70RFW19QWA000002_0001_PKG.pdf

FOR OFFICIAL USE ONLY (FOUO)

Law Enforcement Sensitive (LES) / For Official Use Only (FOUO)

Federal Protective Service Cybersecurity and Infrastructure Security

Agency (CISA) U.S. Department of Homeland Security

STATEMENT OF WORK

for

Upgrade of Video Surveillance System (VSS)

November 1, 2018

Thomas S Foley/U.S. Post Office

Camera Upgrade

904 West Riverside Avenue/ 920 West Riverside Avenue

Spokane, WA 99201

70RFPW19QWA000002 0001 Page 3 of 57

Law Enforcement Sensitive (LES) / For Official Use Only (FOUO)

SOW TABLE OF CONTENTS

A. BACKGROUND

B. PURPOSE

B.1 Description of Existing System

B.2 Description of New System

C. SCOPE

C.1 General

C.2 Installation Requirements

C.3 Video Storage Requirements

C.4 Control Room Monitors

C.5 Networking Equipment

C.6 Operating Systems Updates and Service Packs

C.7 Photos of Proposed Camera Locations

C.8 Photos of Security Desk

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 Description of Cameras and Specifications for Minimum Requirements

D.2 Description of Network Switch Salient Characteristics

D.3 Description of Security Desk Salient Characteristics

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 Design Standards

E.2 Materials and Equipment

E.3 Electrical and Cabling Requirements

E.4 Final Inspection and Acceptance

E.5 Cleanliness, Protection, and Patching

E.6 Warranty and Maintenance

E.7 Safety and Health

E.8 Quality Control Plan

E.9 Training

E.10 Configuration Management

E.11 Component/Device Configurations

E.12 Network Settings

E.13 Wireless Network Security

70RFPW19QWA000002 0001 Page 4 of 57

E.14 Audit and Accountability

E.15 Identification and Authentication / Access Control

E.16 Data Protection

E.17 User Accounts

E.18 Incident Management and Disaster Recovery

E.19 Software Maintenance

E.20 Enterprise Architecture

F. DELIVERABLES

F.1 General

F.2 Request for Quotation (RFQ)

F.3 Pre-Installation Deliverables

F.4 Post-Installation Deliverables

G. PROJECT ADMINISTRATION

G.1 Work Authorization

G.2 Period of Performance

G.3 Place(s) of Performance

G.4 Special Scheduling Requirements

G.5 Contractor Access and Use of Premises

G.6 Security Requirements

G.7 Contractor Suitability Requirements

G.8 GOVERNMENT ACCEPTANCE PERIOD

H. APPLICABLE STANDARDS

H.1 General

H.2 Accessibility Requirements (Section 508)

H.3 Section 508 Applicable EIT Accessibility Standards

H.4 Section 508 Applicable Exceptions

H.5 Section 508 Compliance Requirements

I. Accountable Property:

I.1 Definitions:

I.2 Deliverables:

I.3 Invoices:

I.4 Property Accountability:

I.5 Physical inventory:

I.6 Property Disposal:

70RFPW19QWA000002 0001 Page 5 of 57

I.7 Lost, Stolen, Damaged or Destroyed (LDD) property:

J. INFORMATION TECHNOLOGY SECURITY

J.1 Security Certification/Accreditation

J.2 Security Review and Reporting

J.3 Continuous Monitoring

J.4 Specific Protections

A. BACKGROUND

70RFPW19QWA000002 0001 Page 6 of 57

1. The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the Federal Government.

2. The following Statement of Work (SOW) and guidelines have been developed by the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and Government leased spaces. The SOW and regulations were developed with the notion that the security posture of each federally owned building or Government leased space is unique.

B. PURPOSE

The project purpose is to have an operational video surveillance system that includes the integration of existing equipment with the addition of new cameras and monitors into a single system that can be digitally recorded and viewed in the control center in the garage.

B.1 Description of Existing System

B.1.1 The existing system at the Foley Courthouse consists of a Bosch DIP 7000 NVR, MHW-WZ4G4-HEN4 client work station, six monitors, four-hour uninterrupted power supply (UPS), bi-phase converter, encoder connecting the existing analog cameras to the NVR and a Divar 3000 acting as a subsystem. The US Marshals are sending 16 camera feeds via fiber that are being converted to BNC analog connection via fiber to coax converters. The converted US Marshal feeds are then going to a Bosch IP encoder in the control room allowing the Protective Security Officers (PSOs) to view the cameras on our system.

Brand Make Model Quantity Location Cable Type

NVR Bosch DIP 7000 1 PSO Control Room

Various

DVR Bosch Divar 3000 1 PSO Control Room

Various

PTZ Camera Various Various Various 10 Various Coax Fixed Camera Various Various Various 4 Various Coax US Marshal Cameras

Various Various Various 16 Various Fiber/Coax

Air-phone Unknown Unknown Unknown 1 PSO Control Room/Loading dock gate

Unknown

Encoder Bosch Videojet 4000 1 PSO Control Room

Coax/

CAT6

Network Switch

Unknown Unknown Unknown 1 PSO Control Room

CAT6

B.2 Description of New System

70RFPW19QWA000002 0001 Page 7 of 57

B.2.1 This SOW states the requirements for the purchase, installation and programming for

13 new internet protocol (IP) pan tilt zoom (PTZ) cameras and 5 new IP fixed cameras.

