Exhibit D - Wireless Surveys ASRs (Issued).pdf

EXHIBIT C

LEASED BUILDING WIRELESS SURVEY

STATEMENT OF WORK (SOW)

A. General Information

1. Scope of Work: Purpose of this SOW is to complete the onsite physical survey of the Delaware VA Clinic for wireless infrastructure. The survey is considered phase I of the wireless infrastructure installation to forecast preliminary hardware quantities, location of the desired Access Points, placements, etc. SOW covers the proposed building as described in the RLP documents with a minimum square footage of 10,000 square feet.

The contractor shall provide all resources necessary to accomplish the deliverables described in the statement of work (SOW), except as may otherwise be specified.

2. Background: The Columbus VA has been directed to implement wireless network access within all leased clinic locations in support of new systems being brought on line throughout the VA network. This SOW is to complete the wireless survey, and results will be used for the appropriate wireless infrastructure installations by the building owner.

3. Performance Period: All deliverables must be completed two months prior to building occupancy. Awarded vendor will need to confirm ability to complete all deliverables prior to that date. Lead time for background checks/clearances required to perform services should be taken into consideration when bidding this opportunity. Work at the government site shall not take place on Federal holidays or weekends unless directed by the Contracting Officer (CO).

Federal Holidays

• New Year's Day

• Birthday of Martin Luther King, Jr.

• Washington’s Birthday

• Memorial Day

• Juneteenth National Independence Day

• Independence Day

• Labor Day

• Columbus Day

• Veterans Day

• Thanksgiving Day

• Christmas Day

B. Contract Award Meeting

The contractor shall not commence performance on the tasks in this SOW until the CO has conducted a kick off meeting or has advised the contractor that a kick off meeting is waived.

C. General Requirements

1. For every task, the contractor shall identify in writing all necessary subtasks (if any), associated costs by task, and together with associated sub milestone dates. The contractor's subtask structure shall be reflected in the technical proposal and detailed project management plan (PMP).

2. All written deliverables will be phrased in layperson language. Statistical and other technical terminology will not be used without providing a glossary of terms.

D. Deliverables

I. Site Survey

- conduct physical site survey to collect information about the target area of coverage and discover existing RF topology, sources of interference, 802.11a/b/g channels to use and desired power levels

- Perform a passive survey of the wireless environment to gather information on neighboring wireless LANs and other wireless LAN-compatible devices.

- Perform an active survey of the wireless environment to gather information on achievable data rates.

- Documentation with the results of a physical site survey to confirm AP placement

- Map showing AP placement

- Map showing color coded coverage rates

- A listing of existing Wireless Access Points (by channel) that are picked up in the area being surveyed

- A depiction of the RF spectrum within the area being surveyed along with a recommendation for most available channel (based on survey results)

II. Design

- A wireless design to support Location Based Services, Voice, and Data for the VA OI&T WLAN Infrastructure will follow and adhere to the following specifications:

• Surveys will be conducted using Cisco access point.

• 25mW power level on all Access Points.

• Minimum signal strength (RSSI) of -67 dBm.

• Minimum signal-to-noise (SNR) ratio of 25.

• All access point antennas must be diversity.

• 20% geographic overlap of cells.

• Each wireless device must be heard at better than -75 dBm by no fewer than 3 access points to support location based services.

• Location based services design should adhere to the Cisco’s Wi-Fi Location-Based Services—4.1 Design Guide.

• Interior access point spacing should adhere to Cisco’s Radio Resource Management Under Unified Wireless Networks (Cisco Doc 71113).

• 100% of the proposed access point locations shall be physically surveyed.

• 100% of all interior space will be physically surveyed.

• The total number of proposed access points should be the minimum number required to meet the specifications and referenced guides supplied within this document.

III. Reporting Documents

- The designer will provide the following deliverables once completed in document form:

- Building Summary (facility address, facility description, building number, type of construction, special considerations)

- Description of specific methodology used to complete the survey

- Access point configuration tables divided by building and floors containing o AP Label o AP Type o Antenna type o Associated wiring closet o Mounting instructions o Length of cable from access point to wiring closet

- Site Bill of Materials, including equipment type and quantities (in accordance with WiFi Systems Parts list below)

- Details of the AP placement locations visually via CAD drawings.

o The document should be broken out by building and floor.

o The APs should be numbers from 1 to 99 on the map in easy to distinguish text.

