5 - Exhibit C.1 - 0PR2126 - Carolina PR - DEA - Generic DEA Security SOW - 8.26.2024.pdf

DEA STATEMENT

OF WORK –

GENERIC

07/17/2024

This summary applies to the procurement, installation, training and implementation of an integrated security management system for the site described.

General Requirements, specifications and system components.

RLP No. 0PR2126 Exhibit C.1

LESSOR: ____________ GOVERNMENT: ____________

DEA SECURITY SYSTEM

SECTION I - GENERAL REQUIREMENTS

1.01 Summary of Work

DEA Office of Security Programs will review all vendor contract proposals for technical accuracy, completeness, and suitability, and will make the final determination of selected security vendor based on the most technically capable and lowest acceptable bid. This summary applies to the procurement, installation, training and implementation of an integrated security management system for the site described. The contractor shall furnish a complete system including all labor, materials and equipment for a complete and functional integrated security system. Use of subcontractors and/or other vendors to install and maintain any or all of the security system(s) (other than cabling, conduit, and power) must be approved in advance by DEA Headquarters, Physical Security Section. GSA or open market pricing shall be used, whichever is more advantageous to DEA.

1.02 Systems, warranties and maintenance

The work included as specified herein and as shown on the contract drawings consists of, but is not limited to, the following:

a. Access Control System (ACS)

b. Video Surveillance System (VSS)

c. Intrusion Detection System (IDS)

d. Warranty coverage

e. Systems tracking

f. Submittals and shop drawings

g. Maintenance and service support

1.03 Preexisting conditions

The contractor shall visit the site, check all existing conditions and be satisfied with the conditions under which the work is to be performed before submitting the project bid. No allowances shall be made for any extra expense due to the contractor’s failure or neglect to discover prior conditions affecting the work, to include hardware and labor necessary to complete the work.

1.04 Location of Work

1.05 Equipment

All equipment provided must be fully compliant with NDAA H.R. 5115 also known as the John S. McCain National Defense Authorization Act, as well as, Trade Agreements Act (TAA) FAR 52.255-5. TAA compliance applies to all equipment provided for the project, not solely products listed on the GSA Schedule Contract.

Substitution of equipment after bid approval will occur only when there is a significant advantage to the client agency, created by an overall upgrading of a component(s) by a manufacturer or an operational advantage created by a change in the state of the art of the equipment to be supplied. In the event the above occurs, the contractor shall make the DEA representatives aware of the new equipment and shall provide DEA the new information. At the DEA’s discretion, the option to accept or reject the substitution will then be exercised.

1.06 Coordination

A. Project coordination. Contractor shall coordinate all project activities with their assigned GSA project representative for all new construction builds. For ISPS funded projects, contractor shall coordinate with their assigned ISPS security representative.

B. Job site administration. Contractor shall provide an onsite project manager who shall maintain coordination with the DEA and completely inform the DEA representative of project status on a weekly basis or as agreed.

C. Other trade coordination. Contractor shall closely coordinate all work with other trades. It is the contractor’s responsibility to understand the scope of work of all other trades that affect the Security System to ensure that all power, cabling, networking, raceway, backboards, pull-strings, hardware, patching, painting and other services are included in the project. The contractor who delivers a fully functional Security System must supply those services not provided by other trades.

1.07 Regulatory Requirements

Work on or within the scope of this project shall be in accordance with but not limited to the following codes, rules and regulations.

a. Appropriate local government codes

b. National Electric Code (NFPA – 70)

c. Uniform Building Code

d. National Fire Code (NFPA - 1)

1.08 Submittals of material lists, technical information sheets and variances

A. Bidding Proposals:

1. When submitting a bid proposal please list the following information for each item on bid:

a. Item Quantity

b. Model Number (please use a part/model number that will allow retrieval of part information from any internet search engine).

c. Description: allow for an accurate description of part/device

a. Bad Example – 1076CG Rcsd,3/4 Dia,Stl,Dr

b. Good Example – Door Contact, Recessed Steel Door Mount, ¾” diameter.

d. Price Each

e. Price Total (example: If there are 10 items specified for the project then this column would be the total of the price each column times ten).

f. Labor as a separate item.

g. See Appendix 1 for sample bid proposal part layout.

h. Provide a separate product technical information sheet or data sheet for each device in the bid or quote. The specific model number(s) must be identified within the technical information sheet (highlighted).

B. Prior to the deadline for submittals, the contractor shall submit the following:

1. A materials list with the names of manufacturers, model numbers, and technical information on all items proposed.

2. A statement listing every technical and operations parameter wherein the submitted equipment varies from that which was originally specified. If the contractor fails to list a particular variance and his submittal is accepted, but it is subsequently deemed to be unsatisfactory because of an unlisted variance, the contractor must replace or modify such equipment at once and without cost to the DEA.

3. A statement to the effect that the contractor has read and understood this statement of work and agrees to fully abide by it, as further detailed by the specific security plans to be provided by DEA.

4. A statement to the effect that at least one technician who has been formally trained and certified in that system will be involved in the installation and programming of every component of the overall security system.

C. As Built/CAD drawings for lease upgrades and/or new builds will be submitted to DEA for approval prior to commencement of site work or fabrication work. These drawings shall include but not be limited to the following:

1. Building floor plans and site plan showing location of all devices and proposed routes for interconnecting conduits and interconnecting cable runs.

2. Interior elevations of each typical security cabinet, layout and all interfacing items associated with the cabinet.

3. Point to point wiring diagram showing quantity and type of wire used for each device. Typical manufacturer’s drawings are not acceptable.

4. Catalog cut sheets of all equipment and devices with proposed model numbers and options highlighted or arrowed.

5. Accurate location of all installed equipment under the specifications using the same device and symbol legend or notations.

