sf 1449 70RFPW25QW9000007 AM0001.pdf

FOR OFFICIAL USE ONLY (FOUO)

For Official Use Only (FOUO)

Federal Protective Service U.S. Department of Homeland Security

STATEMENT OF WORK

for

Camera additions to existing Video Surveillance System (VSS)

May 21, 2024

Tucson FOB VSS Camera Addition

Federal Building 300 W Congress St.

Tucson, AZ 85701

Building Number: AZ0058

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 3 of 47

STATEMENT OF WORK

TABLE OF CONTENTS

A. BACKGROUND

B. PURPOSE

C. SCOPE

C.1 GENERAL

C.2 INSTALLATION REQUIREMENTS

C.3 VIDEO STORAGE REQUIREMENTS

C.5 NETWORKING EQUIPMENT

C.6 OPERATING SYSTEMS UPDATES, SERVICE PACKS, AND FIRMWARE

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 IP NETWORK VIDEO CAMERA MINIMUM REQUIREMENTS

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 DESIGN STANDARDS

E.2 MATERIALS AND EQUIPMENT

E.3 ELECTRICAL AND CABLING REQUIREMENTS

E.4 FINAL INSPECTION AND ACCEPTANCE

E.5 CLEANLINESS, PROTECTION, AND PATCHING

E.6 WARRANTY AND MAINTENANCE

E.7 SAFETY AND HEALTH

E.8 QUALITY CONTROL PLAN

E.9 TRAINING

E.10 CONFIGURATION MANAGEMENT

E.11 COMPONENT/DEVICE CONFIGURATIONS

E.16 DATA PROTECTION

E.17 INCIDENT MANAGEMENT AND DISASTER RECOVERY

F. DELIVERABLES

F.1 GENERAL

F.2 REQUEST FOR QUOTATION (RFQ)

F.3 PRE-INSTALLATION DELIVERABLES

F.4 POST-INSTALLATION DELIVERABLES

G. PROJECT ADMINISTRATION

G.1 WORK AUTHORIZATION

G.2 PERIOD OF PERFORMANCE

G.4 CONTACTS

G.5 SPECIAL SCHEDULING REQUIREMENTS

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 4 of 47

G.6 CONTRACTOR ACCESS AND USE OF PREMISES

G.7 SECURITY REQUIREMENTS

G.8 CONTRACTOR SUITABILITY REQUIREMENTS

H. APPLICABLE STANDARDS

H.1 GENERAL

H.2 ACCESSIBILITY REQUIREMENTS (SECTION 508)

I ACCOUNTABLE PROPERTY:

I.1 DEFINITIONS:

I.2 DELIVERABLES:

I.3 INVOICES:

I.4 PROPERTY ACCOUNTABILITY:

I.5 PHYSICAL INVENTORY:

I.6 PROPERTY DISPOSAL:

I.7 LOST, STOLEN, DAMAGED OR DESTROYED (LDD) PROPERTY:

J. INFORMATION TECHNOLOGY SECURITY

J.1 SECURITY CERTIFICATION/ACCREDITATION

J.2 SECURITY REVIEW AND REPORTING

J.3 CONTINUOUS MONITORING

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 5 of 47

FOR OFFICIAL USE ONLY (FOUO)

For Official Use Only (FOUO) 1

A. BACKGROUND

A.1 The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal Government.

A.2 The following Statement of Work (SOW) and guidelines have been developed by the Department of Homeland Security (DHS), Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and Government leased spaces. The SOW and regulations were developed with the notion that the security posture of each federally owned building or Government leased space is unique.

B. PURPOSE

B.1 Description of Existing System

Brand Make Model Quantity Location Cable Specification

NVR AES ANR2F-2U-

24TBR

1 1st floor control room

Cat6

PTZ IP

Camera

Avigilon H4

PTZ

2.0C-

H4PTZ-

DP30

2 Cat6

IP Fixed Camera

Avigilon H4 Dome

2.0-H4A-

DP2

1 Cat6

Panoramic Dome IP Camera

Arecont 180 Dome

AV12186DN 1 Cat6

Remote Switch

Trend Net

POE

Switch

TPE-TG80G 1 Cat6

Workstations 2 1st floor Xray –

Cat6

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 6 of 47

For Official Use Only (FOUO) 2

Control Room

B.2 Description of New System

B.2.1 This SOW is for the purchase and installation of a new 13 fixed/panoramic cameras, including additional licenses along with any additional equipment and appurtenances necessary for a fully functional IP Video Surveillance System (VSS) located at the Tucson FOB, 300 W Congress St. Tucson, AZ 85701.

Nine (9) cameras (Avigilon 2.0C-H44A-D1-B or similar) are to be installed across from the elevators on each floor including the basement.

One (1) Camera (Avigilon 2.0C-H5PTZ-DP36 or similar) to replace current fixed in the upper parking lot Northeast corner.

One (1) Camera (Avigilon 24C- H4A-3MH-180 or similar) to be installed on the 1st floor hallway covering the IRS entrance and DOL hallway.

One (1) Camera (Avigilon 8.0-H4A-D01-IR or similar) to be installed on the 1st floor northwest corner capturing DOL area and IRS mail delivery

One (1) Camera (Avigilon 20C-H4A-4MH-360 or similar) to be installed on the 1st floor west DOL area emergency exit and basement stairwell.

