp minimum with true ground, terminated into a twisting-lock NEMA L5-30R receptacle. Each dedicated circuit must have insulated, isolated earth ground; conduit ground is not acceptable.

5. Location of the UPS receptacle: The receptacle will be located within a maximum of 4.5 feet from the back of the computer room wiring cabinet.

Plywood Wall Mounting One sheet of ¾ inch 4 x 4-foot plywood or equivalent open space on an existing backboard, shall be vertically mounted on the wall at the internal demarcation point within 3-feet of an electrical outlet. The backboard should be attached to the wall using correct mounting hardware and procedures. If the wall is sheet-rocked, attach the backboard to the studs. If the wall is concrete, attach the backboard using anchors. The backboard should be painted with fire retardant paint the same color as the interior walls of the building.

Demarcation Point (D-Mark)

1. When possible, all telecommunication company demarcation points should be internal to the building. The lessor is responsible for ensuring there is a route available for any extended demark need from the building demark to the USDA ADP room. Any demarcation extension should be coordinated with TSD and the sponsoring agency to ensure the work is properly sourced and funded.

2. A 4-inch conduit with pull cable for the explicit use of USDA should be installed from the demarcation point to the USDA ADP (Computer) Room.

3. For any analog Plain Old Telephone Service (POTS) lines delivered to the office, extend them from the demark to the extended demark at the computer room and utilize 6P4C surface mount jacks to accommodate RJ11 cables, such as the following:

Page 2 Lessor_____________ Gov't ____________

Solicitation No: 57-37133-22-FA

Distribution Closets and Cable Pathways

1. For the standard service center, data cabling may traverse non-USDA space (for example, in the space above a drop ceiling) without any special protection (conduit, etc.). Any exceptions to this will be identified site-specifically by the TSD GM.

2. Data cabling may terminate in USDA or USDA partner space. If any space changes definition (for example, a USDA office is discontinued without the entire location being closed, and the abandoned space is leased to a non-USDA tenant), the USDA cable terminations must be removed from the now, non-USDA space.

3. When multiple buildings are to be connected as part of one cable plant, the connection is to be run via fiber optic cable.

4. When cable consists of multiple runs, the facility owner shall provide cable trays or J-hooks to ensure that the cable does not come into contact with the suspended ceiling.

Data Cabling/Telecommunications

1. All new installations will use Category (Cat) 6 Ethernet cabling or higher and will meet local building codes.

Exceptions: Minor renovations to buildings that currently contain Cat 5 cable and terminations may continue to do so. However, all substantial additions to or replacements of existing wiring should be replaced with Cat 6 where possible.

2. Cat 5 cabling is unsuitable for Ethernet speeds above 100 Mb/sec and for office Wireless Access Points (WAPs). So, all cabling specifically for WAPs must use Cat 6. In addition, when a move or renovation leads to an upgrade of an office to Cat 6, the patch cables in the ADP room must be replaced with Cat 6 compliant cables as well.

3. Copper Cable Installation: All data cable and voice cables shall be terminated with Cat 6 compliant terminations (patch panels, wall outlets, etc.). Upon completion, it shall be tested and certified by the installer to ensure it is operational and within compliance of the reference documents. Finally, if occupying space with existing cabling, it should still be tested and certified to comply with the reference documents as well.

4. Data Fiber Cable Installation: All strands of each fiber cable shall be terminated at each end of the cable, with either Straight Tip (ST) or Standard Connector (SC) connectors, as appropriate to the related equipment interface connector, and will be conveyed to the selected cable contractor upon request.

Page 3 Lessor_____________ Gov't ____________

Note: Supply several sets of fiber patch cords that should not only serve immediate switch connection concerns but allow for possible switch update connections in the future. The unused fiber patch cables will be kept in reserve at this site.

5. Wall Input/Output (I/O) Face Plates for Work Areas: Work areas will have a dual, quad, or hex outlet plate with corresponding RJ-45 connectors (see diagram below) or integrated into modular furniture. Extra outlet plate connectors will also be required in some common areas. All drops will be identified and numbered on the office floor plan prior to installation. The other end will be punched down on an RJ-45/110-type patch panel in the ADP room wiring cabinet. Each dual, quad, or hex plate must be labeled with the workstation number (1, 2, etc.) and the A, B, C etc. format. Each connection must be identified as (1A, 1B, 2A, 2B, etc.) on the corresponding patch panel location.

Page 4 Lessor_____________ Gov't ____________

Local Area Network (LAN) / Wide Area Network (WAN) / Voice Cabinet

1. The Government will provide the LAN/WAN/Voice cabinet, and a cable installation contractor will provide and install the wiring, cabling, and patch panels in the cabinet as specified by the TSD GM. Patch panels will be RJ-45/110 type and appropriately sized, based upon the number of outlet plates. A wire service loop that will allow the cabinet to freely move a minimum of six feet in any direction will be installed by the cable installation contractor as part of the cable installation. The RJ-45/110 type patch panel must be mounted in the cabinet in the place designated by the TSD GM.

