Exhibit B ASR Security SOW.pdf

Electronic Security System – Statement of Work XXXX SSA Office Attachment A

PROPERTY OF THE UNITED STATES GOVERNMENT – FOR OFFICIAL USE ONLY

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed

1. Scope of Work

The (Insert Office Name) Social Security Administration (SSA) Field Office requires installation and/or upgrade and support services for the following electronic security systems Video Surveillance System (VSS), Physical Access Control (PACS) and

Intrusion Detection System (IDS) to include Duress Alarms. The office is located at

(Insert Address).

2. General

A. This scope of work must be followed by the winning bidder, sub-contractor and

Lessor.

B. All requirements must be adhered to, including notification of project award, discussion of the project prior to start and providing a project schedule.

C. The contracted installer of these systems will herein be referred to as the Contractor.

D. The Contractor:

1. Shall provide all management, supervision, labor, material, supplies, and equipment necessary to plan, schedule, coordinate, and assure effective site system design (if necessary), installation, maintenance, inventory management, and miscellaneous work and repair of security equipment at Agency offices.

Contractor services provided will be performed in accordance with the requirements, terms and conditions of this scope of work.

2. Will provide all tools and items to complete the services and activities required under this contract. Remove all unused legacy system cables upon completion of the new system.

3. Will propose a schedule of dates and times that the installation will be performed, including anticipated completion date. This information shall be updated as necessary.

E. Installation:

1. Will furnish and install all equipment, cables, wires, connector, labor and complete any electrical requirements that are necessary for the installation of the electronic security systems contained within this statement of work.

2. With the customer present, the contractor will ask the agency contact about the exact proposed location of each required device. This will be done at the start of the job with the contractor and responsible agency contact. Any major changes need to be approved by the contracting officer. (For example, “it’s Okay to put the keypad on the right side of the door instead of the left side” with agency contact approval – cannot put the keypad in someone’s private office if it was supposed to be at the front door without the approval of the contracting officer as this would change the “scope” of the project).

3. Coordinate activities with the Facility Manager; if any proposed work is deemed disruptive to the operation or occupants, the Contractor will need to schedule work outside of normal hours at no additional cost to the Government.

4. If required the contractor must install all necessary electrical outlets and complete hardwiring of circuits, as needed (or have wired by a licensed electrician), to ensure that all devices function as designed. All electrical work necessary to make the systems function is the responsibility of the Contractor.

5. Will install system in accordance with all codes and standards set forth by, but not limited to; The National Electrical Code, Underwriters Laboratories and the Local

Jurisdiction Having Authority, with a minimum of shielded plenum wiring using plenum or riser wire as required by code/standards. All wiring will be concealed and of a gauge no less than 18. No mechanical pulling of wires is allowed.

6. Must securely fasten all wires in the ceiling to overhead wire supports to prevent damage that may occur from existing or future wire runs in the ceilings.

7. Every item, including each detector, sensor, duress button, control panel, transformer, LAN/Data jack, etc. must be labeled to show the device and/or zone number on the front cover of the specific device.

8. The Contractor shall label all wiring with information that allows for easy identification from either terminating location. Except for patch cables, all cable installations will include cable-labeling, the Contractor shall install Plenum-rated cable.

9. Upon completion of each day's work clean, remove and dispose of any dirt and debris.

10. The Contractor shall install all components securely and in accordance with the manufacturer instructions at the indicated locations on the drawing. The

Contractor shall verify all components of any existing system as functional when incorporating equipment with new systems.

11. After job completion and agency acceptance, any materials furnished by the contractor become the sole property of the Government.

F. The de-installation and Disposal of Existing Equipment

1. If applicable, the Contractor shall provide de-installation services upon an order from the agency. As applicable, de-installation may include removal of existing

VSS, IDS and PACS equipment in preparation for installing agency- approved equipment. If appropriate, de-installation activities will include the disposal of any trash and equipment, and may include shipping of designated equipment.

2. The Contractor will securely handle any system components that could potentially contain sensitive information and return the components to the agency. Examples of system components are computers, hard drives, digital storage arrays, or equipment with stored memory.

