Attachment_A_-_Statement_of_Work_CCTV_Preventative_Maintenance_1.pdf

CCTV Preventive Maintenance

I. STATEMENT OF WORK

Section 1- Introduction

The Physical Access Control System (PACS) implemented by the Office of Law Enforcement and Security (OLES) for the Department of the Interior (DOI) Main Interior Building (MIB) is managed by the Interior Complex Security Operations (ICSO) Branch. This comprehensive security framework integrates several Electronic Security Systems (ESS) designed to enhance safety and monitor security across the facility.

A critical component of the PACS is the Closed-Circuit Television System (CCTV), which is monitored and recorded through the VICTOR Video Management System (VMS). The CCTV system is vital to the overall security strategy, providing real-time surveillance and recorded footage that supports the functions of other integrated systems, including the Intrusion Detection System (IDS), Shot Detection System (SDS), Emergency Notification System (ENS), and the Physical Access Control System (PACS) itself. The PISM system also plays a role in consolidating information within the PACS framework.

This integration ensures a cohesive approach to security, safeguarding the DOI Main Interior Building and its occupants.

Section 2- Background

In 2025, the existing maintenance agreement for the CCTV system, which is an essential part of the overall PACS system, is scheduled to expire. Therefore, the OLES Internal Security Division is seeking formal proposals for a maintenance contract covering both head-end and field equipment. This initiative aims to ensure maximum uptime, reliability, and operability of the CCTV system. The maintenance contract shall include both preventative maintenance and rapid response break/fix type maintenance.

The selected Contractor will be required to submit a maintenance proposal that encompasses one (1) base year and four (4) one-year option periods, commencing after the award of the contract. This proposal should include, but is not limited to:

• Quarterly preventative maintenance on all hardware components and cabling.

• Monthly system maintenance on software, including application patch updates, firmware updates, and MS Windows updates/upgrades.

• Break/fix maintenance on all system components.

It is imperative that the proposal demonstrates compliance with all requirements specified in this solicitation. The Contractor must provide evidence that all proposed personnel possess the appropriate (valid) certifications and licenses necessary for the maintenance of the system(s), as well as relevant experience to fulfill the contract obligations.

The Government anticipates that the majority of the work will utilize a combination of the GSA 84 Security Systems schedule and the GSA 70 Information Technology schedule.

Furthermore, the awarded Contractor’s Technical Proposal will be incorporated and regarded as an official part of the final contract.

Section 3- Description of Work

1. System(s) General Description

a. The CCTV System – The head-end is primarily comprised of six (6) NVR/ Video Servers manufactured by American Dynamics. The NVR/ Servers are secured behind a multi-layer Firewall and integrated with other systems to support monitoring, call-ups, and location tracking.

b. The CCTV Network Infrastructure – Is designed such that all field devices (cameras, sensors, etc.)

are routed to Security Equipment Nodes (SEN) at which all security panels, power supplies, and network connectivity is located. From there it travels via fiber-optic cabling (Multi-mode 62.5/125 – ST connectors) to the head-end. There are eleven (11) SEN’s throughout the MIB as well as the Security Operations Center (SOC) – Equipment Room where the head-end equipment resides.

c. The Video Management System (VMS) – Is the cornerstone of our CCTV system, and for this project, we are utilizing American Dynamics' Victor. This system operates seamlessly across multiple servers, facilitating efficient management and monitoring of video feeds which enhances the overall performance and reliability of our surveillance infrastructure. Victor is distributed across workstations and clients through a licensing model, where each license grants specific user capabilities tailored to organizational needs. The architecture supports scalability across multiple clients, ensuring comprehensive surveillance operations while providing flexibility to adjust licenses according to requirements.

d. System Integration – The CCTV system is seamlessly integrated with the Physical Access Control

System (PACS), forming a cohesive framework that encompasses all electronic security systems.

This integration enhances situational awareness and response capabilities, serving as a vital component of the organization's overall security posture. By combining video surveillance with access control measures, the system provides comprehensive monitoring and control, ensuring a robust and effective security environment.

