Official Qs and As FA448621Q00040001.pdf

Official Questions - FA448621Q0004

CCTV, ACCESS CONTROL, INTRUSION ALARMA SYSTEM FOR BLDG T-612, T-709

Due Date: 04 May 2021

1. 2.0 Summary Requirements:

a. In respect to Trade Agreement Act (TAA) compliance, are the Video Management System (VMS), Access Control System (ACS) and Intrusion Detection System (IDS) equipment required to certify that they are not manufactured or utilize major components from China and Malaysia?

i. List of countries that are not TAA Compliant are:

1. China

2. India

3. Indonesia

4. Iran

5. Iraq

6. Malaysia

7. Pakistan

8. Russia

b. Is it a requirement for the VMS solutions to meet the provisions of the Buy America Act (BAA), the Trade Agreement Act (TAA) and the National Defense Authorization Act (NDAA)? In addition, should the ACS solutions additionally meet the General Services Administration Approved Product list (GSA APL) schedule ensuring customer compliance for federal funding? Approved Products List (idmanagement.gov)

c. Does this procurement consider the benefits of products that are manufactured by companies headquartered in the USA and with substantial manufacturing operations in the USA?

Answer: This solicitation is exempt from the Buy American Act (BAA) and Trade Agreement Act (TAA). The items do not have to be a part of the GSA APL schedule. This solicitation is subject to section 889(a)(1)(B) of Title VII of the National Defense Authorization Act (NDAA). Further information can be found in the SF1449 under 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment ( OCT 2020) and 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (Aug 2020) (Section 889(a)(1)(A) of Pub. L. 115-232).

2. 3.2 Camera Specifications: Page 2 line 1(All exterior cameras shall be FULL HD 1080P color pan‐tilt‐zoom cameras.)

a. Do the interior cameras require the same environmental camera protection as the exterior camera?

i. This is not standard practice as there are interior protective cases that are more aesthetically pleasing and have a much lower cost.

b. Can the interior camera have differing housings based on form factor and location?

Answer: All Exterior cameras shall be in a protective housing and be mounted to provide sufficient wind resistance to account for high winds that are present in the Lajes Field environment and shall comply with Section 889(a)(1)(A) of the National Defense Authorization Act (NDAA) for Fiscal

Year 2019. Interior cameras are not required to have a protective housing but need be FULL HD 1080P color pan-tilt-zoom cameras (3.2 SoW)

i. Interior Camera designs have varying solution formats such as Dome, Fisheye and Bullet.

c. Can the use of alternate technology take the place of PTZ Pan Tilt Zoom Cameras?

i. Example: The use of field of focus and ability to divide the area of coverage into multiple displayed events from a single camera unit while maintaining the quality of video streams.

d. Should the field of focus or view capability of the scene be modifiable by the observer in real time, or later, when going back to review the recorded data?

BOTH

e. Should the cameras have Infrared (IR) illumination to allow the scene to be captured when the building interior or exterior lights are turned off? YES

Answer: The use of new technology is to provide the same coverage area is permitted as long as the entire are completely covered. The need to Pan-Tilt can be augmented but the need for real time zoom is required. It is required to have the ability to modify the view in real time and later for review, the camera needs to have IR illumination.

f. Should the CCTV cameras be ONVIF Profile G certified in order to guarantee that in case of communication loss between the camera and the NVR, that the recordings are stored on the camera with the use of an onboard SD-card?

Once the connection to the NVR is restored, the system synchronizes with the NVR slot for backup?

i. An ONVIF device compliant to the Profile G is an ONVIF device that records video data over an IP network or on the device itself. For example, a device compliant to the Profile G may be an IP network camera or an encoder device. An ONVIF client compliant to the Profile G is an ONVIF client that can configure, request, and control recording of video data over an IP network from an ONVIF device compliant to the Profile G. The Profile G also includes support for receiving audio and metadata stream if the client supports those features.

ii. https://www.onvif.org/profiles/

Answer: The use of SD-card is not required anything greater will be accepted.

g. Should the FULL HD Camera provide, at a minimum, the following industry capabilities to ensure full visual acuity at the required distances?

i. Interior Wide area coverage with a minimum of 80px/m on target

ii. Interior Door/Hallway Coverage with a minimum of 250px/m on target

iii. Exterior Wide area Coverage with a minimum of 100px/m on target

iv. Exterior Door or entrance coverage with a minimum of 300px/m on target

h. The current requirements state that the cameras should be full HD. Does this imply that the cameras that monitor the entry and exit doors should be able to identify the person at a distance of 10 meters from the camera at 250 pixels per meter?