B.2.2. The VSS shall monitor vehicle traffic, personnel entry, emergency exits, and the exterior perimeter of the facility. The VSS shall retain video for a minimum of 30 25% additional storage space for future expansion. Storage shall be calculated at full camera resolution, full frame rate, and low compression.

C. SCOPE

C.1 General

C.1.1 As part of the pre-bid process, FPS may have a site visit and all interested

Contractors are invited to attend. The purpose of the site visit is for Contractors to survey the site and review the requirements of this SOW. A site visit will be scheduled by the FPS CO/CS. All questions relevant to this SOW shall be submitted in writing to the FPS COR/TPOC. The Contractor shall not make or assume any changes to this SOW without written approval from the FPS CO.

C.1.2 The Contractor shall be responsible for the removal, inventory, packaging for storage and return of all removed equipment to the FPS COR/TPOC. All currently installed wire, cable, and fiber, which is not designated for reuse, shall be completely removed by the Contractor and properly disposed of.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 7 of 47

For Official Use Only (FOUO) 3

C.1.3 The existing system shall remain fully functional and operational to the extent possible during the installation of the new surveillance system. The contractor shall cut over from the existing system to the new system in stages in order to minimize the number and duration of outages. The Contractor shall submit a system cutover plan in accordance with Section F Deliverables. The cutover plan shall be reviewed and approved in writing by the FPS COR/TPOC.

C.1.4 The Contractor shall provide and install and configure the system as described and/or shown herein. The system shall include all connectors, adapters, terminators, and appurtenances to interconnect all equipment. The Contractor shall also supply all cabling and miscellaneous materials necessary to interconnect all equipment installed in accordance with this SOW.

C.1.5 The Contractor shall be required to be familiar with all applicable codes while carrying out the work outlined in this SOW. The Contractor shall complete the work pursuant to this SOW following all applicable codes and standards including, but not limited to: Occupational Safety and Health Administration (OSHA), Underwriters Laboratories (UL), National Fire Protection Association (NFPA), National Electrical Code (NEC), and any additional federal, state and local codes and policies.

C.1.6 The Contractor shall furnish all tools and equipment necessary to complete all work outlined in this SOW. By no means shall the Contractor be authorized the use of Government owned property, tools or equipment, to complete work in accordance with this SOW, unless otherwise specified.

C.1.7 In the event any operational system or utility (e.g. fire, IDS, HVAC) is required to be disabled or turned off, forty-eight (48) hour notice shall be required and approved by the GSA Building Manager, FPS Inspector, and/or FPS COR/TPOC prior to deactivation.

a) The Contractor, prior to departing for the day, shall ensure all system(s) previously disabled or turned off are functioning properly. A basic functional test shall be required to determine proper functionality of the system(s) and should be reported to the FPS COR/TPOC.

b) In the event a system is non-functional once enabled or turned on, it shall be the responsibility of the Contractor, at no additional cost to the Government, to restore the system(s) prior to departure from the site.

c) If the Contractor fails to restore all system(s) before departing, they shall be liable for all costs incurred by the Government to restore system(s) functionality.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 8 of 47

For Official Use Only (FOUO) 4

C.1.8 All personnel engaged in installation activities pursuant to this SOW shall be licensed by the state, local authority, and/or the city local authority in the required trades or professions which require licensing by such jurisdictions. The type and level of license shall be consistent with requirements of the jurisdictions and work to be performed by this SOW.

C.1.9 It shall be the sole responsibility of the contractor to employ personnel licensed and qualified to carry out all tasks outlined in this SOW. At no time during the installation shall the contractor require Government personnel to complete tasks required to be completed by the contractor as covered by this SOW.

C.1.10 The Contractor shall be solely responsible for ensuring their employees and subcontractors abide by all requirements of the contract. At all times while work is being performed in accordance with this contract, the Contractor shall have a supervisory representative available to answer questions, resolve issues, supervise company employee(s), and subcontractor(s).

C.1.11 The Contractor shall provide a daily access schedule to coordinate installation activities. The schedule shall be submitted as part of the project plan.

C.1.12 The Contractor shall maintain a separate set of drawings, schematics, and wiring diagrams of the VSS to be used for creating as-built drawings. This set shall be accurately kept up to date by the Contractor, noting all changes and additions to the VSS and shall be available for the final inspection walkthrough.

C.1.13 The Contractor may be required to attend installation construction meetings.

C.1.14 For buildings 45 years of age or older: All repairs, installations and removals are required to follow the Secretary of the Interior’s Standards for Rehabilitation (SOI): https://www.nps.gov/crps/tps/rehab-guidelines/stand.htm.

C.1.15 The Contractor must be ISO 9001-2015 Certified and provide their ISO certification with their proposal documentation.

C.2 Installation Requirements

C.2.1 The Contractor shall install all system components and appurtenances in accordance with manufacturer’s instructions following all applicable local, state and federal codes and policies. All appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 9 of 47

For Official Use Only (FOUO) 5

Contractor, as well as, all adjustments, alignments, programming, and configuration required for a complete and optimal VSS operating system.

C.2.2 The Contractor shall provide and install camera mounts and other appurtenances, premise wiring, and system hardware as required for a complete and fully operational system as specified in this SOW. The installed system shall easily be expandable for future growth.