1. CCTV/ IDS Preventative Maintenance (Software)

e. Preventative Maintenance shall, include but not be limited to, the following tasks:

i. Perform all application updates/ patches.

ii. Perform all OS patches/ updates.

f. The contractor shall perform software updates/ application patches. All Operating System (OS) patches and updates shall be provided by the Government where appropriate and authorized. Process of delivering the patches to the contractor shall be determined no later than 10 days after award.

g. The contractor is required to fully implement the OS patches/ updates to all machines within three days from date received (OCIO requirement). Upon completion the updates/ patches (per machine), all equipment associated with the CCTV (affected by the updates) is to be in operation and running properly. Because the CCTV and associated systems are complexly integrated, it’s imperative that the contractor understands and follows the established protocols to rightly “stand-up” the system.

i. OS patches/ updates are received on the 2nd Tuesday of each month. The contractor shall begin administering the patches on the following morning (Wednesday). This will give the vendors the necessary time to cover all components of the system(s), meet the OCIO mandate within the required time period, and take advantage of the technical support from the DOI IT office. (see aforementioned time period)

ii. A report shall be submitted to the COR, by the contractor, in electronic form, no later than COB the following Tuesday (1 week from OS Update release date). See Attachment 3 for required information and format.

iii. The contractor shall be responsible for maintaining the unified integration of the Physical

Security Information Management PSIM when the effects of the updates/patches “spill-over” to the PSIM platform.

h. The Office of the Chief Information Officer (OCIO) will conduct monthly scans of the Security

Systems. The vendor is responsible for promptly addressing and resolving any vulnerabilities identified during these scans and must report back to the Contracting Officer's Representative (COR) once the necessary fixes have been applied.

2. Performing Updates (Critical Requirements)

a. Because of the complexity of the systems, the contractor shall:

i. Verify that all technicians working on the systems has at a minimum of 5 years’ experience integrating/ working on each system.

ii. Verify that each technician has at a minimum of 5 years’ experience working with network and understands the nuisance of vital components associated with network systems.

iii. Verify that all technicians are certified, by the manufacturer, on each Software/ application associate with the system indicated in this contract.

2. CCTV/VMS Preventative Maintenance

a. The contractor shall perform preventative maintenance and cleaning on a quantity of up to 200 potential interior and exterior cameras (Approx. 400 Video Feeds due to 4 Headed cameras).

i. Current camera is structured as follows:

1. 85% Fixed Cameras

2. 15% PTZ Cameras

ii. Cameras are a mix analog and IP and are of the following products:

• Illustra (American Dynamics)

• Arecont Vision

• Pelco

• Bosch

• AXIS

ii. Camera Encoders include:

• 14 - American Dynamic (8 channel input for analog cameras)

• 18 - ExacqVision single encoders (for analog PTZ)

b. The contractor shall perform preventative maintenance and cleaning on the VMS system substantially consisting of the following types of equipment:

i. Seven (7) American Dynamic Video Edge NVR/ Servers, each with the potential for 128 cameras connections.

ii. Mass-Storage Units:

1. Dell EMC, ME4012 Storage Array (210-AQIE)

iii. The VMS control and monitoring station, situated in the Physical Security Office (Room

1324), consists of 50-inch monitors, a Matrix keyboard, supporting transmission equipment, and NVR/server client PC hardware and software.

iv. All Monitors, NVR/ Server client PC hardware and software, that comprises the VMS control and monitoring station located in the Security Operation Center - Equipment Room.

v. Professional grade monitors and All-in-Ones PC (VMS Clients) in various locations throughout the building.

vi. All other cables (including fiber), infrastructure devices, and equipment associated with the successful transmission and reception of video from the cameras to and including the VMS Head-End located in the Security Operation Center Equipment Room.

c. Preventative maintenance including cleaning, painting (if necessary), moisture proofing, connective infrastructure, and other general maintenance tasks, shall be performed on twelve (12) camera poles of various design, materials, manufacture, height, and mounting in and around the DOI Headquarters Complex (MIB).

d. Preventative Maintenance shall include but not be limited to the following tasks:

i. Cameras:

1. Cleaning, sealing, and other general housekeeping tasks on all cameras.

2. Inspection of connectors, wiring, electronics, contacts, 3-axis motors (for

PTZ's), and all other hardware components.

