70RFP419QE6000003_Amendment_0001.pdf

(x)

70RFP419QE6000003

x x copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted ; or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGEMENT TO BE RECEIVED AT

THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted , such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

x

Grand Prairie TX 75050-1412

OPO/FPS/EACCG/R6

1901 North Highway 360, Ste. 500 Ofc of Procurement Operations - FPS U.S. Dept. of Homeland Security NPPD/FPS/East CCG/Region 6

Grand Prairie TX 75050-1412 1901 North Highway 360, Ste. 500

OPO/FPS/EACCG/R6

Office of Procurement Operations Federal Protective Service U.S. Dept. of Homeland Security NPPD/FPS/East CCG/Region 6

03/11/20190001

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS. IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

12. ACCOUNTING AND APPROPRIATION DATA (If required) is not extended.is extended, Items 8 and 15, and returning

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended , by one of the following methods: (a) By completing

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

FACILITY CODE CODE

10B. DATED (SEE ITEM 13)

10A. MODIFICATION OF CONTRACT/ORDER NO.

9B. DATED (SEE ITEM 11)

9A. AMENDMENT OF SOLICITATION NO.

CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

7. ADMINISTERED BY (If other than Item 6)CODE 6. ISSUED BY

PAGE OF PAGES

4. REQUISITION/PURCHASE REQ. NO.3. EFFECTIVE DATE2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO. (If applicable)

1. CONTRACT ID CODE

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

02/12/2019

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority) appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

E. IMPORTANT: Contractor is not, is required to sign this document and return __________________ copies to the issuing office.

ORDER NO. IN ITEM 10A.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

The purpose of this amendment is to provide responses to the questions submitted for this

Request for Quote.

A. The attached responses are hereby provided in response to the questions received.

B. Delete the Statement of Work and drawing in its entirety and replace with the attached revised Statement of Work and drawing. All changes have been identified with a right hand vertical line marking.

C. The RFQ closing date remains unchanged.

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)15A. NAME AND TITLE OF SIGNER (Type or print)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA 15B. CONTRACTOR/OFFEROR 16C. DATE SIGNED

(Signature of person authorized to sign) (Signature of Contracting Officer)

STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

NSN 7540-01-152-8070

Previous edition unusable

Except as provided herein, all terms and conditions of the document referenced in Item 9 A or 10A, as heretofore changed, remains unchanged and in full force and effect .

RFQ: 70RFP419QE6000003

Question # Questions RFQ Reference Response

1 Can you confirm if FCL is needed? SOW paragraph G.8 FCL is not needed; HSPD-12 card for unescorted access is required.

2 Will not attending the site visit preclude one from being able to bid? RFQ pg. 55, Addendum to 52.212-1, paragraph 2 No 3 Will you provide drawings (i.e. pictures and/or floor plans) as to assist with the design process? N/A No, no additonal drawings are available.

To my understanding the project is a mixture between existing devices to remain and new devices. What I need some clarity on is this:

Is the intent to stay with Picture Perfect, or are you open to replacing the Picture Perfect? SOW B.2 Picture Perfect is no longer being supported. See attached Amended Statement of Work.

5 Will the 7 new NEMA eclosures for the cameras be replacing existing enclosures? SOW B.2.3 Yes.

5a If not, will the camera wire need to be replaced to reroute through new NEMA enclosures? SOW B.2.3 See response to question 5 6 If camera wiring will need to be replaced, what the type of cameras - IP or Analog? SOW B.2.3 Cameras are IP Avigilon.

RFQ#: 70RFP419QE6000003

Amendment 0001

FOR OFFICIAL USE ONLY (FOUO)

For Official Use Only (FOUO)

Federal Protective Service U.S. Department of Homeland Security

STATEMENT OF WORK

for

Installation of Intrusion Detection (IDS) System

7 March 2019

United States Marine Corps Administrative Center 2306 East Bannister Road Kansas City, MO 64131

Building Number: MO0039

STATEMENT OF WORK

TABLE OF CONTENTS

/ For Official Use Only (FOUO)

A. BACKGROUND

B. PURPOSE

C. SCOPE

C.1 GENERAL

C.2 INSTALLATION REQUIREMENTS

C.3 THIS BULLET DOES NOT APPLY TO THIS PROJECT

C.4 THIS BULLET DOES NOT APPLY TO THIS PROJECT. ............................................................ ERROR! BOOKMARK NOT DEFINED.

C.5 NETWORKING EQUIPMENT

C.6 OPERATING SYSTEMS UPDATES AND SERVICE PACKS

C.7 THIS BULLET DOES NOT APPLY TO THIS PROJECT

C.8 Appendicies

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 INTRUSION DETECTION SYSTEM

D.4 MEGACENTER COORDINATION

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 DESIGN STANDARDS

E.2 MATERIALS AND EQUIPMENT

E.3 ELECTRICAL AND CABLING REQUIREMENTS

E.4 FINAL INSPECTION AND ACCEPTANCE

E.5 CLEANLINESS, PROTECTION, AND PATCHING

E.6 WARRANTY AND MAINTENANCE

E.7 SAFETY AND HEALTH

E.8 QUALITY CONTROL PLAN

E.9 TRAINING

E.10 CONFIGURATION MANAGEMENT – ONLY APPLICABLE IF IDS NETWORK ENABLED. .......... ERROR! BOOKMARK NOT DEFINED.

