Attachment 1 - Statement of Work 02.21.2024.docx

STATEMENT OF WORK

Installation of Physical Access Control Systems

Issued by:

Portland Area Office Indian Health Service (02/21/2024)

1. Project Description The Portland Area Indian Health Service (PAIHS) requires installations and replacement of its existing security cameras and physical access control systems for facilities in the Northwest. The system must meet and maintain performance measures and regulatory requirements in accordance with Homeland Security Presidential Directive 12 and FIPS-201. The Access Control Systems (ACS) must be secure and meet Federal security requirements and integrate into the existing network infrastructure.

a. Background

Portland Area Indian Health Service consists of IHS Healthcare facilities located in Idaho, Oregon, and Washington. Most have an Access Control System but the systems need to be replaced to meet HSPD-12 requirements. Eight (8) IHS Healthcare facilities will be utilizing the Area-wide Access Control System. Locations work under this requirement have been identified in bold font.

1. Colville Service Unit 19 Lakes Street Nespelem, WA 99155

2. Omak Clinic (Satellite to Colville) 617 Benton St S, Omak, WA 98841

3. Ft Hall Service Unit 33 North Mission Rd. Fort Hall, ID 83203

4. Warm Springs Service Unit 1270 Kot-Num Rd. Warm Springs, OR 97761

5. Wellpinit Service Unit 6203 Agency Loop Rd. Wellpinit, WA 99040

6. Western Oregon Service Unit 3750 Chemawa Rd. N.E. Salem, OR 97305

7. Yakama Service Unit 401 Buster Road Toppenish, WA 98948

8. Portland Area Office (8th Floor) 1414 NW Northrup St. Suite 800 Portland, OR 97209

b. Purpose

The purpose of this requirement is to install or replace existing security cameras and physical access control systems at Portland Area Office and the Western Oregon Service Unit. As well as to determine the best course for long-term management of the system in support of the mission of the Indian Health Service: to raise the physical, mental, social and spiritual health of American Indians and Alaska natives (AI/AN) to the highest level.

At a minimum, tasks include providing security cameras, door card readers and physical access control systems for our facility pharmacies and other identified locations. Each facility has the capability of expanding the coverage throughout their facilities. All equipment must tie into the existing IHS network infrastructure. Footage from the security system as well as security access logs are to be maintained according to HSPD-12 standards and managed from the Portland Area Office. The central Access Control System database server will be located at the Portland Area Office.

This includes providing training and support to the facilities when there are specific needs that the staff are unable to achieve. If remote support does not resolve system failures, the contractor must provide on- site response within 4 hours for physical system failures. Contractor is to provide a Service Response Time Matrix and a list of location for service technicians within the 4-hour proximity. Additional tasks include facility planning, system and device maintenance, repair and support on an as needed basis.

All security devices must be compliant with Federal Regulations, Homeland Security Presidential Directive 12, and be FIPS 201 compliant and maintain compliance. System must be compatible with HHS issued 128K PIV II.

The contractor shall provide equipment, installation, configuration and additional items required to install the ACS as determined by the site survey.

The solution must include Cisco network devices, integrated into the Area-wide Lenel OnGuard systems and integrate with Microsoft Active Directory to utilize device certificates and user PIV cards for access control.

2. Requirements

The work will include the supply, configuration, and installation of ACS equipment (servers, access panels, card readers, data/video storage and other devices), licenses, cabling. The contractor shall install new equipment, making all necessary interconnections, and then verifying that the ACS is fully functional. Contractor shall include installing cabling and network equipment (switches, etc.) to support the new ACS.

a. General Requirements

The work will specify all parts, labor, and other hardware directly associated with provisioning and mounting of security cameras (indoors and outdoors) and card readers i.e. cutting or drilling, physical security, the cabling, and device connection tasks including, but not limited to:

i. The contractor will perform Project Management, Scheduling, and Quality Assurance.