C.2.3 The Contractor, for all equipment/device(s) requiring licensing, shall purchase/install license(s) as required by the manufacturer. All licensing fees shall be nonrecurring. Documentation of all software and hardware licenses shall be provided to FPS as part of the final system documentation.

C.2.4 All equipment required to be wall-mounted shall be mounted. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the FPS PM.

C.2.5 The Contractor shall be responsible to provide the necessary equipment and tools to access all equipment which is not accessible by ladder. The contractor is accountable for all tool and equipment used during the course of installation, potentially dangerous items must remain under the physical control of the installer at all time. All tools and equipment to include electronic equipment and computers are subject to inspection by FPS.

C.2.6 All measurements and equipment locations are approximate and shall be verified by the Contractor for accuracy and installation feasibility. The Government shall not be held responsible for any error or variation in any measurements or other data listed, nor shall the Contractor, because of an error or variation in any measurement listed, be relieved of the responsibility to carry out the requirements in accordance with the true intent and meaning of the specifications without additional cost to the Government.

C.2.7 All ceiling tiles removed to accommodate installation shall be returned at the end of the work day.

C.2.8 The Contractor shall remove and haul debris from the project site daily and dispose of in a proper, acceptable manner in accordance with all federal, state and local laws and regulations, off of the job site property. The debris created from this project shall not be disposed of at the job site, in Government dumpsters, or on Government property.

C.2.9 The Contractor shall install and configure cameras in accordance with manufactures recommendations and industry best practices for optimal live view and recording.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 10 of 47

For Official Use Only (FOUO) 6

C.2.10 The Contractor shall verify all camera views with the FPS COR/TPOC prior to installation.

C.2.11 The Contractor, when removing the existing cameras, cabling, and appurtenances in accordance with this SOW, shall ensure all openings or penetrations are sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse. All openings or penetrations that are designated for reuse shall be sealed and/or patched accordingly to protect against weather exposure at the completion of installation. All penetrations that become exposed to weather during installation shall be protected from exposure throughout the installation period.

C.2.12 Installers shall be trained, certified, and authorized by the Manufacturer to install, integrate, test, and commission the system. The contractor shall provide and submit with their proposal documentation from the manufacture that they are trained, certified, and authorized to install, integrate, test, and commission the system. If documentation is not available, the contractor can substitute by providing with their proposal confirmation on manufacturer letterhead, they are trained, certified, and authorized to install, integrate, test, and commission the system within two years of the submittal date.

C.2.13 At least one factory certified trained technician on the VMS being installed by the contractor must be onsite at all times during the installation. Factory certification must be within the last two years (date of proposal).

C.3 Video Storage Requirements

C.3.1 The Contractor shall calculate appropriate storage for all cameras recording at fifteen (15) frames per second (fps) at the device (Camera, not total system), maximum resolution, and minimum compression. Storage capacity shall be capable of storing video for a minimum of thirty (30) days. The Contractor shall calculate and provide video storage requirements; the Contractor shall include enough storage for an additional number (##) cameras for future expansion maintaining the thirty (30) day minimum requirement.

C.3.2 The Contractor shall not apply power to the NVMS until, at a minimum; the following checks have been completed.

a) All equipment has been installed and connected in accordance with manufacturer’s instructions.

b) All installed and/or reused wiring has been tested accordingly (e.g. shorts, opens, continuity).

c) Power supplies have been verified to operate at the correct voltage, phase, and frequency. Satisfaction of the above requirements shall not relieve the

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 11 of 47

For Official Use Only (FOUO) 7

Contractor of responsibility for incorrect installation, defective equipment, or collateral damage as a result of Contractor work/equipment.

C.3.3 The Contractor shall ensure all system devices are configured appropriately for time synchronization. The local time zone where the system physically resides will be utilized.

C.3.4 The Contractor shall demonstrate to the FPS COR/TPOC that the completed NVMS installation complies with the contract requirements. Using an approved test procedure, all physical and functional requirements of the project shall be demonstrated and shown. The test procedure shall include techniques and requirements for validating all significant system functions. The Contractor shall provide all test equipment and personnel required for final testing.

C.3.5 The Contractor shall configure the installed VSS to function in a Network Domain environment, not as a workgroup.

C.5 Networking Equipment

C.5.1 As required per this SOW, the contractor shall purchase, install, and configure all equipment, components, and necessary appurtenances for a complete and appropriately configured Ethernet network connecting all devices of the NVMS.

C.5.2 The Contractor shall configure installed switches for Trunk line communication between the switches. Line encryption shall be enabled between all network devices to the maximum entent possible. If copper network cabling is utilized between network devices it must be metallicaly shielded twisted pair.

C.6 Operating Systems Updates, Service Packs, and Firmware

C.6.1 The Contractor shall provide notification of patches affecting security within a pre-negotiated period (usually the warranty period) as identified in the patch management process.

a) Pre-Contract Award – The Contractor shall provide details on their patch management and update process. Responsibility for installation and update of patches shall be identified.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 12 of 47

For Official Use Only (FOUO) 8

b) Post-Contract Award - The Contractor shall provide notification of known vulnerabilities affecting Contractor-supplied or required OS, application, and third-party software within 30 days after public disclosure.