Answer: Any scope of HD camera is acceptable

3. 3.2.1 Camera Specifications: Page 2 line 2 (All cameras shall be mounted at the pre‐designated locations identified in the appendices at the end of this Statement of Work.)

a. Can substituted camera counts and locations be provided to reduce the number of devices needed?

i. Current industry capabilities can utilize enhanced system performance to provide the same coverage suggested by the camera placement with less equipment, thereby reducing cost while increasing coverage and capabilities.

Answer: The use of advanced technology to reduce the number of cameras and still deliver the same coverage area and at the same or better clarity is acceptable.

b. Should the exterior equipment housings and mounting hardware meet IP68 and be made from anti corrosion materials such as aluminum or galvanized steel? “Due to the corrosive conditions of the Azorean atmosphere, all wire and cable should be copper.

Outdoor enclosures should be stainless steel, fiberglass or other corrosion-resistant materials.

i. Current equipment onsite was not at an appropriate level of environmental standards of hardware/equipment and the systems rusted off of their mounting.

Answer: The use of anti-corrosion materials is highly desired because of the atmosphere in the Azores.

4. 3.2.3. Existing Infrastructure:

a. Shall the US Government provide a location for onsite recycling of the camera, hardware and cabling to allow the US Gov to recover a portion of the cost of the copper that will be reclaimed?

i. “Or” will the US Gov coordinate the disposal at the City of Angra municipal landfill

ii. “Or” is it expected that the cables, cameras, and hardware will be shipped to mainland Europe for disposal?

Answer: All equipment must be turned into 721st to be disposed of.

5. 3.3 VMS Workstation: Page 2 line 8

a. Will the US Gov provide four (4) strands of Fiber Optic Cable between both T-612 and

T-709

Answer: The 721st has put in a work order to determine if there is Fiber Optic Cable already installed to connect the two buildings, if not it will NOT be installed.

b. Shall the VMS and ACS systems be linked and visible on the same computer terminal?

Answer: This is desired if possible with or without fiber.

c. Should the VMS system have Video analytics capabilities, including analytic event rule triggers and unusual motion & activity detection technology? Not Required but will be accepted

i. Should the Analytics Include the ability to configure rules to observe specific conditions like detecting the presence of a person crossing into a specific area and once triggered alert the operator or a group of individuals?

Answer: This is not required but will be acceptable if provided.

d. Shall the VMS system have forensic search capabilities with bookmarking, event, and thumbnail search options? Not Required but will be accepted

i. Example: A forensic search can be started using many types of event searches such as triggered alarms, bookmarks added to recording timelines, License plate matches, Face matches, and Access denied events, etc.

ii. Example: An appearance search that allows the investigator to search for a person using the physical description. One could also upload a photo and start looking for this individual based on the uploaded photo.

e. Shall the VMS be able to enable remote unlocking of doors and activation of digital outputs directly from a camera view?

i. Example: Any of the digital outputs either from the cameras or generic digital outputs from the ACS (they are called generic when not assigned to any door) can be linked to one or more cameras so that the operator can control them from the user interface when they are viewing the camera. The outputs can be used to control things like entrance barriers, gates, lighting, etc.

Answer: It is highly desired that all doors can be locked/unlocked remotely from the VMS.

f. Shall the CCTV recorder server have failover capabilities or be ready to implement failover or Disaster Recovery (DR) in the future? no

i. Example: The use of a secondary server or offsite storage, with having two servers, one at each building with one as primary and the other as backup/secondary storage.

Answer: It is not required for the CCTV to act as a failsafe for disaster recovery. If provided it will be accepted.

g. Should the VMS data be encrypted at rest and in transit, using FIPS 140-2 L2, secured with onboard TPM, via Windows BitLocker, OS drive encrypted to FIPS 140-2 L2, secured with TPM? Must the OS be compliant with Server 2016 STIG-compliant Windows OS?

h. Should the VMS Network Video Recorder (NVR) use Encrypted operating systems on a redundant array of Solid-State Drives designed for greater reliability and speed?

Answer: It is not required. If provided it will be accepted as long as it meets all other specification it will be accepted.

6. 3.4 VMS Power Supply/UPS Page 2 line 12

a. Shall all components of the VMS to include cameras need to utilize uninterruptible power?

i. How long shall the UPS provide power to the system? (example 30Mins 1 Hour)

ii. Shall the UPS be rated at 50Hz and operate at 220V AC?

Answer: It is desired for the UPS to last at a minimum of 24 hours.

