Amendment 0004.pdf

Federal Protective Service U.S. Department of Homeland Security

STATEMENT OF WORK

for

Upgrade/Add-on of Video Surveillance System (VSS), and Intrusion Detection System (IDS)

Sam Nunn Federal Building and Childcare Center 100 Alabama Street SW

Atlanta, GA 30303

70RFP123QE4000002

October 2023

Amendment 0004

STATEMENT OF WORK

TABLE OF CONTENTS

A. BACKGROUND 4

B. PURPOSE 4

C. SCOPE 4

C.1 GENERAL

C.2 INSTALLATION REQUIREMENTS

C.3 VIDEO STORAGE REQUIREMENTS

C.4 CONTROL ROOM MONITORS

C.5 NETWORKING EQUIPMENT

C.6 OPERATING SYSTEMS UPDATES AND SERVICE PACKS

C.7 ATTACHMENTS WITH DEVICE/EQUIPMENT LOCATIONS

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS 12

D.1 NETWORK VIDEO MANAGEMENT SYSTEM

D.2 MINIMUM SERVER AND WORKSTATION REQUIREMENTS

D.3 IP NETWORK VIDEO CAMERA MINIMUM REQUIREMENTS

D.4 NETWORK MANAGED SWITCH

D.5 INTRUSION DETECTION SYSTEM (IDS) MINIMUM REQUIREMENTS………………………………………………………...17

D.6 EQUIPMENT LIST

E. ADDITIONAL PROJECT REQUIREMENTS 20

E.1 DESIGN STANDARDS

E.2 MATERIALS AND EQUIPMENT

E.3 ELECTRICAL AND CABLING REQUIREMENTS

E.4 FINAL INSPECTION AND ACCEPTANCE

E.5 CLEANLINESS, PROTECTION, AND PATCHING

E.6 WARRANTY AND MAINTENANCE

E.7 SAFETY AND HEALTH

E.8 QUALITY CONTROL PLAN

E.9 TRAINING

E.10 CONFIGURATION MANAGEMENT

E.11 COMPONENT/DEVICE CONFIGURATIONS

E.12 NETWORK SETTINGS

E.13 AUDIT AND ACCOUNTABILITY

E.14 IDENTIFICATION AND AUTHENTICATION / ACCESS CONTROL

E.15 DATA PROTECTION

E.16 USER ACCOUNTS

E.17 INCIDENT MANAGEMENT AND DISASTER RECOVERY

70RFP123QE4000002

October 2023

E.18 SOFTWARE MAINTENANCE

E.19 ENTERPRISE ARCHITECTURE

F. DELIVERABLES 32

F.1 GENERAL

F.2 REQUEST FOR QUOTATION (RFQ)

F.3 PRE-INSTALLATION DELIVERABLES

F.4 POST-INSTALLATION DELIVERABLES

G. PROJECT ADMINISTRATION 36

G.1 WORK AUTHORIZATION

G.2 PERIOD OF PERFORMANCE

G.3 PLACE(s) OF PERFORMANCE………………………………………………………………………………………………………………………………………………………………36

G.4 CONTACTS

G.5 CONTRACTOR ACCESS AND USE OF PREMISES

G.6 SECURITY REQUIREMENTS

G.7 CONTRACTOR SUITABILITY REQUIREMENTS

G.8 GOVERNMENT ACCEPTANCE PERIOD

H. APPLICABLE STANDARDS 40

H.1 GENERAL

H.2 ACCESSIBILITY REQUIREMENTS (SECTION 508)

I ACCOUNTABLE PROPERTY: 43

I.1 DEFINITIONS:

I.2 DELIVERABLES:

I.3 INVOICES:

I.4 PROPERTY ACCOUNTABILITY:

I.5 PHYSICAL INVENTORY:

I.6 PROPERTY DISPOSAL:

I.7 LOST, STOLEN, DAMAGED OR DESTROYED (LDD) PROPERTY:

J. INFORMATION TECHNOLOGY SECURITY 46

J.1 SECURITY CERTIFICATION/ACCREDITATION

J.2 SECURITY REVIEW AND REPORTING

J.3 CONTINUOUS MONITORING

K. HISTORIC PRESERVATION REQUIRENTS

70RFP123QE4000002

October 2023

A. BACKGROUND

A.1 The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal Government.

A.2 The following Statement of Work (SOW) and guidelines have been developed by the Department of Homeland Security (DHS), Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and Government leased spaces. The SOW and regulations were developed with the notion that the security posture of each federally owned building or Government leased space is unique.

B. PURPOSE

B.1 Description of New System

B.1.1 This SOW is for the purchase and installation of a new standalone, Network Video Management System (NVMS), fixed IP cameras, client workstation, and all additional equipment and appurtenances necessary for a fully functional IP Video Surveillance System (VSS). Additionally, this SOW shall include the purchase, installation, and programming of Intrusion Detection System (IDS) within the Child Care Center located at the Rich’s (Midrise) building. The location of this project and installation is at the Sam Nunn Federal Building 100 Alabama Street SW Atlanta, GA 30303 which actually consist of two separate buildings; the Rich’s (Midrise) Building, and the Atlanta Federal Center (AFC), which is the tallest of the two buildings.

B.1.2. The VSS shall monitor vehicle traffic, personnel entry, emergency exits, and the exterior perimeter of the facility. The VSS system shall retain video for a minimum of 30 days ±25% additional storage space for future expansion. Storage shall be calculated at full camera resolution, full frame rate, and low compression.

B.1.3 The IDS or VSS shall monitor the entry/exits of the facility, plus detect, and alert any forced entry. Duress and intrusion system is monitored by the FPS Battle Creek Mega Center (BCMC)

B.1.4 The VSS shall be stand-alone and separate from all other computer networks and do not require internet access.

