Attachment_J-5_T2S2_Onsite_Demo_Evaluation_Tables.pdf

ATTACHMENT J.5

T2S2 COLLECTION SYSTEM ONSITE DEMONSTRATION EVALUATION

COMPANY NAME:

DJD-12-R-0046, Attachment J.5 Page 1

PRELIMINARIES:

1. The Government shall provide:

a) A group of test targets which will at a minimum include a VoIP target, two Nextel PTT phones, a mobile telephone, a smart phone, a FAX target, and an internet account, all with various account services such as text messaging.

b) CDC data delivery.

c) Required sample macros for use in the word processing programs.

d) At least one test target device will be located offsite from the test facility so as to test certain features such as cellsite mapping ability.

e) A sample of data representing internet communication data previously stored or archived on third party servers or other common forms of network attached storage and transferred to law enforcement via readily available media.

f) SMS text data delivery.

2. The competing Contractor shall provide at their location:

a) Infrastructure for reception of delivery of data and content into their test platform via PRI circuits as delivered by Service Providers and/or the government.

b) A complete test platform configured and prepared to meet the government’s requirements as detailed in the solicitation.

c) A simulation of remote office connections including a simulated remote office equipped with remote caching.

d) A simulation of the Disaster Recovery Platform.

e) A maximum forty (40) minute prepared presentation of the Contractor’s ability to provide mediation devices to the government in foreign locations according to SOW requirements.

(Part 28)

f) A maximum ten (10) minute prepared presentation of the Contractor’s ability to provide

Transportable Systems to the government according to SOW requirements.

3. The government reserves the right to return to a previously completed part of the Onsite Demonstration at any time.

PART 1 – Configuration Overview

Procedures:

The Contractor shall provide a “tour” of the physical configuration and architecture of their test system. The

“tour” shall include the following:

1. Identification of all system components with explanation of their function;

2. Explanation of the flow of data and content through the system;

3. Explanation of how the Contractor will meet the SOW’s specific hardware requirements;

4. Explanation of the capabilities of the system database, including the subcomponents of the

Subscribers Database and the Session Database;

5. Explanation of the redundancy and backup capabilities of the system;

6. Explanation of the scalability of the system; and

7. Explanation of anti-virus and remote administration compatibility.

DJD-12-R-0046, Attachment J.5 Page 2

SOW References:

ITEM

(SOW REF.) PRODUCT REQUIREMENT DEMO RESULTS REMARKS

OD-01-

(C.A.2.E) The T2S2 Collection System provides all of its definitional elements in a manner that is secure, verifiable, and withstands judicial review.

[ ] Complies

[ ] Fails to Comply

Point Assignment: 10 points.

OD-01-

(C.A.3.B) The T2S2 Collection System wiring complies with TIA/EIA-568 specifications.

Point Assignment: 5 points.

(C.B.1.B) All physical components and materials shall be comprised of new, previously unused equipment with no recycled, refurbished, or otherwise re-used equipment being resident on a system or sub-component at the time of delivery by the Contractor to the government.

Point Assignment: 2 points.

(C.B.1.G) Systems shall be configured around a centralized core at which all evidence shall be collected, stored and produced. All data, content, and work product collected or produced throughout the network shall ultimately be stored and available at the centralized core.

(C.B.1.H) The main computer core is configured and organized in wheeled computer server rack(s) so as to promote efficient use of floor space.

Point Assignment: 1point.

(C.B.1.I) The system is capable of connecting, exchanging information and communicating (passing of data/audio) with other core systems from the same contractor upon establishment of connectivity by the government.

(C.B.1.J.8) Remote servers and other caching equipment are provided adequate housing appropriate to the caching method utilized at the particular remote site, for example, a server rack in the case of a server.

(C.B.1.S) The systems shall provide and demonstrate adequate redundancy and automated backup ability for each critical component towards a goal of preventing or minimizing down time due to failures.

Point Assignment: 8 points.

(C.B.1.S) The database shall have a minimum redundancy of RAID 5 with a hot spare for data and product drives and have an automatic backup done frequently with several restore points.

(C.B.1.S) Archiving shall be redundant with multiple controllers and media handlers.

(C.B.1.S) Audio and data shall reside in multiple, redundant locations before archiving and until purged from the system after completion of the investigation.

DJD-12-R-0046, Attachment J.5 Page 3

(C.B.1.S) Transcripts, reports, and other user data shall be automatically backed up with multiple recovery locations.

(C.B.1.S) The systems shall be equipped with critical redundant components such as redundant power backups, redundant power supplies, spare network servers, etc.

(C.B.1.U) The systems shall be equipped with an appropriate number of UPSs which are sufficient to support the systems for a minimum period of 30 minutes.

(C.B.1.V) All data shall be backed up frequently to an external storage device, such as a NAS, removable serial hard drives, etc.