Note: Though not recommended, the patch panels may be installed on the plywood board and the cabling terminated into them only if required by the lessor.

2. Where patch panel size and equipment requirements have grown beyond the capacity of a single cabinet, racks or additional cabinets may be used. However, any additional racks or cabinets need to follow similar specifications as that original equipment.

3. Distribution points that have smaller equipment requirements (for example, a single 24-port switch) can utilize half-height or wall mounted racks, rather than full, floor standing cabinets. However, this equipment still should be secured and protected in some sort of cabinet.

Direct all questions to OCIO-CEC-IOD-TASB.

Abbreviations / Definitions ADP Automated Data Processing BSD Business Services Division Cat Category (i.e., Cat 6 cable designations) CEC Client Experience Center DM Departmental Manual DR Departmental Regulation EIS Enterprise Infrastructure Solutions EUC End User Consolidation FPAC Farm Production and Conservation GM Group Manager IOD Infrastructure Operations Division LAN Local Area Network OCIO Office of the Chief Information Officer RD Rural Development SC Standard Connector SOP Standard Operating Procedures ST Straight Tip TASB Telecommunications Administration Services Branch TSD Technical Support Division UPS Uninterruptible Power Supply WAN Wide Area Network WAP Wireless Access Point

Page 5 Lessor_____________ Gov't ____________

Lessor:______ Government:______

Computer Room Physical and Security Requirements (USDA Level 1 Security Sites)

SPECIFICATIONS FOR THE ADP ROOM

1. Square Footage. The ADP room shall be a minimum of 75 square feet and a maximum of 100 square feet. The configuration of the room shall allow a three foot clearance around equipment.

2. Doors. The number of entrances to the ADP room will be kept to a minimum as required by local fire code. Every entrance into an ADP room must be a metal clad or solid core, lockable door. A managed process will be utilized to control all access to the room. The process may be electronic or manual. One key or code will be assigned to an individual from each SCA. All computer room doors shall be removed from the master key system of the facility.

Exterior doors must have either interior hinges or exterior hinges with non removable pins.

3. Windows. There will be NOWINDOWS in the ADP room, even if a portion of the room has exterior walls.

4. Flooring. The flooring will be anti static hard surface; no carpet.

5. Walls.Walls of the ADP room shall extend from the structural floor slab to the structural ceiling slab with sound transmission class 40 or better.

6. Temperature and Humidity. The ADP room shall be cooled at all times. The ambient room temperature shall be maintained between 65° to 75°F (18° to 26°C). The ambient relative humidity levels shall be maintained between 35% and 55%. The temperature and humidity controls shall be managed within the room, including points of contacts for emergency situations. The ADP room shall have access to temperature readings within the space. Air conditioning must be controlled on the weekends and holidays as needed to maintain the minimum temperature in the room.

Depending on the equipment to be placed in the room, a separate air conditioning unit may be required.

7. Shared Space. The ADP room shall NOT be designed as a multi use room. Only ADP and telephone equipment shall be in this room. Mail machines, printers (unless specifically for the ADP equipment), faxes, file cabinets, shared storage, copiers, plotters, etc. shall be located outside the ADP room. ITS storage will NOT be in the ADP room.

8. Plumbing. Because of the danger of water damage, the ADP room shall not be located in areas where water bearing pipes would be overhead. ADP room should be located to avoid walls with plumbing.

9. Fire Suppressant Systems. A sprinkler system will be installed when local building codes require it. A dry pipe system is preferred. Sprinkler heads shall be placed so that they are not directly above any equipment. Each ADP room shall be equipped with any type "Clean Agent" (at least 5 to 6 lbs) fire extinguishers that are approved/designed to be used for Computer, Telecommunications, Data Storage and Laboratory type rooms, which houses delicate electronic equipment. An annual inspection must be performed on the fire extinguisher.

10. Design Approval. In SCA offices, the Group Manager shall review the electrical section of the construction drawings to ensure that the location of the data ports, and electrical outlets will be accessible once systems furniture is installed. In all other offices, the appropriate Division Directors shall review and approve the floor plans. All final floor plans for the ADP room and general space shall be approved by the OCIO ITS Realty Specialist before construction begins.

11. Public Areas.Where possible, the ADP room shall be within the interior of the building and away from public areas.

Where possible, ensure that all computer rooms are not located either above or below public areas in multi story buildings.

12. Mailrooms and Loading Docks.Where possible, the ADP room shall not be located in close proximity to mailrooms or loading docks.

13. Signage. Ensure that all signs identifying the ADP room are removed from public view. Directories or building maps that identify the location of critical or sensitive asset locations shall not be displayed. Exterior signs are not to identify OCIO/ITS/ADP within the SCA.