C. SCOPE

C.1 General

C.1.1 As part of the pre-bid process, FPS may have a site visit and all interested Contractors are invited to attend. The purpose of the site visit is for Contractors to survey the site

70RFP123QE4000002

October 2023 and review the requirements of this SOW. A site visit will be scheduled by the Contracting Officer (CO) or Contract Specialist (CS). All questions relevant to this SOW shall be submitted in writing to the CO/CS. The Contractor shall not make or assume any changes to this SOW without written approval from the CO/CS.

C.1.2 The Contractor shall be responsible for the removal, inventory, packaging for storage and return of all removed equipment to the FPS PM. All currently installed wire, cable, and fiber, shall be completely removed by the Contractor, and properly disposed of.

C.1.3 The existing system shall remain fully functional and operational to the extent possible during the installation of the new VSS/IDS systems. The contractor shall cut over from the existing system to the new systems in stages in order to minimize the number and duration of outages. The Contractor shall submit a system cutover plan in accordance with Section F Deliverables. The cutover plan shall be reviewed and approved in writing by the Contracting Officer’s Representative (COR) or Project Manager (PM).

C.1.4 The Contractor shall provide and install and configure the systems as described and/or shown herein. The systems shall include all connectors, adapters, terminators, and appurtenances to interconnect all equipment. The Contractor shall also supply all cabling and miscellaneous materials necessary to interconnect all equipment installed in accordance with this SOW.

C.1.5 The Contractor shall be required to be familiar with all applicable codes while carrying out the work outlined in this SOW. The Contractor shall complete the work pursuant to this SOW following all applicable codes and standards including, but not limited to:

Occupational Safety and Health Administration (OSHA), Underwriters Laboratories (UL), National Fire Protection Association (NFPA), National Electrical Code (NEC), and any additional federal, state, and local codes and policies.

C.1.6 The Contractor shall furnish all tools and equipment necessary to complete all work outlined in this SOW. By no means shall the Contractor be authorized the use of Government owned property, tools, or equipment, to complete work in accordance with this SOW, unless otherwise specified.

C.1.7 In the event any operational system or utility (e.g., fire, IDS, HVAC) is required to be disabled or turned off, forty-eight (48) hour notice shall be required and approved by the GSA Building Manager, FPS Inspector, and/or FPS PM prior to deactivation.

a) The Contractor, prior to departing for the day, shall ensure all system(s) previously disabled or turned off are functioning properly. A basic functional test shall be required to determine proper functionality of the system(s) and should be reported to the FPS PM.

b) In the event a system is non-functional once enabled or turned on, it shall be the responsibility of the Contractor, at no additional cost to the Government, to restore the system(s) prior to departure from the site.

70RFP123QE4000002

October 2023

c) If the Contractor fails to restore all system(s) before departing, they shall be liable for all costs incurred by the Government to restore system(s) functionality.

C.1.8 All personnel engaged in installation activities pursuant to this SOW shall be licensed by the state, local authority, and/or the city local authority in the required trades or professions which require licensing by such jurisdictions. The type and level of license shall be consistent with requirements of the jurisdictions and work to be performed by this SOW.

C.1.9 It shall be the sole responsibility of the contractor to employ personnel licensed and qualified to carry out all tasks outlined in this SOW. At no time during the installation shall the contractor require Government personnel to complete tasks required to be completed by the contractor as covered by this SOW.

C.1.10 The Contractor shall be solely responsible for ensuring their employees and subcontractors abide by all requirements of the contract. At all times while work is being performed in accordance with this contract, the Contractor shall have a supervisory representative available to answer questions, resolve issues, supervise company employee(s), and subcontractor(s).

C.1.11 The Contractor shall provide a daily access schedule to coordinate installation activities. The schedule shall be submitted as part of the project plan.

C.1.12 The Contractor shall maintain a separate set of drawings, schematics, and wiring diagrams of the VSS/IDS systems to be used for creating as-built drawings. This set shall be accurately kept up to date by the Contractor, noting all changes and additions to the VSS/IDS systems and shall be available for the final inspection walkthrough.

C.1.13 The Contractor may be required to attend installation construction meetings.

C.2 Installation Requirements

C.2.1 The Contractor shall install all system components and appurtenances in accordance with manufacturer’s instructions following all applicable local, state, and federal codes and policies. All appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the Contractor, as well as all adjustments, alignments, programming, and configuration required for a complete and optimal VSS/IDS operating system.

C.2.2 The Contractor shall provide and install a complete IP based VSS system to include, but not limited to, Network Video Management System (NVMS) capable of viewing, recording, playback, and exporting of video, cameras, servers, RAID 6 video storage, workstations, and network routers/switches. Provide and install camera mounts and other appurtenances, premise wiring, and system hardware as required for a complete and fully operational system as specified in this SOW. The installed system shall easily be expandable for future growth.

70RFP123QE4000002

October 2023

C.2.3 The Contractor, for all equipment/device(s) requiring licensing, shall purchase/install license(s) as require by the manufacturer. All licensing fees shall be nonrecurring.

C.2.4 All equipment required to be wall-mounted shall be mounted.

C.2.5 The Contractor shall be responsible to provide the necessary equipment and tools to access all equipment which is not accessible by ladder.

C.2.6 All measurements and equipment locations are approximate and shall be verified by the Contractor for accuracy and installation feasibility. The Government shall not be held responsible for any error or variation in any measurements or other data listed, nor shall the Contractor, because of an error or variation in any measurement listed, be relieved of the responsibility to carry out the requirements in accordance with the true intent and meaning of the specifications without additional cost to the Government.

C.2.7 All ceiling tiles removed to accommodate installation shall be returned at the end of the workday.

C.2.8 Under No Circumstance will the Contractor Reuse Existing Cat 6 Cable or Existing wiring , Contractor MUST use all New Wire and Cabling.

