Attachment (1) DHS-OIG ESS Standards with Diagrams 20200429.pptx

DHS-OIG Electronic Security Systems Standard This document outlines the requirements for fixed asset security including the Intrusion Detection System, Access Control, CCTV & Intercoms associated with each facility.

The standard systems include the following:

Intrusion Detection System – DMP Access Control – RS2 with PIV integrated readers as shown.

CCTV – Digital Watchdog Intercom – AiPhone AX-series

IDS Panel IDS System Details Security Panel will normally be placed in the Weapons Room Panel may be placed in the evidence room Perimeter Doors all require a Balanced Magnetic Switch(BMS) and may require a Keypad inside if the door is used for entry. Emergency egress doors only require a BMS.

Special rooms require a their own partition with Keypad, BMS & PIR Sensor Weapons Room* Evidence Room* Case Files Room Perimeter Entry Door Perimeter Entry Door Perimeter Entry Door Perimeter Egress Only Intrusion Detection System (IDS) IDS List of Primary Components DMP XR-series Alarm Panel Balanced magnetic door switch Passive Infrared (PIR) Motion Sensor Keypads (not touch panels)

One zone with multiple keypads

*IDS PANEL MUST BE LOCATED IN EITHER WEAPONS OR EVIDENCE ROOM

KP

PIR

Security Panel IDS Layout for Weapons, Evidence & Case File rooms IDS System

BMS

BMS

KP

IDS Layout for All Perimeter Doors* *Emergency egress doors only require BMS IDS System

Facility Closed Circuit Television (CCTV) System CCTV Monitor

NVR

CCTV Monitor CCTV Monitor CCTV Monitor 4 hour Battery Back-up Monitor Locations

SAC

ASAC

Sr Auditor AO and/or Reception Area

Camera Locations Weapons Room Evidence Room Case File Room Inside each perimeter door IDS List of Primary Components Digital Watchdog (VMAX A1 or VMAX IP Pro) 4 hour UPS (if not on the LAN Room back-up) HDMI or DVI input Monitor Network

CCTV Layout for Weapons, Evidence & Case File rooms Facility CCTV System

Camera should be placed in a manner that allows coverage of the door and as many of the assets stored in the room as possible.

CCTV Layout for Reception Area

To main office area To outside area

To interview room Camera should be placed in a location to monitor all doors.

CCTV Layout for Additional Perimeter Doors*

To outside area Camera should be placed in a location that provides facial recognition for anyone entering the perimeter.

In the event that one of the special rooms is located on a perimeter wall, a camera Should be placed to view that wall(s)

IDS List of Primary Components The type of panel to be installed will be a RS-2 manufactured control panel - no exceptions Sentrol 1078 series (or equivalent) Double Pole/Double Throw Bosch DS150i series (or equivalent)Request to Exit device HES 1006 plus option plate 923PPRNEK000CC RPKCL40-P pivCLASS RPKCL40-PC/CL LCD Keypad Reader – The readers must be ordered with the following configuration code-pivCLASS Custom Mifare 32-bit RPK40-H Access Control System Access Control System Details Security Panel will be placed in the LAN Room Doors with access control require a Door Contact, PIV Card reader, Request to Exit device, and Electric Strike.

Ideally there will be a 12v power supply for card readers/REX and 24v power supply for electric strikes adjacent to the access control panel.

12v Power Supply

24v Power Supply

RS2 Control Panel

Weapons Room Door Case File Room Door Tech Forensics Room Door Secure Meeting Room Door Perimeter Door(s) as req’d.

Evidence Room Door Interview Room Doors(2) Reception Area Entrance Interior Partition Door(s) as req’d.

ACS MUST MEET FIPS 201 &

HSPD 12 REQUIREMENTS.

CR

Access Control for rooms with card readers Access Control System

DC

Intercom System Intercom System Details AX-series AiPhone required – Control panel in the LAN Room Reception Area door requires remote All master stations will be desktop mounted with patch cable connected to OIG CAT6a drop Master station locations require an additional CAT6a drop Master stations will utilize OIG network drops and a patch cable from the patch panel in the LAN Room to the AX-series control panel.

At a minimum, the 5 master stations will be located in the following areas:

Additional master stations require approval of the OIG Chief Security Officer and/or FSSD Director

AiPhone Central Exchange Unit

OIG Network Patch Panel Master Station Master Station Master Station Master Station Master Station Door Remote Door Remote Intercom List of Primary Components AX 248C Central Exchange Unit AX-DV Video Door Station AX-8MV Video Master Station