EXHIBIT B-b (OPSS Standard PS5 Like FO ESS SOW 07192024).docx

EXHIBIT B-b

1. Scope of Work The Woonsoker RI Social Security Administration (SSA) Field Office requires installation and/or upgrade and support services for the following electronic security systems Video Surveillance System (VSS), Physical Access Control (PACS) and Intrusion Detection System (IDS) to include Duress Alarms. The office is located at TBD.

General A. This scope of work must be followed by the winning bidder, sub-contractor and Lessor.

B. All requirements must be adhered to, including notification of project award, discussion of the project prior to start and providing a project schedule.

C. The contracted installer of these systems will herein be referred to as the Contractor.

D. The Contractor:

1. Shall provide all management, supervision, labor, material, supplies, and equipment necessary to plan, schedule, coordinate, and assure effective site system design (if necessary), installation, maintenance, inventory management, and miscellaneous work and repair of security equipment at Agency offices. Contractor services provided will be performed in accordance with the requirements, terms and conditions of this scope of work.

2. Will provide all tools and items to complete the services and activities required under this contract. Remove all unused legacy system cables upon completion of the new system.

3. Will propose a schedule of dates and times that the installation will be performed, including anticipated completion date. This information shall be updated as necessary.

E. Installation:

1. Will furnish and install all equipment, cables, wires, connector, labor and complete any electrical requirements that are necessary for the installation of the electronic security systems contained within this statement of work.

2. With the customer present, the contractor will ask the agency contact about the exact proposed location of each required device. This will be done at the start of the job with the contractor and responsible agency contact. Any major changes need to be approved by the contracting officer. (For example, “it’s Okay to put the keypad on the right side of the door instead of the left side” with agency contact approval – cannot put the keypad in someone’s private office if it was supposed to be at the front door without the approval of the contracting officer as this would change the “scope” of the project).

3. Coordinate activities with the Facility Manager; if any proposed work is deemed disruptive to the operation or occupants, the Contractor will need to schedule work outside of normal hours at no additional cost to the Government.

4. If required the contractor must install all necessary electrical outlets and complete hardwiring of circuits, as needed (or have wired by a licensed electrician), to ensure that all devices function as designed. All electrical work necessary to make the systems function is the responsibility of the Contractor.

5. Will install system in accordance with all codes and standards set forth by, but not limited to; The National Electrical Code, Underwriters Laboratories and the Local Jurisdiction Having Authority, with a minimum of shielded plenum wiring using plenum or riser wire as required by code/standards. All wiring will be concealed and of a gauge no less than 18. No mechanical pulling of wires is allowed.

6. Must securely fasten all wires in the ceiling to overhead wire supports to prevent damage that may occur from existing or future wire runs in the ceilings.

7. Every item, including each detector, sensor, duress button, control panel, transformer, LAN/Data jack, etc. must be labeled to show the device and/or zone number on the front cover of the specific device.

8. The Contractor shall label all wiring with information that allows for easy identification from either terminating location. Except for patch cables, all cable installations will include cable-labeling, the Contractor shall install Plenum-rated cable.

9. Upon completion of each day's work clean, remove and dispose of any dirt and debris.

10. The Contractor shall install all components securely and in accordance with the manufacturer instructions at the indicated locations on the drawing. The Contractor shall verify all components of any existing system as functional when incorporating equipment with new systems.

11. After job completion and agency acceptance, any materials furnished by the contractor become the sole property of the Government.

F. The de-installation and Disposal of Existing Equipment

1. If applicable, the Contractor shall provide de-installation services upon an order from the agency. As applicable, de-installation may include removal of existing VSS, IDS and PACS equipment in preparation for installing agency- approved equipment. If appropriate, de-installation activities will include the disposal of any trash and equipment, and may include shipping of designated equipment.

2. The Contractor will securely handle any system components that could potentially contain sensitive information and return the components to the agency. Examples of system components are computers, hard drives, digital storage arrays, or equipment with stored memory.