ii. Permits, Licenses, Inspection Scheduling, and Fees

iii. All Installation Activities

iv. Inspections and Tests

v. Warranty for hardware and systems as installed

vi. Deliverables – (i.e. Red Line drawings, Test Reports, Schedule, Project Support Agreement, Cisco SmartNet warranty account numbers with an inventory list, Configuration Copies, etc.)

vii. The contractor is required to follow all Tribal Employment and Contracts Rights Office (TERO) requirements. TERO requirements may vary by facility.

viii. All services for this project must meet all applicable Telecommunications Infrastructure and Safety Standards including National Institute of Standards (NIST) Federal Information Processing Standards (FIPS), American National Standards Institute (ANSI), National Electrical Installation Standards (NEIS), Underwriters Laboratories (UL), etc.

ix. Cost and invoicing will be broken down into the two phases of this project.

x. New equipment (servers, switches, etc.) must be approved by IHS before the contractor orders equipment.

b. Installation Requirements

i. The access control system shall be configured and installed at the Portland Area Office to automatically maintain security, adjust power settings, and load balance between facilities. The Area Office Access Control Server must support all 8 facilities.

ii. The contractor will provide the equipment required for mounting cameras, cabling, access panels, etc. A diagram showing the suggested locations are attached.

iii. The contractor will include copper and/or fiber drops to support ACS devices, if needed. Ethernet copper category (i.e. Cat5e, Cat6) and any new ports and labeling are required to match the existing infrastructure at the facility. All ACS drops will be installed above drop ceilings where possible.

iv. The contractor will include additional configuration to the centrally located ACS servers for each new site installation.

v. All video network traffic will be on a separate physical network and not on the data/voice networks.

vi. Contractor shall certify that it is a Cisco Authorized Channel, and that it has the certification/specialization level required by Cisco to support both the product sale and product pricing, in accordance with the applicable Cisco certification/specialization requirements. Unless otherwise specified, Contractor shall warrant that the products are new and in their original box. The Contractor confirms to have sourced all Cisco products submitted from Cisco or through Cisco Authorized Channels only, in accordance with all applicable laws and current Cisco's applicable policies at the time of purchase. Contractor shall provide the Government with a copy of the End User license agreement, and shall warrant that all Cisco software is licensed originally to the Government as the original licensee authorized to use the Cisco Software.

c. Feature Sets

i. All devices and applications must be capable of using Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). The ACS will need to be IPv6 capable for future transition.

ii. Security Cameras

1. IP-based solution is required

2. Must support industry standard Power over Ethernet (PoE)

3. Each camera will be clearly defined by an IP address and Location Name

4. Recorded/Live footage will clearly note which camera (IP address, location)

5. Recorded/Live footage will clearly note Date/Time recorded

6. Only record when motion is detected

7. Camera should provide overlapping coverage to eliminate any and all blind spots

8. 3 Megapixel or higher resolution camera (to allow for clear facial recognition) for recorded/live footage is required for cameras providing coverage of:

a. Pharmacy entries and exits; Counseling Room(s); Pharmacy Patient Reception; Bulk pharmaceutical storage

9. 5 Megapixel or higher resolution camera (to assist with investigation of discrepancies, thefts, and/or diversions) for recorded/live footage is required for cameras providing coverage of:

a. ScriptPro (or other Automated Dispensing unit(s)); Controlled Substance safe(s); Prescriptions awaiting pickup (storage/shelving); Medication filling location(s)

10. Cameras must allow for recording in low light environments

a. Auto sensor adjustment

b. Camera continuously adjust the exposure to optimize the image

c. Night mode

11. Cameras are required to provide 360-degree coverage and allow for celling or wall mount installation

12. Cameras are protected against tampering/disabling

13. Data/Video Storage Requirements

a. Storage hardware for recorded footage should be capable of saving at least forty-five (45) days of security footage for each camera, and should be easily upgradeable to accommodate expansion/increased storage capacity

3. Phase 1- Portland Area Office

a. Scope

i. Must be completed before Phase 2.

ii. Upgrade existing Lenel OnGuard Access Control System to current version.