6. Upon completion of the project, these drawings shall be transmitted to the attention of DEA security representative (ISP) at DEA HQ, 8701 Morrissette Dr., Springfield, VA 22152. All drawings must be submitted in soft copy.

1.09 Licenses and Permits

The contractor shall at the time of the proposals be fully licensed to perform all specific tasks by the local authority at the job location. The licensing may include but not be limited to a valid state Electrical Contractor, Low Voltage System Contractor, Alarm Operator and local business license.

The electronic security systems must be installed by a journeyman electronic or security system technician. If apprentices are used, they must be supervised by an on-site journeyman. The Contractor shall provide sufficient oversight by a qualified Project Manager.

Milestone Licenses shall be purchased no sooner than two weeks prior to all equipment being physically installed, and prior coordination must be made with ISPA.

Contractors that primarily operate as equipment distributers are restricted from bidding.

1.10 Warranties

A. The contractor shall guarantee all equipment and systems for a period of one year commencing with the acceptance of the security systems as fully functional by the DEA; unless otherwise specified in the security systems section later in this document. The warranty shall cover all costs for the warranty service, including parts, labor, field service, pickup, transportation, delivery, and reinstallation and retesting.

B. Requests for non-emergency service placed by the owner/occupant Monday through Friday shall be responded to within 24 hours of service request. Non-emergency items are those that do not secure the perimeter or high security areas.

C. Emergency Service Requests will be met within a four (4) hour reporting window.

1.11 Removal of Old Equipment

A. If applicable, de-installation may include removal of existing VSS system, IDS and ACS equipment in preparation for installation agency-approved equipment. As appropriate, de-installation activities will include the disposal of any trash and equipment, in addition to shipping of all equipment.

B. The contractor will securely handle any system components that could potentially contain sensitive information and return the components to the agency. Examples of system components are computers, hard drives, digital storage arrays or equipment with stored memory.

SECTION II - GENERAL SYSTEM SPECIFICATIONS

2.01 Scope

The selected contractor shall install and make operational a fully functional security system that will incorporate Video Surveillance System (VSS), an Intrusion Detection System (IDS) and Access Control System (ACS). The system shall be Underwriters Laboratory (UL) rated. The IDS shall be monitored by the appropriate Federal Protective Service (FPS) Megacenter Monitoring Station. Installation of cabling equipment, testing and training associated with the security system shall be included. Work shall be coordinated with the General Contractor and other Sub Contractors to meet the intended construction schedule. Under normal circumstances it is required that the system will be operational at least one week before occupying the space. Vendor will provide user training for the IDS, along with all user manuals, software if applicable, and keys for all systems.

2.02 Description of the System

The security system shall be comprised of VSS, ACS and IDS devices. The VSS system shall be comprised of both fixed and pan-tilt zoom, color, indoor and outdoor, vandal resistant IP based cameras; will be recorded by Milestone XProtect Corporate software running on one or more computers; with video distribution to flat screen displays throughout the facility. The ACS shall be comprised of HSPD-12/FIPS-201 compliant, Software House iStar panels with HSPD-12/FIPS 201 compliant card readers; which will release electronic locks and/or strikes as well as vehicle and pedestrian gates; will interact with a video phone visitor announcement system;

and must be managed by a Software House CCure-9000 networked system. The IDS shall be comprised of a Federal Protective Services (FPS) compatible alarm panel and keypads with multiple alarm groups; connected via network connection with a backup cellular communicator in case of line or communication failure; with zone shunt keypads located inside the protected zones; where each user has a separate code; where users can arm, but not disarm the entire system from one of the keypads. Each zone is protected by both motion sensors and high security balanced magnetic switch (BMS) door contacts, and glass break sensors (where applicable). All systems will be installed per manufacturer specifications. Security screws must be used for all ESS components that are exposed (i.e.

can be viewed externally or are not secured from behind a face plate).

If back-up generators are utilized, the UPS capacity may be reduced to thirty (30) minutes to ensure smooth transition to generator and during refueling. All Electronic Security Systems (ESS) equipment panels (IDS, ACS and VSS) will be contained in the DEA Firebird Room and / or associated IT/LAN Room(s).

In the DEA Firebird Room, high quality fire-rated plywood must be installed by the Contractor to support wall mounted backend equipment (i.e. panels, power supplies, etc.). The Contractor’s proposal must identify all wall and floor space requirements for rack and wall mounted equipment. The Contractor’s proposal must identify amperage of all ESS power requirements. Industry standard load factors may be used to determine UPS sizing.

ESS Requirements:

EMERGENCY BACKUP POWER

SYSTEM MIN HOURS MAX HOURS

ACS 4 4

IDS 8 24

2.03 Infrastructure

All wiring and cabling shall be in accordance with ESS Manufacturer recommendations. Wiring for all ESS field devices shall not be exposed (i.e. must be internal to a secure space wall, ceilings, doorframes, etc.) upon installation. Wiring for all ESS components should remain within DEA space when possible. When it is not feasible for wiring to remain internal to DEA space the contractor shall provide a conduit solution to the DEA Security Specialist for review. No wiring may be directly in contact with acoustical ceiling tiles. When replacing existing security systems, the contractor must remove abandoned ESS wiring in the ceiling per the applicable code.

Underground exterior cabling shall be direct burial cable meeting the requirements of the end point devices connected to it.

Reader cabling 18AWG Shielded Twisted Pair

Contractor shall use “PURPLE” colored cable for all Security Systems. All cables will be pulled from point to point, terminated, and tested. Cables will meet all applicable industry standards.

Cables must be labeled at all termination points. Labeling shall mirror end point device naming as specified in the Milestone and CCURE programming sheets.

SECTION III - SYSTEM COMPONENTS

3.01 General

All devices, wire, and equipment shall be listed by the Underwriters Laboratory or be Factory Mutual approved. Devices will be installed in full accordance with UL and manufacturer’s installation guides and requirements. All systems must be fully functional at the time of acceptance testing. Conflicts between manufacturer’s recommendations, specification, and/or contract documents must be reported in writing to the designated DEA Security Specialist.