3. Professional cleaning and general upkeep on all optics as per manufacturer’s recommendations.

4. Focusing and alignment of all camera views to be verified by the COR.

5. Inspection and assessment of camera power supplies to include voltage measurements.

6. Where possible, update all firmware/software on all equipment/infrastructure as applicable.

ii. Head-End:

1. Inspection and assessment of all electronic equipment.

2. Cleaning of all accumulated dust, detritus, or other substances.

3. Assessment of all video signal quality for each camera being recorded and displayed.

4. Where possible, update all firmware/software on all equipment/infrastructure as applicable.

5. Assessment of video storage potential and utilization. Recommendations for redistribution, if necessary, to fully balance the recorded load for maximum record time would be welcome and full considerations would be given to all considerations.

3. Preventative Maintenance- General Requirements

a. Maintenance shall be performed quarterly in the following manner:

i. Q1- Interior Cameras, CCTV/ VMS Head-End Systems

ii. Q2- Exterior Cameras, poles, and CCTV/VMS Head-End Systems

iii. Q3- Interior Cameras, CCTVIVMS Head-End Systems

iv. Q4 -Exterior Cameras, poles, and CCTV/VMS Head-End Systems

b. A year-long Maintenance Schedule shall be submitted electronically (email), to the COR for review and approval no later than 10 days from the awarded date. The schedule shall indicate the week(s) within specific months that maintenance is expected to be performed. Should the contractor need to reschedule due to unforeseen circumstances, the work shall be rescheduled no later than (NLT) ten (10) business days from the start date originally scheduled. The Maintenance Schedule is to be submitted each Year, no later than ten 10 business day after OY award date.

c. A PM report is to be submitted to the COR no later than 10 days after the PM has been completed (electric format) and should be a revision of the system assessment map described in Section 2:7.

d. All solutions provided under this contract shall be “turn-key” or end-to-end. DOI shall not be responsible for providing any additional materials, documentation, software/firmware, or labor at any time.

Note: It is a requirement that the successful vendor obtain all relevant software support agreements/licenses to maintain the equipment in accordance with, and retaining full support from, the manufacturer. Whatever prerequisites are necessary to ensure this requirement is met, is the sole responsibility of the successful vendor.

4. Corrective Maintenance Repairs and Replacement

a. The vendor shall include corrective maintenance repairs and replacement of degraded or disabled equipment/infrastructure, and the unscheduled reprogramming or reconfiguration of equipment or infrastructure due to system degradation or faults are to be performed “turn-key” with no additional cost to DOI for equipment, materials, and/or labor. This shall include the entirety of the CCTV/ VMS systems, “end-to-end”.

b. No later than 10 business days from the award of the contract, the vendor shall perform a complete system assessment, identify all cameras and sensors, transmission paths, identify all connection points on all connected infrastructure and equipment, and produce a complete system map to be presented to the COR (complete within 10 business days). The system information documentation shall remain on-site at all times and shall be regularly updated as repairs/ replacements and other changes to the system occur. The initial assessment shall be completed no later than 45 days after award. The assessment document shall be the template used in documenting any/ all changes to the system. In addition, it will be revised and presented to the COR at the end of each Quarterly PM (see Attachment 4 for required data).

c. Corrective Maintenance Response Times and Requirements:

i. For critical component/equipment/system failures (as determined by the COR based on necessity of the device and impact to operations), the contractor shall respond within four

(4) hours of initial notification from the COR (or COR's designated representatives).

ii. For non-critical component or equipment failures, the contractor shall respond within one

(1) business day.

5. Minor Installations (Time and Material (T&M))

a. Minor installations, requested by the CO, shall be drawn from a “Not-To-Exceed” (NTE) Line

Item. All such work shall be “turn-key” unless explicitly stated otherwise. The CO will provide the necessary specifications and requirements for the installation work. Some example of such work are but are not limited to; camera/ sensor/ duress button, installation, conduit installations which include junction boxes, pull boxes, elbows, cable pulls, and connections (See Attachment 2). System(s) equipment installations along with the associated integration and programing.

i. At the time the request is submitted, the vendor is to submit a proposal for the work requested. The proposal shall include:

1. A detailed description of the work including installation locations, and specific requirements.

2. The time proposed to complete the work.

3. A material list which shall include description, part numbers, Model Numbers, GSA Schedule and SIN (where applicable), quantity, and price.

4. Labor cost (breakdown associated with each person involved) including GSA

Schedule and SIN.