G. Repairing Damage:

1. Installation work shall be carefully laid out in advance to prevent unnecessary damage to existing walls, ceilings, doors, doorframes, etc. Where cutting, channeling, chasing, or drilling are done in any part of the building during installation, these parts must be repaired, refinished, repainted, and all debris cleaned up. Where existing equipment is to be removed, all holes, wall damage, etc. must be repaired, refinished, repainted, and all debris cleaned up after removal unless otherwise stated. All repair work shall utilize materials to match the surface being repaired and shall be finished flush with the existing surfaces. SSA will not provide materials to the Contractor for the repair of damages. If matching materials are no longer available and items cannot be matched for the site, the Contractor shall notify the agency. The agency shall contact GSA for acceptable alternatives and notify the Contractor.

H. Deliverables

1. Provide “as-built” drawings depicting the location of each specific device for all IDS, PACS, VSS, etc. systems to include wiring paths, zone descriptions, camera list, etc. The as-built drawings must be prepared in AutoCAD and delivered in an electronic format (preferably as a PDF). Copies of the as-built drawings shall be provided to the site representative and sent to DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov.

2. Equipment Inventory List – At a minimum, the listing should contain the Site Code, Site Name and Address, System/Component/Description, Manufacturer, Part Number/Model Number, Serial Number, Device location, and for software what version of the software that was installed. If there are multiples of the same device i.e. duress buttons, recommend listing the information above and provide the quantity instead of locations. Copies of the equipment inventory list shall be provided to the site representative and sent to DCBFQM.OSEP.OPSS.Field.Operations@ssa.gov.

3. Passwords and Software - The Contractor shall ensure that office management has all the passwords for hardware and system software for safekeeping.

I. Training

1. The Contractor shall provide user and original equipment manufacturer (OEM) training for the provided systems upon completion of the installation. Training on the equipment will include the operation of any software associated with the system to end-user key personnel. Specific areas of training may include operational technologies and techniques, minor and routine system testing, and troubleshooting tips. The Contractor shall demonstrate full functionality to the on-site end user.

2. The following training is required:

i. Access Control: The Contractor shall ensure all personnel trained understand how to gain access to the facility using their SSA credentials.

ii. IDS: The Contractor shall ensure all personnel trained understand how to enable/disable alarm functions.

iii. VSS Recording: The Contractor shall ensure all trained personnel understand how to play back video recordings on the new VSS system. The Contractor will ensure the agency personnel understands how to offload digital VSS recordings onto external media.

iv. Training Documentation: The Contractor shall provide written training documentation during training sessions, for future reference by other agency personnel, to include a quick reference card for complex equipment to serve as an ad-hoc memory jogger for an experienced user. Basic operator instruction summaries shall be provided for all major items of equipment and major subassemblies that have operator controls.

J. Warranty

1. The Contractor shall provide warranty for all work under this contract for a period of one (1) year after final acceptance by the agency. The Contractor shall be responsible for corrections due to work performed for the one (1) year period at no additional cost to the agency.

2. The Contractor shall provide warranty for all furnished and installed materials and equipment under this contract for a period of one (1) year after final acceptance by the agency. If any materials or equipment fail or malfunction under normal usage during the year, the Contractor shall be responsible for repairing or replacing the defective item at no additional cost to the agency. The Contractor shall not be liable for failures or malfunctions caused from abnormal use.

3. If an agency furnished, Contractor installed, item fails or malfunctions under normal usage during the year, the agency shall be responsible for repairing or replacing the defective item. However, if an agency furnished, Contractor installed, item fails or malfunctions due to the Contractor’s installation or work, the Contractor shall be responsible for repairing or replacing the defective item at no additional cost to the agency.

4. Response and Repair Times

i. After receipt of a maintenance request, the Contractor’s must meet the requirements set by the Interagency Security Committee (ISC) for a specific Facility Security Level (FSL). The technician shall arrive on site within five business days for FSL I and II, 72 hours for FSL III, and 24 hours for FSL IV. Check with office personnel to confirm what the exact FSL is for the office.

ii. The contractor technician will arrive with the tools and skills necessary to diagnose the problem. The Contractor shall effect full corrective action by either repairing or replacing malfunctioning components. The Contractor shall arrive on-site to perform repair service, Monday through Friday, between the hours of 7:30 a.m. and 4:00 p.m. local time zone (at the respective office), excluding Federal holidays.