G. Repairing Damage:

1. Installation work shall be carefully laid out in advance to prevent unnecessary damage to existing walls, ceilings, doors, doorframes, etc. Where cutting, channeling, chasing, or drilling are done in any part of the building during installation, these parts must be repaired, refinished, repainted, and all debris cleaned up. Where existing equipment is to be removed, all holes, wall damage, etc. must be repaired, refinished, repainted, and all debris cleaned up after removal unless otherwise stated. All repair work shall utilize materials to match the surface being repaired and shall be finished flush with the existing surfaces.

SSA will not provide materials to the Contractor for the repair of damages. If matching materials are no longer available and items cannot be matched for the site, the Contractor shall notify the agency. The agency shall contact GSA for acceptable alternatives and notify the Contractor.

H. Deliverables

1. Provide “as-built” drawings depicting the location of each specific device for all

IDS, PACS, VSS, etc. systems to include wiring paths, zone descriptions, camera list, etc. The as-built drawings must be prepared in AutoCAD and delivered in an electronic format (preferably as a PDF). Copies of the as-built drawings shall be provided to the site representative and sent to

DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov.

2. Equipment Inventory List (see appendix A) – At a minimum, the listing should contain the Site Code, Site Name and Address, System/Component/Description, Manufacturer, Part Number/Model Number, Serial Number, Device location, and mailto:DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov for software what version of the software that was installed. If there are multiples of the same device i.e. duress buttons, recommend listing the information above and provide the quantity instead of locations. Copies of the equipment inventory list shall be provided to the site representative and sent to

DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov.

3. Passwords and Software - The Contractor shall ensure that office management has all the passwords for hardware and system software for safekeeping.

I. Training

1. The Contractor shall provide user and original equipment manufacturer (OEM) training for the provided systems upon completion of the installation. Training on the equipment will include the operation of any software associated with the system to end-user key personnel. Specific areas of training may include operational technologies and techniques, minor and routine system testing, and troubleshooting tips. The Contractor shall demonstrate full functionality to the on-site end user.

2. At a minimum, the following training shall be provided:

i. Access Control: The Contractor shall ensure all personnel trained understand how to gain access to the facility using their SSA credentials.

ii. IDS: The Contractor shall ensure all personnel trained understand how to enable/disable alarm functions.

iii. VSS Recording: The Contractor shall ensure all trained personnel understand how to play back video recordings on the new VSS system.

The Contractor will ensure the agency personnel understands how to offload digital VSS recordings onto external media.

iv. Training Documentation: The Contractor shall provide written training documentation during training sessions, for future reference by other agency personnel, to include a quick reference card for complex equipment to serve as an ad-hoc memory jogger for an experienced user.

Basic operator instruction summaries shall be provided for all major items of equipment and major subassemblies that have operator controls.

mailto:DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov

J. Warranty

1. The Contractor shall provide warranty for all work under this contract for a period of one (1) year after final acceptance by the agency. The Contractor shall be responsible for corrections due to work performed for the one (1) year period at no additional cost to the agency.

2. The Contractor shall provide warranty for all furnished and installed materials and equipment under this contract for a period of one (1) year after final acceptance by the agency. If any materials or equipment fail or malfunction under normal usage during the year, the Contractor shall be responsible for repairing or replacing the defective item at no additional cost to the agency. The Contractor shall not be liable for failures or malfunctions caused from abnormal use.

3. If an agency furnished, Contractor installed, item fails or malfunctions under normal usage during the year, the agency shall be responsible for repairing or replacing the defective item. However, if an agency furnished, Contractor installed, item fails or malfunctions due to the Contractor’s installation or work, the Contractor shall be responsible for repairing or replacing the defective item at no additional cost to the agency.

4. Response and Repair Times

i. After receipt of a maintenance request, the Contractor’s must meet the requirements set by the Interagency Security Committee (ISC) for a specific Facility Security Level (FSL). The technician shall arrive on site within five business days for FSL I and II, 72 hours for FSL III, and 24 hours for FSL IV. Check with office personnel to confirm what the exact

FSL is for the office.

ii. The contractor technician will arrive with the tools and skills necessary to diagnose the problem. The Contractor shall effect full corrective action by either repairing or replacing malfunctioning components. The Contractor shall arrive on-site to perform repair service, Monday through Friday, between the hours of 7:30 a.m. and 4:00 p.m. local time zone (at the respective office), excluding Federal holidays.

