BUILDING_16__ACCESS_CONTROL_SYSTEM_QUESTIONS.DOCX

BUILDING 16 ACCESS CONTROL SYSTEM QUESTIONS

About the Infrastructure:

How old is the facility in question? Circa 1930s

How many square feet is the facility? N/A

How stable is the power? (i.e. back-up power) The power is stable.

How many employees does the current facility support? Approximately 100

Are ceilings dropped ceiling? Yes, the majority of spaces have dropped ceilings but some have no ceiling.

Do we need to drill between the walls, in order to run our cable infrastructure? Yes, for some walls.

Do we need to use conduit? If yes, what do you estimate the total conduit will be? No for internal to secure space. Yes, if you traverse out of the secure space into a non-secure space.

Will you be providing any further layout drawings of the facility at your location? No

Physical Access Control System (PACS):

How old is the existing system? Approximately 10 years old

How many of the readers to be added are installed in double-doors? No card readers will being installed in doors. Card readers are to be installed in close proximity to the door fram. Examples of our setup were shown at the site visit.

How many of those readers are to be installed in double exit doors? Same as above.

Are locksets to be assumed to be of a specific make? N/A. This requirement doesn’t require any involvement with the existing locksets.

Does your agency need to authenticate the CAK protocol (besides the CHUID or FASCN) from the CAC or PIV Card? No. Not using CACs or PIVs.

Does the contractor have to be a certified as a HSPD-12 by GSA approved vendor? No

Does the contractor have to provide certified Security ICAM Engineers as recommended by GSA? No

Should the PACS system be in full FIPS 201-2 compliance at a later date? N/A.

Intrusion Detection:

Are we to assume based on the SOW that there is not currently need to protect the intrusion detection system (IDS)? The access control system requirement doesn’t involve and won’t be tied into the IDS.

If there is a system to be tied into PACS, can you provide the name of the existing IDS? No alarm system is being tied in.

Do you currently have IDS Sensors in your doors? The access control system will not be tied into the IDS.

Network and IT Security

The system is assumed to be installed in a secure network provided by the government, is this accurate? The requirement is for a stand-alone access control system.

Do we need to be compliant to FICAM or RMF? N/A.

Concerning Cyber Security, as you may know in March 2015, GAO released a report in which it states that DHS and GSA should address Cyber Risk to Building and Access Control Systems. In turn, would this task be a responsibility of the security integrator? No.

1. Could you confirm the make/model of the workstations and what version of software they are running? Small form factor IBM compatible PC running Windows 7.

2. Could you confirm current version of DSX software being used?

DSX Workstation v8.80.0.0

WINDSX 3.9.3

3. For PC operation, will WPAFB IT Dept. be responsible for ensuring network connectivity to assigned control panel? The contractor is responsible for cabling from PC location to control panel.

4. Can you confirm that standard for all door locking hardware is maglock coupled with push-to-exit button? Yes.

5. According to Life Safety 101 standards, motion sensors are required for maglock doors? Can you confirm that motions will not be a matter of the standard for installation?

6. Can you confirm keypad card readers? Will this be the standard for every point of access control? The requirement is a keypad with proximity reader. This is the standard for all points.

7. Could you confirm that cypher locks will be mounted for new installs? This requirement doesn’t call for cypher locks to be provided. All existing doors have cypher locks currently.

8. Could you confirm that all current penetrations will be adequate as needed for wire paths? No. Some additional penetrations will be required.

9. Could you confirm that there will be conduit provided for all security devices, where needed? The contractor is responsible for providing the conduit for all surface mounted hardware. Conduit should terminate above ceiling.

10. Could you confirm that Door 1 System B (currently door 15) will not require conduit?

Drawing below shows existing conduit that may be used.

11. Aside from new door 10 (System A), can you provide the number and location of any grouted door jambs?

Door jambs are concrete filled.

12. Is current system set up to read CAC cards? If other cards are used, please cite bit format and brandname used? No.

Card type

13. Can you confirm that no enrollment station has been requested for the standalone systems?

The control PC doubles as the enrollment station.

image1.emf