2. Video Surveillance System (VSS) Specifications.

A. The Social Security Administration Office of Security and Emergency Preparedness (OSEP) oversees the efficient and effective operation of the Agency’s Video Surveillance System (VSS) at Headquarters and at many Regional and Field Offices. The existing network infrastructure (SSANet) allows IP communications throughout the various, geographically disbursed offices throughout the country. OSEP has established corporate video management system utilizing Milestone software. SSA requires all new system installations use the milestone video management software, Razberi network video recorders and Axis cameras, which are specified elsewhere in this SOW. By installing the equipment listed in the SOW, it will allow SSA (future use) to connect the VSS to the SSANet with minimal equipment upgrade, and successfully integrate with the VSS corporate server.

B. The National Defense Authorization Act (NDAA) for Fiscal Year 2019 (P.L. 115-232; H.R. 5515 (the John S. McCain National Defense Authorization Act for Fiscal Year 2019) prohibits acquisition and repair of telecommunication and video surveillance equipment from certain Chinese manufacturers. Specifically, this law prohibits HIKvision, Dahua, ZTE, and other Chinese manufactured equipment and components for US government critical infrastructure and national security usage. The prohibition aspect of the law became effective on August 13, 2019.

C. The Contractor shall install all system components and accessories in accordance with the manufacturer’s instructions, NFPA 70 NEC, and shall furnish all necessary connectors, terminators, interconnections, services, and adjustments required for a complete VSS.

D. The VSS shall consist of all cameras, storage, power, lenses, mounts, housings and video transmission system components necessary to provide an IP based video system.

E. The Contractor shall be responsible for the integration, setup and programming of the VSS.

F. CAT-6 structured cable and associated wiring will be routed through the hollow wall or surfaced mounted inside the “Panduit Duct & Raceway”. All wiring that is above the ceiling must be tied or strapped and not directly lying on top of tiles.

G. Install, preferably, one PC workstation in Managers’ office with the ability to access and download video footage.

H. Install decoders at all other designated personnel workspaces, spot monitors, and at the guard desk. For decoders located at personnel workspaces and guard desks, create multiple views so every camera is accessible from each decoder. Consult with personnel onsite to determine the preferred types of views. Provide a wireless mouse with each decoder (excluding spot monitors located at entrance) in order to allow personnel and the guard to rotate through different views from the lock screen. Label each camera on the decoder so that the camera label can be seen on the view display.

I. Install cameras in the interior of the office. The installed cameras must provide complete coverage of all public contact areas. Refer to Design Intent Drawings for approximate locations. Final locations must be coordinated with Office Manager.

J. Install cameras on the exterior of the office (if applicable). The installed cameras must provide complete coverage of the public and employee entrances, windows, utilities and waste management dumpsters located on SSA property. Refer to Design Intent Drawings for approximate locations. Final locations must be coordinated with Office Manager.

K. Install Wall Mounted LCD Monitor at location indicated on the drawing. At a minimum, the monitor shall display the camera coverage outside the employee entrance. Contractor shall coordinate with the agency personnel to determine if other views are required.

L. The field of view must be coordinated between the agency representative on-site and the Contractor to enable monitoring and recording of the desired area of interest.

M. Test VSS for proper operation, train agency personnel on proper system operation procedures. Special attention must be given to the training of the video recorder. Train the manager and designated personnel how to record, retrieve and download images and files. Provide each camera serial number and IP address to the manager and OPSS.

3. Video Management System (VMS) minimum specifications A. Open API for integration, web-based remote access to video storage, 24/365 operability, configure cameras individually over the VMS, and offline activation of license with a 30-day grace period.

B. Authenticate with access levels and roles.

C. Able to support IP Cameras, encoders and NVRs from multiple manufactures.

D. Export video in native database format and share external views.

E. Camera and Channel License VMS Software F. Minimum 30 days of video storage based on calculation of 15 frames per second (fps) based on the following schedule:

1. Interior Cameras Monday – Friday

i. Record at all times from 0600 to 1800

ii. Record on motion from 1800 to 0600

2. Interior Cameras Saturday – Sunday

i. Record on motion only for both days

3. Exterior Cameras

i. Record 24/7 G. Enables administrators to define privacy masks for individual cameras, to hide areas in the camera view that must not be visible or recorded.

