Exhibit M Agency Requirements Security.pdf

EXHIBIT D

Veterans Affairs - Health Care Systems

Lease Security Standards SCOPE OF WORK

GENERAL INFORMATION

1. Title of Project: LC As-Built CBOC Lease

The Department of Veterans Affairs (VA) at El Paso Texas is interested in leasing a space for use by tenant for personnel administrative and healthcare services, furnishings, and equipment.

2. Scope of Work: The Lessor shall provide all resources necessary to accomplish the deliverables described in the scope of work (SOW), except as may otherwise be specified.

3. Design and Construction Criteria:

Offeror shall comply with VA Standards http://www.cfm.va.gov/til/spclRqmts.asp#CBOC

(a) Physical Security Design Manual – January 2015 for Life Safety Security Facilities refers to Security

Systems to be incorporated in the facility.

(b) VA Handbook Directive 0730 – Security and Law Enforcement 0730/4 –March 2013 describes construction standards to protect lives and property at different locations.

4. Electronic Security Systems

Lessor shall provide an independent room for Physical Access Control System, Intrusion Detection System, and

Video-Cameras Assessment-Recording and Surveillance Systems separate from the OIT Room. New and existing facilities are required to meet the integration and monitoring of the following to be provided and installed by

Lessor and shall be a negotiated item post award:

Physical Access Control System. - Lessor shall install a PIV compatible PACS system. All PACS are required to be terminated in the network to provide local range coverage by Lessor with network capability for full integration and remote transmission to Main VA Clinic system (to be done by others). The Lessor shall be responsible for providing, installing, maintaining, and repairing the PACS system.

Intrusion Detection System. - IDS consists of a minimal motion alarm system required to detect and

“locally” annunciate unauthorized entry into a protected space with a private monitoring service capable of continuous operation and monitoring through the use of UPS equipment.

Video-Cameras Assessment-Recording and Surveillance. - VASS includes “digital IP video” cameras, monitors, controlling and recording equipment to archive minimum of 6 months of video recording, and centralized management and operations of the system. Digital Video Recording (DVR) can terminate at the Police/Security Office. VASS should integrate with PACS. Cameras shall be color that allows for black and white application to support the exterior and interior to cover egress, public entrances, utilities, fire control room, lobby, main corridors, telecommunication and security rooms. VASS shall be supported by UPS equipment.

(a) Panic Alarm System. - Alarm sensors/devices shall be hardwired, or wireless transmission directly connected to the data network without degrading the effective range of alarm.

(b) Video-Cameras Assessment-Recording and Surveillance. - VASS includes “digital IP video” cameras, EXHIBIT M monitors, controlling and recording equipment to archive minimum of 6 months of video recording, and centralized management and operations of the system. Digital Video Recording (DVR) can terminate at the Police/Security Office. Cameras shall be color that allows for black and white application to support the exterior and interior to cover egress, public entrances, utilities, fire control room, lobby, main corridors, telecommunication, and security rooms. VASS shall be supported by UPS equipment.

(c) Duress, Security Phones, and Intercom /Public Address system. - DSIP requires an intercom to be integrated with VASS. Lessor to provide Duress/Panic Alarms and Intercom Systems at locations where there is considerable public contact in isolated and pre-identified high-risk areas, such as the lobby reception desk, patient service areas, nursing stations, and isolated where VA personnel work.

(d) Detection and Screening System. - DSS location will be the entry point to the facility where Lessor shall provide space to locate a table and a walk-through metal detector (WTMD). Lessor shall provide a dedicated electrical circuit with a floor outlet with metal cover protection for Agency to provide and connect the WTMD.

5. IT Security Systems

New and existing facilities are required to meet the integration and monitoring of the following to be provided and installed by Lessor and shall be a negotiated item post award:

Lessor/Landlord shall follow mandatory procedures stated under VA Handbook Directive 0730 – Security and

Law Enforcement 0730/4 –March 2013 to comply with physical security requirements for IT data centers, server room, telephone equipment room, storage areas, data connection closets, etc. Lessor/Landlord shall provide and install cable trays, data cable, telecommunications cable and terminating all connections. Refer to revised table below.

GENERAL REQUIREMENTS

1. OVERVIEW OF LEASE SECURITY STANDARDS

(a) The Government will determine security standards for facilities and agency space requirements.

Security standards will be assessed based upon tenant agency mix, size of space requirement, number of employees, use of the space, location of the facility, configuration of the site and lot, and public access into and around the facility. The Government will designate a security level from Level I to Level IV for each space requirement.

(b) Within 120 days of lease award, or at the time of submission of working/construction drawings, whichever is earlier, the Lessor shall provide the Government with itemized costs of the security items in this section.