3. Video Surveillance System (VSS) Specifications

A. The Social Security Administration Office of Security and Emergency Preparedness

(OSEP) oversees the efficient and effective operation of the Agency’s Video

Surveillance System (VSS) at Headquarters and at many Regional and Field Offices.

The existing network infrastructure (SSANet) allows IP communications throughout the various, geographically disbursed offices throughout the country. OSEP has established corporate video management system utilizing Milestone software. SSA requires all new system installations use the milestone video management software, Razberi network video recorders and Axis cameras, which are specified elsewhere in this SOW. By installing the equipment listed in the SOW, it will allow SSA (future use) to connect the VSS to the SSANet with minimal equipment upgrade, and successfully integrate with the VSS corporate server.

B. The National Defense Authorization Act (NDAA) for Fiscal Year 2019 (P.L. 115-

232; H.R. 5515 (the John S. McCain National Defense Authorization Act for Fiscal

Year 2019) prohibits acquisition and repair of telecommunication and video surveillance equipment from certain Chinese manufacturers. Specifically, this law prohibits HIKvision, Dahua, ZTE, and other Chinese manufactured equipment and components for US government critical infrastructure and national security usage.

The prohibition aspect of the law became effective on August 13, 2019.

C. The Contractor shall install all system components and accessories in accordance with the manufacturer’s instructions, NFPA 70 NEC, and shall furnish all necessary connectors, terminators, interconnections, services, and adjustments required for a complete VSS.

D. The VSS shall consist of all cameras, storage, power, lenses, mounts, housings and video transmission system components necessary to provide an IP based video system.

E. The Contractor shall be responsible for the integration, setup and programming of the

VSS.

F. CAT-6 structured cable and associated wiring will be routed through the hollow wall or surfaced mounted inside the “Panduit Duct & Raceway”. All wiring that is above the ceiling must be tied or strapped and not directly lying on top of tiles.

G. Install, preferably, one PC workstation in Managers’ office with the ability to access and download video footage.

H. Install decoders at all other designated personnel workspaces, spot monitors, and at the guard desk. For decoders located at personnel workspaces and guard desks, create multiple views so every camera is accessible from each decoder. Consult with personnel onsite to determine the preferred types of views. Provide a wireless mouse with each decoder (excluding spot monitors located at entrance) in order to allow personnel and the guard to rotate through different views from the lock screen. Label each camera on the decoder so that the camera label can be seen on the view display.

I. Install cameras in the interior of the office. The installed cameras must provide complete coverage of all public contact areas. Refer to Design Intent Drawings for approximate locations. Final locations shall be coordinated with Office Manager.

J. Install cameras on the exterior of the office (if applicable). The installed cameras must provide complete coverage of the public and employee entrances, windows, utilities and waste management dumpsters located on SSA property. Refer to Design

Intent Drawings for approximate locations. Final locations shall be coordinated with Office Manager.

K. Install Wall Mounted LCD Monitor at location indicated on the drawing. At a minimum, the monitor shall display the camera coverage outside the employee entrance. Contractor shall coordinate with the agency personnel to determine if other views are required.

L. The field of view shall be coordinated between the agency representative on-site and the Contractor to enable monitoring and recording of the desired area of interest.

M. Test VSS for proper operation, train agency personnel on proper system operation procedures. Special attention must be given to the training of the video recorder.

Train the manager and designated personnel how to record, retrieve and download images and files. Provide each camera serial number and IP address to the manager and OPSS.

4. Video Management System (VMS) minimum specifications

A. Open API for integration, web-based remote access to video storage, 24/365 operability, configure cameras individually over the VMS, and offline activation of license with a 30-day grace period.

