Exhibit B - Agency Specific Requirements.pdf

Lancaster, Ohio Clinic Lease FIRE ALARM AND FIRE SUPPRESION SOW

CHILLICOTHE VAMC, OHIO DATE OF SPEC VERSION: 2 April 2019

SECTION STATEMENT OF WORK (SOW) FIRE ALARM AND FIRE SUPPRESSION MONITORING,

DESIGN, PREVENTATIVE MAINTENANCE (PM) AND TESTING

TABLE OF CONTENTS

PART 1 - GENERAL 1

PART 2 - SYSTEM PREVENTATIVE MAINTENANCE AND TESTING PROGRAM CRITERIA: 1

PART 1 - GENERAL

The Lessor shall design, install, maintain, and test a Centrally Monitored Fire Alarm and Fire Suppression system as described in this section. The Government lease space shall be fully sprinkled and have full coverage by the Fire Alarm monitoring. Exceptions to being fully sprinkled would be spaces that code or VA Design requirements specifically state shall not be sprinkled or cover by special provisions (ie sidewall). The Fire Alarm and Fire Suppression system shall be designed to NFPA Standards in addition to applicable State and Local Requirements, and VA PG 18-10 Fire Protection Design Manual.

PART 2 - SYSTEM PREVENTATIVE MAINTENANCE AND TESTING PROGRAM CRITERIA:

1. Preventative Maintenance Program: The Lessor, in consultation and coordination with a fire alarm service provider, either internal or external, as determined by the Lease Contracting Officer, shall implement a preventive maintenance program for all fire alarm system components, all fire alarm initiating devices, and suppression systems the Lessor has installed to monitor the government leased space. The preventative maintenance program shall be in accordance with NFPA Standards in addition to applicable State and Local Requirements.

2. Testing Program: The lessor shall test the fire alarm and fire suppression system as required by the NFPA Standards in addition to applicable State and Local Requirements.

3. Any deficiency in the system that cannot be fixed immediately shall require immediate notification to the COR and Chillicothe VAMC Fire Department who may take additional steps to provide protection. Any component that becomes inoperable or any deficiency noted during preventative maintenance or testing must be replaced or repaired by the Lessor within 5 business days. Replacement' may include implementing other temporary measures agreeable to the COR and Chillicothe VAMC Fire Department representative in instances where the replacement or repair is not achievable within the specified time frame. Failure by the Lessor to provide sufficient replacement measures within the timeframe identified above may result in the Government providing repair service or other fire alarm monitoring measures, the cost of which shall be reimbursed by the Lessor. The Government reserves the right to collect reimbursement by all means available including but not limited to deducting payment from lease payments due.

4. Submittal Requirements: All preventative maintenance and testing documents required shall be submitted to the COR within 15 days of each preventative maintenance or testing requirement. The COR shall turn the records over to the Chillicothe VAMC Fire Department.

B. The Chillicothe VA Medical Center Fire Department shall have access to the fire alarm and fire suppression system.

C. Monitoring: Fire alarms shall be routed to the lessor’s commercial fire alarm monitoring firm or the lessor’s fire alarm office charged with building fire alarm monitoring allowing for 24 hour monitoring. The remote alarms will be in addition to locally broadcast alarms in the protected areas. The lessor’s fire alarm monitoring shall establish an agreement with the Chillicothe VAMC Fire Department for who to contact in an alarm event. In addition to contacting the local fire department and others as required, the lessor’s fire alarm monitoring shall notify the Chillicothe VAMC Fire Department by telephone of an alarm event and the protected zone that alarmed.

--- END OF SECTION – SECTION STATEMENT OF WORK (SOW) FIRE ALARM AND FIRE

SUPPRESSION MONITORING, DESIGN, PREVENTATIVE MAINTENANCE (PM) AND TESTING ---

SPECIFICATION STYLES TEMPLATE ## ## ## - 3

Lancaster, Ohio CBOC Lease SECURITY SOW

CHILLICOTHE VAMC, OHIO DATE OF SPEC VERSION: 22 DEC 2021

SECTION STATEMENT OF WORK (SOW) SECURITY SYSTEMS MONITORING, DESIGN,

PREVENTATIVE MAINTENANCE (PM) AND TESTING

INCLUDES SECURITY SYSTEM PREVENTATIVE MAINTENANCE AND TESTING AS WELL AS

CENTRAL MONITORING OF THE INSTRUSION DETECTION SYSTEM. NOTE THAT CAMERAS

(VASS aka CCTV) AND CARD READER (PACS) SYSTEMS ARE AN EXPANSION OF THE

EXISTING CHILLICOTHE VAMC SYSTEMS VIA THE VA NETWORK AND REQUIRE SPECIFIC

MODEL, VERSIONS, LICENSING, AND CONTRACTOR QUALIFICATIONS TO BE

OPERATIONALLY COMPATIBLE.

TABLE OF CONTENTS

PART 1 - SECURITY SYSTEMS, CENTRAL MONITORING AND PREVENTITVE MAINTENANCE

AND TESTING CRITERIA 1

PART 2 - CONSTRUCTION TIMELINE REQUIREMENTS FOR THE IT CLOSET (N/A for existing location renovation) 13

PART 3 - OPERATIONS AND ADMINISTRATION 13

PART 4 - IDENTITY VERIFICATION OF PERSONNEL AND PIV BADGING 13

PART 5 - VA HANDBOOK 6500.6 Appendix B VA Acquisition Regulation Solicitation Provision and Contract Clause 14

PART 6 - VA HANDBOOK 6500.6 Appendix C VA INFORMATION AND INFORMATION

SYSTEM SECURITY/PRIVACY LANGUAGE FOR INCLUSION INTO CONTRACTS 15

PART 7 - VA Handbook 6500.6 Appendix D CONTRACTOR RULES OF BEHAVIOR

(REQUIRED TO BE SIGNED ANNUALLY – SUBMIT TO VA CONTRACTING OFFICER AND

CONTRACTING OFFICER REPRESENTATIVE) 25

PART 1 - SECURITY SYSTEMS, CENTRAL MONITORING AND PREVENTITVE MAINTENANCE AND

TESTING CRITERIA

1.01 General

A. Electronic Security Systems (ESS) listed below shall be integrated with each other and integrated with existing Chillicothe VAMC systems as described below and on the conceptual drawings. The ESS includes the Physical Access Control System (PACS); Intrusion Detection System (IDS);

Video Assessment and Surveillance Systems (VASS) (aka CCTV); Duress and Intercom System, commonly referred to as intercommunications system; and the Detection and Screening System (DSS).

B. The Security Control Center (SCC) for Chillicothe VAMC and its Community Based Outpatient Clinics (CBOCs) is at the Chillicothe VAMC. CBOC Police rooms, reception desks, IT communications rooms, and other locations as determined may serve roles and functions with the security of the clinic.

1.02 Contractor Qualifications

The security contractor shall be a licensed security Contractor with a minimum of five (5) years experience installing and servicing systems of similar scope and complexity. The Contractor for each system shall be an authorized regional representative of the specific security system manufacturer. For PACs the security contractor shall be AMAG Certified.

For VASS/CCTV the security contractor shall be ExacqVision certified. For the other security systems the contractor shall be an authorized regional representative of the respective systems proposed. The Contractor shall provide certification from the manufacturer of their qualifications to include a letter from the manufacturer certifying the security contractor as a qualified supplier. Provide point of contact information from the manufacturer for verification. The Contractor shall provide four (4) current references from clients with systems of similar scope and complexity. At least three (3) of the references shall be utilizing the same system components, in a similar configuration as the proposed system.

The references must include a current point of contact, company or agency name, address, telephone number, complete system description, date of completion, and approximate cost of the project. The owner reserves the option to visit the reference sites, with the site owner’s permission and representative, to verify the quality of installation and the references’ level of satisfaction with the system. The Contractor shall provide copies of system manufacturer certification for all technicians. The Contractor shall only utilize factory-trained technicians to install, program, and service the security systems. The Contractor shall only utilize factory-trained technicians to install, terminate and service controller/field panels and reader modules. The technicians shall have a minimum of five (5) continuous years of technical experience in electronic security systems. The Contractor shall have a local service facility.

The facility shall be located within 120 miles of the project site. The local facility shall include sufficient spare parts inventory to support the service requirements associated with this contract. The facility shall also include appropriate diagnostic equipment to perform diagnostic procedures. The COR reserves the option of surveying the company’s facility to verify the service inventory and presence of a local service organization.

1.03 System Preventative Maintenance and Testing Program Criteria:

ESS Security System Maintenance Criteria: The Lessor, in consultation and coordination with a security provider, either internal or external, as determined by the Lease Contracting Officer, and the Government security representative, shall implement a preventive maintenance program for all security systems and associated components the Lessor has installed. Any component that becomes inoperable must be replaced or repaired by the Lessor within 5 business days. Components are those required to provide security (IDS, VASS/CCTV, PACS, Intercom System, ESS Computers etc).

Replacement' may include implementing other temporary measures agreeable to the Government’s security representative in instances where the replacement or repair is not achievable within the specified time frame.

Failure by the Lessor to provide sufficient replacement measures within the timeframe identified above may result in the Government's providing guard service or other security measures, the cost of which must be reimbursed by the Lessor.

1.04 ESS Computers and Client Software

Lessor shall provide 2 computers to the VA that are capable of running all ESS requirements. Computers provided shall be coordinated with the VA COR for further coordination and approval by VA OIT. Lessor to put the requirements on the bid documents for TI improvements or provide separate as they determine. The 2 computers shall be loaded with the current version of AMAG Symmetry Client software. They shall also be loaded with client software or internet explorer shortcuts required for the other ESS.

The computers shall be available and ready for use for programming and integrating all ESS during construction in order for the systems to be operational at the time the lease opens to the VA. Final locations of the computers is TBD. For programming purposes the computers are to be placed in the IT room with the other security head end equipment, and shall be moved during move in and activation of the clinic to their locations for use. Through the duration of the lease the lessor shall keep the computers up to date with current software versions and replace computers and all associated software on any computer that fails.

1.05 IT Closet Uninterruptible Power Supplies

Lessor Architect and Engineer firm shall design and specify rack mounted UPS equipment with network cards to be provided in the IT communications room. Design sufficient quantity of power receptacles required for the UPSs. Provide whichever is greater: the quantity of UPS shown on the conceptual drawings in the IT Rack Elevation or sufficient quantity of UPS sized to accommodate 1 hours of full rated output of all possible network switches required and all ESS equipment in the facility.

1.06 ESS System Licenses

The lessor shall provide and sign over to the VA all licenses required for the various ESS systems including licenses for integration of systems.

1.07 PHYSICAL ACCESS CONTROL SYSTEM (PACS)

A. The Lessor shall design, install, integrate with existing Chillicothe VAMC system via the network and maintain a Physical Access Control System (PACS) as described in this section.

B. General: The PACS consists of all equipment and information required to verify identity, and grant or deny access to individuals in accordance with HSPD-12 (VA uses VA issued PIV 2 cards). Equipment ranges from card readers and locks to the servers and databases required for identity verification and all components and communication in between.

C. The Chillicothe VAMC utilizes AMAG card readers and components for access control. Lessor shall install AMAG Technology physical access control system and integrate with existing AMAG Technology Symmetry Software at the Chillicothe VAMC Security Control Center (SCC) via VA Network connected to VA Provided Network Switches.

D. Credentialing and Enrollment Interface: The Chillicothe VAMC has an existing enrollment station and PIV badge issuance process that this system shall work with. The existing enrollment station will allow the PIV badge holder to be programmed for facility level access permission.

All lessor employees requiring access to the government space shall be required to enroll in the system at the Chillicothe VAMC.

E. PACS on designated doors shall be provided, installed, integrated with existing Chillicothe VAMC existing card reader management system via the network, tested, certified, and maintained by the Lessor (see conceptual plans and door schedule for requirements). The PACS shall provide physical access control by regulating access through doors, surge and tamper protection, credential readers (for VA furnished PIV 2 card) (note see door schedule for doors that also require PIN authentication), remote monitoring of field-installed devices by the Government via the VA network. The PACS system shall consist of all requirements on the door schedule, IP based and POE powered door controllers and I/O panels, card readers, door locks (electric strikes, electrified panics, electrified locksets, etc) and sensors (door position switches), power supplies (electric strikes where feasible will be served directly with POE serving the door controller; for electrified panics/locksets where POE voltage drop and power are not sufficient, the system shall use centrally located low voltage power supplies as required by the manufacturer – mount in IT room), PACS shall interface with automatic door operators, intrusion detection system, CCTV, intercom and controls at the reception desk, fire protection system as required, request to exit devices (surface mount PIR motion detectors or REX switches integrated with electrified hardware), data network switches within the IT closet (including copper and fiber patching) to serve IP ports for cameras and door control panels (refer to VA Specification 28 13 00 Physical Access Control System)

F. All security door openings shall also have a 7 pin best key core for use if required (see door schedule and door hardware on the conceptual drawings).

G. Security Door Openings shall meet Architectural Barriers Act and Life Safety Code requirements.

H. Security door openings shall be integrated with intrusion detection system and CCTV systems.

1.08 CENTRALLY MONITORED INTRUSTION DETECTION SYSTEM (IDS)

A. The Lessor shall design, install, and maintain an Intrusion Detection System (IDS) as described in this section.

B. Monitoring: Intrusion detector alarms shall be routed to the lessors commercial security alarm monitoring firm or the lessor’s security office charged with building security allowing for 24 hours monitoring. The remote alarms will be in addition to locally broadcast alarms in the protected areas. The lessor’s security monitoring shall establish an agreement with the Chillicothe VAMC Physical Security Officer for who to contact in an alarm event. In addition to contacting the police department and others as required, the lessor’s security monitoring shall notify the Chillicothe VAMC Security Control Center by telephone of an alarm event and the protected zone that alarmed.

C. General: The intrusion detection system (IDS) shall be used to provide an adequate level of protection for the life-safety protected facility.

IDS consists of all equipment and information required to detect and annunciate potential unauthorized entry into a protected space through an accessible and man-passable opening. An accessible opening as defined by NFPA 730 Guideline for Premise Security is within 18 feet (4 m ) of exterior ground surface or within 18 feet (4 m ) directly or diagonally opposite a window, structure, fire escape, or roof. A man-passable opening as defined by NFPA 730 is a clear cross section area of 96 square inches (619 cm2) or more with the smallest dimension exceeding 6 inches (15.2 cm). IDS sensors include motion detection, glass break, door contacts, and other detection devices. All IDS shall meet UL 639 Intrusion Detection Standard. Terminate all IDS sensors on the PACS data gathering panel.

Provide an arm/disarm panel in protected spaces (at the main entrance and staff entrance at a minimum).

D. Planning and Selection Criteria:

1. IDS shall provide multiple levels or points of detection as far as possible from an asset to be protected. Determine the type of IDS sensor technology to use based upon the capability of the sensor and environmental factors.

2. Intrusion devices of different technologies (such as, motion detection, glass break, or magnetic contacts) shall be zoned separately. Intrusion devices of like technologies shall be wired together, not to exceed three devices, within the confines of clear physical barriers and not to exceed 50 feet (15 m). Devices in the same physical location providing the same purpose shall be programmed in alarm groups to support the intrusion zone concept.

3. Motion Intrusion Detection: An intrusion detection alarm system which detects entry into the room and which broadcasts a local alarm of sufficient volume to cause an illegal entrant to abandon a burglary attempt. Intrusion detector equipment which operates on the principle of narrow beam interception, door contacts, microwave, or photoelectric eyes are unacceptable as the primary means of detection. Intrusion detectors must have the following essential features.

a. An internal, automatic charging DC standby power supply and a primary AC power operations.

b. A central alarm ON-OFF control at the main entrance and staff entrance(s).

c. An automatic reset capability following intrusion detection.

d. A local alarm level of 80 dB (min) to 90 dB (max) within the configuration of the protected area.

e. An integral capability for the attachment of wiring for remote alarm and intrusion indicator equipment (visual or audio).

f. A low nuisance alarm rate as defined in VA Master Specifications, Division 28Electronic Safety and Security "28

16 00 INTRUSION DETECTION SYSTEM."

(http://www.cfm.va.gov/TIL/spec.asp#28 )

g. Installation notes

i. In addition to the locally sounding alarm, remote visual and/or audio annunciators must be monitored by the Lessor’s security monitor 24 hours a day. These annunciators will have the capability of identifying individually protected zones.

ii. Intrusion Detection System shall integrate with CCTV and Entry Security systems.

E. Data Transmission System

Sensors and arm/disarm devices shall be hardwired and directly connected to the data gathering panel. Wireless alarms shall not be used.

F. Interior Sensors

1. Balanced magnetic switches (BMS) may be either recessed or surface mounted; the preferred method is to use a recess mounted switch to reduce the ability to defeat the system and improve aesthetics.

a. When double doors or gates require protection, each door shall be fitted with a separate magnetic switch.

b. Surface mounted switches shall be mounted on the protected side of the door.

c. When protecting roll-up doors wider than 80 inches (2 m), BMS shall be mounted on both sides on the interior side of door.

2. Glass break sensors: Windows with security mesh screen do not require glass break sensors. Consider window construction to mitigate blast or ballistic hazards when selecting sensor technology. Laminated glass thicker than 0.25 inches (0.635 cm) does not require IDS. Glass break sensors shall not be used in the absence of PIRs or balanced magnetic switches.

3. Passive infrared sensors: Passive infrared sensor (PIR) shall meet the requirements of ANSI/SIA PIR-01, Passive Infrared Motion Detector Standard

- Features for Enhancing False Alarm Immunity. A 360-degree field of view configuration shall be preferred for sensor monitoring purposes, but the final determination of configuration for field of view, which may be 360, 180, 90, 45 degrees or curtain, shall be determined from a field survey and mounting surface availability. Sensitivity of the sensor shall be adjustable to provide the necessary area of protection.

4. Vibration sensors: Boundary walls to be protected shall use vibration detection sensors mounted to the wall to assure detection of attempted penetration before the wall is breached. Vibration sensors shall be used in combination with BMS for safes and vaults. Wall mounted shock/vibration sensors shall be provided with LEDs to indicate activation and shall be mounted to provide a clear view of the LED. Except for unusually small areas, smaller than 10 x 10 feet (3 x 3 meters), sensors zoned together shall not cover more than one wall.

5. Video motion detection does not provide sufficient probability of detection with reasonable nuisance alarm rates to be considered intrusion detection; however, video motion detection maybe used in areas where alternate sensor or more conventional detection methods are not appropriate. The nuisance alarm rate (NAR) shall be less than 5 percent.

G. Design and Installation: To ensure proper operation, maximum detection capability, and minimize false alarms, IDS shall be installed in accordance with manufacture instructions, NFPA 731 Standard for the Installation of Electronic Premises Security Systems and UL 681 Installation and Classification of Burglar and Holdup Alarm Systems. All IDS shall be capable of continuous operation and monitoring through the use of UPS equipment

H. Locations: Protect all man-passable openings in a building perimeter with contacts. Protect all accessible openings as defined by NFPA 730 with appropriate sensors. Refer to the Conceptual Drawings, Security Door Opening hardware schedule for additional door specific IDS requirements.

1.09 VIDEO ASSESSMENT AND SURVEILLANCE SYSTEMS (VASS) – Historically known as Closed Circuit Television (CCTV)

A. The Lessor shall design, install, integrate with existing Chillicothe VAMC video management system via the network, and maintain VASS as described in this section.

B. The Government will centrally monitor the VASS/CCTV Surveillance from the Chillicothe VAMC SCC.

C. The Lessor shall install Exacqvision compatible Cameras and an Exacqvision Network Video Recorders (NVR) to integrate with the existing Networked Chillicothe VAMC exacqVision Software Database for monitoring at the Chillicothe VAMC Security Control Center (SCC) via VA Network. Lessor to provide internet explorer or other applicable shortcuts for viewing on the 2 computers provided for all ESS. In addition viewing shall be set up on up to 3 other computer locations. Viewing will be set up to a restricted list of cameras (likely cameras at this clinic only) on the system as determined in coordination with the VA COR and VA Physical Security Officer.

D. Equipment must comply with government standards and specifications and be compatible with existing Chillicothe VAMC systems.

E. Locations: See camera schedule and conceptual drawing. Additional location may be necessary based on the layout of the proposed lease and site.

1. Locations for Exterior Cameras: Main Entrance, Staff Entrance, and mounted high overlooking the parking lot.

2. Location for Indoor Cameras: each corridor, staff work area, waiting areas, and camera in the reception behind the counter overlooking reception desk activities.

1.10 DURESS AND PAGING SYSTEM

A. Paging System

1. Lessor shall install a hard wired paging system with speakers placed so that it can be clearly heard throughout the CBOC. Head end equipment shall be placed in the IT Communications Room FMS Side. System Speakers shall be installed and hard wired in all corridors, team work areas, Nurse Manager’s office, lobby, and reception. Speakers installed throughout the facility shall be hard wired back to the IT closet for connection to the paging system head end equipment. The paging system head end equipment shall allow for paging via a microphone station to be placed at the reception counter, auxiliary input for playing music, and input for the Panic Duress Alarm system. The lease owner shall also hard wire a connection from the IT closet to the reception and install a microphone station at the reception.

2. System Requirements

a. Paging Speaker System Head End Equipment and Amplifier as required to meet the described intent.

b. Microphone Station at reception compatible with the system requirements

c. Wiring shall be provided in a conduit system separate from other systems. Lessor shall label wires and speakers both ends.

d. System Speakers: Ceiling Cone-Type:

i. Minimum Axial Sensitivity: 91 dB at one meter, with 1-W input.

ii. Frequency Response: Within plus or minus 3 dB from 70 to 15,000 Hz.

iii. Minimum Dispersion Angle: 100 degrees.

iv. Line Transformer: Maximum insertion loss of 0.5 dB, power rating equal to speaker's, and at least four level taps.

v. Enclosures: Steel housings or back boxes, acoustically dampened, with front face of at least 0.0478-inch steel and whole assembly rust proofed and factory primed; complete with mounting assembly and suitable for surface ceiling, flush ceiling, pendant or wall mounting; with relief of back pressure.

vi. Baffle: For flush speakers, minimum thickness of 0.032-inch aluminum with textured white finish. Completely fill the baffle with fiberglass.

vii. Vandal-Proof, High-Strength Baffle: For flush-mounted speakers, self-aging cast aluminum with tensile strength of 44,000 psi, 0.025-inch minimum thickness; countersunk heat-treated alloy mounting screws; and textured white epoxy finish.

viii. Size: 8 inches with 1-inch voice coil and minimum 5-oz.

ceramic magnet.

ix. Have a minimum of two (2) safety wires installed to a solid surface or use a flexible conduit from ceiling / wall back box to the speaker back box.

x. The speakers and mounting shall be self-contained and ceiling mounted with flush back box

xi. Install in each room and for larger or longer rooms install a at a minimum of 30’ intervals

xii. Color TBD, shall match color of the adjacent surfaces.

xiii. Provide two spare speaker, mount, and back box.

e. System Cables:

i. Line Level Audio and Microphone Cable:

1) Line level audio and microphone cable for inside racks and conduit.

2) Shielded, twisted pair Minimum 22 American Wire Gauge (AWG), stranded conductors and 24 AWG drain wire with overall jacket.

ii. Speaker Level (Audio 70.7Volt [V]) Cable, Riser Rated:

1) For use with 70.7 V audio speaker circuits.

2) 18 AWG stranded pair, minimum.

3) UL-1333 listed.

f. System Conduit: The paging system requires the entire system to be installed in a separate conduit system..

B. Duress System

1. The Lessor shall install a duress alarm system that will be integrated with the Lessors provided paging speaker system. The panic / duress buttons shall be installed in all patient care rooms, reception, group rooms, lab, police office, and team coves (see conceptual drawings for requirements). The lessor shall coordinate with the COR for mounting locations. The Government, shall document and implement duress procedures for emergency situations.

2. The Panic Duress System shall tie it into the paging System so that when a duress button is pushed the message is heard across the CBOC through the paging system speakers. Coordinate with the VA COR for the message to be played for each button. The lessor shall provide an Amplifier and Microphone.

3. System Requirements:

Provide and install a complete duress-panic alarm system including all head end equipment, panic/duress buttons, all power supplies, receivers, control boards, wiring, conduit, programming, licenses interfaces with the paging system speakers, required for a complete and operational system.

4. Equipment and Materials

a. All equipment shall be rated for continuous operation.

Environmental conditions (i.e. temperature, humidity, wind, and seismic activity) shall be taken under consideration at each facility and site location prior to installation of the equipment.

b. All equipment shall operate on a 120 or 240 volts alternating current (VAC); 50 hertz (Hz) or 60 Hz Alternating Current (AC) power system unless documented otherwise in subsequent sections listed within this spec. All equipment shall have a battery back-up source of power that will provide 12 hours (hrs.) of run time in the event of a loss of primary power to the security systems.

c. The EPPS systems shall be designed, installed, and programmed in a manner that will allow for easy of operation, programming, servicing, maintenance, testing, and upgrading of the system.

d. The Contractor shall provide the Contracting Officer with written verification, that the type of wire/cable being provided is recommended and approved by the OEM. Cabling shall meet the interconnecting wiring requirements of NFPA 70, National Electrical Code. The Contractor is responsible for providing the correct protection cable duct and/or conduit and wiring.

e. When interfacing with other communications or security subsystems the Contractor shall utilize interfacing methods that are approved by the Contracting Officer. At a minimum, an acceptable interfacing method requires not only a physical and mechanical connection; but also a matching of signal, voltage, and processing levels with regard to signal quality and impedance. The interface point must adhere to all standards described herein .

f. Systems shall be scaleable, not vendor specific, and allow expansion as required.

g. Wireless systems shall use ultrasonic, infrared and radio frequency waves to link distributed transmitters and receivers.

Specific characteristics of particular facility will determine best application. Contractor is responsible for determining best system using prediction program to determine where readable signals can be obtained and identify “dead spots”.

h. All hardwired alarms, switches, and junction boxes shall be protected from tampering and include line supervision.

5. Equipment Items

a. All systems shall be designed to provide continuous electrical supervision of the complete and entire system.

b. Noise filters and surge protectors shall be provided for all intercommunications equipment to ensure protection from primary AC power surges and to ensure noise interference is not induced into low voltage data circuits.

c. All alarm and initiating and signaling circuits shall be supervised for open circuits, short circuits, and system grounds. Main and Uninterrupted Power Supply (UPS) power circuits shall be supervised for any change in operating conditions (e.g. low battery, primary to back up battery, and UPS online). When an open, short or ground occurs in any system circuit, an audible and visual fault alarm signal shall be initiated at the master control station and all remote locations.

d. Control Unit: Shall consist of the components to constantly monitor and verify alarm activation; identify zone of activation and location of activation.

e. Audible Signal Device for Duress-Panic: Provides alarm activation and audible sound for alarms, as well as supervisory and trouble signals that shall be distinctive.

f. Duress-Panic Alarms:

i. Housing shall be a rugged corrosion-resistant housing of stainless steel or Acrylonitrile Butadiene Styrene (ABS) molded plastic or similar material that is weather and dust proof.

ii. Actuating device shall include a minimum of a plunger button whose head is recessed from the face/front edge of the housing and be designed to avoid accidental activation using switch guard or multiple buttons (i.e., requires pressing two (2) buttons simultaneously)

iii. Wireless stationary devices will meet the same specifications as Personal Duress/Panic Alarms.

iv. Alarm switch/button shall lock-in upon activation until manually reset with key or manufacture provided device.

v. The switch shall be a positive-acting, double-pole, and double-throw switch.

vi. Duress/Panic alarms shall meet UL 305 Standard for Panic Alarms. To reduce the possibility of false alarms and ensure installation functionality UL 636 Standard for Holdup Alarms standards shall be met.

vii. Shall be capable of being mounted for hand or foot use in a manner that is unable to be viewed by the public.

viii. Components:

1) a. Transmitter

2) b. Locator subsystem

3) c. Receiver

4) d. Software

ix. 10. Wiring will be four (4) conductor #18 American Wire Gauge (AWG).

x. Duress-Panic Alarm Technical Characteristics:

Temperature Range 0° to 110°F (-17.8°C to 43.3°C)

Nominal Voltage 12 V DC @ 6 mA

Current Max 8 mA

Operational Voltage 7 V DC to 15 V DC

Operational life Rated for 0,000 activations

Battery Activations 500

Actuator Dual button plunger with activation lock

LED Bi-color – on and activated

g. Personal Duress-Panic Alarm:

i. These systems are wireless only. These specifications are provided as an option to be used as opposed to hardwired panic-duress buttons. They also provide identification of individual and location.

ii. Components:

1) a. Transmitter

2) b. Repeaters (for wireless and increase distance)

3) c. Locator subsystem

4) d. Receiver

5) e. Software

iii. Wireless transmitters shall send a periodic check in signal to the main computer or processor. If the signal is not received according to a definable time window, a supervisory alert will be generated. Wireless devices shall report a low battery condition well in advance to the failure of the battery.

iv. Shall consist of a compact lightweight transmitter enclosed in a durable fire-retardant ABS plastic case that can be easily worn.

v. Transmitters may use ultrasonic, radio frequency (RF), or infrared (IR) to transmit signals. Each has advantages and disadvantages. Selection of system shall be dependent on defined usage and range of communications required.

vi. Sensors shall be adjustable to activate automatically when mounted on a belt and the user is in a horizontal position for longer than one (1) to fifteen (15) minutes. Adjustment capability shall not be accessible to personnel wearing the panic alarm device.

vii. Radio frequencies for transmitter will comply with Federal Communication Commission (FCC) regulations.

viii. Radio frequency transmitters will use frequency modulation signal hopping.

ix. Personal Duress-Panic Alarm Technical Characteristics:

Temperature Range 0° to 110°F (-17.8°C to 43.3°C)

Nominal Voltage 12 V DC @ 6 mA

Current Max 8 mA

Operational Voltage 7 V DC to 15 V DC

Battery Life Regular battery 60 hour duration or Nickel-Metal Hydride (NiMH) rechargeable 12 hrs. 20 hr. per charge

Battery Lifespan 500 activations

Actuator Plunger with activation lock

LED Bi-color – on and activated

Passive Activation Adjustable

Prone position 1-15 minutes

1.11 DETECTION AND SCREENING SYSTEM (DSS)

System not required - provide power receptacle and data point at main entrance for future installation of DSS equipment if later needed by the VA (reference PSDM paragraph 10.6)

PART 2 - CONSTRUCTION TIMELINE REQUIREMENTS FOR THE IT CLOSET (N/A for existing location renovation)

PART 3 - OPERATIONS AND ADMINISTRATION

3.01 LESSOR TO WORK WITH VA FOR SECURITY

A. The lessor shall cooperate and work with the Chillicothe VAMC throughout the term of the lease. Common groups of VA Employees from the facility that will be engaged with the security of the clinic include but are not limited to the VA Police Department particularly the Physical Security Officer and the Security Control Center, the Clinic Nurse Manager and staff, the Environment of Care (EOC) Committee, and the Contracting Officer Representative.

B. The Chillicothe VAMC Physical Security Officer will establish or update existing memorandums of agreement for security with the Lessor’s Security Alarm monitoring company for notifications and the Local police. The lessors Security Alarm Monitoring company shall cooperate with the Chillicothe VAMC Physical Security Officer throughout the term of the lease, and should the Security Alarm monitoring company not cooperate or not perform the requirements, upon notification by the VA Contracting Officer to the lessor the security alarm monitoring company shall be replaced at no additional cost to the government and with no loss in security.

3.02 TEMPORARY SECURITY UPGRADE DUE TO IMMEDIATE THREAT

The Government reserves the right, at its own expense and with its own personnel, to temporarily heighten security in the building under lease during heightened security conditions due to emergency situations such as but not limited to terrorist attacks, natural disaster, and civil unrest.

3.03 ACCESS TO BUILDING INFORMATION

A. Building Information-including mechanical, Electrical, vertical transport, fire and life safety, security system plans and schematics, computer automation systems, and emergency operations procedures-shall be strictly controlled. Such information shall be released to authorized personnel only, approved by the Government, by the development of an access list and controlled copy numbering. The Contracting Officer may direct that the names and locations of Government tenants not be disclosed in any public accessed document or record. If that is the case, the Government may request that such information not be posted in the building directory.

B. Lessor shall have emergency plans and associated documents readily available in the event of an emergency.

PART 4 - IDENTITY VERIFICATION OF PERSONNEL AND PIV BADGING

Reference the lease document for Identity Verification of Personnel. The Lessor shall insert these requirements for identity verification of personnel in all subcontracts when the subcontractor is required to have physical access to a federally controlled facility or access to a federal information system.

A. General

In general identity verification of personnel includes the following, and reference the lease document on Identity Verification of Personnel for additional requirements.

1. The Government reserves the right to verify identities of personnel with access to Government space.

2. The Lessor and all subcontractors shall comply with the agency personal identity verification procedures.

3. The Government reserves the right to conduct background checks on Lessor personnel and contractors with access to Government leased space.

4. The Government reserves the right to require VA PIV Badging for Lessor personnel and contractors with access to Government leased space.

5. Upon request, the Lessor shall submit required paperwork for identity verification, background checks, and / or badging.

6. Throughout the life of the lease, the Lessor shall provide the same data for any new employees, contractors, or subcontractors who will be assigned to the Government’s space, and periodically for reissuance as required by the expiration of said requirements.

B. VA PIV BADGING REQUIREMENTS

Personnel with routine access to Government space or requiring access to VA computer systems for the purposes of programming, integrating, and maintaining security systems or other items of work shall be required to be badged with a PIV badge issued from the Chillicothe VAMC in accordance with the most current version of Chillicothe VAMC PIV Badging Instructions. Additionally applicable to these personnel are VA Handbook

6500.6 Appendix B VA Acquisition Regulation Solicitation Provision and Contract Clause, VA Handbook 6500.6 Appendix C VA INFORMATION AND

INFORMATION SYSTEM SECURITY/PRIVACY LANGUAGE FOR INCLUSION INTO CONTRACTS,

and these personnel shall be required to annually sign VA Handbook 6500.6 Appendix D CONTRACTOR RULES OF BEHAVIOR and Submit to the Contracting Officer and Contracting Officer Representative. Contractor shall be responsible for all travel expenses related to obtaining said badge, and any replacements thereafter. Travel is anticipated to the Chillicothe VAMC for submitting fingerprints and paperwork as well as a separate trip to receive the badge if approved. Contractor employees shall wear the Government furnished badge on the front of their outer clothing when in a VA facility. When an employee leaves the Contractor's employment, the Contractor shall return all identification badges and passes of the employee issued by the Government to the COR or within five working days after termination of their employment. Any lost badge shall be reported immediately to the Contracting Officer and COR.

PART 5 - VA HANDBOOK 6500.6 Appendix B VA Acquisition Regulation Solicitation Provision and Contract Clause

852.273-75 - SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION TECHNOLOGY

RESOURCES (INTERIM- OCTOBER 2008)

As prescribed in 839.201, insert the following clause:

The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract.

PART 6 - VA HANDBOOK 6500.6 Appendix C VA INFORMATION AND INFORMATION SYSTEM

SECURITY/PRIVACY LANGUAGE FOR INCLUSION INTO CONTRACTS

1. GENERAL

Contractors, contractor personnel, subcontractors, and subcontractor personnel shall be subject to the same Federal laws, regulations, standards, and VA Directives and Handbooks as VA and VA personnel regarding information and information system security.

2. ACCESS TO VA INFORMATION AND VA INFORMATION SYSTEMS

a. A contractor/subcontrator shall request logical (technical) or physical access to VA information and VA information systems for their employees, subcontractors, and affiliates only to the extent necessary to perform the services specified in the contract, agreement, or task order.

b. All contractors, subcontractors, and third-party servicers and associates working with VA information are subject to the same investigative requirements as those of VA appointees or employees who have access to the same types of information. The level and process of background security investigations for contractors must be in accordance with VA Directive and Handbook 0710, Personnel Suitability and Security Program. The Office for Operations, Security, and Preparedness is responsible for these policies and procedures.

c. Contract personnel who require access to national security programs must have a valid security clearance. National Industrial Security Program (NISP) was established by Executive Order 12829 to ensure that cleared U.S. defense industry contract personnel safeguard the classified information in their possession while performing work on contracts, programs, bids, or research and development efforts. The Department of Veterans Affairs does not have a Memorandum of Agreement with Defense Security Service (DSS). Verification of a Security Clearance must be processed through the Special Security Officer located in the Planning and National Security Service within the Office of Operations, Security, and Preparedness.

d. Custom software development and outsourced operations must be located in the U.S. to the maximum extent practical. If such services are proposed to be performed abroad and are not disallowed by other VA policy or mandates, the contractor/subcontractor must state where all non-U.S.

services are provided and detail a security plan, deemed to be acceptable by VA, specifically to address mitigation of the resulting problems of communication, control, data protection, and so forth. Location within the U.S. may be an evaluation factor.

e. The contractor or subcontractor must notify the Contracting Officer immediately when an employee working on a VA system or with access to VA information is reassigned or leaves the contractor or subcontractor’s employ. The Contracting Officer must also be notified immediately by the contractor or subcontractor prior to an unfriendly termination.

3. VA INFORMATION CUSTODIAL LANGUAGE

a. Information made available to the contractor or subcontractor by VA for the performance or administration of this contract or information developed by the contractor/subcontractor in performance or administration of the contract shall be used only for those purposes and shall not be used in any other way without the prior written agreement of the VA. This clause expressly limits the contractor/subcontractor's rights to use data as described in Rights in Data - General, FAR 52.227-14(d) (1).

b. VA information should not be co-mingled, if possible, with any other data on the contractors/subcontractor’s information systems or media storage systems in order to ensure VA requirements related to data protection and media sanitization can be met. If co-mingling must be allowed to meet the requirements of the business need, the contractor must ensure that VA’s information is returned to the VA or destroyed in accordance with VA’s sanitization requirements. VA reserves the right to conduct on site inspections of contractor and subcontractor IT resources to ensure data security controls, separation of data and job duties, and destruction/media sanitization procedures are in compliance with VA directive requirements.

c. Prior to termination or completion of this contract, contractor/subcontractor must not destroy information received from VA, or gathered/created by the contractor in the course of performing this contract without prior written approval by the VA. Any data destruction done on behalf of VA by a contractor/subcontractor must be done in accordance with National Archives and Records Administration (NARA) requirements as outlined in VA Directive 6300, Records and Information Management and its Handbook 6300.1 Records Management Procedures, applicable VA Records Control Schedules, and VA Handbook 6500.1, Electronic Media Sanitization. Self-certification by the contractor that the data destruction requirements above have been met must be sent to the VA Contracting Officer within 30 days of termination of the contract.

d. The contractor/subcontractor must receive, gather, store, back up, maintain, use, disclose and dispose of VA information only in compliance with the terms of the contract and applicable Federal and VA information confidentiality and security laws, regulations and policies. If Federal or VA information confidentiality and security laws, regulations and policies become applicable to the VA information or information systems after execution of the contract, or if NIST issues or updates applicable FIPS or Special Publications (SP) after execution of this contract, the parties agree to negotiate in good faith to implement the information confidentiality and security laws, regulations and policies in this contract.

e. The contractor/subcontractor shall not make copies of VA information except as authorized and necessary to perform the terms of the agreement or to preserve electronic information stored on contractor/subcontractor electronic storage media for restoration in case any electronic equipment or data used by the contractor/subcontractor needs to be restored to an operating state. If copies are made for restoration purposes, after the restoration is complete, the copies must be appropriately destroyed.

f. If VA determines that the contractor has violated any of the information confidentiality, privacy, and security provisions of the contract, it shall be sufficient grounds for VA to withhold payment to the contractor or third party or terminate the contract for default or terminate for cause under Federal Acquisition Regulation (FAR) part 12.

g. If a VHA contract is terminated for cause, the associated BAA must also be terminated and appropriate actions taken in accordance with VHA Handbook 1600.01, Business Associate Agreements. Absent an agreement to use or disclose protected health information, there is no business associate relationship.

h. The contractor/subcontractor must store, transport, or transmit VA sensitive information in an encrypted form, using VA-approved encryption tools that are, at a minimum, FIPS 140-2 validated.

i. The contractor/subcontractor’s firewall and Web services security controls, if applicable, shall meet or exceed VA’s minimum requirements.

VA Configuration Guidelines are available upon request.

j. Except for uses and disclosures of VA information authorized by this contract for performance of the contract, the contractor/subcontractor may use and disclose VA information only in two other situations: (i) in response to a qualifying order of a court of competent jurisdiction, or

(ii) with VA’s prior written approval. The contractor/subcontractor must refer all requests for, demands for production of, or inquiries about, VA information and information systems to the VA contracting officer for response.

k. Notwithstanding the provision above, the contractor/subcontractor shall not release VA records protected by Title 38 U.S.C. 5705, confidentiality of medical quality assurance records and/or Title 38 U.S.C. 7332, confidentiality of certain health records pertaining to drug addiction, sickle cell anemia, alcoholism or alcohol abuse, or infection with human immunodeficiency virus. If the contractor/subcontractor is in receipt of a court order or other requests for the above mentioned information, that contractor/subcontractor shall immediately refer such court orders or other requests to the VA contracting officer for response.

l. For service that involves the storage, generating, transmitting, or exchanging of VA sensitive information but does not require C&A or an MOU- ISA for system interconnection, the contractor/subcontractor must complete a Contractor Security Control Assessment (CSCA) on a yearly basis and provide it to the COR.

4. INFORMATION SYSTEM DESIGN AND DEVELOPMENT

a. Information systems that are designed or developed for or on behalf of VA at non-VA facilities shall comply with all…