14. Electrical Power.Where possible, the capability of shutting off power to an information system component that may be malfunctioning or threatened without endangering personnel by requiring them to approach the equipment shall be included in new and refurbished ADP rooms.

Facility Signage Guide April 2014

FacilityFacilityFacility Guide ySignageSignageyyFacilityGGFacilityFaci GuideSignagSigna y e

Facility Gu du ityity Guide ySignageSignageyy degg lity e ty uidgg

Fa GyGcilityility deGGyGageageyy

Facil G

FaciliFacil GuiSignaSigna

Lessor _______ & Government________

Attachment G Exhibit G

USDA Facility Signage

Facility signs play a major role in projecting a clear, strong impression of USDA. This facility signage guide serves as a manual for the development and implementation of a and interior signage. The purpose of this guide is to establish the image of USDA, creating a sense of space that welcomes visitors and directing visitors to and through all USDA facilities.

All USDA interior facility signage designating a permanent room or space must be ADA compliant. For the latest ADA signage standards and guidelines, contact www.ADA.gov

USDA facilities within the Washington, DC, metropolitan area must of Operations (OAO) for the latest version.

The objective of this guide is not to replace current signs but, rather, to ensure that when the signs need to be replaced with new signs, they comply with these new guidelines.

Dark Blue

PMS 288

Color Background

Dark Green

PMS 343

Color The signature lockup shall be reproduced in either one or three

USDA symbol are dark blue (PMS

288) and dark green (PMS 343), and the Department name is black. When reproduced in one color, the signature lockup shall be black or the most dominant color available. When the signature lockup is placed on a color background, it can be reproduced in one color, either black or white.

Three Color

One Color - Black

One Color - Black or White

Solid Black

Facility Signage

Signature Lockups Signature lockups must be used on all Department facility signage.

Signature lockups combine the USDA Symbol and the Department name. Do not use the USDA Symbol without the Department name. Only use signature lockups

Communications. Any substitution of fonts on signature lockups is unacceptable. Do not attempt to create signature lockups in any manner.

Signature Lockups

Clearance Space, Proportions, and Placement Signature lockups must be used on all Department facility signage. Signature lockups are comprised of the USDA Symbol and the Department name. To ensure maximum visibility, the signature lockup should be placed

Communications. Any substitution of typefonts on signature lockups is unacceptable. Do not attempt to create signature lockups in any manner.

Clearance space shall be used on all signage to provide a clean, consistent background area and position for the signature lockup. All acceptable versions of the signature lockups can be used. No images, gradations, or other graphics can appear within the clearance space. All other types of visual elements, images, and typography can fall below the clearance space. Helvetica and Arial are the preferred typefonts.

Agency Name

USDA Symbol - 14% or more of signage height.

Minimum .75”

S Ig na ge

H ei gh t

Minimum clearance space -equal to the width of the USDA Symbol’s letter “A”.

Agency Name Agency Name

Minimum Clearance Space

Free-Standing Signage Monumental Signage Building-Mounted Signage

Agency Name Here

Free-Standing Signage

Signature lockup must be positioned above all other names.

Site address as required

Building-Mounted Signage positioned above all other names.

Name Agency

Directional Signage

Directional arrows can be placed where appropriate outside the signature lockup clearance space.

Tenant Name

USDA Facility

All USDA interior facility signage designating a permanent room or space must be ADA compliant. For the latest ADA signage standards and guidelines contact www.ADA.gov. Signature lockup must be positioned above all other names.

Division Name Tenant Name

Non-USDA Facility

Signature lockup is not required.

Service Center Farm Service Agency 201 Rural Development 201 Natural Resources 205 Conservation Service Culpeper Soil and Water 207 Conservation District

Building Directory

USDA Facility

Signature lockup must be positioned above all other names.

Other Tenant 201

United States Department of Agriculture 202 Other Tenant 205 Other Tenant 207

United States Department of Agriculture 202 Agency Name Here Other Tenant 205 Other Tenant 207

Department name only

Department name with Agency name on second line

Building Directory

Non-USDA Facility

The Department name must be fully spelled out and positioned above the Agency name.

Attachment H Solicitation No: 57-37133-23-FA Onslow(Jacksonville)NC Exhibit H

LESSOR: _______ GOVERNMENT: _______

SECURITY REQUIREMENTS (LEVEL I)

REV (08/29/2022)

SECURITY REQUIREMENTS - FACILITY SECURITY LEVEL I

THESE PARAGRAPHS CONTAIN SECURITY REQUIREMENTS, ALL OF WHICH ARE TO BE

PRICED AS PART OF THE BUILDING SHELL.

DEFINITIONS:

Definitions are the same as those used in the Lease unless re-defined in these Security Requirements.

CRITICAL AREAS - The areas that house systems that if damaged or compromised could have significant adverse consequences for the facility, operation of the facility, or mission of the agency or its occupants and visitors. These areas may also be referred to as “limited access areas,” “restricted areas,” or “exclusionary zones.” Critical areas do not necessarily have to be within Government-controlled space (e.g., generators, air handlers, electrical feeds which could be located outside Government-controlled space).

