Exhibit B4 POR Physical Security_2022_.pdf

PROGRAM OF REQUIREMENTS (POR) FOR

PHYSICAL SECURITY CONSTRUCTION AND SECURITY EQUIPMENT

SPECIFICATIONS

APPROVAL DATE: 05/04/2022

DEPARTMENT OF HOMELAND SECURITY

TRANSPORTATION SECURITY ADMINISTRATION

OFFICE OF THE CHIEF SECURITY OFFICER

PHYSICAL SECURITY BRANCH

Clifford McCoy Date Chief Security Officer Security and Administrative Services

Table of Contents I. Purpose II. Objectives

III. Scope IV. Authorities

V. Responsibilities VI. Space Acquisition Planning and Coordination

VII. Inspection, Testing, Validation, Labeling and Acceptance VIII. Security Equipment Testing Requirements

IX. Security Equipment Warranty, Maintenance, Repair, and Replacement X. Physical Security Requirements and Specifications

General Purpose Office Information Security Restricted Area (ISRA)/LAN Room/IT Equipment Room Closed Storage Room (SECRET), Field Intelligence Officer (FIO) Office/COMSEC Room Secure Meeting Room (SECRET) Personally Identifiable Information (PII) Storage and Work Areas Transportation Security Specialist Explosives (TSSE) Coordination Centers Interview Rooms Evidence Storage Rooms

XI. Security Classification

XII. Emergency Issues - U.S. Government Purchase Card P- CARD Appendix A: Acronyms

Appendix B: VSS/CCTV Advisory Sign (EXAMPLE)

Appendix C: Door Locks Appendix D: Intrusion Detection Systems

Appendix E: Access Control Appendix F: AiPhone

Appendix G: Video Surveillance System (VSS/CCTV) Systems Digital Video Recorder (DIVR) Systems Appendix H: Security System Installer Information

Appendix I: FPS Security Services through GSA Leases Appendix J: The Use of “Knox” Boxes

Appendix K: Door Locking Systems Appendix L: Security System and Devices for Facility Security Level (FSL) I

Appendix M: Security System and Devices for FSL II Appendix N: Security System and Devices for FSL III

Appendix O: Security System and Devices for FSL IV

I. Purpose

This document establishes the physical security requirements, to include all construction, upgrades, and modifications for all leased general-purpose office space, secure rooms, and special purpose areas occupied by the Transportation Security Administration (TSA). Compliance with the specifications contained in this document will ensure adequate security, minimize operational costs and change orders during construction, and provide consistency in the security of general-purpose office spaces and sensitive/high security areas.

II. Objectives

The TSA Physical Security Branch (PhySec) provides physical security support to more than 700 TSA facilities nationwide, to include airports, and spaces occupied by Regional Directors, Federal Security Directors, Global Strategies, Federal Air Marshal Service (FAMS) Field Office locations, and all other TSA organizations not specified, to ensure a safe and secure work environment for all TSA employees and their visitors. PhySec ensures adequate and consistent security of TSA field office spaces and sensitive/high security areas, and ensures proper budgetary oversight and resource management.

PhySec develops detailed physical security requirements for all new TSA Office space acquisitions or alteration projects, coordinates rough-ins with both U.S.

Government representatives such as the Federal Protective Service (FPS), General Services Administration (GSA), as well as stakeholders such as architects, engineers, electricians, Airport Authorities, Fire Marshals, and local Police Departments. PhySec inspects construction build-outs and the installation and testing of physical security equipment; conducts on-site inspections and acceptance of TSA facilities to ensure the proper installation of the physical security requirements and develops detailed solutions to highly complex security issues related to TSA on a nationwide scale.

III. Scope

Construction and security equipment requirements contained in this Requirement apply to the security of interior space in facilities provided by the General Services Administration (GSA) and those provided by TSA directly, whether leased or Government-owned. These requirements are incorporated into each space acquisition project’s scope/definition of requirements and included in the appropriate Request for Proposals (RFP) or Solicitation for Offers, as appropriate, when initiated by either a TSA space owner, the Lessor, or the General Services Administration (GSA). A list of acronyms is contained in Appendix A of this Requirement to facilitate understanding and use of this Requirement.

In accordance with DHS Instruction 121-01-001, TITLE, Section V.I.5, deviations or waivers from these requirements may be implemented as approved by Enterprise Support (ES), Security and Administrative Services (SAS), Chief Security Office (CSO), Chief of Physical Security Branch (PhySec).

IV. Authorities

The basis of the requirements of this document is the authorities and requirements of the following documents or their successor documents. Chief of Physical Security Branch (PhySec), with the approval of the TSA CSO, will issue changes in this Requirement mandated by a successor document.

a. Homeland Security Act of 2002

b. Title 6, United States Code, Section 341, Under Secretary for

Management.

c. Secretary of Homeland Security Memorandum, March 3, 2004, Subject:

Designation of the Chief Security Officer as Senior Agency Official.

d. DHS Management Directive 11080, Security Line of Business

Integration and Management.

e. Deputy Secretary Memorandum, January 23, 2009, Subject: Approved Definitions for DHS components.

f. DHS 4300A Sensitive Systems Handbook, July 24, 2012.

g. Standard Operating Procedures for The Safeguarding of Classified

National Security Information In A Closed Storage Processing Area, Version 1.0, May 19, 2009, issued by the Office of Security’s Administrative Security Division.

h. Intelligence Community Directive (ICD) 705-1.

i. Interagency Security Committee (ISC) Standard: Facility Security Level

Determinations for Federal Facilities.

j. National Security Telecommunications and Information Systems Security Instruction (NSTISSI) No. 7003, Protective Distribution Systems.

k. DHS Instruction Manual 121-01-010-01, REVISION # 01 Physical Security.

l. DHS Instruction Manual 121-01-017-01 Physical Security Construction and Equipment Specifications Instruction Manual dated 3/21/15.

m. ISC Physical Security Criteria for Federal Facilities, an Interagency Standard.

n. The Design-Basis Threat, an Interagency Security Committee Report.

o. The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard, 2021 Edition.