In addition to the cameras this SOW includes the requirements for the following:

network switches, monitors, power over ethernet plus (PoE+) injectors if needed, decoder, UPS for switches, camera mounts where needed, and all appurtenances necessary to connect the new cameras to existing network and NVR for a fully functional IP VSS located at the Thomas Foley Courthouse. The VSS shall monitor vehicle traffic, personnel entry, emergency exits, and the exterior perimeter of the facility. ALL EQUIPMENT THAT IS PROPOSED BY CONTRACTOR MUST

MEET COMPLIANCE WITH H.R. 5515 THAT BECAME US LAW AS OF

AUGUST 2018.

B.2.2 Cameras to be installed are as follow:

1. New IP PTZ camera to be mounted on main entrance revolving door on a new mount. Contractor shall show proposed mounting solution in proposal.

See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

2. New IP fixed camera to be mounted on main entrance revolving door on a new mount. Contractor shall show proposed mounting solution in proposal.

See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

3. New IP fixed camera to be mounted on main entrance revolving door on a new mount. Contractor shall show proposed mounting solution in proposal.

See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

4. New IP PTZ camera to be mounted on the outside of the exterior of the NW pillar. Camera shall be mounted on a corner mount. Contractor shall show proposed mount in proposal. Mount shall be fastened to building through grout and not brick minimizing damage to exterior of building. (See photo of existing camera #5) See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

5. Replace existing exterior analog PTZ camera on the interior of the NW pillar with a new IP PTZ camera. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

6. Replace existing exterior analog camera PTZ at the gate entrance with a new IP PTZ camera. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

7. Replace existing exterior analog camera fixed camera and mount at the West side of garage entrance with a new IP fixed camera. See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

8. Replace existing exterior camera and mount on the East side of the garage with a new IP fixed camera. See Section D.1.3 for camera specifications.

See Section C.7 for photos of camera location.

9. Replace existing exterior camera mounted to a swing arm parapet on the

70RFPW19QWA000002 0001 Page 8 of 57 roof of the NW corner of the U.S. Post Office Building with a new IP PTZ camera. Existing mount to be used. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

10. Replace existing exterior camera mounted to a swing arm parapet on the roof of the NE corner of the U.S. Post Office Building with a new IP PTZ camera. Existing mount to be used. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

11. Replace existing exterior camera mounted to a swing arm parapet on the roof of the SE corner of the U.S. Post Office Building with a new IP PTZ camera. Existing mount to be used. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

12. Replace existing exterior camera mounted to a swing arm parapet on the roof of the SW corner of the U.S. Post Office Building with a new IP PTZ camera. Existing mount to be used. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

13. Replace existing exterior PTZ mounted on the Thomas Foley Courthouse building’s exterior SE corner and under the facility’s façade with a new IP PTZ camera. Existing mount is to be reused and existing power supply box on exterior of the building is to be removed. Any anchor holes from the power box shall be patched with matching grout color. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

14. Replace existing interior PTZ of the Post Office 24hr lobby on the SW corner with a new IP PTZ camera. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

15. Replace existing interior PTZ camera in the business lobby of the U.S. Post Office opposite the stairs on the South side of the first floor with a new IP PTZ camera. Existing mount to be used. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

16. Replace existing interior fixed camera located on the north end of the U.S.

Post Office business lobby with a new IP fixed box camera. Camera must be mounted in the same fashion as the existing camera mount. Mount cannot be drilled into any of the trim. See Section D.1.4 for camera specifications. See Section C.7 for photos of camera location.

17. Replace existing interior fixed camera located in the Post Office that covers the west ramp entrance and stairwell door with two new IP fixed cameras.

See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

18. Replace existing interior PTZ camera located in the W end of the U.S. Post Office loading dock with a with a new IP PTZ camera. See Section D.1.1 for camera specifications. See Section C.7 for photos of camera location.

19. Replace existing Aiphone at the entry gate stanchion. If necessary, cover existing Aiphone area with matching weatherproof Stainless-steel plate of same grade and quality. See Section D.1.2 for camera specifications. C.7 for photos of camera location.

20. Install new IP fixed camera in the U.S. Post Office loading dock on the

70RFPW19QWA000002 0001 Page 9 of 57

West Concrete Pillar. Camera shall face West pedestrian entrance door.

Conduit will be installed, and cabling will be ran to nearest junction box for ease of access. See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

20. Install new IP fixed camera in the U.S. Post Office loading dock on the East Concrete pillar/ East side of pillar. Camera shall face the East pedestrian door. Conduit will be installed, and cabling will be ran to nearest junction box for ease of access. See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

21. Install new IP fixed camera in the U.S. Post Office loading dock on the East Concrete pillar/ West side of pillar. Conduit will be installed, and cabling will be ran to nearest junction box for ease of access. Camera shall face West entry garage door. See Section D.1.3 for camera specifications. See Section C.7 for photos of camera location.

B.2.3 Contractor is to purchase and install a minimum of five (5) 24 port PoE network switches. The Contractor shall supply adequate power not to exceed 75 % capacity consumption per switch. Contractor shall provide with their proposal, load calculations for each switch. Provide specification of switch that must include the total power available. The network switches to be installed are as follows:

1. In the U.S. Post Office, in Room 329, a network switch is to be installed.

Contractor to provide option for mounting. Contractor to identify how switch and UPS will be installed.. All cameras that are terminated in room 329 will connect to this network switch. The network switch and any PoE injectors, if used, are to be connected to new contractor provided UPS. See section D.2.1 for network switch specifications. See Section E.1.4 for UPS requirements.