3.02 Video Surveillance System

The VSS system will provide coverage as identified in included documentation provided by DEA. Table 1, Facility Cameras, identifies camera names, locations and Statement of Objectives for the system.

Contractors that primarily operate as equipment distributers are restricted from bidding.

A. The VMS shall be designed for surveillance and industrial applications. The cameras shall be high resolution, fully automatic, color and capable of providing high resolution video over an IP LAN/WAN network.

B. It is the selected vendors responsibility to ensure cameras shall be fully supported by the current Milestone XProtect™

Corporate Video Device Driver Package. Milestone supported cameras can be found at this link Milestone Systems | Support devices for XProtect® Corporate and XProtect® Expert

1. Fixed cameras shall have a varifocal lens or multiple lens options.

2. Cameras shall, at minimum, be capable of providing a minimum of four simultaneous H264 or H.265 video streams at 30 frames per second.

3. Cameras encoding rate shall be selectable from 1 to 30 frames per second in all available resolutions.

4. Cameras must be capable of providing a minimum of eight simultaneous, unicast RTSP video streams.

5. Cameras shall be designed to support power over the Ethernet (PoE) using UTP Category 5 or better cable with

RJ45 connectors when an IEEE802.3af compliant switch is utilized.

6. Cameras must be capable of performing upgrades, such as the firmware, through web browser without the use of additional software applications.

7. Cameras must be NDAA and TAA compliant.

8. Cameras must be capable of being reset to factory settings/defaults by physical means, such as, a reset button.

9. All cameras must be reviewed and approved by the DEA.

10. Cameras shall not be near end of life (EOL). If the proposed camera(s) cycle to EOL, equivalent replacement cameras will be proposed to DEA prior to selection and DEA must approve the camera change.

11. Cameras are to be set to DHCP v static IP.

C. Camera housings shall have multiple mounting options. Camera housings will match the general design of the building.

All camera housings will entirely enclose wiring and cameras and be vandal-resistant.

D. Exterior cameras may be either dome or other environmental housing which suits the general appearance of the facility and appropriate to local weather conditions. All housings will entirely enclose wiring and cameras, vandal-resistant and IP66 rated. All exterior camera transmission lines must protect against lightning and other related power surges.

E. Camera placement must be approved in writing and temporarily field mounted prior to installation. Camera placements and views must be reviewed and approved by the DSO and/or the onsite point of contact in coordination with the vendor/installer.

F. Cabling will be Cat 6, or fiber for cases of distance runs and/or camera types that require fiber.

G. For devices requiring other than 802.3af power over ethernet; the vendor is to provide a power injector capable meeting the manufacturers max power consumption requirements for that specific device.

H. Video decoders are required to allow camera views to be seen on the security displays installed within the office (see Security Plan). The video decoding units will be mounted behind each security display unless utilizing an approved HDMI splitter system. Video decoding units will be directly connected to each security display using a HDMI 1.4a cable or better.

Acceptable equipment is the IoNodes ION-R100S.

I. Video display(s) shall be sized to appropriately fit the space of the room/office in which it is to be installed. Minimum screen size of 32 inches to a maximum of 55 inches, unless otherwise specified by the DEA. All displays shall be wall mounted adjacent to the ceiling to provide the best viewing by the primary users while protecting the view within the protected space. Display shall be commercial digital signage quality, resolution must be a minimum of 1080p, HDMI video input connection. Smart TV or similar type displays are not authorized for use.

J. All power requirements for the equipment shall be coordinated with the electrical contractor on site. All breakers shall be marked and if dedicated circuits are required the security contractor is responsible for interfacing with the electrical contractor for the requisite circuits.

K. Vendor must include a 1U or 2U rackmount console. With 1080p widescreen LCD panel, integrated keyboard and mouse.

L. Rack mounted 120V UPS backup power is required to be no less than 15 minutes and must send a shutdown signal to the

VSS server in the event of a power failure.

3.03 Recording Server

The recording server(s) shall be used for recording video feeds and for communicating with cameras and other devices. The recording server(s) shall communicate via network with the management server at another location.

A. The recording server(s) shall be provided by the contractor.

B. Recording server shall meet or exceed the following requirements based off VSS system requirements.

a. Dell or equivalent server grade hardware – BCD is preferred but not required.

b. Windows Server 2019

c. Minimum 16tb RAID 5 for video recording, video retention requirement is a minimum of 30 days for all cameras.

Recording calculation is 25% motion recording, resolution 1080p at 2-5mb, 15FPS, Codec H265.

d. Five (5) year warranty to include next day onsite service with option to keep hard drive.

e. 2 x 1GbE LAN Ports

f. iDRAC

g. Energy Star compliance

h. Minimum 16gb ram

i. Rack mount

j. RAID 5 for live database must be pre-configured from the manufacturer or equipment reseller prior to shipping to DEA

C. On projects that are related to new build locations and lease renewal upgrades, the vendor is to include licensing for the Milestone XProtect software for each of the devices that will require it in the proposal/quote. This software is to be applied to DEA’s Milestone SLC. On end of life projects, the contractor must coordinate with the System Security Unit (ISPA at HQ- ISPACastleTeam-DL@dea.gov) for verification of all potential license requirements.

D. The recording servers, once configured, shall run independently of the management server, and continue to operate in the event that the management server is offline.

E. The recording server shall utilize optimized or purpose-built disk drives in a RAID 5 configuration for video surveillance systems.

F. An independent SSD drive will be provided for the operating system and application volume. It will not be used for the video storage. OS/Application volume type JBOD.

G. The recording server shall have the ability to accept the full frame rate supplied by the cameras, while recording a lower frame rate, yet still make the higher frame rate available to the Clients for live viewing.