5. The lead time regarding material delivery.

ii. Vendor is to coordinate project with COR once project has been approved (in writing) by CO/COR and a modification has been issued.

iii. The vendor shall provide the COTR with “As-Built” drawings no later than 10 Business Days from Government Acceptance of installation. The drawing will consist of floor plans to the DOI Headquarter building(s) presenting the actual (typicals not allowable) conduit layout and equipment layout, associated with the new installation. The drawings shall indicate the size of the installed conduit and will specify all junction boxes and termination points. The drawings shall also indicate the approximate remaining capacity for said conduits. All equipment pertaining to the installation identified in the proposal will be indicated by individual symbols or colors. (i.e., panels, readers, workstations, repeaters, servers, cameras, sensors, duress buttons, etc.). The contractor shall provide the drawings, as a hard copy and in electronic format. Additionally, the contractor shall provide a written list in table or excel format containing make, model, serial number, MAC address (if applicable), IP Address (if applicable), and other pertinent information of all equipment installed as part of the proposal.

Section 5- Warranty Coverage

1. All new equipment installations that fall within the scope of the systems described in this solicitation, regardless of company/vendor performing the installation, shall be assumed covered under this contract provided it does not exceed the quantities specified in sections 3:4 and 3:5, subsections inclusive.

a. Said coverage will not begin until the Vendor’s representative and the COR inspect the installation for technical accuracy of installation and both parties accept the equipment, in writing, as technically sound.

b. Said coverage shall begin upon completion of the task order or independent project, as accepted by the COR and CO, and shall continue for one (1) year to include materials, equipment, and labor.

Section 6 - General Requirements and Site-Specific Information

1. All manufacturer Software Support Agreements (SSA's) or other manufacturer licensing agreements required to ensure full manufacturer support of the equipment and software covered under this scope shall be the responsibility of the contractor to maintain and update/renew in a timely manner. No lapses in these agreements/licenses shall be allowable. The contractor should plan on having to renew update these agreements/licenses immediately upon award of this contract.

2. All equipment procured and installed as part of this requirement is to be Commercial-Off-The-Shelf

(COTS).

3. Upon award the contractor must provide Asbestos Awareness Certificates for all technicians and personnel performing work on-site. These certificates can be provided post-award prior to initiating work.

4. The contractor must provide a ladder safety plan that meets all OSHA safety standards. No wooden ladders are allowable on-site. This can be provided post-award but prior to initiating work.

5. Upon award (See Deliverable Table 5.5) all technicians and other personnel assigned to the contract shall sign a "Code of Conduct" document. A sample of this document shall be provided to the contractor upon request as part of this solicitation (see Attachment 1).

6. The contractor shall ensure that all technicians engaged in the maintenance and management of the hardware infrastructure and software are certified by the respective manufacturers, where such certification and/or training programs are available for the equipment specified in this solicitation. Furthermore, all technicians must maintain current certifications. Proof of these certifications must be submitted prior to the award, as required in the solicitation and in accordance with the stipulations outlined in Section 3:3 of this Statement of Work (SOW).

7. Business hours are defined as 0700-1630.

8. There is no available parking on-site. There is metered parking surrounding the building and parking garages within 6 blocks of the site. Access to the loading dock for equipment and material deliveries shall be provided but is limited to 20 minutes per load/unload and must be coordinated with the COR or designee when the need arises.

9. The contractor shall hold a post-award "kick-off' meeting no later than ten (10) business days from notification of award.

10. The contractor shall develop and submit for approval, a Preventative Maintenance (PM) schedule which includes projected dates, times, personnel, and equipment (if necessary) to fully complete the PM inspection and resulting service work (if necessary) to all equipment and infrastructure, both software and hardware, referenced under this scope (See Deliverable Table Section 10).

11. The contractor shall maintain all equipment referenced in sections 2.1 and 2.2 subsections inclusive under this Scope of Work in accordance with the manufacture's recommendations. The vendor shall provide the COR detailed instructions on how PM's shall be performed, how tests shall be conducted, how typical repairs shall be affected, troubleshooting guidelines, and any procedures used as part of the inspection process.

12. The contractor shall provide the services of a 24-hour-a-day, 7-days-a-week, emergency call service that includes a live point of contact. The contractor shall also provide a means of electronic service ticket submission and tracking including receipt acknowledgements, status updates, and resolutions/close-outs.

Email shall be considered acceptable to meet compliance for this requirement if no other electronic interface is currently viable.