2. In the U.S. Post Office room G44 a network switch is to be installed. The network switch will be mounted on the wall in a lockable cabinet. Cabinet will be large enough to hold the switch and UPS. Switch and PoE injectors, if any used, are to be connected to new contractor provided UPS. All camera cabling shall be connected to the switch. Switch will connect U.S.

Post Office cameras to Thomas Foley Courthouse via installed fiber. See section D.2.1 for network switch specifications. See Section E.1.4 for UPS requirements.

3. In the PSO control room, 3 network switches will be installed in the existing rack. All cameras and trunk lines terminated in PSO control room will connect to the switches ensuring that the load of cameras is evenly distributed between the switches. See section D.2.1 for network switch specifications. See Section E.1.4 for UPS requirements.

B.2.4 Optional Equipment Item

1. Purchase and install new security desk. See section D.3.1 for Specifications. See Section C.8.1 for Photo of current desk. See section C.8.2 for photos of example security desk of what is needed.

B.2.5 Contractor Furnished Equipment

70RFPW19QWA000002 0001 Page 10 of 57

ITEM QUANTITY UNIT

IP PTZ Cameras 13 EA IP Fixed Cameras 8 EA Decoder 1 EA 28-inch HD Monitor 2 EA Custom mount for cameras at main entrance 1 EA Aiphone 1 EA Uninterrupted Power Supply 4 EA Network Switch 5 EA PoE+ Injector 18 EA Class 10 32 GB micro SDHC 18 EA Lockable Vented Wall Mounted Rack Enclosure (switch depth) 2 EA Optional Equipment/ Security Desk 1 EA

C. SCOPE

C.1 General

C.1.1 As part of the pre-bid process, FPS may have a site visit and all interested Contractors are invited to attend. The purpose of the site visit is for Contractors to survey the site and review the requirements of this SOW. A site visit will be scheduled by the COR/FPS PM. All questions relevant to this SOW shall be submitted in writing to the COR/FPS PM. The Contractor shall not make or assume any changes to this SOW without written approval from the COR/FPS PM.

C.1.2 The Contractor shall be responsible for the removal, inventory, packaging for storage and return of all removed equipment to the FPS PM. All currently installed wire, cable, and fiber, which is not designated for reuse, shall be completely removed by the Contractor and properly disposed of.

C.1.3 The existing system shall remain fully functional and operational to the extent possible during the installation of the new surveillance system. The contractor shall cut over from the existing system to the new system in stages to minimize the number and duration of outages. The Contractor shall submit a system cutover plan in accordance with Section F Deliverables. The cutover plan shall be reviewed and approved in writing by the FPS PM.

C.1.4 The Contractor shall provide and install and configure the system as described and/or shown herein. The system shall include all connectors, adapters, terminators, and appurtenances to interconnect all equipment. The Contractor shall also supply all cabling and miscellaneous materials necessary to interconnect all equipment installed in accordance with this SOW.

C.1.5 The Contractor shall be required to be familiar with all applicable codes while carrying

70RFPW19QWA000002 0001 Page 11 of 57 out the work outlined in this SOW. The Contractor shall complete the work pursuant to this SOW following all applicable codes and standards including, but not limited to:

Occupational Safety and Health Administration (OSHA), Underwriters Laboratories (UL), National Fire Protection Association (NFPA), National Electrical Code (NEC), and any additional federal, state and local codes and policies.

C.1.6 The Contractor shall furnish all tools and equipment necessary to complete all work outlined in this SOW. By no means shall the Contractor be authorized the use of Government owned property, tools or equipment, to complete work in accordance with this SOW, unless otherwise specified.

C.1.7 In the event any operational system or utility (e.g. fire, IDS, HVAC) is required to be disabled or turned off, forty-eight (48) hour notice shall be required and approved by the GSA Building Manager, FPS Inspector, and/or FPS PM prior to deactivation.

a) The Contractor, prior to departing for the day, shall ensure all system(s) previously disabled or turned off are functioning properly. A basic functional test shall be required to determine proper functionality of the system(s) and should be reported to the FPS PM.

b) In the event a system is non-functional once enabled or turned on, it shall be the responsibility of the Contractor, at no additional cost to the Government, to restore the system(s) prior to departure from the site.

c) If the Contractor fails to restore all system(s) before departing, they shall be liable for all costs incurred by the Government to restore system(s) functionality.

C.1.8 All personnel engaged in installation activities pursuant to this SOW shall be licensed by the state, local authority, and/or the city local authority in the required trades or professions which require licensing by such jurisdictions. The type and level of license shall be consistent with requirements of the jurisdictions and work to be performed by this SOW.

C.1.9 It shall be the sole responsibility of the contractor to employ personnel licensed and qualified to carry out all tasks outlined in this SOW. At no time during the installation shall the contractor require Government personnel to complete tasks required to be completed by the contractor as covered by this SOW.

C.1.10 The Contractor shall be solely responsible for ensuring their employees and subcontractors abide by all requirements of the contract. At all times while work is being performed in accordance with this contract, the Contractor shall have a supervisory representative available to answer questions, resolve issues, supervise company employee(s), and subcontractor(s).

C.1.11 The Contractor shall provide a daily access schedule to coordinate installation activities. The schedule shall be submitted as part of the project plan.

C.1.12 The Contractor shall maintain a separate set of drawings, schematics, and wiring

70RFPW19QWA000002 0001 Page 12 of 57 diagrams of the VSS to be used for creating as-built drawings. This set shall be accurately kept up to date by the Contractor, noting all changes and additions to the VSS and shall be available for the final inspection walkthrough.