(c) A security level designation may be determined by the individual space requirement or by the assessed, cumulative tenant agency mix within a given facility. If an Offeror is offering space in a facility currently housing a federal agency, the security level designation of the facility may be increased, and the Offeror may be required to adhere to a higher security standard than other Offerors competing for the same space requirement. If two or more federal space requirements are being competed at the same time, an

Offeror submitting on both or more space requirements may be subject to a higher security standard if the Offeror is determined to be the successful Offeror on more than one space requirement. It is incumbent upon the Offeror to prepare the Offeror's proposal accordingly.

(d) The Level II lease security standards shall become the minimum facility security level (FSL) with square footage greater than 10,000 but less than 100,000 SF for this requirement. Offeror shall comply with VA

Handbook Directive 0730/4 mandatory procedures.

2. DETERRENCE TO UNAUTHORIZED ENTRY

The Lessor shall provide a level of security that reasonably prevents unauthorized entry to the space during non-duty hours and deters loitering or disruptive acts in and around the space leased. The Lessor shall ensure that security cameras and lighting are not obstructed.

3. ACCESS TO UTILITY AREAS

Utility areas shall be secure, and only authorized personnel shall have access.

4. EMERGENCY POWER TO CRITICAL SYSTEMS (TENANT IMPROVEMENT)

Emergency power backup is required for all alarm systems, Closed Circuit Television CCTV/ VASS monitoring devices, fire detection systems, telecommunication systems, entry control devices, lighting, etc., and special equipment referred on VA Physical Security Design Manual for Life Safety Security Facilities, as follows:

(a) Physical Access Control System

(b) Intrusion Detection System

(c) Panic Alarm System

(d) Video-Cameras Assessment-Recording and Surveillance

(e) Duress, Security Phones, and Intercom System

5. MECHANICAL AREAS AND BUILDING ROOFS

(a) Keyed locks, keycards, or similar security measures shall strictly control access to mechanical areas.

Additional controls for access to keys, keycards, and key codes shall be strictly maintained. The Lessor shall develop and maintain accurate HVAC diagrams and HVAC system labeling within mechanical areas.

(b) Roofs with HVAC systems shall also be secured. Fencing or other barriers may be required to restrict access from adjacent roofs based on a Government Building Security Assessment. Roof access shall be strictly controlled through keyed locks, keycards, or similar measures. Fire and life safety egress shall be carefully reviewed when restricting roof access.

6. ACCESS TO BUILDING INFORMATION

Building Information—including mechanical, electrical, vertical transport, fire and life safety, security system plans and schematics, computer automation systems, and emergency operations procedures—shall be strictly controlled. Such information shall be released to authorized personnel only, approved by the Government, preferably by the development of an access list and controlled copy numbering. The Contracting Officer may direct that the names and locations of Government tenants not be disclosed in any publicly accessed document or record. If that is the case, the Government may request that such information not be posted in the building directory.

7. POSTING OF GOVERNMENT RULES AND REGULATIONS (TENANT IMPROVEMENT)

The Government will post applicable Government rules and regulations at the entrance to any Government-occupied space for such things as, but not limited to, barring the unauthorized possession of firearms and dangerous weapons. The Government will coordinate with the Lessor to ensure signage is consistent with the

Lessor's standards.

8. DEVELOPMENT, IMPLEMENTATION, AND PERIODIC REVIEW OF OCCUPANT EMERGENCY PLANS

The Lessor shall cooperate and participate in the development of an Occupant Emergency Plan (OEP) and if necessary, a supplemental Sheltering-in Place (SIP) Plan. Periodically, the Government may request (that the

Lessor assist in reviewing and revising the OEP and SIP plan(s).

9. EMERGENCY VOICE/ALARM COMMUNICATION SYSTEM (BUILDING SHELL)

The building-wide fire alarm system installed in the building shall be an emergency voice/alarm communication system. The emergency voice/alarm communication system shall be designed and installed to meet the requirements of the applicable local codes and ordinances adopted by the jurisdiction in which the building is located. The emergency voice/alarm communication system shall be capable of originating and distributing voice instructions (e.g., in the event of possible contamination of the HVAC system, blasts, etc.), as well as alert and evacuation signals pertaining to fire or other emergencies to the occupants of the building.

10. BUILDING SECURITY PLAN

The Offeror shall provide a Pre-Lease Building Security Plan with the offer that addresses its compliance with the lease security standards.

11. ADDITIONAL SECURITY MEASURES AS DETERMINED BY THE GOVERNMENT

The security level for each space requirement will be set by the Government’s building security assessment as part of the requirements development phase. This phase will be completed before solicitation for lease acquisition.

12. IDENTITY VERIFICATION OF PERSONNEL

(a) The Government reserves the right to verify identities of personnel with routine access to Government space. The Lessor shall comply with the agency personal identity verification procedures below that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget

(OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number

201, as amended.