Point Assignment: 1 point.

(C.B.1.W) The system possesses sufficient safeguards to protect collected data, audio, and work product from loss during cataclysmic events such as power outages.

(C.B.1.X) The systems shall ensure that in the case of

Title III audio interceptions, no user/monitor is capable of listening to (through either Live Monitoring mode or Playback mode) any interception or any portion of an interception which is not recorded and archived by the systems, or conversely, that no Title III audio interception or any portion of a Title III interception is recorded or archived by the systems if it was not live monitored by a user/monitor with the availability of full minimization functionality.

(C.B.3.A) The systems shall have a large, accessible, scalable database capable of storing not only the data and content collected from the interceptions conducted on it, but also digital information gathered from other sources in an investigation. The systems shall be equipped with a database, or series of databases, sufficiently robust to handle a minimum of 50 million records and expandable to handle a minimum of 100 million records. The database shall perform at least

200 transactions per second at 75% processor utilization. The database’s end-to-end execution time shall ensure at least 90% of transactions respond within two seconds.

(C.B.3.C) This database shall contain fields describing the archived original evidence and working copy media names.

(C.B.3.D) This database shall be structured as to not be considered “original evidence.”

(C.B.3.E) The systems shall possess the ability to import data into the database which was accumulated from other databases or sources. This importable data shall include, but not be limited to, existing subscriber

DJD-12-R-0046, Attachment J.5 Page 4 databases, digital video and pictures taken in the course of investigations, audio collected from other sources, etc., in unprotected, generally accepted formats.

OD-01-

(C.B.3.F) The system database shall come equipped with a Subscriber Database. The Subscriber Database shall be utilized by the system to automatically populate the associated information into the appropriate session fields for purposes of report generation and other analysis. The Subscriber

Database shall be utilized by the system to avoid the necessity of repetitive entry of redundant or duplicate information onto the system. The Subscriber Database shall provide Import/Export linkage with common database formats.

(C.B.3.G) The Subscriber Database shall be simple in construction, including the following named field types or similar field types:

Telephone number (should accommodate IP addresses or e-mail addresses if applicable)

Servicing Telephone

Company (or Internet

Service Provider if applicable)

Account Number

Subscriber Name

Assigned user

Billing Address Line 1

Billing Address Line 2

Billing City

Billing State

Billing Zip Code

Alternate Address Line 1

Alternate Address Line 2

Alternate City; Alternate

State

Alternate Zip Code

Additional Telephone

Numbers

Actual User 1

Actual User 2

Actual User 3

Type of communications device:

o Landline o VoIP o Fax machine o Pager o Cell phone o Computer o Other

Origin of Device:

DJD-12-R-0046, Attachment J.5 Page 5 o Mobile o Residential o Business o Public o IP Address o Other

(C.B.3.H) The Subscriber Database shall allow for time sensitive multiple listing of telephone numbers, i.e. Information for Subscriber A who possessed telephone number from 01/03/2010 to 03/30/2010, information for Subscriber B who possessed the same telephone number from 04/15/2010 to 06/30/2010, and

Subscriber C who possessed the same telephone number from 07/05/2010 to the present.

(C.B.3.J) The system database shall come equipped with a Session Database. The Session Database shall include the following named field types or similar field types, populated automatically by the system or manually by the system users as appropriate for each field:

• Language spoken/used during the session.

• Session participants.

• Session number.

• Date of session.

• Start time of session.

• Dialed digits.

• Session connect time (based on off hook or ringing or CALEA).

• Session disconnect or end time.

• Session duration (or calculated by the system).

• Hook flash (time stamp and new sequential session number).

• Audio (time and condition when audio is turned on, off, or changed).

• Target number (expandable for new or different numbering plans).

• Session progress tones (Post-cut-through

Dialed Digits).

• Caller ID information or calling number identification (CNI).

• Identify session direction as either

“Incoming” or “Outgoing.”

• GPS or cell site location information.

• Classification of sessions as Pertinent, Non-

Pertinent, or Privileged.

• CALEA Events.

• Monitor ID.

• Session Content.

(C.B.4.A) The systems shall be sufficiently robust and scalable to support up to a minimum of three hundred

(300) target lines in an off-hook condition simultaneously.

OD-01- (C.B.4.B) The system shall be sufficiently robust and [ ] Complies Point Assignment: 2 points.

DJD-12-R-0046, Attachment J.5 Page 6

027 scalable to support up to a minimum of two hundred

(200) workstations connected simultaneously with up to fifty (50) remote offices under a single centralized core.

(C.B.5.A) The T2S2 Collection System shall be built upon an underlying Commercial-off-the-Shelf (COTS) operating system that is still supported by the manufacturer.

