Attachment A National IDS SOW Rev 3 Matsui.pdf

FOR OFFICIAL USE ONLY (FOUO)

For Official Use Only (FOUO) FPS IDS SOW Template 7/20/2024

Federal Protective Service

U.S. Department of Homeland Security

STATEMENT OF WORK

for

New Installation of

Intrusion Detection System (IDS)

Robert T. Matsui CH IDS Project

Robert T. Matsui CH

501 I St.

Sacramento, CA 95814

Building CA0306

ATTACHMENT A

RFQ: 70RFPW26QW9000004

Intrusion Detection System (IDS) Installation at the Robert T. Matsui United States Courthouse, 501 I St, Sacramento, CA 95814 (CA0306)

STATEMENT OF WORK

TABLE OF CONTENTS

A. BACKGROUND

B. PURPOSE

B.1 DESCRIPTION OF EXISTING INTRUSION DETECTION SYSTEM (IDS)

B.2 DESCRIPTION OF NEW INTRUSION DETECTION SYSTEM (IDS)

C. SCOPE

C.1 GENERAL

C.2 INSTALLATION REQUIREMENTS

C.3 WIRELESS POINT TO POINT

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND REQUIREMENTS

D.1 IDS ALARM PANEL

D.2 IDS ALARM KEYPAD

D.3 IDS ALARM DOOR CONTACT

D.4 IDS EXPANSION MODULE

D.5 WIRED DURESS BUTTON

D.6 GLASS BREAK AND/OR SHOCK SENSOR

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 DESIGN STANDARDS

E.2 MATERIALS AND EQUIPMENT

E.3 ELECTRICAL AND CABLING REQUIREMENTS

E.4 FINAL INSPECTION AND ACCEPTANCE

E.5 CLEANLINESS, PROTECTION, AND PATCHING

E.6 WARRANTY AND MAINTENANCE

E.7 SAFETY AND HEALTH

E.8 QUALITY CONTROL PLAN

E.9 TRAINING

E.10 CONFIGURATION MANAGEMENT

E.11 AUDIT AND ACCOUNTABILITY

E.12 ADMINISTRATOR ACCOUNTS

E.13 ENTERPRISE ARCHITECTURE

F. DELIVERABLES

F.1 GENERAL

F.2 REQUEST FOR QUOTATION (RFQ)

F.3 PRE-INSTALLATION DELIVERABLES

F.4 POST-INSTALLATION DELIVERABLES

G. PROJECT ADMINISTRATION

G.1 WORK AUTHORIZATION

G.2 PERIOD OF PERFORMANCE

G.3 PLACE(S) OF PERFORMANCE

RFQ: 70RFPW26QW9000004

G.5 SPECIAL SCHEDULING REQUIREMENTS

G.6 CONTRACTOR ACCESS AND USE OF PREMISES

G.7 SECURITY REQUIREMENTS

G.8 CONTRACTOR SUITABILITY REQUIREMENTS

G.9 CONTRACTOR EMPLOYEE ACCESS REQUIREMENTS

G.10 GOVERNMENT ACCEPTANCE PERIOD

H. APPLICABLE STANDARDS

H.1 GENERAL

H.2 ACCESSIBILITY REQUIREMENTS (SECTION 508)

SECTION 508 REQUIREMENTS FOR TECHNOLOGY PRODUCTS

H.3 NOT REQUIRED

I. ACCOUNTABLE PROPERTY

I.1 DEFINITIONS

I.2 DELIVERABLES

I.3 PROPERTY ACCOUNTABILITY

I.4 PHYSICAL INVENTORY

I.5 PROPERTY DISPOSAL

I.6 LOST, STOLEN, DAMAGED OR DESTROYED (LDD) PROPERTY

J. INFORMATION TECHNOLOGY SECURITY

J.1 SECURITY CERTIFICATION/ACCREDITATION (IF APPLICABLE)

J.2 SECURITY REVIEW AND REPORTING

J.3 CONTINUOUS MONITORING (IF APPLICABLE)

J.4 SAFEGUARDING OF CONTROLLED UNCLASSIFIED INFORMATION (JULY 2023)…………………….. 47

J.5 INFORMATION TECHNOLOGY SECURITY AWARENESS TRAINING……………………………………...56

J.6 INFORMATION TECHNOLOGY PRIVACY TRAINING………………………………………………………….57

J.7 3052.204-73 NOTIFICATION AND CREDIT MONITORING REQUIREMENTS

FOR PERSONALLY IDENTIFIABLE INFORMATION INCIDENTS (JULY 2023) ……………….....………….57

K. DHS HSPD‐12 Personal Identity Verification (PIV) Cards…………………………………..………………………59

RFQ: 70RFPW26QW9000004

For Official Use Only (FOUO) 3

A. BACKGROUND

A.1 The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal Government.

A.2 The following Statement of Work (SOW) and guidelines have been developed by the

Department of Homeland Security (DHS), FPS to mitigate threats and vulnerabilities pertaining to federal buildings and Government leased spaces. The SOW and regulations were developed with the notion that the security posture of each federally owned building or Government leased space is unique.

B. PURPOSE

B.1 Description of Existing Intrusion Detection System (IDS)

The current IDS system consists of (1) alarm panel with enclosure, two (2) keypads, seventeen

(17) glass breaks, twenty four (24) recessed mounted door contacts, fifteen (15) roll up door contacts, two (2) Duress buttons, two (2) backup battery 12V 7amp hour, one (1) tamper switch, and eight (8) Zone expanders which are located in the FPS control room of the courthouse.

