Attachment 1 - PWS 832366447.docx

CUI

Performance Work Statement (PWS) for Security System Upgrade DISA PAC & DISA Data Center Hawaii as of February 22, 2023

Contract Number:

Contractor Name:

1. Contracting Officer’s Representative (COR) and Site Contacts

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

2. Contract or Task Order Title. Security System Upgrade

3. Background. DISA PAC and Data Center Hawaii are access-controlled and monitored to provide operational and mission security for customer programs, equipment, and data processing. Changes in operational requirements, on-going and changing security concerns and aging systems all require that DISA continue to invest in maintaining modern, operational, secure access control and surveillance systems at its facilities. The head-end servers are outdated and no longer serviceable. Existing access control card readers are not reliably functioning. Old cameras require replacement with new digital cameras along with monitors and video recorders to maintain effective security monitoring for this Department of Defense (DoD) Core Data Center.

4. Objectives. Upgrade the DISA PAC and Data Center Hawaii Security System head-end servers, Access Control System (ACS) to include door lock and release components and Closed Circuit Television (CCTV) surveillance systems to include cameras, monitors and Network Video Recorders (NVR).

5. Scope. The contractor shall provide and install new Lenel OnGuard security system equipment and components to provide for an integrated security system with replacement upgrades of outdated or obsolete equipment and components of the existing security system in Building 77. Provide, install, and configure new Head-end Servers for system management and control of ACS and CCTV surveillance. Provide and install new ACS that meets FIPS PUB 201-3 standards and fully integrates with the security camera system. Replace card readers at designated doorways with associated door locking and release controls to include magnetic locks, push-to exit buttons and exit push/crash bars. Provide and install new digital, cameras to replace existing cameras. New Cat 6 Cabling in purple insulation and installed in purple color-coded conduit is required to support new ACS Card Readers, CCTV Cameras, and NVRs. Additionally, a solution is required to allow manual control for CCTV Point, Tilt, Zoom (PTZ) camera tracking. All new cameras and NVRs shall be National Defense Authorization Act (NDAA) compliant. Upgrade of the security system shall include detailed planning with schematic drawings, installation of new equipment and components, and removal of all obsolete security system equipment, cabling, and components once installation of the upgraded security system is complete, operational, and accepted.

Plans of the facility indicating the layout of existing security equipment are available solely to vendors proposing on this requirement through the contracting office. These plans are restricted for security reasons and will not be shared or passed to others outside the interested vendors. Digital Computer Aided Design (CAD) layout plans of the facilities, with existing security equipment and communications layout information, will be provided at time of award to the successful contractor.

The Contractor shall be (or be teamed with) a certified reseller of security system software and head end equipment with manufacturer licensed/certified installation personnel.

6. Specific Tasks.

6.1 Task 1: Project Management.

The contractor shall provide project planning to execute the requirements per this PWS to include preparing and submitting a detailed project schedule based on site investigation of existing conditions, shop drawings with Network Diagrams, and product data sheets provided to the Government for approval to accomplish the project requirements as identified in this PWS and Appendices.

6.1.1 Subtask 1.1 - Project Schedule. The contractor shall provide a project schedule developed using Microsoft (MS) Project or similar program. Schedule shall use ‘critical path’ method and identify all milestones; the schedule shall include start date, submittal dates, key milestone dates, and completion dates as a minimum. The project schedule shall incorporate phasing of the project execution to include sequence of access control card reader and camera removal and installation, conduit install and material data sheet submittals. The project schedule shall be reviewed at weekly progress meetings, and updated when changes occur.

6.1.2 Subtask 1.2 – Survey Existing Conditions. The contractor shall perform site survey(s) after contract award and review the as-built drawings to gather information on existing conditions and have a complete understanding of existing conditions and required work. The contractor shall investigate and verify all existing conditions of the security system to confirm the number, location, and type of installed equipment and the support requirements for each.

6.1.2.1 Conductors in Conduit. All new conductors (power and data) are required to be installed into conduit (not free-run). Where existing (legacy) equipment is used, retrofit of existing conductors into conduit is not required until that legacy equipment is replaced. Installation plans with detailed schematic drawings shall explicitly indicate where legacy free-run conductors (power and data) are located and plan for re-routing in conduit. Where legacy equipment is replaced, conductors shall be replaced and installed into conduit (not free-run), unless in existing purple color-coded conduit. Existing conduit may be used if appropriately labeled for security system equipment at both ends.

6.1.2.2 Record Drawings. Existing record drawings are available to the contractor, but these record drawings should not be viewed as complete and accurate. The contractor shall field verify all existing conditions prior to commencing with any work.

