SOR 2020 STATEMENT OF WORK.pdf

STATEMENT OF WORK

Access Control System – Starfire Optical Range

14 December 2020

1. Background/Scope:

The purpose of this procurement is to upgrade the Starfire Optical Range (SOR) High Security Area access control system, totaling 7 facilities. There is one task for this effort established in three (3) phases : Install Identive Velocity 3.8 FICAM software access control system on server and two workstation computers, configure building, door, personnel, access groups, and administrator groups/permissions; 2) Connect VLAN Starfire switches to controllers and install enrollment centers and a controller in a manner that allows the current system to remain operable. 3) The replacement of existing readers and installation of new readers that allow for PROX PIN/Common Access Card (CAC) enabled access.

All parts, with the exception of existing wiring (if applicable), will be replaced with new equipment. This includes: replacement and new badge readers, new controller, new server, and battery backup/power supplies for all applicable controllers, new magnetic locks or electric strikes and egress hardware or REX. Door hardware consists of hardware directly related to Access Control and not typical door hardware. (See Attachment 1)

Due to project complexity all work must be performed by contractors with a local presence. The work performed must also be accomplished by a certified Identiv dealer with proof an active system certification.

This effort shall include a standard 1-year warranty on parts and labor for all newly installed equipment from the date recorded on the proof of testing document after each individual building is complete.

The contractor-proposed ACS shall meet the intent and requirements of the Intelligence Community Directive – 705 and the Intelligence Community Technical Specifications for ICD- 705.

2. All work performed must allow for continued operations at the impacted facilities with downtime not to exceed one business day. During the install process all existing doors on the ACS must remain operational as specified above, either on the existing ACS or operational on the new ACS. The contractor will be responsible for all components and connectivity from the VLAN Starfire switch to the controllers to the readers.

2.1. Phase I – Server: Provide all parts, labor, and supplies necessary to install new access control equipment (hardware and software), to include an enrollment reader at the client station and the installation of a server and software at building 66048 room 229 Security Office. Items include, but may not be limited to, the following:

2.1.1. Install and ensure the proper operation of the Velocity 3.8 FICAM access control software systems into an active server. Proper operation includes the effective loading of software licenses/agreements. Due to multi-agency agreements, there is an additional requirement to compartmentalize access so that specific areas are only visible to certain administrators. Customer will enroll all users prior to installation of the controllers and card readers.

2.1.2. Provide proof of testing that demonstrates the system is operating and in proper working order.

2.1.3. Provide functional software training (and operating manuals) to all required personnel on the system operation. Softcopy manuals are acceptable.

2.1.4. Program the software in a manner that silences alarms

2.1.5. Include the addition of manufacture site support agreements to ensure the installers can accurately communicate with technical support, as needed.

2.1.6. Program the software in a manner that silences forced entry alarms

2.2 Phase II – Controller: Provide all parts, labor, and supplies necessary to install a new controller(s) and related equipment and remove and dispose of all of the existing items not being used in the newly installed system.

2.2.1. All equipment will be installed in a professional manner, with electronic equipment

(circuit boards, switches, batteries, computer equipment, etc.…) secured to the control box with the wiring bound. Any associated badge readers will also be labeled and/or indexed within the control box.

2.3. Phase III – Readers: Provide all parts, labor, and supplies necessary to install new badge reader equipment and remove and dispose of all of the existing items not being used in the newly installed system. Items include, but may not be limited to, the following:

2.3.1. The removal of readers and the installation of new readers, across 7 facilities. (See attachment 1).

2.3.2. Readers will be professionally installed, with any holes covered. The readers will be put into operation using a phased approach that ensures each facility is non-operational for no more than a one day.

2.3.3. The applicable existing badge readers will be removed and disposed of. The contractor shall ensure holes and/or surfaces where old equipment was removed are filled.

Repairs will be accomplished by placing blank metallic or plastic switch plates (without holes) over the affected surfaces where possible. Where switch plates are not appropriate, repair of existing surfaces will be done with materials appropriate for the surface and in such a manner that repair and surface materials appear to be the same. Replacement and repair of any affected ceiling tiles is not required.

2.3.4. The attached table identifies the badging requirements for each facility. For additional reference, the facility drawings are included as Attachment 2.