B.2 Description of New Intrusion Detection System (IDS)

The new IDS system consists of (1) alarm panel with enclosure, three (3) keypads, seventeen (17) glass breaks, twenty four (24) recessed mounted door contacts, fifteen (15) roll up door contacts, two (2) Duress buttons, two (2) backup battery 12V 7amp hour, one (1) tamper switch, and eight

(8) Zone expanders which are located in the FPS control room of the courthouse.

The IDS will work independently from the Physical Access Control System (PACS).

The two systems will not be integrated at this time.

Brand Make Model Quantity Location Cable

Specification

Alarm

Panel

Radionics BOSCH 9412GV3 1 FPS

Control

Room

RFQ: 70RFPW26QW9000004

Alarm

Keypads

Bosch Bosch 1255/1260 1 FPS and

USMS

Control

Rooms

Glass

Break

Detector

Unknown Unknown Unknown 17 First floor

Alarm

Door

Contacts

Unknown Unknown Unknown 24 First floor

Expansion

Modules

Unknown Unknown Unknown 8 USMS

Sally port

Wired

Duress

Button

Unknown Unknown Unknown 2 7th floor

Nurses office

Roll up

Door

Contacts

Unknown Unknown Unknown 15 First

Floor

B.2.2 New System General Information and Requirements:

Alarm control panel shall be Underwriters Laboratories (UL), IP based, commercially-grade listed panel from one of the following manufacturers: Bosch/Radionics, or

Digital Monitoring Products (DMP).

The alarm control panel and power supply enclosure shall have a tamper switch installed as an individually programmed 24-hour zone.

When setting up internet accounts, it is the responsibility of the customer to ensure the firewall routing through to the respective MegaCenter is completed. The Installer may be required to enter the IP address of the system into the internet communicator to allow initial connection to the alarm system. Packet transmission should be verified on both ends before the account is scheduled. Once account testing has been completed the account must be locked out by the on-site technician before the account is placed online. For all internet accounts, it is strongly recommended the system have a telephone line for initial set-up, and a telephone or cellular as an alternate back-up, to ensure continuity of service.

When the alarm system is completely installed and programmed to the MegaCenter, the installer shall perform a 100% test of the alarm system. The test shall include all zones connected to the security system and monitored by the MegaCenter. Before initiating any test, the contractor shall contact the MegaCenter prior to testing to coordinate. At the completion of the test, the installer shall contact the MegaCenter to confirm all

RFQ: 70RFPW26QW9000004

signals have been received, request a report of the test results, and inform the

MegaCenter testing is complete.

Door contacts will be recessed and installed in the latch-side of the door frame. All door contacts shall be installed on the secured side of the door frame.

The IDS shall have sufficient back-up power to operate four hours in standby (non-alarm) and five minutes in alarm mode.

General guidelines that shall be adhered to:

a. All IDS devices shall be supervised.

b. End of line (EOL) resistors for supervision shall be placed at the individual sensor and not in the alarm panel or zone expansion module.

c. Alarm panels shall be in a locked container with a tamper switch.

d. Alarm panels shall be in a secure area that is only accessible to authorized individuals. Secure area shall be protected by IDS.

e. Each alarm sensor or alarm point shall be wired as its own zone.

f. Double doors or split doors shall be zoned on each leaf, not both doors on one zone.

g. Cross zoning (the requirement of two or more sensors to be activated in a specific amount of time before activating an alarm) shall be avoided.

h. Door contacts shall be installed on the opening side of the door and shall not allow the door to open far enough to allow tampering with the contact inside the door without going into alarm.

i. Security alarm panel devices shall be wired normally closed with EOL resistor in series, unless required for other reasons to be wired normally open. It shall be the responsibility of the contractor to note the change and receive approval from the

FPS COR/TPOC/PM prior to making the change.

j. Each area/partition shall have at least one keypad.

C. SCOPE

C.1 General

C.1.1 As part of the pre-bid process, FPS may have a site visit and all interested Contractors are invited to attend. The purpose of the site visit is for Contractors to survey the site and review the requirements of this SOW. A site visit will be scheduled by the

Contracting Officer (CO). All questions relevant to this Statement of Work (SOW) shall be submitted in writing to the CO. The Contractor shall not make or assume any changes to this SOW without written approval from the CO.

C.1.2 The Contractor shall be responsible for the removal, inventory, packaging for storage and return of all removed equipment to the FPS Contracting Officer

Representative/Technical Point of Contact (COR/TPOC). All currently installed wire, cable, and fiber, which is not designated for reuse, shall be completely removed by the

Contractor, and properly disposed of.

C.1.3 The existing IDS system shall remain fully functional and operational to the extent possible during the installation of the new system. The Contractor shall cut over from the existing system to the new system in stages in order to minimize the number and duration of outages. The Contractor shall submit a system cutover plan in accordance with Section F, Deliverables. The cutover plan shall be reviewed and approved in writing by the FPS COR/TPOC.

C.1.4 The Contractor shall provide, install, and configure the system as described and/or shown herein. The new system shall include all equipment, devices, cabling, connectors, adapters, terminators, and appurtenances to interconnect all equipment and devices installed in accordance with the requirements of this SOW.

C.1.5 The Contractor shall follow all applicable codes in Section H while carrying out the work outlined in this SOW.