H. Contractor shall prepare end point devices for programming by DEA staff.

3.04 Warranty and Service

The recording server shall have five-year next day onsite technical support service by a Dell qualified repair service technician and a warranty of no less than five years from the date of acceptance by the DEA. This warranty will include all hardware, labor and travel associated to service and / or repair the recording server. DEA will bear no additional financial burden during the five-year warranty period. DEA retains the right to keep the hard drive if the hard drive must be replaced at any time due to hardware failure, service or maintenance of the recording server.

3.05 Access Control System

The ACS shall be comprised of HSPD-12/FIPS-201 compliant, Software House iStar G2 series panels with HSPD-12/FIPS 201 compliant card readers; which will release electronic locks and/or strikes as well as vehicle and pedestrian gates; will interact with a video phone visitor announcement system; and must be managed by a Software House CCure-9000 networked system. All systems will be installed per manufacturer specifications. Security screws must be used for all Electronic Security System (ESS) components that are exposed (i.e. can be viewed externally or are not secured from behind a face plate).

A. Current approved access control panel is Software House iStar G2 series controllers.

B. Readers must be wired RS-485, current approved readers are Indentiv model numbers;

IDV-9216ABSWH terminal version IDV-9110ABSWH terminal version.

C. There shall be battery power back up for the system for a minimum of 4 hours.

D. Access control power minimum specification is a 20amp continuous power supply for iStar Ultra G2 panels and 10amp continuous power supply for iStar G2 Edge panels.

E. The system must have industry standard response to proximity card read or keypad entry.

F. The video intercom system must provide cabling for a minimum of 2 dry contact input/output points from each individual door station to the ACS control panel location.

G. Electric strikes must fail secure unless otherwise specified by DEA.

H. Technicians providing installation or service for ACS must be formally trained and certified by Software House. Contractor shall make connections to the DEA provided network and mark all cabling appropriately. Firmware updates maybe necessary by certified technicians during installation.

I. Magnetic locks will not be used unless explicitly stated on DEA provided security plans. Where present, magnetic locks must meet fire code standards for installation and function. Furthermore, each magnetic lock must be equipped with a power interrupting, high security (UL-437) key box (outside) with momentary override button (inside). Magnetic locks shall never receive battery power.

J. Vehicle gates shall be controlled by the ACS using proximity card readers for entry, and a sensing device (ground loop, unidirectional motion sensor, etc.) for exit. The gate operator must be on the protected side of any fencing or other physical barrier. The gate operator must have pushbutton operation, not accessible from the unprotected side of any fencing. Gates and operators must be appropriate for the size, location, and environmental conditions at the site.

K. Emergency Knox Box’s will be provided at all locations required by the local Authority Having Jurisdiction (AHJ).

3.06 Programming VSS and ACS

The System Security Unit (ISPA) is responsible for working with the office, the contractor, and DEA’s IT office to ensure the proper programming of the VSS and ACS systems. As such, ISPA requires the vendor to complete and return to ISPA, ISPS, and the onsite POC, the iStar Panel and Milestone programming sheets (samples are Attachments 3, 4, and 5) a minimum of one week prior to installation to ensure the two systems are operational prior to the build sign off. In addition to completing and returning the programming sheets, the vendor must coordinate with either the Division Security Officer or the onsite point of contact to point the camera views as the office specifies. This is to be completed prior to turning the programming over to ISPA to ensure the camera views are as required by the office.

3.07 Intrusion Detection System

A. Alarm monitoring service must be provided by the Federal Protective Service (FPS). FPS maintains four Multi-Regional Emergency Management Control Centers (MegaCenter) across the country. The MegaCenters handle alarm monitoring and radio dispatch of FPS Law Enforcement Officers and Contract Protective Security Officers (PSO) for alarm response, criminal activities and emergencies for General Services Administration (GSA) federally owned properties and leased space.

Additionally, the MegaCenters notify local authorities; including law enforcement, emergency medical services and/or fire departments, as designated by customer protocols. The cost of MegaCenter monitoring and emergency services are factored into the GSA lease agreement.

B. FPS MegaCenters are capable of monitoring UL commercially grade listed panels from the following manufacturers:

Honeywell/Ademco, Bosch/Radionics, or Digital Monitoring Products (DMP).

C. Contractor is to assist DEA and the FPS Megacenter with programming the system.

D. Contractor is to instruct the designated DEA personnel how to perform all necessary and usual functions of the IDS.

E. IDS installed to protect DEA facilities will meet the requirements of Interim Federal Specifications W-A-00450B (GSA/FFS).

These requirements will be cited on all contracts and purchase orders. All components comprising the IDS will comply with applicable UL Standards (UL 611, 681, 1076 and 2050 apply).

F. The transmission link between the central monitoring station and the protected facility will be electronically supervised.

Additionally, the supervisory loop among alarm sensors and the Premise Control Unit (PCU) will be supervised. This line supervision refers to systems in which the transmission is based on pseudo-random generated tones or digital encoding using an interrogation and response polling scheme throughout the entire communications, or UL Class AA line supervisions (UL Standard 611). The signal shall not repeat itself within a minimum six-month period. This line supervision shall be impervious to compromise using impedance matching resistance or potential (voltage) current substitution, signal substitution techniques or any single compromise attempt. This requires that more than one (1) form of line supervision is provided (UL) Standard 611 (Grade AA Service). The second means of communication shall be wireless (preferably cellular base is Telguard) system, which alerts/activates on both line and communications failure. Contractor must assist DEA in setting up an appropriate communications service so that the wireless communicator can communicate with the FPS Megacenter.

G. All alarm sensors and panels will be equipped with tamper switches placed on a 24-hour alarmed partition to advise of unauthorized entry or manipulation.