B. Authenticate with access levels and roles.

C. Able to support IP Cameras, encoders and NVRs from multiple manufactures.

D. Export video in native database format and share external views.

E. Camera and Channel License VMS Software

F. Minimum 30 days of video storage based on calculation of 15 frames per second

(fps) based on the following schedule:

1. Interior Cameras Monday – Friday

i. Record at all times from 0600 to 1800

ii. Record on motion from 1800 to 0600

2. Interior Cameras Saturday – Sunday

i. Record on motion only for both days

3. Exterior Cameras

i. Record 24/7

G. Enables administrators to define privacy masks for individual cameras, to hide areas in the camera view that must not be visible or recorded.

H. Meet or exceed standards for H.264 capable (legacy\older codecs not acceptable).

I. Video streaming: multi-stream and multi-head camera support.

J. Required VMS - Milestone XProtect Professional Plus with all appropriate licenses. Verify with SSA for current VMS software version and revision.

5. Video Recorder Minimum Specifications

A. Network Video Recorder or Server and Switch configuration

B. Embedded PoE with 24 ports

C. Intel Core i7

D. Windows Embedded 10 loT (64 bit)

E. Memory: Minimum of 8/16 GB

F. Video Output: HDMI/VGA

G. 2 x USB 2.0

H. Capable of storing a minimum of 2 TB; RAID 0 configuration.

I. Rack mounted.

J. Required - Razberi SSIQ24-i7 Pro (for technical information contact Razberi)

K. Required - If additional ports are required then the contractor may use an additional SSIQ24-i7 or a Razberi 8, 16 or 24 port EndpointDefender (port extender) (for technical information contact Razberi).

6. FEI Windows Interior IP Camera Minimum Specifications

A. For the FEI Windows the contractor must provide the Axis F34 Surveillance Kit. The

AXIS F34 Surveillance System has all the components needed to deploy a multi-view surveillance system. The system enables simultaneous streaming of HDTV 720p or

1080p videos from four different areas through one Ethernet port and only requires one VSS license for the F34 Main Unit vice a license for each individual camera.

1. Required: F34 Surveillance Kit (includes 1-F34 Main Unit, 4 F-1004 Sensor

Units, 4-Dome Accessories, 4-15m Sensor Cables)

7. Reception Area/Hearing Room/PI Room/Shared Services Interior IP Camera

Minimum Specifications

A. Progressive Scan, 4MP resolution, H.264/H.265 compression, day/night capability, multiple streaming, digital pan tilt zoom, vandal resistant housing, POE and password protection.

1. Required: Axis M3066-V

8. Reception Area/Hearing Room Interior IP 360 Camera Minimum Specifications

A. Progressive Scan, 12MP resolution, H.264/H.265 compression, day/night capability, multiple streaming, digital pan tilt zoom, vandal resistant housing, POE and password protection.

1. Required: Axis M3068-P

9. Exterior 180 degree IP Camera Minimum Specifications

A. Progressive Scan, 14MP multisensor with seamless stitching, H.264 compression, day/night capability, multiple streaming, digital pan tilt zoom, environmental and vandal resistant housing, POE and password protection.

1. Required: Axis Q3819-PVE

10. Exterior IP Camera Minimum Specifications

A. Progressive Scan, 5MP resolution, H.264 compression, day/night capability, multiple streaming, digital pan tilt zoom, environmental and vandal resistant housing, POE and password protection, varifocal lens.

1. Required: Axis P3247-LVE

11. Exterior Pan-Tilt-Zoom Camera Minimum Specifications

A. 32X, Progressive Scan, 1080p, H.264 compression, day/night capability, multiple streaming, vandal resistant and environmental housing, password protection.

1. Required: Q6075-E PTZ Dome Network Camera

12. Camera Mounts

A. The Contractor shall install the camera mounts as specified by the manufacturer and provide mounting hardware sized appropriately to secure the mount, camera and housing; provide grounding and surge protection for each exterior camera installation;

and provide/connect electrical and signal transmission cabling to each camera.

13. Monitor and Mount Minimum Specifications

A. 32” (Minimum) 1080P Color LCD Monitor

B. WALL MOUNT FOR LCD MONITOR

14. Workstation Minimum Specifications

A. The workstation must meet or exceed the minimum specifications for the client workstation software stated in the manufacturers VMS documentation.