C.1.6 The Contractor shall furnish all tools and equipment necessary to complete all work outlined in this SOW. The Contractor is NOT authorized to use Government-owned property, tools, or equipment to complete work in accordance with this SOW, unless otherwise specified.

C.1.7 In the event any operational system or utility, (e.g., fire, IDS, HVAC) is required to be disabled or turned off, a forty-eight (48) hour notice shall be required and approved by the GSA Building Manager, FPS Inspector, and/or FPS COR/TPOC prior to deactivation.

a) The Contractor, prior to departing for the day, shall ensure all system(s) previously disabled or turned off are functioning properly. A basic functional test shall be required to determine proper functionality of the system(s) and should be reported to the FPS COR/TPOC.

b) In the event a system is non-functional once enabled or turned on, it shall be the responsibility of the Contractor, at no additional cost to the Government, to restore the system(s) prior to departure from the site.

c) If the Contractor fails to restore all system(s) before departing, they shall be liable for all costs incurred by the Government to restore system(s) functionality.

C.1.8 All personnel engaged in installation activities pursuant to this SOW shall be licensed by the state, local authority, and/or the city local authority in the required trades or professions which require licensing by such jurisdictions. The type and level of license shall be consistent with requirements of the jurisdictions and work to be performed by this SOW.

C.1.9 Installers shall be trained, certified, and authorized by the manufacturer to install, integrate, test, and commission the system. The Contractor shall provide and submit with their proposal documentation from the manufacturer that they are trained, certified, and authorized to install, integrate, test, and commission the system.

C.1.10 It shall be the sole responsibility of the Contractor to employ personnel licensed and qualified to carry out all tasks outlined in this SOW. At no time during the installation shall the Contractor require Government personnel to complete tasks required to be completed by the Contractor as covered by this SOW.

C.1.11 The Contractor shall be solely responsible for ensuring their employees and subcontractors abide by all requirements of the contract. At all times while work is being performed in accordance with this contract, the Contractor shall have a supervisory representative available to answer questions, resolve issues, supervise company employee(s), and subcontractor(s).

C.1.12 The Contractor shall provide a daily access schedule to coordinate installation activities. The schedule shall be submitted as part of the project plan.

C.1.13 The Contractor shall maintain a separate set of drawings, schematics, and wiring diagrams of the IDS to be used for creating as-built drawings. This set shall be accurately kept up to date by the Contractor, noting all changes and additions to the

IDS and shall be available for the final inspection walkthrough.

C.1.14 The Contractor shall attend installation construction meetings with the FPS COR/TPOC to provide project status updates every week for the duration of the project.

C.1.16 The Contractor must be ISO 9001-2015 Certified and provide their ISO certification with their proposal documentation.

C.1.17 The contractor shall be responsible for estimating cabling and conduit footage.

C.2 Installation Requirements

C.2.1 The Contractor shall install all system components and appurtenances in accordance with manufacturer’s instructions following all applicable local, state, and federal codes and policies. All appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the Contractor, as well as all adjustments, alignments, programming, and configuration required for a complete and optimal IDS system.

C.2.2 The Contractor, for all equipment/device(s) requiring licensing, shall purchase, install, and license(s) as required by the manufacturer. Documentation of all software and hardware licenses shall be provided to FPS as part of the final system documentation.

C.2.3 All equipment required to be wall-mounted shall be wall-mounted to equipment vendor specifications.

C.2.4 The Contractor shall be responsible for providing the necessary equipment and tools to access all equipment that is not accessible by ladder. The Contractor is accountable for all tools and equipment used during the installation; potentially dangerous items must always remain under the installer's physical control. All tools and equipment, including electronic equipment and computers, are subject to inspection by FPS.

C.2.5 All measurements and equipment locations are approximate and shall be verified by the

Contractor for accuracy and installation feasibility. The Government shall not be held responsible for any error or variation in any measurements or other data listed, nor shall the Contractor, because of an error or variation in any measurement listed, be relieved of the responsibility to carry out the requirements in accordance with the true intent and meaning of the specifications without additional cost to the Government.

C.2.6 Any ceiling tiles damaged by the contractor shall be replaced with like type. All ceiling tiles removed to accommodate installation shall be returned at the end of the workday.

C.2.7 The Contractor shall remove and haul debris from the project site daily and dispose of in a proper, acceptable manner in accordance with all federal, state, and local laws and regulations, off the jobsite property. The debris created from this project shall not be disposed of at the jobsite, in Government dumpsters, or on Government property.

C.2.8 The Contractor shall install and configure the IDS to include edge devices in accordance with manufacturers recommendations and industry best practices for optimal performance.

C.2.9 The Contractor shall verify all IDS edge device locations with the FPS COR/TPOC prior to installation.

C.2.10 When removing the existing edge devices, cabling, and appurtenances the Contractor shall ensure all openings or penetrations are fire rated sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse.

All openings or penetrations that are not designated for reuse shall be sealed and/or patched accordingly to protect against weather exposure at the completion of installation. All penetrations that become exposed to weather during installation shall be protected from exposure throughout the installation period.

C.2.11 Installers shall be trained, certified, and authorized by the Manufacturer to install, integrate, test, and commission the system. The contractor shall provide and submit with their proposal documentation from the manufacture that they are trained, certified, and authorized to install, integrate, test, and commission the system. If documentation is not available, the contractor can substitute by providing with their proposal confirmation on manufacturer letterhead, they are trained, certified, and authorized to install, integrate, test, and commission the system within two years of the submittal date.

