Exhibit B Agency Requirements.pdf

Exhibit “B” to RLP 110EKFB

MINIMUM SECURITY REQUIREMENTS FOR LEVEL II FACILTY

These paragraphs contain additional security requirements, and, unless indicated otherwise, are to be priced as part of the building specific amortized capital (BSAC). Security Systems in conflict with any other requirements on this lease, the strictest shall apply.

DEFINITIONS:

CRITICAL AREAS - The areas that house systems that if damaged or compromised could have significant adverse consequences for the facility, operation of the facility, or mission of the agency or its occupants and visitors. These areas may also be referred to as “limited access areas,” “restricted areas,” or “exclusionary zones.” Critical areas do not necessarily have to be within Government-controlled space (e.g., generators, air handlers, electrical feeds which could be located outside Government-controlled space).

SENSITIVE AREAS – Sensitive areas include vaults, SCIFs, evidence rooms, war rooms, and sensitive documents areas. Sensitive areas are primarily housed within Government-controlled space.

1. Site Security Criteria

1.1 Identification as Federal Facility:

Signage identifying a facility at a federal facility should only be posted when necessary to achieve the mission of the tenants, or when the facility is readily identified or well-known as a government facility based on the nature of public contact or other operations.

POSTING OF SIGNAGE IDENTIFYING SPACE AS GOVERNMENTAL

The Lessor shall not post sign(s) or otherwise identify the facility and parking areas as a

Government, or specific Government tenant, occupied facility, including during construction, without written Government approval.

POSTING OF REGULATORY SIGNAGE

The Government may post or request the Lessor to post regulatory, statutory, sensitive areas and site-specific signage.

1.2 Landscaping:

Minimize areas of concealment in and around facilities. Establish a clear zone around barriers, fences, and restrict landscaping from obstructing views of the security force and VSS or interfering with lighting or Intrusion Detection System (IDS).

LANDSCAPING REQUIREMENTS

Lessor shall maintain landscaping (trees, bushes, hedges, land contour, etc,) around the facility. Landscaping shall be neatly trimmed to minimize the opportunity for concealment of individuals and packages/containers. Landscaping shall not obstruct the views of security guards and CCTV cameras or interfere with lighting or IDS equipment.

CRIME PREVENTION THROUGH ENVIRONMENTAL DESIGN

The Lessor shall separate from public access, restricted areas as designated by the

Government, through the application of Crime Prevention Through Environmental Design

(CPTED) principles by using trees, hedges, berms, or a combination of these or similar features, and by fences, walls, gates, and other barriers, where feasible and acceptable to the Government.

1.3 Site Lighting:

Install exterior lighting at entrances, exits, parking lots, garages, and VSS locations. For prescriptive lighting requirements, please refer to the PBS-P100 Facilities Standards for the

Public Buildings Service | WBDG - Whole Building Design Guide, Issued 2021.

1.4 Restricted Areas or Significant Areas/Assets:

Use trees, hedges, berms, or any combination of these elements to create buffer zones to separate public areas and other functions. Provide fences, walls, gates, or other barriers to prevent unauthorized access to restricted areas and monitor with VSS or security force patrols.

Use High-Security Locks, access control, and IDS.

Access to government space should be managed by installing compliant Physical Access

Control in compliance with OMB policies M-19-17 and M-05-24, NIST SP800-63-1, FIPS-201-3, NIST SP800-116 and all other applicable standards established by OMB, NIST and the OCIO

Council.

Sensitive Areas:

Prohibit signs that identify sensitive areas, unless required by other standards/codes.

1.5 Pedestrian Access to Controlled Parking Areas:

Minimize areas of concealment in and around parking areas. Minimize areas of concealment in and around lobby, loading dock exterior and parking areas. Monitor pedestrian access to parking areas utilizing security force and/or VSS. At a minimum, pedestrian barriers around parking areas should be designed to prevent casual access and increase the visibility of unauthorized access attempts.

Controlled Parking Areas:

No public parking beneath building structure.

1.6 Hazardous Materials (HAZMAT) Storage:

If there is HAZMAT storage, Lessor shall locate it in a restricted area or storage container away from loading docks, entrances, and uncontrolled parking.

Comply with applicable regulations regarding storage and safety requirements. Depending on the nature of the HAZMAT, design measures to prevent access to, release of, or unauthorized removal of the HAZMAT from the site. Valves and control mechanisms also must be protected from unauthorized access.

1.7 PLACEMENT OF RECEPTACLES, CONTAINERS, AND MAILBOXES

Position trash containers, mailboxes, donation/recycle containers, vending machines, etc., away from building exterior and entry points, or implement blast containment measures to mitigate an explosion.

2. Structure Security Criteria

2.1 Blast Resistance-Windows:

Use acceptable fragment retention film or preferred glazing systems to reduce the glass fragmentation hazard, if applicable. Historically, a daylight application of 7 mil retention/blast film has been considered the minimum recommendation for improving the performance of annealed glass windows.

2.2 Blast Resistance-Façade and Structure:

Use construction materials which have inherent ductility, and which are able to respond to load reversals. Provide a balanced design approach to ensure a ductile mode of failure is achieved or design for the DBT, whichever is less severe. Provide a Level of Protection I in accordance with American Society of Civil Engineers (ASCE) 59.

2.3 Blast Resistance-Progressive Collapse:

For buildings four stories and higher, use a combination of setback, site planning, façade hardening, and structural measures to prevent progressive collapse from the DBT or the loss of any single exterior column or load-bearing wall, whichever scenario is less severe.

2.4 Burglary Resistance of Windows:

Lock and monitor via IDS all operable ground floor windows.

2.5 Walls and Non-Window Openings:

Protect non-window openings such as mechanical vents and exposed plenums to resist forcible entry. Exterior non-window openings, such as vents, greater than 96 square inches in perimeter walls, should be secured with grills, bars, and IDS.

Interior walls of secure or restricted areas should be checked for penetration via the plenum and secured via grills, bars, mesh etc., and monitored via IDS when necessary.

Additional information is available in State Department Standard DOS SD- STD-01.01, Revision G, Certification Standard – Forced Entry and Ballistic Resistance of Structural Systems.

Additional solutions may include burglary-resistant bars, wire mesh window systems, etc.

2.6 Protection of Air Intakes:

Provide emergency shutdown, SIP, and evacuation procedures. Secure accessible air intake grilles from tampering or removal.

2.7 HVAC Control:

Develop written procedures for the emergency shutoff of exhaust and air handling systems.

2.8 Security of Ventilation Equipment and Controls:

Protect the system controls from unauthorized access. Access to government space should be managed by installing compliant Physical Access Control in compliance with OMB policies M-

19-17 and M-05-24, NIST SP800-63, NIST SP800-116, FIPS-201-2, and all other applicable standards established by OMB, NIST and the OCIO Council. To ensure HVAC system operation cannot be disrupted by someone physically accessing the controls, HVAC equipment should be located in a secure area with access limited to security and engineering staff.

2.9 Emergency Generator Protection:

If an emergency generator is used, secure against unauthorized access. Access to government space should be managed by installing compliant Physical Access Control in compliance with OMB policies M-19-17 and M-05-24, NIST SP 800-63, NIST SP800-116, FIPS-

201-2, and all other applicable standards established by OMB, NIST, and the OCIO Council.

2.9.1 Blast Resistance-Mail Screening and Receiving Locations:

Use construction materials in the mail screening and receiving areas which have inherent ductility, and which are able to respond to load reversals. Implement architectural or structural features, or other positive countermeasures in the mail screening and receiving areas that deny contact with exposed primary vertical load members and/or lateral bracing members in these areas. A minimum standoff of at least 150 mm (six inches) is required.

3. Facility Entrance Security Criteria Lowest Occupied Floor

3.1 Badge Identification System:

Require agency photo ID that is always worn and visible when in government-controlled space. A badge control policy must be in place in compliance with Personal Identity Verification

(PIV) of Federal Employees and Contractors FIPS 201-3 that specifies inventory requirements, lost badge, and revocation procedures.

3.2 Regulatory Signage:

Post necessary regulatory, statutory, and/or site-specific signage. Examples of appropriate signage include but are not limited to: Prohibiting the unauthorized possession of firearms and dangerous weapons; Consent to search; Local building rules and regulations regarding prohibited items; and VSS surveillance advisory.

3.3 Employee Access Control:

Provide a means to secure employee entrance doors and to verify the identity of people requesting access prior to allowing entry into the facility by physical or electronic means. The

Government shall have a designated main entrance. The Lessor shall provide key or electronic access control for the entrance to this building. All Government employees, under this lease, shall be allowed access to the leased space (including after-hours access). Access to government space should be managed by installing compliant Physical Access Control in compliance with

OMB policies M-19-17 and M-05-24, NIST SP800-63, FIPS-201-2, NIST SP800-116 and all other applicable standards.

3.4 Visitor Screening/Access Control:

The Government reserves the right to verify the identity of persons requesting access to the

USACE space prior to allowing entry. Entrances are open to the public during business hours.

After hours, visitor entrances are secured and have a means to verify the identity of persons requesting access prior to allowing entry into the USACE occupied space.

3.5 After Hours Access Control:

Require all employees, contractors, and visitors to sign in/out electronically or on a building register after-hours.

Access to government space should be managed by installing compliant Physical Access

Control in compliance with OMB policies M-19-17 and M-05-24, NIST SP800-63, FIPS-201-2, All building entry points must be controlled and/or monitored via VSS, IDS (where applicable) and compliant Physical Access Control System based on OMB policies M-19-17 and

M-05-24. Reducing the number of building entry points, particularly under periods of heightened security alerts, reduces vulnerability and security costs associated with monitoring and controlling access.

3.8 Perimeter Doors & Door Locks:

Secure perimeter doors with non-removable hinges and high-security mechanical or electronic locks.

Access to government space should be managed by installing compliant Physical Access

Control in compliance with OMB policies M-19-17 and M-05-24, NIST SP800-63, FIPS-201-2, NIST SP800-116 and all other applicable standards established by OMB, NIST and the OCIO

Council.

Secure emergency exit doors using an automatic door closer and exit hardware that are compliant with applicable life safety codes and standards. Monitor all emergency exits via visual, electronic, or audible means. Emergency exit door hardware at all levels should have audible annunciators to provide notification of door use.

Electronic locks on perimeter doors must be fail-secure, and electronic locks on interior doors must be fail-safe, if such measures do not conflict with applicable fire and safety codes.

3.9 Control of Keys and Access Media:

Implement a formal key control program and electronically disable lost or stolen access media.

4. Interior Security Criteria

4.1 Space Planning:

Locate critical systems and areas at least 25 feet away from loading docks, entrances, mailrooms, personnel and package screening locations, and uncontrolled parking, or implement standoff, hardening and venting methods to protect critical areas from the DBT at these locations.

Critical systems and equipment may include security and life-safety systems, power distribution, communications and data, and other mission-critical equipment.

4.2 Security of Critical Areas:

Lock doors to critical areas and establish procedures to limit access into critical areas to authorized personnel only.

The Lessor shall secure areas designated as Critical Areas to restrict access:

A. Keyed locks, keycards, or similar security measures shall strictly control access to mechanical areas. Additional controls for access to keys, keycards, and key codes shall be strictly maintained. The Lessor shall develop and maintain accurate HVAC diagrams and HVAC system labeling within mechanical areas.

B. Roofs with HVAC systems shall also be secured. Fencing or other barriers may be required to restrict access from adjacent roofs based on a Government Building Security

Assessment. Roof access shall be strictly controlled through keyed locks, keycards, or similar measures. Fire and life safety egress shall be carefully reviewed when restricting roof access.

C. At a minimum, Lessor shall secure building common areas including sprinkler rooms, electrical closets, telecommunications rooms.

4.3 Building Systems and Roof Access:

Secure utility, mechanical, electrical, and telecom rooms, and access to interior space from the roof with high-security locks.

Access to government space should be managed by installing Physical Access Control

Systems in compliance with OMB policies M-19-17 and M-05-24, NIST SP800-63, FIPS-201-2,

4.4 Publicly Accessible Retail and Mixed-Used Space:

Accommodate publicly accessible retail and mixed uses through such means as separating entryways.

5. Security Systems Criteria

5.1 VSS Coverage:

Provide VSS coverage of personnel entrances and exits. Provide VSS coverage of screening checkpoints, personnel and vehicle entrances, exits, loading docks, and lobbies. Record VSS views using a digital medium. When VSS is utilized, post signage at the entrance of the location.

Security System Maintenance Criteria: The Lessor, in consultation and coordination with a security provider, either internal or external, as determined by the Lease Contracting Officer, and the Government security representative, shall implement a preventive maintenance program for all security systems the Lessor has installed. Any critical component that becomes inoperable must be replaced or repaired by the Lessor within 5 business days.

Networked systems should have respective authority to operate from their agency and meet

FISMA and any specific agency guidelines.

Firmware and software updates from the manufacturer should be installed as soon as possible to prevent any breach.

5.2 Intrusion Detection System (IDS) Coverage:

Provide IDS on perimeter entry and exit doors and operable ground-floor windows. Provide

IDS on perimeter entry and exit doors and all ground-floor windows. The lessor shall, with

Government approval, obtain a bid to design, install and maintain an Intrusion Detection System

(IDS) as described in this section. The Government requires an IDS, which will cover perimeter entry and exit doors, and operable ground-floor windows. Basic Security-in-Depth IDS components include magnetic door switch(s), alarm system keypad, passive infrared sensor(s)

(PIR), an alarm panel (to designated monitoring center) and appropriate communication method i.e. telephone and/or Internet connection, glass-break detector, magnetic window switches or shock sensors. Technical review of the proposed system shall be coordinated with the

Government security representative, at the direction of the

Security System Maintenance Criteria: The Lessor, in consultation and coordination with a security provider, either internal or external, as determined by the Lease Contracting Officer, and the Government security representative, shall implement a preventive maintenance program for all security systems the Lessor has installed. Any critical component that becomes inoperable must be replaced or repaired by the Lessor within 5 business days. Critical components are those required to provide security (IDS, CCTV, access control, etc.) for a perimeter access point or critical area. "Replacement" may include implementing other temporary measures in instances where the replacement or repair is not achievable within the specified time frame (e.g.

a temporary barrier to replace an inoperable pop-up vehicle barrier, etc.).

5.3 Intrusion Detection System (IDS) Monitoring:

Monitor at a central station with notification to law enforcement, security responders or designated tenant POC.

5.4 Duress Alarms or Assistance Stations:

Implement duress procedures for emergency situations. Provide duress buttons or call buttons at security force posts and sensitive public contact areas. Implement duress procedures for emergency situations.

Security System Maintenance Criteria: The Lessor in consultation and coordination with a security provider, either internal or external, as determined by the Lease Contracting Officer, and the Government security representative shall implement a preventive maintenance program for all security systems they have installed. Any critical component that becomes inoperable must be replaced or repaired within 5 business days. Critical components are those required to provide security (IDS, CCTV, access control, etc.) for a perimeter access point or critical area.

"Replacement" may include implementing other temporary measures in instances where the replacement or repair is not achievable within the specified time frame (e.g. a temporary barrier to replace an inoperable pop-up vehicle barrier, etc.).

5.5 Security System Integrity:

Secure alarm and physical access control panels, VSS components, controllers, and cabling against unauthorized access. Conduct security system testing annually and daily testing of active screening equipment.

5.6 Emergency Power for Security Systems:

Provide uninterruptible emergency power to essential electronic security systems for a minimum of four hours.

It is recommended that VSS operate for four hours minimum in standby mode. This includes all components - cameras, switches, amplifiers, monitors, recorders, etc. – that obtain, view, and record motion video. More than four hours of back-up may be required for certain facilities based on mission, such as when the facility is required to maintain 24-hour operations. Testing of security system emergency power should be conducted annually and recorded.

5.7 Security System Maintenance:

Implement a maintenance program for all security systems. Any critical component that becomes inoperable must be replaced or repaired within 72 hours.

*Critical components are those required to provide security (IDS, VSS, access control, etc.) for a perimeter access point or critical area.

Implement a maintenance program for all security systems. Any critical component that becomes inoperable must be replaced or repaired within five business days for Level II.

EMERGENCY OPERATIONS REQUIREMENT

1. Emergency Operations Center (EOC): Per Engineering Pamphlet 500-1-1 Minimum details, requirements for an EOC are as follows:

1.1. Power: Uninterrupted power is critical to 24-hour operations. The EOC will have an emergency backup generator and an uninterrupted power source (UPS) system.

1.2. Auxiliary HVAC: HVAC will be provided for the EOC in order to ensure operability during weekends and/or after duty hours and shall be capable of being powered by the emergency backup generator. For buildings where the entire HVAC system must be on to heat/cool the

EOC, the controls in the EOC will allow for system activation, or arrangements must be made to have the system activated during these times. Independent systems may be provided if economical and feasible.

1.3. Communications Connectivity: Data communications from the point of origin in the

EOC to its final destination (i.e., Headquarters USACE, Major Subordinate Commands, Districts, etc), worldwide access gateways such as Internet, Federal Emergency Management Agency, and various DoD locations will be provided. Space must be allocated for communications and information processing equipment. Critical components located outside the EOC that are necessary to maintain communication (e.g., radio, local area network/wide area network

(LAN/WAN), telephone) will meet emergency power and HVAC requirements. All wireless connectivity must meet all DoA/DoD security standards.

1.4. Lighting and HVAC should not be on the same occupied / unoccupied cycle as other work areas; for example, no air conditioning if you are working on the weekend.

Information Technology Requirements

Secured Computer Room (Server Room) Requirements

The facility shall provide a dedicated, secure computer room (server room) designed to support mission-critical information technology and communications systems. The space shall meet or exceed U.S. Government standards for security, resiliency, and operational continuity.

Space and Physical Security

• The server room shall provide a minimum of 32 square feet of usable space, appropriately sized to accommodate all required server, network, and communications equipment with allowance for growth.

• The room shall not contain exterior or interior windows.

• Access shall be restricted and controlled via an electronic access control system, integrated with the facility’s security infrastructure.

• A separate, secured storage area (minimum 36 square feet) shall be provided within or immediately adjacent to the server room for archival materials and IT support equipment.

Power and Continuity of Operations

• The space shall be equipped with dedicated, conditioned power infrastructure designed to support continuous operations.

• An Uninterruptible Power Supply (UPS) system shall provide a minimum of 30 minutes of runtime at full load.

• The UPS shall be supported by a backup generator capable of sustaining 24/7 operations during extended outages.

• Electrical systems shall include:

o Adequate branch circuits and amperage to support all installed equipment o Power Distribution Units (PDUs) for equipment-level distribution o A design load target of approximately 100 watts per square foot, adjustable based on final equipment requirements

• A master emergency power-off (EPO) switch shall be installed at the room entrance, clearly labeled and compliant with safety standards.

Cooling, Environmental Control, and Monitoring

• The server room shall include a dedicated cooling system designed for IT equipment loads.

• Environmental controls shall maintain:

o Temperature range: 55°F to 70°F o Relative humidity within acceptable server room operating ranges

• Cooling systems shall include:

o Continuous monitoring and alarm capabilities o Integration with building management systems (BMS), where available o Remote monitoring for temperature and humidity

• Air filtration shall meet high-efficiency particulate standards appropriate for server room environments.

Flooring, Grounding, and Protection

• A raised floor system is preferred to support cable management, airflow distribution, and maintenance access.

o Raised flooring grid shall be properly bonded and grounded to mitigate static discharge.

• The facility and server room shall incorporate a comprehensive grounding and bonding system, including:

o Horizontal grounding infrastructure (bonding across floors and equipment rows) o Vertical grounding infrastructure (ground risers connecting all building levels and telecommunications spaces) o Dedicated and isolated grounding system for IT and communications equipment, separate from building grounding where required

• Grounding and bonding design shall be engineered to support telecommunications, life safety, and lightning protection systems in accordance with applicable federal and industry standards.

• The server room shall include:

o Water detection sensors installed beneath raised flooring or at floor level o Vapor barrier and moisture protection as part of construction o Acoustic treatment to reduce operational noise levels

Fire Protection and Life Safety

• The room shall be protected by a clean agent fire suppression system designed for computer and telecommunications environments.

• Fire protection systems shall comply with applicable NFPA standards and local fire codes.

• Fire detection shall include early warning systems where applicable.

Connectivity and Integration

• The server room shall provide structured cabling pathways and connectivity to telecommunications rooms and support spaces throughout the facility.

• All infrastructure shall support integration with enterprise IT, network, and AV systems as required.

Governance, Security, and Compliance

• All designs, equipment selections, and installation plans shall be reviewed and approved by the USACE G6 prior to implementation.

• The facility and all systems shall comply with U.S. Government cybersecurity and information assurance requirements, including applicable frameworks (e.g., RMF, NIST guidance).

• All hardware and software components shall be Trade Agreements Act (TAA) compliant.

• The solution shall align with applicable federal, DoD (if applicable), and agency-specific IT, security, and facility design standards.

Telecommunications and Network Closet Requirements

The facility shall provide secure telecommunications and network closets distributed throughout the building to support structured cabling, network infrastructure, and communications systems.

Closets shall be strategically located on each floor and within each functional area to ensure reliable and efficient connectivity.

Location and Accessibility

• Telecommunications closets shall be located such that the maximum horizontal cabling distance does not exceed 300 linear feet from end-user work areas.

• Closets shall be provided on each floor and as required to support all building sections based on coverage and capacity requirements.

• Access shall be restricted via an electronic access control system, integrated with the facility’s security infrastructure.

Environmental Controls

• Each telecommunications closet shall be equipped with dedicated climate control sufficient to maintain temperatures and humidity levels appropriate for network and communications equipment operation.

• Environmental systems shall be designed to operate continuously and support equipment reliability.

Fire Protection

• Fire suppression within telecommunications closets shall be limited to sprinkler systems only where required by applicable building and fire codes.

• All fire protection systems shall comply with NFPA standards and local jurisdictional requirements.

Power and Continuity

• Telecommunications closets shall be provided with dedicated electrical circuits to support installed equipment.

• Closets shall be connected to the facility’s UPS system to provide conditioned and continuous power during outages, consistent with mission requirements.

• Electrical capacity shall be sized to support current and planned future equipment loads.

Security and Infrastructure

• Closets shall be constructed to support secure housing of networking, telecommunications, and related support equipment.

• Pathways, racks, and mounting infrastructure shall be provided to support structured cabling and equipment installation in accordance with applicable standards.

Governance and Compliance

• All telecommunications closet designs, equipment, and configurations shall be reviewed and approved by the USACE G6 prior to implementation.

• All components shall comply with U.S. Government cybersecurity and information assurance requirements, as well as applicable standards (e.g., RMF, NIST guidance).

• All hardware and associated components shall be Trade Agreements Act (TAA) compliant.

User / Administrative Area Information Technology

Requirements

Administrative and user work areas shall be fully provisioned to support enterprise information technology, data, and telecommunications services across the facility. Infrastructure shall be designed to provide reliable, secure, and scalable connectivity to support mission operations.

Cabling and Connectivity

• All user areas shall be fully wired for power, data, and telecommunications services in accordance with applicable federal and industry standards.

• Network cabling shall meet or exceed Category 6A (Cat 6A) performance requirements and support current and future bandwidth demands.

• Structured cabling systems shall be installed to ensure consistent, high-performance connectivity from telecommunications closets to all end-user workstations.

• Minimum Outlet Density:

A minimum of two (2) data drops and two (2) power receptacles per workstation position shall be provided to support standard user requirements and future expansion.

Pathways and Cable Management

• Cable management infrastructure shall include cable trays, conduits, and/or raceways to ensure proper routing, segregation, and protection of cabling systems.

• Power and data cabling shall be properly separated to minimize interference and ensure system performance.

• Pathways shall be sized to support current capacity requirements and future growth.

Power Requirements

• Clean, conditioned power shall be provided throughout all administrative and user areas to support computer systems, telecommunications equipment, and associated peripherals.

• Electrical infrastructure shall be designed to minimize power disturbances, including surges, sags, and electrical noise that may impact sensitive IT equipment.

• Power distribution shall provide sufficient capacity to support current and projected workstation densities.

Standards, Labeling, and Documentation

• All infrastructure shall support integration with enterprise network, server room, and telecommunications systems.

• All cabling, outlets, and associated components shall be clearly labeled in accordance with applicable standards.

• The contractor shall provide complete as-built documentation, including cabling layouts, labeling schemes, and connection details for all installed infrastructure.

• Installation shall comply with applicable U.S. Government, ANSI/TIA, and industry standards for structured cabling systems.

Rooftop Infrastructure and Access Requirements

The facility shall provide designated rooftop space, along with appropriate access and infrastructure pathways, to support communications and broadcast systems.

• The rooftop shall accommodate equipment such as cellular signal enhancement systems, satellite television dishes, and communications antennas as required.

• The facility shall provide secure and maintainable access to the rooftop for installation, inspection, and maintenance activities.

• Dedicated pathways and conduits shall be provided to support structured cabling and connectivity between rooftop-mounted systems and interior telecommunications infrastructure, including server rooms and telecommunications closets.

• All installations shall be designed to support proper grounding, bonding, and integration with the building’s communications and electrical systems.

• Rooftop installations shall comply with applicable structural, environmental, and safety requirements, including wind load, lightning protection, and building code compliance.

Governance and Compliance

• All rooftop equipment, pathways, and installations shall be reviewed and approved by the

USACE G6 prior to implementation.

• All systems and components shall comply with U.S. Government cybersecurity and information assurance requirements.

• All hardware and components shall be Trade Agreements Act (TAA) compliant.

Mail Room Requirements

The facility shall provide a dedicated, secured mail room designed to support the handling, processing, and distribution of official mail in accordance with U.S. Government security requirements.

Personnel and Security Requirements

• All personnel assigned to mail handling and distribution functions shall possess, at a minimum, a Secret security clearance in accordance with AR 380–5, Chapter VII.

• Personnel shall meet the qualification requirements outlined in DoD 4525.6-M, Volume II for official mail and distribution operations.

• Due to security requirements, direct delivery from the U.S. Postal Service (USPS) to authorized mail room personnel shall be provided.

• Use of shared or building-operated mailrooms is not permitted, unless all personnel involved meet required clearance and security verification standards.

Location and Physical Security

• The mail room shall be located along an exterior wall of the facility to minimize risk to interior operations.

• The space shall be positioned away from mission-critical or high-value assets.

• Walls and ceiling assemblies separating the mail room from the remainder of the facility shall be hardened to mitigate potential blast effects and support force protection requirements.

Emergency and Safety Systems

• An emergency HVAC shutdown switch shall be provided within or immediately adjacent to the mail room to allow rapid isolation of airflow in the event of a hazardous condition.

• All systems shall comply with applicable force protection and facility design criteria, including:

o ATTP 3-39.32 (Civil Support Operations) o UFC 4-010-01 (DoD Minimum Antiterrorism Standards for Buildings)

Governance and Compliance

• All designs, equipment, and installations shall be reviewed and approved by the USACE G6 and applicable security authorities prior to implementation.

• The mail room design and operations shall comply with all U.S. Government security, antiterrorism, and safety requirements.