C.2.9 The Contractor shall install and configure cameras in accordance with manufactures recommendations and industry best practices for optimal live view and recording.

C.2.10 The Contractor shall verify all camera views with the FPSCOR/ PM prior to installation.

C.2.11 The Contractor, when removing the existing cameras, cabling, and appurtenances in accordance with this SOW, shall ensure all openings or penetrations are sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse. All openings or penetrations that are designated for reuse shall be sealed and/or patched using a silicone-based sealant to protect against extreme weather exposure. All penetrations that become exposed to weather during installation shall be protected from exposure throughout the installation period.

C.2.12 Weather-proof junction boxes that provide a complete enclosure for contained conductors or cables shall be used. Properly supported LFMC (Liquidtight Flexible Metal Conduit) shall be used to route the cable from junction boxes to cameras.

Suitable bushings, shields, or fittings having smooth, rounded edges shall be used where conductors or cables pass through partitions (e.g., exterior walls) and at other locations where necessary.

C.2.13 The Contractor shall remove and haul debris from the project site daily and dispose of in a proper, acceptable manner in accordance with all federal, state, and local laws and

70RFP123QE4000002

October 2023 regulations, off of the job site property. The debris created from this project shall not be disposed of at the job site, in Government dumpsters, or on Government property.

C.3 Video Storage Requirements

C.3.1 The Contractor shall calculate appropriate storage for all cameras recording at fifteen

(15) frames per second (fps) at the device (Camera, not total system), maximum resolution, and minimum compression. Storage capacity shall be capable of storing video for a minimum of thirty (30) days. The Contractor shall calculate and provide for video storage requirements; the Contractor shall include enough storage for future expansion maintaining the thirty (30) day minimum requirement.

C.3.2 The Contractor shall configure the installed VSS system to function in a Network Domain environment, not as a workgroup.

C.3.3 Windows and the NVMS software shall be configured to use MS Active Directory for authentication.

C.3.4 The Contractor shall not apply power to the NVMS until, at a minimum; the following checks have been completed.

a) All equipment has been installed and connected in accordance with manufacturer’s instructions.

b) All installed and/or new wiring has been tested accordingly (e.g. shorts, opens, continuity).

c) Power supplies have been verified to operate at the correct voltage, phase, and frequency. Satisfaction of the above requirements shall not relieve the Contractor of responsibility for incorrect installation, defective equipment, or collateral damage as a result of Contractor work/equipment.

C.3.5 The Contractor shall ensure all system devices are configured appropriately for time synchronization. All devices shall be configured for time synchronization with the NVMS Server.

C.3.6 The Contractor shall demonstrate to the COR/FPS PM that the completed NVMS installation complies with the contract requirements. Using an approved test procedure, all physical and functional requirements of the project shall be demonstrated and shown. The test procedure shall include techniques and requirements for validating all significant system functions. The Contractor shall provide all test equipment and personnel required for final testing.

C.4 Control Room Monitors

C.4.1 Six (6) new Avigilon R4K32-G2 (or equivalent), 32”LCD 4K UHD monitors shall be installed in conjunction with the new Remote Monitoring Workstations. One of the six new monitors will be installed desktop in the Security Officers’ Control room and

70RFP123QE4000002

October 2023 programmed as a video pull up monitor. No new wall mounted monitors will be installed in the PSO Command Room during this project, instead the PSO will continue to utilize the existing wall mounted monitors in the Control room.

C.5 Networking Equipment

C.5.1 As required per this SOW, the contractor shall purchase, install, and configure all equipment, components, and necessary appurtenances for a complete and appropriately configured Ethernet network connecting all devices of the NVMS.

C.5.2 The Contractor shall configure installed switches with Virtual Local Area Network (VLAN) and appropriate VLAN Routing. VLAN’s to be configured are:

C.5.3 All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the FPS PM.

C.5.4 The Contractor shall install a rack mounted 19-inch combination display, keyboard, and mouse at a usable height. Tripp Lite (or equivalent), KVM Network Station, rack mount with a 19-inch flip-up LED monitor and slide-out shall be installed in the IT room connected to the new NVMS Server for Server for system configuration and administration.

C.5.5 The Contractor shall install six (6) new VSS client workstation. Locations of the workstations shall be coordinated with the FPS/COR/ PM before installation.

C.5.6 The Contractor shall install hardware based, packet filtering firewalls in accordance with the Network Settings specifications noted in Section J.3.

C.5.7 The Contractor shall ensure that all installed monitors that are Wi-Fi-capable have that capability disabled.

C.6 Operating Systems Updates and Service Packs

C.6.1 Operating systems and software applications shall be capable of being updated/patched after delivery. The Contractor shall ensure that all installed server(s) and client workstation(s) Operating System Software (OS), at the time of installation, are current with all security updates/patches, service packs, revisions, and shall provide through the warranty period. The NVMS and all other installed software shall be the current version with all applicable updates and installed in accordance with manufacturers recommendations.

C.6.2 The Contractor shall remove and/or disable all software components that are not required for the operation and maintenance of the camera system; and shall provide documentation on what is removed and/or disabled. The software to be removed and/or

70RFP123QE4000002

October 2023 disabled shall include, but is not limited to: games, device drivers for network devices not delivered, messaging services (e.g., MSN, AOL IM), Servers or clients for unused Internet services, unused networking and communications protocols, unused document processing utilities (Microsoft Word, Excel, PowerPoint, Adobe Acrobat, OpenOffice, etc.).

C.6.3 The Contractor shall provide notification of patches affecting security within a 12-month period as identified in the patch management process.

a) Pre-Contract Award – The Contractor shall provide details on their patch management and update process. Responsibility for installation and update of patches shall be identified.

b) Post-Contract Award - The Contractor shall provide notification of known vulnerabilities affecting Contractor-supplied or required OS, application, and third-party software within 30 days after public disclosure.