13. This work shall exceed 180 calendar days if all options are exercised. Therefore, a background investigation (BI) of all prime contractor employees and subcontractor employees actively working this job shall be required so that a PIV-II badge may be obtained. Additionally, all personnel that shall regularly respond to service and PM work must be processed through relevant procedures to obtain a PIV-II badge.

14. If the contractor anticipates the use of a sub-contractor and/or a GSA Schedule teaming arrangement, all subcontractors shall be approved by the COR before start of work.

15. At the end of each workday, all tools are to be properly put away, materials are to be safely stored, and the work area is to be clean.

16. Because of the complexity of the system, a Project/ Account Manager shall be assigned to this contract.

17. A highly skilled Lead Service Technician (Level 5) shall be assigned to this contract.

18. Due to the sophistication level that is involved in of the OS/ application updates, a Sr. Systems Applications Manager/Net. Engineer shall be assigned to this contract.

Section 7 – Quality Assurance, Quality Control and Safety

1. The contractor shall provide a Quality Assurance Plan that encompasses a comprehensive program that verifies a facility, structure, system or component will perform satisfactorily and safely in service (i.e., ISO 9000/9001).

2. The Contractor’s QA/QC Program shall include QC Procedures, checklists, and forms. Overall, the QC Program includes all drawings, specifications, procedures, policies, contracts, regulatory codes, standards, and agreements applicable to Contractor’s scope of work.

3. The contractor shall provide a site specific and project relevant Safety Plan that will display how the contractor will ensure compliance with the performance requirements contained herein and compliance with industry standards and/or best practices.

a. The Safety Plan shall address the systems and inspection methods that will be implemented to monitor and ensure the successful performance of this requirement.

b. The safety Plan shall comply with all applicable standards of the Occupational Safety and Health Administration (OSHA) and the Environmental Protection Agency (EPA). This plan shall be incorporated into the proposal.

Section 8 – Contract Employees Security Background Requirements

a. The contractor shall submit a Security Packet to the COR NLT 10 business day after award (See Attachment 5).

b. All contractor personnel involved in completing this scope of work for the CCTV System shall be citizens of the USA. Upon quote submission, all contractor personnel that anticipate working on site are required to possess a favorable adjudicated Background Investigation (BI). The actual clearance level is determined by the OPM Position Designation Tool. If an individual is only required to perform a task(s) during an option period, their security clearance must be obtained prior to that option period being exercised. All contractor personnel will require security in-processing, including clearance in accordance with Homeland Security Presidential Directive 12, before access will be granted to the work site. The contractor shall submit with their quote any pertinent documentation to confirm that all contractor personnel proposed for this project possess the aforementioned security requirements. This shall include any sub-contract personnel and it is the responsibility of the Prime to ensure this requirement is met prior to work beginning. Failure to comply with this requirement may be grounds for immediate work cessation and any other necessary corrective actions. The Government shall incur no obligations, fiscally or otherwise for work that has not yet been completed and shall incur no additional fees or charges due to delays or other factors occurring as a result of a failure to comply with the terms and conditions of this task order.

c. Contracting personnel who will be granted access to the DOI network, will be subject to a BI at the High-Risk Level

Section 9 – Contract Employee Network Access Requirements

a. Upon completion the contracting personnel’s BI, PIV II card issuance, and Date of Arrival, the individuals access the DOI Security Network shall complete with a passing grade IT mandated training.

Copies of ones Certificate of completion shall be submitted to the COR before access to the system.

Section 10 – Key Personnel

b. The contractor shall submit resumes for the three (3) key personnel listed below; the contractor shall also provide the necessary certifications/ credentials for the contractor personnel identified below.

c. Resumes Required for:

a. Project/ Account Manager

b. Lead Service Technician (Level 5)

c. Sr. Systems Applications Manager/Net. Engineer

Section 11 – Deliverables

Reference Description Due Section 3:6. d Software Support Agreement NLT 10 Business Days from Award Section 6.3 Asbestos Awareness Certificate NLT 10 Business Days from Award Section 6.4 Ladder Safety Plan (OSHA Safety

Standards) NLT 10 Business Days from Award

Section 6.5 Code of Conduct forms NLT 10 Business Days from Award Section 6.6 Copies of Systems Certifications (If

Applicable) Submitted in Response to Solicitation

Section 6.9 Post-award “Kick-off” meeting NLT 10 Business Days from Award Section 3:6. b, 6.10

PM Schedule Deliverable at Kick-off

Sections 5.13 BI forms completed and submitted to COR NLT 10 Business Days from Award Section 3.5. b Submit Assessment Documentation Upon completion of work described in

Section 2.5.b (NLT 45 Business Days from Award)

Section 3:6 .c Quarterly PM Report Each quarter NLT 10 days after PM is completed

Section 3:2. c.

i

Software/ Application Updates 1 week from OS Update release date

Section 3:7. b System Assessment NLT 10 Business Days from Award Section 8: a Employee BI Information Packet NLT 10 Business Days from Award

The awarded contractor’s Technical Proposal shall be incorporated and consider an official part of the final contract.

