QA 2.pdf

Q&A

It was stated at the Site Visit that enrollment stations are needed. How many enrollment stations are required? Where will they be located?

3 total, 1st in Building 557 Room 103C, 2nd in either Building 16 or 32 (to be confirmed), and the 3th is TBD.

Are the required Enrollment Stations replacements for workstations that are on the current ACS network?

Yes.

It was stated in the Site Visit that Badging Stations would be required. Please confirm that no badging stations are required as this is contrary to FIPS 201.

Enrollment / Badging are the same.

It was stated in the Site Visit that all existing access controlled doors are entry reader only. Please confirm that there are no existing entry/exit reader locations.

Confirmed, no exit readers.

Per NIST SP800-116, it is required that the system user define where Controlled (single factor), Limited (dual factor), and Exclusion (Biometric) readers are located. Please confirm that all locations will be dual factor locations.

Confirmed, all locations will be dual factor. On a set schedule to change modes.

The PWS reads: "The system proposed shall be capable of supporting the legacy technology". Please confirm that these technologies shall not be used as these technologies are not compliant with FIPS 201.

The legacy technology will remain online until the new system is 100% functional.

There is a requirement to comply with ICD 705. Please confirm the areas that must comply with ICD 705.

We can give Building #s and how many (1-2 dozen rooms have to meet ICD705) but not the complete info. Full address is spillage. The entire AMC complex is a controlled area. CTR's will be escorted at all times. Readers are the same throughout.

There is a requirement to comply with ICD 705. Paragraph 1.1 states the system will be a single server system. ICD 705 Areas require a separate server UNLESS all administrative and Monitoring Personnel are read into each secure program. Please confirm that all appropriate personnel will be read into all programs.

Confirmed, it is a job requirement written in our position description. The cost to put a station in all secure rooms would be astronomical.

There is an implication with the ICD 705 requirement that the system severs should be redundant. Please confirm that redundant servers are not required.

Confirmed, we only need to have a backup of the server data, but it does not need to have a second redundant server.

Does the evaluated installation timeline of 90+ calendar days include material procurement?

Yes.

Does the evaluated installation timeline of 90+ calendar days include the cyber requirements contained in paragraph 6 table?

Yes.

What is the system Cyber Security categorization related to the RMF process?

All controls under the AC category.

There is no requirement to comply with UL 294. Please confirm, that as a standard access control system, the entire system must comply with UL294.

Confirmed, must meet UL 294.

There is no requirement to comply with UL 294. Please confirm, that as a standard access control system, the entire system must comply with UL294.

Confirmed, must meet UL 294.

There is a reference to ICD 705. Please confirm which areas must comply with ICD 705 and that these areas must by compliant with UL1076.

We can give Building #s and how many (1-2 dozen rooms have to meet ICD705) but not the complete info. Full address is spillage

Please confirm that there are no additional deliverables other that what is specifically stated in Section 6.

Need to get with 559 & 558 to see what they were asking for. There are also several doors that will potentially need new hardware as they are new reader locations

Please provide a topology of the current system to include controller and reader locations. This is required so that we may determine the number of controllers and readers to be replaced in each building.

See attachment if this works. # of readers is approximate.

Please provide a topology of the current system to include controller and reader locations. This is required so that we may determine the number of controllers and readers to be replaced in each building.

See attachment if this works. # of readers is approximate.

Please provide a system report of the current system that provides controller, readers, and auxiliary devices and the location of this equipment. This is required so that we me replace the current hardware.

See attachments.

Please confirm that the three locations have an existing, useable connection to the network.

Building 557 does, but potentially not the two new remote locations.

Please confirm that AC power at all locations will be connected to the Building UPS and additional 24 hour standby is not required.

Needs its own UPS with 24 hour back up.

Please confirm that all locking hardware is compliant with current NFPA 101 Life Safety requirements.

Confirmed.

Please confirm that all hardware re-used, specifically the cable between the reader and the controller, must meet the manufacture requirements. Note: older readers used Weigand communications. FIPS 201/FICAM requires OSDP communications which requires a different cable.

Confirmed.

Please confirm that all of the door hardware, which may be re-used, is currently functioning and code compliant.

There is at least 1 door that is currently non-function. There are also several doors that will potentially need new hardware as they are new reader locations.

Please define "Global Functions". NOTE: Most systems offer Local Functions that continue to operate without communication to the host and Global Functions that require communication with the host.

There is at least 1 door that is currently non-function. There are also several doors that will potentially need new hardware as they are new reader locations.

Please define "Global Functions". NOTE: Most systems offer Local Functions that continue to operate without communication to the host and Global Functions that require communication with the host.

System should function without communicate to the host.

Will the contractor be provided a staging area for secure equipment storage?

Yes.

Will the contractor be allowed to drop ship hardware to the site?

Yes.