6.1.3 Subtask 1.3 - Shop Drawings and Product Data Submittals. The contractor shall prepare and submit detailed shop drawings for conduit run locations and product data from Original Equipment Manufacturer (OEM) of cameras, NVR equipment, cabling, and conduit, and Manufacturer’s Safety Data Sheet (MSDS) of fire stop sealant for Government review and approval. Shop drawings shall include Network Diagrams with showing switches, ports, risers, and equipment. Allow 14 calendar days for Government reviews. Drawings will be reviewed by the COR or another Government official that will be identified during the award.

6.1.3.1 Shop Drawing Submittals. Shop drawings shall include, but not limited to, Server Rack Elevation, Camera Details including Fixed Interior Dome, Fixed Exterior Dome, Interior/Exterior PTZ, 360 degree, CCTV Device Location, POE Switches, Workstations, Network Riser Diagram, Surveillance Riser Diagram, Conduit Routing, and Access Control Device Location.

6.1.3.2 Product Data Submittals. Product data shall meet the salient features as stated for each equipment and component as required in this PWS.

6.1.4 Subtask 1.4 - Project Status Meetings. The contractor shall conduct recurring weekly project status meetings during project execution, provide schedule updates, and record meeting minutes for distribution.

6.1.5 Subtask 1.5 – General Requirements.

6.1.5.1 License/Certifications. The Contractor shall be (or be teamed with) a certified reseller of current integrated security system software and head end equipment with licensed/certified installation personnel. Certifications shall be provided for Government review.

6.1.5.2 Performance Work Hours. All work will be completed during normal business hours (Monday - Friday, 7:30 a.m. – 4:00 p.m., excluding Federal Holidays). The only exceptions to the normal business hours would be working after duty hours around mission operations or electrical outages (if required) and to work alternate duty hours to work around mission operations on occasion with the Government providing seven-day notice for exceptions. The Government will support additional work hours or works days if required to support the proposed installation schedule. The additional work hours or days must be coordinated with the Government a minimum of seven (7) days prior to scheduling additional hours or days.

6.1.5.3 System Operation Outages. Any operational outage of the security system or components shall be limited to the maximum extent possible and shall be coordinated in advance with a minimum of three (3) workdays notice to the site Security Management team.

6.1.5.4 Travel. Travel in and around the primary place of performance may be required throughout the period of performance. Contractor will be authorized to invoice monthly for all approved travel costs incurred and approved by the COR. Travel shall be authorized by the COR in writing prior to performance and will be paid in accordance with FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel and other direct costs in accordance with the schedule contractor’s accounting practices.

6.1.5.4.1 Travel Authorization Requests (TARs) shall be required prior to travel and Travel Vouchers at completion of travel shall be required for Government review and approval. Travel voucher reimbursement requires actual receipts for airline, lodging, parking fees, rental car, and fuel costs, submitted in accordance with the Joint Travel Regulations (JTR).

6.1.5.5 Dust-Free Work Environment. Clean work areas at least once a day and remove debris from inside the building daily. No dust can be allowed into the IT equipment racks. Use HEPA filter vacuums and use tack-pads (at room entrances) in rooms with IT equipment.

6.1.5.6 Repair of Finishes. The contractor shall maintain or return all existing finishes to pre-work condition and repair all damage due to installation activities.

6.1.5.7 Applicable Standards and Guidelines. When there are conflicts between codes and standards that are not specifically addressed in this PWS, the more stringent shall apply. The codes, standards, and publications most current at the date of contract acceptance shall be those referenced. All work shall be done in accordance with the latest version(s) and/or edition(s) of the following codes and standards:

· American Society for Testing and Materials (ASTM) Standards E814 and E1966

· DoD 5200.08-R, Physical Security Program

· NFPA 70 National Electrical Code

· NFPA 70E Standard for Electrical Safety in the Workplace

· International Building Code (IBC)

· Uniformed Facilities Criteria (UFC) 4-010-01

· Underwriters Laboratories (UL) Standards 1479 and 2079

· United States Army Corp of Engineers (USACE) Engineer Research and Development Center (A/E/C) Computer Aided Design (CAD) Standard

Deliverables for Task 1:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

6.2 Task 2 – Head-end Server Upgrade.

Provide and install Security System head-end server, integration modules, and operating software.

6.2.1 Sub-Task 2.1 – ACS Head-End System Servers, Workstations, Keyboard, Video, Monitor (KVM), and Enrollment Pad. The contractor shall provide Redundant Head-End System with redundant headend security system servers to include Keyboard, Video, and Monitor (KVM) equipment to operate servers from installed location in the Data Center Computer Room, Rm 180. System shall also include redundant networking devices (PoE switches, other network switches, multiplexers, and transceivers). All equipment shall be installed per the manufacturer’s recommendations.