H. Meet or exceed standards for H.264 capable (legacy\older codecs not acceptable).

I. Video streaming: multi-stream and multi-head camera support.

J. Required VMS - Milestone XProtect Professional Plus with all appropriate licenses. SSA currently uses Milestone Xprotect Professional 2023 R2. Verify with SSA for current VMS software version and revision.

4. Video Recorder Minimum Specifications A. Network Video Recorder or Server and Switch configuration B. Embedded PoE with 32 ports with up to 450W total output C. Intel Core i5-10500TE D. Windows 10 Enterprise 2019 LTSC E. Memory: Minimum of 32 GB F. Video Output: HDMI/VGA G. 2 x USB 2.0 H. Video Storage:

a. 4 x SATA III (6.0 Gbs) Hot swap bays

b. RAID 0

c. Enterprise-class HDDs I. Rack mounted.

J. Required - Razberi SS32-i5 Pro (for technical information contact Razberi) K. Required - If additional ports are needed then the contractor may use a Razberi 8 or 24 port EndpointDefender (port extender) (for technical information contact Razberi). If the EPD is not available, the the Axis T8524 is an acceptable alternative.

5. FEI Windows Interior IP Camera Minimum Specifications A. For the FEI Windows the contractor must provide the Axis F9114 Kit . The AXIS F9114 Surveillance System has all the components needed to deploy a multi-view surveillance system. The system enables simultaneous streaming of 1080p videos from four different areas through one Ethernet port and only requires one VSS license for the F9114 Main Unit vice a license for each individual camera.

1. Required: F9114 Surveillance Kit (includes 1-F34 Main Unit, 4 F-4105-LRE Sensor Units, 4-Dome Accessories)

i. If F9114 Kit is unavailable, recommend using the Hanwha QND-8010R

6. Reception Area/Hearing Room/PI Room/Shared Services Interior IP Camera Minimum Specifications A. Progressive Scan, 4MP resolution, H.264/H.265 compression, day/night capability, multiple streaming, digital pan tilt zoom, vandal resistant housing, POE and password protection.

1. Required: Axis M3086-V

a. If the M3086-V is unavailable, recommend using the Hanwha QND-8010R is acceptable.

7. Reception Area IP Panoramic Camera Minimum Specifications A. Progressive Scan, 12MP resolution, H.264/H.265 compression, day/night capability, multiple streaming, digital pan tilt zoom, digital PT of panorama, corner, corridor and quad views, preset positions, guard tours, vandal resistant housing, POE and password protection.

1. Required: Axis M4328-P Panoramic Camera

8. Exterior 180 degree IP Camera Minimum Specifications A. Progressive Scan, 13MP multisensor with seamless stitching, H.264/H265 compression, day/night capability, multiple streaming, digital pan tilt zoom, environmental and vandal resistant housing, POE and password protection.

1. Required: Axis P3818-PVE

9. Exterior IP Camera Minimum Specifications A. Progressive Scan, 5MP resolution, H.264 compression, day/night capability, multiple streaming, digital pan tilt zoom, environmental and vandal resistant housing, POE and password protection, varifocal lens.

1. Required: Axis P3267-LVE

a. If the P3267 is unavailable, recommend using the Hanwha QND-8080R is acceptable.

10. Camera Mounts A. The Contractor shall install the camera mounts as specified by the manufacturer and provide mounting hardware sized appropriately to secure the mount, camera and housing; provide grounding and surge protection for each exterior camera installation; and provide/connect electrical and signal transmission cabling to each camera.

11. Wall Monitor and Mount Minimum Specifications A. 42” (Minimum) 1080P Color LCD Monitor

B. WALL MOUNT FOR LCD MONITOR

C. Smart TVs are not authorized for VSS use.

12. Desk Mounted Monitor A. 24” (minimum) 1080P Color LCD Monitor B. Smart TVs are not authorized for VSS use.

13. Workstation Minimum Specifications A. The workstation must meet or exceed the minimum specifications for the client workstation software stated in the manufacturers VMS documentation.

1. A desktop PC/workstation is required. The workstation must have a wireless keyboard and mouse, either i5 or i7 processor.

2. A minimum of a 22” monitor screen if desk mounted and a minimum 42” if the monitor is to be walled mounted.

3. Second Video Stream from cameras to the workstations shall be 4CIF.

4. Contractor shall install data jacks in the same location that has a workstation.

B. In Field Offices, VSS workstations with the ability to access and download video footage will be installed in the District Managers office.