Example: AP01 – AP99.

o AP numbering should start over at 1 on each floor.

o Picture of each AP in proposed location and labeled appropriately

- Coverage heat maps for design and AP locations. For each floor the following should be supplied:

o 2.4 GHz Signal Strength coverage with the minimum threshold set at -67 dBm.

- SNR coverage with the minimum threshold set at 25 dB.

- 5 GHz Signal Strength coverage with the minimum threshold set at -67 dBm.

SNR coverage with the minimum threshold set at 25 dB.

- Exception report including:

o Areas under construction o Areas that may not achieve specified signal strength or SNR standards due to unusual local parameters e.g.excessive interference, extremely dense materials in the immediate vicinity o Cable runs from access point to wiring closet that exceed 300 feet.

E. ASSUMPTIONS

- Vendor will provide appropriately skilled Cisco certified services personnel to complete all tasks, documentation required.

- Environment to be surveyed is typical office construction – offices divided by drywall, cubicles with typical partitions, conference rooms

- Wireless support is not required for external use, or to support building-to-building connectivity

- Recommendations for any LAN or WAN equipment configurations are not required

- The site survey will be conducted to support data endpoint connectivity only. Location appliance will function, with the accuracy that can be accomplished using the AP deployment placement that is intended to meet the data throughput requirement. VoIP endpoints will function, but universal coverage will not be guaranteed due to the low power capacity of the VoIP telephones.

- VA will assign a technical representative who will provide task assignment and daily direction to the awarded vendor. Assigned work shall be in keeping with the skill-set and level of the requested resource. Management of project schedule, deliverables, and project completion criteria will be performed in coordination with the VA technical representative.

F. CHANGES TO STATEMENT OF WORK

Any changes to this SOW shall be authorized and approved only through written correspondence from the CO. A copy of each change will be kept in a project folder along with all other products of the project. Costs incurred by the contractor through the actions of parties other than the CO shall be borne by the contractor.

G. SECURITY

Information System Security

The contractor shall ensure adequate LAN/Internet, data, information, and system security in accordance with VA standard operating procedures and standard contract language, conditions laws, and regulations. The contractor’s firewall and web server shall meet or exceed the government minimum requirements for security. All government data shall be protected behind an approved firewall. Any security violations or attempted violations shall be reported to the VA project manager and the VBA Headquarters Information Security Officer as soon as possible. The contractor shall follow all applicable VA policies and procedures governing information security, especially those that pertain to certification accreditation.

The Veterans Affair Acquisition Regulation (VAAR) security clause (cited below) must be included in all contracts:

VAAR- 852.273-75 “SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION

TECHNOLOGY RESOURCES”

(a) The contractor and their personnel shall be subject to the same Federal laws, regulations, standards and VA policies as VA personnel, regarding information and information system security. These include, but are not limited to Federal Information Security Management Act (FISMA), Appendix III of OMB Circular A-130, and guidance and standards, available from the Department of Commerce's National Institute of Standards and Technology (NIST). This also includes the use of common security configurations available from NIST's Web site at:

http://checklists.nist.gov

(b) To ensure that appropriate security controls are in place, Contractors must follow the procedures set forth in "VA Information and Information System Security/Privacy Requirements for IT Contracts" located at the following Web site: http://www.iprm.oit.va.gov.”

http://checklists.nist.gov/ http://www.iprm.oit.va.gov/

Security Training

All contractor employees and subcontractors under this contract or order are required to complete the VA's on-line Security Awareness Training Course and the Privacy Awareness Training Course annually. Contractors must provide signed certifications of completion to the CO during each year of the contract. This requirement is in addition to any other training that may be required of the contractor and subcontractor(s).

Contractor Personnel Security

All contractor employees who require access to the Department of Veterans Affairs' computer systems shall be the subject of a background investigation and must receive a favorable adjudication from the VA Security and Investigations Center (07C). The level of background security investigation will be in accordance with VA Directive 0710 dated September 10, 2004 and is available at:

http://www.va.gov/pubs/asp/edsdirec.asp (VA Handbook 0710, Appendix A, Tables 1 - 3). Appropriate Background Investigation (BI) forms will be provided upon contract (or task order) award, and are to be completed and returned to the VA Security and Investigations Center (07C) within 30 days for processing. Contractors will be notified by 07C when the BI has been completed and adjudicated.

These requirements are applicable to all subcontractor personnel requiring the same access. If the security clearance investigation is not completed prior to the start date of the contract, the employee may work on the contract while the security clearance is being processed, but the contractor will be responsible for the actions of those individuals they provide to perform work for the VA. In the event that damage arises from work performed by contractor personnel, under the auspices of the contract, the contractor will be responsible for resources necessary to remedy the incident.