6.2.1.1 Head-End Servers. Two (2) Head-end Redundant Array Independent Disk (RAID)-5 access control servers shall be provided with Lenel OnGuard operating software and license for the ACS networks, one in the DISA PAC Security Management Office (Rm 109) and one in the Data Center computer room (Rm 180). Servers shall be server-class designed for installation in a standard 19” rack. The new system shall operate on its own private data (IP) network. None of the servers, workstations, switches, or other IT equipment in either private data (IP) security network will be connected to either the internet or any DISA LAN channels or have any other external connectivity. All Operating Systems (OS) and system software (Integrated Security System and Video Management Software (VMS), and Virtual Machine (VM)) will be updated to the latest compatible versions. Each OS, and the Lenel, VMS and VM software will also have all compatible patches installed.

6.2.1.1.1 The head-end system shall meet Lenel system specifications and be accessible via IP to view and access ACS to allow entry and view of CCTV surveillance video. All of the head end equipment listed will be configured to work at 100% capacity.

6.2.1.1.2 Existing servers will not be removed until the new servers are successfully placed into operation and have been fully tested to operate at full capacity per the requirements listed in the contract Performance Work Statement.

All old equipment will be given to the site Security Manager for disposal instructions before being removed from the site for contractor to recycle/dispose in an environmentally safe manner.

6.2.1.2 Power Source. All system equipment under this task shall be configured with dual power supplies (dual corded) for redundant power cord capability from the building’s Uninterrupted Power Supplies (UPS). UPS power for Room 109 shall be supplied from Room 141.

6.2.1.3 Access Control Server Salient Features. Servers shall meet the following minimum requirements:

a. Windows Server, 2022 or most current edition

b. Processor -- Intel® Xeon® E5-2620 v4 2.1GHz, 20M cache, 8.0GT/s QPI, turbo, HT, 8C/16T (85W) maximum, Memory 2133MHz; or equivalent.

c. Processor Thermal Configuration – 1 or 2 CPU standard

d. Memory -- 32GB minimum (RDIMM, 2400MT/s based on processor max. memory) with Advanced ECC

e. Hard Drives -- OS/Data: 600GB 10K RPM SAS and/or 1.2TB 10K RPM SAS or equivalent hot plug, SED with appropriate number and size for OS, software, and data; and for RAID requirements

f. RAID Requirements -- RAID 1 for OS and RAID 5 for data/security system

g. RAID controller -- Appropriate for RAID configuration above, minimum 8GB NV Cache

h. TPM -- 2.0 FIPS compliant

i. Riser -- As required for configuration

j. Network Adapter -- Broadcom 5720 Quad Port 1Gb LOM; or equivalent

k. Internal Optical Drive -- 16x DVD+/- RW optical disk drive

l. Power -- Dual, hot-plug, redundant 750W power supplies with two NEMA 5-15P, 1 meter long power cords

m. Bezel -- Yes

n. Rack Rails -- Sliding with cable management arm

o. Power Mgmt. BIOS Settings -- Power Controller or power saving BIOS setting

p. Operating System -- Windows Server 2016 R2 STD, factory install, 2 SKT, 2 VM (min.)

q. Media kit with factory installed STD DGRD

r. Database -- MS SQL Server 2017 STD, NFI

s. With 2016 DGRD media

t. 5 User CALs included with software; no additional CALs required

u. System Documentation -- CD/DVD

6.2.1.4 Access Control Main Workstations. Provide three (3) Access Control Workstations for the ACS network that are backed up by stand-alone UPS power units with two video monitors, keyboard, and mouse. Workstations shall be located in the DISA PAC Security Management Office (Rm 109) with enrollment card reader pad, the DISA Network Operations Center (DNC) Watch Desk (Rm 229), and one at the Data Center Security Manager Desk (Rm 196) with enrollment card reader pad.

6.2.1.4.1 The Access Control Main Workstations shall meet the following requirements:

a. Small form-factor tower

b. Processor -- Intel® Core™ i5-6500 (Quad Core 3.2GHz, 3.6Ghz Turbo, 6MB); or equivalent

c. Memory -- 8GB minimum (with ECC preferred)

d. HDD -- 500GB, 7200 rpm, FIPS self-encrypting hard drive

e. Network Adapter -- 1Gbit NIC

f. Internal Optical Drive -- 16x DVD+/- RW optical disk drive

g. Operating System -- Windows 10 Professional (64-bit) with recovery DVDs

h. System Documentation -- CD/DVD

i. Two Video monitor cards at minimum for two display ports and one HDMI for video output of monitor screens per card to ensure no lag, buffering, or crashing while viewing multiple CCTV live feeds. One workstation for Security Manager (Room 102) shall have three Video monitor cards at minimum.