C. If there is a OHO Permanent Remote Site (PRS) co-located with the Field Office, a VSS workstation with the ability to access and download video footage will be installed in the Administrative Law Judge (ALJ) Prep Area.

14. Decoder Minimum Specification A. Single HD monitor output (HDMI) B. Layouts from 1x1 to 4x4 C. Decode IP streams up to 4K resolution D. Codec: H.264/H.265 E. Required: IOnode R100S Decoder

15. Keyboard-Video-Mouse (KVM) Minimum Specifications A. 19” LCD screen, rack mounted, resolution of 1280x1024, and supports eight computers.

1. Required: Aten KL1108VN-A9A-AAB

2. Required: Aten KA7170 dongle (to connect NVR to KVM)

16. Uninterruptable Power Supply (UPS) A. Rack mounted UPS to provide backup for the VSS equipment that will allow the system to operate for 30 minutes base with a minimum output power of 1200 Watts. The nominal output and input voltage shall be 120V.

17. Cabling Minimum Specifications A. Unshielded Plenum Rated Cat6 Purple.

i. The color blue for cabling is not authorized since that is associated with IT cabling.

18. Rack Mounted Surge Protector A. Ditek DTK-RM12POE (for exterior cameras only).

19. Equipment Rack Specifications A. If the contractor cannot use the existing racks located in the Data Communication Room (DCR) then the contractor shall provide a four-post rack. Contractor shall verify rack mount size to hold all rack mounted equipment that will be part of the VMS.

20. Additional VSS Instructions A. The Contractor shall conceal VSS wiring in the wall, floor, or ceiling to prevent safety hazards. The Contractor shall conceal wiring in a conduit to provide a professional finish when wiring outside the walls or ceiling. The agency shall accept a combination of concealed and conduit wiring for a site. The Contractor shall conceal wiring, if required, on exterior walls and roofing with approval from the customer. The Contractor shall meet all safety standards and building codes. The Contractor shall include all additional wiring work, such as firewall penetration.

B. Install and configure all components required for the fully integrated VSS solution.

C. The Contractor shall provide as-built documents to the agency for the complete installation of VSS equipment.

D. Remove any existing cameras that will not be part of the new VSS.

21. Intrusion Detection System Specifications A. The IDS system shall have the capability to monitor each public customer service desk and other areas in the office as separate zones. The manufacturer product guide will always take precedence over recommendations in this statement of work.

B. The IDS/Duress alarm shall be connected to the Department of Homeland Security (DHS)/Federal Protective Service (FPS) MegaCenter per DHS/FPS requirements. The Multi-Regional Emergency Management Control Centers (MegaCenters) handle alarm monitoring and radio dispatch of Federal Protective Service Officers (PSO) and Contract Guards for alarm response, criminal activities and emergencies for agency offices in GSA federally owned properties and leased space.

C. The Contractor shall provide the designated DHS/FPS MegaCenter, (DMC) with a complete zone list with alpha descriptions, as outlined in the MegaCenter Alarm Requirements Document, (MAR Package). Assist the DMC with panel programming. The contractor shall provide the DMC with the complete zone list 24 hours before scheduled testing of equipment. Zone all sensors individually unless indicated otherwise.

D. The FPS MegaCenter will only accept UL commercially listed panels from Bosch (Radionics), Honeywell or DMP. Vendor must be a licensed distributer and installer of the system they are providing.

E. The IDS shall consist of alarm panel, keypads, expansion modules, recessed magnetic door contacts, dual technology ceiling mounted passive infrared motion detectors, auxiliary DC power supply, battery backup, surge protector, hard wired or wireless momentary duress push buttons switches, 22/2, 22/4 Plenum rated wire, and miscellaneous hardware. If the existing IDS equipment meets the minimum specifications then the contractor may reuse the existing IDS equipment.

F. IDS sensors shall provide complete coverage of all perimeter doors, roof hatches and ground floor windows. Sensors should be redundant and programmed to prevent nuisance alarms.

G. Duress alarms shall be installed discreetly at all public customer service desks, guard stations and other selected areas within offices, refer to design drawings.

H. IDS Panel Keypads must be installed in close proximity to management offices, the guard station and other select locations within offices, refer to design drawings.