C.7 Attachments with Device/Equipment Locations

C.7.1 VSS Locations upgrades & add-ons: See Drawing (Attachment 1-VSS Drawings pages A-F.) The contractor and FPS shall verify all camera installation locations to provide the optimal view prior to any installation. The head end equipment shall be located in the Security Command Room. Attachment VSS – Drawing C indicates camera 58 location which is adjacent to the Security Command Room. The location of an IDF telco closet is adjacent to camera 118 location as indicated on attachment VSS – Drawing E.

a) Two (2) Avigilon NVR5-PRM or Equivalent, 224.0 Terabytes Rack Mounted Server with MS Windows Server 2019 LTSC – 16 Core OS, To be located within the Security Command Room.

b) One (1) Avigilon RM6-WKS-4MN-XX SS or Equivalent, Remote Monitoring Workstation, with software and controls. To be installed within the Security Command Room.

c) Five (5) Avigilon RM6-WKS-2MN-XX or Equivalent, Remote Monitoring Workstations, with software and controls. One to be installed at the Tower’s Security Desk at the main entrance, one to be installed at the Security Desk at the Forsyth Street entrance, one at the Security Desk at the Board Street entrance and one to be installed at the Tower’s loading dock security desk, this monitor shall only display the cameras installed in the loading dock area. One workstation and monitor to be located within the Child Care Center’s Manager office, this workstation would only be able to view the cameras installed within the Child Care Center.

d) Sixty-five (65) each wired: 6 Megapixel (MP), H.264 All-in-One Motorized P-Iris Lens, True Day/Night, Indoor/Outdoor Dome IP Camera, smart noise adaptation and

70RFP123QE4000002

October 2023 processing, Wide Dynamic Range (WDR), and IR LEDs. Install per attachment 1 and reference drawings.

e) Seventeen (17) each wired: 8 MP, H.264 All-in-One Motorized P-Iris Lens, true day/night indoor/outdoor dome IP camera, smart noise adaptation and processing and IR LEDs. Install per attachment A and reference drawings.

f) Six (6) each wired: 3 x 8 MP, 270-degree Multi Sensor, Self-Learning Video Analytics, Adaptive IR, 3D Noise Reduction Filter, IP Camera with WDR. Install per attachment 1 and reference drawings.

g) Eleven (11) each wired: 4 x 8 Megapixel, 360-degree Multi Sensor, H.264 All-in-One, Remote Focus, Self-Learning Video Analytics, Adaptive IR, 3D Noise Reduction Filter.

Install per attachment 1 and reference drawings.

h) Nine (9) each wired: 2 x 5 Megapixel, Dual Head, H.264 All-in-One, Remote Focus, Multi-Sensor capable, Self-Learning Video Analytics, Adaptive IR, 3D Noise Reduction Filter, IP Camera with WDR. Install per attachment 1 and reference drawings.

i) Ten (10) each wired: 6 Megapixel (MP), H.264 All-in-One Motorized P-Iris Lens, True Day/Night, Indoor/Outdoor Bullet IP Camera, smart noise adaptation and processing, Wide Dynamic Range (WDR), and IR LEDs. Install per attachment 1 and reference drawings.

j) One (1) 8 Megapixel (MP), H.264 All-in-One, True Day/Night, Indoor/Outdoor Fisheye 360 Dome IP Camera, smart noise adaptation and processing, Wide Dynamic Range (WDR), and IR LEDs. Install per attachment 1 and reference drawings.

C.7.2 Intrusion Detection System (IDS) upgrade & add-on locations: See Drawing (“Attachment 2-IDS Drawing”) The contractor and FPS shall verify all IDS installation locations to provide the optimal coverage of doors and rooms.

a) Provide & install Three (3) new Dual Tech Passive Infrared (PIR) 360° motion detectors within the Childcare Center at the locations indicated on the IDS reference sheet:

a. Ref. 19 – Capture movements in proximity of the entrance door.

b. Ref. 20 – Capture movements in proximity of intersecting corridors.

c. Ref. 21 – Capture movements in proximity of rear double doors.

b) Provide and install eighteen (18) new door alarm contacts within the Childcare Center at the locations indicated on the IDS Reference:

a. Reference 2 – 18.

c) Provide and install thirteen (13) new glass break sensor within the Childcare Center at the locations indicated on the IDS Reference:

70RFP123QE4000002

October 2023

a. Reference 1, 2, 4 – 7, 9 – 12, and 22

d) Provide & install twenty-one (21) new wired duress switches (buttons), at the locations within the Childcare Center indicated on the IDS reference sheet:

a. Reference 1, 2, 4 -7, 9 – 12 and 22 through 32.

e) Provide & install one (1) digital alarm system control panel (See Note 1 below). To replace the existing IDS panel. The existing IDS system is a BOSCH/Radionics D9112 and must be replaced with a newer Bosch model or see note 1 below for alternate manufacturers. The new Control Panel shall be capable of communicating with the monitoring station through Public Telephone (PSTN), IP Network (Voip), and Cellular back-up.

f) The Contractor shall provide Battle Creek Mega Center (BCMC), with a complete zone list with alpha descriptions, as outlined in the Mega Center Alarm Requirements (MAR) a paper document. The MAR document shall be filled out by the Contractor and submitted to the BCMC 48 hours before scheduled testing of equipment. The MAR document will be provided with the Notice to Proceed. The Contractor shall be at the facility during testing with BCMC.

1 Note 1: Per the Battle Creek Mega Center’s (BCMC) MegaCenter Alarm Requirements (MAR) document, page 1, paragraph 3: To better serve our customers, FPS maintains a standard equipment list that must be adhered to by all of our monitored clients. The MegaCenter will accept UL commercially listed panels from the following manufacturers: Honeywell (Ademco), Bosch (Radionics), or Digital Monitoring Products (DMP). All alarm systems must have a zone assigned to the alarm system Panel Tamper. Proprietary panels will not be accepted.