iii. Area Office can provide a Hyper-V virtual server for the ACS server. If a Hyper-V server is not recommended, vendor must provide a new physical server.

iv. Provide 10 Lenel terminal services licenses for remote administration.

v. IHS can provide the Microsoft Windows licenses for Windows 2019, Windows 2022, Windows 10 and Windows 11.

vi. IHS can provide Microsoft SQL licensing.

vii. Update existing control panel firmware and software.

viii. Provide and install 3 new cameras. 1 viewing the primary entry area, 1 camera viewing the south stairwell entry and 1 camera viewing the west stairwell entry.

ix. Provide and install new cables for new access control wiring.

x. Provide and install new access control cabinet in Main Distribution Frame (MDF).

xi. Provide and install new cable pathways in drop ceiling to include new j-hook support and conduit sleeves into IDF. Cables will be supported with J-hooks and be attached to building structure. Existing cable trays and pathways will be attempted to be re-used as much as possible.

xii. Provide Milestone XProtect video storage hardware for recorded footage should be capable of saving up to sixty (45) days of security footage for each camera, and should be easily upgradeable to accommodate expansion/increased storage capacity.

b. IDF

i. Install new access control panel and provide a Certified technician for proper installation.

ii. Provide new security panel for new camera system. Areas covered by camera system will be approved by IHS management.

iii. Provide and install data/video storage device.

iv. Provide and install Cisco switch dedicated to video network traffic.

c. CABLE DEMOLITION

i. Provide onsite labor to remove any existing/unused access control cabling from IDF to existing source.

ii. Cable removal will start at the control panel and work out towards the workstation.

iii. Any cables that are to remain in the ceiling as abandoned will be labeled and identified per NEC code.

d. CUTOVER

i. Cutover for site access controls will need to be done after office hours and coordinated with IHS Management for an adequate and timely procedure.

e. ADDITIONAL NOTES

i. Doors that must be accessed by IHS and Tribal members cannot be changed to PIV and must remain on previous access control system unless told otherwise by IHS management.

4. Phase 2 – Western Oregon Service Unit The Western Oregon Service Unit has an existing Lenel OnGuard ACS with security cameras and card readers. The system is managed by the ACS server located at the Portland Area Office. The following additions will be integrated into the existing system.

a. Scope

i. Upgrade existing Lenel OnGuard Access Control System to current version.

ii. Upgrade Windows devices to Windows 2019 or Windows 10. IHS can provide the Microsoft licenses.

iii. IHS can provide Microsoft SQL licensing.

iv. Install government-provided R450 server and install required Lenel software and updates. Confirm fully-functioning camera and access card system new Dell server/desktop that supports the facility.

v. Update existing cameras and control panels firmware and software.

vi. Provide and Install 8 new cameras. (6 interior, 2 exterior)

1. Provide, replace, and install pharmacy cameras (replace obsolete existing pharmacy cameras)

vii. Provide and Install 3 new keypads. Replace existing alarm system). Customer will show location.

viii. Provide and install 3 new interior card readers.

ix. Provide and Install new cables for new cameras that will be installed.

x. Provide and install new cable pathways in drop ceiling to include new j-hook support and conduit sleeves into IDF. Cables will be supported with J-hooks and be attached to building structure. Existing cable trays and pathways will be attempted to be re-used as much as possible.

xi. Make sure all the areas inside of pharmacy, med drop box outside of pharmacy, and parking lot of building are fully covered by camera system.

xii. Replace existing Lenel Network Video Recorder hardware with a Milestone XProtect video storage hardware. Provide Storage hardware for recorded footage should be capable of saving up to forty-five (45) days of security footage for each camera, and should be easily upgradeable to accommodate expansion/increased storage capacity

xiii. Provide a second Milestone XProtect video storage device for Pharmacy recorded footage should be capable of saving up to sixty (60) days of security footage for each camera, and should be easily upgradeable to accommodate expansion/increased storage capacity

b. IDF

i. Install new access control panel and provide a Certified technician for proper installation.