E.11 COMPONENT/DEVICE CONFIGURATIONS – ONLY APPLICABLE IF IDS NETWORK ENABLED. ............. ERROR! BOOKMARK NOT

DEFINED.

E.12 NETWORK SETTINGS – ONLY APPLICABLE IF IDS NETWORK ENABLED............................. ERROR! BOOKMARK NOT DEFINED.

E.13 WIRELESS NETWORK SECURITY

E.14 AUDIT AND ACCOUNTABILITY

E.15 IDENTIFICATION AND AUTHENTICATION / ACCESS CONTROL

E.16 DATA PROTECTION

E.17 USER ACCOUNTS

E.18 INCIDENT MANAGEMENT AND DISASTER RECOVERY

E.19 SOFTWARE MAINTENANCE

E.20 ENTERPRISE ARCHITECTURE

F. DELIVERABLES

F.1 GENERAL

F.2 REQUEST FOR QUOTATION (RFQ)

F.3 PRE-INSTALLATION DELIVERABLES

F.4 POST-INSTALLATION DELIVERABLES

G. PROJECT ADMINISTRATION

G.1 WORK AUTHORIZATION

G.2 PERIOD OF PERFORMANCE

G.4 CONTACTS

G.5 SPECIAL SCHEDULING REQUIREMENTS

G.6 CONTRACTOR ACCESS AND USE OF PREMISES

G.7 SECURITY REQUIREMENTS

G.8 CONTRACTOR SUITABILITY REQUIREMENTS

H. APPLICABLE STANDARDS

H.1 GENERAL

H.2 ACCESSIBILITY REQUIREMENTS (SECTION 508)

I ACCOUNTABLE PROPERTY:

I.1 DEFINITIONS:

I.2 DELIVERABLES:

I.3 INVOICES:

I.4 PROPERTY ACCOUNTABILITY:

I.5 PHYSICAL INVENTORY: ................................................................................................. ERROR! BOOKMARK NOT DEFINED.

I.6 PROPERTY DISPOSAL:

I.7 LOST, STOLEN, DAMAGED OR DESTROYED (LDD) PROPERTY: ....................................... ERROR! BOOKMARK NOT DEFINED.

J. INFORMATION TECHNOLOGY SECURITY

J.1 SECURITY CERTIFICATION/ACCREDITATION

J.2 SECURITY REVIEW AND REPORTING

J.3 CONTINUOUS MONITORING

A. BACKGROUND

A.1 The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal Government.

A.2 The following Statement of Work (SOW) and guidelines have been developed by the

Department of Homeland Security (DHS), National Protection and Programs Directorate (NPPD), Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and Government leased spaces. The SOW and regulations were developed with the notion that the security posture of each federally owned building or Government leased space is unique.

B. PURPOSE

B.1 Description of Existing System

Currently, the Intrustion Detection System is based off of the Picture Perfect 4.6 (Casi) access control system. There is no alarm panel, all alarms are generated by the access control system which has contacts on all doors but a few sets, all roll up doors and limited glass breaks. The glass breaks are functioning; however, due to there age they have passed the standard lifecycle limit and have to be replaced. There are seven sets of double doors with card reader access and all roll up doors have door contacts. The emergency exit doors have approximately 75% door contacts; however, not all doors with door contacts generate alarms at the access control monitor. The system was installed by the previous tenant over ten years previously the C & C group, which currently has a maintenance contract with the current tenant. The system is monitored locally in the security console which has a seven day a week by 24 hours a day protective security officer (PSO). The system is not monitored by the Battle Creek MegaCenter (BCMC). This is a hard wired installation consisting of surface mount door contacts, roll up door contacts and outdated glass breaks. This system was monitored previously by the Battle Creek MegaCenter (BCMC); however, it has not been monitored offsite for several years. This monitoring was via POTS landline.

B.2 Description of New System

Intrusion Detection System:

The proposed new system would be a comination of reuse of existing components and installation of new components where needed to meet the Interagency Security Committee, Facility Security Level 3 standards. MO0039 was a FSL 3 level facility during the last assessement conducted in 2017. The new system would have the capability for monitoring offsite once the POTS line is reestablished with a completed IDS installation.

The following equipment is to be provided and installed.

1. BCMC accepted alarm panel & enclosure with tamper alarm switch,

2. Six (6) 12 volt, 18 amp hour batteries,

3. Additional enclosure for backup batteries,

4. Four (4) IDS Keypads,

5. Two (2) tamper alarms, one for each enclosure,

6. Two (2) locks, one for each enclosure,

7. Replace/Install thirty-five (35) hard wired magnetic door contacts on doors (17 single and 9 Double doors) (one contact per door),

8. Install nine (9) overhead door contacts on roll up doors.

9. Replace twenty-one (21) obsolete wired dual technology glass break detectors,

10. 18-4 Plenum rated alarm wiring and conduit as required.