The investigative history for contractor personnel working under this contract must be maintained in the databases of either the Office of Personnel Management (OPM) or the Defense Industrial Security Clearance Organization (DISCO). Should the contractor use a vendor other than OPM or Defense Security Service (DSS) to conduct investigations, the investigative company must be certified by OPM/DSS to conduct contractor investigations.

1. Background Investigation

The position sensitivity impact for this effort has been designated as Low Risk and the level of background investigation is NACI.

2. Contractor Responsibilities

a. The contractor shall bear the expense of obtaining background investigations. If the investigation is conducted by the Office of Personnel Management (OPM) through the VA, the contractor shall reimburse the VA within 30 days.

b. Background investigations from investigating agencies other than OPM are permitted if the agencies possess an OPM and Defense Security Service certification. The Vendor Cage Code number must be provided to the Security and Investigations Center (07C), which will verify the information and advise the contracting officer whether access to the computer systems can be authorized.

c. The contractor shall prescreen all personnel requiring access to the computer systems to ensure they maintain a U.S. citizenship and are able to read, write, speak and understand the English language.

d. After contract award and prior to contract performance, the contractor shall provide the following information, using Attachment B, to the CO:

(1) List of names of contractor personnel.

(2) Social Security Number of contractor personnel.

(3) Home address of contractor personnel or the contractor's address.

e. The contractor, when notified of an unfavorable determination by the Government, shall withdraw the employee from consideration from working under the contract.

f. Failure to comply with the contractor personnel security requirements may result in termination of the contract for default.

g. Further, the contractor will be responsible for the actions of all individuals provided to work for the VA under this contract. In the event that damages arise from work performed by contractor provided personnel, under the auspices of this contract, the contractor will be responsible for all resources necessary to remedy the incident.”

3. Government Responsibilities

a. The VA Security and Investigations Center (07C) will provide the necessary forms to the contractor or to the contractor's employees after receiving a list of names and addresses.

b. Upon receipt, the VA Security and Investigations Center (07C) will review the completed forms for accuracy and forward the forms to OPM to conduct the background investigation.

c. The VA facility will pay for investigations conducted by the OPM in advance. In these instances, the contractor will reimburse the VA facility within 30 days.

d. The VA Security and Investigations Center (07C) will notify the contracting officer and contractor after adjudicating the results of the background investigations received from

OPM.

e. The contracting officer will ensure that the contractor provides evidence that investigations have been completed or are in the process of being requested.

H. CONFIDENTIALITY AND NONDISCLOSURE

It is agreed that:

1. The preliminary and final deliverables and all associated working papers, application source code, and other material deemed relevant by the VA which have been generated by the contractor in the performance of this task order are the exclusive property of the U.S. Government and shall be submitted to the CO at the conclusion of the task order.

2. The CO will be the sole authorized official to release verbally or in writing, any data, the draft deliverables, the final deliverables, or any other written or printed materials pertaining to this task order. No information shall be released by the contractor. Any request for information relating to this task order presented to the contractor shall be submitted to the CO for response.

Press releases, marketing material or any other printed or electronic documentation related to this project, shall not be publicized without the written approval of the CO.

ATTACHMENT A

SECURITY

BACKGROUND INVESTIGATION INFORMATION

(SUBMIT AFTER AWARD AND PRIOR TO CONTRACT PERFORMANCE)

COMPLETE THIS FORM AFTER CONTRACT AWARD IF CONTRACTOR

EMPLOYEE DOES NOT POSSESS A NACI CLEARANCE. THE COMPLETED

FORM MUST BE SENT DIRECTLY TO THE CONTRACTING OFFICER

WITHIN TEN DAYS OF AWARD.

VENDOR NAME: ______________________ CAGE CODE NO.______________

ADDRESS: _______________________________

CITY, STATE, AND ZIP CODE: ______________________________

1. WAS THE EMPLOYEE PRESCREENED? _____ YES OR _____ NO

2. IS THE EMPLOYEE A U.S. CITIZEN? _____ YES OR _____ NO

3. CAN THE EMPLOYEE READ, WRITE, SPEAK AND UNDERSTAND

ENGLISH LANGUAGE?

_____ YES OR _____NO

INFORMATION FROM EMPLOYEE REQUIRING A CLEARANCE

NAME SOCIAL SECURITY NO.

ADDRESS

CITY STATE ZIP CODE

Information System Security