C.1.13 The Contractor may be required to attend installation construction meetings.

C.1.14 There may or may not be onsite parking. The contractor should plan on unloading materials and finding parking offsite if necessary.

C.2 Installation Requirements

C.2.1 Installers shall be trained, certified, and authorized by the current NVR Manufacturer to install, integrate, test, and commission the system. The newly installed cameras and switches will need to be programmed to NVR. The contractor shall provide and submit with their proposal documentation from the manufacture that they are trained, certified, and authorized by the Manufacturer to install, integrate, test, and commission the system.

C.2.2 The Contractor shall install all system components and appurtenances in accordance with manufacturer’s instructions following all applicable local, state and federal codes and policies. All appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the Contractor, as well as, all adjustments, alignments, programming, and configuration required for a complete and optimal VSS operating system.

C.2.3 The Contractor shall provide and install cameras, network routers/switches, PoE plus injectors, two new monitors, decoder, UPS for switches and PoE injectors, necessary jumper cables, and any other equipment necessary for fully functional VSS. Provide and install camera mounts, other appurtenances, and system hardware as required for a complete and fully operational system as specified in this SOW. The installed system shall easily be expandable for future growth.

C.2.4 The Contractor, for all equipment/device(s) requiring licensing, shall purchase/install license(s) as required by the manufacturer. All licensing fees shall be nonrecurring.

C.2.5 The Contractor shall be responsible to provide the necessary equipment and tools to access all equipment which is not accessible by ladder.

C.2.6 All measurements and equipment locations are approximate and shall be verified by the Contractor for accuracy and installation feasibility. The Government shall not be held responsible for any error or variation in any measurements or other data listed, nor shall the Contractor, because of an error or variation in any measurement listed, be relieved of the responsibility to carry out the requirements in accordance with the true intent and meaning of the specifications without additional cost to the Government.

C.2.7 All ceiling tiles removed to accommodate installation shall be returned at the end of the work day.

C.2.8 The Contractor shall remove and haul debris from the project site daily and dispose of

70RFPW19QWA000002 0001 Page 13 of 57 in a proper, acceptable manner in accordance with all federal, state and local laws and regulations, off the job site property. The debris created from this project shall not be disposed of at the job site, in Government dumpsters, or on Government property.

C.2.9 The Contractor shall install and configure cameras in accordance with manufactures recommendations and industry best practices for optimal live view and recording.

C.2.10 The Contractor shall verify all camera views with the FPS PM prior to installation.

C.2.11 The Contractor, when removing the existing cameras, cabling, and appurtenances in accordance with this SOW, shall ensure all openings or penetrations are sealed and/or patch accordingly to protect against weather exposure, unless otherwise designated for reuse. All openings or penetrations that are designated for reuse shall be sealed and/or patched accordingly to protect against weather exposure at the completion of installation. All penetrations that become exposed to weather during installation shall be protected from exposure throughout the installation period.

C.3 Video Storage Requirements

C.3.1 The Contractor shall install Class 10 32 GB micro SDHC in every camera installed.

This is to include the existing 5 IP cameras, Automatic Network Replenishment (ANR) will need to be configured on all cameras to work properly with SD cards, C.3.2 Contractor to install 4 new 8TB hard drives in the existing DIP 7000 to increase storage, C.3.3 The Contractor shall configure the installed VSS to function in a Network Domain environment, not as a workgroup.

C.3.4 The Contractor shall ensure all system devices are configured appropriately for time synchronization. All devices shall be configured for time synchronization with the NVMS Server.

C.3.5 The Contractor shall demonstrate to the COR/FPS PM that the completed installation complies with the contract requirements. Using an approved test procedure, all physical and functional requirements of the project shall be demonstrated and shown. The test procedure shall include techniques and requirements for validating all significant system functions. The Contractor shall provide all test equipment and personnel required for final testing.

C.4 Control Room Monitors

C.4.1 Contractor shall uninstall the two smaller monitors at PSO control room and give monitors to FPS PM. Contractor shall provide and install two 28inch monitors.

Monitors shall be connected to a decoder configured in the NVMS for seamless use on the network and shall mount in the same fashion as existing monitors. New monitors must be capable of HDMI, VGA, DP, and BNC connections.

C.5 Networking Equipment

70RFPW19QWA000002 0001 Page 14 of 57

C.5.1 As required per this SOW, the contractor shall purchase, install, and configure all equipment, components, and necessary appurtenances for a complete and appropriately configured Ethernet network connecting all devices of the NVMS.

C.5.2 The Contractor shall configure installed switches for Trunk line communication between the switches

C.5.3 All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the FPS PM.

C.5.4 The Contractor shall ensure that all installed switches outside the PSO control room shall be secured in size appropriate, ventilated, wall mounted, lockable cabinet, and connected to contractor provided UPS.

C.6 Operating Systems Updates and Service Packs

C.6.1 Operating systems and software applications shall be capable of being updated/patched after delivery. The Contractor shall ensure that all installed server(s) and client workstation(s) Operating System Software (OS), at the time of installation, are current with all security updates/patches, service packs, revisions, and shall provide through the warranty period. The NVMS and all other installed software shall be the current version with all applicable updates and installed in accordance with manufacturers recommendations.

C.6.2 The Contractor shall remove and/or disable all software components that are not required for the operation and maintenance of the camera system; and shall provide documentation on what is removed and/or disabled. The software to be removed and/or disabled shall include, but is not limited to: games, device drivers for network devices not delivered, messaging services (e.g., MSN, AOL IM), Servers or clients for unused Internet services, unused networking and communications protocols, unused document processing utilities (Microsoft Word, Excel, PowerPoint, Adobe Acrobat, OpenOffice, etc.).