C.2.12 At least one factory certified trained technician on the IDS being installed by the contractor must be onsite at all times during the installation. Factory certification must be within the last two years (date of proposal).

C.3 Wireless Point to Point

C.3.1 Describe the system(s) and equipment location here.

C.3.2 The contractor will design build an Intrusion Detection System (IDS) to cover perimeter entry and exit doors and all windows within 16 feet of the ground or other access point.

C.3.3 Intrusion Detection System (IDS) Primary List of Equipment.

One (1) Intrusion detection alarm control panel with enclosure and tamper switch.

One (1) alarm panel will be located in the FPS control room on the first floor.

Two (2) keypads.

One (1) keypad in the FPS control room.

One (1) keypad will be in the USMS Command Room.

Eight (8) Zone expanders will be located on the first floor and lower-level electrical closets of building. (Exact location to be determined during walk through with awarded contractor.)

Seventeen (17) glass break sensors will be located on all first-floor windows and lower-level windows of the building.

Twenty-Four (24) surface mounted door contacts will be located on all first floor and ground level perimeter doors of the building.

Fifteen (15) overhead door roll up contacts on the loading dock roll up door.

Two (2) Wired duress buttons to be located one (1) at the loading dock screening station and one (1) in the FPS control room.

C.4 Attachments

C.4.1 INTRUSION DETECTION SYSTEM (IDS) Locations: See floor plans with device locations (Attachment C pages 1-7). The contractor and FPS shall verify all IDS components and appurtenances, head-in and end-devices installation locations to provide the optimal operational prior to any installation.

D. SYSTEM/EQUIPMENT SALIENT CHARACTERISTICS AND

REQUIREMENTS

D.1 IDS Alarm Panel

At a minimum, the IDS alarm panel shall have the following salient characteristics:

a) Flash updateable

b) 32 individual reporting areas, with common areas

c) Up to 16 supervised door access-points and/or keypads

d) Output groups: maximum functionality-minimum programming

e) Up to 502 fully programmable Form C relays

f) Up to 562 two-wire smoke detector or fire initiating zones

g) 10,000 user codes with 99 profiles

h) 12,000 event buffer

i) Up to four independent Shift schedules per area OR use one Shift schedule to control all areas

j) Up to 100 output schedules to control relays and panel outputs

k) Up to 20 holiday dates for shift and output schedules

l) Option user authority to temporarily extend shift schedules

m) Serial 3 digital dialer or CID reporting to multiple receivers

n) Built-in phone line monitor

o) Built-in DB-9 RS-232 or LX-Bus (selectable)

p) Multi-lingual menus available

q) Built-in remote or on-site feature upgrade capability

r) 1.5 Amps 12VDC smoke and auxiliary output with OVC protection

s) 16.5 VAC 50 VA plug-in transformer

t) Multiple on-board status LEDs

D.2 IDS Alarm Keypad

At a minimum, the IDS alarm keypad shall have the following salient characteristics:

a). 32-character, Liquid Crystal Display (LCD).

b). Large, backlit Elastomer keyboard.

c). Simple harness connection to 4 wire keypad bus.

d). Suitable for fire and burglary applications.

e). View systems events/user activity through keypad.

f). Systems event shown in plain English.

g). AC power LED and Armed LED.

h). Built-in diagnostics for easy service.

i). Built-in prewarn tone.

j). Panic signal.

k). Display time of day, armed zones, and armed areas.

l). Hardwired connections

D.3 IDS Alarm Door Contact

At a minimum, the IDS alarm door contact shall have the following salient a). Recess mountable where mounting holes already exist.

b). Magnetic contact.

c). Hard wired connections.

d). Compatible with alarm panel and zone expansion equipment.

e). Each door contact will be assigned its own alarm zone. IE: double doors, each door will be assigned an individual zone.

f). EOL resistor will be installed at the detector, not at the alarm panel or zone expander.

D.4 IDS Expansion Module

At a minimum, the IDS expansion module shall have the following salient a). Mountable within an enclosure.

b). Minimally support up to 8 zones.

c). Hard wired connections.

d). Compatible with alarm panel and sensor devices.

D.5 Wired Duress Button

At a minimum, the wired duress button shall have the following salient a). Surface mountable.

b). Finger operated.

c). Latching, reset with reset key/tool only.

d). Compatible with alarm panel and zone expansion equipment e). Each duress device will be assigned its own alarm zone.

f). EOL resistor will be installed at the detector/device, not at the alarm panel or zone expander.

D.6 Glass Break and/or Shock Sensor

At a minimum, the glass break shall have the following salient characteristics:

a) Two (2) dip switches to set sensitivity.

b) 25’ maximum omnidirectional range, adjustable range

c) Covers all glass types.

d) Ceiling mountable

e) Hard wired connections

f) Compatible with alarm panel

E. ADDITIONAL PROJECT REQUIREMENTS

E.1 Design Standards

E.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the FPS COR/TPOC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations as a result of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

E.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, system/component grounding, and HVAC and power requirements for the proposed IDS.

E.1.3 Equipment Selection – The Contractor shall use commercial off-the-shelf (COTS) components compatible with the FPS MegaCenter alarm system and approved by the

Federal Protective Service in system design.