6.2.1.5 KVM. Provide one (1) KVM unit located in the Data Center Computer Room 180.

6.2.1.6 Enrollment Card Reader Pad. The enrollment card reader pad shall be able to activate or deactivate any Common Access Card (CAC) both contact and contactless to the pivClass card readers under this scope. The pad shall be located in the DISA PAC Security Management Office (Rm 109) and Data Center Security Manager Desk (Rm 196).

6.2.2 Subtask 2.2 – Controllers. The contractor shall procure and install at least two (2) intelligent system controllers, Lenel 3300, and at least two (2) access control system power controllers that are manufactured by Altronix or equivalent. Controllers shall be connected to building UPS power. Both types of controllers must be able to interface, receive and transmit all information for the installed devices and the stock devices that may be installed in the future.

6.2.3 Subtask 2.3 – Software. The contractor shall provide Access Control Software of Lenel OnGuard to meet required DISA enterprise-wide compatibility. Software shall be able to provide full functionality of all devices under this contract. Software license shall be provided for each application. Verify and document the installed software/firmware versions, workstation operating systems and antivirus software.

6.2.3.1 Security Technical Implementation Guide (STIG) Requirements. The contract shall ensure all computer equipment, operating systems, applications, and peripheral devices installed to support this system must meet any applicable STIG requirements (http://iase.disa.mil/stigs/index.html). The contractor must ensure that all proposed equipment and systems meet all current STIG requirements with certification provided to the site Security Manager prior to system acceptance.

6.2.3.2 Security Network Connections. The security networks are private, closed networks with no connection to any outside Network, including the DISA LAN and direct connections to the internet, or otherwise. Mass storage devices such as USB drives, CompactFlash, external hard drives, and SD cards will not be connected to any security system equipment. All CDs and DVDs will be scanned by security personnel prior to being connected to security system equipment.

6.2.3.3 External Media. All external media shall be scanned by security personnel and is in-bound only (will not leave the site). Sole property of DISA and DISA will be responsible for disposal.

Deliverables for Task 2:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

Task 3 – Access Control System (ACS) Upgrade.

Replace all ACS card readers and install new readers with new Internet Protocol (IP) addressable dual-interface, Radio Frequency Identification (RFID) and chip-enabled Common Access Card (CAC) Readers with Keypads. Provide and install door hardware locking and release components to allow for optimal operation of all doors that have access control devices installed during this scope to include High Security locks as indicated on Appendix A - ACS Door & CCTV Camera Schedule. Contractor shall field verify numbers of required card readers and door locking and release hardware. ACS upgrades include:

a. Provide new ACS Card Readers with Keypads.

b. Provide door locking and release mechanisms to include single and dual magnetic lock sets, electronic strikes, and push/crash bars.

c. Provide all necessary power controls and control data wiring.

d. Remove all old, unused legacy ACS equipment and components.

e. Provide additional stock (spare) devices and hardware for future requirements, not installed.

f. All equipment shall be installed per the manufacturer’s recommendations.

6.3.1 Subtask 3.1 – Card Reader Installation. The contractor shall provide and install ninety-six (96) ACS card readers with new Internet Protocol (IP) addressable dual-interface, Radio Frequency Identification (RFID) and chip-enabled Common Access Card (CAC) Readers with Keypads, as indicated on Appendix A - ACS Door & CCTV Camera Schedule. Old card readers shall not be removed until the new card readers are available on-site and ready to be installed on a one-for-one basis.

6.3.1.1 Card Reader Salient Features. The new card readers shall meet or exceed the following salient features, equal to HID Global pivCLASS RK40 contact, plus contactless dual interface reader, that include:

a. Internet Protocol (IP) Addressable

b. Card Authentication Key (CAK) mode using 13.56 MHz contactless smart card technology with dual interfaces that provides contact interface as backup in case a card’s contactless antenna is broken.

c. Supports reading any PIV-based card with contactless interface and containing a CAK certificate.

d. Configurable to operate in either Wiegand or strong authentication mode (Privileged Access Management (PAM) or third-party panel).

e. Dynamically switchable authentication modes (using PAM).

f. Supports reading legacy cards such as iCLASS, iCLASS SE, and standard Prox.

6.3.1.2 ACS Intelligent Controllers with Dual Reader Interface Modules. The ACS Intelligent Controllers and Dual Reader Interface modules shall be compatible with the Lenel security system and capable of supporting two card readers. The contractor shall provide associated power supplies to support the controllers and modules.