ATTACHMENT 1

U.S. Department of the Interior A. Office of Law Enforcement and Security/ Interior Complex Security Operations

Washington, D.C. 20240

July 3, 2025

Code of Conduct

To promote ethical business relationships with the Department of the Interior, Vendors are:

• To perform his/her daily work in a manner that is not disruptive to the occupants and visitors

• To furnish all required goods, materials, and services in a manner consistent with the underlying terms and conditions of their contract and applicable program solicitation

• To leave the job site clean and orderly on a daily basis.

• To show up on time, and when situations occur that would affect the arrival of the vendor, the COTR is to be notified immediately (i.e., phone call, email, etc.).

• To report to the designated COTR each morning before work begins

• To provide solutions/ options when running into difficult situations that may impact the period of performance or cost of the contract.

• Not to smoke within the buildings, courtyards, garages, or within 25 ft of entrances

• Not to take instructions from anyone other than the designated COTR

• Not to damage or remove any artwork, historical artifact, and property of the

Department of the Interior.

• To contact the COTR for approval before any penetrations are made concerning both buildings

• To arrange their own parking accommodations

• To eat food only in designated areas such as Cafeteria, Kitchenettes, and outside parks

• Not to fraternize with the occupants in a way that will interfere with their productive work performance

• To show up at the site with a valid identification (i.e., driver’s license, passport, etc.)

• Not to engage in other conduct that violates the contract or this Contractor Standard of

Conduct.

Conditions agreed to by: (Print)

Signature and date:

ATTACHMENT 2

Conduit Requirements

a. Conduit Installation Requirements (for replacement and new installations):

***This requirement generally refers to conduit being installed on the interior of a building. If conduit is to be installed externally, the contractor should propose conduit that provides maximum weather resistance (including UV degradation) and ensure all applicable code requirements are met.*** All cabling to be installed under this work shall be enclosed end-to-end in conduit or equivalent infrastructure as appropriate for the installed location. The following guidelines apply to all conduit infrastructure installed in the MIB/SIB for Security purposes:

iv. All conduit shall be "EMT" style conduit unless otherwise specified or required by National Electric Code or local building codes. The exception shall be conduit that will be installed in locations exposed to weather or consistent moisture in which case PVC or "Liquatite" shall be used as appropriate and per code. Such cases must be identified to the COR prior to installation and must be approved in writing by the COR.

v. No conduit larger than 4" shall be installed without prior approval by the COR. If there are capacity concerns a parallel 4" conduit is allowed.

vi. The terminus of any conduit run which occurs within a customer defined “Security Equipment Node” (SEN) shall require a minimum 18”x18”x6” junction box

vii. Trunking conduit is defined as conduit that runs between junction boxes.

1. All Trunking conduit must be 2.5" minimum diameter unless the wire specified shall exceed 50% capacity of said conduit in which case it shall be sized appropriately such that less than 50% of the capacity shall be utilized. Anywhere that "Trunking" conduit would need to bend greater than 45 degrees or where two 45 degree bends would be used within five feet of each other, a junction box/pull box is to be used instead.

Trunking conduit must not exceed 30' between junction/pull boxes and pull boxes must be a minimum of 18”x18”x6”.

viii. Feeder conduit is defined as conduit that runs from an 18"x18”x8" minimum junction box in an equipment closet, to the 1st junction box on the trunk in the conduit distribution network.

1. Feeder conduit must be 4" minimum diameter unless the wire specified for the project shall exceed 50% capacity of said conduit in which case it shall be sized appropriately such that less than 50% of the capacity shall be utilized.

ix. Branching conduit is defined as conduit that proceeds from a junction box to a security device location.