(C.B.5.F) The system database shall come equipped with a Subscriber Database. The Subscriber Database shall be utilized by the system to automatically populate the associated information into the appropriate session fields for purposes of report generation and other analysis. The Subscriber

Database shall be utilized by the system to avoid the necessity of repetitive entry of redundant or duplicate information onto the system. The Subscriber Database shall provide Import/Export linkage with common database formats.

(C.B.6.A) The systems shall be compatible with a wide variety of commercially available versions of anti-virus enterprise software (McAfee, Symantec, Kaspersky Labs, Trend Micro, etc.).

(C.B.6.D) The systems shall be compatible with a wide variety of commercially available versions of remote administration software (such as Net-Op Remote

Control, or other remote administration software of similar or equal quality).

(C.B.7.A) All servers shall be current (as of the time of the issuance of the particular delivery order or award) enterprise-class servers manufactured either by Dell, Hewlett-Packard, IBM, NetApp, or other servers of similar, equal or higher quality, equipped with a minimum of twice the recommended RAM for the most RAM intensive software component on the system as recommended by the original software developer or as requested by the COR.

(C.B.7.B) Individual workstations and/or laptop computers (utilized in transportable systems) shall be a current (as of the time of award) Business-class workstation manufactured either by Dell, Hewlett-

Packard, or other workstations of similar, equal or higher quality, equipped with a minimum of twice the recommended RAM for the most RAM intensive software component on the system as recommended by the original software developer, or a minimum of twice the recommended RAM for the operating system, or a minimum of 8 GB of RAM, whichever is the highest amount of RAM, or as otherwise requested by the government.

(C.B.7.B) The individual workstation shall consist of the following components: a CPU, integrated dual flat screen display monitors, full standard keyboard with numeric pad, computer mouse, foot pedal control, stereo desktop speakers, stereo headphones, and

DJD-12-R-0046, Attachment J.5 Page 7 workstation power surge protection and power backup providing a minimum backup period of 20 minutes.

OD-01-

(C.B.7.C) Network Printers shall be a current (as of the time of the issuance of the particular delivery order or award) high speed laser-jet Office-class printers manufactured by Dell, Hewlett-Packard, or other network printers of similar, equal or higher quality.

(C.B.7.D) Display Monitors shall be 19” flat panel

LCD monitors with VGA and DVI connections manufactured either by Dell, Sony, NEC, or other monitors of similar, equal or higher quality.

(C.B.7.E) Network Switches shall be 1000-baseT on all ports manufactured either by Dell, Cisco, Hewlett-

Packard, or other network switches of similar, equal or higher quality. The connection between switches shall be at least 10,000-baseT.

(C.C.2.A) Telephonic Interface for data packet/audio delivery shall possess the capability of customizing to all possible standards, including but not limited to, PRI interface cards, BRI interface cards, and analog.

PART 2 – Establishment of User Accounts and System Security

The Contractor shall demonstrate the steps necessary to create User Accounts on the test system and the security characteristics of the system. The demonstration shall include the following elements:

1. User Accounts will be established for each member present of the selection committee.

2. Each User Account will be established with varying degrees of access to the system, i.e., some accounts will be System Admin accounts, some will be monitor-level access, etc.

3. The demonstration will include levels and explanation of granularity of permissions.

4. Attempts will be made to access the system without having been given either accounts or exceeding granted permissions or attempts to enter impermissible areas of the system.

5. System Administrator Accounts will be demonstrated to be able to fully navigate uninhibited within the system.

6. The demonstration will show configurable flexibility of the system to meet federal agency password requirements.

7. The demonstration will address how the Contractor will implement the requirement to configure security parameters centrally from the core.

ITEM # (SOW REF.) PRODUCT REQUIREMENT DEMO RESULTS REMARKS

OD-02-

(C.B.2.B) The systems shall be equipped with sufficient security safeguards to limit access to the systems by legitimate or authorized users and to protect the systems and its evidence from attack by outside malicious entities.

(C.B.2.C) All users of the systems regardless of role

(i.e., monitors, case agents, intelligence analysts, supervisors, system administrators, etc.) shall only be

DJD-12-R-0046, Attachment J.5 Page 8 able to access the network through a valid, unique user account and associated password that is set by the user to prevent any unauthorized access to the network.

(C.B.2.C) User accounts shall have a minimum password length configurable as dictated by the federal agency policy.

(C.B.2.C) The systems shall require the user to change passwords in intervals as dictated by the federal agency policy, without affecting the collection process.

(C.B.2.D) The systems shall provide extensive selections for each User Account so as to precisely define the abilities, granted access, permissions, and allowable use of the systems by each system user.

(C.B.2.D) The systems shall by default refuse access or permissions to system areas, content, sub-systems, intelligence, and data for any user unless their account is granted the appropriate prerequisite permissions.

(C.B.2.E) If encryption authorization codes, including proprietary encryption algorithms, are required to operate any function within the system, the Contractor shall make them open and accessible to government agency personnel, providing all codes and keys to the government agency.

(C.B.2.F) The system shall implement the configuration of the security parameters to be applied to each server and workstation centrally from the core.

(C.E.3.C) The systems shall provide the System

Administrators with the means to easily establish user accounts for monitors, investigators, and other system administrators, establishing degrees of access and privilege as granularly as is practical.

PART 3 – Target Lines and Archiving Pathways Establishment on the System

The Contractor shall demonstrate the steps necessary to create targets on the test system utilizing all of the government-provided target devices. The demonstration shall include the following elements:

1. Demonstration that the targets cannot be intercepted without the creation of Evidence and

Working/Duplicate copy pathways.

2. Archiving functionality is performed at the core.

3. Demonstration of conditional continuation of collection during the loss of pathways.

4. Demonstration of complete writing cycle configurability.

5. Demonstration of automated expiration.

DJD-12-R-0046, Attachment J.5 Page 9

OD-03-

(C.A.2.B.3) The T2S2 Collection Systems provides the Critical Primary Function of the ability to archive all intercepted communications to media suitable for evidence and retrieve that evidence for processing, sealing, or presentation to the court.

(C.B.1.O) The T2S2 Collection System provides automated, permanent recording of any monitored intercepted audio or other transmissions consisting of content.

(C.B.1.S) Archiving shall be redundant with multiple controllers and media handlers.

(C.B.1.S) Audio and data shall reside in multiple, redundant locations before archiving and until purged from the system after completion of the investigation.

(C.B.1.X) The systems shall ensure that in the case of Title III audio interceptions, no user/monitor is capable of listening to (through either Live

Monitoring mode or Playback mode) any interception or any portion of an interception which is not recorded and archived by the systems, or conversely, that no Title III audio interception or any portion of a Title III interception is recorded or archived by the systems if it was not live monitored by a user/monitor with the availability of full minimization functionality.

(C.D.2.B) The devices used for recording and writing of media shall be an internal or securely connected sub-component to the system, but removable/replaceable if necessary for reasons of failure or maintenance.

(C.D.2.E) All archiving functions shall be established, maintained and conducted to occur at the centralized core. All evidence and working/duplicate media generation shall occur at the centralized core.

(C.D.2.F) Media generation shall consist of the following categories:

1. Evidence Copy.

2. Working/Duplicate Copy.

3. Discovery.

(C.D.2.J) The systems shall not enable any collection and/or monitoring of audio/data on a target line without the mandatory designating of a destination on the system for at least one Evidence Copy media and one Working/Duplicate Copy Media.

(C.D.2.K) Once destinations for at least one

Evidence Copy media and one Working/Duplicate

Copy Media have been designated on the system, the systems shall allow collection and/or monitoring of audio/data on a target line to continue if one or both of the destinations be malfunctioning or otherwise

DJD-12-R-0046, Attachment J.5 Page 10 interrupted and/or the system loses the ability to write the final, physical media form of the Evidence

Copy and/or the Working/Duplicate Copy.

However, the following requirements shall be met by the systems:

OD-03-

(C.D.2.K.1) All System Administrators shall receive notifications that evidence and working copy is not able to be written and/or the pathway is interrupted or otherwise malfunctioning and that the situation must be corrected and action must be taken. Daily reminders shall be sent on the system until the situation is corrected. Permanent records of the notifications sent to the System Administrators shall be maintained on the system and be auditable.

(C.D.2.K.2) The location where the evidence is buffered until written to final, physical media form shall be secure, safe, reliable (minimum RAID 5 redundancy, SAN preferable, with appropriate backups) and possess sufficient storage space to allow buffering on all target lines to continue until the resumption of evidence writing processes.

(C.D.2.K.3) Once the malfunction and/or interruption in the pathway and/or writing ability is resolved and the pathway is reopened and functioning again as normal, the system shall automatically resume normal Evidence Copy and

Working/Duplicate Copy production and other functionality including the writing of any data held in temporary storage.

(C.D.2.L) The writing cycles for the final physical evidence copy and the duplicate working copy of the media shall be completely configurable (immediately to up to daily for Jukebox production method, and on demand and/or at the end of an investigation for

SAN production method) so as to be scheduled as required by the system administrator.

(C.E.3.D) The systems shall provide the System

Administrators with the means to easily setup and establish cases and target lines on the system for interception and provide for automatic expiration by selectable date and time.

PART 4 – Demonstration of Telecommunications Collection Capabilities

The Contractor shall demonstrate basic Live Monitoring and Collection capability of all provided target sources on a basic, fundamental level. (Full exploration of system functionality will be conducted in a more detailed manner in the parts to follow.)

DJD-12-R-0046, Attachment J.5 Page 11

ITEM # (SOW REF.) PRODUCT REQUIREMENT DEMO

RESULTS

REMARKS

OD-04-

(C.A.2.A) The T2S2 Collection System collects Auditory

Communications (such as the audio from telephone conversations).

[ ] Fails to

Comply

Point Assignment: 1 point.

OD-04-

(C.A.2.B.1) The T2S2 Collection Systems provides the

Critical Primary Function of the ability to intercept and perform live monitoring (i.e., listening to and recording of live telephone sessions, etc.).

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to landline telephone communications.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to analog landline/voltage threshold.

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

J-STD-025-A and J-STD-025-B.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to all variations of J-STD.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to CDMA.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to GSM.

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

Packet Cable 1.5/2.0.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to Packet Cable 1.5/2.0.

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

(iDEN) Digital Dispatch.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to (iDEN) Digital Dispatch.

OD-04- (C.A.3.A) The T2S2 Collection System is compatible with [ ] Complies Point Assignment: 10 points.

DJD-12-R-0046, Attachment J.5 Page 12

009 all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

Q-Chat.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to Q-Chat.

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

ATIS T1.IAS.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to ATIS T1.IAS.

(C.A.3.A) The T2S2 Collection System is compatible with all hardware/software solutions developed by industry to comply with the Communications Assistance to Law

Enforcement Act (CALEA), including, but not limited to

ANSI T1.724, and ANSI T1.678 and any other applicable

ANSI standards.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to ANSI T1.724, ANSI T1.678, all other applicable ANSI standards.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include voice conversations.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include text messaging/SMS.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to SMS/Text messaging.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include

MMS/video.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include

MMS/text messaging.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include

MMS document, photo, and other files.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include

IP data files.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to IP communications.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication

DJD-12-R-0046, Attachment J.5 Page 13 including, but not limited to VoIP. [ ] Fails to

OD-04-

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include modem.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include facsimile.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to fax machines.

(C.B.1.N) The T2S2 Collection Systems collects, decodes, and reassembles audio and other transmissions to include signaling information.

(C.B.1.P) The T2S2 Collection System is capable of accepting both analog and digital inputs from the telephone, VoIP, or Internet service providers.

(C.C.1.A) The systems shall provide for reception of all forms of telephonic and/or electronic communication including, but not limited to cellular/wireless/mobile telephones, other handheld electronic devices, and computers.

(C.C.1.B) The systems shall provide for reception of all forms of telephonic and/or electronic communication delivery formats including, but not limited to analog.

(C.C.2.A) Telephonic Interface for data packet/audio delivery shall possess the capability of customizing to all possible standards, including but not limited to analog.

(C.C.1.B) The systems shall provide for reception of all forms of telephonic and/or electronic communication delivery formats including, but not limited to ISDN PRI.

(C.C.2.A) Telephonic Interface for data packet/audio delivery shall possess the capability of customizing to all possible standards, including but not limited to PRI interface cards.

(C.C.1.B) The systems shall provide for reception of all forms of telephonic and/or electronic communication delivery formats including, but not limited to ISDN BRI.

(C.C.2.A) Telephonic Interface for data packet/audio delivery shall possess the capability of customizing to all possible standards, including but not limited to BRI interface cards.

(C.C.1.B) The systems shall provide for reception of all forms of telephonic and/or electronic communication delivery formats including, but not limited to modem.

(C.C.1.B) The systems shall also provide for reception from direct audio inputs including, but not limited to, analog room probes.

OD-04- (C.C.1.B) The systems shall also provide for reception [ ] Complies Point Assignment: 5 points.

DJD-12-R-0046, Attachment J.5 Page 14

028 from direct audio inputs including, but not limited to, radio transmissions.

(C.C.1.D) The system shall minimally provide for the collection of the following data field types when received by the system:

Date

Start Time

Dialed Digits

Direction of Session

(Incoming/Outgoing)

Caller ID Information (CNI)

End (or release) Time

Cell Site/GPS Location

Information

Target Telephone Number

Session completion/answered.

PART 5 – Demonstration of Basic Live Monitoring Window Functions

The Contractor shall demonstrate the Basic Live Monitoring Window Functions with targets on the test system utilizing all of the government-provided target devices. The demonstration shall include the following elements:

1. Selection Committee members will concurrently conduct live monitoring on all the target devices.

2. Test calls will be placed in random patterns, each test device consecutively communicating with other target test devices.

3. The demonstration will show proper Live Window field configuration and population by the system database.

4. Demonstration of the availability of Terminal services.

5. Demonstration of full utilization of the dual screen display monitors.

6. Demonstration of utilization of speakers and headphones.

7. Demonstration of precedence of Live Monitoring.

8. Demonstration of the easily identifiable, unique onscreen appearance of Live Monitor Mode.

9. Demonstration of Session Number assignment.

10. Demonstration of Synopsis (or summary) window utility.

11. Demonstration of audio tagging functionality.

12. Demonstration of an onscreen visual representation of collected live audio.

OD-05-

(C.A.2.B.1) The T2S2 Collection Systems provides the Critical Primary Function of the ability to intercept and perform live monitoring (i.e., listening

DJD-12-R-0046, Attachment J.5 Page 15 to and recording of live telephone sessions, etc.).

(C.B.1.K) Live monitoring is performed at network audio workstations, a portion of which may be located in different cities or work sites of considerable distance from the centralized core. All functionality of this separate capability is fully executable for any target from anywhere on the network at any time, independent of where on the network monitoring was conducted for a particular target up until that time.

(C.B.1.X) The systems shall ensure that in the case of Title III audio interceptions, no user/monitor is capable of listening to (through either Live

Monitoring mode or Playback mode) any interception or any portion of an interception which is not recorded and archived by the systems, or conversely, that no Title III audio interception or any portion of a Title III interception is recorded or archived by the systems if it was not live monitored by a user/monitor with the availability of full

(C.B.3.F) The Subscriber Database shall be utilized by the system to automatically populate the associated information into the appropriate session fields for purposes of report generation and other analysis. The Subscriber Database shall be utilized by the system to avoid the necessity of repetitive entry of redundant or duplicate information onto the system.

(C.B.3.I) The following fields or like fields from the

Subscriber Database shall appear at live monitor and playback: Telephone number and Subscriber Name.

(C.D.1.A) Live Monitoring (the intercepting, reviewing, controlling for minimization protocols, and recording of communications content in real time) shall be performed by a single monitor located at an individual workstation connected by either

LAN or WAN to the T2S2 System, depending on the physical location of the workstation and its proximity to the central core.

(C.D.1.B) Terminal services shall be available to achieve remote location monitoring (for example, to facilitate later system expansion to smaller offices).

(C.D.1.C) Individual workstations shall be re-configurable for location assignment at any time, general system parameters allowing. (For example, the number of workstations assigned to a main core site shall be reducible, with the workstations re-assigned to a remote office.)

(C.D.1.D) The system shall possess the ability to utilize the integrated dual flat screen monitors so as to “un-dock” and transfer selected display functions from one monitor screen to another while preserving

DJD-12-R-0046, Attachment J.5 Page 16 full functionality. For example, the user shall be able to move any cell site mapping display, or synopsis or summary field, etc., from one monitor to the other.

OD-05-

(C.D.1.F) Live Monitoring and the associated interception/collection of communications shall take precedence over all other activities performed on the system. If a monitor happens to be in the process of producing a written word product, performing case analysis, generating reports, or otherwise utilizing secondary functions of the system and a live session is initiated or received by the target, the program shall automatically save all the work and the system shall immediately switch the monitor’s focus to the live session. The controlling monitor shall be barred from performing functions unrelated to the Live

Monitoring mode while responsible for the live monitoring of any particular session, thereby focusing the monitor’s attention upon the new live session.

(C.D.1.G) The Live Monitoring mode shall possess an easily identifiable, unique onscreen appearance which differentiates itself to the user from the

Playback mode, thus alerting the monitor to a new session which is being intercepted live.

(C.D.1.I) Upon commencement of a new session interception, the systems shall identify the session as either “Incoming” or “Outgoing” to the monitor in all cases that the system has received the necessary session data.

(C.D.1.K) Every separate communication session shall be automatically assigned by the system a unique, chronological Session Number in an unbroken sequence for each target number or intercepted target source. The first Session Number generated by the system at the beginning of any interception shall be a default Session Number of 1 and proceed numerically in increments of 1 for each subsequent session. The systems shall allow the system administrator to adjust the starting Session

Number. Upon the extension or renewal of an interception for a particular target number or intercepted target source, the systems shall possess the ability of continuing the numbering scheme from the conclusion of the prior period of interception.

(C.D.1.N) The systems shall provide the monitor with a synopsis (or summary) window (or field) during Live Monitoring mode operation.

(C.D.1.N.1) The synopsis shall be automatically saved by the system upon exiting the Live Monitor or Playback windows for the current session or upon going to the Live Monitor window of a new session.

(C.D.1.N.1) The systems shall have frequent, automated saving of the synopsis.

DJD-12-R-0046, Attachment J.5 Page 17

(C.D.1.N.2) Users shall be provided with individually customizable per user hot key functions/macros to facilitate speedy typing of the synopsis.

(C.D.1.N.3) All standard word processing capabilities and functions (copy, paste, fonts, spelling checks, find and replace, etc.) shall be available in the synopsis.

(C.D.1.N.4) Users shall be able to employ individually customizable per user auto-correct spelling functions in the synopsis.

(C.D.1.Q) During Live Monitoring mode operation, session data pertinent to the current session shall be displayed to the monitor or any user listening to the

(C.D.1.Q) System serving messages (HLR records, etc.) shall not display for the monitor.