V. Responsibilities

1. TSA Chief Security Officer (CSO)

The CSO is responsible for the overall management of the Physical Security, Personnel Security, Sensitive Security Information (SSI), Operational Security (OPSEC), and Information Security (InfoSec) at TSA.

This includes management and oversight activities related to the development of policies and standards governing the implementation of physical security construction criteria and related equipment for offices and facilities for which the Security Branch is responsible.

2. Chief, Physical Security Branch (PhySec)

The Chief, Physical Security Branch is responsible for the implementation of policies and standards governing physical security construction criteria and related equipment; management and oversight of PhySec Unit Chiefs and Physical Security Specialists (PSS) providing post-warranty maintenance support for electronic and mechanical security equipment; as well as providing technical support to the TSA Real Estate Management Division

(REMD).

3. Physical Security Specialist (PSS)

The PSS are designated by the Chief, PhySec as responsible for the following: assisting TSA stakeholders in developing physical security requirements for new space acquisitions or alteration projects; providing Subject Matter Expert (SME) level assistance to local TSA Designated Officials (DO) on all physical security related matters for such locations; and implementing policies and standards governing physical security construction criteria and related equipment for space occupied by TSA personnel.

Duties include issuing relevant procedures for ensuring proper coordination with the appropriate space owner Security Representative, procurement official, and facilities management official; and providing technical expertise in accordance with Interagency Security Committee standards and input to the development of security requirements for general purpose offices, as well as special/critical rooms and/or areas. Additionally, duties include overseeing the installation, testing, and validation of newly installed security systems and equipment and reviewing and approving requests for deviations from construction and equipment requirements contained in this instruction manual, as requested. PSS are responsible for coordinating rough-ins with facility architects and engineers; inspecting construction build-outs to ensure testing and validation of newly installed security systems and equipment; inspecting the installation and testing of physical security equipment; and conducting on-site inspections to ensure the proper installation of the physical security requirements contained in Section IX, Physical Security Requirements, and Specifications of this Requirement as well as deviations from Statements of Work (SOW). The PSS is responsible for coordinating maintenance and repair/replacement issues while physical security equipment is under manufacturer warranty.

The only personnel authorized to accept completion of security system installation projects on behalf of the United States Government, Transportation Security Administration (TSA) is a PSS, or personnel designated by the Chief Physical Security Branch who are also current and certified as a Contracting Officer’s Representative (COR) Level II/III with certifications on file with TSA Office of Acquisitions.

NOTE: PIV Card Function: The Office of Security has recently completed the issuance of the new HSPD-12 Personal Identity Verification (PIV) cards to TSA Personnel and Contractors. This new card has a dual function. It is the employee’s/contractor’s official TSA Government ID as well as an access control card to TSA facilities and IT systems. All individuals are required to carry, display and use their PIV card while on duty and for access into TSA controlled properties, facilities, checkpoints, and other areas under TSA control. The HSPD-12 PIV card will be the only recognized TSA ID.

VI. Space Acquisition Planning and Coordination

The Physical Security Branch shall conduct a security assessment to ensure physical security requirements, particularly those impacting construction, are fully integrated into the development of a new space or facility acquisition project.

Failure to conduct an assessment may result in costly delays, an adverse impact on mission performance, and/or it may result in facilities not being adequately secured, creating a risk to TSA employees, assets, mission, and the facility itself.

Personnel from the Physical Security Branch are to be involved at the onset of new space acquisitions, renovations, and or upgrades of TSA spaces to ensure full compliance with ISC, DHS, FPS and TSA security requirements. The identification of security requirements shall begin during the initial space requirements development process.

1. General Service Administration (GSA) Leased Facilities and TSA Direct

Lease Locations.

• Physical security requirements shall be identified early in the project development process for lease acquisitions, beginning with the identification of the space requirement and a preliminary Facility Security Level (FSL) designation. The applicable ISC security criteria document shall be used in the development of needed security measures. Security requirements shall be made part of the market survey process of identifying potential leased locations. A security assessment of the space requirement (to include consideration of location/potential symbolism of the facility, mission criticality, threat to tenant agencies) as well as size and number of employees, shall be made to ensure potential locations can meet the minimum-security requirements.

• TSA stakeholders shall seek guidance and technical input from the

Physical Security Branch as necessary, at any point in the development of lease acquisition projects in which they will be housed. It is especially important to do this in the requirements development process prior to issuance of a Lease Solicitation for Offers. Once leased space is occupied, changes in security measures that involve the building or building systems shall be coordinated with the Physical Security Branch’s Field Support Unit (FSU).