C.6.2 The Contractor shall remove and/or disable all software components (bloatware) that are not required for the operation and maintenance of the camera system; and shall provide documentation on what is removed and/or disabled. The software to be removed and/or disabled shall include, but is not limited to: games, device drivers for network devices not delivered, messaging services (e.g., MSN, AOL IM), Servers or clients for unused Internet services, unused networking and communications protocols, unused document processing utilities (Microsoft Word, Excel, PowerPoint, Adobe Acrobat, OpenOffice, etc.).

C.6.3 The Contractor shall ensure that all VSS components have the latest manufacture approved firmware version installed. Firmware version is to be documented on the device inventory.

C.7 Attachments

C.7.1 None

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 IP Network Video Camera Minimum Requirements

D.1.1 At a minimum, equal or better than Avigilon Interior Fixed 2 MP IP Cameras:

The FPS Local POC shall determine the field-of-view (FoV) for each camera with the Contractor, at the time of installation.

a. ONVIF Compliant 1.02, 2.00, Profile S, Profile T and Profile G

b. Operate in a temperature range of -40 deg C to +60 deg C (-40 deg F to +140 deg F

c. Operate in a humidity range of 0-95% RH (non-condensing)

d. High Definitntion Sream Management

e. Multi-stream H.264, Multi-stream H.265, Motion JPEG; HDSM

f. Advance Video Pattern and Teach by Example Technology

g. IPv4/IPv6, HTTP,HTTPS, SOAP,DNS,NTP, RTSP, RTCP, RTP, TCP,UDP, IGMP, ICMP,DHCP, Zeroconf,ARP,HSTS

h. Environmental rating IP66, IP67, IK10

i. PoE IEEE 802.3af, Class 3, 24V AC

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 13 of 47

For Official Use Only (FOUO) 9

j. Video Pattern Detection and Teach by Example Technology

k. Password protection,HTTPS encryption, digest authentication, WS authentication, user access log, 802.1x port based authentication, FIPS 140-2 L1 (with optional camera license), FIPS 140-2 L3 (with optional accessory)

l. 5 year warranty

D.1.2 At a minimum, equal or better than Avigilon 180/360-degree

Exterior/Interior IP Panoramic Camera: verify the panoramic camera is compatible with the video management system software to ensure full functionality of the camera.

a) 180/270/360 degree panoramic

b) Wide Dynamic Range Panoramic

c) 3 or 4 sensors (cameras) within the housing

d) Lens: 2.8mm f1.2-103° , 4mm f1.6-72°, Remote Focus; 4mm f1.8-

101°, 5.2mm f1.8-70° Remote Focus

e) Image Compression: H.264 HDSM Smartcodec or H.265 HDSM

SmartCodec or Motion JPEG

f) Outdoor Rated IP66 and IK-10 Impact-Resistant Housing

g) Self learning video analytics on all sensors

h) Content adaptive IR technology up to 30m (100ft)

i) 3D Noise Reduction Filter

j) 8 MP per sensor resolution

D.1.3 At a minimum, equal or better than Avigilon Exterior PTZ 2 MP IP Camera: The FPS Local POC shall determine the field-of-view (FoV) for each camera with the Contractor, at the time of installation.

a) ONVIF Compliant Profile S, Profile T and Profile G

b) Operate in a temperature range of -40 deg C to +60 deg C (-40 deg F to +140 deg F)

c) Operate in a humidity range of 0-95% RH (non-condensing)

d) High Definition Stream Management

e) Multi-stream H.264, Multi-stream H.265, Motion JPEG.

f) Video Resolution: 2 MP

g) IPv4/IPv6, HTTP, HTTPS, SOAP,DNS,NTP, RTSP, RTCP, RTP, TCP,UDP, IGMP, ICMP, DHCP, Zeroconf, ARP,HSTS.

h) Video Pattern Detection and Teach by Example Technology.

i) Environmental rating IP66 and IP67

j) Impact rating IK10

k) Password protection, HTTPS encryption, digest authentication, WS authentication, user access log, 802.1x port based authentication, FIPS 140-2 L1 (with optional camera license), FIPS 140-2 L3 (with

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 14 of 47

For Official Use Only (FOUO) 10 optional accessory)

l) 5-year warranty

D.1.4 At a minimum, equal or better than Avigilon Exterior Fixed 8 MP IP

Cameras: The FPS Local POC shall determine the field-of-view (FoV) for each camera with the Contractor, at the time of installation.

a. ONVIF Compliant 1.02, 2.00, Profile S, Profile T and Profile G

b. Operate in a temperature range of -40 deg C to +60 deg C (-40 deg F to +140 deg F

c. Operate in a humidity range of 0-95% RH (non-condensing)

d. High Definitntion Sream Management

e. Multi-stream H.264, Multi-stream H.265, Motion JPEG; HDSM

f. Advance Video Pattern and Teach by Example Technology

g. IPv4/IPv6, HTTP,HTTPS, SOAP,DNS,NTP, RTSP, RTCP, RTP, TCP,UDP, IGMP, ICMP,DHCP, Zeroconf,ARP,HSTS

h. Environmental rating IP66, IP67, IK10

i. PoE IEEE 802.3af, Class 3, 24V AC

j. Video Pattern Detection and Teach by Example Technology

k. Password protection,HTTPS encryption, digest authentication, WS authentication, user access log, 802.1x port based authentication, FIPS 140-2 L1 (with optional camera license), FIPS 140-2 L3 (with optional accessory)

l. 5 year warranty

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 Design Standards

E.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the FPS COR/TPOC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations as a result of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

E.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, and HVAC and power requirements for the proposed Network Video Management System (NVMS).