(b) The Lessor shall insert this paragraph in all subcontracts when the subcontractor is required to have

(physical access to a federally controlled facility or access to a federal information system.

(c) Lessor compliance with subparagraphs I) through IV) below will suffice to meet the Lessor's requirements under HSPD-12, OMB M-05-24, and FIPS PUB Number 201.

I). The Government reserves the right to conduct background checks on Lessor personnel and contractors with routine access to Government leased space.

II). Upon request, the Lessor shall submit completed fingerprint charts and background investigation forms for each employee of the Lessor, as well as employees of the Lessor's contractors or subcontractors, who will provide building operating services requiring routine access to the

Government's leased space for a period greater than 6 months. The Government may also require this information for the Lessor's employees, contractors, or subcontractors who will be engaged to perform alterations or emergency repairs in the Government's space.

III). The Lessor must provide Form FD-258, Fingerprint Chart (available from the Government Printing

Office at http://bookstore.gpo.gov), and Standard Form 85P, Questionnaire for Public Trust Positions, completed by each person and returned to the contracting officer (or the contracting officer's designated representative) within 30 days from receipt of the forms. Based on the information furnished, the Government will conduct background investigations of the employees. The contracting officer will advise the Lessor in writing if an employee fails the investigation, and, effective immediately, the employee will no longer be allowed to work or be assigned to work in the Government's space.

IV). Throughout the life of the lease, the Lessor shall provide the same data for any new employees, contractors, or subcontractors who will be assigned to the Government's space. In the event the Lessor's contractor or subcontractor is subsequently replaced, the new contractor or subcontractor is not required to submit another set of these forms for employees who were cleared through this process while employed by the former contractor or subcontractor. The Lessor shall resubmit Form FD-258 and

Standard Form 85P for every employee covered by this paragraph on a 5-year basis.

13. ENTRY SECURITY: INTRUSION DETECTION SYSTEM WITH CENTRAL MONITORING CAPABILITY

The Lessor shall provide and install a perimeter of Intrusion Detection System (IDS) to be operated and maintained by the Government.

14. SECURE HVAC: OUTDOOR AIR INTAKES (BUILDING SHELL)

The outdoor air intakes shall be located on a secure roof or high sidewall and not within 30 feet of the loading dock; otherwise the Lessor shall relocate, extend, or secure intakes as described below:

(a) Outdoor air intakes shall be relocated. The lowest edge of the outdoor air intakes shall be placed 40 feet, 0 inches above grade and not less than 30 feet, 0 inches from the loading dock. Access shall be locked and secured, if feasible. For increased visibility of suspicious items, moat areas and other ground level areas surrounding outside air intakes shall be completely free of trash, debris or any other matter.

(b) Outdoor air intakes shall be extended. If relocation is not feasible, as approved by the Government, intake extensions shall be constructed without creating adverse effects on HVAC performance. The higher the extensions, the better, as long as other design constraints (excessive pressure loss, dynamic and static loads on structure) are considered. An extension height of 40 feet, 0 inches is required unless adverse effects on HVAC performance can be demonstrated. The entrance to the intake shall be covered with a sloped metal mesh to reduce the threat of objects being tossed in the intake. A minimum slope of 45 degrees may be required.

Extension height shall be increased where existing platforms or building features (e.g., loading docks, retaining walls) might provide access to the outdoor air intakes.

(c) A security zone around outdoor air intakes shall be established. When outdoor air intakes are publicly accessible and relocation or physical extensions are not viable options or are cost prohibitive, perimeter barriers that prevent public access to outdoor air intake areas shall be required based on the Government's building security assessment Iron fencing or similar see-through barriers may be required. The restricted area shall also include an open buffer zone between the public areas and the intake louvers. The Government will have the right to monitor the buffer zone by physical security and/or closed circuit television (CCTV/VASS). Security lighting or intrusion detection sensors are required and shall be provided and installed by the Lessor.

15 SECURE HVAC: AIRBORNE HAZARDS

Air-handling units shall be able to be shut down in response to a threat. Procedures shall be in place for notification of the Lessor's building engineer or manager, building security guard desk, local emergency personnel, VA personnel, and Contracting Officer for possible shut-down of the air handling units serving ' the mailroom and/or any other possibly affected areas of the building to minimize contamination, as deemed appropriate to the hazard. The Lessor shall secure return-air grilles in public lobbies. Protection measures shall not adversely affect performance of the building's HVAC system. Return air-grille protective measures include:

(a) Relocating return-air grilles to inaccessible, yet observable locations.

(b) Increasing security presence (human or CCTV/ VASS) near vulnerable return-air grilles.

(c) Directing public access away from return-air grilles.

(d) Removing furniture and visual obstructions from areas near air grilles.