• The Designated Official (DO) or Chief Security Officer (CSO) is solely responsible for reviewing and approving the Facility Security Level (FSL) of their respective facilities.

2. Additional Considerations.

Regardless of the type of space being considered for occupancy, requirements need to be addressed when applicable. The following list is not inclusive and the Designated Official (DO) should consult with the Chief, PhySec, or PhySec Personnel, as appropriate, when developing a list of new project requirements or attempting to correct a physical security problem involving existing occupied space.

3. Consultation with Building Owners/Leasing Authority.

Consult with building owners/leasing authority, or their representative, when contemplating any security requirement affecting the façade of the building, interior lobby or other public area space to ensure installation of equipment is permissible and where, how, and when the installation work may be performed. This will preclude potential conflicts and avoid possible expensive repairs and/or work delays.

4. Life Safety Codes.

Ensure all door locks permit emergency egress as required by life safety codes. Fire code requirements mandating the automatic release of magnetic door locks to expedite egress during an emergency do not adversely affect the security of TSA space. The vulnerability inherent in the automatic release of perimeter doors can be addressed by establishing an internal vestibule with a separate access controlled entrance door for the TSA space. This will permit emergency egress, while maintaining continuous security, even in an emergency. TSA must ensure all entry and egress locations conform to local life safety codes or ordinances as required by the authority having jurisdiction.

5. Security Equipment.

To ensure cost and operational efficiency, all security equipment and systems shall be operationally compatible and consistent throughout

TSA spaces. The PhySec Branch will follow the ISC and DHS guidelines identifying which security countermeasures are required. Any additional security countermeasures beyond what is specified in this document e.g.

biometric systems will be funded, installed, and maintained by the requesting office and not the responsibility of the PhySec Branch.

Consult with designated PhySec Personnel when installing or replacing equipment. When resources are available, PhySec Personnel will physically inspect the facility and develop a security SOW that will meet or exceed the baseline security levels as per ISC and DHS requirements.

The Prime Contractor (integrator) will be responsible for maintenance, repair, or replacement, as necessary, during the manufacturer’s warranty period of at least one year after system acceptance.

6. Duress Buttons.

(See Appendix D Intrusion Detection Systems for specifications) Duress buttons are often necessary at guard posts, receptionist locations (covert) and other critical interior areas. The designated PhySec Personnel shall designate the locations for duress buttons, as needed.

Duress buttons in common areas such a lunchrooms and FAMS Gyms will be wall mounted and covered.

The Federal Security Director (FSD) Receptionist Desk, Human Resources Office and Coordination Center locations will be equipped with a (covert) duress alarm activating a visual signal (strobe) at one or more location(s) to alert key personnel and will work through the Intrusion Detection System Alarm Panel to immediately notify the Federal Protective Service (FPS).

The COVERT Duress Alarm Button will be installed within reaching distance of the receptionist seating area so that it can be used covertly in an emergency or during an event. The Duress Alarm Button will be connected to and report as a Duress Alarm (on a dedicated zone or alarm point) through the Intrusion Detection System. A sign will be erected inside FSD/FAMS Office advising of Duress/Strobes and procedures to follow: DO NOT OPEN DOOR IF STROBE ACTIVE!

7. Door Numbering System.

Because all locking devices and alarms must be inventoried to enable PhySec personnel to respond to trouble calls, all perimeter and interior room/area doors of space occupied by TSA personnel shall have their own unique numbered door sign. The designation of individual doors must be consistent with the signage and numbering system of the entire building whether it is Government-owned or leased.

8. Locking Devices.

(See Appendix C Door Locks for specifications)

a) Access controlled card reader doors, and doors that serve as entry points will be equipped with a UL 437 compliant and BHMA/ANSI A156.30

Grade-A-Certified, high security lock and a BHMA/ANSI Grade-1 certified mortise, cylinder, or door hardware. The on-site security Key Control Officer must maintain a key management system. All locksets installed on card reader doors must accept large format interchangeable cores.

b) When a supplemental access control device other than a card reader is used, it must be a Grade 1 electrified lockset with key and pin override capability, and accept a large format interchangeable core. Additionally, it must have a data port for programming and downloading audit trails.

Supplemental access control devices shall be coordinated through the PhySec PSS or representative prior to being procured. The on-site designee will manage the programming of the lockset and will maintain the master programming code for the lockset(s). (See Appendix H Stand Alone Systems for specifications).

c) Key Control. Keys for offices, storage rooms, conference rooms, and general-purpose office areas are inventoried and controlled items. Keys may be issued to individuals with a need to lock and/or unlock their assigned work area. The PhySec Branch will assist in developing a key control program for offices/areas that do not have key control accreditation requirements. Procedures for key control are site specific and should be designed to meet basic security requirements. For example, once an individual is issued a key and has signed a Key Issue Record, that individual is responsible for the key until the key is returned to the issuing authority. When an individual signs the Key Issue Record they are consenting to the following:

- Duplication of all TSA keys is prohibited;

- Master keys are prohibited from leaving the facility.

- Keys must remain in their possession or controlled at all times;

- Upon transfer, reassignment or changing offices, individuals must turn the key back to the issuing authority;

- Individuals are not authorized to pass assigned keys to another individual;

- Loss of keys must be immediately reported to the issuing authority;

- Loss of Master keys/Grand Master/Sub Master for facility constitutes a

Significant Security Vulnerability and must be immediately reported to the Chief Security Officer (CSO), through the Physical Security Branch, with a Security Incident Report Form.