E.1.4 Backup Power Requirements –All IDS electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). It is expected that all equipment necessary for continuous monitoring, recording, and archiving IDS will be uninterrupted during a power outage. The UPS shall be sized to provide at least four (4) hours1 battery back-up in the event the primary power source is interrupted. The

Contractor shall include load calculations with their bid proposal.

E.1.5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams representing planned device terminations to and between system equipment and components.

E.1.6 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components.

E.2 Materials and Equipment

E.2.1 All system hardware and software components shall be produced by companies normally involved in the production of IDS hardware and software components and approved by FPS. Items of the same type shall be products of a single manufacturer. All material, software, and hardware shall be new, the most current version, and presently being produced.

1 ISC RMP Criteria 70 - Provide uninterruptible emergency power to essential electronic security systems for a minimum of four hours.

RFQ: 70RFPW26QW9000004

E.2.2 The Contractor shall provide enclosures as necessary for equipment exposed to weather, potential impact (damage), or tampering.

a) Interior: Enclosures to house equipment in an interior environment shall meet the requirements of NEMA 250, Type 12.

b) Exterior: (Exposed-to-Weather): Enclosures to house equipment in an outdoor environment shall meet the requirements of NEMA 250, Type 4X.

E.2.3 All procured and installed equipment must me the National Defense Authorization Act

(NDAA) and Trade Agreement Act (TAA) for compliance. Both acts play significant roles in government procurement and defense-related matters.

1) The National Defense Authorization Act (NDAA) is a U.S. federal law that authorizes appropriations for military activities, defense construction, and other related purposes. It sets military personnel strengths and outlines defense policies.

2) The Trade Agreements Act (TAA) limits the country of origin for products sold through your Schedule contract, in general, this means the following may be sold:

GSA Reference Look up Trade Agreements Act-designated countries | GSA

(1) Articles that are wholly the growth, product, or manufacture of the U.S. or a designated country, or

(2) Articles that are "substantially transformed" in the U.S. or a designated country into a new and different article of commerce with a name, character, or use distinct from that of the article or articles from which it was transformed.

c) All procured and installed equipment must me the requirement the NDAA and

TAA Compliancy.

E.3 Electrical and Cabling Requirements

E.3.1 Wires, cables, and fiber shall meet applicable requirements of NFPA 70 to include NEC method of installation and UL listings for type of equipment selected.

E.3.2 All materials, equipment, components, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, applicable requirements of

NFPA 70 and NEC, Grounding and Bonding UL standard 467 (for standard grounding and bonding equipment) to include Section 250.4 (A)(1).

E.3.3 All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

E.3.4 All wire, cable, and fiber runs shall be installed inside conduit and sized according to

NFPA 70 for fill requirements. As an alternative, if allowed by applicable codes and/or regulations, wire, cable, and fiber may be installed utilizing wire molding, cable trays, RFQ: 70RFPW26QW9000004

Intrusion Detection System (IDS) Installation at the https://www.gsa.gov/buy-through-us/purchasing-programs/multiple-award-schedule/help-with-mas-contracts-to-sell-to-government/roadmap-to-get-a-mas-contract/readiness-assessment-for-mas-offerors/look-up-trade-agreements-actdesignated-countries and inner duct. Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations, in the advent wire, cable, and fiber runs are installed above a suspended ceiling. No wire, cable, or fiber shall be left unsupported or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

E.3.5 All wire, cable, and fiber shall not contain splices between equipment termination points (homerun to head-end).

E.3.5A All wire, cable, and fiber run outside of secure areas shall be secured against unauthorized access.

E.3.5B Where conduit is installed (to include unsecured areas), a minimum of ¾” shall be used. Installed conduit shall be sized for fill requirements in accordance with the

NEC.

E.3.5C All new conduit installed shall use green electrical tape to identify the conduit as FPS security use. All cabling not installed in conduit shall use green electrical tape to identify cabling as FPS security. Green tape shall be used every 20 feet on new cabling and conduit.

E.3.5D All conduit, junction boxes and back boxes shall be concealed within walls, floors, and/or ceilings. In locations where this is not possible, an exception shall be approved by GSA and FPS before installation or conduit, junction boxes, and back boxes.

E.3.5E All conduit infrastructure shall be continuous from the device junction box to the secure security closet of the alarm control panel.

E.3.6 All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

E.3.7 There shall be no crimp type fittings utilized during cable/wire termination unless specified by the equipment manufacturer. All new wire, cable, and fiber shall not contain splices between equipment termination points. If a splice cannot be avoided, it shall be consistent with industry best practices for splicing cable and approved by the

FPS.

E.3.8 All equipment connected to AC power shall be protected from surges as described in

IEEE C62.41 and IEEE C62.43. Fuses shall not be used for surge protection.

E.3.9 All cable and fiber installed in conduit shall include a pull string for future use. If an existing pull string is used in any location, it shall be replaced with a new one. If fiber is used it will not share conduit with other systems.

E.3.10 All cable and fiber installed in support of this SOW shall be tested and test reports included in the O&M Manual. The test device shall provide an electronic copy of the test results.

E.3.11 All wire, cable, or fiber that is existing and to be reused in support of this SOW shall be tested prior to use. Test report(s) shall be provided with final installation documentation and denoted that wire, cable, or fiber was previously installed.

E.3.12 All Ethernet network cabling shall be CAT 6a metallically shielded cable or multimode fiber optic cable, UL listed for its intended use, e.g., indoor, outdoor, plenum.