E.1.3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components in system design.

E.1.4 Backup Power Requirements –All VSS electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). It is

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 15 of 47

For Official Use Only (FOUO) 11 expected that all equipment necessary for continuous live viewing, recording, and archiving VSS video will be uninterrupted during a power outage. The UPS shall be sized to provide at least four (4) hours1 battery back-up in the event the primary power source is interrupted. The Contractor shall include load calculations with their bid proposal.

E.1.5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams representing planned device terminations to and between system equipment and components.

E.1.6 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components.

E.2 Materials and Equipment

E.2.1 Items of the same type shall be products of a single manufacturer. All material, software and hardware, shall be new, the most current version, and presently being produced.

E.2.2 The Contractor shall provide enclosures as necessary for equipment not mounted in racks or supplied with an appropriate housing.

a) Interior: Enclosures to house equipment in an interior environment shall meet the requirements of NEMA 250 Type 12.

b) Exterior (Exposed-to-Weather): Enclosures to house equipment in an outdoor environment shall meet the requirements of NEMA 250 Type 4X.

E.2.3 All external camera housings shall be minimum IP66/NEMA4X rated for protection against rain, dust, and snow.

E.2.4 All camera housings shall be a minimum IK-10 Impact-Resistant for vandalism.

E.2.5 Camera housings shall match the color and architecture of the building, equal to or greater than the existing camera housings. Coloring camera housings shall not void the camera and housing manufacturer’s warranty. Before camera housings are painted the color shall be approved in writing by the Facility Security Committee.

E.3 Electrical and Cabling Requirements

E.3.1 Wires, cables, and fiber shall meet applicable requirements of NFPA 70 and UL listings for type and method of installation.

1 ISC RMP Criteria 70 - Provide uninterruptible emergency power to essential electronic security systems for a minimum of four hours.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 16 of 47

For Official Use Only (FOUO) 12

E.3.2 Materials, equipment, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and requirements of NFPA 70.

E.3.3 All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

E.3.4 All wire, cable, and fiber runs shall be installed inside conduit and sized according to NFPA 70 for fill requirements. As an alternative, if allowed by applicable codes and/or regulations, wire, cable, and fiber may be installed utilizing wire molding, cable trays, and inner duct. Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations, in the advent wire, cable, and fiber runs are installed above a suspended ceiling. No wire, cable, or fiber shall be left unsupported or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

E.3.5 All wire, cable, and fiber shall begin at a central distribution point, and run to its destination station without connecting to anything else (“home-run”). No splices between equipment termination points.

E.3.6 All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

E.3.7 There shall be no crimp type fittings utilized during cable/wire termination unless specified by the equipment manufacturer.

E.3.8 All equipment connected to AC power shall be protected from surges as described in IEEE C62.41 and IEEE C62.43. Fuses shall not be used for surge protection.

E.3.9 All cable and fiber installed in conduit shall include a pull string for future use. If an existing pull string is used in any location it shall be replaced with a new one.

E.3.10 All cable and fiber installed in support of this SOW shall be tested and test reports included in the O&M manual.

E.3.11 All wire, cable, or fiber that is existing and to be reused in support of this SOW shall be tested prior to use. Test report(s) shall be provided with final installation documentation and denoted that wire, cable, or fiber was previously installed.

E.3.12 All Ethernet network cabling shall be CAT 6/7 metalically shielded cable or multimode fiber optic cable, UL listed for its intended use (e.g. indoor, outdoor, plenum).

E.3.13 All CAT 6/7 cabling shall be installed in accordance with ANSI/TIA/EIA-568-B

Commercial Building Telecommunications Cabling Standard. All cable

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 17 of 47

For Official Use Only (FOUO) 13 terminations shall conform to ANSI/TIA/EIA-568-B standards. A few key areas of concern, but not all inclusive are:

a) Pair twists shall be maintained as close as possible to the point of termination.

b) Strip back only as much jacket as is required to terminate individual pairs.

c) All four pairs shall be terminated.

d) Pin/Pair assignments shall follow the T568B configuration.

E.3.14 All CAT 6/7 cabling shall be tested to certify that the cable conforms to

ANSI/TIA/EIA-568-B standards. The test device shall provide an electronic copy of the test results. Test results shall be printed and included in the O&M manual.

E.4 Final Inspection and Acceptance

E.4.1 Upon completion of the installation the Contractor shall perform a Contractor

Verification Test (CVT) in accordance with approved Perform Performance Verification Test (PVT) procedures to ensure installed system is fully operational.

A copy of the test results shall be available for review by the FPS PM prior to commencing PVT testing and final inspection.

E.4.2 The Contractor shall submit, at a minimum15 business days in advance of PVT testing, a proposed testing plan to the FPS COR/TPOC. The plan shall include test procedures, actions, and expected results demonstrating system functionality and compliance with this SOW. The test plan shall also include means for documenting test results. The test plan shall be approved by the FPS COR/TPOC prior to the Contractor requesting Final Inspection and PVT testing.

E.4.3 The Contractor shall notify the FPS COR/TPOC in writing when requesting a date and time for Final Inspection and PVT testing. Request must be received, at a minimum15 business days in advance.