- All issued keys are the property of the United States Government.

NOTE: An effective key control program must include the above requirements, a secure spare lock container, and procedures for access control, and recording keeping. At a minimum, keys must be housed in a location out of public view and locked within a lockable steel key cabinet, firmly secured to a wall.

d) Video Surveillance System (VSS)/Closed Circuit TV (CCTV) System.

(See Appendix G VSS/CCTV Systems for specifications)

e) A VSS/CCTV/DIVR system may be required as determined by a PhySec Security Assessment. All video surveillance VSS/CCTV/DIVR systems must: be consistent with the Office of Security’s integration requirements; meet TSA Physical Security Branch’s minimum standards;

and have approval from the Physical Security Branch’s representative for that site.

f) In areas that have VSS/CCTV/DVR systems installed, the approved

Office of Security video surveillance advisory sign must be erected at the entrance to such areas advising individuals who enter an area that they are subject to constant video surveillance. See Appendix B for a sample advisory sign, which shall be laminated and posted.

g) For locations outside of the National Capital Region (NCR), only the DO or CSO can authorize the review of archived video. Within the NCR, only the Chief Physical Security Branch or Special Agents assigned to the Security Branch can authorize the review of archived video. For investigative purposes, archived video can only be released to outside personnel with the approval of the Chief Security Officer (CSO).

h) VSS/CCTV storage capability shall be 30 days at a minimum of 15 frames per second min 2/4 TB drive, unless approved by PhySec.

i) A surveillance camera shall monitor lobby entrances, all perimeter doors, weapons storage room doors, emergency exits, and entrances to collateral areas continuously.

9. Information Security Restricted Area (ISRA)/LAN Rooms and Server

Closets.

The number, location, and the security requirements for IT rooms, as specified in Section IX, IT Equipment Rooms, shall be included in the space requirements scope of work for both leased and new construction/alteration projects.

Appropriate Information Security Restricted Area (ISRA) signage must be installed on the LAN door.

10. Americans with Disabilities Act (ADA) compliance.

Consult with an architect or other individual familiar with the requirements of the ADA Act to ensure all security requirements, including card readers, are installed in compliance with this Act.

VII. Inspection, Testing, Validation, Labeling and Acceptance

Upon completion of TSA space build-out (up to collateral space), all security systems shall be inspected, tested, validated, and all wiring labeled. The PhySec Representative assigned to the project will conduct the inspection with the contractor’s representative. Inspections confirm that the proper equipment manufacturer and models were installed as specified. Testing determines that the equipment is working and performing as intended. Validation ensures that alarms/signals are being transmitted and received by the appropriate monitoring station. Labeling identifies the equipment served by the individual cables connected to security system panels.

A close out memorandum issued by the PhySec Branch Chief identifying that all security countermeasures and security equipment are operating correctly and the requisite staff has been adequately trained by the vendor will be forwarded to the Designated Official and maintained in the PhySec Facilities data base.

Acceptance of the space for occupancy shall be contingent upon favorable inspection, testing, validation, and labeling of the installed security measures. A set of as-built drawings and warranty information will be provided with operational/trouble-shooting training to the TSA Designated Official (DO) and appropriate on-site users. Duplicate sets of wire diagrams of all security systems in the TSA space (one set for the FSM and one set for PhySec) shall be provided with all equipment warranty information. These latter requirements shall be included as provisions in the respective lease acquisition or construction contract.

VIII. Security Equipment Testing Requirements

To ensure security equipment operates as designed and is properly maintained, the space owner, security representative, must ensure the following testing procedures are performed, and that the associated forms are completed, at the periodic intervals listed below:

Physical Access Control System – (Annually) TSA Form 2828, Access Control/Portal Performance Testing.

Video Management System VSS/CCTV – (Annually) TSA Form 2831, Video Management System Performance Testing

Intrusion Detection Systems (IDS) - TSA personnel housed in GSA controlled space, the Federal Protective Service (FPS) is responsible for recurring testing and the monitoring of leased space security equipment and systems. TSA space owner representatives and, where necessary, a representative of PhySec, shall liaison with the FPS Inspector and the Mega center responsible for the facility to ensure timely completion of testing and minimal workplace disruption. All intrusion detection systems must be tested either annually (TSA Form 2830) or monthly Duress Alarms – not TSA checkpoints (TSA Form 2829) to ensure functioning and coordination with Federal Protective Service (FPS). A Signal History Report must be obtained from the FPS Mega Center and forms uploaded into the Facility and Security Data System (FASDS). Subscriber Detail Reports may be obtained by contacting the appropriate FPS Mega Center. The security contractor is responsible for completing the installer information in the FPS MegaCenter Alarm Requirements Document (MAR) to include programming with the FPS Mega Center personnel. Once the intrusion detection system is fully programmed, a copy of the Federal Protective Service (FPS) Subscriber Detail Report and All Systems History Report must be provided to both TSA space owner staff and TSA Physical Security representative at least 48 hours before arrival for system acceptance testing.