E.3.13 All CAT 6a cabling shall be installed in accordance with ANSI/TIA/EIA-568.2-D

Commercial Building Telecommunications Cabling Standard. All cable terminations shall conform to ANSI/TIA/EIA-568.2-D standards. A few key areas of concern, but not all inclusive are:

a) Pair twists shall be maintained as close as possible to the point of termination.

b) Strip back only as much jacket as is required to terminate individual pairs.

c) All four pairs shall be terminated.

d) Pin/Pair assignments shall follow the T568B configuration.

E.4 Final Inspection and Acceptance

E.4.1 Upon completion of the installation the Contractor shall perform a Contractor

Verification Test (CVT) in accordance with approved Performance Verification Test

(PVT) procedures to ensure installed system is fully operational. A copy of the test results shall be available for review by the FPS PM/TPOC prior to commencing PVT and final inspection.

E.4.2 The Contractor shall submit, at a minimum 14 business days in advance of PVT, a proposed testing plan to the FPS COR/TPOC. The plan shall include test procedures, actions, and expected results demonstrating system functionality and compliance with this SOW. The test plan shall also include means for documenting test results. The test plan shall be approved by the FPS COR/TPOC prior to the Contractor requesting Final

Inspection and PVT.

E.4.3 The Contractor shall notify the FPS COR/TPOC in writing when requesting a date and time for Final Inspection and PVT.

E.4.4 The Contractor shall provide all equipment and manpower necessary to perform Final

E.4.5 Final Inspection Minimum Requirements a). Review of Redline drawings.

b). Walk-through and inspection of all installed components and workmanship.

c). Conduct PVT in accordance with approved test plan.

RFQ: 70RFPW26QW9000004

d). All equipment default or contractor entered User IDs and passwords shall be relinquished by the Contractor to the Government.

e). In the event a deficiency is found, or a test fails, the Contractor shall have personnel available onsite to resolve the issue so inspection and testing may continue. Once the Contractor deems the issue has been resolved, a re-inspection or re-test shall occur.

f). The Final Inspection and PVT shall be performed during a single site visit.

g). Installation Acceptance by the Government shall be given only after the satisfactory completion of the Final Inspection, PVT, training, and receipt of all required deliverables outlined in this SOW.

E.4.6 MegaCenter Alarm Requirements (MAR) a). Alarm monitoring shall be done by the MegaCenter (MC). The MegaCenter will only accept UL commercially listed panels from Honeywell (Ademco), Bosch

(Radionics), DMP. The Contractor shall be a licensed distributor and installer of the system they are installing.

b). The Contractor shall provide the MegaCenter with a complete zone list with alpha descriptions, as outlined in the MegaCenter Alarm Requirements (MAR) – a paper document. The MAR document shall be filled out by the Contractor and submitted to the MegaCenter 48 hours before the scheduled testing of equipment. The MAR document will be provided with the Notice to Proceed.

d) The security contractor is responsible for establishing and testing network communication to the monitoring station. This includes programming the IDS internal IP address and all other associated network and encryption settings required for communication with the FPS Mega Center.

The security contractor is responsible for completing the Mega Center Alarm

Requirements (MAR) form.

E.5 Cleanliness, Protection, and Patching

E.5.1 The Contractor shall take necessary precautions to avoid damage to existing items that will remain in place, be reused, or remain the property of the Government. It shall be the sole responsibility of the Contractor to repair or replace damaged items, at no cost to the Government. Contractor shall notify the FPS COR/TPOC of any damage, immediately.

E.5.2 The Contractor shall not disturb existing construction beyond the extent indicated or necessary to fulfill installation requirements. In the event excessive damage is caused, it shall be the sole responsibility of the Contractor to repair damage, at no cost to the

Government. Contractor shall notify the FPS COR/TPOC of any damage, immediately.

E.5.3 The Contractor shall provide protective methods to control accumulation and migration of dirt and dust in and around all work areas. Removal of dirt, dust, and debris shall be completed daily and in accordance with all applicable federal, state, and local laws and regulation.

E.5.4 It shall be the sole responsibility of the Contractor to protect all existing building systems and utilities, to include, but not limited to, equipment, cabling, and appurtenances, e.g., fire, VSS, IDS, HVAC, during demolition, installation, and construction. If any system, service, utilities, equipment, or cabling are damaged due to installation construction the Contractor shall repair damage at no cost to the

Government.

E.5.5 If necessary, the Contractor shall be responsible for moving furniture and/or equipment to protect it from damage during installation. All items relocated during installation shall be returned to their original location at the completion of work in the area. Any items that are unable to be relocated shall be protected from damage. In the event damage is incurred during this time, it shall be the sole responsibility of the Contractor to replace damaged items without cost to the Government.

E.5.6 The Contractor shall prepare and lay out work in advance. Exercise care when cutting, channeling, chasing, or drilling of floors, walls, partitions, ceilings, or other surfaces as necessary for installation, support, or anchoring of conduit, raceways, and equipment.

E.5.7 The Contractor shall provide a qualified installer to install fire-stopping material to all penetrations and openings created during the installation. All existing penetrations or openings utilized by the contractor during the installation shall have fire-stopping material installed, regardless of if it was previously installed. Fire-stopping shall consist of furnishing and installing tested and listed fire-stop systems, combination of materials, or devices to form an effective barrier against the spread of flame, smoke, and gases, and maintain the integrity of walls, fire resistance rated walls, partitions, floors, and ceiling-floor assemblies, including through-penetrations. Firestop systems shall be UL Fire Resistance listed or FM P7825a approved with ''F" and/or “T” rated to at least be equal to fire-rating of the wall, fire wall, or floor in which penetrated openings are to be protected.