(C.D.1.R) During Live Monitoring mode operation, the monitor shall possess the ability to tag audio sections for quick reference and locating functionality.

(C.D.1.S) During Live Monitoring mode operation, the monitor shall possess the ability to view and update subscriber and session participant information.

(C.D.1.T) During Live Monitoring mode operation, the monitor shall possess the ability to designate the language spoken or used during the session. The selection shall be editable by subsequent users. A drop-down menu of language choices shall be provided.

(C.D.1.U) Live Monitoring mode operation shall present an onscreen visual representation of any live audio being collected by the system and listened to by the monitor.

(C.D.2.T) The saving of incomplete records shall be executed automatically by the system without user decision required, but Home Location Register

(HLR) and other Network Messaging shall be automatically filtered out of any display to the users.

PART 6 – Demonstration of Call Monitoring Assignment and Live Monitor Session Control

DJD-12-R-0046, Attachment J.5 Page 18

The Contractor shall demonstrate the Call Monitoring Assignment and Live Monitor Session Control with targets on the test system utilizing all of the government-provided target devices. The demonstration shall include the following elements:

1. Selection Committee members will concurrently conduct live monitoring on all the target devices.

2. Multiple Selection Committee members will concurrently select the same and differing levels of priority for session reception so as to test proper functioning of the session distribution functionality.

3. Multiple tests of functionality will be performed to ensure only one monitor has control of a session at any particular time and that subsequent monitors only gain control after the initial controlling monitor has relinquished control. Particular attention shall be paid to minimization decision (basic function check only) and synopsis editing.

4. Additional monitors will check their capabilities to concurrently listen to and review sessions.

5. Additional monitors will check for identifying information concerning the controlling monitor.

6. All monitors will check for notifications of the targets for which they are registered and the targets for which other monitors are registered at different times.

7. All monitors will check the functionality of CMA.

8. The Contractor shall demonstrate the monitors’ ability to manually terminate a session.

OD-06-

(C.D.1.H) Only one monitor shall have control of an interception occurring in Live Monitor mode at any time.

(C.D.1.H) Multiple listeners shall be allowed, but only the monitor possessing control shall be able to type in the synopsis or summary field, have the ability to minimize the interception, and otherwise edit the database in regards to the particular session while in Live Monitor mode. Only after the “live” portion of the session has ended or the controlling monitor has otherwise surrendered control of the session, shall another monitor be able to consecutively edit information associated with the

(C.D.1.H) When another monitor listens into a session controlled by another monitor, the listening monitor shall be automatically advised by the system that they have listening-only privileges and that no editing is allowed due to control of the interception occurring elsewhere.

(C.D.1.H) The systems shall identify the controlling monitor (through display of an easily recognizable identifier such as the name of the monitor or their account name) and the controlling monitor’s location

(through display of the designation of the particular workstation, site-only being insufficient information) to other system users.

(C.D.1.J) Monitors shall be provided with a continuous notification of the target lines for which

DJD-12-R-0046, Attachment J.5 Page 19 they are registered to monitor live and receive an immediate, obvious notification or confirmation of their status upon a change in that registration.

(C.D.1.O) A method of systematically distributing the Live Monitoring of incoming intercepted sessions among a pool of monitors, or Call

Monitoring Assignment (CMA), shall be resident on the system.

(C.D.1.O.1) Monitors shall be able to select or assign target lines to themselves from among the target lines they have permissions to access. (CMA feature)

(C.D.1.O.2) The system shall allow a single monitor to select multiple target lines concurrently for monitoring, although they shall only be able to listen to or monitor one target line at any particular moment. (CMA feature)

(C.D.1.O.3) The system shall allow multiple monitors to select the same target line concurrently for monitoring, although the Live Monitor mode shall only be directed and controlled by one monitor at any particular moment for the target line. (CMA feature)

(C.D.1.O.4) The system shall be able to perform

CMA features (2) & (3) above concurrently. (CMA

(C.D.1.O.5) The system shall have the ability to prioritize the assignment of a session for Live

Monitoring from among all monitors assigned to a particular target line at a given time, and do this while accounting for any of those monitors who are already Live Monitoring a session occurring simultaneously on a different target line. (CMA

(C.D.1.V) When logged into the system, all monitors, investigators, system administrators, and other users shall be afforded an easily accessible and recognizable view of all current, active sessions for which they have permissions in real time and the status of those sessions, i.e., whether or not the session is being monitored, whether the session is minimized, etc.

(C.D.1.V) The system shall provide a method of identifying the monitor who has highest priority of assignment for a particular target line and the monitor’s location.

(C.D.1.W) Monitors shall have the ability to terminate a session in instances of system malfunction or the service providers failing to transmit a session completion message. The process shall require multiple steps (including minimization of the session) enacted with confirmation dialog boxes to limit occurrences of unintentional or accidental termination. This function shall not

DJD-12-R-0046, Attachment J.5 Page 20 otherwise interfere with the continued monitoring of the particular target line.

PART 7 – Demonstration of Minimization

The Contractor shall demonstrate the Call Monitoring Assignment and Live Monitor Session Control with targets on the test system utilizing all of the government-provided target devices. The demonstration shall include the following elements:

1. Selection Committee members will concurrently conduct live monitoring on all the target devices while specifically testing the minimization functionality.

2. Selection Committee members will observe default settings of the system to require Live

Monitoring and Minimization.

3. Selection Committee members will perform checks on initiation of minimization through single stroke/hot key and mouse clicking control.

4. Selection Committee members will perform checks on system’s ability to switch back and forth multiple times from live monitoring state to minimization state.

5. Selection Committee members will observe and check performance of onscreen times for length of minimization.

6. Selection Committee members will observe and check performance of the change of the onscreen appearance to the minimization state.

7. Selection Committee members will perform checks that calls cannot be recorded or live monitored if minimization functionality is not possible.

8. Selection Committee members will check minimized recordings for correlation to minimization utilization, i.e., minimized portions of sessions were not recorded and archived by the system.

9. Selection Committee members will observe and check performance of the speed with which minimization will engage upon activation.

10. Selection Committee members will observe and check performance of automatic minimization if no live monitor is available to monitor any particular session.

11. Selection Committee members will observe and check performance of automatic minimization if an audio workstation loses connectivity to the system.

12. Selection Committee members will observe and check performance of the audit logs for each minimization decision.

13. Selection Committee members will observe and check performance of the playback representation of minimization actions.

OD-07-

(C.A.2.B.2) The T2S2 Collection Systems provides the Critical Primary Function of the ability to properly minimize an intercepted communication

(i.e., discontinue monitoring and collection when

DJD-12-R-0046, Attachment J.5 Page 21 communication is irrelevant to criminal activities or when determined to consist of privileged communications).

OD-07-

(C.B.1.K) Minimization is performed at network audio workstations, a portion of which may be located in different cities or work sites of considerable distance from the centralized core. All functionality of this separate capability is fully executable for any target from anywhere on the network at any time, independent of where on the network monitoring was conducted for a particular

(C.B.1.X) The systems shall ensure that in the case of Title III audio interceptions, no user/monitor is capable of listening to (through either Live

Monitoring mode or Playback mode) any interception or any portion of an interception which is not recorded and archived by the systems, or conversely, that no Title III audio interception or any portion of a Title III interception is recorded or archived by the systems if it was not live monitored by a user/monitor with the availability of full

(C.D.1.P) The systems shall provide the monitors with full minimization control and functionality for every session during Live Monitoring mode operation. (Minimization control and functionality is defined below in Subsection C.D.3.)

(C.D.3.A) While in Live Monitor mode, the system shall provide the controlling monitor with readily available sole minimization (i.e., discontinue monitoring and collection when communication is irrelevant to criminal activities or determined to be a privileged communication) decision authority.

(C.D.3.B) The T2S2 System shall set the default configuration to assume mandatory need for Live

Monitoring and Minimization as required by Title

III.

(C.D.3.C.1) Minimization shall be controlled in Live

Monitoring mode with the use of both single stroke/hot key operation and clicking of the mouse on an onscreen minimization button available for use according to the preference of the individual monitor.

(C.D.3.C.2) Monitor shall have full ability to switch back and forth without limitation between the minimization state and the monitoring state.

(C.D.3.C.3) The Live Monitoring mode shall provide onscreen timers for the length of minimization.

(C.D.3.C.4) The Live Monitoring mode shall change onscreen appearance in such a way as to easily, visually notify the monitor that the system is in a

DJD-12-R-0046, Attachment J.5 Page 22 minimization state and not monitoring.

(C.D.3.C.5) While a session is minimized, all system recording of the intercepted communication shall near instantaneously cease and no portion of the content from the interception shall be collecting for the duration of the minimization.

(C.D.3.C.6) In Title III monitoring, sessions shall be automatically minimized by the system if no monitor is available to monitor that particular session. This shall include when the government agency office is closed and when all possible monitors are busy live monitoring other target lines or other sessions, leaving no monitor available for that particular

(C.D.3.C.7) In Title III monitoring, in instances where an audio workstation loses connectivity to the system and the monitor can no longer hear and/or control the audio from the intercepted session, the system shall automatically and near instantaneously minimize the audio until such time as that monitor or another monitor regains access and control of that

(C.D.3.C.8) The system shall automatically log the time and monitor identification for each minimization action for later audit if necessary.

(C.D.3.D) On any workstation performing Title III live monitoring on a target line, full minimization functionality shall be available at all times.

(C.D.3.E) In Playback mode, the systems shall not play in real time entire periods when audio content was minimized.