7. 4. Access Control System: Page 2 line 14

a. Shall the ACS also have an UPS system to ensure continued use and activation during power outages?

i. How long should the UPS provide power?

ii. Can the ACS and VMS operate on the same UPS if power output is available to operate both systems concurrently?

b. Should the Access Control system require separate power supplies to independently power the controller and the magnetic locks thus protecting the ACS control system from electric shorts along the door control paths?

i. Example: If the control cable was cut for the doors a short circuit could cause power surges that may damage/disrupt the ACS controller.

c. Should the Access Control System be integrated with the Video Management System (VMS)? Not required

i. So that trigger events like access denied, forced door, valid card at unauthorized reader that are identified within the ACS will trigger visual Alerts in the VMS?

ii. So that from the user interface of the VMS the operator can grant access, lock and unlock doors without the use of ACS Credentials?

iii. So that from the user interface of the VMS the operator can view the photo of the person that swiped the card in the reader and perform identity verification?

iv. So that from the user interface of the VMS the operator can review the video associated with the previous events of access granted and access denied?

1. Example: Interconnection between the VMS and the ACS can help allow the security team verify remote access control alarms, provide real time access control responses, and can link visual and physical matches providing situational awareness.

Answer: It is desired for the UPS to last at a minimum of 24 hours, it can be used and integrated with the VMS system, the VMS unlock/lock doors, and provide real time alarms.

v. Is automated Identity search and identity verification using access control credentials to compare against recorded and live video respectively, a requirement?

1. Example: Automatic comparison of the live image and stored image to validate identification.

d. Are emergency exit buttons required to be installed at all interior and exterior facing doors with magnetic locks?

e. Shall Alarms sound if Emergency buttons are activated for magnetic lock release?

f. Shall the ACS create rules for access control events?

g. Shall the ACS Grant door access remotely?

h. If alarms are activated should the Access Control System and Video Management System create a visual alert at the control stations?

i. Where shall alarm speakers be located and how loud?

Answer: For question B-F all are desired. G. Alarm speakers positioned at outer doors would be desired.

8. 4.1. Access Control requirements.

a. The ACS is not fully driven by the NDAA 2019 889 as such should the ACS be required to meet FIPS 20, FIPS 201-2 and FIPS 140-2and GSA PACS Approved Product List?

i. GSA’s Physical Access Control System (PACS) approved products list thus meeting the security and functional requirements set by GSA’s Evaluation Program. APL Listed on: https://www.idmanagement.gov/approved-products-list-pacs-products/

ii. Office of Management and Budget (OMB) released memo M-11-11 requirement for use of Personal Identity Verification (PIV) credentials Memorandum for the Heads of Executive Departments and Agencies (cac.mil)

iii. Homeland Security Presidential Directive-12 [HSPD-12], “government-wide standard for identity credentials for executive branch employees and contractors to improve physical security in federally controlled facilities” Homeland Security Presidential Directive 12 | Homeland Security (dhs.gov)

b. Should the access control system have the ability to utilize PIV Class Enablement?

Answer: The use of PIV is not required but will be acceptable if provided.

Example below/ The access control solution should be capable of:

i. pivCLASS authenticates PIV credentials across the full range of assurance levels as defined by the federal government’s Special Publication 800-116 (SP 800- 116). pivCLASS products also support the Transportation Worker Identification Credential (TWIC) Reader Specification.

ii. Federal Information Processing Standard Publication 201 (FIPS-201) Support:

Enables FIPS 201 compliant validation and registration of Identities through the following:

1. Integration with HID pivCLASS devices.

2. HID pivCLASS Certificate Manager and updating an existing cardholder record or inserting one, if one did not already exist.

3. Supports importing photographs and fingerprint biometrics from government issued smart cards that are compliant with FIPS-201.

iii. Allows credential suspension if card certificate serial number is on a designated list, including the following:

1. Certificate Revocation List (CRL).

2. If the FASC-N is on TSA Canceled Card List (CCL).

iv. Supports PIV, TWIC, CAC, and FRAC credentials.

9. 4.2. ACS Badges

a. What badges are provided by the government as there are multiple standards with varying security levels? Must they be included on the APO of GSA approved smartcards?

Approved Products List - PIV Cards | ID Management.gov

Answer: The government needs 200 badges to be provided see (4.2 SoW). It is desired that all badges are from approved sources.

10. 5.0. Intrusion Detection System, Page 2

a. Would a full suite of sensors and alerting provided by the combination of the ACS, VMS and externally connected sensors meet the requirements of a separate IDS?

i. Camera and Access controls will already be in place and provide motion, door activation and externally connected …

ii. Video analytics in combination with Access Control functions support better identification resolution and alerting functions.

11. 5.1. IDS termination

Shall the IDS terminate at both VMS workstations?