IX. Security Equipment Warranty, Maintenance, Repair, and Replacement.

All access control, door-locking hardware, intrusion detection, VSS/CCTV, contained in Section IX below shall be maintained, repaired, or replaced by the security integrator during the warranty period. Scheduled maintenance testing shall be coordinated with the building facility manager and TSA space owner representative. After the warranty period, all system components will be maintained, repaired, or replaced by PhySec in coordination with the TSA space owner staff and the respective facility management or leasing agency responsible for the space or facility.

Equipment failure or malfunction during, or after, the warranty 1 year from date of installation shall be reported immediately to Physical Security Branch Field Support Unit. Local TSA offices are normally authorized to use their U.S. Government P-cards for emergency service/maintenance calls with approval from the PhySec representative and the concurrent approval of the TSA Real Estate Management Division (REMD) representative.

X. Physical Security Requirements and Specifications

The following construction and equipment specifications are minimum requirements for each of the respective areas and supersede existing building standards, as applicable. These requirements may be exceeded based on a PhySec assessment conducted in consultation with the TSA Designated Official (DO).

All equipment specifications can be found in appendices C thru H. The Physical Security Branch Representative assigned to the project shall conduct an on-site assessment or review of drawing and identify which devices are required at which locations. Security countermeasures specified in a Statement of Work (SOW) will be issued to the TSA Real Estate Management Division (REMD), Field Services or Direct Leasing. The substitution or deletion of specified equipment in the SOW is not authorized without prior approval by PhySec.

For rooms or spaces not listed below, the PhySec Branch can provide guidance and documentation of requirements.

Unless otherwise addressed in the specifications below, floor, wall, ceiling, and window finishes; electrical and lighting specifications; and fire-safety features must meet DHS minimum building standard requirements and applicable national codes.

General Purpose Office

General-purpose office space is space used for non-critical, non-sensitive functions occupied by TSA as defined in Section I; Purpose (e.g. FSD offsite office space).

Locations that are predominantly general purpose in nature, however, may contain special critical, sensitive areas or rooms within them which require additional security measures beyond those for general purpose space.

Doors, Perimeter (TSA occupied space, Security Door)

Solid-core wood, minimum 1 3/4" thick, OR hollow metal, minimum 1 3/4" thick with minimum 14-gauge skin plate thickness, with continuous vertical steel stiffeners spaced 6" O.C.

Welded steel doorframe assembly mounted to 20-gauge metal studs. Knock-down [collapsible jam and header] frames or aluminum frames are not acceptable.

Hinges, pivots, and pins installed to prevent removal when door is closed and locked. High security grade 1 screws.

If insulated tempered glass doors are used, an interior vestibule with solid core wood or metal doors shall be established to maintain security during emergencies.

Door, Interior (TSA occupied space, Non-Security Door)

Building standard unless determined otherwise by a PSS assessment.

Door Hardware and Locks

BHMA/ANSI Grade-1 cylindrical or mortise lever set. UL 437 and BHMA/ANSI A156.3, Grade-A certified, high-security lock with approved cylinder housing. Medeco M3 or approved equivalent. Grade 1 Security Screws/bolts must be used.

Door jamb seals and bottom seal.

Building standard unless determined otherwise by a PSS assessment.

Door Closer Non-hold open Heavy Duty Door Closer on all perimeter doors and any interior door equipped with card reader required.

Emergency Exit Only Doors

Shall be alarmed and equipped with free egress exit devices; no external hardware.

Hinges, pivots, and pins installed to prevent removal when door is closed and locked.

Physical Access Control System

(PACS)

Perimeter Doors: Required for all perimeter doors to TSA occupied space except for emergency exit only doors:

Multi factor HSPD-12 card reader, door position switch, locking hardware, non-hold open door closer, request to exit device, and four-hour battery back-up.

Interior Doors: As specified by the PSS.

Intrusion Detection System (IDS)

Required for all perimeter doors: alarm keypad or switch (location and quantity determined by PSS), high security door position switch, and a minimum of 4 hours battery back-up.

Video Surveillance System

(VSS/CCTV)

Monitoring)

Required at all perimeter doors, internal office locations will be based on PSS survey. Additional locations for VSS/CCTV may include: weapons storage room, etc. Cameras will have a direct feed to an ambush monitor on the interior of the door. Cameras will have a direct feed to an Ambush monitor on the interior of the door and a minimum of 4 hours battery back-up.

Duress Alarm Required at receptionist desk, coordination centers, FSD Offices and other locations as per the PSS survey.

Walls (Perimeter) Slab to slab construction. 13-gauge expanded steel mesh or equally substantial construction materials as approved by PhySec if walls are not slab to slab. Leased space which borders non-federal tenant space: 13-gauge expanded metal mesh inside the wall board, welded or screwed to metal framing at 6" O.C. vertically at each stud and horizontally along the true floor and true ceiling plates. If screwed, use diamond-shaped fender washer designed for that purpose. Joints overlap at the studs to provide strength.

Windows (new lease only)

Preferred glazing systems include: thermally tempered heat strengthened or annealed glass with a fragment retention film installed on the interior surface and attached to the frame;

laminated thermally tempered, laminated heat strengthened, or laminated annealed glass.

Acceptable glazing systems include thermally tempered glass; and thermally tempered, heat strengthened or annealed glass with fragmentation retention film installed on the interior surface (edge to edge, wet glazed, or daylight installations are acceptable).