I. Each point of the system shall be individually identified at the keypads and in the MegaCenter. All alarm zones/points including duress must be tested to the MegaCenter.

22. IDS Control Panel Minimum Requirements A. Listed for UL Commercial Burglary.

B. Supports up to 128 zones.

C. Supports commercial wireless devices.

D. Provides integrated CCTV switching capability.

E. Provides supervision of peripheral devices.

F. Supports up to 96 optional relay outputs.

G. Supports alarm reporting via Internet

H. Has the capability to provide remote notifications via POTS, LAN and VOIP methods to the designated FPS Mega Center. SSA currently employs POTS, the LAN and VOIP options should be provided for future use and future proofing

23. IDS Panel Keypad Minimum Requirements A. Color touch screen keypad display B. Illuminated LCD display for system messages C. User-friendly menu operation D. Graphical buttons for data or command entry E. System instructions through integrated on-screen help F. Display multiple events in order of priority G. Command button for performing functions, enter button for passcode entry H. Sounder emits distinct warning tones and allows volume adjustment

24. IDS Sensors (Photoelectric, Motion, Position, Acoustic and Seismic Sensors) Minimum Requirements A. UL Standards 639

B. ANSR.BP1448

C. IP54 rated D. Motion Sensors should comprise multiple sensor technologies (such as microwave, PIR, etc.)

E. Incorporate false alarm reduction technology F. Be designed for deployment and application

25. Duress Alarms Minimum Requirements A. Wired duress buttons at security posts, customer service and public interview stations.

B. Duress buttons for office staff must be configured to annunciate at all office IDS keypads and the FPS Mega Center.

C. Duress buttons for security posts will annunciate locally and at the FPS Mega Center.

D. Configurable annunciations to alert recipients.

E. UL 636 Certified F. The Contractor will mount buttons to the underside desk/counter at the locations indicated. Mount buttons securely to the desk, wall or specified position using specified mounting standards. If the duress buttons are installed in a location under the desk then the device must be installed in a location to prevent the employee from accidently activating the alarm.

G. For a PRS, the duress button shall be installed in the knee space of the judge’s bench. Upon activation the duress button, two simultaneous events shall occur:

i. Disengagement of the electronic strike on the affected interior hearing room door. The duress button shall require an additional set of wire leads to a power supply and the electric strike, a timer will keep the electric strike disengaged until a hearing room employee opens the door, at which time the timer will immediately shutdown so the electric strike will re-engage and the door is automatically secured when closed. The timer should be set for fifteen (15 seconds). Once closed, the hearing room door will remain secured and the duress button will not be able to disengage, the electric strike (a second time) until the IDS is reset by a Hearing Room Employee.

ii. Activation of an alarm locally and at the appropriate FPS and/or monitoring facility.

26. Power Supplies Minimum Requirements A. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

B. Power supplies shall indicate power loss, low battery and restorations.

C. The system shall indicate exact location of power supply, location of panel, panel number, breaker and number.

D. Each power supply shall have a battery (s) capable of maintaining the IDS for a minimum of 8 hours.

27. Additional IDS Instructions A. When installing magnetic door contacts, the contractor shall wire each device on a separate zone to alarm panel. End of Line Resistor (EOLR) will be at the device, not in the alarm panel. See design drawing.

B. When installing remote stations (keypads) the contractor shall wire keypads to control panel per manufacturer specifications.

C. When installing 360° dual tech ceiling mounted passive infrared motion detectors the contractor shall wire each device on a separate zone to alarm panel. EOLR will be at the device, not in the panel.

D. Install components and wiring according to manufacturer recommendations and applicable codes, whichever is most stringent.

E. Mount control panel equipment 54 inches above finished floor, unless specified otherwise.

F. Install Power Supply Units (PSU) inside cabinets.

G. Connect and configure PSUs to power devices as specified.

H. Use surface metal raceway only when approved by the COR to cover alarm wiring in finished areas where conduit is not appropriate.

I. Install end-of-line resistors at the device, not in the alarm panel.

J. The system will allow authorized SSA personnel to administer and program the system.

K. The IDS furnished should be capable of remote notifications via POTS, LAN and VOIP methods to the designated central monitoring station.

