A04_FDO_PACS_Statement_of_Work_DRAFT_1.pdf

STATEMENT OF WORK

Restoration and Recommissioning of FICAM-Compliant Physical Access Control

System (PACS) for the BLM Farmington District Office Building Complex

1.0 Background

The Farmington District/Field Office located at 6251 College Blvd, Suite A, Farmington, New Mexico, owns and operates a facility equipped with an installed Physical Access

Control System (PACS) originally designed to comply with Federal Identity, Credential, and

Access Management (FICAM) requirements installed with completely new components in

2021. The system infrastructure, including field devices, cabling, and control hardware, is currently in place. See Attachment A for detailed information about the current systems.

Due to deferred maintenance, outdated system software, expired software licensing, and the expiration of the previous maintenance contract, the PACS is presently not in operation for the Main Building, Warehouse, or the Ware Yard, however the Fire Facility and Fire

Barracks are currently fully operational. The Government requires restoration of the PACS to ensure the system in these areas is fully operational and compliant with current federal standards.

2.0 Objective

The objective of this contract is to restore the existing PACS to full operational capability, utilizing one single software (all components integrated seamlessly), ensure compliance with current FICAM requirements, and establish a fully functional, validated, and supportable system through maintenance, repair, software updates, and licensing.

3.0 Scope of Work

The Contractor shall provide all labor, materials, equipment, software, licensing, supervision, management, and technical support necessary to:

• Perform diagnostics and maintenance on all installed PACS hardware components

• Repair or replace failed or degraded components

• Update PACS software to the latest FICAM-compliant version used by installed components

• Combine PACS control with the Fire Facility and Barracks into one location (Main

Building)

• Reintegrate system components (card readers, controllers, servers, workstations)

• Test and validate system functionality, including credential authentication (PIV 8)

• Provide system certification support to confirm FICAM compliance

• Deliver documentation and as-built system configuration

• Provide training

Assumptions

• All major hardware components (card readers, panels, wiring) are already installed

• Limited hardware replacement is required (estimated 20% failure/degradation rate)

• Existing infrastructure (network, power) is functional (one known repair needed to data line at one gate entry location- see attached maps)

• Work will occur during normal business hours unless otherwise specified

• System size: approximately 36 card readers (24 Main Building/Ware Yard, 12 Fire

Barracks/Fire Station)

4.0 Applicable Standards and References

The Contractor shall ensure all work complies with the most current versions of the following (as applicable):

• Federal Identity, Credential, and Access Management (FICAM) Roadmap and

Implementation Guidance: https://www.idmanagement.gov/arch/

• National Institute of Standards and Technology (NIST) publications including:

- FIPS 201 (Personal Identity Verification – PIV)

- NIST SP 800-116 (PIV in PACS)

- All of the system products and major components will be GSA FICAM

Approved PACS and listed by their PACS APL# found on the GSA approved products list found at: https://www.idmanagement.gov/fips201/

• UL 294 – Access Control System Units

• NFPA 70 (National Electrical Code) https://www.idmanagement.gov/arch/ https://www.idmanagement.gov/fips201/

5.0 Tasks

Potential bidders shall provide a proposal for all tasks listed below. Bidders are encouraged to attend the site visit. Date is to be determined.

5.1 SYSTEM ASSESSMENT

The Contractor shall:

• Conduct a comprehensive assessment of the existing PACS

• Verify all system components (controllers, card readers, panels, servers, workstations, network components)

• Identify deficiencies, failed components, and non-compliant elements

• Assess requirements necessary to integrate the two PACS control centralized within

Main Building

• Prepare and submit an Assessment Report with findings, recommended actions, a list of parts, and steps for system repair.

Based on the results outlined in the Assessment Report, the Government may optionally pursue the following tasks. Potential bidders are also required to submit estimates for these tasks:

5.2 SYSTEM REPAIR

Hardware Repair and Replacement

The Contractor shall:

• Repair or replace defective or non-functional hardware components

• Ensure all replacement components are FICAM-compliant and listed on the GSA

APL where applicable

• Verify proper installation and connectivity of all field devices

• Repair deficient infrastructure. One known gate entry location to west GOV Yard required data/power wiring replacement. See attached maps with reader locations.