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND

REQUIREMENTS

D.1 Network Video Management System

D.1.1 The NVMS shall support these essential software capabilities:

a) Live video monitoring

b) Recording of video

c) Playback of video from local or remote location(s)

d) Integral alarm/event management

e) Video export

D.1.2 The NVMS shall store/archive video using one of the following techniques:

a) Internal Disk Storage

b) Direct Attached Storage

c) Storage Area Network

70RFP123QE4000002

October 2023

D.1.3 The NVMS shall include image storage with configurable resolutions and frame rates.

D.1.4 The NVMS shall be compatible with, but not limited to: H.264, MPEG4, and MJPEG video compression formats.

D.1.5 The NVMS shall be capable of system fail-over and redundancy options.

D.1.6 NVMS System Architecture

a) The NVMS shall operate on a TCP/IP managed digital network.

b) The system software shall operate in a Client/Server configuration across a Local

Area Network (LAN).

c) Streams live and recorded video up to 60 frames per second.

d) Support prioritizing streaming at 30 frames per second on 4K (8MP) cameras.

e) Streams live and recorded video from cameras up to a resolution of 7K (30 MP) —

6720 x 4488.

f) Decompresses H.264 video through the client graphics card to help leverage the client’s total processing power.

g) Scalable to support up to 100 servers and/or 10,000 cameras per site.

h) All recorded video and audio is digitally signed using 256-bit encryption so video can be authenticated for evidentiary purposes.

i) Secure video and audio data by securely transmitting all command and control data via TCP/IP using cryptographic keys based on SSL to prevent eavesdropping or tampering.

j) External system alarms can be pre-selected and configured to be monitored and trigger event driven video operations.

k) Video and audio recording can be defined by a recording schedule assigned to each video source.

l) Recording schedules are based on event types that trigger video recording over a time period each day per week.

m) Video recording can also occur manually by user triggered recording.

n) Alarms and rules can be triggered by self-learning video analytics based events

o) Each recorded event includes a pre-event and post-event recording option to provide context for a given situation.

p) Reference frame recording is an option when no events are detected.

q) Motion detection is provided for each individual video source with adjustable sensitivity, threshold and detection zones.

r) Primary and secondary video streams from each H.264 video source are recorded and maintained for a set amount of time before the primary stream is discarded as a means of increasing record time.

s) The maximum recorded video retention time can be set for each video source.

t) The Video Analytics Activity overlay displays a color-coded bounding box around moving objects categorized as humans or vehicles.

u) Configure the ability to display analytics activity for individual cameras or for the system.

70RFP123QE4000002

October 2023

v) The ability to stream video and audio is limited only by the system hardware capabilities.

w) The application window display can be shared with other users for collaborative investigations while viewing both live and recorded video.

x) Live and recorded video and audio can be streamed simultaneously on the same monitor.

y) Use patented High Definition Stream Management HDSM™ software technology to efficiently compress and preserve image quality while intelligently managing HD image transmission throughout the system.

z) Operating System shall be certified to work by the Video Management Software’s manufacturer and be one of the following: Windows 10 or newer and Windows 12 or newer.

aa) Support recording and management of video and audio sources through the use of industry standard drivers. These drivers shall include: ONVIF Profile S, Publicly Published API.

bb) Support the following video analytic event types when captured by supported cameras: Objects in area, object loitering’ objects crossing defined line, object appears or enters area, object not present in area, objects enter area, objects leave area, object stops in area, anticipated direction of travel is violated, scene dramatically changes in an unexpected fashion.

cc) Support the ability to export media and provide the following options.

dd) Export recorded video in the following formats: Native (AVE), JPEG, PNG, TIFF, AVI, Print. Export recorded audio in the following formats: WAV, Native (AVE), AVI. Export a still frame of video as displayed in the video preview area: Native

(AVE), JPEG, PNG, TIFF.

ee) Native (AVE) format exports shall:

ff) Digitally sign recorded video and audio using 256-bit encryption so video can be authenticated for evidentiary purposes.

gg) Be able to export video from one or multiple camera streams simultaneously.

hh) Support exporting multiple video segments from different spans of time.

ii) Support reviewing of exported or backed-up video and audio in a dedicated player.

jj) Support playback of exported clips in synchronized sequential time.

kk) Support playback of multiple clips in continuous, sequential order.

ll) Support exporting of video in lower frame-rates than originally recorded.

mm) Support exporting of a designated area from the camera’s recorded field of view.

nn) Support re-export into Native or other supported formats.

oo) Provide a record of the video source properties, including but not limited to:

Camera model, Firmware version, Location, MAC address, Serial number, Resolution.

D.1.7 All components/equipment licensing fees for the newly installed NVMS shall be nonrecurring.

70RFP123QE4000002

October 2023

D.2 Minimum Server and Workstation Requirements

Network Video Management Server Minimum Requirements

CPU 1 x Intel 16 – Core Xeon (or equivalent) OS Windows Server 2019 LTSC – 16 Core or newer Memory 6 x 8 GB DDR4 OS Hard Drive 2 x 240 GB M.2 SSD Drives, RAID 1 Network Interface 4 x 1 GbE RJ-45 Port Drives RAID 6 up to 12 x 3.5”, Hot Swappable Recording Storage Configuration

Up to 288 TB Raw, 224 TB Effective (RAID 60)

Multimedia Storage Requirements

General • Multimedia storage shall be dedicated for archiving

• Archiving shall be physically separated from OS/DB drives

• OS/DB and Archive drive may be housed in the same chassis

• Archive drives RAID 6 configuration

Total Storage Capacity • Shall be calculated by the Contractor based on the requirements of the SOW.