E.4.4 The Contractor shall provide all equipment and manpower necessary to perform

Final Inspection and PVT testing.

E.4.5 Final Inspection Minimum Requirements

a) Review of Redline drawings.

b) Walk-through and inspection of all installed components and workmanship.

c) Perform Performance Verification Test (PVT) in accordance with approved test plan.

d) All equipment default or contractor entered user IDs and passwords shall be relinquished by the Contractor to the Government.

e) In the event a deficiency is found or a test fails the Contractor shall have personnel available onsite to resolve the issue so inspection and testing may continue. Once the Contractor deems the issue has been resolved, a re-inspection or re-test shall occur.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 18 of 47

For Official Use Only (FOUO) 14

f) The Final Inspection and PVT testing shall be performed during a single site visit.

g) Installation Acceptance by the Government shall be given only after the satisfactory completion of the Final Inspection, PVT testing, training, and receipt of all required deliverables outlined in this SOW.

E.5 Cleanliness, Protection, and Patching

E.5.1 The Contractor shall take necessary precautions to avoid damage to existing items that will remain in place, be reused, or remain the property of the Government. It shall be the sole responsibility of the Contractor to repair or replace damaged items, at no cost to the Government. Contractor shall notify the FPS COR/TPOC of any damage immediately.

E.5.2 The Contractor shall not disturb existing construction beyond the extent indicated or necessary to fulfill installation requirements. In the event excessive damage is caused it shall be the sole responsibility of the Contractor to repair damage, at no cost to the Government. Contractor shall notify the FPS COR/TPOC of any damage immediately.

E.5.3 The Contractor shall provide protective methods to control accumulation and migration of dirt and dust in and around all work areas. Removal of dirt, dust, and debris shall be completed daily and in accordance with all applicable federal, state, and local laws and regulation.

E.5.4 It shall be the sole responsibility of the Contractor to protect all existing building systems and utilities, to include, but not limited to, equipment, cabling, and appurtenances (e.g. fire, VSS, IDS, HVAC) during demolition, installation and construction. If any system, service, utilities, equipment, or cabling are damaged due to installation construction the Contractor shall repair damage at no cost to the Government.

E.5.5 If necessary, the Contractor shall be responsible for moving furniture and/or equipment to protect it from damage during installation. All items relocated during installation shall be returned to their original location at the completion of work in the area. Any items that are unable to be relocated shall be protected from damage. In the event damage is incurred during this time it shall be the sole responsibility of the Contractor to replace damaged items without cost to the Government.

E.5.6 The Contractor shall prepare and lay out work in advance. Exercise care when cutting, channeling, chasing, or drilling of floors, walls, partitions, ceilings, or other surfaces as necessary for installation, support, or anchoring of conduit, raceways, and equipment.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 19 of 47

For Official Use Only (FOUO) 15

E.5.7 The Contractor shall provide a qualified installer to install fire-stopping material to all penetrations and openings created during the installation. All existing penetrations or openings utilized by the contractor during the installation shall have fire-stopping material installed, regardless if it was previously installed. Fire-stopping shall consist of furnishing and installing tested and listed fire-stop systems, combination of materials, or devices to form an effective barrier against the spread of flame, smoke and gases, and maintain the integrity of walls, fire resistance rated walls, partitions, floors, and ceiling-floor assemblies, including through-penetrations. Firestop systems shall be UL Fire Resistance listed or FM P7825a approved with ''F" and/or “T” rated to at least be equal to fire-rating of the wall, fire wall, or floor in which penetrated openings are to be protected.

E.5.8 Where removal of equipment or materials leaves holes or damaged surfaces, the

Contractor shall patch the holes and damaged surfaces, as well as, paint the surface to match adjacent finished surfaces. Finished surfaces of patched area shall be flush and match the existing adjacent surface as closely as possible. If new work is to be applied to existing area, then removal and patching shall be adequate for installation of new work.

E.6 Warranty and Maintenance

E.6.1 The warranty terms shall be The Contractor shall guarantee that all installed parts;

components, systems and workmanship meet the specifications set forth in this SOW.

Additionally, the Contractor shall warranty all Contractor supplied components, workmanship and/or systems for a (minimum) period of 12 months from the date of Government acceptance.

E.6.2 After the one-year base warranty period the contractor shall be responsible for any Contractor supplied equipment, component, parts that fails within the factory warranty period; the Contractor shall immediately replace or repair the item within 5 business days at no additional cost (materials and labor) to the Government. If the Contractor is unable to rectify the issue(s) within the allotted time, the Contractor shall be liable for all costs incurred by the Government to correct the issue(s).

E.6.3 In the event any Contractor supplied equipment, component, part fails within the specified warranty period; the Contractor shall immediately replace or repair the item within 24 hours at no additional cost to the Government. If the Contractor is unable to rectify the issue(s) within the allotted time, the Contractor shall be liable for all costs incurred by the Government to correct the issue(s).

E.6.4 The Contractor shall not be held responsible for failures due to fire, flood, vandalism, and/or misuse of Government equipment.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 20 of 47

For Official Use Only (FOUO) 16

E.6.5 The Contractor shall include in the O&M manual a copy of all manufacturer warranties, terms, and conditions.