3. Schedule.

3.1. The contractor shall attempt to perform work during normal business hours (0700-1600) Monday – Friday.

3.1.1. The following holidays are recognized as Federal holidays and Government offices will not be open.

New Year’s Day Martin Luther King Jr.’s Birthday President’s Day Memorial Day Independence Day Labor Day Columbus Day Veteran’s Day Thanksgiving Day Christmas Day

3.2. If the contractor determines that it must work beyond normal business hours or weekends at no additional cost to the government, the contractor will contact the POCs in paragraph 7.0 to arrange for access to the facility and appropriate escorts.

3.3. Security Requirements and Base Access: The Government project officer is required to submit all visit requests. All visitors to the Kirtland AFB are vetted through the National Crime Information Center (NCIC). All personnel requiring access to SOR must be US citizens and must pass a security background check prior to working on the project.

Short Term Visit Request: A local 377th Security Forces Squadron form (Kirtland Air Force Base Pass Short Term Request [http://www.kirtland.af.mil/portals/52/documents/visitor-prenotification-form.pdf] is needed for contractors to access the installation. The form must be completed and submitted to the Truman VCC no earlier than 72 hours prior to the visitor arrival.

The contractor shall ensure the pass and identification items required for contract performance are obtained and current.

Long Term Pass Request: This request is for contractor(s) to have access to the installation for 30 days or more. The long-term visit request form can be obtained from Pass and Registration (846-6429). The process for background checks may take up to 10 business days.

Once any pass is approved, contractor(s) must provide current driver’s license, vehicle registration and auto insurance to pick up their pass.

• Current vehicle registration

• Current proof of insurance

• A valid and current Driver’s License for the driver

• A valid and current Driver’s License or other State Identification for any passenger(s) in the vehicle.

All vehicles entering Kirtland AFB are subject to search. Commercial vehicles with 3 or more axles must utilize the Kirtland Contractor Gate; that gates hours are 0600-1600 hours (6:00 am – 4:00 pm). If access is needed after that time, contractor(s) must utilize the Truman Gate. All drivers will be vetted and required to provide a bill of lading.

3.4. Depending on the availability of the parts for the access control systems all installation/uninstallation work and training shall be completed within 120 days of award of contract.

3.4.1. The facilities where the work is being accomplished consists of access-controlled facilities. The time where the facilities can be shut down to perform the work is limited.

3.4.2. Upon contract award, the contractor shall contact the POCs in paragraph 7.0 to discuss scheduling for the work to be completed. The contractor shall provide an estimated date as to when all components for the access control systems will be received so the AFRL POCs can coordinate a time to work at each facility.

4. Security. The work to be accomplished includes entrances to classified areas; therefore, prescheduling will be required. On-site contractors must be US Citizens. Escorts will be required for the entirety of the project.

5. ACS Capabilities

5.1. 24-hour access control to the SOR compound and designated buildings on the compound.

5.1.2. System must employ two of the three following technologies:

5.1.2.1. Identification badge or card used in conjunction with the access control device validating the identity of the person to whom the card is issued.

5.1.2.2. A Personal Identification Number (PIN) entered into a keypad by an individual. The PIN shall consist of four or more random digits, with no known or logical association to the individual or which can be derived from the person or system generated.

5.1.2.3. Biometric personal identity verification using unique personal characteristics such as fingerprint, iris scan, palm print, etc.

5.1.3. The ACS shall ensure the probability of an unauthorized individual gaining access is no more than one in ten thousand, while the probability of an authorized individual being rejected access is no more than one in one thousand. Manufacturers must certify their system meets this criterion in writing.

5.1.4. Card readers, keypads, communication interface devices, and other access control equipment located outside a secure area shall be tamper-protected and securely fastened to a wall or other fixed structure.

5.1.5. System data carried on transmission lines (e.g., access authorizations, personal identification, or verification data) to and from equipment located outside the secure area shall be protected using FIPS AES-certified encrypted lines.

5.1.6. Electric door strikes shall have a positive engagement (fail secure) and be approved under UL 1034 for burglar resistance.

5.1.7. ACS records shall reflect the active assignment of ID badge/card, PIN, level of access, entries, and similar system-related information.