L. All alarm systems must have a zone assigned to the alarm system Panel Tamper.

M. UL Certified N. Annunciations must be configurable to covertly alert recipients.

O. Must install this system as if it were a UL Listed Burglar Alarm system for commercial facilities, even though this installation will not need a UL Certificate. In other words, it must be installed in such a way that it would pass the inspection process for a UL Commercial Burglar Alarm.

28. Physical Access Control System Specifications.

A. SSA Enterprise PACS Architecture The Social Security Administration Office of Security and Emergency Preparedness (OSEP) oversees the efficient and effective operation of the Agency’s Physical Access Control System (PACS) at Headquarters and at many Regional and Field Offices. The existing network infrastructure (SSANet) allows IP communications throughout the various, geographically disbursed offices throughout the country. OSEP has established an enterprise Lenel OnGuard 8.0 (confirm current level with agency at the time of install) server solution (in centralized SSA data centers) with servers available corresponding to each of SSA’s 10 geographical regions. In addition, OSEP has established the Physical Access Management (PAM) application as an auditable means of requesting and approving PACS access levels within the Lenel system. As such, we require that all new system installations use Lenel-compatible hardware as specified elsewhere in this SOW, coordinate IP connectivity to the SSANet at each location, and successfully integrate with both the Lenel enterprise servers as well as the PAM application.

B. U.S. Government Homeland Security Presidential Directive 12 (HSPD-12)/FICAM Architecture SSA is bound to all National Institute of Standards and Technology (NIST) and Office of Management and Budget (OMB) requirements surrounding HSPD-12 and Personal Identity Verification (PIV) credentials. All vetted SSA employees and contractors are in possession of a PIV smart card. Legacy proximity credentials may be used for short-term access situations. All PACS systems and components must be capable of identifying both traditional proximity access cards as well as the current PIV card formats. The agency follows the SP800-73-2 guidelines in identifying each PIV card uniquely with a 14-digit badge number (consisting of FASC-N Agency Code (4 digits) + FASC-N system code (4 digits) + FASC-N Credential Number (6 digits) within the enterprise PACS system. PACS system hardware and software must be capable of identifying the PIV card using that format. Additionally, any access control technology supporting the PIV card format must also adhere to requirements outlined in FIPS 201-2, obligating conformity to ISO7816, ISO14443 and SP800-96.

29. Physical Access Control System Component Installation Requirements A. The installer will be required to set up the Lenel panels and HID reader hardware at the field location and integrate it to the enterprise PACS under the following requirements. The contractor shall confirm current hardware standards with the agency at the time of install.

1. Install Lenel controller and reader interface boards per site design. Most field locations will require only a single controller board.

i. Intelligent System Controller – LNL-X4420

ii. Dual Reader Interface – LNL-1320 (latest model)

iii. Single Reader Interface – LNL-1300 (latest model) B. Install HSPD-12 compliant HID pivCLASS card readers as designated on the site design drawings.

1. Required Contact/Contactless Card Reader, FIPS-201 Compliant – HID pivCLASS RKCL40 (923NPPTEK0000U) or similar that is compatible with 200 bit card (must be OSDP Magnetic output type reader).

a. If the HID reader is unavailable, recommend using the Identiv uTrust Card Reader w/keypad is acceptable: 8206ABTRL2B

2. Required Contactless Card Reader, FIPS-201 Compliant – HID pivCLASS R40 (920PHPNEK000P2) or similar that is compatible with 200 bit card (must be OSDP Magnetic output type reader).

a. If the HID reader is unavailable, recommend using the Identiv uTrust Card Reader w/out keypad is acceptable: 8106ABPRL2B

3. Readers must be configured and flashed for the “full FASC-N 200-bit card” format in order to read SSA PIV cards properly.

4. Readers must be configured to connect directly to Lenel hardware (reader interface boards and system controller – there is no HID pivCLASS PAM modules or components in the system designs at this point under this contract).

C. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

D. Connect the Lenel ISC to the SSANet using a specified, available port on the local SSANet LAN switch, coordinate with SSA network support resources.