E.6.7 The Contractor shall maintain an incident log as part of the software maintenance program, recording therein all deviations from normative operations, and all corrective actions taken. The incident log shall be submitted to FPS upon detection of anomalies, quarterly, and at the end of the contract period.

E.6. 6 The Contractor shall provide on-site software maintenance support, firmware upgrades, OS patches, virus protection, and system configuration changes. This support shall start upon successful completion of the Substantial Completion Inspection (SCI) and include support for the Video Management software System components SHALL NOT use Remote Desktop connections, such as Microsoft’s Remote Desktop Protocol (RDP), without the use of an authentication method that employs secure authentication (two-factor, encrypted, key exchange).Use of removable media for maintenance purposes shall adhere to the policies and procedures established by the System Owners

E.7 Safety and Health

E.7.1 All work shall comply with federal, state, and municipal safety and health regulations. If there is a conflict between the regulations, the most stringent shall supersede all others.

E.7.2 The Contractor shall assume full responsibility and liability for compliance with all applicable regulations relating to the health and safety of personnel during the execution of work as outlined herein. The Contractor shall not fault the Government for any action on its part or that of its employees or subcontractors which results in injury, illness, or death.

E.7.3 Where pedestrian safety may be endangered the Contractor shall provide appropriate signage, barricades, or other means of notification.

E.7.4 The Contractor shall provide all required safety equipment and ensure the equipment is adequate and utilized appropriately for the work being performed.

E.7.5 The Contractor, in accordance with deliverable guidelines, shall submit a Roof

Work Safety Protection Plan.

E.8 Quality Control Plan

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 21 of 47

For Official Use Only (FOUO) 17

E.8.1 The Contractor shall have a formal Quality Control Plan (QCP) in place covering areas of concern, such as, but not limited to equipment and cabling installation, maintenance, and customer service standards. The QCP shall also address equipment and cable labeling, system performance, installation aesthetics, programming and configuration conventions, and timeliness of service.

E.8.2 The QCP shall cover the Contractor’s quality control policies and procedures to ensure compliance with the requirements of this SOW.

E.8.3 The Contractor shall report non-compliance issues with the QCP to the FPS

COR/TPOC.

E.8.4 The QCP shall include a routine review process that addresses all the areas of the

Contractor’s performance and each of the elements of this SOW.

E.8.5 The QCP shall include the necessary processes for tracking identified deficiencies from initiation through to an acceptable corrective action. The process shall include a means to verify the identified deficiency has been reported, corrected and accepted by the FPS COR/TPOC.

E.9 Training

E.9.1 The Contractor shall submit a standardized Training Plan in accordance with manufacture’s recommendations for the type system installed to the FPS COR/TPOC for approval.

E.9.2 The Contractor shall provide operator, administrator, and maintenance training to required personnel. Training shall be conducted onsite and during normal business hours from 8:00 a.m. to 4:30 p.m.

E.9.3 Operator Basic, Operator Advanced and Administrator/Maintenance training shall be conducted as three (3) different sessions. Training sessions shall be a minimum of two (2) hours in length. Each session shall utilize a mixture of lecture and “hands-on” training.

E.9.4 Instruction materials and manuals shall be included for reference, as well as, allowing FPS to train additional personnel at a later date.

E.10 Configuration Management

E.10.1 All installed software shall be the current version with all applicable updates and installed in accordance with manufacturers recommendations.

E.11 Component/Device Configurations

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 22 of 47

For Official Use Only (FOUO) 18

E.11.1 All devices connected to the VSS network shall have default credentials changed and provided to FPS in the contract deliverable documentation. All VSS user, application, and device, and service accounts shall be documented. Strong passwords will be used to the maximum extent possible only all devices. Reference section for E.15.4

E.11.2 All components that have remote access capability, e.g., web interfaces, remote configuration, shall be capable of being configured to restrict access by user ID and password.

E.13 Wireless Network Security

E.13.1 The WLAN network name shall be changed from the default name to a unique name that does not reveal its affiliation to DHS operations or organizations. The SSID name shall not be associated with organizational function or identity to avoid advertising the network’s identity or function.

E.13.2 Security updates and patches shall be applied to all system devices to ensure that up-to-date firmware and software that protects these systems against known vulnerabilities is installed.

E.13.3 Systems shall be configured to create audit logs and capture important events such as successful and unsuccessful administrator logins, client device access attempts, client device MAC addresses, access violations, associations, disassociations, ports and protocols used, and user activities.

E.13.4 The wireless device shall be configured to apply Wi-Fi Protected Access (WPA2) encryption and a strong network key will be established and provided to the FPS POC.

E.14 Audit and Accountability

E.14.1 Audit logs on servers and workstations shall contain at least the following information:

a) Identity of each user and device accessing or attempting to access the system

b) Time and date of the access and the logoff

c) Activities that might modify, bypass, or negate information security safeguards

d) Security-relevant actions associated with processing

e) All activities performed using an administrator’s identity

E.14.2 Audit records and logs shall be protected from unauthorized modification, access, or destruction, when on located on local hard drives, network attached storage devices, or removable media.

E.14.3 System audit trail records shall be maintained online for at least ninety (90) days.

E.15 Identification and Authentication / Access Control

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 23 of 47

For Official Use Only (FOUO) 19

E.15.1 Servers, workstations, and devices with user interfaces (i.e., routers, firewalls, and cameras) shall be capable of using positive user identification and authentication mechanisms through the use of uniquely assigned user IDs.

