General Scope of Work

FPS Area Command Requirements

Cleveland OH

1. Purpose

The purpose of this Scope of Work (SOW) is to define the requirements, performance expectations, and construction standards necessary to deliver a fully functional Federal Protective Service (FPS) District Command Office located within the Edith Green – Wendell Wyatt Federal Building that supports mission-critical federal law enforcement operations. This project will provide FPS with secure, modern, and operationally efficient facilities that meet the space, security, technology, and operational needs identified in the Region 10 Program of Requirements (POR).

The completed build-out shall accommodate 9 FPS personnel, provide specialized mission spaces including detainee holding, tactical storage, weapons and ammunition storage, K9 facilities, secure evidence areas, and an IT/LAN room supporting DHS-approved security systems. The purpose of this SOW is to ensure that all architectural, mechanical, electrical, security, and IT infrastructure is designed and constructed to federal standards, enabling FPS to effectively execute its law enforcement, protective, and emergency response missions.

2. Security Systems Scope of Work

AREA COMMAND OFFICE SECURITY PLAN

Using DHS-Approved Gallagher Security Equipment & Systems

Intrusion Detection System (IDS)

2.1 Introduction

The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS, Security Operations Branch (SOB), actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal government.

The following guidelines have been developed by the Department of Homeland Security (DHS), Management Directorate, Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and government leased spaces. The guidelines and regulations were developed with the notion that the security posture of each federal building or government leased space is unique.

This guideline is for purchase and installation of a new Intrusion Detection Systems (IDS), and all additional equipment and appurtenances necessary for a fully functional IDS system.

• Construction/Installation General Guidelines

• Design Standards

2..1 Design Limitations – During design and planning activities, the Contractor shall advise the PM Technical POC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This includes, but is not limited to, limitations as a result of insufficient heating, ventilation and HVAC, power, rack, console, and space requirements.

2..2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, and HVAC and power requirements for the proposed Intrusion Detection System

(IDS).

2..3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components compatible with the FSP alarm Mega Center and approved by the Federal Protective Service in system design.

2..4 Backup Power Requirements – The Contractor shall provide uninterruptable power supplies for all equipment necessary to ensure the IDS remains fully operational for a minimum of four (4) hours and to allow for an orderly shutdown of the system, if necessary.

2..5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams (digital and physical) representing planned and final device terminations to and between system equipment and components.

3 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components. Electrical and Cabling Requirements

• Wires, cables, and fiber shall meet applicable requirements of the National Electrical Code (NEC) and applicable Underwriter Laboratories (UL) listings for type and method of installation.

• Equipment, components, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and applicable requirements of National Fire Protection Association (NFPA) and/or the NEC.

• All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

• All currently applicable federal and national codes, including electrical and life safety, shall be adhered to in the system design. If there are conflicts in the federal and national code provisions and requirements, the more stringent requirements will prevail.

• All wire, cable, and fiber run outside of secure areas shall be secured against unauthorized access.

• Where conduit is installed, a minimum of ¾” shall be used. Installed conduit shall be sized for fill requirements in accordance with the NEC.

• All new conduit installed shall use green electrical tape to identify the conduit as FPS security use. All cabling not installed in conduit shall use green electrical tape to identify cabling as FPS security. Green tape shall be used every 20 feet on new cabling and the conduit.

• All conduit, junction boxes and back boxes shall be concealed within walls, floors, and/or ceilings. In locations where this is not possible, an exception shall be approved by GSA and FPS before installation or conduit, junction boxes, and back boxes.

• All conduit infrastructure shall be continuous from the device junction box to the secure security closet of the alarm control panel.

• As an alternative, if approved by GSA and FPS, and allowed by applicable codes and/or regulations, wire, cable, and fiber may be installed utilizing wire molding, cable trays, and innerduct.

• Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations and approved by GSA and FPS.

• No wire, cable, or fiber shall not be left unsupported, attached, or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

• All new wire, cable, and fiber shall not contain splices between equipment termination points. If a splice cannot be avoided, it shall be consistent with industry’s best practices for splicing cable and approved by the Federal Protective Service.

• All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

• Compression connectors shall only be used where recommended by the manufacturer and/or industry best practices.

• All equipment connected to AC power shall be surge protected per Institute of Electrical and Electronic Engineers (IEEE). Fuses shall not be used for surge protection.

• All IDS electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). All equipment necessary for continuous system operation must be uninterrupted during a power outage. The UPS shall be sufficient to power the entire system in standby for four (4) hours and five

(5) minutes in alarm condition, at a minimum.

• All Ethernet network cabling shall be CAT 6 or better twisted pair cable or multimode/single mode fiber optic cable, UL listed for its intended use (e.g. indoor, outdoor, plenum). Shielded Twisted Pair (STP) shall be used for any outside equipment or any areas that may be subject to Electromagnetic Interference

(EMI).

• Two (2) conductor cables, sized in accordance with the NEC, shall be used for device power and alarm contact of the devices.

• All Ethernet cabling shall be installed in accordance with ANSI/TIA/EIA-568-B Commercial Building Telecommunications Cabling Standard. All cable terminations shall conform to ANSI/TIA/EIA-568-B standards. A few key areas of concern, but not all inclusive, are:

• Pair twists shall be maintained as close as possible to the point of termination.

• Strip back only as much jacket as is required to terminate individual pairs.

• All four pairs shall be terminated.

• Pin/Pair assignments shall follow the T568B configuration.

• All cabling, fiber, and connections shall be tested. The test device shall provide an electronic copy of the test results. Test results shall be printed and included in the Operations and Maintenance (O&M) manual.

• All cable and fiber installed in new conduit shall include a pull string for future use. If existing conduit with an existing pull string is used in any location, it shall be replaced with a new pull string. If an existing conduit is used for cable or fiber installation that does not have a pull string, one shall be installed.

• All wire, cable, or fiber that is existing and to be reused in support of this guideline shall be tested prior to use. Test reports shall be supplied to FPS for review and approval for use of existing wire, cable, and fiber.

Test report(s) shall also be provided with final installation documentation and denoted that wire, cable, or fiber was previously installed.

4 Materials and Equipment

• All system hardware and software components shall be produced by companies normally involved in the production of IDS hardware and software components and approved by FPS. Items of the same type shall be products of a single manufacturer. All material, software, and hardware shall be new, the most current version, and presently being produced.

• The Contractor shall provide equipment enclosures for equipment exposed to weather, damage, or tampering.

• Interior Enclosures: Shall meet the requirements of NEMA 250 Type 12.

• Exterior Enclosures (Exposed-to-Weather): Shall meet the requirements of NEMA 250 Type 4X.

• Any external equipment shall be minimum IP66 or NEMA Type 4X rated for protection against rain, dust, and snow.

5 Installation Requirements

• The Contractor shall install all system components and associated equipment in accordance with manufacturer’s instructions following all applicable local, state, and federal codes and policies. If there are conflicts in the code provisions and requirements, the more stringent requirements will prevail.

• All equipment and appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the Contractor, as well as all adjustments, alignments, programming, and configuration required for a complete and optimal IDS operating system.

• Alarm panels shall be installed in a secured area that is only assessable to authorized individuals. The area shall be protected by IDS.

• Each alarm sensor or alarm point shall be its own zone.

• All panels shall be a lockable tamper proof container with a tamper switch.

• Garage and rollup doors shall have a sensor on each side to prevent the lifting on one side without an alarm.

• Accessible external facility openings that are 96 square inches or more shall be alarmed.

• Door contacts shall be installed on the opening side of the door and shall not allow the door to open enough to provide the ability to tamper with the contact inside the door without alarming.

• Devices with a "walk-test" light shall be set to the off position after the device is installed and tested.

• All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by GSA and FPS.

6 Network Switches

• As required per this guideline, the contractor shall purchase, install, and configure all equipment, components, and necessary accessories for a complete and appropriately configured network. FPS will supply the contractor with IP addresses for use based on the contractor supplied network diagram/scheme.

• All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the PM.

7 Equipment Firmware

• The Contractor shall ensure all applicable equipment has the most current version of manufacturer’s firmware.

8 Removal of Existing Equipment

• When removing the existing cabling, and associated equipment, the contractor shall ensure all openings or penetrations are sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse.

9 Equipment Inventory

• The contractor shall document and provide an inventory (electronic and physical) of all equipment, to include make, model number, serial number, description, location, and quantity. If a serial number does not exist, all other information shall be provided.

10 System/Equipment Salient Characteristics

• General Facility Security Level Requirements

• Low and Medium Security (FSL II and III)

• Alarm Panel

Compatible with FPS Mega Centers

• All Building Entry Points:

Magnetic Switch

Motion Sensor

• Windows and openings greater than 96 square inches (ground level only)

Glass-break Detector preferred or Shock Sensor; and

Magnetic Switch (if window can be opened)

Glass-break Detector preferred or Shock Sensor; and/or Motion Sensor (non-opening windows and other openings)

• High Security (FSL IV and V)

• Alarm Panel

UL1076 Compliant (compatible with FPS Mega Centers)

• All Building Entry Points:

Balanced Magnetic Switch (BMS); or

High Security Switch (UL634 Level 2); and

Motion Sensor

• Windows and openings greater than 96 square inches (within 16 feet of the ground)

Glass-break Detector preferred or Shock Sensor; and

Balanced Magnetic Switch (BMS); (if window can be opened)

Glass-break Detector preferred or Shock Sensor; and/or Motion Sensor (non-opening windows and other openings)

All devices shall be UL639 compliant

• Alarm Control Panel

• Alarm control panel and alarm devices must be powered by a power supply with individually fused outputs for each device

• Power supply shall be locked and tampered

• Power supply AC power shall be hardwired and run in conduit

• Panels must be capable of monitoring by Mega Center

• Utilize both network connectivity and dial up telephone options for communication

• It shall be mounted in a lockable enclosure that is equipped with a tamper switch on inside of the enclosure to detect door opening.

• Secondary Power

• Secondary power for alarm control panel, devices, and associated power supplies shall be supplied by battery, at a minimum

• Batteries shall be installed in a lockable enclosure with tamper switch

• Secondary power shall be sufficient to power the entire system in standby for four (4) hours minimum and five (5) minutes in alarm condition

• Zone Supervision

• All zones shall be supervised utilizing End of Line Resistors (EOLR)

• EOLR shall be installed at the device, not in the alarm panel. (except for the panel tamper switch)

• Glass Break sensors

• Minimum sensor will contain two (2) sensing technologies for acoustic sensors

• When choosing glass break sensors, the type and thickness of glass must be understood to ensure proper functionality

• Shock sensors may need to be used when glass break sensors do not exist for glass type and thickness

• Glass attached (shock style) sensors may be allowed, but must be approved by FPS

• Utilize wired technology preferred or wireless technology with FPS approval

• Motions Sensors

• Motion sensors will utilize IR and/or Microwave technologies

• Report failure of technology (IR and/or Microwave)

• Report Masking (microwave only)

• Utilize wired technology preferred or wireless technology with FPS approval

• Keypads

• Utilize wired technology preferred or wireless technology with FPS approval

• Utilize a graphical user interface with touch sensitive screen

• Duress Button/Switch

• Utilize wired technology preferred or wireless technology with FPS approval

• Duress devices shall be concealed from public view

• Magnetic Contacts

• Utilize wired technology preferred or wireless technology with FPS approval

• Must utilize a magnet to activate the contacts

• High Security Magnetic contacts must meet UL634 Level 2

• Balanced magnetic contacts must meet UL634 Leve1 1

Video Surveillance System (VSS)

1. Introduction

The Federal Protective Service (FPS) is the federal law enforcement agency responsible for the protection and security of federal facilities, employees, and visitors. FPS, Security Operations Branch (SOB), actively works to reduce security vulnerabilities of federal facilities from criminal, terrorist, accidental, and natural disaster threats to ensure properties remain safe, secure, and available to the American public and employees of the federal government.

The following guidelines have been developed by the Department of Homeland Security (DHS), Management Directorate (MGMT), Federal Protective Service (FPS) to mitigate threats and vulnerabilities pertaining to federal buildings and government leased spaces. The guidelines and regulations were developed with the notion that the security posture of each federal building or government leased space is unique.

This guideline is for purchase and installation of a new Network Video Management System (NVMS), fixed IP cameras, IP Panoramic cameras, multi-sensor cameras, client workstations, control center flat panel monitors, and all additional equipment and appurtenances necessary for a fully functional IP VSS system.

Also, this guideline may include the purchase, installation, programming of a new Point-to-Point wireless network system. This guideline shall include system maintenance.

The VSS system shall monitor vehicle traffic, personnel entry, emergency exits, and the exterior perimeter of the facility. The VSS system shall retain video for a minimum of 30 days plus 25% additional storage space for future expansion. Storage shall be calculated at full camera resolution, full frame rate, and low compression.

2. Construction/Installation General Guidelines

2.1 Design Standards

2.1.1 Design Limitations – During design and planning activities, the Contractor shall advise the PM and/or Technical POC of all functional incompatibility issues and/or system interoperability limitations of any equipment to be installed. This shall include, but is not limited to, limitations because of insufficient lighting, heating, ventilation and HVAC, power, rack, console, and space requirements.

2.1.2 Infrastructure Design – The system design shall include all conduit, junction boxes, cabling, fiber, network topology, and HVAC and power requirements for the proposed Network Video Management System

(NVMS).

2.1.3 Equipment Selection – The Contractor shall use commercial off the shelf (COTS) components approved by the John McCain NDAA Act and Federal Protective Service in system design.

2.1.4 Backup Power Requirements – The Contractor shall provide uninterruptable power supplies for all equipment necessary to ensure the NVMS remains fully operational for a minimum of four (4) hours and to allow for an orderly shutdown of the system, if necessary. 2.1.5 Wiring Schematics – The Contractor shall provide complete system design wiring schematic diagrams (digital and physical) representing planned and final device terminations to and between system equipment and components.

2.1.5 Riser Diagrams – The Contractor shall supply a system riser diagram. The diagram shall indicate the location of all associated system components.

2.2 Video Surveillance System Design Standards

2.2.1 The system will be designed with the following use case scenarios in mind

• Scenario 1: Observation – this use case is defined as a continuous overview of scene content captured. The camera purpose or use case is best described as being capable of capturing an image that can be utilized to verify the general characteristics of the image. For example, the number of cars or people in a parking lot. The minimum horizontal resolution should be 20 pixels per foot.

• Scenario 2: Forensic Review – this use case is best described as being designed for use later to identify objects of interest. For example, type (make/model) of a car in a parking lot. The minimum horizontal resolution should be 40 pixels per foot.

• Scenario 3: Recognition – this use case is best described as a VSS designed to observe and identify a person or object with enough detail for courtroom quality. This level is often utilized as facial recognition or license plate recognition. The minimum horizontal resolution should be 80 pixels per foot. The Recognition Use Case should be utilized for facility entrances and exits when possible.

2.3 Pan Tilt Zoom Design

2.3.1 Pan Tilt and Zoom (PTZ) cameras will be limited to facilities that have active monitoring or move to an area upon alarm activation (as long as no asset is left without coverage).

2.3.2 PTZ cameras will not be used to monitor significant areas or assets.

2.3.3 The utilization of panoramic cameras, multi-sensor cameras or lenses should be considered as an alternative to PTZ since they can be used for large area monitoring while still maintaining the ability to move the camera view without moving the camera itself as long as the use case scenario can be met.

2.3.4 If utilized each PTZ camera will have pre-set views and return to a home position if left unutilized for two

(2) minutes.

3. Electrical and Cabling Requirements

3.1 Wires, cables, and fiber shall meet applicable requirements of the National Electrical Code (NEC) and applicable Underwriter Laboratories (UL) listings for type and method of installation.

3.2 Equipment, components, and devices shall, at a minimum, meet requirements of UL, where UL standards are established, and applicable requirements of the National Fire Protection Association (NFPA) and/or the NEC.

3.3 All wire, cable, and fiber runs shall be installed in accordance with all federal, state, and local codes and/or regulations. In the instance there is a conflict between applicable codes and regulations, the most stringent shall apply.

3.4 All currently applicable federal and national codes, including electrical and life safety, shall be adhered to in the system design. If there are conflicts in the federal and national code provisions and requirements, the more stringent requirements will prevail.

3.5 All wire, cable, and fiber run outside of secure areas shall be secured against unauthorized access.

3.6 Where conduit is installed, a minimum of ¾” shall be used. Installed conduit shall be sized for fill requirements in accordance with the NEC.

3.7 All new conduit installed shall use green electrical tape to identify the conduit as FPS security use. All cabling not installed in conduit shall use green electrical tape to identify cabling as FPS security. Green tape shall be placed every 20 feet on new cabling and conduit.

3.8 All conduit, junction boxes and back boxes shall be concealed within walls, floors, and/or ceilings. In locations where this is not possible, an exception shall be approved by GSA and FPS before installation of conduit, junction boxes, and back boxes.

3.9 All conduit infrastructure shall be continuous from the device junction box to the secure security equipment closet.

3.10 As an alternative, if approved by GSA and FPS, and allowed by applicable codes and/or regulations, wire, cable, and fiber may be installed utilizing wire molding, cable trays, and innerduct.

3.11 Industry approved hangers/hooks may be substituted for conduit, if allowed by applicable codes and/or regulations and approved by GSA and FPS.

3.12 No wire, cable, or fiber shall not be left unsupported, attached, or hanging across ceiling tiles, HVAC ductwork, sprinkler pipes, water pipes, or other appurtenances previously installed.

3.13 All new wire, cable, and fiber shall not contain splices between equipment termination points. If a splice cannot be avoided, it shall be consistent with industry best practices for splicing cable and approved by the

FPS.

3.14 All wire, cable, and fiber shall be clearly labeled at both ends utilizing a permanent type of label using a common labeling convention.

3.15 Compression connectors shall only be used where recommended by the manufacturer and/or industry best practices.

3.16 All equipment connected to AC power shall be surge protected per Institute of Electrical and Electronic Engineers (IEEE). Fuses shall not be used for surge protection.

3.17 All VSS electrical and electronic equipment installed shall be powered from an Uninterruptable Power Supply (UPS). All equipment necessary for continuous live viewing, recording, and archiving VSS video will be uninterrupted during a power outage. The UPS’s shall be sized to provide at least four (4) hour battery back-up in the event the primary power source is interrupted.

3.18 All Ethernet network cabling shall be CAT 6 or better twisted pair cable or multi/single mode fiber optic cable, UL listed for its intended use (e.g., indoor, outdoor, plenum). Shielded Twisted Pair (STP) shall be used for all outside cameras or any areas that may be subject to Electromagnetic Interference (EMI).

3.19 All Ethernet cabling shall be installed in accordance with ANSI/TIA/EIA-568-B Commercial Building Telecommunications Cabling Standard. All cable terminations shall conform to ANSI/TIA/EIA-568-B standards. A few key areas of concern, but not all inclusive are:

• Pair twists shall be maintained as close as possible to the point of termination.

• Strip back only as much jacket as is required to terminate individual pairs.

• All four pairs shall be terminated.

• Pin/Pair assignments shall follow the T568B configuration.

3.20 All cabling, fiber, and connections shall be tested. The test device shall provide an electronic copy of the test results. Test results shall be printed and included in the Operations and Maintenance (O&M) manual.

3.21 All cable and fiber installed in new conduit shall include a pull string for future use. If existing conduit with an existing pull string is used in any location, it shall be replaced with a new pull string. If an existing conduit is used for cable or fiber installation that does not have a pull string, one shall be installed.

3.22 All wire, cable, or fiber that exist and to be reused in support of this guideline shall be tested prior to use.

Test reports shall be supplied to FPS for review and approval for use of existing wire, cable, and fiber. Test report(s) shall also be provided with final installation documentation and denoted that wire, cable, or fiber was previously installed.

3.1 Materials and Equipment

3.1.1 All system hardware and software components shall be produced by companies normally involved in the production of VSS hardware and software components and approved by FPS. Items of the same type shall be products of a single manufacturer. All material, software, and hardware shall be new, the most current version, and presently being produced.

3.1.2 The Contractor shall provide camera and equipment enclosures for equipment exposed to weather, damage, or tampering.

• Interior Enclosures: Shall meet the requirements of NEMA 250 Type 12.

• Exterior Enclosures (Exposed-to-Weather): Shall meet the requirements of NEMA 250 Type 4X.

3.1.3 All external camera housings shall be minimum IP66 or NEMA Type 4X rated for protection against rain, dust, and snow.

3.1.4 All camera housings shall be a minimum IK-10 Impact-Resistant for vandalism and utilize tamper resistant hardware.

4. Installation Requirements

4.1 The Contractor shall install all system components and associated equipment in accordance with manufacturer’s instructions following all applicable local, state, and federal codes and policies. If there are conflicts in the code provisions and requirements, the more stringent requirements will prevail.

4.2 All equipment and appurtenances, such as, but not limited to connectors, terminators, and mounting hardware shall be supplied by the Contractor, as well as, all adjustments, alignments, programming, and configuration required for a complete and optimal VSS operating system.

4.2 The Contractor shall purchase and install a complete IP based VSS system to include, but not limited to, Network Video Management System (NVMS) software capable of viewing, recording, playback, and exporting of video, cameras, servers, RAID 6 video storage, workstations, and network routers/switches. Provide and install camera mounts and other appurtenances, premise wiring, and system hardware as required for a complete and fully operational system as specified in this guideline. The installed system shall easily be expandable for future growth.

4.3 Video Storage Requirements

4.3.1 The Contractor shall calculate appropriate storage for all cameras recording at fifteen (15) frames per second (fps), at maximum resolution, associated compression and approved by FPS. Storage capacity shall be capable of storing video for a minimum of thirty (30) days. The Contractor shall calculate and provide video storage capacity. Each recording device shall include adequate storage for the connected cameras and additional 25% for future expansion. For more accurate measurements bandwidth needs to be a factor when calculating storage. If using motion recording % of motion shall be estimated:

• Simplest: Little to no scene movement

• Simple: Minimal scene movement

• Medium: Average scene movement

• Complex: Above average scene movement

• More Complex: Very busy scene movement

4.3.2 When applicable, following industry IT system design engineering and security best practices, the Contractor shall configure the installed VSS system to function in a Network Domain environment, not as a workgroup.

4.3.3 When applicable, following industry IT system design engineering and security best practices, the Network Video Management System Software (NVMS) and Windows software shall be configured to use Microsoft (MS) Active Directory for authentication.

4.3.4 Recorder licensing fees shall be nonrecurring, or contractor purchased for five (5) years.

4.4 Monitors

4.4.1 All monitors shall be securely mounted and of sufficient size and resolution for the project and approved by FPS.

4.4.2 Monitors shall be capable of displaying 4K resolutions in color.

4.4.3 Monitors shall be appropriately sized for the intended use and environment and approved by FPS.

4.4.4 Monitors shall be commercial grade designed for the intended viewing application (i.e. 24 Hours 7 days a week)

4.4.5 Placement of monitors should be within 35 degrees horizontal and 15-20 above or below eye level of the security force if actively monitored.

4.4.6 Organize the monitors in such a way as to provide for a simple manner for the security organization to recognize the location they are looking at and that they do not have to bounce around from one monitor to another to see related views. Provide several monitors programmed into a matrix and then a separate Call Up monitor for an up-close view and another for alarm Call Up.

4.5 Rack Mounting

4.5.1 Install all head end equipment (i.e. recorders, switches, etc.) capable of being rack mounted in rack cabinets. Rack locations to be determined by FPS.

4.5.2 All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the FPS PM.

4.6 Network Switches

4.6.1 As required per this guideline, the contractor shall purchase, install, and configure all equipment, components, and necessary accessories for a complete and appropriately configured network. FPS will supply the contractor with IP addresses for use based on the contractor supplied network diagram/scheme.

4.6.2 When applicable, following industry network design engineering and security best practices, the contractor shall configure installed switches for trunk line communication between the switches.

4.6.3 When applicable, following industry network design engineering and security best practices, the contractor shall configure installed switches with VLAN’s and appropriate VLAN routing. VLAN’s to be configured at a minimum are: Management VLAN and VSS VLAN.

4.6.4 All equipment shall be rack mountable, if possible. All equipment that is not rack mountable shall be installed on the wall. An appropriately sized piece of ¾” plywood shall be mounted on the wall, painted with fire retardant paint, and all equipment mounted on the plywood. Final mounting location shall be approved by the PM.

4.7 Cameras

4.7.1 Camera housings shall match the color and architecture of the building. Coloring camera housings shall not void the camera and housing manufacturer’s warranty. Before camera housings are coated the color shall be approved by the FPS PM.

4.7.2 Exterior cameras shall be mounted at a minimum height of 15 feet. Interior cameras shall be mounted at minimum height of 8 feet. If the minimum height requirements cannot be met, cameras may be installed at a lower height after approval of the FPS PM. Cameras installation not meeting the height requirements shall be installed in a protective cover.

4.8 Keyboard Video Mouse (KVM) Switch

4.8.1 The Contractor shall install a rack mounted combination display, keyboard, and mouse at a practical height, connected to the new NVMS Server for system configuration and administration.

4.9 Workstations

4.9.1 The Contractor shall install a new VSS client workstation capable of displaying all cameras simultaneously at full resolution.

4.9.2 Location of workstation shall be coordinated with FPS before installation.

4.9.3 Licensing fees shall be nonrecurring, or contractor purchased for five (5) years.

4.10 Operating Systems Updates and Service Packs

4.10.1 The Contractor shall ensure that all installed components have the most current security updates/patches, service packs, and revisions.

4.11 Time Synchronization

4.11.1 The Contractor shall ensure all system devices are configured appropriately for time synchronization.

Time synchronization methodology will be approved by FPS.

4.12 Camera Views and Configuration

4.12.1 The Contractor shall install and configure cameras in accordance with manufactures recommendations and industry best practices for optimal live view and recording.

4.12.2 The Contractor shall verify camera views with the FPS PM prior to installation.

4.13 Equipment Firmware

4.13.1 The Contractor shall ensure all applicable equipment has the most current version of manufacturer’s firmware.

4.14 Removal of Existing Equipment

4.14.1 When removing existing cameras, cabling, and associated equipment, the contractor shall ensure all openings or penetrations are sealed and/or patched accordingly to protect against weather exposure, unless otherwise designated for reuse.

4.15 Equipment Inventory

4.15.1 The contractor shall document and provide an inventory (electronic and physical) of all equipment, to include make, model number, serial number, description, location, and quantity. If a serial number does not exist, all other information shall be provided.

4.15.2

4.16 Wireless Network Security

4.16.1 The following security requirements shall be configured, changed, and/or implemented:

• Wireless systems shall employ accepted authentication methods provided by FPS.

• Systems shall not utilize default factory passwords. Passwords must be changed prior to the system being put into operational use.

• Administrative passwords shall be changed to a password provided by FPS

• Wireless systems shall use FPS approved encryption to protect the confidentiality of data.

• All security settings for wireless systems shall be changed to protect against unauthorized intrusion and modification of system settings.

• Ports, protocols, and services that are enabled by default and are not essential to mission requirements shall be disabled.

• The WLAN network name shall be changed from the default name to a unique name that does not reveal its affiliation to DHS operations or organizations.

• The ESSID name shall not be associated with organizational function or identity to avoid advertising the network’s identity or function to potential attackers.

• Security updates and patches shall be applied to all system devices to ensure that up-to-date firmware and software that protects these systems against known vulnerabilities is installed.

• Systems shall be configured to create audit logs and capture important events such as successful and unsuccessful administrator logins, client device access attempts, client device MAC addresses, access violations, associations, disassociations, ports and protocols used, and user activities.

4.17 The Contractor shall demonstrate that the completed VSS installation complies with the contract requirements. Using an approved test procedure, all physical and functional requirements of the project shall be demonstrated and shown. The test procedure shall include techniques and requirements for validating all significant system functions. The Contractor shall provide all test equipment and personnel required for final testing.

5. System/Equipment Salient Characteristics

5.1 Network Video Management System

5.1.1 The NVMS shall support the capabilities below at a minimum:

• Live video monitoring

• Recording of video

• Playback of video from local or remote location(s)

• Integral alarm/event management

• Video export

• Direct Attached Storage

• Storage Area Network

• Provide storage with configurable resolutions and frame rates

• Utilize a number of recording codec formats. To include H.264 (minimum), MPEG4, and MJPEG video compression.

• Be capable of H.265 recording or software upgradeable to H.265

• Capable of system recorded data fail-over and redundancy options.

• Operate on a TCP/IP managed network.

• The system software shall operate in a Client/Server configuration across a Local Area Network (LAN) or Wide Area Network (WAN).

• Software shall operate in a Client/Server configuration across a Local Area Network (LAN) or Wide Area Network (WAN).

• Stream live and recorded video a minimum of 30 frames per second per camera.

• Support prioritizing streaming at 30 frames per second on 4K (8MP) cameras.

• Streams live and recorded video from cameras up to the attached cameras maximum resolution.

• Decompresses H.264 (minimum). Be software upgradable to H.265

• Recorded video must be encrypted using 256-bit encryption (minimum).

• Trigger event driven video operations

• Recording can be defined by a recording schedule assigned to each camera.

• Video recording can be manually selected by user.

• Video analytics capable for the environment to be specified by FPS

• Pre-event and post-event recording option

• Motion detection recording with adjustable sensitivity, threshold and detection zones.

• Display analytics activity for individual cameras

• Video can be streamed simultaneously on the same monitor.

• Shall be certified to work by the Video Management Software’s manufacturer and be one of the following:

Windows 10 or newer.

• Support recording and management of video sources through the use of industry standard drivers. Drivers shall include at a minimum ONVIF Profile S, ONVIF Profile G, and a publicly published API.

• Support the following video analytic event types when captured by supported cameras: o Objects in area o Loitering o Crossing defined line, o Object appears or enters area o Object removed, o Object left behind, o Direction of travel o Lost image/altered image

• Export recorded video in the following formats: o H.264 (H.265 when equipped) o JPEG o PNG o TIFF o AVI

• Export a still frame of video as displayed in the video preview area: o JPEG o PNG o TIFF

• Export video from one or multiple camera streams simultaneously

• Playback exported clips in synchronized, sequential time

• Provide a record of the video source properties including but not limited to: o Camera model o Firmware version o Location o MAC address o Serial number o Resolution

5.2 Cameras

5.2.1 All cameras will have a minimum of the following:

• Transmit Digital IP Signals

• Resolution of 1080p

• Infrared (IR) illumination with switchover to black and white where applicable (determined by FPS)

• Power over Ethernet

• Vandal Resistant

• Suitable for the appropriate environment (camera and housing)

• Color imager

• Capable of capturing thirty (30) frames per second.

• Conform to ONVIF profile compatible with the recording device

• Utilize onboard removable storage for cameras that are 5MP or greater

5.3 Wireless Point-to-Point (If applicable)

5.3.1 The Point-to-Point wireless system shall, at a minimum, support the following capabilities:

• Create a wireless Ethernet link

• Provide reliable, high bandwidth video and data communications for streaming video, Internet and database access, and large file transfers, plus backhaul for wireless networks and fixed point-to-point links.

• Provide optimal network performance in a challenging environment.

• Automatically change channels to avoid interference and reduce link failure.

• As link characteristics change, automatically negotiate the highest data rate achievable.

Generic diagram

Physical Access Control System (PACS)

Key PACS Requirements: All Component PACS, whether existing or part of a new real property project, and regardless of vendor or product, must possess the following capabilities:

• Connection to DHS PACS Connector from the Component Headquarters (HQ)/Enterprise PACS.

• Components must plan and develop budgets to subsume all remote facilities PACS under the Component HQ PACS as part of the Component Enterprise system.

• Ability to manually extract reports and database queries to a central location/repository to support Return to In-Person Work and USE IT Act requirements.

• Ability to share the data at the central location or repository on a daily basis with OCRSO.

• Ability to allow PACS Connector to extract reports and database queries to a central location/repository to support Return to In-Person Work and USE IT Act requirements.

Additional requirements to ensure compliance with M-19-17 and DHS PACS Modernization Roadmap include:

• DHS electronic PACS use of a PIV card as the basis for facility access.

• Each Component will comply with the DHS OnePIV framework: o Components will validate and authenticate external agency PIV and Common Access Card (CAC) credentials, as the sole credential for facility access.

o Components will not issue duplicative PIV cards or temporary credentials to external agency personnel in possession of a valid and authenticated PIV/CAC.

o Components shall accept existing, valid PIV credentials, including from other agencies, to grant access to facilities.

o Each Component maintains a PACS inventory by keeping the PACS Reporting Tool updated on a continuous basis, and by conducting annual audits at minimum.

o Components ensure that acquisitions comply with the DHS PACS Modernization Roadmap and correctly configured FIPS-201 approved configurations.

o Ensure that lease agreements include a clause whereby a PIV credential is the sole credential for access to shared space in multi-tenant facilities.

o Each Component PACS will be connected to DHS OCSO enterprise PACS architecture services (e.g. PACS Connector).

o Each Component will participate in the PACS Modernization Working Group.

o Each Component will coordinate with OCSO for all PACS acquisitions.

Components must coordinate directly with OCSO and OCRSO, respectively, to ensure compliance with these requirements. Questions regarding this initiative may be directed to Jeanine Smith, Acting Executive Director, Readiness Operations, OCRSO (jeanine.smith@hq.dhs.gov, (703) 740-7350) and/or Rich Moreta, Executive Director, Enterprise Security Operations and Support, OCSO (richard.moreta@hq.dhs.gov, (202) 891-3364).

SECTION B – INFORMATION TECHNOLOGY (IT) SCOPE OF WORK

AREA COMMAND OFFICE – IT INFRASTRUCTURE & SYSTEMS SUPPORT

DHS-Approved IT Requirements Supporting Staff Operations & Security Systems

B.1 PURPOSE

The purpose of this IT Scope of Work is to define the requirements for providing, installing, configuring, and commissioning a DHS-approved information technology infrastructure that supports FPS staff operations, mission-critical law enforcement functions, and the integrated Gallagher security system. The IT systems shall comply with DHS 4300A Sensitive Systems Handbook, FISMA, NIST SP 800-53, and GSA PBS P100.

This SOW ensures that the FPS District Command Office is equipped with a secure, resilient, and compliant IT environment capable of supporting administrative operations, security monitoring, digital evidence management, communications, and federal network connectivity.

B.2 APPLICABLE STANDARDS

All IT work shall comply with:

• DHS 4300A Sensitive Systems Handbook

• DHS Information Security Architecture

• DHS Trusted Internet Connection (TIC) requirements

• FISMA (Federal Information Security Modernization Act)

• NIST SP 800-53 Rev. 5

• NIST SP 800-171 (controlled unclassified information)

• GSA PBS P100

• TIA-568 and TIA-569 cabling standards

• Federal Continuity Directive (FCD-1 & FCD-2)

B.3 GENERAL IT REQUIREMENTS

The Contractor shall provide a turnkey IT infrastructure, including:

• Structured cabling (CAT6A minimum)

• Fiber backbone to building MPOE

• Network switches supporting security and staff operations

• Wireless access points (WAPs) with WPA3-Enterprise

• IT racks, patch panels, and cable management

• UPS-protected power for all IT and security systems

• 12-hour battery backup for all critical IT components

• Labeling, testing, and certification of all cabling

All IT systems must support both staff operations, Gallagher PACS and IDS for alarm communication to FPS Mega Center.

B.4 IT/LAN ROOM REQUIREMENTS

The IT/LAN room (72 NSF per POR) shall be constructed and equipped to support:

• Two full-height IT racks

• Gallagher PACS controllers & Power supplies

• IDS controllers and power supplies

• VSS server and switches

• Network switches (DHS-approved)

• Patch panels and cable trays

• 24/7 dedicated HVAC

• UPS with 12-hour runtime

• Secure access control (PIV reader)

• CCTV coverage

• Fire suppression compliant with IT equipment standards

• IDS Protected

The Contractor shall ensure the room meets:

• Temperature: 64–75°F

• Humidity: 40–55%

• 24/7 environmental monitoring

B.5 NETWORK INFRASTRUCTURE

B.5.1 Structured Cabling

The Contractor shall install:

• CAT6A plenum-rated cabling for all workstations, security devices, and WAPs

• Fiber backbone from IT/LAN room to building MPOE

• Patch panels, cable trays, and labeling at both ends

• Cable certification test results (Fluke or equivalent)

B.5.2 Network Switches

Provide DHS-approved switches with:

• 10/100/1000 Mbps ports

• PoE+ for cameras, WAPs, and security devices

• VLAN segmentation for:

o Staff network o Security network o Guest/visitor network (if required) o VoIP/AiPhone network

B.5.3 Wireless Network

Provide:

• WPA3-Enterprise wireless access points

• Coverage for all office and support areas

• Segmented SSIDs for staff and visitors

• No wireless access in secure storage rooms unless authorized

B.6 WORKSTATION & USER SUPPORT IT REQUIREMENTS

The Contractor shall provide IT connectivity for:

• 11 sit-to-stand workstations

• Supervisory workstation

• Conference room AV systems

• Huddle room Teams system

• Breakroom equipment (as required)

Each workstation shall include:

• Two CAT6A data drops

• One VoIP/AiPhone drop (if required)

• Cable management and labeling

• Secure network access compliant with DHS 4300A

B.7 SECURITY SYSTEM IT SUPPORT

The IT infrastructure must fully support the Gallagher-based PACS and IDS:

• Dedicated VLAN for Gallagher PACS & IDS

• Secure route to FPS Mega Center

• Encrypted communication channels

• Redundant power and network paths

B.7.2 VSS

• PoE+ VSS for cameras

• Dedicated video storage network

• NVR/Server with 30-day retention

• Network Time synchronization with DHS NTP servers

B.7.3 AiPhone Support

• Network connectivity for door and master stations

• PoE or dedicated power as required

• Integration with PACS for remote door release

B.8 CYBERSECURITY REQUIREMENTS

The Contractor shall ensure:

• All systems comply with DHS 4300A

• All devices are FIPS-140-2 validated

• No unauthorized wireless or Bluetooth devices

• All default passwords changed prior to turnover

• Network segmentation between staff and security systems

• Logging and audit trails enabled on all switches and controllers

• All IT equipment is inventoried and documented

B.9 REDUNDANCY & CONTINUITY

The Contractor shall provide:

• 12-hour UPS backup for all critical IT systems

• Surge protection and power conditioning

• Redundant network paths for security systems

• Failover testing during commissioning

B.10 TESTING, TRAINING & COMMISSIONING

B.10.1 Testing

• 100% cable certification

• Network performance testing

• Failover and UPS runtime testing

• Security system network integration testing

B.10.2 Training

Provide training for:

• FPS staff

• GSA building management

• Security/IT administrators

B.10.3 Deliverables

• As-built network diagrams

• Cable test reports

• IP addressing plan

• VLAN configuration documentation

• O&M manuals

• Warranty certificates

B.11 WARRANTY

The Contractor shall provide:

• 1-year minimum warranty on all IT labor

• Manufacturer warranties on all IT hardware

• 24-hour response time for critical outages

SECTION C – SCOPE OF WORK

CONSTRUCTION, FURNITURE, FIXTURES & EQUIPMENT (FF&E)

FPS DISTRICT COMMAND OFFICE BUILD-OUT

C.1 PURPOSE

The purpose of this Scope of Work is to define all construction, architectural, mechanical, electrical, plumbing, furniture, fixtures, and equipment requirements necessary to deliver a fully functional Federal Protective Service (FPS) District Command Office. The completed space shall support administrative operations, law enforcement functions, detainee processing, tactical storage, K9 operations, secure evidence handling, and DHS-approved security systems.

C.2 GENERAL REQUIREMENTS

The Contractor shall provide all labor, materials, equipment,…