16. PARKING SECURITY REQUIREMENTS

(a) Control of Parking Areas: The Lessor shall permit Government security control over all parking areas, surface or structured. Security control will include the right to inspect at points of entry, the right to deny access, and the right to remove vehicles from the premises. The Lessor shall provide a vehicle pass/ID system for contract/monthly parkers, acceptable to the Government.

(b) Arrange for Employee Parking after Normal Working Hours: The Lessor will allow employee parking in/near the building after normal working hours.

(c) Accessibility to Official Government Vehicles: Public accessibility to official Government vehicles shall be limited through fencing or other means.

(d) Identification of Parking Areas: Government parking areas or spaces shall be assigned and marked as

"reserved."

(e) Inspection of Parking Areas: The Government reserves the right at all times, to inspect the parking premises, all vehicles therein, and to remove vehicles from the premises.

(f) Post Signs and Arrange for Towing of Unauthorized Vehicles: Signage shall be provided by the Lessor, acceptable to the Government, to alert parking patrons of l inspection and towing policies. Signage shall advise that the removal of unauthorized vehicles can be expected.

(g) ID System and Procedures for Authorized Parking: An ID system for authorized parking shall be provided by the Lessor, acceptable to the Government, for identification of vehicles and corresponding parking spaces (placard, decal, card key, etc.).

(h) Standoff Distance: No Vehicle shall be parked closer than 25 feet (7.6m) to any side of the building, regardless of height. No unscreened vehicle shall be permitted to travel closer than 25 feet (7.6 m) and no screened vehicle shall be permitted to travel within 5 feet (1.5 m) of any life-safety protected VA facility. These minimum standoff distances are to be provided to the edge of the curb line demarcating the internal roadways and parking within a VA campus. Anti-ram rated natural or manmade stationary barriers may be used. Landscaping examples include berms, gullies, boulders, trees, and other terrain.

Hardscaping examples include benches and planters. Structural examples include walls, bollards, and cables.

17. CCTV MONITORING: CCTV SURVEILLANCE CAMERAS WITH TIME LAPSE VIDEO RECORDING

Refer to General SOW for requirements

The Lessor shall permit twenty-four hour Closed Circuit Television (CCTV) coverage and recording, provided, operated, and maintained by the Government. The Government's Building Security Assessment of the building will determine the exact number of cameras and locations. Time-lapse video recordings (digital storage) are also required. The Government will centrally monitor the CCTV Surveillance.

18. CCTV MONITORING: POST SIGNS ADVISING OF 24-HOUR VIDEO SURVEILLANCE (TENANTIMPROVEMENT)

When video surveillance is installed, warning signs advising of twenty-four hour surveillance shall be posted.

19. TEMPORARY SECURITY UPGRADE DUE TO IMMEDIATE THREAT

The Government reserves the right, at its own expense and with its own personnel, to temporarily heighten security in the building under lease during heightened security conditions due to emergency situations such as terrorist attacks, natural disaster, and civil unrest.

20. SECURITY OFFICE – WEAPON STORAGE

Security Office with Weapon Storage/Armory will be used to house 2 Police Officers. Amory Storage walls shall be of brick and masonry construction. Walls which are composed of wood frame and siding will require an interior backing of steel security screen wire mesh.

(a) Doors and doors locks required for Security Office. - Doors are of 45 mm (1-314 in.) solid core hardwood or hollow steel construction. Dutch or half doors are unacceptable. Removable hinge pins on door exteriors must be retained with set pins or spot welded, preventing their removal.

This applies only if the hinge pins are on the outside of the doors and door frames. Hinge pins will be on the outside if the door opens outward. Doors set in steel frames must be fitted with a mortise lock with a deadlock feature.

(b) Other room access means required in Security Office. - All vents, ducts, and similar openings in excess of

96 square inches (620 cm2) that enter or pass through space shall be protected with either bars or grills.

If one dimension of the duct measures less than six inches (150 mm) or duct is less than 96 square inches (620 cm2), bars are not required; however, all ducts must be treated to provide sufficient sound attenuation. If bars are used, they must be 1/2 inch (12.7 mm) diameter steel welded vertically and horizontally six (6) inches (150 mm) on center; if grills are used, they must be of 9-gauge expanded steel.

(c) Access Control for Security Office, IT Closets & Pharmacy. - IDS to locally detect entry into these rooms with the ability to log into PACS system. Lock on the main door must be automatically locking, with a minimum 19 mm (3/4 in.) dead bolt and inside thumb latch. Pharmacy to be secured with double lock procedure to access medication.

SECURITY SYSTEMS

The Lessor shall ensure security systems in accordance with VA standard operating procedures and standard contract language, conditions laws, and regulations. The Offeror shall follow all applicable VA policies and procedures governing security, especially those that pertain to certification accreditation to ensure that appropriate security systems are in place.

--- END OF DOCUMENT ---