1. Branching conduit 1" minimum diameter unless the wire specified for the project shall exceed 50% capacity of said conduit in which case it shall be sized appropriately such that less than 50% of the capacity shall be utilized. No conduit larger than 1.25'' shall be installed without prior approval by the COR. If there are capacity concerns a parallel 1.25'' conduit is allowed. Branching conduit may not exceed 25' in length.

2. Branching conduit may be of the type "Panduit” or “Wiremold” in equivalent sizes where necessary to meet aesthetic requirements. All locations utilizing "Panduit" or “Wiremold” must be approved in writing by the COR prior to installation.

x. Enclosure distribution conduit is defined as conduit that runs from the 18"x18"x6” minimum junction (Referenced in Section 3.a.iii) box in the equipment room to the various equipment enclosures.

ATTACHMENT 3 – MS Operating System Update/ System Application Update Report

# Computer Name Type Vulnerability Operating

System Features TCP/IP Address

Patching Status Location Notes

KEY

REQUIRE

OUTAGE

Contact COR

PROBLEM

System Eng. COMPLETED

WARNING

ATTACHMENT 4 – Systems

CCTV System Assessment Log

• NVR/ Server Make Model

• NVR#

• Filter cleaned/ replaced

• Last date application updated on servers (indicate version)

• Workstation#

• Last application update on workstations (indicate version)

• Camera# w/in NVR

• Interior/ Exterior

• Manufacturer

• Model#

• Control Type

• Camera#

• Connector Type

• Video Cable Type

• Voltage Cable Type

• Voltage at Camera

• Power Cable Type

• Headend Location

• IP/ Analog

• Mac Address

• IP Address

• SubNet Mask

• Gateway

• DNS Server

• Clean

• Focus

• Number of cameras online/ Offline

• Identified issues

• Restoration Plan

• Notes

CCTV Individual Camera Specs

• Individualize Camera Specs

• Image from each camera validating condition

ATTACHMENT 5 – Security Background Investigation Required Information

Forms and information required to initiate BI

• Completed BSEE Form 5400

• Signed Fair Credit Report Act Form

• Declaration of Employment Form (OPM 306)

• Copy of e-Verify Case Details

• Resume

• Summary of Duties (completed by COR)

• Position Description (completed by COR)

• Position Designation (completed by COR)

• Invitation to complete Electronic Questionnaires for Investigations Processing (e-QIP). Performed and investigate by DOD.

Section 11 –Task Option

1. Camera Replacement

a. The Contractor shall provide the government with the option to remove approximately 78 Pelco mini dome (analog) cameras currently integrated with American Dynamics EIP8H encoders. Additionally, it is noted that these legacy cameras do not support Multi-Factor Authentication (MFA).

b. The contractor shall submit a proposal to replace 78 analog cameras with IP cameras (Internet Protocol) throughout the building. The upgrade CCTV cameras must support encryption and Multi- Factor Authentication (MFA) and shall not communicate with the Victor VMS on HTTP port 80, which does not encrypt data-in-transit (DIT). This shall eliminate the potential to transmit date between the CCTV system and other devices (such as a monitoring station) in plain text.

c. The contractor shall provide the government with a cost breakdown of the project, which will include material cost and labor rates in addition to total labor hours required for the project.

d. The contractor shall provide a comprehensive project plan that delineates the following components:

a. Discovery Phase Timeline

b. Designated Material Order Date

c. Anticipated Lead Time for Material Delivery

d. Scheduled Project Start Date

e. Key Project Milestones

f. Projected Completion Date

e. The contractor shall submit a Risk Management Plan that outlines potential risks and mitigation strategies to address them proactively.

f. A Quality Assurance Plan shall be submitted describing measures in place to ensure that project deliverables meet established quality standards.

g. The contractor shall be required to attend a Bi-weekly Progress meeting with the COR to discuss status updates and reporting. The date and time of the meeting shall be determined at the beginning of the project by the COR.

h. For Data in Transit (DIT). The new cameras are required to use HTTPS. By using HTTPS, data transmitted over port 443 is encrypted, ensuring that sensitive information remains confidential and protected from interception.

i. The installation of new cabling may be necessary to support the digital transmission of video and data across networks, thereby enabling remote monitoring capabilities and facilitating seamless integration with existing security systems.

j. All work shall be conducted as a "fully integrated" solution, inclusive of all necessary setup and configuration associated with the system implementation.