A 7mil retention film will be sufficient to meet the minimum physical properties.

Stand Alone Access Control systems

Offices requiring access control but not within distance of the office wide access control system e.g. break rooms at airport locations.

When a supplemental access control device other than a card reader is used, it must be a Grade 1 electrified lockset with key and pin override capability, and accept a large format interchangeable core. Additionally, it must have a data port for programming and downloading audit trails. Supplemental access control devices shall be coordinated through the PhySec Representative prior to being procured. The on-site designee will manage the programming of the lockset and will maintain the master programming code for the lockset(s) locking with Medeco M3 Cores is approved as a stand-alone access control system. Acceptable system requires unique individual PIN access and use of HSPD12 Card and audit trail.

Use of GENERIC/UNIVERSAL codes for access to any TSA/Federal Air Marshal facility is NOT AUTHORIZED.

Information Security Restricted Area (ISRA)/LAN Room/IT Equipment Room

IT equipment rooms house IT servers, rack equipment, telecommunications equipment, and security VSS/CCTV systems and may be located on multiple floors within a single building and/or in a separate building serving multiple buildings within a campus like facility. LAN-A rooms are used for transmitting non-classified data, LAN-B areas are used for transmitting data at the secret level, and LAN-C areas are used for transmitting top secret/SCI Information. LAN-B and LAN-C rooms are either stand-alone or internal to the areas needing those classified network connections. The security requirements for LAN-B are found in DHS Instruction 121-01-011. LAN-C and other security requirements are found in ICS/ICD Series documents, and Technical Specifications for SCIF Construction.

Scalability should be considered when designing security controls for IT equipment rooms. The below listed criteria are general requirements; however, the assigned TSS/PSS makes the final requirements determination. A room containing a single switch in an already secure location may not require additional countermeasures, where a large data center may require protection exceeding the level achieved by the below listed criteria.

The Alarm Control Panel (ACP), which is typically located in the LAN / SERVER Room, should be located within 400 feet of any door employing any of the Intrusion Detection Systems or Electronic Access Control Systems components. A 360º Passive Infrared (PIR) motion sensor will be installed inside all LAN rooms. This space will be a separate zone on the Bosch panel or other approved system. LAN rooms are specified as Information Security Restricted Areas (ISRA) all entry locations will use multifactor authentication access control (e.g., card key and PIN) to access the area.

SIGNAGE: Sensitive areas (e.g., rooms containing information system servers, controlled interface equipment, associated peripherals, communication equipment, etc.) or areas where restricted actions occur (e.g., information assurance monitoring, system administration, etc.) will be deemed an Information Security Restricted Area (ISRA) and clearly labeled as an “Information Security Restricted Area.”

Note: All TSA VSS/CCTV DVR systems are stand-alone systems that are co-located usually in the ISRA/LAN room. These systems are not approved to be connected to the TSA IT Network.

Doors Solid-core wood 1 3/4"thick, OR hollow metal, minimum 1 3/4" thick with minimum 14-gauge skin plate thickness, with continuous vertical steel stiffeners spaced 6" O.C. installed in welded steel frame assembly mounted to 20-gauge metal studs.

Knock-down [collapsible jam and header] frame or aluminum frame is not acceptable. Hinges, pivots, and pins installed to prevent removal when the door is closed and locked. closed and locked.

Door Hardware and Locks

BHMA/ANSI Grade-1 cylindrical or mortise lever set. UL 437 and BHMA/ANSI A156.3, Grade-A certified, high-security lock with approved cylinder housing. Medeco M3 or approved equivalent.

High security grade 1 screws. Door jamb seals and bottom seal.

Door Closer Non-hold open Heavy Duty Door Closer required.

Physical Access Control System (PACS)

Single Entrance Door Required: HSPD-12 card reader, Two-factor APL-listed card reader, door position switch, locking hardware, non-hold open door closer, request to exit device, and four hour battery back-up.

Intrusion Detection System (IDS)

Alarm keypad, high security door position switch, motion detection room interior, and a minimum of 4 hours battery back-up.

Walls Slab to slab construction. 13-gauge expanded steel mesh or equally substantial construction materials as approved by PhySec. 20-gauge metal studs or equally substantial construction material approved by OCSO Physical Security Division. Gypsum wall board; covered with fire-rated plywood from the structural floor to a height of 8'.

Video Surveillance Systems (VSS/CCTV Monitoring)

Required with location interior of the room with a view of door and rack(s), or exterior of room with view of door. Location based on PSS survey. A minimum of 4 hours battery back-up.

Windows Windows prohibited unless permitted by waiver.

When present at < 18' ground height or otherwise accessible:

locked with L-brackets using Security Screws and motion sensors.

HVAC Openings HVAC duct or other openings exceeding 96 square inches equipped with ½” steel man bars welded every 6” with all connections and fasteners welded. Furthermore, temperature within LAN room must meet NIST specifications.

Closed Storage Room (SECRET), Field Intelligence Officer (FIO) Office/COMSEC Room

Closed storage secret (or below) area is a room located within a TSA general purpose space. A GSA-approved Class-5 or Class-6 security container and door hardware and locks protect classified national security information. The TSA Physical Security Specialist performs the inspection and completes a DHS closed storage processing area survey.