B.2.1 The IDS main system components will reside in the security control room. The proposed work would consist of replacing all glass break detectors, installing new door contacts, installing IDS wiring and contacts on eight (8) doors that currently do not have door contacts, installing IDS alarm panel, and connecting the new alarm panel to the POTS line and submitting the Mega Center Alarm Report to BattleCreek MegaCenter for programming.

At completion of project all door, glass break and panel tamper alarms should be received at BCMC. The proposed work will remove nonfunctioning existing perimeter alarm equipment for disposal by the selected vendor. The price for removing and disposing of components will be included in proposed bid.

B.2.2. The IDS system shall be used to monitor the perimeter of the facility via door contacts and glassbreak detectors. Monitoring will be done by the FPS BCMC. The BCMC is able to monitor Bosch/Radionics, Honeywell/Ademco and DMP alarm systems via internet protocol (IP) or via dial up analog phone lines. This installation will be performed using a dial up phone line. The selected system must meet the requirements put forth in Appendix C.7.2, BCMC Installation Standards. For this installation, the tenant agency must provide the dial up phone line module, and will be using a dial up phone line connection. Vendor shall be a licensed distributer and installer of the selected system they are installing. The MegaCenter Alarm Requirement (MAR Document) shall be filled out and submitted to the BCMC 72 hours before scheduled testing of equipment. The MAR document will be provided with the Notice to Proceed.

Contractor shall be at the facility during testing with PMC. The MAR is contained in Appendix C.7.3.

B.2.3 Video Surveillance System

Install/Replace seven (7) Weatherproof NEMA Enclosure w/Cooling Fans and power, size: 17x14x6 Vented ABS, on selected poles (see drawing) where existing IP Avigilon cameras are located to protect the electricity to the camera and the power supplies.

C. SCOPE

C.1 General

C.1.1 As part of the pre-bid process, FPS may have a site visit and all interested Contractors are invited to attend. The purpose of the site visit is for Contractors to survey the site and review the requirements of this SOW. A site visit will be scheduled by the COR/FPS PM. All questions relevant to this SOW shall be submitted in writing to the COR/FPS PM. The Contractor shall not make or assume any changes to this SOW without written approval from the COR/FPS PM.

C.1.2 The Contractor will first perform system familiarization and examination to develop a methodology for adding required components and replacing non-functioning or obsolete components. The contractor will only remove currently installed wire and cable that is in nonfunctioning.

C.1.3 The existing system shall remain fully functional and operational to the extent possible during the installation of the new components. The Contractor shall submit a system cutover plan in accordance with Section F Deliverables. The cutover plan shall be reviewed and approved in writing by the FPS PM. If no cutover is needed due to adding new functionality in stages without degradation of current capabilies then the contractor will make such known and not have to create a cutover plan.

C.1.4 The Contractor shall provide and install and configure the system as described and/or shown herein. The system shall include all connectors, adapters, terminators, and appurtenances to interconnect all equipment. The Contractor shall also supply all cabling and miscellaneous materials necessary to interconnect all equipment installed in accordance with this SOW.

C.1.5 The Contractor shall be required to be familiar with all applicable codes while carrying out the work outlined in this SOW. The Contractor shall complete the work pursuant to this SOW following all applicable codes and standards including, but not limited to:

Occupational Safety and Health Administration (OSHA), Underwriters Laboratories (UL), National Fire Protection Association (NFPA), National Electrical Code (NEC), and any additional federal, state and local codes and policies.

C.1.6 The Contractor shall furnish all tools and equipment necessary to complete all work outlined in this SOW. By no means shall the Contractor be authorized the use of Government owned property, tools or equipment, to complete work in accordance with this SOW.

C.1.7 In the event any operational system or utility (e.g. fire, IDS, HVAC) is required to be disabled or turned off, forty-eight (48) hour notice shall be required and approved by the GSA Building Manager, FPS Inspector, and/or FPS PM prior to deactivation.

a) The Contractor, prior to departing for the day, shall ensure all system(s) previously disabled or turned off are functioning properly. A basic functional test shall be required to determine proper functionality of the system(s) and should be reported to the FPS PM.

b) In the event a system is non-functional once enabled or turned on, it shall be the responsibility of the Contractor, at no additional cost to the Government, to restore the system(s) prior to departure from the site.

c) If the Contractor fails to restore all system(s) before departing, they shall be liable for all costs incurred by the Government to restore system(s) functionality.

C.1.8 All personnel engaged in installation activities pursuant to this SOW shall be licensed by the state, local authority, and/or the city local authority in the required trades or professions which require licensing by such jurisdictions. The type and level of license shall be consistent with requirements of the jurisdictions and work to be performed by this SOW.

C.1.9 It shall be the sole responsibility of the contractor to employ personnel licensed and qualified to carry out all tasks outlined in this SOW. At no time during the installation shall the contractor require Government personnel to complete tasks required to be completed by the contractor as covered by this SOW.