C.6.3 The Contractor shall provide notification of patches affecting security within a pre-negotiated period as identified in the patch management process.

1. Pre-Contract Award – The Contractor shall provide details on their patch management and update process. Responsibility for installation and update of patches shall be identified.

2. Post-Contract Award - The Contractor shall provide notification of known vulnerabilities affecting Contractor-supplied or required OS, application, and third-party software within 30 days after public disclosure.

C.7 Photos of Proposed Camera Locations

C.7.1 Camera Locations: See Camera List in Section B.2.2. The contractor and FPS shall verify all camera installation locations to provide the optimal view prior to any

70RFPW19QWA000002 0001 Page 15 of 57 installation.

1. Camera 1-3 will be mounted on a new contractor provided mount. Below are

2 photos showing the revolving door where the cameras mount will be.

4. Camera 4 will be mounted on a contractor provided corner mount.

70RFPW19QWA000002 0001 Page 16 of 57

Contractor will need to provide mount solution for this corner. Mount will be anchored to the building through the grout to minimize damage.

Conduit and cable for the camera will be installed prior to camera install.

Contractor may have to use 3ft or less of flex conduit to finish conduit to camera. All installed conduit will be painted to match the building.

5. Camera 5 will be mounted to the existing mount on the inside Northwest support pillar. Conduit and cable will already be installed but may be required to be finished from a stored location to camera.

6. Camera 6 will be mounted to the entry gate stanchion which also contains a

70RFPW19QWA000002 0001 Page 17 of 57 card reader and Aiphone system. The camera dome will protrude in same fashion as current. Mounting configuration will not degrade the integrity of the entry gate stanchion weather proofing.

7. Camera 7 is a fixed camera mounted to exterior concrete wall. The camera and mount will be replaced.

8. Camera 8 is a fixed camera mounted to exterior concrete wall. The camera

70RFPW19QWA000002 0001 Page 18 of 57 and mount will be replaced.

9. Camera 9, 10, 11, and 12 are mounted to existing swing arm parapets on the roof the U.S. Post Office Building. The new cameras will be mounted on the existing mounts in the same fashion as current camera. Below are photos showing cameras and mounting type, all cameras shall be affixed to the mounts in the same fashion.

70RFPW19QWA000002 0001 Page 19 of 57

70RFPW19QWA000002 0001 Page 20 of 57

13. Camera 13 is mounted to the SE corner of Courthouse under the façade. The new camera is to be mounted to the existing mount in the same fashion as the current camera. Below is a photo of current mount and camera.

14. Camera 14 located in the SW corner of the Post Office 24hr lobby. The existing mount is to be used for the new camera, below is a photo of current mount and camera.

70RFPW19QWA000002 0001 Page 21 of 57

15. Camera 15 in the U.S. Post Office business lobby is to use the existing mount. Below is a photo of current mount and camera.

16. Camera 16 is in the business lobby of the U.S. Post Office. The new camera shall mount in same fashion as existing. Due to the historical nature of the building there cannot be any drilling or changes made to trim. Below is a photo of current mount location and camera.

70RFPW19QWA000002 0001 Page 22 of 57

17. Camera 17 is located at the West entrance ramp hallway. This camera will need to be replaced with 2 fixed cameras. One will be facing the entrance door the other will view down the hall approximately 80 ft. Contractor will determine best mounting options as well as appropriate lens options.

Existing camera can stay in place as there are no replacement tiles. Below is a photo of current camera.

18. Camera 18 is in the loading dock garage of the U.S. Post Office. The camera is a PTZ and is being replaced with new IP PTZ. The new camera shall be mounted in the same place as current camera.

70RFPW19QWA000002 0001 Page 23 of 57

19. Aiphone is in the entry gate stanchion. The new Aiphone is to be flush mounted. Contractor is to maintain weather proof integrity of the entry gate stanchion when mounting new Aiphone. New IP Master Station will be in PSO control room.

20. New camera in the U.S. Post Office loading dock shall mount to West concrete pillar and shall face West pedestrian entrance door. Conduit and Cabling will be ran to location by another contractor. See below for photo of camera location.

70RFPW19QWA000002 0001 Page 24 of 57

21. New IP fixed camera in the U.S. Post Office loading dock shall mount to East concrete pillar facing East pedestrian entrance door. Conduit and Cabling will be ran to location by another contractor. See below for photo of camera location.

22. New IP fixed camera in the U.S. Post Office loading dock shall mount to West side of the East pillar facing the West entrance roll up door. Conduit and Cabling will be ran to location by another contractor. See below for photo of camera location.

70RFPW19QWA000002 0001 Page 25 of 57

C.8 Photos of Security Desk

C.8.1 Current Security Desk Photos

70RFPW19QWA000002 0001 Page 26 of 57

C.8.2 Example Photos of Needed Security Desk

70RFPW19QWA000002 0001 Page 27 of 57

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 Description of Cameras and Specifications for Minimum Requirements

D.1.1 Interior/Exterior, IP, PTZ, PoE camera: verify the camera is compatible with the video management system software to ensure full functionality of the camera (Bosch Autodome IP Starlight 7000 1080p PTZ or equal).

1. Pan-Tilt-Zoom (PTZ) Dome Housing Cameras: (>20’ from ground).

2. Minimum 2 mega pixels.

3. Capable of minimum resolution 1920 x 1080 and 60 fps at full resolution.

4. H.264 compression, MPEG-4 and motion JPEG streaming.

5. Optical zoom minimum of 30x.

6. Anti-Bloom Technology.

7. 120dB wide Dynamic Range (WDR).