H. UL Approved Premise Control Units (PCU) alarm processors associated with DEA intrusion detection systems will be furnished with an emergency power supply. Emergency Power must comply with UL 603 and will be a rechargeable battery and/or generator capable of sustaining systems operation for a minimum of 8 hours in the event of a commercial power outage.

When batteries are used for emergency power, they will be maintained at full charge by automatic charging circuits.

Switchover from line to battery power will be automatic and instantaneous. A conspicuously visible indicator on the control unit will be actuated to signal a change in state and the consequent mode of operation. The PCU will be protected from power spikes by a circuit breaker or replaceable fuse.

I. Zone shunt (access/secure) keypads associated with DEA multi-zoned systems will be installed within the perimeter of the protected zones. The keypads will provide an alarm delay of sufficient duration to permit legitimate access and egress by authorized personnel. Perimeter keypads must have the ability to arm, but not disarm all groups at once. Otherwise, only the keypads physically present inside an area protected by a group will be able to arm or disarm that group (normally one keypad per group other than the perimeter).

J. Intrusion detection systems installed within DEA facilities will provide the following protection:

1. Ul-634 Level 2 Balanced Magnetic Switches will be installed on the interior side of all perimeter doors and secure rooms as designated by DEA representatives. These contacts must be properly installed, parallel to each other, not perpendicular. Installation may require the use of “L” or “Z” brackets to achieve parallel installation.

2. Dual technology, Passive Infrared (PIR), 360-degree motion detectors will be installed within the secure areas unless otherwise directed.

3. Glass break detector will be continuously active (24/7). Where glass break detectors are present in a DEA facility, a test device must be present for initial system testing, and remain on-site for future testing.

4. Duress, hold up type alarms will provide both local signaling (strobe lights with sounders strategically placed within the office space) and remote annunciation within the central station monitoring the system. Local signaling will be neither audible nor visible from the "SECURE ENTRANCE/RECEPTION AREA". Sounders will in no case be louder than 95dB.

5. The placement of intrusion detection system motion sensors will be determined through an on-site inspection of the facility by representatives of the DEA Office of Security Programs, but should be approximately as shown in the DEA provided security plans.

K. Intrusion detection systems installed within DEA office space must be compatible with FPS Megacenter Monitoring Center covering the office area. Vendor must insure, with the assistance of DEA, that the system is properly programmed, functional, and being monitored.

Appendix 1: Example Bid Format

=====================================================================Qty Model Manufacturer Description Each Total

1076CG

Big Company

Door Contact, Recessed Steel Door Mount, ¾ inch diameter

$7.63

$15.26

12 RY-24L Little Company Form C Door Release Relay, 24V DC Input

$14.96 $179.52

1 AX-084C Medium Company Central Exchange Unit for 8 door and 4 masters

$892.64 $892.64

1 Labor Contractor Installation, programming, and testing

$12,000 $12,000

Appendix 2: Locks and Other Door Hardware

1. Deadbolt and other locks as specified on the DEA provided security plans must by high security (UL-437), grade 1 locks.

Acceptable models include Schlage Everest 29 Primus XP UL 437 and Medeco3 High Security Maxum.

2. High security locks and cylinders shall never be master keyed. Standard grade locks shall be master keyed.

3. Neither the contractor nor the lessor shall retain any keys to the DEA facility or spaces. All keys to DEA spaces shall be delivered to DEA.

4. DEA will provide the functional descriptions of doors and locks as part of the security plan. DEA will also specify keying schedules and number of keys to be provided.

5. Where possible, the deadbolt and keyset functions shall be combined into a single lockset with a high security cylinder.

6. Any door with an electric strike shall be secured by a heavy duty automatic closer and a storeroom lockset.

7. Select doors may be specified as requiring soundproofing sweeps and seals. These shall provide a complete, 360° seal between the door and frame. These doors must still fully close solely by the function of an automatic closer. These doors will be tested, and are expected to meet the standard of STC-45 (normal conversations can be detected but not understood). Helpful hint: If light can be seen around/under a closed door, it is not properly soundproofed.

8. All locks must function smoothly and properly. All doors must close smoothly and completely.

9. Perimeter and certain other doors will be specified as requiring pinned hinges. At least two of the hinges on these doors

(topmost and bottommost) must be of a visibly secure type.

Appendix 3: Grounds, Parking and Fencing

1. DEA requires secure parking areas for government owned vehicles and certain other vehicles. Secure parking areas are fenced and gated to prevent unauthorized personnel and vehicles from entering the secured area.

2. DEA will work with the lessor, architect and others to design an acceptable security plan for the facility, grounds, and parking areas.

Appendix 4: Generic System Diagram

ATTACHEMENT 1: SECURITY SYSTEM DETAILS

1A. INTRUSION DETECTION SYSTEM (IDS)

1. IDS Alarm Areas

i. The following areas require separate alarm partitions:

1. General Office

2. Technical Equipment Room

3. Imprest Fund Room

4. Crypto Room

5. OSA Room(s)

6. Firearms Room

7. Drug Evidence Room

8. Non-Drug Evidence Storage Room

2. UL637 High Security Balanced Electro-Magnetic Door Sensors

i. The following doors require high security magnetic contacts:

1. Office Perimeter Door(s)

2. Office Perimeter Roll-Up Door(s)

3. Roof Hatch(s) with Leased Space

4. Firebird Equipment Room

5. Technical Equipment Room

6. Imprest Fund Room

7. Crypto Room

8. OSA Room(s)

9. Firearms Room

10. Drug Evidence Room

11. Non-Drug Evidence Storage Room

3. UL-639 Motion Sensors

i. The following areas require UL639 Motion Sensors:

1. Office Perimeter Door(s)

2. Office Perimeter Roll-Up Door(s)

3. Field of View for all windows within 18’ of ground level

4. Technical Equipment Room

5. Imprest Fund Room

6. Crypto Room

7. OSA Room(s)

8. Firearms Room

9. Drug Evidence Room

10. Non-Drug Evidence Storage Room

4. Duress Alarm Locations

i. The following areas require duress alarm button:

1. Secure Reception (Secure Side)

2. Prisoner Processing

3. Imprest Fund Room

5. Duress Alarm Strobe Colors Assignments

i. The following areas will be represented by the below color assignments:

1. Secure Reception

a. Blue Strobe

2. Prisoner Processing

a. Red Strobe

3. Imprest Fund Room

a. Green Strobe

6. Duress Alarm Strobe with Audible Annunciator Locations

i. The following areas require duress alarm strobes with audible annunciators:

1. Centered in each Group work bay area

2. Designated Break Area(s)

1B. ACCESS CONTROLLED DOORS

1. Card Reader with Keypad (IDV-9216AB terminal version)

i. The following locations require card readers with integrated keypad:

1. Office Perimeter Door(s) (Exterior to Interior)

2. Office Perimeter Roll-up Door(s) (Exterior to Interior)

3. Prisoner Processing Door(s) (Interior to Exterior)

2. Card Reader (IDV-9110AB terminal version)

i. The following locations require card readers:

1. Crypto Room

2. OSA Room(s)

3. Drug Evidence Storage Room

4. Non-Drug Evidence Storage Room

5. Prisoner Processing (Exterior to Interior)

6. Technical Equipment Room

7. Imprest Fund Room

8. Firearms Room

9. Firebird Equipment Room

10. T2S2 Room (both sides of door)

11. Interview Room(s)

a. Exterior Interview Room (Public to Interview Interior)

b. Interior Interview Room (Interior to DEA Office Interior)

3. Mechanical Pushbutton Lock

i. The following doors require mechanical pushbutton locks:

1. Head of Office

2. Group Supervisor

3. Interview Room(s)

a. Double-sided lock will be provided for interview room(s) within Prisoner Processing.

4. iStar Ultra G2 Panel

1C. VIDEO SURVEILLANCE SYSTEM

1. Exterior Areas

i. The following locations require cameras, approved for use by DEA, providing Field of Views of the below areas:

1. Office Perimeter Door(s)

2. Office Perimeter Roll-Up Door(s)

3. Office Perimeter Walls

4. Vehicle Gate(s)

5. Pedestrian Gate(s)

6. Secure Parking Area

2. Interior Areas

i. The following locations require cameras, approved for use by DEA, providing Field of Views of the below areas:

1. Secure Reception (Public Side)

2. Prisoner Processing

3. Sally Port(s)

4. Evidence Processing

5. Imprest Funds (Transaction Side)

6. Imprest Funds (Cashier Side)

7. Imprest Funds (Imprest Room Overview)

3. Video Display Locations

i. The following areas require video displays:

1. Head of Office

2. Secure Reception (Secure Side)

3. Adjacent to each Group work bay area

4. Office Perimeter Door(s)

4. Video Intercom Door Stations

i. The following areas require video intercom door stations from public areas to DEA controlled space:

1. Pedestrian Gate(s)

2. Office Perimeter Door(s)

3. Vehicle Gate(s)

5. Video Intercom Door Release Stations

i. The following areas require video intercom door release stations:

1. Head of Office

2. Secure Reception (Secure Side)

3. Adjacent to each Group work bay area

• Designated Break Area(s)

1D. DOOR HARDWARE

1. Single Keyed Device Doors – High Security UL-437

i. The following areas will be keyed individually (not part of the master key system):

1. Technical Equipment Room

2. Imprest Fund Room

3. Crypto Room

4. OSA Room(s)

5. CS File Room

6. Firearms Room

7. Drug Evidence Room

8. Non-Drug Evidence Storage Room

9. Prisoner Processing (Interior to Exterior)

2. Single Keyed Device Doors (Keyed Alike)

i. The following areas will be keyed alike (not part of the master key system):

1. Office Perimeter Door(s)

2. Exterior Pedestrian Gate(s)

3. Prisoner Processing (Exterior to Interior)

4. Holding Cells

5. Secure Files

6. T2S2 or T-III

3. Asylum/Institutional Locksets

i. The following areas will utilize electrically locked, asylum/institutional lockset where the knob/lever on both sides is always inoperative. These areas will allow the knob/lever to retract latch bolt upon activation of fire alarm.

1. Prisoner Processing

4. Key set Quantities

i. A minimum of 2 Control Keys will be provided for each key set group

ii. A minimum of 4 Change Keys will be provided for each door utilizing a specific key set group.

iii. Refer to Key System table for complete Change Key quantities

Table 1. Facility Camera Statement of Objectives

VSS site specific information for XXX Field Division Office

Site perimeter cameras shall view as indicated below – (15) Cameras

1. SITE-C04 – Exterior fixed wide-angle lens covering parking area (overview)

2. SITE-C05 – Exterior fixed wide-angle lens covering entry /exit gate and parking area (rear of building) (overview)

3. SITE-C10 – Exterior fixed wide-angle lens – covering loading dock gate and surrounding parking area (overview)

4. SITE-C11 – Exterior 180-degree wall mount – Covering entrance to sally port, must be installed on adjustable horizontal bracket. (overview)

5. SITE-C12 – Exterior fixed wide-angle lens covering parking area (overview)

6. SITE-C13 – Exterior fixed wide-angle lens covering parking area (overview)

7. SITE-C14 – Exterior fixed wide-angle lens covering entry /exit gate and surrounding parking area (front of building)

(overview)

8. SITE-C15 – Exterior fixed wide-angle lens covering parking area (overview)

9. SITE-C16 – Exterior fixed wide-angle lens covering parking area (overview)

10. SITE-C17 – Exterior fixed wide-angle lens covering parking area (overview)

11. SITE-C18 – Exterior fixed wide-angle lens covering garage exit and sidewalk leading to rear entry door (overview)

12. SITE-C19 – Exterior fixed wide-angle lens covering garage exit and sidewalk leading to rear entry door (overview)

13. SITE-C20 – Exterior fixed wide-angle lens covering exit gate and parking area (overview)

14. SITE-C21 – Exterior PTZ primary views are front entry / exit gate and loading dock gate. (detail) This device will require a

Treehaven Technologies controller installed

15. SITE-C22 – Exterior 180-degree wall mounted camera covering loading dock area, installed on adjustable horizontal bracket. (overview)

Parking garage shall view as indicated below – (9) Cameras

1. G-01 (Garage Entry) – Wall mounted fixed wide-angle lens. View shall be of vehicle entering / exiting from the parking garage. (overview)

2. G-02 (1st Fl. Parking area 1) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

3. G-03 (1st Fl. Parking area 2) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

4. G-04 (2nd Fl. Parking area 1) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

5. G-05 (2nd Fl. Parking area 2) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

6. G-06 (3rd Fl. Parking area 1) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

7. G-07 (3rd Fl. Parking area 2) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

8. G-08 (4th Fl. Parking area 1) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

9. G-09 (4th Fl. Parking area 2) Interior 360 pendant mounted camera. Primary view shall be stairwell. (overview)

1st Floor camera shall view as indicated below – (20) Cameras

1. Exterior-C01 (Exterior rear entry) – Exterior 360-degree camera installed on soffit, primary view shall be individuals walking up to building from side walk. (detail)

2. 81-C01 (Rear Entry)– Interior ceiling mount fixed viewing from rear entry door to stairwell / interior entry door.

(overview)

3. 122-C01 (Rear Vestibule) – Interior 360-degree camera ceiling mounted, centrally located. (detail)

4. 121-C01 (1st Fl Elev. Lobby) – Interior 180-degree camera wall mounted, viewing hallway 108, elevator lobby and as much as the vestibule entry area as possible. (overview)

5. Exterior-C02 (Exterior Front Entry) – Exterior 360-degree camera installed on soffit, primary view shall be individuals walking up to building from side walk. (detail)

6. 104-C01 (Secure Entry) – Interior 360-degree ceiling mount camera, primary view shall be individuals entering from the primary entry door. (detail)

7. 101-C01 (Secure waiting area) – Interior 360-degree ceiling mounted camera. (overview)

8. S101-C01 (1st Fl. Stairwell) – Interior 180-degree wall mounted camera, installed on adjustable horizontal bracket.

(overview)

9. 134-C01 (Chem Storage) – Interior 360-degree ceiling mounted camera, centrally located. Primary view is main entry door into storage room. (from hallway 127) (overview)

10. 135-C01 (Chem Lab 1) – Interior 360-degree ceiling mounted camera, centrally located. (overview)

11. 135-C01 (Chem Lab 2) – Interior 360-degree ceiling mounted camera, centrally located. (overview)

12. 135-C01 (Chem Lab 3) – Interior 360-degree ceiling mounted camera, centrally located. (overview)

13. 136A-C01 (Chem Vault) – Interior 360-degree ceiling mounted camera, centrally located. Primary view in main entry into vault. (overview)

14. 143A-C01 (Sec. Proc. Hallway) – Interior 360-degree ceiling mounted camera. Covering Hallway 143A and 141.

(overview)

15. 144-C01 (Evidence Hallway) – Interior 360-degree ceiling mounted camera. Primary view shall be Evidence storage room, also viewing 143A and 144 hallways. (overview)

16. 148-C01 (Evidence Proc.) – Interior 360-degree ceiling mounted camera. Primary view shall be both sets of access controlled double doors. (overview)

17. 150-C01 (Interior Loading Area) – Interior 360-degree pendant mounted camera. Primary view shall be loading dock overhead door. (overview)

18. 153-C01 (Secure Processing Entry) – Interior 360-degree ceiling mounted camera. Shall be installed to include both

153A and 153C doors. (overview)

19. 153-C02 (Secure Holding) Interior ceiling mounted fixed wide-angle lens. View shall include all holding area doors

(hallway) and interview rooms. (overview)

20. 164-C01 (Interior Sally Port) – Interior fixed corner mounted wide-angle lens. View shall include sally port overhead door, entry door and general sally port area. (overview)

3rd Floor camera shall view as indicated below – (4) Cameras

1. 341-C01, 341-C02, 341-03 (Impress Room) – Camera shall be a multi-sensor camera covering the exterior transaction window (detail), Interior transaction window (detail) and 360-degree coverage of the room (overview)

2. 337-C01 (Crypto / Sec. Files) – Fixed ceiling mount wide-angle lens camera, covering both secure entry doors.

(overview)

Table 2. Facility Display Groups

D ec od er

G ro up s

ID Display Location Display Group

1 Security Room 1 1

2 Security Room 2 2

3 Security Guard Booth 3

4 SOG Office 3

5 Executive Suite 4

ATTACHEMENT 2: Sampling of camera makes and models currently installed at DEA Offices. Vendor is not required to use the same but must propose equal salient features and characteristics (should not be near end of life cycle)

XNV‐6080R

60 frames per second H.265 compliant Motorized, Varifocal Lens Minimum 119 – 27 degree Horizontal Field of View 150 dB WDR (4 exposure) Minimum Color Illumination 0.015 lux Built‐in IR Composite Out 5 Year Warranty

XNV-6081Z

H.265 compliant Composite Out Modular Design (Housing separate from camera module) Remote Adjustment

PNM-7002VD

H.265 compliant 150 dB WDR (4 exposure) Minimum Color Illumination 0.055 lux

TNV-7010RC / 8010C

H.265 compliant Minimum Color Illumination 0.1 lux

IP66, IP6K9K, 1K10+ (50J)

Minimum of 5 Year Warranty

PNM‐9022V

30 frames per second H.265 compliant Minimum Color Illumination 0.3 / 0.1 lux

PNM-9080VQ

H.265 compliant Motorized, Varifocal Lens 150 dB WDR (4 exposure)

XND‐6080RV

H.265 compliant Motorized, Varifocal Lens Minimum 119 – 27 degree Horizontal Field of View 150 dB WDR (4 exposure) Minimum Color Illumination 0.015 lux Built‐in IR

XNF‐8010RV / R

30 frames per second H.265 compliant Minimum Color Illumination 0.1 lux Built‐ in IR

XNV‐8080R

H.265 compliant Motorized, Varifocal Lens 30 frames per second Minimum 92 ‐ 38 degree Horizontal Field of View Minimum Color Illumination 0.07 lux Built‐in IR

ATTACHMENT 3: iStar Panel Programming Sheet (Sample below. Actual provided upon award.)

