Attachment 10_Questions and Answers.pdf

Questions and Answers

Question: What is the Period Of Performance (POP) the government is trying to meet? The desired POP is as soon as possible, but ideally the work would be complete early fall 2020, mid-October 2020.

Question: With the current pandemic and lead times for equipment is the government flexible about the POP?

The government will evaluate all proposed timelines, but does understand the pandemic has impacted delivery timelines of certain construction items.

Question: Is Bldg. 1411 considered a SCIF? No, it is not certified as a SCIF.

Question: Can you provide exact model of Cisco 9000 series switch (there are many)? See attached data sheet.

Question: How many SFP and what type are necessary for the switch to connect to the base? One SFP for the fiber connection to the base network. Connections to the vindicator equipment will be copper.

Question: Is it assumed the base program the Cisco switch and will provide the fiber from BDOC to the switch? If yes, what type of fiber and what kind of connectors? Yes, the fiber is single mode and the connections between the buildings are SC connectors.

Question: Can we locate all Vindicator equipment into one electrical room? If yes, is there enough wall space in the electrical rooms for 2 or 3 enclosures for the Vindicator equipment? Yes. There is technically only one electrical room, the other is the comm room and that is the only please where the IDS control can be tied into the base comm network. Depending on the size of products you scope, there is a wall perpendicular to the one which holds the panel box. It measures roughly 7 ft 6 inches wide and is virtually unobstructed floor to ceiling (only a two outlet plug exists). There is approximately 4 ft separation from this wall and the nearest server which should allow for the Vindicator panel to be hung and opened for maintenance. The true electrical room is separate and offered in this package in case it made more sense to use those breakers.

Question: Is above the ceiling and below the floor considered reasonable access? If no, please see 3. a) (5) bullet and how the government would like the design pasted/highlighted below. The area in question is not a SCIF and the IDS requested is only intended to protect information up the SECRET level. Sensors are required above the ceiling and below the raised flooring. The use of rigid pipe is a solid requirement to reduce the risk of electromagnetic tampering.

ICD-705

Chapter 7.

A. Specifications and Implementation Requirements

FA480320QB041

Amendment 0003

23 July 2020

2. System Requirements

d) Interior areas of a SCIF through which reasonable access could be gained, including walls common to areas not protected at the SCI level, shall be protected by IDS consisting of motion sensors and high security switches (HSS) that meet UL 634 level 1 or 2 requirements, and/or other AO-approved equivalent sensors. HSS Level 2 is preferred.

3. System Components

a) Sensors

(5) A sufficient number of motion detection sensors shall be installed to meet the requirements

Of paragraph A.2.d, shall be UL 639 listed, or shall be approved by the AO. However, the

Following special circumstances apply to motion detection sensors:

• Motion detection sensors are not required above false ceilings or below false floors.

• For facilities outside the U.S. and in Category I and II countries, motion detections sensors above false ceilings or below false floors may be required by the AO.

Question: Does the government want the contractor to follow the below ICD-705? If yes, then additional

Vindicator equipment (not listed in SOW) will be required. Please see reference below. The area in question is not a SCIF and the IDS requested is only intended to protect information up the SECRET level. Contractor should reference the DoD Manual 5200.01-V3 rather than the ICD-705. The drawings are provided only as a concept, the contractor is still required to design and bid on a system to completely encompass the area. The designed system must include above the ceiling and below the floor. The Contractor’s bid must include all they will require to achieve complete coverage, it does not have to mirror the drawings exactly.

The SOW says “the contractor shall ensure the IDS is integrated into the Shaw Air Force Base

Vindicator IDS head end monitoring equipment for security reporting and alerting, and annunciate at the Base Defense Operations Center (BDOC).”

b) Premise Control Units (PCUs)

(1) PCUs shall be located within a SCIF and only SCIF personnel may initiate changes in access modes.

(9) An IDS with an auto-alarm reset feature shall have it disabled. All system events shall be reset by authorized SCI-indoctrinated personnel after an inspection of the SCIF and a determination for the cause of the alarm has been made.

c) Integrated IDS

(2) In cases where the IDS has been integrated into a networked system (local area network (LAN) or wide area network (WAN)), the requirements below shall

FA480320QB041

be met.

• If any component of the IDS is remotely programmable, a Network

Intrusion Detection Systems (NIDS) is required.

• System application software shall be installed on a host computer dedicated to security systems. The host computer shall be located in an alarmed area controlled at the SECRET or higher level.

• Remote networked system terminals shall:

o Ensure that non SCI-indoctrinated personnel with access to the remote terminal cannot modify the IDS or ACS.

FA480320QB041