The Field Intelligence Officers (FIO) room is located within TSA occupied general purpose space. The Field Intelligence Directorate, through its Field Intelligence Officers (FIO), provides timely, pertinent and responsive multi-modal intelligence support to TSA field elements, TSA Office of Intelligence and Analysis, and affiliated Transportation Security Partners.

This type of space is for areas with 4 or fewer classified workstations housed in a closed storage area (at a minimum) and complies with Instruction 121-01-011, DHS Administrative Security Program. All classified materials and equipment are secured in a GSA-approved, Class-5 or Class-6 security container when not in the direct control of a properly cleared individual. Additional security measures may be required by NSTISSI No. 7003 as determined by the Cognizant Security Authority.

Development of the requirements of the statement of work and the oversight of the build-out is coordinated with the PhySec Branch. Area doors, walls, ceilings, floors, and windows are STC-45 rated non-amplified sound, or STC 50 with amplified sound. The Physical Security Specialist performs the inspection and completes the DHS closed storage processing area survey, which is submitted to the Chief of PhySec, for approval. Upon approval, CSO, PhySec issues an approval letter for operational use.

Every effort should be made to ensure these type of rooms are (windowless) and located within the interior/central part of the TSA leased space, with no wall(s) being a perimeter wall of another tenant’s space or public area. As a best practice, limiting the number of classified spaces/areas creates less of a risk for potential unauthorized disclosure or a security violation.

continuous vertical steel stiffeners spaced 6" O.C. in welded steel frame assembly mounted to 20-gauge metal studs. Knock-down [collapsible jam and header] frame or aluminum frame is not acceptable. Hinges preferred on internal side of door; if external, hinges must be pinned.

STC-45 rating or operational controls required.

Door Hardware and Locks BHMA/ANSI Grade-1 cylindrical or mortise lever set. UL 437 and BHMA/ANSI A156.3, Grade-A certified, high-security lock with approved cylinder housing. Medeco M3 or approved equivalent.

High security grade 1 screws. Door jamb seals and bottom seal.

Door Closer Non-hold open Heavy Duty Door Closer required.

Physical Access Control System (PACS)

Single Entrance Door Required: Multi Factor HSPD-12 card reader, door position switch, locking hardware, non-hold open door closer, request to exit device, and four-hour battery back-up.

Intrusion Detection System

(IDS)

Alarm keypad, high security door position switch, motion detection room interior. For rooms without slab to slab walls install additional motion detector on ceiling above ceiling tiles. A minimum of 4 hours battery back-up.

Walls Walls covered by gypsum wall board. Slab to slab construction.13 gauge expanded steel mesh or equally substantial construction materials as approved by PhySec. Sound insulation batt in wall cavity, ceiling as needed to meet STC 45 requirements. If the area contains SVTC/amplified sound, a rating of STC-50 is required.

Studs 20-gauge metal or equally substantial construction material approved by CSO PhySec.

Video Surveillance System (VSS/CCTV Monitoring)

Required at entrance to space. Location based on TSS/PSS survey. A minimum of 4 hours battery back-up.

Windows Every effort should be made to ensure the room is windowless or to eliminate windows, especially on the ground floor.

HVAC Openings HVAC duct or other openings exceeding 96 square inches equipped with ½” steel man bars welded every 6”.

Remarks: Floor, wall, ceiling, and window finishes; electrical and lighting; and fire safety requirements shall meet building standards and national codes.

Additional Note: An existing Closed Storage Room can be adapted to a Secure Meeting Room through the introduction of countermeasures such as the following:

a. Introduction of transducers or “white noise” generators to muffle human voice transmission.

b. Application of sound dampening seals on all doors, or

c. Posting a security guard or other official (with equivalent level of clearance) outside the room to eliminate eavesdropping

NOTE: Reference Secure Meeting Room (SECRET) for requirements.

Weapon Storage Room Weapons and ammunition storage areas located within a TSA space are necessary to store weapons and ammunition required for the local contract security officers and/or federal law enforcement officers assigned to specified DHS facilities. Weapons storage rooms are windowless and constructed/equipped to prevent unauthorized access and to reduce potential injury to personnel located outside the storage area from accidental weapon ammunition discharge within the storage area. All applicable fire safety code requirements are followed in the planning, construction, and operation of such storage areas, including notification to local fire department officials of their location. The following requirements are for storage areas for up to 50 weapons and associated ammunition. The physical security requirements for storing weapons and associated ammunition in excess of 50 firearms are to be developed in consultation with the CSO Physical Security Branch.

Five or fewer weapons and associated ammunition assigned to individuals may be stored in windowless GP-1 general-purpose office space, provided weapons and ammunition are contained in a locked GSA-approved, Class-5 weapons storage container, with a combination lock meeting federal specification FF-L- 2937 on each drawer. Weapons and ammunition are stored in separate drawers with different combinations for each drawer. A weapons clearing barrel is also provided in the room.

Single Entrance Door

Solid hardwood OR laminated wood, minimum 1 3/4" thick with a 12-gauge steel plate, OR hollow metal, industrial-type construction, 1 3/4" thick with a 14-gauge steel plate on the outside. Internally reinforced with continual vertical stiffeners spaced 6" O.C. Installed in welded steel frame mounted to 20-gauge metal studs. Knock-down [collapsible jam and header] frames or aluminum frames are not acceptable. Hinges, pivots, and pins installed to prevent removal when the door is closed and locked.