1. Personnel at central office will facilitate the provisioning of an available SSANet IP Address.

2. Local LAN support personnel (ASC) will assist in identifying a suitable switch port.

3. Installer will provision IP address on Lenel controller and test connectivity.

E. Connect the Lenel controller to a specified Lenel server located at a central SSA data center.

1. Personnel at central office will provide the server IP and hostname.

2. Installer will configure Lenel controller with IP address and other required network parameters as required to establish connectivity to the specified server.

3. Installer will supply system-wiring information to enable programming and assist with proper acquisition of controller and reader data into central Lenel system.

F. Install UL 437 rated high security lock mortise lever sets that is compatible with the proposed Electric Strike.

G. Coordinate with the agency on locations of control panels, power supplies.

H. Install and configure all components required for the fully integrated access control solution.

I. If the access control door is equipped with an automatic door opener (ADO), the contractor shall ensure that the access control system will be configured to work with the ADO.

J. Install all components indicated in the design documentation.

K. Access control system must include a back-up battery system with transformer/charger that will allow the system to operate for a minimum of 24 hours on battery power and be able to read and process standard HID as well as PIV smart cards.

L. Installer will assist with testing system functionality, access to entry portals and interior access levels while onsite. Access levels and user provisioning will be done at the central office through the enterprise system. Installer will only be required to assist with onsite testing and troubleshooting once that is accomplished.

M. It is the responsibility of the contractor to calculate the load to ensure there are sufficient backup batteries for a minimum of 24 hours standby in case of a power failure.

N. Install fail-safe electric strikes at all public separation doors and fail secure on all exterior doors (if code allows). The Electronic Access Control system will operate these electric strikes to grant access with a valid credential. The electric strikes shall be a model designed for the application and use with the doorframe type and provide an appropriate power supply/transformer to power the specified number of door strikes. All electric strikes on exterior, outward opening doors shall have the appropriate ‘Jimmy Plate’ installed over the strike. Offset for any backpressure conditions.

O. Electric Strike – HES 8000 Series or equal

30. Video Intercom minimum specifications. {Optional, insert if needed} A. Contractor shall furnish and install a color hands free video intercom kit. Install the camera intercom at the location shown on the design intent drawing.

B. Contractor shall use vandal resistant surface mount when securing the exterior intercom.

C. Contractor shall furnish and install color expansion hands free camera intercoms. One at the (Insert site, e.g. Operation Supervisor cubicle) and the other (Insert site, e.g. Manager’s Office). See attached floor plan for installation locations.

D. Do not set-up the video intercom for remote access (remotely release electric strike at the employee entrance).

E. Required Intercom: Aiphone KB-3MRD

31. Emergency Egress minimum specification {Optional, insert if needed} A. Install Emergency Exit Pre-Alarm monitor points, the monitor points will be programmed to be monitored on the portion 2 keypads located at the security desk and the Managers Office. EOLR will be at the device, not in the panel.

B. Install emergency egress in accordance with all codes and standards set forth by, but not limited to; IBC, NFPA 101, ANSI/BHMA Standard A156.4 for Delayed Egress Locking Systems, and ANSI/BHMA A156.5 for minimum exit device requirements.

C. All delayed egress devices shall meet all applicable UL test requirements.

D. The emergency egress shall delay opening for 15 seconds and must allow free egress upon power failure or fire alarm. A maximum force of 15-pounds shall initiate the 15-second timer.

E. An audible alarm is required.

F. Signage stating how the delayed egress functions must be posted on the door.

32. Emergency Egress Minimum Specification {Optional, insert if needed} G. Install Emergency Exit Pre-Alarm monitor points. The monitor points will be programmed to be monitored on the portion 2 keypads located at the security desk and the Managers Office. EOLR will be at the device, not in the panel.

H. Install emergency egress in accordance with all codes and standards set forth by, but not limited to;local fire codes, IBC, NFPA 101, ANSI/BHMA Standard A156.4 for Delayed Egress Locking Systems, and ANSI/BHMA A156.5 for minimum exit device requirements.

I. All delayed egress devices shall meet all applicable UL test requirements.

J. The emergency egress shall delay opening for 15 seconds and must allow free egress upon power failure or fire alarm. A maximum force of 15-pounds shall initiate the 15-second timer.

K. An audible alarm is required.

L. Signage stating how the delayed egress functions must be posted on the door.

PROPERTY OF THE UNITED STATES GOVERNMENT – FOR OFFICIAL USE ONLY

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed