Exhibit_A_-_JWA_Standards.pdf

Exhibit A - JWA Standards is a standards package document supporting the County of Orange's John Wayne Airport procurement for Common Use Passenger Processing (CUPPS) and Common Use Self Service (CUSS) Systems Replacement & Support Services. The solicitation seeks qualified vendors to replace and support passenger processing systems serving approximately 11.7 million annual passengers annually, including 238 CUPPS workstations across ticket lobbies, gates, skycap positions, and customs facilities, as well as 118 CUSS kiosks. Additional deliverables include a new Content Management System supporting 350 digital displays, a Resource Management System, and optional features such as Local Departure Control Systems and biometric integration. A mandatory pre-submittal meeting is scheduled for December 9, 2025, with a question submission deadline of December 19 or 26, 2025 (depending on version), before 2:00 PM, and a proposal submission deadline of January 21, 2026 at 3:00 PM. All proposals must be submitted electronically through the County's eProcurement Portal. The contract will have an initial three-year term with options to renew for two additional years.

Respondents must demonstrate proven experience implementing CUPPS and CUSS systems at three or more airports of similar or larger size within the past ten years, possess financial capacity, hold valid California licenses, and demonstrate PCI Data Security Standard compliance. The proposal evaluation allocates 500 points to written submissions and an additional 400 points for presentations and interviews. Orange County Local Small Business (OCLSB) and Disabled Veteran Business Enterprise (DVBE) certifications receive 5 percent and 8 percent cost score adjustments, respectively. The pricing proposal requires detailed cost breakdowns for hardware, software, licensing, implementation, consulting, warranty, maintenance, and optional features. The contract requires comprehensive insurance coverage, including $1 million in general liability and $5 million in network security and privacy liability. Service level requirements include specific performance metrics with financial penalties ranging from $125 to $2,000 per incident, and vendors must comply with cybersecurity standards aligned with the NIST 800-53 framework. The incumbent vendor will be required to transfer comprehensive technical documentation, administrative materials, historical data, and provide knowledge transfer support during disentanglement.