1. A desktop PC/workstation is required. The workstation must have a wireless keyboard and mouse, either i5 or i7 processor.

2. A minimum of a 22” monitor screen if desk mounted and a minimum 32” if the monitor is to be walled mounted.

3. Second Video Stream from cameras to the workstations shall be 4CIF.

4. Contractor shall install data jacks in the same location that has a workstation.

B. In Field Offices, VSS workstations with the ability to access and download video footage will be installed in the District Managers office. If there is an OHO

Permanent Remote Sites located with the Field Office then a VSS workstation with the ability to access and download video footage will be installed in the ALJ Prep

Area.

C. If there is a OHO Permanent Remote Site (PRS) co-located with the Field Office, a

VSS workstation with the ability to access and download video footage will be installed in the Administrative Law Judge (ALJ) Prep Area.

15. Decoder Minimum Specification

A. Required: IOnode R100S Decoder

16. Keyboard-Video-Mouse (KVM) Minimum Specifications

A. 19” LCD screen, rack mounted, resolution of 1280x1024, and supports eight computers.

1. Required: Aten KL1108VN-A9A-AAB

2. Required: Aten KA7170 dongle (to connect NVR to KVM)

17. Uninterruptable Power Supply (UPS)

A. Rack mounted UPS to provide backup for the VSS equipment that will allow the system to operate for 30 minutes base with a minimum output power of 1200 Watts.

The nominal output and input voltage shall be 120V.

18. Cabling Minimum Specifications

A. Unshielded Plenum Rated Cat6e White.

19. Rack Mounted Surge Protector

A. Ditek DTK-RM12POE (for exterior cameras only).

20. Equipment Rack Specifications

A. If the contractor cannot use the existing racks located in the Data Communication

Room (DCR) then the contractor shall provide a four-post rack. Contractor shall verify rack mount size to hold all rack mounted equipment that will be part of the

VMS.

21. Additional VSS Instructions

A. The Contractor shall conceal VSS wiring in the wall, floor, or ceiling to prevent safety hazards. The Contractor shall conceal wiring in a conduit to provide a professional finish when wiring outside the walls or ceiling. The agency shall accept a combination of concealed and conduit wiring for a site. The Contractor shall conceal wiring, if required, on exterior walls and roofing with approval from the customer. The Contractor shall meet all safety standards and building codes. The

Contractor shall include all additional wiring work, such as firewall penetration.

B. Install and configure all components required for the fully integrated VSS solution.

C. The Contractor shall provide as-built documents to the agency for the complete installation of VSS equipment.

D. Remove any existing cameras that will not be part of the new VSS.

22. Intrusion Detection System Specifications

A. The IDS system shall have the capability to monitor each public customer service desk and other areas in the office as separate zones. The manufacturer product guide will always take precedence over recommendations in this statement of work.

B. The IDS/Duress alarm shall be connected to the Department of Homeland Security

(DHS)/Federal Protective Service (FPS) MegaCenter per DHS/FPS requirements.

The Multi-Regional Emergency Management Control Centers (MegaCenters) handle alarm monitoring and radio dispatch of Federal Protective Service Officers (PSO) and

Contract Guards for alarm response, criminal activities and emergencies for agency offices in GSA federally owned properties and leased space.

C. The Contractor shall provide the designated DHS/FPS MegaCenter, (DMC) with a complete zone list with alpha descriptions, as outlined in the MegaCenter Alarm

Requirements Document, (MAR Package). Assist the DMC with panel programming. The contractor shall provide the DMC with the complete zone list 24 hours before scheduled testing of equipment. Zone all sensors individually unless indicated otherwise.

D. The FPS MegaCenter will only accept UL commercially listed panels from Bosch

(Radionics), or DMP. Vendor must be a licensed distributer and installer of the system they are installing.

E. The IDS shall consist of alarm panel, keypads, expansion modules, recessed magnetic door contacts, dual technology ceiling mounted passive infrared motion detectors, auxiliary DC power supply, battery backup, surge protector, hard wired or wireless momentary duress push buttons switches, 22/2, 22/4 Plenum rated wire, and miscellaneous hardware. If the existing IDS equipment meets the minimum specifications then the contractor may reuse the existing IDS equipment.