E.5.8 Where removal of equipment or materials leaves holes or damaged surfaces, the

Contractor shall patch the holes and damaged surfaces, as well as paint the surface to match adjacent finished surfaces. Finished surfaces of patched area shall be flush and match the existing adjacent surface as closely as possible. If new work is to be applied to existing area, then removal and patching shall be adequate for installation of new work.

E.6 Warranty and Maintenance

E.6.1 The Contractor shall perform maintenance related tasks, including, asset management and inventory services (provide inventory), preventative maintenance (PM), upgrades

RFQ: 70RFPW26QW9000004

and repairs, equipment disposal, integrated support services, and other maintenance and service-related tasks on all FPS Intrusion Detection System (IDS).

E.6.2 The Contractor shall warranty all Contractor supplied components, workmanship and/or systems for 12 months from the date of Government acceptance.

E.6.3 In the event any Contractor supplied equipment, component, part fails within the specified warranty period; the Contractor shall immediately replace or repair the item within 24 hours at no additional cost to the Government. If the Contractor is unable to rectify the issue(s) within the allotted time, the Contractor shall be liable for all costs incurred by the Government to correct the issue(s).

E.6.4 The Contractor shall include in the O&M Manual a copy of all manufacturer warranties, terms, and conditions.

E.6.5 The Contractor shall not be held responsible for failures due to fire, flood, vandalism, and/or misuse of Government equipment.

E.7 Safety and Health

E.7.1 All work shall comply with federal, state, and municipal safety and health regulations.

If there is a conflict between the regulations, the most stringent shall supersede all others.

E.7.2 The Contractor shall assume full responsibility and liability for compliance with all applicable regulations relating to the health and safety of personnel during the execution of work as outlined herein. The Contractor shall not fault the Government for any action on its part or that of its employees or subcontractors which results in injury, illness, or death.

E.7.3 Where pedestrian safety may be endangered, the Contractor shall provide appropriate signage, barricades, or other means of notification.

E.7.4 The Contractor shall provide all required safety equipment and ensure the equipment is adequate and utilized appropriately for the work being performed.

E.8 Quality Control Plan

E.8.1 The Contractor shall have a formal Quality Control Plan (QCP) in place covering areas of concern, such as, but not limited to, equipment and cabling installation, maintenance, and customer service standards. The QCP shall also address equipment and cable

RFQ: 70RFPW26QW9000004

labeling, system performance, installation aesthetics, programming and configuration conventions, and timeliness of service.

E.8.2 The QCP shall cover the Contractor’s quality control policies and procedures to ensure compliance with the requirements of this SOW.

E.8.3 The Contractor shall report non-compliance issues with the QCP to the FPS

COR/TPOC.

E.8.4 The QCP shall include a routine review process that addresses all the areas of the

Contractor’s performance and each of the elements of this SOW.

E.8.5 The QCP shall include the necessary processes for tracking identified deficiencies from initiation through to an acceptable corrective action. The process shall include a means to verify the identified deficiency has been reported, corrected, and accepted by the FPS

E.9 Training

E.9.1 The Contractor shall submit a standardized Training Plan in accordance with manufacture’s recommendations for the type of system installed to the FPS COR/TPOC for approval.

E.9.2 The Contractor shall provide operator, administrator, and maintenance training to required personnel. Training shall be conducted onsite and during normal business hours from 8:00 a.m. to 4:30 p.m.

E.9.3 Operator Basic, Operator Advanced, and Administrator/Maintenance training shall be conducted as three (3) different sessions. Training sessions shall be a minimum of two

(2) hours in length. Each session shall utilize a mixture of lecture and “hands-on” training.

E.9.4 Instruction materials and manuals shall be included for reference, as well as, allowing

FPS to train additional personnel at a later date.

E.9.5 At a minimum, training shall include:

a). Arming and disarming alarm system.

b). Acknowledging and silencing local alarms.

c). Review all alarm modes.

d). General user and entering PIN functions.

e). Simulate a power outage and bring system back to full operation.

f). Simulate a malfunction and bring system back to full operation.

g). Technical support information and procedures.

h). Day-to-day maintenance of the system and basic repairs.

E.10 Configuration Management

E.10.1 All installed software shall be the current version with all applicable updates and installed in accordance with manufacturer’s recommendations.

E.11 Audit and Accountability

E.11.1 Audit logs reports shall contain at least the following information:

a) Identity of each user and device accessing or attempting to access the system.

b) Time and date of the access and the logoff.

c) Activities that might modify, bypass, or negate information security safeguards.

d) Security-relevant actions associated with processing.

e) All activities performed using an administrator’s identity.

E.11.2 Audit records and logs shall be protected from unauthorized modification, access, or destruction, when located on local hard drives, network attached storage devices, or removable media.

E.11.3 System audit trail records shall be maintained online for at least ninety (90) days.

E.12 Administrator Accounts

E.12.1 The Contractor shall provide user accounts with configurable access and permissions associated with the defined user role.

E.12. 2 After the system acceptance, the Contractor shall disable, remove, or modify all

Contractor-owned accounts or negotiate account ownership with the FPS COR/TPOC.

E.13 Enterprise Architecture

E.13.1 DHS Enterprise Architecture Compliance.