TAMPER ALARM: ( Y or N )

DSM REX I/8 0/8 Type of Reader/Model of RDR

1 13

2 14

3 15

4 16

5 17

6 18

7 19

8 20

9 21

10 22

11 23

12 24

PRI 1

SEC 1

PRI 2

SEC 2

PRI 3

SEC 3

PRI 4

SEC 4

PRI 5

SEC 5

PRI 6

SEC 6

PRI 7

SEC 7

PRI 8

SEC 8

DSM REX I/8 0/8 Type of Reader/Model of RDR

PORT

1 13

2 14

3 15

4 16

5 17

6 18

7 19

8 20

9 21

10 22

11 23

12 24

PRI 1

SEC 1

PRI 2

SEC 2

PRI 3

SEC 3

PRI 4

SEC 4

PRI 5

SEC 5

PRI 6

SEC 6

PRI 7

SEC 7

PRI 8

SEC 8

Primary DNS Server :

Secondar DNS Server:

DNS Query Suffix:

COMMENTS

OUTPUTS

PORT NAME TYPE OF LOCK

IN 4 IN 8

IN 3 IN 7

IN 2 IN 6

IN 1 IN 5

INPUTS

PORT NAME NAME

ACCESS CONTROL MODULE #2 (ACM)

iSTAR PORT NAME

OUTPUTS

PORT NAME TYPE of LOCK

IN 4 IN 8

IN 2 IN 6

IN 3 IN 7

INPUTS

PORT NAME PORT NAME

IN 1 IN 5

iSTAR PORT NAME

GENERAL CONTROL MODULE (GCM)

AC POWER FAILURE: ( Y or N )

LOW BATTERY ALARM: ( Y or N ) OUTPUT NAME:

ACCESS CONTROL MODULE #1 (ACM)

SUBNET MASK:

GATEWAY:

HOST NAME:

ISTAR ULTRA #4 CONFIGURATION WORKSHEET

MAC ADDRESS PANEL:

INSIDE IP DESIGNATED BY HQ's SYSTEM ADMINS

INSIDE IP ADDRESS :

BUILDING NAME:

BUILDING FLOOR:

BUILDING ROOM NUMBER:

MASTER (Y or N):

CLUSTER NAME:

DATE REVISION:

ATTACHMENT 4: MILESTONE PROGRAMMING SHEET (Sample below. Actual provided upon award.)

ISPS POC

Start Date: DSO: Milestone Server IP:

Phone: Subnet Mask:

On-site DEA POC: Gateway:

Phone: Installer Username: Phone: DNS 1:

E-mail: Installer Password: DNS 2:

Onboard Add-on Onboard Add-on

RS 01

Device ID Location Name MAC IP Address View Group View Layout (2x2, 3x3, etc)

Serial Number Connected

Port #

MON 01

MON 02

MON 03

MON 04

MON 05

Device ID Location Name Model Number IP Address View Group View Layout (2x2, 3x3, etc)

Serial Number Connected

Port #

N/A N/A N/A

N/A N/A N/A

N/A N/A N/A

N/A N/A N/A

N/A N/A N/A

Device ID MAC IP Address Model Number Camera Type

(Fixed, PTRZ, 180, 360) Mounting Position (Wall, Ceiling, Corner)

Connected Port #

CAM 01

CAM 02

CAM 03

CAM 04

CAM 05

CAM 06

CAM 07

CAM 08

CAM 09

CAM 10

CAM 11

CAM 12

CAM 13

CAM 14

CAM 15

CAM 16

CAM 17

CAM 18

S p li tt er

Notes

Castle Milestone Configuration Sheet

Desired Field of View Description

Notes

Notes

Site Location:

Integrator Name:

R e c o rd in g

S e rv e r

Device ID Firebird Workstation Name

Installed By:

Connected Port #

Network Card MAC IP Address

A C

T i

In st a ll a ti o n

N o te s Installer to complete blue shaded cells and return to DEA POC.

Devices are to be updated to most current firmware version prior to installation.

When connected to the network all devices are to be in the factory default state with no configured usernames or passwords.

All security wiring shall be labeled at each end. Cable labeling format shall utilize the provided Device ID and the Location Name from the configuration sheet.

Photos of head-end terminations must be provided with completed configuration.

As applicable, when use of HDMI A/V distribution systems is required for monitor groups, the decoder device providing the video source and the head end transmitter shall be wall mounted in the Firebird room. All associated CAT cabling will be home run. None of the CAT cabling for the distribution system shall be connected through DEA Network equipment.

C am e ra s

Location Name

ATTACHMENT 5: DISPLAY LAYOUT VIEW SAMPLES

Name Name

IP Address IP Address

Name Name

IP Address IP Address

ACTi IP Address:

ACTi MAC:

Name Name Name

IP Address IP Address IP Address

Name Name Name

IP Address IP Address IP Address

Name Name Name

IP Address IP Address IP Address

ACTi IP Address:

ACTi MAC:

Name

IP Address

Name

IP Address

Name Name Name

IP Address IP…