8. Low light to a minimum of .0077 LUX (Color) .0008 LUX (Mono).

9. Synchronization: Internal.

10. Gain Control: Automatic/Manual.

11. Backlight Compensation: On/Off, selectable.

12. Iris Control: Automatic/Manual.

13. Wide Dynamic Range: On/Off, selectable.

14. Video Focus: Automatic/Manual (near-far).

15. Electronic Image Stabilization (EIS) On/Off, selectable N/A.

16. White Balance: Automatic/Manual; Red/Blue gain adjustable.

17. IP video outputs.

18. Power over Ethernet Plus (PoE+) IEEE 802.3at (Type2 compliant, Class 4 device), Power over Ethernet (PoE) IEEE 802.3af, 24V AC

19. ONVIF Profile S Compliant.

20. Certifications: UL; CE; FCC Class A.

21. Product variance capable of IP66 rated water and dust resistant.

22. Dehumidification for use in various weather conditions.

23. Heater/sun shield for temperature changes of –40 °C ~ +50 °C (–40 °F ~+122 °F) 24

VAC, –30 °C ~ +50 °C (–22 °F ~ 122 °F).

24. IEEE 802.1x compliant.

25. IPv6 addressable.

26. Edge powered pre-compression (camera manufacture developed) analytics on board with separate processor dedicated for processing.

27. Closed OS onboard camera limiting only manufacture signed and authenticated firmware to be installed.

28. Trusted Platform Module (TPM) hardware and Public Key Infrastructure (PKI) support, providing protection from malicious attacks.

29. Capable of gaining identification of persons at 76 pixels per foot at 20 ft. non-optic zoom and 629 ft. with 30x optic zoom.

30. Capable of gaining recognition of persons at 38 pixels per foot at 41 ft. non-optic zoom and 1259 ft. with 30x optic zoom.

31. Capable of gaining observation at 19 pixels per foot at 81 ft. non-optic zoom and 2517 ft. with 30x optic zoom.

32. Capable of gaining detection at 8 pixels per foot at 193 ft. non-optic zoom and

5978 ft. with 30x optic zoom.

70RFPW19QWA000002 0001 Page 28 of 57

D.1.2 IP Video Master Station and IP Video Door Station (Aiphone IX-MV7-HB and Aiphone IX-DVF or equal)

a) IP Video Master Station

1. ONVIF Profile S compliant

2. SIP 2.0 compliant

3. 7” TFT color LCD touchscreen

4. Fixed color video camera with privacy shutter

5. Multi-angled desk stand (30°, 45°, 60°)

6. Slot for microSD card (not provided by Aiphone)

7. 802.3af PoE compliant

8. 2 contact outputs, 4 trigger inputs

9. 8Ω 1/2-watt speaker output

10. Power Draw 4.32 Watts

11. Operating Temp: 32° ~ 104°F (0° ~ 40°C)

12. Protocols: IPv4, IPv6, TCP, UDP, SIP, HTTP, HTTPS, RTSP, RTP, RTCP, IGMP, MLD, SMTP, FTP, DHCP, NTP, DNS

13. Privacy mask cover

b) IP Video Door Station

1. ONVIF Profile S Compliant.

2. 1.23-megapixel fixed color video camera ⅓" CMOS

3. SIP 2.0 compliant.

4. White LED for low light illumination

5. Camera vertical adjustment +15º, 0º, or -8º (manual)

6. PoE 802.3af

7. Weather and vandal resistant (IP65, IK07

8. Slot for microSD card (not provided by Aiphone)

9. 2 contact outputs

10. 6 trigger inputs

11. RJ45 in/out with PoE pass through (802.3at Type 2 PoE+)

12. Min. illumination: 5 lux

13. H.264/AVC, motion JPEG

14. Protocols: IPv4, IPv6, TCP, UDP, SIP, HTTP, HTTPS, RTSP, RTP, RTCP, IGMP, MLD, SMTP, FTP, DHCP, NTP, DNS

15. Operating Temp: -40° - 140°F (-40° - 60°C)

D.1.3 Indoor/ Outdoor Fixed IP camera: verify the camera is compatible with the video management system software to ensure full functionality of the camera (Bosch Flexidome IP Starlight 6000 VR 1080p or equal) The contractor shall determine the necessary lens based on the required field of view and lighting for each camera.

1. ONVIF Profile S Compliant.

2. Enclosure Rating: IP 66 and NEMA 4X.

3. Smoked Dome IK10 Vandal Resistant.

4. Able to withstand a wide temperature range for extreme cold and hot weather conditions rated to -22 ºF to +122 ºF.

5. Auto-Varifocal lens with auto-iris, remote focus/zoom, and digital PTZ.

6. Multiple, H.264/Motion JPEG Video Streams.

7. Controllable frame rate and bandwidth.

8. Video Resolution: 1080p HD @ 60 FPS.

9. Day/Night automatic infrared-cut filter and Wide Dynamic Range (WDR).

70RFPW19QWA000002 0001 Page 29 of 57

10. 120dB wide Dynamic Range (WDR).

11. IPv4/IPv6 and QoS compatible.

12. PoE IEEE 802.3af, Class 3, 24V AC.

13. Edge powered pre-compression (camera manufacture developed) analytics on board with separate processor dedicated for processing.