1. All solutions and services shall meet DHS Enterprise Architecture policies, standards, and procedures. Specifically, the contractor shall comply with the following HLS EA requirements:

• All developed solutions and requirements shall be compliant with the HLS EA.

• All IT hardware and software shall be compliant with the HLS EA Technical

Reference Model (TRM) Standards and Products Profile.

• Description information for all data assets, information exchanges and data standards, whether adopted or developed, shall be submitted to the Enterprise

Architecture Division (EAD) for review, approval and insertion into the DHS

Data Reference Model and Mobius.

• Development of data assets, information exchanges and data standards will comply with the DHS Data Management Policy MD 103-01 and all data-related

RFQ: 70RFPW26QW9000004

artifacts will be developed and validated according to DHS data management architectural guidelines.

• Development of data assets, information exchanges and data standards will comply with the DHS Data Management Policy MD 103-01 and all data-related artifacts will be developed and validated according to DHS data management architectural guidelines.

• Applicability of Internet Protocol Version 6 (IPv6) to DHS-related components

(networks, infrastructure, and applications) specific to individual acquisitions shall be in accordance with the DHS Enterprise Architecture (per OMB

Memorandum M-05-22, August 2, 2005) regardless of whether the acquisition is for modification, upgrade, or replacement. All EA-related component acquisitions shall be IPv6 compliant as defined in the U.S. Government Version 6 (USGv6)

Profile (National Institute of Standards and Technology (NIST) Special

Publication 500-267) and the corresponding declarations of conformance defined in the USGv6 Test Program.

E.13.2 DHS OCIO CISO Cyber-Supply Chain Risk Management

a. Definitions

i. Component: a unit defined by the supplier that connects to and functions as part of the product. For software products, a component is a unit of software defined by a supplier at the time the component is built, packaged, or delivered. For hardware, a component is one hardware unit designed to connect to and function as part of a larger product.

ii. End-of-Life (EOL): means that an ICT product has reached the final stage of the product life cycle in which that version of the ICT product will no longer be supported nor manufactured (e.g., no patches will be developed, no security improvements will be made, and, sometimes, no troubleshooting technical assistance will be offered).

iii. End-of-Support (EOS): means that an ICT product will no longer be supported

(e.g., no patches will be developed, no security improvements will be made, and, sometimes, no troubleshooting technical assistance will be offered).

iv. Information and Communications Technology (ICT): encompasses the capture, storage, retrieval, processing, display, representation, presentation, organization, management, security, transfer, and interchange of data and information; includes all categories of ubiquitous technology used for the gathering, storing, transmitting, retrieving, or processing of information (e.g., microelectronics, printed circuit boards, computing systems, software, signal processors, mobile telephony, satellite communications, and networks).

v. Product: part of the equipment (hardware, software, and materials) for which usability is to be specified or evaluated.

RFQ: 70RFPW26QW9000004

b. Original Equipment Manufacturer (OEM) End-use Information and Communications

Technology (ICT) Product

i. The contractor shall provide new equipment unless otherwise formally approved by the Government, in writing. The contractor shall provide only

Original Manufacturer (OEM) end-use products to the Government. In the event that a shipped OEM product, or part or component of that product, fails, all replacements must be new (i.e., non-refurbished, not previously used) OEM.

ii. The contractor may provide previously used OEM products only with written

Government approval. Such parts shall be procured from their original source and shipped only from the manufacturer's authorized shipment points.

c. Accounting of Components in ICT Products

i. The contractor shall provide and maintain a list of components for each product used in performance of the contract, including through subcontracts or other arrangements. This list for each product shall provide the component manufacturer's name, address, state, and/or domain of registration, and, where applicable, the Unique Entity Identifier (UEI) number, for all components comprising the ICT products.

ii. The contractor shall notify the Government when a new contractor/subcontractor/service provider is introduced to the ICT provided on this contract, or when suppliers of components or products are changed. If a software component used in the performance of the contract is updated with a new build or release, the contractor must update the list provided in accordance with (i) above to reflect the new version of the software. This includes software builds to integrate an updated component or dependency.

c. Accounting of Components in ICT Products

i. The contractor shall provide and maintain a list of components for each product used in performance of the contract, including through subcontracts or other arrangements. This list for each product shall provide the component manufacturer's name, address, state, and/or domain of registration, and, where applicable, the Unique Entity Identifier (UEI) number, for all components comprising the ICT products.

ii. The contractor shall notify the Government when a new contractor/subcontractor/service provider is introduced to the ICT provided on this contract, or when suppliers of components or products are changed. If a software component used in the performance of the contract is updated with a new build or release, the contractor must update the list provided in accordance with (i) above to reflect the new version of the software. This includes software builds to integrate an updated component or dependency.

RFQ: 70RFPW26QW9000004

iii. For software products, the contractor shall provide all OEM software updates, and patches to correct defects, for the life of the product [i.e., until the "End of

Life" (EoL) or "End of Support" (EoS)]. Software updates and patches shall be made available to the government for all products procured under this Contract and replaced when End of Support (EoS) is reached.

iv. A contractor using team members in performance of the contract (e.g., subcontractors or other service providers) shall ensure that the standards for the accounting of components in this subsection are met by team members.

d. Supply-Chain Transport

i. The contractor shall use formal, documented, and accountable transit, storage, and delivery procedures (i.e., the possession of the end-use product to be delivered is documented at all times…