6.3.1.2.1 The ACS Intelligent Controllers with Dual Reader Interface modules shall be divided in two separate networks for the main DISA PAC building area and the Data Center HAW areas with head-end locations designated as follows:

F1 - Building 77 Security Office, Room 109 F2 - Building 77 Data Center Computer Room 180 security rack – verify specific location

6.3.1.3 Cipher Lock Removal. The contractor shall remove all MORPHO Biometric scanners and replace them with new dual-interface, Common Access Card (CAC) with RFID and chip-enabled Card Readers with Keypads as indicated on Appendix A - ACS Door & CCTV Camera Schedule.

6.3.2 Subtask 3.2 – Door Locking and Release Hardware. The contractor shall ensure all door locking and release hardware and components to allow for optimal operation of all doors that have access control devices installed during this scope of work to include High Security Locks. Door locking and release components shall include, but not limited to, single and dual magnetic lock sets, electronic strikes latch, motion sensors, push-to-exit buttons, and push/crash bars that meet life-safety standards, as indicated on Appendix A - ACS Door & CCTV Camera Schedule. Each door locking mechanism noted on the ACS Door Schedule must be deactivated with either a push/crash bar, door lever, motion sensor or a push-to exit egress button. Replacement components shall be on-site, ready to installation prior to removal of existing components. Hardware shall be properly rated when placed on doors associated with fire-rated walls. All conductors must be run in purple conduit specific to DISA’s security systems. Remove all old, unused legacy ACS equipment and components and dispose off-site in an environmentally safe manner.

6.3.2.1 Magnetic Locks and Electronic Strikes. The contractor shall re-use the existing single and dual magnetic locks and electronic strikes if the current components are in full operating order. New 1,200-pound rated single or dual Magnetic Locks, where required, and heavy-duty Electronic Strikes components shall be installed as indicated on Appendix A - ACS Door & CCTV Camera Schedule. Contractor is responsible for integrating these into the access control system for each door to include associated hardware, firmware, or software necessary for this integration.

6.3.2.2 Egress Motion Sensors and Push-to-Exit Buttons. The contractor shall re-use any existing installed egress motion sensors if the current components are in full operating order and remove push-to-exit buttons on doors that currently have them. Each door magnetic lock must be deactivated with either a motion sensor and/or push/crash bars. Contractor is responsible for integrating these into the access control system for each door to include associated hardware, firmware, or software necessary for this integration.

6.3.2.3 Egress Push/Crash Bars. The contractor shall re-use the existing installed emergency egress push/crash bars if the current components are in full operating order. The contractor shall replace any exiting push/crash bars that are not functioning properly to manufactures recommended standards to meet life-safety code requirements. The contractor shall install new door release components as required to include push/crash bars that meet FIPS PUB 201-2.C standards, as indicated on Appendix A - ACS Door & CCTV Camera Schedule. The contractor is responsible for integrating these into the access control system for each door to include associated hardware, firmware, or software necessary for this integration.

6.3.2.4 Door Lever Sets. The contractor shall procure and install door lever sets with electronic strikers as indicated on Appendix A - ACS Door & CCTV Camera Schedule. The contractor is responsible for integrating these into the access control system for each door to include associated hardware, firmware, or software necessary for this integration.

6.3.2.5 Keyed Locks. All push/crash-bars and Door Lever Sets shall be keyed-alike with master and cylinder locks.

6.3.2.5.1 Key Control. The contractor shall log which locks and keys were given to specific government representative, by name and date.

6.3.3 Subtask 3.3 – High Security Lock Replacement. The contractor shall remove and replace various types of door locking mechanisms to allow for optimal operation of all doors that have access control devices installed during this scope of work to include replacing one (1) existing LK7000-X09 locks with installation of new LKM10K -X10 Type IV Panic Bar model with MAS X10 locks. Contractor is responsible for installing door levers and blanking plates to allow for the full operations of each door. The contractor shall utilize a Certified Locksmith who shall install all High Security locks.

6.3.4 Subtask 3.4 – Stock (Spare) Devices and Hardware for ACS. The contractor shall provide Stock Devices and Hardware to the DISA Site Security Manager, as extra stock only, not to be installed, prior to completion of contract, to include:

a. Twelve (12 each) card readers equal to a HID RKCL4024

b. Twelve (12 each) dual card reader interface modules

c. Two (2 each) 1,200 pound rated, dual magnetic lock sets

d. Two (2 each) electronic strikes

e. Two (2 each) emergency egress push/crash bars

f. One (1 each) LKM/X-10 High Security Lock

Deliverables for Task 3:

*Standard Distribution: 1 electronic copy of the transmittal letter without the deliverable to the Contracting Officer Representative (COR) and transmittal letter with the deliverable he Site POC.