E.15.2 Systems with authentication controls shall require each user to authenticate prior to system access. VSS camera monitoring and display stations shall be configured with NO automatic screensaver of screen lock as a result of user inactivity.

E.15.3 Systems shall NOT disable user identifiers as a result of the account not being used for any length of inactivity on the account.

E.15.4 Systems shall enforce password composition and complexity requirements:

a) Are at least 12 characters in length.

b) Are not the same as any of the user’s previous 8 passwords.

c) Do not contain any dictionary word.

d) Are not the same as the User ID

e) Contains at least one number (e.g., 1, 2, 3) and one special character (e.g., @, #, $, E.15.5 Systems shall store all passwords in encrypted form.

E.15.6 Systems shall provide role based accesses that allow different levels of privilege. For example, administrators, general users, etc. The following user accounts will be configured on the VSS:

FPSadministrator = Domain Administrator (all permissions)

FPSinspector = Local Administrator (configure cameras, add/remove media, install software)

PSOuser = Limited (login and monitor cameras) (this account cannot make system changes or remove video footage from the VSS)

E.15.7 All default vendor or factory-set administrator accounts or passwords shall be changed before operational use.

E.16 Data Protection

E.16.1 Cryptographic functions provided by any system component shall use only cryptographic modules that are Federal Information Processing Standard (FIPS) 197 (AES-256) compliant and have received FIPS 140-2 validation at the level appropriate to their use.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 24 of 47

For Official Use Only (FOUO) 20

E.16.2 The Contractor shall provide configuration specifications for implementing encryption and authentication between the cameras and the network and specifically note all security measures associated with the system.

E.16.3 When the contract ends, the contractor shall return all information and information resources provided during the life of the contract and certify that all DHS information has been purged from any contractor-owned system(s) that have been used to process DHS information.

E.17 Incident Management and Disaster Recovery

E.17.1 Incident Handling and Response - Upon notification of an incident affecting a system under warranty or within the scope of this contract, the Contractor should have an established incident handling and response capability (e.g. system restoration plan of site specific equipment). When a security incident occurs that impacts services, information or information systems, the Contractor shall consult and work closely with FPS security personnel (e.g., FPS Technical Countermeasures, FPS Advanced Technology Security Program) to handle and respond to the incident. The service provider should also be expected to implement preventative measures to mitigate against similar incidents in the future upon request.

F. DELIVERABLES

F.1 General

F.1.1 The Contractor shall submit all pre-installation deliverables, as outlined in this

SOW, within fifteen (15) business days from award of the contract. The contractor shall not proceed until receiving written notification from the COR/FPS PM that all pre-installation deliverables are approved and all contract personnel working on the contract have received a favorable determination for the LEC. Deliverables shall be addressed to the FPS COR/TPOC and include the following information:

a) Project Title and location.

b) Contract number and deliverable submission date.

c) Deliverable description.

d) Contact information of person responsible for document submission.

F.1.2 The Contractor, after receiving a written “Notice to Proceed” from the FPS CO, shall complete the installation, including PVT testing and final inspection within sixty (30) business days.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 25 of 47

For Official Use Only (FOUO) 21

F.1.3 The Contractor shall submit all post installation deliverables within fifteen (15) business days after completion of PVT testing and final inspection.

F.1.4 The FPS COR/TPOC shall not issue final acceptance notification for the contract until receipt of all deliverables and final Government review. The Government will review post installation deliverables within ten (10) business days of submission and either approve or disapprove the submission. If disapproved, the contractor will be contacted by the CO to review/resolve the discrepancy.

F.1.5 Deliverables marked “approved” authorize the Contractor to proceed with work covered. After deliverables have been approved by FPS COR/TPOC, no substituting materials or equipment will be considered unless accompanied by an explanation of why the substitution is necessary and approval to proceed is received from the

FPS COR/TPOC.

F.1.6 Deliverables marked “disapproved” indicate deliverable is incomplete or does not comply with requirement of the contract documents shall be resubmitted with appropriate changes. No work shall proceed with respect to the deliverable until resubmission is approved.

F.1.7 Payment for materials incorporated in the work will not be made if required deliverable approvals have not been received and approved.

F.1.8 The CO may request additional deliverables when believed necessary to sufficiently document work relative to contract documents.

F.2 Request for Quotation (RFQ)

F.2.1 In order for the Government to more easily evaluate the contractor’s proposal, the following information is required. Proposals that do not include the required information shall be considered non-compliant.

F.2.2 Detailed list of proposed hardware to include at a minimum:

a) Equipment model number, part number, and quantity.

b) Manufacturer data sheet.

c) Itemized price list. All items shall match those on the manufacturer data sheets.

F.2.3 Detailed list of proposed software to include at a minimum:

a) Name and version of software.

b) Software data sheet.

c) Itemized price list. All items shall match those on the manufacturer data sheets.

F.2.4 Complete list of licensing requirements to include:

a) Equipment model number and/or software name requiring licensing.

70RFPW25QW9000007 AM0001 ATTACHMENT A Page 26 of 47

For Official Use Only (FOUO) 22

b) Licensing requirements.

c) Itemized price list. All items shall match those on the manufacturer data sheets.

F.2.5…