5.2. Current Card Reader Locations and Government’s Assumption of Work to be performed (Location details are shown on attached drawings. Actual work may change based on contractor’s assessment and Government-approved design.)

5.2.1 Building 66000: 1 New Reader

5.2.2. Building 66001: Replace 5 existing readers

5.2.3. Building 66006: 1 New Reader, 1 Replaced

5.2.4. Building 66041: 7 New readers

5.2.5. Building 66047 1st floor: Replace 12 existing readers, add 3 new readers

5.2.6. Building 66047 2nd floor: Replace 1 existing reader and add 1 new reader

5.2.7. Building 66048: Replace 59 existing readers, add 15 new readers

5.2.8 South Gate: Replace 2 existing readers

5.2.9. Access control system must have capability for expansion to add additional doors with card readers.

5.3. ACS User Workstation/Computer (reference attached drawings)

5.3.1. Building 66047, room 136

5.3.1.1. Install ACS workstation/computer with 2nd internal hard drive to serve as a back-up drive for the system (Hardware mirrored set of drives) in room 136 with workstation software. This workstation/computer must be capable of adding, deleting and updating personnel accesses along with updating or modifying system profiles.

5.3.1.2. System must provide redundant capabilities for the system located in Building 66048, room 229.

5.3.1.3. System must provide the capability to remotely allow access through the following doors: entrance to the glass palace, entrance to the 66047 new entry/lobby, and entrance to room 136.

5.3.2. Building 66048, room 229

5.3.2.1. Install ACS workstation/computer with 2nd internal hard drive to serve as a back-up drive for the system (Hardware mirrored set of drives) in Bldg 66048 Room 229 with contractor-recommended computer/server and software. This workstation/computer must be capable of adding, deleting and updating personnel accesses along with updating or modifying system profiles.

5.3.2.2. System must provide the capability to remotely allow access through the following doors: entrance to room 227, entrance to room 228, and entrance to room 229.

5.4. Video Monitor Board (reference attached drawings)

5.4.1. Building 66047, hallway

5.4.1.1. Contractor shall install a status monitor near exit door in tunnel.

Monitor is to provide (Who’s inside) status of personnel this designated area of the facility.

5.4.1.2. Recommended monitor size is between 32 and 45 inches; contractor shall select size based on available space and system requirements.

5.4.2. Building 66048, 228 door area

5.4.2.1. Add status video monitor near 228 exit door. Monitor is to provide (Who’s inside) status of personnel in this designated area of the facility.

5.4.2.2. Recommended monitor size is between 32 and 50 inches; contractor shall select size based on available space and system requirements.

5.4.3. Building 66041, 163 door area

5.4.3.1. Add status video monitor near 163 exit door. Monitor is to provide (Who’s inside) status of personnel in this designated area of the facility.

5.4.3.2. Recommended monitor size is between 32 and 50 inches; contractor shall select size based on available space and system requirements.

5.5. Printer

5.5.1. Contractor shall provide color badge printer.

5.6. Remote Control Door Opening

5.7.1. Building 66047, hallway and foyer

5.7.1.1. Contractor shall provide a hardwire remote, one 3 push-button door console, to be located on the desk in room 136, to open the building entrance door (to room 208), door to lobby at bottom of stairs leading into the tunnel, and the two doors to enter the tunnel.

5.7.1.2. Reference building drawings

5.7.2. Building 66048, foyer

5.7.2.1. Contractor shall provide a hardwire remote, one 3 push-button doors, to be located on the desk in room 229 to open the foyer doors from inside room 229.

5.7.2.2. Reference building drawings

6. Location of Work.

6.1. Work will be performed at: AFRL - See Attachment 2.

7. Points of Contact:

7.1. Primary POC for this contract will be:

Mr. Benjamin J. Herrera Phone: (505) 846-4969 Email: benjamin.herrera.2.ctr@us.af.mil

AFRL/RDMSZ

3550 Aberdeen Ave SE Kirtland AFB, NM 87117

7.2. Alternate POC for this contract will be:

Mr. Corey A. Tillis Phone: (505) 846-2536 Email: corey.tillis.2.ctr@us.af.mil

AFRL/RDMSZ

3550 Aberdeen Ave SE Kirtland AFB, NM 87117