6.4 Task 4 – CCTV Cameras, Controls and Monitors Upgrade.

Provide, install, and configure new digital, Internet Protocol (IP) addressable cameras to replace old cameras as listed on Appendix A - ACS Door & CCTV Camera Schedule. Provide a manual camera control solution for the Point, Tilt and Zoom (PTZ) cameras to allow tracking. Provide all necessary Switches, Power-over-Ethernet (PoE) injectors, power enclosures, batteries, power backup batteries, and controller/interface units/boards, enclosures, and associated equipment to support the system. New cameras shall be supported with connections using new purple-jacketed CAT 6 cabling in “purple” color-coded conduit.

6.4.1 Subtask 4.1 – New Camera Installation. The contractor shall provide, install, and configure new Internet Protocol (IP) addressable digital CCTV cameras to replace all fifteen (15) existing cameras with the purchase and install of new Internet Protocol (IP) addressable digital cameras to include: eight (8 each) interior fixed and nine (9 each) exterior fixed cameras, two (2 each) interior PT and three (3 each) exterior PTZ cameras, six (6 each) interior 360-degree, four-lens dome cameras and five (5 each) exterior 360-degree dome cameras (note: 3 of the new interior 360-degree cameras will replace 4 existing old fixed cameras), one (1 each) interior 270-degree and two (2 each) exterior 270-degree cameras, and one (1 each) exterior 180-degree camera.

All new cameras shall include new mounting brackets required to support the specific type of camera, as indicated on Appendix A - ACS Door & CCTV Camera Schedule. Old cameras shall not be removed until new cameras are available on-site and ready to be installed on a one-for-one basis. All equipment shall be installed per the manufacturer’s recommendations. Placement and mounting orientation shall be coordinated and approved with the site’s Security Managers.

6.4.1.1 Camera Compatibility. The new cameras shall be fully compatible with the site’s integrated operating system and National Defense Authorization Act compliant and shall be configured into the system to function at 100% capacity.

6.4.1.2 Camera Feed Connection. All Camera feeds shall be connected to ports in the Computer Room Security IT Rack. Additional connections for viewing camera feeds shall be connected to the Security Management Office in Room 109, DNC Watch Floor Desk, Room 229, and Building 77 Data Center Security Officer Desk, Room 196.

6.4.1.2.1 Camera Feed Labeling. Camera feeds shall be labeled on both the video feed cable (CAT 6 cable) and the port on the NVR and Server.

6.4.1.2.2 Port Network Switch. The contractor shall provide and install rack mountable network switches with up to 24 gigabit RJ45 ports to support all camera feeds and allow for 10% growth. All ports shall be labeled. Switches shall provide a nominal 780W of PoE power for network devices.

6.4.1.2.3 Optical Transceivers and Direct Attach Cables. The contractor shall use Optical Transceivers and Direct Attach Cables with range from 30M to 40KM, and data rates from 200Mb/s to 40Gb/s for improving CCTV system performance where necessary.

6.4.1.3 Camera Alignments. The contractor shall have the cameras aligned, configured, aimed, and focused on the site’s designated mounting locations to provide the best quality video for each location. The contractor shall review and coordinate final camera views and angles with the site’s Security Managers and provide a camera alignment checklist documentation for contract files to confirm alignment, configuration, aim, and focus has been completed and confirmed with the site point of contacts.

6.4.1.4 Camera Salient Features. The new cameras shall meet or exceed the following salient features:

a. Dome style

b. Internet Protocol (IP) Addressable

c. Power over Ethernet, Class 3

d. Camera Image Sensor: Complementary Metal Oxide Semiconductor (CMOS)

e. Image Senor Size (Chip inch size): 1/3

f. Voltage: Power-over-Ethernet (POE)

g. Video Resolution: 1920x1080 minimum

h. Focal Length: 3.2 – 10 mm

i. Wide Dynamic Range: Forensic Capture

j. Intelligent tracking

k. Intelligent video motion detection in color

l. Minimum Illumination/Light Sensitivity (Color): 0.16 lux

m. Horizontal Field of View: 90 - 34 degrees

n. Vertical Field of View: 50 - 20 degrees

o. Frames per second: 50/60

p. Day and Night Functionality

q. Optimized Infrared (IR) capable built-in

r. Starlight / Lightfinder capable and Back Light Compensation

s. Zipstream capable for signal compression: H.264, H.265, MJPEG

t. Exterior cameras with the environmental protection for outdoor exposure

u. Motion Sensor Capable to provide notification of movement to the system

v. For PTZ Cameras: 360 degrees continuous rotation and quad streaming

w. For 360-degree Cameras: Omnidirectional with automatic dewarping

x. Equal or similar to state of the art Bosch or Axis models

6.4.2 Subtask 4.2 – CCTV Camera Manual Control. The contractor shall provide a manual control solution for the CCTV surveillance system to allow security personnel to use controllers (Computer Mouse) for manually controlling the PTZ cameras and/or choose the next camera in an area to track or follow activities throughout the facility. The contractor shall provide and install three (3) CCTV system controllers to replace the existing CCTV Camera system control units located in Building 77 Security Office (Room 109), the DNC Watch Floor Desk, (Room 229), and the Data Center Security Officer Desk (Room 196) as designated on Appendix A - ACS Door & CCTV Camera Schedule.