I. FACILITY ENTRANCES, LOBBY, COMMON AREAS, NON-PUBLIC, AND

UTILITY AREAS.

A. FACILITY ENTRANCES AND LOBBY

1. EMPLOYEE ACCESS CONTROL AT ENTRANCES

The Lessor shall provide a key or a physical access control system (PACS) for the entrance to this building, and to doors identified by the Government as employee entrance doors. The Lessor shall consult and coordinate with the Federal Protective Service (FPS) on the installation, maintenance, and repair of PACS.

All Government employees, under this lease, shall be allowed access to the leased space (including after-hours access).

B. COMMON AREAS, NON-PUBLIC, AND UTILITY AREAS

1. PUBLIC RESTROOM ACCESS

The Government reserves the right to control access to public restrooms within Government controlled Space.

2. SECURING CRITICAL AREAS

The Lessor shall secure areas designated as Critical Areas to restrict access to authorized personnel only, and post signage accordingly:

a. At a minimum, the Lessor shall secure building common areas, such as mechanical and janitorial areas, sprinkler rooms, electrical closets, telecommunications rooms, and janitor closets. Keyed locks, PACS, or similar security measures shall strictly control access to Critical Areas. Additional

Solicitation No: 57-37133-22-FA Attachment H controls for access to keys, PACS, and key codes shall be strictly maintained. The Lessor shall consult and coordinate with FPS on the installation, maintenance, and repair of PACS.

b. Roofs with HVAC systems and access to interior space from the roof shall be secured, with locks.

Roof access shall be strictly controlled through keyed locks, PACS or similar measures. Fire and life safety egress shall be carefully reviewed when restricting roof access.

3. VISITOR ACCESS CONTROL

Entrances are open to the public during business hours. After hours, visitor entrances are secured, and have a means to verify the identity of persons requesting access prior to allowing entry into the Premises.

II. INTERIOR (GOVERNMENT SPACE)

A. IDENTITY VERIFICATION

The Government reserves the right to verify the identity of persons requesting access to the Space prior to allowing entry.

B. FORMAL KEY CONTROL PROGRAM

The Government reserves the right to implement a formal key control program.

III. SITES AND EXTERIOR OF THE BUILDING

A. SIGNAGE

1. POSTING OF REGULATORY SIGNAGE

The Government may post or request the Lessor to post regulatory, statutory, and site-specific signage.

B. LANDSCAPING AND ENTRANCES

1. LANDSCAPING REQUIREMENTS

Landscaping shall be neatly trimmed to minimize the opportunity for concealment of individuals and packages/containers.

IV. SECURITY SYSTEMS

The Lessor, in consultation with FPS, shall secure any installed alarm and PACS, Video Surveillance System (VSS) components, controllers, and cabling in government- controlled Space against unauthorized access.

Lessor shall conduct annual testing of any security systems and daily testing of any active screening equipment.

A. VIDEO SURVEILLANCE SYSTEM

If Video Surveillance System (VSS) is in use, the Lessor shall post signage at the entrance of the building.

The Lessor shall comply with FAR 52.204-25: Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment (Nov 2021). See https://www.acquisition.gov/far/part-

52#FAR_52_204_25.

B. INTRUSION DETECTION SYSTEM

If Intrusion Detection System (IDS) is in use, the Lessor shall install local annunciation, consisting of an interior alarm within the facility.

C. DURESS ALARM

Lessor shall implement duress procedures for emergency situations.

V. STRUCTURE

A. BUILDING SYSTEMS

1. EMERGENCY GENERATOR PROTECTION (T.I.)

If an emergency generator is required by the Government, the Lessor shall locate it in a secure area, protected from unauthorized access, and vehicle ramming, if outdoors. The emergency generator and its fuel tank must be located at least 25 feet from loading docks, entrances, and parking areas. Alternatively, if the 25-foot distance cannot be achieved, the Lessor shall protect utilities through a combination of standoff, hardening, and venting methods.

VI. OPERATIONS AND ADMINISTRATION

A. FACILITY SECURITY COMMITTEE (FSC)

The Lessor shall cooperate and work with the buildings Facility Security Committee (FSC) throughout the term of the Lease. The Facility Security Committee (FSC) is responsible for addressing facility-specific security issues and approving the implementation of security measures and practices. The FSC consists of representatives of all Federal tenants in the facility, the security organization, and the leasing department or agency.

B. ACCESS TO BUILDING INFORMATION

Building Information—including mechanical, electrical, vertical transport, fire and life safety, security system plans and schematics, computer automation systems, and emergency operations procedures—shall be strictly controlled. Such information shall be released to authorized personnel only, approved by the Government, by the development of an access list and controlled copy numbering. The Lease Contracting Officer may direct that the names and locations of Government tenants are not disclosed in any publicly accessed document or record. If that is the case, the Government may request that such information not be posted in the building directory.

Lessor shall have emergency plans and associated documents readily available to the Government in the event of an emergency.

https://www.acquisition.gov/far/part-52#FAR_52_204_25 https://www.acquisition.gov/far/part-52#FAR_52_204_25

VII. CYBERSECURITY

A. Lessors are prohibited from connecting any portion of their building and access control systems (BACS) to any federally owned or operated IT network. BACS include systems providing fire and life safety control, physical access control, building power and energy control, electronic surveillance, and automated HVAC, elevator, or building monitoring and control services (including IP addressable devices, application servers, or network switches).

B. In the event of a cybersecurity incident related to BACS, the Lessor shall initially assess the cyber incident, identify the impacts and risks to the Building and its occupants, and follow their organization’s cyber and IT procedures and protocols related to containing and handling a cybersecurity incident. In addition, the Lessor shall immediately inform the Lease Contracting Officer’s (LCO’s) designated representative, i.e., the Lease Administration Manager (LAM), about cybersecurity incidents that impact a federal tenant’s safety, security, or proper functioning.

C. Lessors are encouraged to put into place the following cyber protection measures to safeguard facilities and occupants:

1. Engineer and install BACS to comply with the Department of Homeland Security Industrial Control Systems Computer Emergency Response Team (DHS ICS-CERT) cyber security guidance and recommendations (https://ics-cert.us-cert.gov/Recommended-Practices).

2. Refer to the National Institute of Standards and Technology Cyber Security Framework (NIST- CSF) (https://www.nist.gov/cyberframework) and cybersecurity guidance in the DHS Commercial Facilities Sector-Specific Plan (https://www.dhs.gov/publication/nipp-ssp-commercial-facilities-2015) for best practices to manage cyber risks.

3. Encourage vendors of BACS to secure these devices and software through the following:

a. Develop and institute a proper Configuration Management Plan for the BACS devices and applications, so that the system can be supported.

b. Safeguard sensitive data and/or login credentials through the use of strong encryption on devices and applications. This means using NIST- approved encryption algorithms, secure protocols (i.e., Transport Layer Security (TLS) 1.1, TLS 1.2, TLS 1.3) and Federal Information Processing Standard (FIPS) 140-2 validated modules.

c. Disable unnecessary services to protect the system from unnecessary access and a potential exposure point by a malicious attacker. Examples include File Transfer Protocol- FTP (a protocol used for transferring files to a remote location) and Telnet (allowing a user to issue commands remotely). Additionally, use of protocols that transmit data in the clear (such as default ZigBee) should be avoided, in favor of protocols that are encrypted.

d. Close unnecessary open ports to secure against unprivileged access.

e. Monitor and free web applications and supporting servers of common vulnerabilities in web applications, such as those identified by the (Open Web Application Security Project (OWASP) Top 10 Project (https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project).

https://ics-cert.us-cert.gov/Recommended-Practices https://www.nist.gov/cyberframework https://www.dhs.gov/publication/nipp-ssp-commercial-facilities-2015 https://www.dhs.gov/publication/nipp-ssp-commercial-facilities-2015 https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

f. Enforce Least Privilege, where proper permissions are enforced on a device or application so that a malicious attacker cannot gain access to all data. Enforcing Least Privilege will only allow users to access data they are allowed to see. Additional information can be found at https://www.beyondtrust.com/blog/what-is-least-privilege/

g. Protect against Insufficient User Access Auditing, where device or application does not have a mechanism to log/track activity by user. Enforce changing of factory default Username and Password to prevent unauthorized entry into the BACS system.

h. Use updated antivirus software subscription at all times. Kaspersky-branded products or services, prohibited from use by the Federal Government, are not to be utilized.

i. Conduct antivirus and spyware scans on a regular basis. Patching for workstations and server Operating System (OS), as well as vulnerability patching should follow standard industry best practices for software development life cycle (SDLC).

j. Discontinue the use of end of life (EOL) systems and use only applications/systems that are supported by the manufacturer.

k. Operating Systems must be supported by the vendor for security updates (e.g., do not use Windows Server 2003).

l. Proposed standard installation, operation, maintenance, updates, and/or patching of software shall not alter the configuration settings from the approved United States Government Configuration Baseline (USGCB) or tenant agency guidance (if applicable).

m. Disallow the use of commercially provided circuits to manage building systems and install building systems on a protected network, safeguarded by the enterprise firewalls in place.

Workstations or servers running building monitor and control systems are not connected and visible on the public internet.

n. Systems should have proper system configuration hardening and align with Center for

Internet Security (CIS) benchmarks or other industry recognized benchmarks. Additional information can be found at https://www.cisecurity.org/cis-benchmarks/.

https://www.beyondtrust.com/blog/what-is-least-privilege/ https://www.cisecurity.org/cis-benchmarks/

SOLICITATION PROVISIONS

(Acquisition of Leasehold Interests in Real Property)

1. 552.270-1 - INSTRUCTIONS TO OFFERORS – ACQUISITION OF LEASEHOLD INTERESTS IN

REAL PROPERTY (JUN 2011)

(a) Definitions. As used in this provision—

“Discussions” are negotiations that occur after establishment of the competitive range that may, at the Contracting Officer’s discretion, result in the offeror being allowed to revise its proposal.

“In writing, writing or written” means any worded or numbered expression that can be read, reproduced, and later communicated, and includes electronically transmitted and stored information.

“Proposal modification” is a change made to a proposal before the solicitation’s closing date and time, or made in response to an amendment, or made to correct a mistake at any time before award.

“Proposal revision” is a change to a proposal made after the solicitation closing date, at the request of or as allowed by a Contracting Officer as the result of negotiations.

“Time,” if stated as a number of days, is calculated using calendar days, unless otherwise specified, and will include Saturdays, Sundays, and legal holidays. However, if the last day falls on a Saturday, Sunday, or legal holiday, then the period shall include the next working day.

(b) Amendments to solicitations. If this solicitation is amended, all terms and conditions that are not amended remain unchanged. Offerors shall acknowledge receipt of any amendment to this solicitation by the date and time specified in the amendment(s).

(c) Submission, modification, revision, and withdrawal of proposals.

(1) Unless other methods (e.g., electronic commerce or facsimile) are permitted in the solicitation, proposals and modifications to proposals shall be submitted in paper media in sealed envelopes or packages Offers must be:

(i) Submitted on the forms prescribed and furnished by the Government as a part of this solicitation or on copies of those forms, and

(ii) Signed. The person signing an offer must initial each erasure or change appearing on any offer form. If the offeror is a partnership, the names of the partners composing the firm must be included with the offer.

(2) Late proposals and revisions.

(i) The Government will not consider any proposal received at the office designated in the solicitation after the exact time specified for receipt of offers unless it is received before the Government makes award and it meets at least one of the following conditions:

(A) It was sent by registered or certified mail not later than the fifth calendar day before the date specified for receipt of offers (e.g., an offer submitted in response to a solicitation requiring receipt of offers by the 20th of the month must have been mailed by the 15th).

(B) It was sent by mail (or telegram or facsimile, if authorized) or hand-carried (including delivery by a commercial carrier) if it is determined by the Government that the late receipt was due primarily to Government mishandling after receipt at the Government installation.

(C) It was sent by U.S. Postal Service Express Mail Next Day Service-Post Office to Addressee, not later than 5:00 p.m. at the place of mailing two working days prior to the date specified for receipt of proposals. The term “working days” excludes weekends and U.S. Federal holidays.

(D) It was transmitted through an electronic commerce method authorized by the solicitation and was received at the initial point of entry to the Government infrastructure not later than 5:00 p.m. one working day prior to the date specified for receipt of proposals.

(E) There is acceptable evidence to establish that it was received at the activity designated for receipt of offers and was under the Government’s control prior to the time set for receipt of offers, and

Attachment I Exhibit I that the Contracting Officer determines that accepting the late offer would not unduly delay the procurement.

(F) It is the only proposal received.

(ii) Any modification or revision of a proposal or response to request for information, including any final proposal revision, is subject to the same conditions as in paragraphs (c)(2)(i)(A) through (c)(2)(i)(E) of this provision.

(iii) The only acceptable evidence to establish the date of mailing of a late proposal or modification or revision sent either by registered or certified mail is the U.S. or Canadian Postal Service postmark both on the envelope or wrapper and on the original receipt from the U.S. or Canadian Postal Service. Both postmarks must show a legible date or the proposal, response to a request for information, or modification or revision shall be processed as if mailed late. “Postmark” means a printed, stamped, or otherwise placed impression (exclusive of a postage meter machine impression) that is readily identifiable without further action as having been supplied and affixed by employees of the U.S. or Canadian Postal Service on the date of mailing. Therefore, offerors or respondents should request the postal clerk to place a legible hand cancellation bull’s eye postmark on both the receipt and the envelope or wrapper.

(iv) Acceptable evidence to establish the time of receipt at the Government installation includes the time/date stamp of that installation on the proposal wrapper, other documentary evidence of receipt maintained by the installation, or oral testimony or statements of Government personnel.

(v) The only acceptable evidence to establish the date of mailing of a late offer, modification or revision, or withdrawal sent by Express Mail Next Day Service-Post Office to Addressee is the date entered by the post office receiving clerk on the “Express Mail Next Day Service-Post Office to Addressee” label and the postmark on both the envelope or wrapper and on the original receipt from the U.S. Postal Service. “Postmark” has the same meaning as defined in paragraph (c)(2)(iii) of this provision, excluding postmarks of the Canadian Postal Service. Therefore, offerors or respondents should request the postal clerk to place a legible hand cancellation bull’s eye postmark on both the receipt and the envelope or wrapper.