14. Closed OS onboard camera limiting only manufacture signed and authenticated firmware to be installed.

15. Trusted Platform Module (TPM) hardware and Public Key Infrastructure (PKI) support, providing protection from malicious attacks.

16. Camera has memory card slot for local storage.

17. Camera capable of multi-streaming.

18. Video analytics to include: Rule based alarms and tracking, line crossing enter/leave field, follow route, loitering, idle/removed object, people counting, crowd density estimation, and 3D tracking.

19. 3 to 9 mm Automatic Varifocal (AVF) SR lens (IR corrected)

D.1.4 Indoor Fixed Box Camera: verify the camera is compatible with the video management system software to ensure full functionality of the camera (Dinion IP Starlight 6000 HD 1080p or Equal)

1. 1080p at 60fps

2. Camera has memory card slot for local storage.

3. Video analytics to include: object in field, line crossing, enter/leave field, loitering, follow route, idle/removed object, counting occupancy, crowd density estimation, condition change, and similarity search.

4. Object filters to include: duration, size, aspect ratio, speed, direction, color, object classes (4)

5. Tracking modes: standard (2D) tracking, 3D tracking, 3D people tracking, and museum mode

6. Tamper detection

7. Privacy masking

8. ONVIF Profile S

9. Intelligent Dynamic Noise Reduction

D.2 Description of Network Switch Salient Characteristics

D.2.1 Network Switch (Cisco SF350-24MP 24-port 10/100 Max PoE Managed Switch or equal)

1. 24 10/100 RJ45 ports

2. Auto-sensing

3. 24 Fast Ethernet + 4 Gigabit Ethernet

4. 2 Gigabit Ethernet combo + 2 SFP

5. Rack Mountable

6. Embedded Secure Sockets Layer (SSL) encryption protects management data traveling to and from the switch.

7. Extensive Access Control Lists (ACLs) restrict sensitive portions of the network to keep out unauthorized users and guard against network attacks.

8. Guest VLANs let you provide Internet connectivity to nonemployee users while isolating critical business services from guest traffic.

70RFPW19QWA000002 0001 Page 30 of 57

9. IPv6 First Hop Security extends the advanced threat protection to IPv6.

10. Private VLAN Edge (PVE) provides Layer 2 isolation between devices on the same

VLAN.

11. Secure Core Technology (SCT) helps ensure that the switch is able to process management traffic in the face of a Denial-of-Service (DoS) attack.

12. Loopback detection provides protection against loops by transmitting loop protocol packets out of ports on which loop protection has been enabled. It operates independently of STP.

13. Port mirroring

14. Support 802.3at PoE+, 802.3af, 60W PoE, and Cisco prestandard (older) PoE. Maximum power of 60W to any 10/100 or Gigabit Ethernet port for PoE+ supported devices and 15.4W for PoE supported devices, until the PoE budget for the switch is reached.

15. The total power available for PoE per switch is 375W to 24 ports

D.3 Description of Security Desk Salient Characteristics

D.3.1 Security Desk (Current desk is made by Winsted)

1. Must be capable of six 28in monitors in two rows of three at an ergonomically correct viewing plane.

2. Must be capable of three 11U rack bays (minimum) of underneath storage.

3. Must have a place for gate control panels.

4. Must be 84in long and 43in deep minimum and cannot exceed 84in long and 48in deep.

D.4 Description of Decoder and PoE Injector Salient Characteristics D.4.1 Decoder (Bosch VideoJet Decoder 8000 or equal)

1. HD, 4K UHD and MP decoding

2. Flexible monitor layouts

3. Directly drives up to two 4K UHD monitors

4. Displays VCA metadata

5. Compact size and VESA mount

D.4.2 PoE Injector (Midspan PoE Injector NPD-5001-PoE or equal)

1. Allows one-wire connection

2. Supplies up to 15.4 W per port

3. Operating Temperature 32 degrees F to 104 F

4. Operating Humidity 90% RH max. non- condensing

5. Data 10/100/1000 Mbps pass-through data rates

6. Standards FCC Part 15, Class B, EN60950, EN55022 class B, EN55024, IEEE802.3af

7. Approvals UL, CUL, FCC, VCCI, GS Mark

8. Regulatory compliance CE, RoHS, WEEE

9. Input supply voltage 100 to 240 VAC: 50/60/Hz

10. Output supply voltage + 48 VDC nominal Output port power 15.4 max.

E. ADDITIONAL PROJECT REQUIREMENTS

70RFPW19QWA000002 0001 Page 31 of 57

E.1 Design Standards

E.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the FPS Technical POC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations because of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

E.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, and HVAC and power requirements for the proposed Network Video Management System (NVMS).

E.1.3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components in system design.

E.1.4 Backup Power Requirements –All VSS electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). It is expected that all equipment necessary for continuous live viewing, recording, and archiving of video will be uninterrupted during a power outage. The UPS shall be sized to provide at least four (4) hours1 battery back-up in the event the primary power source is interrupted.

The Contractor shall include load calculations with their bid proposal.

1 ISC RMP Criteria 70 - Provide uninterruptible emergency power to essential electronic security systems for a minimum of four hours.

E.1.5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams representing planned device terminations to and between system equipment and components.

E.1.6 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components.

E.2 Materials and Equipment

E.2.1 Items of the same type shall be products of a single manufacturer. All material, software and hardware, shall be new, the most current version, and presently being produced.