C.1.10 The Contractor shall be solely responsible for ensuring their employees and subcontractors abide by all requirements of the contract. At all times while work is being performed in accordance with this contract, the Contractor shall have someone acting in supervisory capacity available to answer questions, resolve issues, supervise company employee(s), and subcontractor(s).

C.1.11 The Contractor shall provide a daily access schedule to coordinate installation activities. The schedule shall be submitted as part of the project plan.

C.1.12 The Contractor shall maintain a separate set of drawings, schematics, and wiring diagrams of the IDS system to be used for creating as-built drawings. This set shall be accurately kept up to date by the Contractor, noting all changes and additions to the system and shall be available for the final inspection walkthrough.

C.1.13 The Contractor may be required to attend installation construction meetings.

C.2 Installation Requirements

C.2.1 The Contractor shall provide all necessary equipment, labor, supervision, and tools required to provide and install a new, fully functional IDS system in the project space.

The Contractor will install cam locks on all of the security equipment panel enclosures.

All equipment connected to AC power will be protected from surges. Equipment protection shall withstand surge test waveforms described in IEEE C62.41.1 and IEEE C62.41.2. Fuses shall not be used for surge protection.

C.2.2 The IDS system for this project uses hard-wired door contacts and glass break. The use of wireless transmitters for doors and window coverage is acceptable if more beneficial to the government in cost. If a wireless connection is necessary, the vendor shall communicate the details to FPS prior to the work for approval to proceed.

The Contractor shall coordinate with the FPS COR to ensure the new system(s) are installed and operational per FPS requirements, industry best practices for commercial buildings and national/local building codes.

C.2.3 The Contractor, for all equipment/device(s) requiring licensing, shall purchase/install license(s) as required by the manufacturer. All licensing fees shall be nonrecurring.

C.2.4 The keypad for the IDS system shall be mounted within security console space, at a height that is acceptable to the occupants of the space; consideration to the Americans with Disabilities Act (ADA) should be given, however, if it presents an undue hardship to occupants, then mount at the tenant desired space.

No exposed wiring shall be permitted. If there is a need for surface wiring, it must be protected in rigid or flexible conduit, approved by the project manager and COR.

The only type of wiring that shall be used is stranded 18/4 copper wire or 18/2 stranded copper wire. All wires shall be routed through the hollow wall or drop ceiling, and will only be permitted in surface mounted rigid conduit or flex conduit with the written permission of the FPS technical systems POC. Wiring shall be installed on dedicated support system using supports such as j-hooks or saddle support systems at no more than five foot (5’0”) intervals. Cable supports shall be securely attached directly to building structure. Do not attach cabling or supports to ductwork, piping, grid hangers, conduit, or equipment, and shall not be directly lying on top of tiles.

C.2.5 The Contractor shall be responsible to provide the necessary equipment and tools to access all equipment which is not accessible by ladder.

C.2.6 All measurements and equipment locations are approximate and shall be verified by the

Contractor for accuracy and installation feasibility. The Government shall not be held responsible for any error or variation in any measurements or other data listed, nor shall the Contractor, because of an error or variation in any measurement listed, be relieved of the responsibility to carry out the requirements in accordance with the true intent and meaning of the specifications without additional cost to the Government.

C.2.7 All ceiling tiles removed to accommodate installation shall be returned at the end of the work day.

C.2.8 The Contractor shall remove and haul debris from the project site daily and dispose of in a proper, acceptable manner in accordance with all federal, state and local laws and regulations, off of the job site property. The debris created from this project shall not be disposed of at the job site, in Government dumpsters, or on Government property.

C.2.9 The Contractor shall verify all equipment locations with the FPS PM prior to installation.

C.2.10 The Contractor, when removing the existing equipment, cabling, and appurtenances in accordance with this SOW, shall ensure all openings or penetrations are sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse. All openings or penetrations that are designated for reuse shall be sealed and/or patched accordingly to protect against weather exposure at the completion of installation. All penetrations that become exposed to weather during installation shall be protected from exposure throughout the installation period.

C.3 Networking Equipment

C.3.1 As required per this SOW, the contractor shall purchase, install, and configure all equipment, components, and necessary appurtenances for a complete and appropriately configured non-Ethernet network connectiong between the control panel and the MegaCenter via hard wired telephone.

C.3.2 All control panel boxes, power supplies and major communication devices shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood.

Final mounting location shall be approved by the FPS PM.

C.4 Operating Systems Updates and Service Packs

C.4.1 Operating systems and software applications shall be capable of being updated/patched after delivery. The Contractor shall ensure that all installed server(s) and client workstation(s) Operating System Software (OS), if applicable, at the time of installation, are current with all security updates/patches, service packs, revisions, and shall provide through the warranty period. The IDS firmware and all other installed software shall be the current version with all applicable updates and installed in accordance with manufacturers recommendations.

C.4.2 The Contractor shall remove and/or disable all software components that are not required for the operation and maintenance of the IDS system; and shall provide documentation on what is removed and/or disabled. The software to be removed and/or disabled shall include, but is not limited to: games, device drivers for network devices not delivered, messaging services (e.g., MSN, AOL IM), Servers or clients for unused Internet services, unused networking and communications protocols, unused document processing utilities (Microsoft Word, Excel, PowerPoint, Adobe Acrobat, OpenOffice, etc.).