F. IDS sensors shall provide complete coverage of all perimeter doors, roof hatches and ground floor windows. Sensors should be redundant and programmed to prevent nuisance alarms.

G. Duress alarms shall be installed discreetly at all public customer service desks, guard stations and other selected areas within offices, refer to design drawings.

H. IDS Panel Keypads must be installed in close proximity to management offices, the guard station and other select locations within offices, refer to design drawings.

I. Each point of the system shall be individually identified at the keypads and in the

MegaCenter. All alarm zones/points including duress must be tested to the

MegaCenter.

23. IDS Control Panel Minimum Requirements

A. Listed for UL Commercial Burglary.

B. Supports up to 128 zones.

C. Supports commercial wireless devices.

D. Provides integrated CCTV switching capability.

E. Provides supervision of peripheral devices.

F. Supports up to 96 optional relay outputs.

G. Supports alarm reporting via Internet

H. Has the capability to provide remote notifications via POTS, LAN and VOIP methods to the designated FPS Mega Center. SSA currently employs POTS, the LAN and

VOIP options should be provided for future use and future proofing

24. IDS Panel Keypad Minimum Requirements

A. Color touch screen keypad display

B. Illuminated LCD display for system messages

C. User-friendly menu operation

D. Graphical buttons for data or command entry

E. System instructions through integrated on-screen help

F. Display multiple events in order of priority

G. Command button for performing functions, enter button for passcode entry

H. Sounder emits distinct warning tones and allows volume adjustment

25. IDS Sensors (Photoelectric, Motion, Position, Acoustic and Seismic Sensors)

Minimum Requirements

A. UL Standards 639

B. ANSR.BP1448

C. IP54 rated

D. Motion Sensors should comprise multiple sensor technologies (such as microwave, PIR, etc.)

E. Incorporate false alarm reduction technology

F. Be designed for deployment and application

26. Duress Alarms Minimum Requirements

A. Wired duress buttons at security posts, customer service and public interview stations.

B. Duress buttons for office staff must be configured to annunciate at the facilities nominated security post(s) and the FPS Mega Center.

C. Duress buttons for security posts will annunciate locally and at the FPS Mega Center.

D. Configurable annunciations to alert recipients.

E. UL 636 Certified

F. The Contractor will mount buttons to the underside desk/counter at the locations indicated. Mount buttons securely to the desk, wall or specified position using specified mounting standards. If the duress buttons are installed in a location under the desk then the device must be installed in a location to prevent the employee from accidently activating the alarm.

G. For a PRS, the duress button shall be installed in the knee space of the judge’s bench.

Upon activation the duress button, two simultaneous events shall occur:

i. Disengagement of the electronic strike on the affected interior hearing room door. The duress button shall require an additional set of wire leads to a power supply and the electric strike, a timer will keep the electric strike disengaged until a hearing room employee opens the door, at which time the timer will immediately shutdown so the electric strike will re-engage and the door is automatically secured when closed. The timer should be set for fifteen (15 seconds). Once closed, the hearing room door will remain secured and the duress button will not be able to disengage, the electric strike (a second time) until the IDS is reset by a Hearing Room

Employee.

ii. Activation of an alarm locally and at the appropriate FPS and/or monitoring facility.

27. Power Supplies Minimum Requirements

A. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

B. Power supplies shall indicate power loss, low battery and restorations.

C. The system shall indicate exact location of power supply, location of panel, panel number, breaker and number.

D. Each power supply shall have a battery (s) capable of maintaining the IDS for a minimum of 8 hours.

28. Additional IDS Instructions

A. When installing magnetic door contacts, the contractor shall wire each device on a separate zone to alarm panel. End of Line Resistor (EOLR) will be at the device, not in the alarm panel. See design drawing.

B. When installing remote stations (keypads) the contractor shall wire keypads to control panel per manufacturer specifications.

C. When installing 360° dual tech ceiling mounted passive infrared motion detectors the contractor shall wire each device on a separate zone to alarm panel. EOLR will be at the device, not in the panel.

D. Install components and wiring according to manufacturer recommendations and applicable codes, whichever is most stringent.

E. Mount control panel equipment 54 inches above finished floor, unless specified otherwise.

F. Install Power Supply Units (PSU) inside cabinets.

G. Connect and configure PSUs to power devices as specified.

H. Use surface metal raceway only when approved by the COR to cover alarm wiring in finished areas where conduit is not appropriate.

I. Install end-of-line resistors at the device, not in the alarm panel.

J. The system will allow authorized SSA personnel to administer and program the system.

K. The IDS furnished should be capable of remote notifications via POTS, LAN and

VOIP methods to the designated central monitoring station.

L. All alarm systems must have a zone assigned to the alarm system Panel Tamper.

M. UL 1076; UL 1610; UL 609 Certified

N. Annunciations must be configurable to covertly alert recipients.

O. Must install this system as if it were a UL Listed Burglar Alarm system for commercial facilities, even though this installation will not need a UL Certificate. In other words, it must be installed in such a way that it would pass the inspection process for a UL Commercial Burglar Alarm.

29. Physical Access Control System Specifications.

A. SSA Enterprise PACS Architecture

The Social Security Administration Office of Security and Emergency Preparedness

(OSEP) oversees the efficient and effective operation of the Agency’s Physical

Access Control System (PACS) at Headquarters and at many Regional and Field

Offices. The existing network infrastructure (SSANet) allows IP communications throughout the various, geographically disbursed offices throughout the country.

OSEP has established an enterprise Lenel OnGuard 7.3 (confirm current level with agency at the time of install) server solution (in centralized SSA data centers) with servers available corresponding to each of SSA’s 10 geographical regions. In addition, OSEP has established the Physical Access Management (PAM) application as an auditable means of requesting and approving PACS access levels within the

Lenel system. As such, we require that all new system installations use Lenel-compatible hardware as specified elsewhere in this SOW, coordinate IP connectivity to the SSANet at each location, and successfully integrate with both the Lenel enterprise servers as well as the PAM application.

B. U.S. Government Homeland Security Presidential Directive 12 (HSPD-12)/FICAM

Architecture

SSA is bound to all National Institute of Standards and Technology (NIST) and

Office of Management and Budget (OMB) requirements surrounding HSPD-12 and

Personal Identity Verification (PIV) credentials. All vetted SSA employees and contractors are in possession of a PIV smart card. Legacy proximity credentials may be used for short-term access situations. All PACS systems and components must be capable of identifying both traditional proximity access cards as well as the current

PIV card formats. The agency follows the SP800-73-2 guidelines in identifying each

PIV card uniquely with a 14-digit badge number (consisting of FASC-N Agency

Code (4 digits) + FASC-N system code (4 digits) + FASC-N Credential Number (6 digits) within the enterprise PACS system. PACS system hardware and software must be capable of identifying the PIV card using that format. Additionally, any access control technology supporting the PIV card format must also adhere to requirements outlined in FIPS 201-2, obligating conformity to ISO7816, ISO14443 and SP800-96.

30. Physical Access Control System Component Installation Requirements

A. The installer will be required to set up the Lenel panels and HID reader hardware at the field location and integrate it to the enterprise PACS under the following requirements. The contractor shall confirm current hardware standards with the agency at the time of install.

1. Install Lenel controller and reader interface boards per site design. Most field locations will require only a single controller board.

i. Intelligent System Controller – LNL-X4420

ii. Dual Reader Interface – LNL-X1320 (latest model)

iii. Single Reader Interface – LNL-1300 (latest model)

B. Install HSPD-12 compliant HID pivCLASS card readers as designated on the site design drawings.

1. Required Contact/Contactless Card Reader, FIPS-201 Compliant – HID pivCLASS RKCL40 (923NPRNEK0000Q) or similar that is compatible with

200 bit card (must be MAG w/Wiegand output type reader).

2. Required Contactless Card Reader, FIPS-201 Compliant – HID pivCLASS

R40 (921PHRNEK0002D) or similar that is compatible with 200 bit card (must be MAG w/Wiegand output type reader).

3. Readers must be configured and flashed for the “full FASC-N 200-bit card” format in order to read SSA PIV cards properly.

4. Readers must be configured to connect directly to Lenel hardware (reader interface boards and system controller – there is no HID pivCLASS PAM modules or components in the system designs at this point under this contract).

C. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

D. Connect the Lenel ISC to the SSANet using a specified, available port on the local

SSANet LAN switch, coordinate with SSA network support resources.

1. Personnel at central office will facilitate the provisioning of an available SSANet

IP Address.

2. Local LAN support personnel (ASC) will assist in identifying a suitable switch port.

3. Installer will provision IP address on Lenel controller and test connectivity.

E. Connect the Lenel controller to a specified Lenel server located at a central SSA data center.

1. Personnel at central office will provide the server IP and hostname.

2. Installer will configure Lenel controller with IP address and other required network parameters as required to establish connectivity to the specified server.

3. Installer will supply system-wiring information to enable programming and assist with proper acquisition of controller and reader data into central Lenel system.

F. Install UL 437 rated high security lock mortise lever sets that is compatible with the proposed Electric Strike.

G. Coordinate with the agency on locations of control panels, power supplies.

H. Install and configure all components required for the fully integrated access control solution.

I. If the access control door is equipped with an automatic door opener (ADO), the contractor shall ensure that the access control system will be configured to work with the ADO.

J. Install all components indicated in the design documentation.

K. Access control system must include a back-up battery system with transformer/charger that will allow the system to operate for a minimum of 24 hours on battery power and be able to read and process standard HID as well as PIV smart cards.

L. Installer will assist with testing system functionality, access to entry portals and interior access levels while onsite. Access levels and user provisioning will be done at the central office through the enterprise system. Installer will only be required to assist with onsite testing and troubleshooting once that is accomplished.

M. It is the responsibility of the contractor to calculate the load to ensure there are sufficient backup batteries for a minimum of 24 hours standby in case of a power failure.

N. Install fail-safe electric strikes at all public separation doors and fail secure on all exterior doors (if code allows). The Electronic Access Control system will operate these electric strikes to grant access with a valid credential. The electric strikes shall be a model designed for the application and use with the doorframe type and provide an appropriate power supply/transformer to power the specified number of door strikes. All electric strikes on exterior, outward opening doors shall have the appropriate ‘Jimmy Plate’ installed over the strike. Offset for any backpressure conditions.

O. Electric Strike – HES 8000 Series or equal

31. Video Intercom minimum specifications. {Optional, insert if needed}

A. Contractor shall furnish and install a color hands free video intercom kit. Install the camera intercom at the location shown on the design intent drawing.

B. Contractor shall use vandal resistant surface mount when securing the exterior intercom.

C. Contractor shall furnish and install color expansion hands free camera intercoms.

One at the (Insert site, e.g. Operation Supervisor cubicle) and the other (Insert site, e.g. Manager’s Office). See attached floor plan for installation locations.

D. Do not set-up the video intercom for remote access (remotely release electric strike at the employee entrance).

E. Required Intercom: Aiphone KB-3MRD

32. Emergency Egress minimum specification {Optional, insert if needed}

A. Install Emergency Exit Pre-Alarm monitor points, the monitor points will be programmed to be monitored on the portion 2 keypads located at the security desk and the Managers Office. EOLR will be at the device, not in the panel.

B. Install emergency egress in accordance with all codes and standards set forth by, but not limited to; IBC, NFPA 101, ANSI/BHMA Standard A156.4 for Delayed Egress

Locking Systems, and ANSI/BHMA A156.5 for minimum exit device requirements.

C. All delayed egress devices shall meet all applicable UL test requirements.

D. The emergency egress shall delay opening for 15 seconds and must allow free egress upon power failure or fire alarm. A maximum force of 15-pounds shall initiate the

15-second timer.

E. An audible alarm is required.

F. Signage stating how the delayed egress functions must be posted on the door.

ATTACHMENT A

Equipment Inventory

Template.xlsx