If so the Government provided Fiber between the locations is needed Shall the IDS be Controlled and Operated from the VMS using a visual dashboard that can represent the status of each sensor and also allow to arm and disarm the intrusion detection areas?

a. Shall alarms trigger at both buildings if there is an alarm triggered?

i. If the terminal building T-612 is unmanned and the opening of a door triggers an alarm shall it be sounded in the T-709 building as well?

ii. Shall the alarm only sound on the VMS, if not how should this be deployed?

Answer: The IDS should terminate at both workstations if possible with/or without fiber. The alarm should sound at both VMS’s and at the corresponding door affected.

12. 5.2. IDS alert the operator of multiple alarms.

a. Shall the IDS alarm trigger a visual reference on the VMS solution to assist in identification of the alarm and the activities and persons involved are rapidly identified?

Answer: The IDS alarm should trigger on both VMS solutions but identification monitoring is not required but acceptable if provided.

13. 6.0. Training

a. Shall the solution have no cost online training for future needs? Example transition of

Military personnel every 12 months may drive the need for future needs… Answer: This is covered in SoW 6.0: Please provide hands on training to 17 system operators and 6 system administrators anything past this will be acceptable but not required.

14. 7.0 System Maintenance/ Support Page 3

Should the cameras and video surveillance hardware have a 5 year equipment warranty to ensure continual software and life cycle support with advance replacement?

Answer: The SoW 7.0: 1 year Maintenance support agreement, anything above this will acceptable but not required.

a. Shall telephone maintenance be provided in both English and Portugese? ( ALSO Section 11.2)

Answer: The language required is English. Any other options are not required.

b. Shall Response onsite be by a US Secret Cleared, English speaking technician?

i. Ensuring security of the solution and ability to clearly communicate.

c. How long shall replacement of components be?

Answer: The required time according to SoW is 1 week 7.0 anything quicker will be acceptable but not required.

d. To maintain systems ability to meet US Gov Information Security……

e. Should manufacturer warranty provide at least 5 years of camera equipment hardware… Answer: The manufacturer warranty request that it be at least 2 years.

f. Shall the vendors provide an option for continual service and support?

i. Example, currently technicians are already onsite once a year performing other continual maintenance on IT equipment, the annual cost to extend the support and service in future years is minimal.

ii. An annual service where each video system camera, recorder, access control equipment and router is cleaned, tested, and inspected to ensure expected performance. Included is the cleaning of cameras (especially lenses) plus re-optimization for ideal field-of-view and analytic setup. Wiring and cables are inspected for wear and fray, with proper connections made and distortion-free transport. Each video recorder is checked to ensure performance and backhaul to the customer central site is functioning properly. UPS’s are verified to supply continual support and batteries are…

15. 10. Security Requirements: page 3

a. Shall installers and maintainers meet the following:

i. Security Clearance background checks?

ii. Installation certificates?

b. Will the Video, Access Control and IT Network equipment be required to meet NIST standards and DISA Security Technical Implementation Guides (STIG), If so who will maintain the updates and security after installation?

c. Does the Video, Access Control and IT Network equipment need to meet DoD Cyber Security and Information Assurance policies?

16. General Questions

a. What is the make and model of the current CCTV, ACS and IDS systems that needs to be supported during the upgrade?

Answer: Does not apply, not an upgrade.

b. Are 19" racks available? If so, is there sufficient room for the VMS and UPS?

Answer: NA

c. Is there conduit and connectivity between building T-612 and T-709 that we can use?

Answer: NA

d. Is the power on the base 110V or 220V?

Answer: 110V

e. How many hours of UPS do you require?

Answer: 24 hours

VIDEO SYSTEM REQUIREMENTS

1.1. UPS (Uninterrupted Power Supply) – How many hours of main power failure should the UPS system provide for system full uninterrupted operation?

Answer: The UPS should last at a minimum of 24 hours

1.2. Exterior Cameras – Could be used cameras type speed-dome (with pan-tilt-zoom) and case protection that appears to be more suitable for the environment?

Answer: The exterior cameras need to meet the base requirements and anything greater will be acceptable.

1.3. Interior Cameras – Could be use cameras type mini-dome (fixed) or it is required to have cameras with a more conventional case where it is apparent where the camera points to?

Answer: The type of Camera is not important as long as the surveillance area is completely covered.

1.4. Recording system – Is it acceptable to use time-lapse recording and/ or recording controlled by movement?

Answer: Recording needs to be continuous.

2. ACCESS CONTROL SYSTEM

2.1. Integration with Intrusion Detection System – Could be used the alarm feature of the access control system to provide intrusion alarm or is it required to have a dedicated intrusion system?

Answer: The System needs to alert the control system at both buildings and sound alarms.

2.2. Proxy cards – Is there any specification for the proximity cards to be used?

Answer: The government needs 200 badges to be provided see (4.2 SoW). It is desired that all badges are from approved sources.