C.4.3 The Contractor shall provide notification of patches affecting security within a pre-negotiated period as identified in the patch management process.

a) Pre-Contract Award – The Contractor shall provide details on their patch management and update process. Responsibility for installation and update of patches shall be identified.

b) Post-Contract Award - The Contractor shall provide notification of known vulnerabilities affecting Contractor-supplied or required OS, application, and third-party software within 30 days after public disclosure for a period of one year from approved acceptance testing.

C.7 Appendicies

C.7.1 IDS Component List & Components List with location identifier. This attachments are at the end of the document identified as Appendix C.7.1.

C.7.2 IDS Locations: See floor plans at the end of the SOW. The contractor and FPS shall verify all equipment locations.

C.7.3 BCMC Installation Standards: This document will be a separate file attachment due to size and complexity.

C.7.4 BCMC MAR Form: This document will be a separate file attachment due to size and complexity.

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND

REQUIREMENTS

D.1 Intrusion Detection System

D.1.1 The IDS main system components will reside in the Security Console room. The proposed work will remove nonfunctioning or obsolete sensors, install new, and create a perimeter IDS that covers doors and windows.

D.1.2 The new IDS Alarm Panel may be done by any vendor with appropriate licenses for selected that meets BCMC standards.

D.1.3 The IDS system shall be used to monitor the perimeter of the facility via door contacts and glassbreak detectors. Monitoring will be done by the FPS BCMC. The BCMC is able to monitor limited alarm systems via dial up analog phone lines. For this installation, the tenant agency must provide the dial up phone line. The alarms panel shall be in the list of supported panels in appendix C.8.2 BCMC Installation Standards.

The components selected shall be of the same manufacturer as the selected alarm panel when possible. The MegaCenter Alarm Requirement (MAR Document) shall be filled out and submitted to the BCMC 72 hours before scheduled testing of equipment. The MAR document will be provided with the Notice to Proceed. Contractor shall be at the facility during testing with PMC.

D.1.4 Provide and install one (1) wired main alarm control panel with connectivity to dial up telephone options installed, inside of locking metal enclosure, large enough to accommodate the panel, all components, and two 12V 18ah batteries. Install a transformer, dual battery harness, and two 12V 18ah batteries. Provide a tamper switch on inside of the enclosure, to detect the door opening. Install a separate enclosure with four (4) additional backup batteries that are charged by the alarm panel transformer.

D.1.5 Provide and install nine (9) balanced magnetic door. End of Line Resistors (EOLR) shall be installed at the end of line, which is at the device, not in the alarm panel. It is expected that the contacts will be of the same manufacture as the alarm panel and wired with unique addressable device. Any cabling will be new and appropriate for the equipment requirements.

D.1.6 Provide and install twenty one (21) wired dual tech glass break detectors, these are to be located in the area of the perimeter windows to detect the frequency of breaking glass. Each device shall report individually. End of Line Resistors (EOLR) shall be installed at the end of line, which is at the device, not in the alarm panel. It is expected that the contacts will be of the same manufacture as the alarm panel and configured as an individual zone.

D.2 Provide and install four (4) alpha numeric display keypads with digital screens in the existing security console on or nearby the newly installed alarm panel and 3 exterior doors to be identified at award. Exterior doors will be one on the West side and 2 on the East side. These shall be the most advanced keypads available at the time of this procurement. Keypad will be programmed in accordance with the standard procedures from the BCMC, with assistance from the FPS on-site personnel. Installation of the keypads to be verified by FPS.

D.3 Programming information for the IDS will be provided with the Notice to Proceed. If not included, contractor is responsible for asking their point of contact for this form.

D.3.1 All IDS equipment enclosures, mounted on the IDF plywood will have tamper switches on the door of each enclosure.

D.3.2 The contractor shall provide a diagram reflecting on the correct location of all equipment used in the project. Each equipment item shall have a label indicating the exact make, model, and part number. If any equipment required cabling, the path of cabling shall be indicated on the diagram.

D.4 MegaCenter Coordination

D.5 BCMC shall be provided with a complete zone list with alpha descriptions, as outlined in the MAR package. The MAR package will be provided with the Notice to Proceed.

Selected contractor will assist the BCMC with panel programming. Provide BCMC with the complete zone list a minimum of 48 hours before scheduled equipment testing.

D.5.1 Test all zones for proper operation; send signals to DHS/FPS BCMC and train agency personnel on proper system operation procedures.

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 Design Standards

E.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the FPS Technical POC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations as a result of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

E.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, and power requirements for the proposed Intrusion Detection System (IDS).

E.1.3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components in system design.

E.1.4 Backup Power Requirements –All IDS electrical and electronic equipment installed shall be powered from a standard electrical 120 volt system with transformer to step down power. There will be additional backup batteries to alleviate the need for an Uninterruptable Power Supply (UPS). It is expected that all equipment necessary for continuous protective coverage will be uninterrupted during a power outage.

E.1.5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams representing planned device terminations to and between system equipment and components.

E.2 Materials and Equipment

E.2.1 Items of the same type shall be products of a single manufacturer. All material, software and hardware, shall be new, the most current version, and presently being produced.

E.2.2 All hardware procured directly or in support of this action must meet applicable and appropriate EPEAT and ENERGY Star standards.

E.3 Electrical and Cabling Requirements

E.3.1 Wires, cables, and fiber shall meet applicable requirements of NFPA 70 and UL listings for type and method of installation. All wire utilized in ceiling space must be plenum rated.

E.3.2 Materials, equipment, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and requirements of NFPA 70.

E.3.3 All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

E.3.4 All wire and cable runs shall be installed inside conduit and sized according to NFPA

70 for fill requirements when visible below ceiling. Above ceiling wire and cable may be installed utilizing wire molding, cable trays, and inner duct. Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations, in the advent wire, cable, and fiber runs are installed above a suspended ceiling. No wire, cable, or fiber shall be left unsupported or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed. All wire or cable used will be PLENUM rated.

E.3.5 All wire, cable, and fiber shall not contain splices between equipment termination points.

E.3.6 All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

E.3.7 There shall be no crimp type fittings utilized during cable/wire termination unless specified by the equipment manufacturer.

E.3.8 All equipment connected to AC power shall be protected from surges as described in

IEEE C62.41 and IEEE C62.43. Fuses shall not be used for surge protection.

E.3.9 All cable and fiber installed in conduit shall include a pull string for future use. If an existing pull string is used in any location it shall be replaced with a new one.

E.3.10 All cable and fiber installed in support of this SOW shall be tested and test reports included in the O&M manual. This testing may occur during the Contractor Verification test or Performance Verification test to eliminate redundant testing.

E.3.11 All wire, cable, or fiber that is existing and to be reused in support of this SOW shall be tested prior to use. Test report(s) shall be provided with final installation documentation and denoted that wire, cable, or fiber was previously installed.

E.4 Final Inspection and Acceptance

E.4.1 Upon completion of the installation the Contractor shall perform a Contractor

Verification Test (CVT) in accordance with approved Perform Performance Verification Test (PVT) procedures to ensure installed system is fully operational. A copy of the test results shall be available for review by the FPS PM prior to commencing PVT testing and final inspection.

E.4.2 The Contractor shall submit, at a minimum five business days in advance of PVT testing, a proposed testing plan to the CO/FPS PM. The plan shall include test procedures, actions, and expected results demonstrating system functionality and compliance with this SOW. The test plan shall also include means for documenting test results. The test plan shall be approved by the FPS PM prior to the Contractor requesting Final Inspection and PVT testing.

E.4.3 The Contractor shall notify the CO/FPS PM in writing when requesting a date and time for Final Inspection and PVT testing. Request must be received, at a minimum, five business days in advance.

E.4.4 The Contractor shall provide all equipment and manpower necessary to perform Final

Inspection and PVT testing.

E.4.5 Final Inspection Minimum Requirements

a) Review drawings.

b) Walk-through and inspection of all installed components and workmanship.

c) Perform Performance Verification Test (PVT) in accordance with approved test plan.

d) All equipment default or contractor entered user IDs and passwords shall be relinquished by the Contractor to the Government.

e) In the event a deficiency is found or a test fails the Contractor shall have personnel available onsite to resolve the issue so inspection and testing may continue. Once the Contractor deems the issue has been resolved, a re-inspection or re-test shall occur.

f) The Final Inspection and PVT testing shall be performed during a single site visit.

g) Installation Acceptance by the Government shall be given only after the satisfactory completion of the Final Inspection, PVT testing, training, and receipt of all required deliverables outlined in this SOW.

E.5 Cleanliness, Protection, and Patching

E.5.1 The Contractor shall take necessary precautions to avoid damage to existing items that will remain in place, be reused, or remain the property of the Government. It shall be the sole responsibility of the Contractor to repair or replace damaged items, at no cost to the Government. Contractor shall notify CO/FPS PM of any damage immediately.

E.5.2 The Contractor shall not disturb existing construction beyond the extent indicated or necessary to fulfill installation requirements. In the event excessive damage is caused it shall be the sole responsibility of the Contractor to repair damage, at no cost to the Government. Contractor shall notify CO/FPS PM of any damage immediately.

E.5.3 The Contractor shall provide protective methods to control accumulation and migration of dirt and dust in and around all work areas. Removal of dirt, dust, and debris shall be completed daily and in accordance with all applicable federal, state, and local laws and regulation.

E.5.4 It shall be the sole responsibility of the Contractor to protect all existing building systems and utilities, to include, but not limited to, equipment, cabling, and appurtenances (e.g. fire, CCTV, IDS, HVAC) during demolition, installation and construction. If any system, service, utilities, equipment, or cabling are damaged due to installation construction the Contractor shall repair damage at no cost to the Government.

E.5.5 If necessary, the Contractor shall be responsible for moving furniture and/or equipment to protect it from damage during installation. All items relocated during installation shall be returned to their original location at the completion of work in the area. Any items that are unable to be relocated shall be protected from damage. In the event damage is incurred during this time it shall be the sole responsibility of the Contractor to replace damaged items without cost to the Government.

E.5.6 The Contractor shall prepare and lay out work in advance. Exercise care when cutting, channeling, chasing, or drilling of floors, walls, partitions, ceilings, or other surfaces as necessary for installation, support, or anchoring of conduit, raceways, and equipment.

E.5.7 The Contractor shall provide a qualified installer to install fire-stopping material to all penetrations and openings created during the installation. All existing penetrations or openings utilized by the contractor during the installation shall have fire-stopping material installed, regardless if it was previously installed. Fire-stopping shall consist of furnishing and installing tested and listed fire-stop systems, combination of materials, or devices to form an effective barrier against the spread of flame, smoke and gases, and maintain the integrity of walls, fire resistance rated walls, partitions, floors, and ceiling-floor assemblies, including through-penetrations. Firestop systems shall be UL Fire Resistance listed or FM P7825a approved with ''F" and/or “T” rated to at least be equal to fire-rating of the wall, fire wall, or floor in which penetrated openings are to be protected.

E.5.8 Where removal of equipment or materials leaves holes or damaged surfaces, the

Contractor shall patch the holes and damaged surfaces, as well as, paint the surface to match adjacent finished surfaces. Finished surfaces of patched area shall be flush and match the existing adjacent surface as closely as possible. If new work is to be applied to existing area, then removal and patching shall be adequate for installation of new work.

E.6 Warranty and Maintenance

E.6.1 The warranty terms shall be the Contractor shall guarantee that all installed parts;

components, systems and workmanship meet the specifications set forth in this SOW.

Additionally, the Contractor shall warranty all Contractor supplied components, workmanship and/or systems for a (minimum) period of 12 months from the date of Government acceptance.

E.6.2 In the event any Contractor supplied equipment, component, part fails within the specified warranty period; the Contractor shall immediately replace or repair the item within 24 hours at no additional cost to the Government. If the Contractor is unable to rectify the issue(s) within the allotted time, the Contractor shall be liable for all costs incurred by the Government to correct the issue(s).

E.6.3 The Contractor shall not be held responsible for failures due to fire, flood, vandalism, and/or misuse of Government equipment.

E.6.4 The Contractor shall include in the O&M manual a copy of all manufacturer warranties, terms, and conditions.

E.6.5 Network components shall be capable of disabling maintenance ports during normal system operation and enabling them only during approved maintenance activities.

E.6.6 Remote maintenance paths shall be encrypted to the firewalls.

E.6.7 The Contractor shall maintain an incident log as part of the software maintenance program, recording therein all deviations from normative operations, and all corrective actions taken. The incident log shall be submitted to FPS upon detection of anomalies, quarterly, and at the end of the contract period.

E.7 Safety and Health

E.7.1 All work shall comply with federal, state, and municipal safety and health regulations.

If there is a conflict between the regulations, the most stringent shall supersede all others.

E.7.2 The Contractor shall assume full responsibility and liability for compliance with all applicable regulations relating to the health and safety of personnel during the execution of work as outlined herein. The Contractor shall not fault the Government for any action on its part or that of its employees or subcontractors which results in injury, illness, or death.

E.7.3 Where pedestrian safety may be endangered the Contractor shall provide appropriate signage, barricades, or other means of notification.

E.7.4 The Contractor shall provide all required safety equipment and ensure the equipment is adequate and utilized appropriately for the work being performed.

E.7.5 The Contractor, in accordance with deliverable guidelines, shall submit a Roof Work

Safety Protection Plan.

E.8 Quality Control Plan

E.8.1 The Contractor shall have a formal Quality Control Plan (QCP) in place covering areas of concern, such as, but not limited to equipment and cabling installation, maintenance, and customer service standards. The QCP shall also address equipment and cable labeling, system performance, installation aesthetics, programming and configuration conventions, and timeliness of service.

E.8.2 The QCP shall cover the Contractor’s quality control policies and procedures to ensure compliance with the requirements of this SOW.

E.8.3 The Contractor shall report non-compliance issues with the QCP to the CO/FPS PM.

E.8.4 The QCP shall include a routine review process that addresses all the areas of the

Contractor’s performance and each of the elements of this SOW.

E.9 Training

E.9.1 The Contractor shall submit a standardized Training Plan in accordance with manufacture’s recommendations for the type system installed to the COR/FPS PM for approval.

E.9.2 The Contractor shall provide operator, administrator, and maintenance training to required personnel. Training shall be conducted onsite and during normal business hours from 8:00 a.m. to 4:30 p.m.

E.9.3 Operator Basic, Operator Advanced and Administrator/Maintenance training shall be conducted as three (3) different sessions. Training sessions shall be a minimum of two

(2) hours in length. Each session shall utilize a mixture of lecture and “hands-on” training.

E.9.4 Instruction materials and manuals shall be included for reference, as well as, allowing

FPS to train additional personnel at a later date.

E.9.5 At a minimum, training shall include:

a) Operator Training Basic

(1) With equipment powered off, conduct a complete system startup.

(2) General operating instructions.

(3) Arming/disarming procedure.

(4) Changing and selecting different user codes.

b) Operator Training Advanced

1) All elements of Operator Training Basic

2) All elements of Operator Training Basic and Advanced

3) Full System Configuration

4) Technical Support Information and Procedures

E.13 Wireless Network Security

E.13.1 The WLAN network name shall be changed from the default name to a unique name that does not reveal its affiliation to DHS operations or organizations. The SSID name shall not be associated with organizational function or identity to avoid advertising the network’s identity or function.

E.13.2 Security updates and patches shall be applied to all system devices to ensure that up-to-date firmware and software that protects these systems against known vulnerabilities is installed.

E.13.3 Networked systems shall be configured to create audit logs and capture important events such as successful and unsuccessful administrator logins, client device access attempts, client device MAC addresses, access violations, associations, disassociations, ports and protocols used, and user activities.

E.13.4 The networked wireless device shall be configured to apply Wi-Fi Protected

Access (WPA2) encryption and a strong network key will be established and provided to the FPS POC.

E.14 Audit and Accountability

E.14.1 No servers or workstations will be used for this installation.

Audit logs on servers and workstations shall contain at least the following information:

a) Identity of each user and device accessing or attempting to access the system

b) Time and date of the access and the logoff

c) Activities that might modify, bypass, or negate information security safeguards

d) Security-relevant actions associated with processing

e) All activities performed using an administrator’s identity

E.14.2 No servers or workstations will be used for this installation, therefore no audit records or logs will be generated.

Audit records and logs shall be protected from unauthorized modification, access, or destruction, when on located on local hard drives, network attached storage devices, or removable media.

E.14.3 No servers or workstations will be used for this installation, therefore no audit trail records will be generated. System audit trail records shall be maintained online for at least ninety (90) days.

E.15 Identification and Authentication / Access Control

E.15.1 Servers, workstations, and devices with user interfaces (i.e., routers, firewalls, and cameras) shall be capable of using positive user identification and authentication mechanisms through the use of uniquely assigned user IDs. (this does not include the IDS control panel keypad access):

E.15.2 Systems with authentication controls shall require each user to authenticate prior to system access.

E.15.3 Systems shall be capable of disabling user identifiers after ninety (90) days of inactivity.

E.15.4 Systems shall enforce password composition and complexity requirements (this does not include the IDS control panel keypad access):

a) Are at least 12 characters in length

b) Are not the same as any of the user’s previous 8 passwords

c) Do not contain any dictionary word

d) Are not the same as the User ID

e) Contains at least one number (e.g., 1, 2, 3) and one special character (e.g., @, #, $, E.15.5 Systems shall enforce passwords that expire after ninety (90) days (this does not include the IDS control panel keypad access).

E.15.6 Systems shall store all passwords in encrypted form.

E.15.7 Systems shall provide role based accesses that allow different levels of privilege. For example, administrators, general users, etc. according to MAR form.

E.15.8 All default vendor or factory-set administrator accounts or passwords shall be changed before installation or use.

E.16 Data Protection

E.16.1 Cryptographic functions provided by any system component shall use only cryptographic modules that are Federal Information Processing Standard (FIPS) 197 (AES-256) compliant and have received FIPS 140-2 validation at the level appropriate to their use.

E.16.2 The Contractor shall provide configuration specifications for implementing encryption and authentication between the cameras and the network and specifically note all security measures associated with the system.

E.16.3 When the contract ends, the contractor shall return all information and information resources provided during the life of the contract and certify that all DHS information has been purged from any contractor-owned system(s) that have been used to process DHS information.

E.17 User Accounts

E.17.1 The Contractor shall provide user accounts with configurable access and permissions associated with the defined user role.

E.17.2 The Contractor shall adhere to least privileged permission schemes for all user accounts, and application-to-application communications.

E.17.3 The Contractor shall recommend which accounts need to be active and those that can be disabled, removed, or modified. The FPS PM shall approve in writing the Contractor’s recommendation.

E.17.4 The Contractor shall disable, remove, or modify all the accounts pursuant to the approved recommendation.

E.17.5 The Contractor shall provide documentation defining access and security permissions, user accounts, applications, and associated roles.

E.17.6 The Contractor shall disable or remove all default and guest accounts prior to the system acceptance.

E.17.7 The Contractor shall provide documentation on all Contractor-configured or manufacturer default accounts, usernames, passwords, security settings, security codes, and other access methods are changed, disabled, or removed prior to system acceptance.

E.17. 8 After the system acceptance, the Contractor shall disable, remove, or modify all

Contractor-owned accounts or negotiate account ownership with the FPS PM.

E.18 Incident Management and Disaster Recovery

E.18.1 Incident Handling and Response - Upon notification of an incident affecting a system under warranty or within the scope of this contract, the Contractor should have an established incident handling and response capability (e.g. system restoration plan of site specific equipment). When a security incident occurs that impacts services, information or information systems, the Contractor shall consult and work closely with FPS security personnel (e.g., FPS Technical Countermeasures, FPS Advanced

Technology Security Program) to handle and respond to the incident.