Software Upgrade and Licensing

The Contractor shall:

• Update PACS software to the latest supported version compatible with existing infrastructure

• Provide and install all required software licenses for all components

• Configure system software to meet FICAM compliance requirements

• Ensure compatibility with PIV credentials (PIV 8)

System Configuration and Integration

• Configure system databases, access levels, and user permissions

• Integrate PACS components with existing network infrastructure

• Ensure proper communication between controllers, servers, and field devices

• Coordinate with Government IT personnel for network authorization and cybersecurity compliance (if required)

Testing and Validation

• Perform functional testing of all system components

• Conduct end-to-end system validation, including:

- Card reader functionality

- Credential authentication (PIV cards)

- Alarm and event monitoring

• Perform FICAM compliance verification

• Document all test results

Training

• Provide on-site training for Government personnel

• Training shall include:

- System operation

- Basic troubleshooting

- System administration functions

Documentation

The Contractor shall provide:

• Updated system drawings and diagrams

• Configuration documentation

• Software and license records

• Test and validation reports

• Operations and maintenance manuals

5.3 WARRANTY

The Contractor shall provide a minimum one-year warranty on all labor, parts, and software provided under this contract. Prospective bidders are recommended to propose an extended timeline and ensure all relevant details are incorporated into their pricing quotations.

5.4 Other

Work shall occur on site at the BLM FFO Building during the hours of 8 am to 5 pm, Monday

– Friday, excluding government holidays.

6.0 Deliverables

Deliverable Description Due

System Assessment Report Inventory, deficiencies, recommendations

Within 20 days of contract award

Software & Licensing Package Proof of updates and licenses

No later than 50 days after contract award

Test & Validation Report (Including FICAM compliance confirmation)

Functional and compliance testing results

No later than 75 days after

Deliverable Description Due

No later than 80 Training Completion Training materials

As-built and system documentation, Final Documentation Package including changes to the PACS and/or other components days after contract award

90 days after

7.0 Period of Performance

The Period of Performance shall be one year from contract award.

8.0 Place of Performance

Work shall be performed at the Bureau of Land Management

6251 College BLVD, STE A

Farmington, NM 87402

9.0 Government-Furnished Information (GFI)

The Government will provide:

• Network access coordination

• Site access and security requirements https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2Fmaps%2FGFNmZkXNYMhtzPi66&data=05%7C02%7Chquintana%40blm.gov%7C00be0dd0234e4f5f446808dc5e3a4ba4%7C0693b5ba4b184d7b9341f32f400a5494%7C0%7C0%7C638488852023471422%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=m6%2FzklkByFlFTmmrskE1hn7EzBv%2FykBJEoGF5bwr0CE%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2Fmaps%2FGFNmZkXNYMhtzPi66&data=05%7C02%7Chquintana%40blm.gov%7C00be0dd0234e4f5f446808dc5e3a4ba4%7C0693b5ba4b184d7b9341f32f400a5494%7C0%7C0%7C638488852023483264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=FNiRirGcbvVxHQDiUnulTq1apjFRfo5q0x%2BdDl1XPBQ%3D&reserved=0

10.0 Contractor Requirements

• Be certified and authorized to work on the installed PACS platform (e.g., Lenel, Genetec, AMAG, or equivalent)

• Employ trained and qualified technicians

• Comply with all site safety, security, and cybersecurity requirements

11.0 Acceptance Criteria

Work shall be considered complete when:

• PACS is fully operational across all installed devices and is integrated with the existing PACS on the property

• System passes all functional and validation testing

• System meets FICAM compliance requirements

• All deliverables are submitted and accepted by the Government

12.0 Security Requirements

All Contractor personnel shall comply with:

• Facility access requirements

• IT and cybersecurity policies applicable to PACS systems