Door Locks and Hardware

BHMA/ANSI Grade-1 cylindrical or mortise lever set. UL 437 and BHMA/ANSI A156.3, Grade-A certified, high-security lock with approved cylinder housing. Medeco M3 or approved equivalent.

High security grade 1 screws. Door jamb seals and bottom seal.

Door Closer Non-hold open Heavy Duty Door Closer required.

Physical Access Control System

(PACS)

Single entrance door with: two factor HSPD-12 card reader, door position switch, locking hardware, non-hold open door closer, request to exit device, and four-hour battery back-up.

Intrusion Detection System (IDS)

Single entrance door with: alarm keypad, motion sensor, high security door switch. A minimum of 4 hours battery back-up.

Walls Slab to slab. 20-gauge metal studs, or equally substantial construction material approved by OCSO Physical Security Division. Armor is UL 752 Level-III, Super Power Small Arms, positioned on the inside walls (and doors) on outer side of the gypsum wall board mounted.

to structural deck and wall studs to 12" above schedule ceiling. From top of bullet-resistant armor to structural ceiling slab, 3/4" # 9, 10-gauge expended metal mesh, welded or screwed to metal framing at 6" O.C. vertically at each stud and horizontally along where the true ceiling plates are installed. If screwed, use diamond-shaped fender washer designed for that purpose. Joints overlap at the studs to provide strength. Wall construction is required to be in compliance with ASTM-F1247, Class M-15 minute, attack resistant.

Video Surveillance System

(VSS/CCTV

Monitoring)

Required at entrance to space. Location based on TSS/PSS survey. A minimum of 4 hours battery back-up.

HVAC Ducts HVAC ducts exceeding 96” square, or 11" in diameter for circular ducts, require 1/2" steel man-bars every 6" O.C. with all connections and fasteners welded. Openings over 96” square require 1/2" steel man bars every 6" O.C. with all connections and fasteners welded.

Storage Containers and Clearing Barrel

Firearms: GSA approved Class 5 Weapons Storage Container.

Ammunition: GSA-approved, Class-5 weapons storage container. Note: Weapons and ammunition are not stored in the same container unless stored in a GSA-approved, Class-5 container with multiple drawers, each drawer having its own FF-L- 2937 compliant combination lock with unique combination.

Located in corner area opposite the entrance door, mounted on wall or weapons container not to exceed a height of 36”. The corner positioning of the barrel is placed to prove sufficient area for easy use by both right-hand and left-handed shooters.

Remarks: Floor, wall, ceiling, and window finishes; electrical and lighting; and fire safety requirements shall meet TSA minimum building standards and national codes.

Note : NFPA 495 code addresses storage of explosives, including ammunition.

Secure Meeting Room (SECRET)

Secure meeting rooms are those enclosed rooms used to discuss (non-amplified) sensitive issues pertaining to or including national security information. They differ from SCIFs or open/closed storage areas in that there is no processing of information. Secure meeting rooms are either located within the interior of TSA space [windowless] with no wall being a perimeter wall of the space; or employ operational controls and procedures to prevent individuals without the proper clearance and need-to-know from overhearing conversations.

Secure Video Teleconferencing (SVTC). An SVTC classified processing area is used for conducting meetings or discussions involving classified information utilizing secure video teleconferencing equipment. SVTC classified processing areas in an OSAF are in compliance with the physical security requirements in Instruction 121-01-011. Walls, floors, ceilings, doors, and windows (if present) are to be STC-50 rated. Additional security measures may be required by NSTISSI No. 7003 and/or NSTISSAM TEMPEST 2-95 and 2-95A. SVTC areas are located in an interior (windowless) room within TSA occupied space, unless otherwise approved by the DHS CSO.

Doors Interior (TSA-occupied space)

Solid-core wood, minimum 1 3/4" thick OR hollow metal, minimum 1 3/4" thick OR an equivalent steel door, rated at STC-45 or STC-50 as applicable, installed in welded steel door frame assembly mounted to 20-gauge metal studs.

Knock-down [collapsible jam and header] frames or aluminum frames not acceptable. Hinges preferred on internal side of door; if external, hinges must be pinned.

Security Representative. Door jamb seals and bottom seal.

STC-45 or STC-50 rating, or operational controls required.

Door Locks and Hardware

BHMA/ANSI Grade-1 cylindrical or mortise lever set. UL 437 and BHMA/ANSI A156.3, Grade-A certified, high-security lock with approved cylinder housing. Medeco M3 or approved equivalent. High security grade 1 screws. Door jamb seals and bottom seal.

Door Closer Non-hold open Heavy Duty Door Closer required.

Physical Access Control System (PACS)

Single entrance door Requirements: Two-factor, HSPD-12 card reader, door position switch, locking hardware, non-hold open door closer, request to exit device, and four hour battery back-up.

Walls Walls covered with gypsum board, slab to slab, STC-45 rating or operational controls required. Sound insulation batt in wall cavity, ceiling as needed to meet STC 45. If the area contains SVTC/amplified sound, a rating of STC-50 is required. Studs 20-gauge metal or equally substantial construction material approved by CSO Physical Security Branch.

HVAC Openings All gaps/holes around or near air vent/pipe penetrations are to be sealed.

Remarks: Floor, wall, ceiling, and window finishes; electrical and lighting; and fire safety requirements shall…