E.2.2 The Contractor shall provide enclosures as necessary for equipment not mounted in racks or supplied with an appropriate housing.

a) Interior: Enclosures to house equipment in an interior environment shall meet the requirements of NEMA 250 Type 12.

b) Exterior (Exposed-to-Weather): Enclosures to house equipment in an outdoor environment shall meet the requirements of NEMA 250 Type 4X.

E.2.3 All external camera housings shall be minimum IP66/NEMA4X rated for protection against rain, dust, and snow.

E.2.4 All camera housings shall be a minimum IK-10 Impact-Resistant for vandalism.

70RFPW19QWA000002 0001 Page 32 of 57

E.3 Electrical and Cabling Requirements

E.3.1 As part of the project prior to or during the camera installation another contractor will be conducting the installation of all necessary network cabling for cameras. All cabling installed prior to or during project will be ran to the closest junction box to camera locations. Contractor will be required to finish out the cabling to the camera and terminate the newly installed network cable. Contractor is to test all network terminations and provide FPS PM with the bandwidth, resistance, and pin test results.

E.3.2 Wires, cables, and fiber shall meet applicable requirements of NFPA 70 and UL listings for type and method of installation.

E.3.3 Materials, equipment, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and requirements of NFPA 70.

E.3.4 All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

E.3.5 All wire, cable, and fiber runs shall be installed inside conduit and sized according to

NFPA 70 for fill requirements. As an alternative, if allowed by applicable codes and/or regulations, wire, cable, and fiber may be installed utilizing wire molding, cable trays, and inner duct. Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations, in the advent wire, cable, and fiber runs are installed above a suspended ceiling. No wire, cable, or fiber shall be left unsupported or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

E.3.6 All wire, cable, and fiber shall not contain splices between equipment termination points.

E.3.7 All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

E.3.8 There shall be no crimp type fittings utilized during cable/wire termination unless specified by the equipment manufacturer.

E.3.9 All equipment connected to AC power shall be protected from surges as described in IEEE C62.41 and IEEE C62.43. Fuses shall not be used for surge protection.

E.3.10 All cable and fiber installed in conduit shall include a pull string for future use. If an existing pull string is used in any location it shall be replaced with a new one.

E.3.11 All cable and fiber installed in support of this SOW shall be tested and test reports included in the O&M manual.

E.3.12 All wire, cable, or fiber that is existing and to be reused in support of this SOW shall be tested prior to use. Test report(s) shall be provided with final installation documentation

70RFPW19QWA000002 0001 Page 33 of 57 and denoted that wire, cable, or fiber was previously installed.

E.3.13 All Ethernet network cabling shall be CAT 6/7 shielded cable or multimode fiber optic cable, UL listed for its intended use (e.g. indoor, outdoor, plenum).

E.3.14 All CAT 6/7 cabling shall be installed in accordance with ANSI/TIA/EIA-568-B

Commercial Building Telecommunications Cabling Standard. All cable terminations shall conform to ANSI/TIA/EIA-568-B standards. A few key areas of concern, but not all inclusive are:

a) Pair twists shall be maintained as close as possible to the point of termination.

b) Strip back only as much jacket as is required to terminate individual pairs.

c) All four pairs shall be terminated.

d) Pin/Pair assignments shall follow the T568B configuration.

E.3.15 All CAT 6/7 cabling shall be tested to certify that the cable conforms to

ANSI/TIA/EIA-568-B standards. The test device shall provide an electronic copy of the test results. Test results shall be printed and included in the O&M manual.

E.4 Final Inspection and Acceptance

E.4.1 Upon completion of the installation the Contractor shall perform a Contractor Verification Test (CVT) in accordance with approved Perform Performance Verification Test (PVT) procedures to ensure installed system is fully operational. A copy of the test results shall be available for review by the FPS PM prior to commencing PVT testing and final inspection.

E.4.2 The Contractor shall submit, at a minimum five business days in advance of PVT testing, a proposed testing plan to the COR/FPS PM. The plan shall include test procedures, actions, and expected results demonstrating system functionality and compliance with this SOW. The test plan shall also include means for documenting test results. The test plan shall be approved by the FPS PM prior to the Contractor requesting Final Inspection and PVT testing.

E.4.3 The Contractor shall notify the COR/FPS PM in writing when requesting a date and time for Final Inspection and PVT testing. Request must be received, at a minimum, five business days in advance.

E.4.4 The Contractor shall provide all equipment and manpower necessary to perform Final Inspection and PVT testing.

E.4.5 Final Inspection Minimum Requirements

a) Review of Redline drawings.

b) Walk-through and inspection of all installed components and workmanship.

c) Perform Performance Verification Test (PVT) in accordance with test plan.

d) All equipment default or contractor entered user IDs and passwords shall be relinquished by the Contractor to the Government.

e) In the event a deficiency is found, or a test fails the Contractor shall have personnel available onsite to resolve the issue so inspection and testing may continue. Once the Contractor deems the issue has been resolved, a re-inspection

70RFPW19QWA000002 0001 Page 34 of 57 or re-test shall occur.

f) The Final Inspection and PVT testing shall be performed during a single site visit.

g) Installation Acceptance by the Government shall be given only after the satisfactory completion of the Final Inspection, PVT testing, training, and receipt of all required deliverables outlined in this SOW.

E.5 Cleanliness, Protection, and Patching

E.5.1 The Contractor shall take necessary precautions to avoid damage to existing items that will remain in place, be reused, or remain the property of the Government. It shall be the sole responsibility of the Contractor to repair or replace damaged items, at no cost to the Government. Contractor shall notify COR/FPS PM of any damage immediately.

E.5.2 The Contractor shall not…