Exhibit_A_-_JWA_Standards.pdf

This is an Exhibit A Standards Package document for the County of Orange, operating through John Wayne Airport, for a Common Use Passenger Processing (CUPPS) and Common Use Self Service (CUSS) Systems Replacement & Support Services procurement. The project encompasses the replacement and support of passenger processing systems serving approximately 11.7 million annual passengers, including 238 CUPPS workstations across ticket lobbies, gates, skycap positions, and customs facilities, as well as 118 CUSS kiosks. Additional deliverables include a new Content Management System supporting 350 digital displays and a Resource Management System, with optional features potentially including Local Departure Control Systems and biometric integration. A mandatory pre-submittal meeting is scheduled for December 9, 2025. Questions must be submitted by December 19, 2025 (or December 26, 2025 per the amended deadline) before 2:00 PM, with proposals due January 21, 2026 at 3:00 PM submitted exclusively through the County's electronic eProcurement Portal. The contract will have an initial three-year term with options to renew for two additional years.

Respondents must demonstrate proven experience implementing CUPPS and CUSS systems at three or more airports of similar or larger size within the past ten years, possess financial capacity, hold valid California licenses, and demonstrate PCI Data Security Standard compliance. The proposal evaluation allocates 500 points to written submissions and an additional 400 points for presentations and interviews. The County offers preferences for Orange County Local Small Business (OCLSB) certifications and Disabled Veteran Business Enterprise (DVBE) certifications, providing 5 percent and 8 percent cost score adjustments, respectively. Insurance requirements include $1 million in general liability, $5 million in network security and privacy liability, and full PCI DSS compliance. Service level agreements include specific performance metrics with financial penalties ranging from $125 to $2,000 per incident, and cybersecurity standards aligned with the NIST 800-53 framework. The current service provider will be required to transfer comprehensive technical documentation, administrative materials, historical data, and provide knowledge transfer support during transition.