Workstation Minimum Requirements

CPU Intel Core i3 1 (10th Gen) or higher OS Windows 10 IoT Enterprise (2019) or higher

RAM 32 GB DDR4

OS Hard Drive M.2 256 GB PCIe NVMe Class 40 SSD Network Interface 2 x GbE Ethernet RJ-45 (or equivalent) 4K Capable Support 4K Stream Warranty 3 Years or better

D.3 IP Network Video Camera Minimum Requirements

D.3.1 At a minimum, equal or better than Avigilon Exterior/Interior 2 x 5 MP Dual

Head IP Camera:

a) Lens 3.35 – 7.0 mm, F/1.93 Remote Focus and Zoom

b) Multi-stream H.264, Multi-stream H.265, Motion JPEG;

c) 2 x 5 MegaPixel Image Sensor

70RFP123QE4000002

October 2023

d) Content adaptive IR technology up to 30 m (100ft)

e) Self learning Video Analytic on both sensor

f) Tamper and Vandal Resistant

g) 3D Noise Reduction Filter

h) Environmental rating IP66 and IP67 Impact rating IK10

i) Image Compression: H.264 HDSM Smart codec or H.265 HDSM Smart Codec or Motion JPEG

D.3.2 At a minimum, equal or better than Avigilon 180/270/360 degree Exterior/Interior IP Multi Sensors Camera:

a) 180/270/360 degree, 8MP per sensor resolution, Wide Dynamic Range

b) 3 or 4 sensors (cameras) within the housing

c) Lens: 2.8mm f1.2-103° , 4mm f1.6-72°, Remote Focus; 4mm f1.8-101°, 5.2mm f1.8-70° Remote Focus

d) Self-learning Video Analytics on all sensors

e) Content adaptive IR technology up to 30m (100ft)

f) Environmental rated IP66 and IP67, Impact IK10

g) Vandal and shatter proof housing/clear dome

h) 3D Noise Reduction Filter

i) Image Compression: H.264 HDSM Smart codec or H.265 HDSM Smart codec or

Motion JPEG PoE 802.3af, Class 3, 24V AC

D.3.3 At a minimum, equal or better than Avigilon Interior Fixed 6 MP Dome/Bullet IP Camera: The Contractor shall determine the necessary lens based on the required field of view and lighting for each camera.

a) Wide Dynamic Range with Remote Focus and Zoom

c) Content adaptive IR technology up to 30 m (100ft)

d) Self learning Video Analytic on both sensor

e) Environmental rating IP66 and IP67 Impact rating IK10

f) Tamper and Vandal Resistant

g) 3D Noise Reduction Filter

h) ONVIF Compliant Profile S, Profile T and Profile G

i) Image Compression: H.264 HDSM Smart codec or H.265 HDSM Smart Codec or Motion JPEG

D.3.4 At a minimum, equal or better than Avigilon Interior Fixed 8 MP Dome/ IP Camera: The Contractor shall determine the necessary lens based on the required field of view and lighting for each camera.

a) Wide Dynamic Range with Remote Focus and Zoom

c) Content adaptive IR technology up to 30 m (100ft)

d) Self learning Video Analytic on both sensor

e) Environmental rating IP66 and IP67 Impact rating IK10

70RFP123QE4000002

October 2023

f) Tamper and Vandal Resistant

g) 3D Noise Reduction Filter

h) ONVIF Compliant Profile S, Profile T and Profile G

i) Image Compression: H.264 HDSM Smart codec or H.265 HDSM Smart Codec or Motion JPEG

D.4 Network Managed Switch

a) Physical Aspects

(1) 24 auto-sensing RJ45 10/100/1000 ports; Layer 3 managed

(2) 4 SFP ports 100/1000

(3) Serial DB9 RS-232 console port

(4) Rack Mountable

b) Power over Ethernet (PoE)

(1) 24 PoE+ ports

(2) IEEE 802.3at (up to 30 Watts/port)

D.5 Intrusion Detection System (IDS) Minimum Requirements

D.5.1 The IDS Control Panel should be equal or better than Bosch D9412GV4 Control

Panel and at a minimum shall have the following salient characteristics:

a) Flash updateable

b) Programmable locally or remotely using Remote Programming Software (RPS).

c) Up to 16 supervised door access-points and/or keypads

d) Conettix IP-based communication option

e) Communicator which provides Public Telephone (PSTN), IP Network or Cellular

f) Up to 246 Individually identified Points that could partition into 32 areas.

g) Scheduled events; arm, disarm, bypass and unbypass points.

h) Input options; Normally-Closed, Normally-Open, hardwired and addressed

i) Event log storage of up to 1,000 local and transmitted events.

D.5.2 The IDS keypad shall be equal or better than the Bosch D1260 LCD Keypad and at a minimum shall have the following salient characteristics:

a) 4 Lines x 20 character, Backlit Liquid Crystal Display (LCD)

b) An Illuminated Keypad

c) Eight distinct warning tones

d) Adjustable Volume

e) Compatible with G series control panels such as D9412G and B9512G

f) Events displayed in order of priority

g) View systems events/user activity through keypad

70RFP123QE4000002

October 2023

h) Systems event shown in plain English

i) AC power LED and Armed LED

j) Built-in diagnostics for easy service

D.5.3 At a minimum, the IDS alarm Glass Break Detector shall have the following salient characteristics:

a) 25’ maximum omnidirectional range

b) Covers all glass types

c) Ceiling mountable

d) Hard wired connections

e) Compatible with alarm panel

D.5.4 At a minimum, the IDS alarm door contact shall have the following salient

a) Recess/flush

b) Magnetic contact

c) Hard wired connections

d) Compatible with alarm panel

D.5.5 At a minimum, the IDS Panoramic PIR Detector shall have the following salient

a) Ceiling Mountable, Surface/Semi-flush

b) Coverage of at least 360-degree x 24 feet

c) Hard wired connections

d) Compatible with alarm

D.6 Equipment List

D.6.1 VSS Equipment List at a minimum:

Indoor/Outdoor IP 65 Wired 6MP IR Dome Style IP Camera (such as Avigilon H5 or equivalent)

17 Wired 8MP IR Dome Style IP Camera (such as Avilgilon H5 or equivalent) 11 Wired 360 degree Multisensor 4 x 8MP IR Dome Style IP Camera (such as Avigilon

H4 or equivalent) 6 Wired 270 degree 3 x 8MP IR Dome Style IP Camera (such as Avigilon H4 or equivalent) 9 Wired 2 x 5MP IR Dome Style IP Dual Head Camera (such as Avigilon H5 or equivalent) 10 Wired 6MP IR Fixed Bullet IP Camera (such as Avigilon H5 or equivalent)

70RFP123QE4000002

October 2023

1 Wired 8MP IR Fixed Fisheye 360 Camera (such as Avigilon H5 or equivalent) Camera Mounts – as needed Remote Monitoring Workstation 1 Avigilon RM6-WKS-4MN-XX Remote Workstation (or equivalent) 5 Avigilon RM6-WKS-2MN-XX Remote Workstation, with Monitor Capable w/software (or equivalent) 6 32” 4K Workstation Monitors Server / Switches/ Racks/ Accessories 2 Avigilon NVR5 PRM 224 TB Windows Server 2019 (or equivalent) 1 Rack Mounted” 19-inch combination display, keyboard, and mouse at a usable height,” Tripp Lite KVM Network Station, Rack Mount with 19” flip-up LED monitor & slide-out” or Equivalent

For all the below listed devices the Contractor shall calculate the number of devices necessary for a complete a fully operational VSS as specified in this

SOW

As Needed 48 Port Cat 6a Patch Panel (such as Belkin or equivalent)

119 CCV Control Software Page (such as Avigilon or equivalent) As

Needed Router 10GB, 24 ports rack-mountable (such as Brocade CER 2024C or equivalent) As

Needed 32 Port PoE Switch, 7450 -32zp rack mountable managed switch (such as Brocade ICX or equivalent)

As Needed

SRT8KLT APC Smart - UPS SRT 8000VA with 208/240V to 120V Step-down, rack mountable (or equivalent)

As Needed

SRT 192BP2 Dell EMC Smart-UPS SRT 192V 8kVA and 10kVA Battery Pack – 192 V DC Sealed Lead Acid (SLA) or equivalent

Wiring RG45 connectors (2 per each camera, NVR, monitor + 7 extra) – AS NEEDED Patch Cable, Fiber Optic and Cat 6a Plenum Rated – AS NEEDED Infrastructure, housing, cables, Structured Wiring System – AS NEEDED

25000 ft Cat 6 a Cable Shielded Twisted Pair 6000 ft Fiber Optic Cable

D.6.2 IDS Equipment List at a minimum:

Intrusion Detection System 1 Control Panel (246 points minimum) with enclosure (such as DMP

XR150, BOSCH B9412GV4, or Honeywell VISTA – must be one of these three manufacturers – Existing is BOSCH)

13 Wired glass break sensors.

17 Wired door contacts 3 Wired 360 Degree Ceiling Mounted

Duress Alarm System 22 Replace and install new duress alarm switches (Buttons)

Wired Digital Alpha Keypads (such as Bosch D1260) this depends on the system replacing existing – currently BOSCH

Wiring

6600 IDS 18-4 (AWG shield) AS NEEDED – THIS IS A SUGGESTED

AMOUNT ONLY

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 Design Standards

E.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the FPS Technical POC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations as a result of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

E.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, and HVAC and power requirements for the proposed Network Video Management System (NVMS).

E.1.3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components in system design.

E.1.4 Backup Power Requirements –All CCV electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). It is expected that all equipment necessary for continuous live viewing, recording, and archiving CCV video will be uninterrupted during a power outage. The UPS shall be sized to provide at least four (4) hours0F

1 battery back-up in the event the primary power source is interrupted.

The Contractor shall include load calculations with their bid proposal.

1 ISC RMP Criteria 70 - Provide uninterruptible emergency power to essential electronic security systems for a minimum of four hours.

70RFP123QE4000002

October 2023

E.1.5 IDS shall be provided and Installed with an Auxiliary Power Supply (similar to Altronix AL400ULM or equal) inside an appropriate enclosure. Install auxiliary power supply adjacent to the control panel connected by EMT. Provide direct connection to AC power source (hardwire). Utilize this power supply for detection devices and keypads power on non-polling loop powered devices. No exposed and/or visible wired are permitted. The contractor shall provide the IDS Auxiliary Power Supply the require batteries based on load calculations.

E.1.6 Provide and Install 12-volt, 18 amp-hour batteries Yuasa NP1812BFR; or equal) into the

IDS control panel. Battery quantity shall be selected by the contractor based on load calculations to supply system and component power for four (4) hours.

E.1.7 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams representing planned device terminations to and between system equipment and components.

E.1.8 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components.

E.2 Materials and Equipment

E.2.1 Items of the same type shall be products of a single manufacturer. All material, software and hardware, shall be new, the most current version, and presently being produced.

E.2.2 The Contractor shall provide enclosures as necessary for equipment not mounted in racks or supplied with an appropriate housing.

a) Interior: Enclosures to house equipment in an interior environment shall meet the requirements of NEMA 250 Type 12.

b) Exterior (Exposed-to-Weather): Enclosures to house equipment in an outdoor environment shall meet the requirements of NEMA 250 Type 4X.

E.2.3 All external camera housings shall be minimum IP66/NEMA4X rated for protection against rain, dust, and snow.

E.2.4 All camera housings shall be a minimum IK-10 Impact-Resistant for vandalism.

E.2.5 Camera housings shall match the color and architecture of the building, equal to or greater than the existing camera housings. Coloring camera housings shall not void the camera and housing manufacturer’s warranty. The camera color should be a baked enamel finish that does not require maintenance, should match the color of the limestone and not be installed over decorative features of the building Before camera housings are painted the color shall be approved in writing by the (GSA) General Service Administration Project Manager.

E.3 Electrical and Cabling Requirements

E.3.1 Wires, cables, and fiber shall meet applicable requirements of NFPA 70 and UL listings for type and method of installation.

E.3.2 Materials, equipment, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and requirements of NFPA 70.

E.3.3 All wire, cable runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

E.3.4 All wire, cable runs shall be installed inside conduit and sized according to NFPA 70 for fill requirements. As an alternative, if allowed by applicable codes and/or regulations, wire, cable may be installed utilizing wire molding, cable trays, and inner duct. Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations, in the advent wire, cable, and fiber runs are installed above a suspended ceiling. No wire, cable, or fiber shall be left unsupported or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

E.3.5 All wire, cable and Fiber shall not contain splices between equipment termination points.

E.3.6 All wire, cable and Fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

E.3.7 There shall be no crimp type fittings utilized during cable/wire termination unless specified by the equipment manufacturer.

E.3.8 All equipment connected to AC power shall be protected from surges as described in

IEEE C62.41 and IEEE C62.43. Fuses shall not be used for surge protection.

E.3.9 All cable and fiber installed in conduit shall include a pull string for future use. If an existing pull string is used in any location, it shall be replaced with a new one.

E.3.10 All cable installed in support of this SOW shall be tested and test reports included in the O&M manual.

E.3.11 All Ethernet network cabling shall be CAT 6/7 shielded cable or multimode fiber optic cable, UL listed for its intended use (e.g. indoor, outdoor, plenum).

E.3.12 All CAT 6/7 cabling shall be installed in accordance with ANSI/TIA/EIA-568-B

Commercial Building Telecommunications Cabling Standard. All cable terminations shall conform to ANSI/TIA/EIA-568-B standards. A few key areas of concern, but not all inclusive are:

70RFP123QE4000002

October 2023

a) Pair twists shall be maintained as close as possible to the point of termination.

b) Strip back only as much jacket as is required to terminate individual pairs.

c) All four pairs shall be terminated.

d) Pin/Pair assignments shall follow the T568B configuration.

E.3.13 All CAT 6/7 cabling shall be tested to certify that the cable conforms to

ANSI/TIA/EIA-568-B standards. The test device shall provide an electronic copy of the test results. Test results shall be printed and included in the O&M manual.

E.4 Final Inspection and Acceptance

E.4.1 Upon completion of the installation the Contractor shall perform a Contractor

Verification Test (CVT) in accordance with approved Perform Performance Verification Test (PVT) procedures to ensure installed system is fully operational. A copy of the test results shall be available for review by the FPS PM prior to commencing PVT testing and final inspection.

E.4.2 The Contractor shall submit, at a minimum five business days in advance of PVT testing, a proposed testing plan to the COR/FPS PM. The plan shall include test procedures, actions, and expected results demonstrating system functionality and compliance with this SOW. The test plan shall also include means for documenting test results. The test plan shall be approved by the FPS PM prior to the Contractor requesting Final Inspection and PVT testing.

E.4.3 The Contractor shall notify the COR/FPS PM in writing when requesting a date and time for Final Inspection and PVT testing. Request must be received, at a minimum, five business days in advance.

E.4.4 The Contractor shall provide all equipment and manpower necessary to perform Final

Inspection and PVT testing.

E.4.5 Final Inspection Minimum Requirements

a) Review of Redline drawings.

b) Walk-through and inspection of all installed components and workmanship.

c) Perform Performance Verification Test (PVT) in accordance with approved test plan.

d) All equipment default or contractor entered user IDs and passwords shall be relinquished by the Contractor to the Government.

e) In the event a deficiency is found, or a test fails the Contractor shall have personnel available onsite to resolve the issue so inspection and testing may continue. Once the Contractor deems the issue has been resolved, a re-inspection or re-test shall occur.

f) The Final Inspection and PVT testing shall be performed during a single site visit.

70RFP123QE4000002

October 2023

g) Installation Acceptance by the Government shall be given only after the satisfactory completion of the Final Inspection, PVT testing, training, and receipt of all required deliverables outlined in this SOW.

E.5 Cleanliness, Protection, and Patching

E.5.1 The Contractor shall take necessary precautions to avoid damage to existing items that will remain in place, be reused, or remain the property of the Government. It shall be the sole responsibility of the Contractor to repair or replace damaged items, at no cost to the Government. Contractor shall notify COR/FPS PM of any damage immediately.

E.5.2 The Contractor shall not disturb existing construction beyond the extent indicated or necessary to fulfill installation requirements. In the event excessive damage is caused it shall be the sole responsibility of the Contractor to repair damage, at no cost to the Government. Contractor shall notify COR/FPS PM of any damage immediately.

E.5.3 The Contractor shall provide protective methods to control accumulation and migration of dirt and dust in and around all work areas. Removal of dirt, dust, and debris shall be completed daily and in accordance with all applicable federal, state, and local laws and regulation.

E.5.4 It shall be the sole responsibility of the Contractor to protect all existing building systems and utilities, to include, but not limited to, equipment, cabling, and appurtenances (e.g. fire, CCTV, IDS, HVAC) during demolition, installation and construction. If any system, service, utilities, equipment, or cabling are damaged due to installation construction the Contractor shall repair damage at no cost to the Government.

E.5.5 If necessary, the Contractor shall be responsible for moving furniture and/or equipment to protect it from damage during installation.