ii. Update and add onto current security camera system, confirming with customer all areas of interest are fully covered with our camera layout and positioning.

c. CABLE DEMOLITION

i. Provide onsite labor to remove any existing/unused access control cabling from IDF to existing source.

ii. Cable removal will start at the control panel and work out towards the workstation.

iii. Any cables that are to remain in the ceiling as abandoned will be labeled and identified per NEC code.

d. CUTOVER

i. Cutover for site access controls will need to be done after office hours and coordinated with HIS Management for an adequate and timely procedure.

e. ADDITIONAL NOTES

i. Doors that must be accessed by IHS and Tribal members cannot be changed to PIV and must remain on previous access control system unless told otherwise by the Contracting Officer.

ii. Must confirm doors that can be converted to PIV with IHS management due to tribal employees also needing access.

iii. Validate all cameras working, are viewable and recorded/historical video is available.

iv. Contractor is to provide a detailed floor plan showing the location and POV of each camera on the facility.

5. Facility Requirements

a. The contractor can perform work during dates/times are coordinated with the Portland Area Office.

b. Remote access provided when security and HSPD12 requirements are met.

c. Storage and staging of equipment and materials at the worksite shall be coordinated with the Facility Manager. The Contractor is responsible for all security regarding the staging of equipment.

d. Contract employees will check in as "visitors" each day at the office. Contractors entering the building will show identification and sign in and out each time they enter/leave the building.

e. It is the contractor’s responsibility to work with the facility manager to become familiar with the building layout, security requirements, vehicle access, fire safety, emergency exits, and evacuation procedures.

f. Contract employees must follow COVID requirements at the facility, if applicable.

6. Government Responsibilities

a. Workspace will be made available for the Contractor while onsite.

a. Access to building drawings showing network Main Distribution Frame (MDF) and Intermediate Distribution Frames (IDF) will be provided by the government.

b. The Portland Area Office can make available previous project site surveys and facility floor plans.

c. The Government shall approve the contractor developed milestone for the completion of the assigned tasks.

7. Constraints

a. The contractor must be a United States of America citizen. Must meet IHS security and HSPD12 requirements for network access. Work performed from remote locations must be performed within the United States.

b. All tasks under this contract will be conducted in accordance with Homeland Security Presidential Directive 12 https://www.dhs.gov/homeland-security-presidential-directive- 12, and FIPS-201 http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.201-2.pdf.

8. Period of Performance:

Contractor shall be required to commence work under this contract within 10 days after the date the Contractor receives the notice to proceed, prosecution of work diligently, and complete the entire work read for use no later than 180 days.

9. Progress Plan

At the prework conference, the Contractor shall provide to the COR a written "work progress plan" that details its proposed work force and schedule to provide for orderly completion of the work within the contract performance time. This work schedule must be acceptable to the Government. At a minimum, the schedule must reflect a work progress rate equal to the available amount of contract performance time.

10. GREEN PROCUREMENT REQUIREMENTS

In the performance of this service or construction contract, the Contractor shall make maximum use of products identified on the mandatory environmental purchasing list at the following links, if applicable:

· U.S. EPA Comprehensive Procurement Guidelines published at www.epa.gov/cpg/products.htm.

· USDA Biobased product listings published at www.biopreferred.gov.

· Energy Star® product listings published at www.energystar.gov/products.

· FEMP Low Standby Power product listings published at http://energy.gov/eere/femp/covered-product-categories

Contractor shall comply with all reporting requirements stated in the applicable clause(s):

· 52.223-1 Biobased Product Certification

· 52.223-2 Affirmative Procurement of Biobased Products under Service and Construction Contracts

· 52.223-4 Recovered Material Certification

· 52.223-9 Estimate of Percentage of Recovered Material Content for EPA Designated Items

· 52.223-15 Energy Efficiency in Energy Consuming Products

· 52.223-17 Affirmative Procurement of EPA Designated Items in Service and Construction Contracts

(End of Statement of Work) image1.jpeg