6.4.2.1 CCTV Manual Controls Testing. The contractor shall conduct testing of the manual controls for the CCTV camera system and equipment in accordance with manufacturer’s procedures to ensure operational capability.

6.4.3 Subtask 4.3 – Existing Camera Replacement and Removal. The contractor shall have the new replacement cameras for the specific view on-site and ready to install and connect prior to removal of any the existing old cameras and cabling, as listed on Appendix A. The old camaras shall be disposed off-site in an environmentally safe manner.

6.4.4 Subtask 4.4 – Stock Devices for CCTV System. The contractor shall provide Stock Devices to the DISA Site Security Manager, prior to completion of contract, to include:

a. Two (2 each) of each Fixed cameras installed at the facility to include: two Interior fixed and two exterior fixed cameras.

b. One (1 each) of each PTZ: one interior PTZ and one exterior PTZ cameras.

c. One (1 each) of each 360-degree cameras: one interior and one exterior 360-degree cameras.

d. Two (2 each) Power-over-Ethernet (PoE) injectors

Deliverables for Task 4:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC. Devices shall be delivered to site only.

6.5 Task 5 – Monitor Upgrade.

Replace existing wall-mounted monitors and desk monitors to support the CCTV camera and monitoring system. Integrate monitors with the appropriate NVRs for continued surveillance.

6.5.1 Subtask 5.1 – Monitor Replacement. The contractor shall provide and install replacement monitors for the two (2) existing wall-mounted monitors with new 70” High-Definition LED borderless monitors in DISA PAC Security Office (Room 109). Additionally, two (2) 55” wall-mounted monitors with video feeds of the infrastructure areas (Generator Yard, Enclosure 89, UPS Room 90, and Chiller Plant, Room 73) shall be provided and one installed in the DISA PAC Facility office, Room 183, and one installed in the CDC Maintenance Office, Room 180D. Coordinate with the site Facility and Security Managers for final locations.

6.5.1.1 Monitors shall have Wi-Fi and Bluetooth completely disabled – either not included or have the option to turn off Wi-Fi and Bluetooth connection.

6.5.2 Desk Monitor Replacement. Desk monitor replacement shall include replacing six (6) existing monitors with eight new 24” High-Definition LED borderless desk monitors similar or equivalent to Dell UltraSharp U2422H 24 Monitor with the following placement: four in the DISA PAC Security Office, Rm 109 and two at the CDC HAW Security Desk, Room 196.

6.5.3 Subtask 5.2 – Monitor Testing. The contractor shall provide a Test Report of Monitor connections and video quality after monitor replacement is accomplished, prior to substantial project completion.

Deliverables for Task 5:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

6.6 Task 6 – Network Video Recorder Replacement.

Provide and install two (2) new Network Video Recorder (NVR) units to support the required 90-day storage of recorded video surveillance images. Redistribute camera feeds evenly between the new units.

6.6.1 Subtask 6.1 – Network Video Recorder. The contractor shall provide two new NVR units to enable required storage of recorded surveillance video images to meet the 90-day storage capacity. The new NVRs shall be fully compatible with the CCTV system.

6.6.1.1 The new NVRs shall meet or exceed the following salient features:

a. Capacity sized for continuous recording of a minimum of 40 cameras at full resolution and not less than 30 frames per second (fps) for 90 days of video storage

b. Windows compatible

c. Chassis: Rack mountable with up to 8 x 2.5" SAS/SATA Hard Drives for 2CPU Config, PERC/HBA11

d. System Type: x64-based PC

e. Processor: 32-gigabytes, 24M Cache, Turbo, 85 Watts minimum

f. Total Physical Memory: 12-terabytes minimum

g. Storage Access: Front drive bays

h. Full Record capability

6.6.2 Subtask 6.2 – Redistribute Camera Feeds to NVR units. The contractor shall redistribute CCTV camera feeds to new NVR units to ensure the stored surveillance images more evenly between distribute between the new NVRs. The NVR units shall be located as follows:

F1 – Building 77 Security Office, Room 109 F2 - Building 77 Data Center Computer Room 180 security rack – verify specific location

6.6.3 Subtask 6.3 – Remove Old NVR unit. The contractor shall remove and dispose of old NVR units after transferring the 90-day storage of recorded video surveillance images to the new units and clearing all images on old units prior to removal. Dispose in an environmentally safe manner off site.

6.6.4 Subtask 6.4 – NVR Testing. The contractor shall conduct testing of the installed NVR equipment in accordance with manufacturer’s procedures to ensure operational capability and proper recording.

Deliverables for Task 6:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

6.7 Task 7 – Cabling and Conduit Installation.

Provide and install all necessary plenum-rated datacom cabling and conduit to integrated security system equipment and component locations. The designated color for datacom cabling for the integrated security system is PURPLE. Existing purple color-coded conduit shall be reuse to extent possible. Weatherproof conduit shall be installed for exterior mounted cameras.

6.7.1 Subtask 7.1 – Cabling in Purple-jacketed Conduit. The contractor shall provide and install all necessary conduit and datacom cabling to integrated security equipment and component locations. All cabling used in the facility shall be plenum-rated, regardless of application. All datacom cabling to be installed shall be CAT6 copper and fiber optics, jacketed in PURPLE insulation. All conductors (power and data) are required to be installed into conduit (not free-run). All existing (legacy) datacom cabling that is CAT6 with purple color-coded jacket may remain in use if in good condition. If CAT6 cable insulation is different than purple, the cable shall be labeled at both ends as to its system, function, and equipment connected; retrofitting to change the color shall not be required, but labeling is required within 3’at each end of cable. The contractor shall ensure any exposed conduit or cables on the exterior of the facility shall match existing wall paint color.

6.7.1.1 New Cabling. The contractor shall provide and install new CAT 6 Cable in new purple color-coded conduit, purple by manufacture, not painted, where required to support the new ACS components and cameras if current CAT 6 cabling is not currently routed to the designated component location. Electrical conductors, to include 24V, are not required to follow the color scheme. All new conductors (power and data) are required to be installed into conduit (not free-run). Wall penetrations shall be sealed around conduit with fire stop sealant. Assure new cabling installed in air plenums (above ceiling and below raised floor) are properly rated for that type of installation. Comply with provisions of ICD/ICS 705 when encountering perimeter walls of secure spaces. Exposed conduit or cables on the exterior of the facility shall match existing wall paint color. All conduit and associated fixtures located at secure perimeter walls shall be surface-mounted. Utilities shall not traverse a secure space to serve another space.

6.7.2 Subtask 7.2 – Conduit Routing. The contractor shall route conduit through unclassified areas and hallways, above suspended ceilings, in the most direct linear path feasible. Weatherproof conduit shall be installed outside for exterior mounted cameras. All conduit and cable routing shall be coordinated with the Site Security Manager. The contractor shall provide red-line drawings of conduit routing to the Government for approval prior to installation.

Deliverables for Task 7:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

6.8 Task 8 – System Commissioning and Testing.

Commissioning of the security system shall ensure proper operation of each component and the integrated system.

6.8.1 Subtask 8.1 –Commissioning and Testing of ACS and CCTV System. The contractor shall develop, have approved, and execute complete Functional Performance Test (FPT) procedures for the security systems that show operation as designed in regular operational and simulated contingency conditions. FPTs are required to show: How the system meets the integration requirements, Continued operation during server failure, and Typical functionality of installed equipment. Separate FPTs shall be developed and executed for each system and equipment type, as well as for the integration requirements.

6.8.1.1 Test all newly installed network, systems, software, controls, cables, and components. Document results. The contractor shall conduct testing of the newly installed ACS Card Readers and CCTV cameras system along with supporting equipment in accordance with manufacturer’s procedures to ensure operational capability and viewing alignment. The contractor shall provide testing report with results of card readers and camera operations, focus and alignment.

Deliverables for Task 8:

*Standard Distribution: 1 electronic copy of the transmittal letter with the deliverable to the Contracting Officer Representative (COR) and the Site POC.

6.9 Task 9 – Close-Out Documents.

Provide close-out documentation to include the System, Equipment and Component (SEC) labeling and inventory sheet, Operations and Maintenance (O&M) Manuals, Training presentation, As-Built Drawings of conduit routing, and Warranty Letter(s).

6.9.1 Subtask 9.1 – SEC Equipment Labeling and Inventory: The contractor shall provide and affix new labels on all new equipment installed and complete the inventory spreadsheet for all equipment removed and installed in accordance with the attached DISA Systems, Equipment, and Components (SEC) Labeling Specification at Appendix B.

6.9.2 Subtask 9.2 – Operations and Maintenance (O&M) Manuals: The contractor shall provide O&M Manuals for the new equipment installed consolidated in…