(vi) Notwithstanding paragraph (c)(2)(i) of this provision, a late modification or revision of an otherwise successful proposal that makes its terms more favorable to the Government will be considered at any time it is received and may be accepted.

(vii) An offeror may withdraw its proposal by written notice or telegram (including mailgram) received at any time before award. If the solicitation authorizes facsimile proposals, an offeror may withdraw its proposal via facsimile received at any time before award, subject to the conditions specified in the provision entitled “Facsimile Proposals.” Proposals may be withdrawn in person by an offeror or an authorized representative, if the representative’s identity is made known and the representative signs a receipt for the proposal before award.

(viii) If an emergency or unanticipated event interrupts normal Government processes so that proposals cannot be received at the office designated for receipt of proposals by the exact time specified in the solicitation, and urgent Government requirements preclude amendment of the solicitation or other notice of an extension of the closing date, the time specified for receipt of proposals will be deemed to be extended to the same time of day specified in the solicitation on the first work day on which normal Government processes resume. If no time is specified in the solicitation, the time for receipt is 4:30 p.m., local time, for the designated Government office.

(3) Any information given to a prospective offeror concerning this solicitation will be furnished promptly to all other prospective offerors, if that information is necessary in submitting offers or if the lack of it would be prejudicial to any other prospective offeror.

(4) Offerors may submit modifications to their proposals at any time before the solicitation closing date and time, and may submit modifications in response to an amendment, or to correct a mistake at any time before award.

(5) Offerors may submit revised proposals only if requested or allowed by the Contracting Officer.

(6) The Government will construe an offer to be in full and complete compliance with this solicitation unless the offer describes any deviation in the offer.

(7) Offerors may submit proposals that depart from stated requirements. Such a proposal shall clearly identify why the acceptance of the proposal would be advantageous to the Government. The proposal must clearly identify and explicitly define any deviations from the terms and conditions of the solicitation, as well as the comparative advantage to the Government. The Government reserves the right to amend the solicitation to allow all offerors an opportunity to submit revised proposals based on the revised requirements.

(d) Restriction on disclosure and use of data. An offeror that includes in its proposal data that it does not want disclosed to the public for any purpose, or used by the Government except for evaluation purposes, must meet both of the following conditions:

(1) Mark the title page with the following legend:

This proposal includes data that shall not be disclosed outside the Government and shall not be duplicated, used, or disclosed—in whole or in part—for any purpose other than to evaluate this proposal.

If, however, a lease is awarded to this offeror as a result of—or in connection with—the submission of this data, the Government shall have the right to duplicate, use, or disclose the data to the extent provided in the resulting contract. This restriction does not limit the Government’s right to use information contained in this data if it is obtained from another source without restriction. The data subject to this restriction are contained in sheets [insert numbers or other identification of sheets].

(2) Mark each sheet of data it wishes to restrict with the following legend:

Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal.

(e) Lease award.

(1) The Government intends to award a lease resulting from this solicitation to the responsible offeror whose proposal represents the best value after evaluation in accordance with the factors and subfactors in the solicitation.

(2) The Government may reject any or all proposals if such action is in the Government’s interest.

(3) The Government may waive informalities and minor irregularities in proposals received.

(4) The Government intends to evaluate proposals and award a lease after conducting discussions with offerors whose proposals have been determined to be within the competitive range. If the Contracting Officer determines that the number of proposals that would otherwise be in the competitive range exceeds the number at which an efficient competition can be conducted, the Contracting Officer may limit the number of proposals in the competitive range to the greatest number that will permit an efficient competition among the most highly rated proposals. Therefore, the offeror’s initial proposal should contain the offeror’s best terms from a price and technical standpoint.

(5) Exchanges with offerors after receipt of a proposal do not constitute a rejection or counteroffer by the Government.

(6) The Government may determine that a proposal is unacceptable if the prices proposed are materially unbalanced between line items or subline items. Unbalanced pricing exists when, despite an acceptable total evaluated price, the price of one or more contract line items is significantly overstated or understated as indicated by the application of cost or price analysis techniques. A proposal may be rejected if the Contracting Officer determines that the lack of balance poses an unacceptable risk to the Government.

(7) ) The execution and delivery of the Lease contract by the Government establishes a valid award and contract.

(8) The Government may disclose the following information in postaward debriefings to other offerors:

(i) The overall evaluated cost or price and technical rating of the successful offeror;

(ii) The overall ranking of all offerors, when any ranking was developed by the agency during source selection; and

(iii) A summary of the rationale for award.

(f) Paperwork collection. The information collection requirements contained in this solicitation/contract are either required by regulation or approved by the Office of Management and Budget pursuant to the Paperwork Reduction Act and assigned OMB Control No. 3090-0163.

2. 52.222-24 - PREAWARD ON-SITE EQUAL OPPORTUNITY COMPLIANCE EVALUATION (FEB 1999)

If a contract in the amount of $10 million or more will result from this solicitation, the prospective Contractor and its known first-tier subcontractors with anticipated subcontracts of $10 million or more shall be subject to a preaward compliance evaluation by the Office of Federal Contract Compliance Programs (OFCCP), unless, within the preceding 24 months, OFCCP has conducted an evaluation and found the prospective Contractor and subcontractors to be in compliance with Executive Order 11246.

3. PARTIES TO EXECUTE LEASE (APR 2015)

(a) If the Lessor is an individual, that individual shall sign the lease. A lease with an individual doing business as a firm shall be signed by that individual, and the signature shall be followed by the individual's typed, stamped, or printed name and the words, “an individual doing business as _______________ [insert name of firm].”

(b) If the Lessor is a partnership, the lease must be signed in the partnership name, followed by the name of the legally authorized partner signing the same, and a copy of either the partnership agreement or current Certificate of Limited Partnership shall accompany the lease.

(c) If the Lessor is a corporation, the lease must be signed in the corporate name, followed by the signature and title of the officer or other person signing the lease on its behalf, duly attested, and, if requested by the Government, evidence of this authority to so act shall be furnished.

d) If the Lessor is a joint venture, the lease must be signed by each participant in the joint venture in the manner prescribed in paragraphs (a) through (c) of this provision for each type of participant. When a corporation is participating in the joint venture, the corporation shall provide evidence that the corporation is authorized to participate in the joint venture.

(e) If the lease is executed by an attorney, agent, or trustee on behalf of the Lessor, an authenticated copy of the power of attorney, or other evidence to act on behalf of the Lessor, must accompany the lease.

4. 52.233-2 - SERVICE OF PROTEST (SEP 2006) (VARIATION)

(Applies to leases over the Simplified Lease Acquisition Threshold.)

(a) Protests, as defined in section 33.101 of the Federal Acquisition Regulation, that are filed directly with an agency, and copies of any protests that are filed with the Government Accountability Office (GAO), shall be served on the Contracting Officer by obtaining written and dated acknowledgment of receipt from the Contracting Officer at the address shown elsewhere in this solicitation.

(b) The copy of any protest shall be received in the office designated above within one day of filing a protest with the GAO.

5. 52.215-5 - FACSIMILE PROPOSALS (OCT 1997)

(a) Definition. "Facsimile proposal," as used in this provision, means a proposal, revision or modification of a proposal, or withdrawal of a proposal that is transmitted to and received by the Government via facsimile machine.

(b) Offerors may submit facsimile proposals as responses to this solicitation. Facsimile proposals are subject to the same rules as paper proposals.

(c) The telephone number of receiving facsimile equipment is: [insert telephone number].

(d) If any portion of a facsimile proposal received by the Contracting Officer is unreadable to the degree that conformance to the essential requirements of the solicitation cannot be ascertained from the document--

(1) The Contracting Officer immediately shall notify the offeror and permit the offeror to resubmit the proposal;

(2) The method and time for resubmission shall be prescribed by the Contracting Officer after consultation with the offeror; and

(3) The resubmission shall be considered as if it were received at the date and time of the original unreadable submission for the purpose of determining timeliness, provided the offeror complies with the time and format requirements for resubmission prescribed by the Contracting Officer.

(e) The Government reserves the right to make award solely on the facsimile proposal. However, if requested to do so by the Contracting Officer, the apparently successful offeror promptly shall submit the complete original signed proposal.

6. FLOOD PLAINS (JUN 2012)

A Lease will not be awarded for any offered Property located within a 100-year floodplain unless the Government has determined that there is no practicable alternative. An Offeror may offer less than its entire site in order to exclude a portion of the site that falls within a floodplain, so long as the portion offered meets all the requirements of this RLP. If an Offeror intends that the offered Property that will become the Premises for purposes of this Lease will be something other than the entire site as recorded in tax or other property records the Offeror shall clearly demarcate the offered Property on its site plan/map submissions and shall propose an adjustment to property taxes on an appropriate pro rata basis. For such an offer, the LCO may, in his or her sole discretion, determine that the offered Property does not adequately avoid development in a 100-year floodplain.

7. 552.270-35 SYSTEM FOR AWARD MANAGEMENT – LEASING (JUL 2021)

(a) Definitions. As used in this provision—

“Electronic Funds Transfer (EFT) indicator means a four-character suffix to the unique entity identifier.

The suffix is assigned at the discretion of the commercial, nonprofit, or Government entity to establish additional System for Award Management records for identifying alternative EFT accounts (see subpart 32.11) for the same entity.

“Registered in the System for Award Management (SAM)” means that–

(1) The Offeror has entered all mandatory information, including the unique entity identifier and the EFT indicator, if applicable, the Commercial and…