Appendix_2_-_FDA_Physical_Security_Requirements Specifications_for_FDA_Facilities.pdf

PHYSICAL SECURITY

REQUIREMENTS/SPECIFICATIONS

FOR

FDA FACILITIES

Prepared by: FDA Physical Security Branch

Date: 1/15/09

PHYSICAL SECURITY REQUIREMENTS/SPECIFICATIONS

FOR

FDA-OCCUPIED SPACE

I. INTRODUCTION

The following physical security requirements and specifications have been developed to assist in the development of the Program of Requirements (POR) for new facilities, and/or solicitation requirements involving GSA leasing agreements where relocation is required.

Specific use of brand names or model type may be included in some instances as a guide to the type of equipment required, and should not be misconstrued as a specific requirement, unless a specific type or model has been noted as part of the requirement. Specific security requirements will be determined upon selection of facility.

All facilities will meet the minimum-security standards as set forth in the U.S. Department of Justice “Vulnerability Assessment of Federal Facilities” issued June 28, 1995. These categories are based on such factors as size of a facility, number of employees, and use and mission of the agency. These categories range from Level I to Level V.

In addition, ISC Security Design Criteria for New Federal Office Buildings and Major Modernization Projects, dated May 28, 2001 must be followed.

II. CONTENTS

SECTION I FDA Sole Occupant SECTION II FDA Occupant in Multi-Tenant Building (Multi-tenant space with commercial tenants is not recommended. Housing FDA in a federal facility with other Government agencies is preferred. FDA will not share or occupy office space with any non-FDA occupants).

ATTACHMENT A Special Contract Requirements

ATTACHMENT B 41 CFR 101-20.103

Note: Mandatory requirements for spaces housing more than twenty (25), and mandatory requirements for spaces housing less than ten (10) federal employees are “specifically” addressed under Section II. This is also dependent on available funding, and locality.

SECTION I. FDA SOLE OCCUPANT

PERIMETER FENCING

LESSOR REQUIREMENTS

1. The perimeter fence will be 8' chain link fence, zinc-coated, No. 9 gauge fabric, mesh opening not larger than 2", twisted and barbed selvage at top and bottom. Top rail or top tension wire should be provided in addition to bottom tension wire if a bottom rail is not utilized. Fence should include a double overhang top guard extending 45 degrees outward and inward, 12 gauge three strand barbed wire six inches apart affixed to top of fence post running the entire perimeter fence line, to include gate(s).

2. Gates will consist of the above specifications (fabric) and overhang top guard. Gate opening, (swing, slide, single, or double) will be determined prior to construction.

PERIMETER LIGHTING

LESSOR REQUIREMENTS

1. The FDA standard for foot candles, horizontal plane at ground level is from 1.0 to 2.0 and shall be used for perimeter lighting, exact illumination will be determined for the following areas once the building site has been selected:

- Perimeter of outer Area (fence line)

- Vehicle entrance

- Building face boundary

- Parking lot

- Pedestrian entrance/exit

- Shipping & receiving area

2. Perimeter security lighting should be placed on the Emergency Power Backup Supply.

FIRST FLOOR WINDOWS

LESSOR REQUIREMENTS

1. Permanently sealed.

2. Windows will be covered with mylar film.

FDA REQUIREMENTS

3. Alarmed shock sensors or glass breakage detectors monitored into a central alarm station

(local or remote.)

PERIMETER DOORS

LESSOR REQUIREMENTS

1. Doors will be equipped with interior hinges. If hinges are exterior, hinges will be "pinned" or

"spot-welded" to prevent pins or door from being removed. Interior hinges are preferred.

2. If entrance doors are glass, or entryways contain glass panels, all glass will be equipped with alarmed shock sensors or glass break detectors monitored into a central alarm station (local or remote.)

3. If entrance doors are glass, doors shall be equipped with a frame that is capable of accommodating an electric strike (fail secure).

4. "Jimmy plates", or "astragals" will be permanently affixed to entry doors over locking mechanism to prevent tampering with door lock.

5. Doors shall be equipped with high security locks (i.e. Medeco, Abloy, Best, etc.). High security locks shall be keyed separately from the interior building master key system. All card reader doors will be keyed alike on a separate master system.

6. Doors equipped with card readers will require locking hardware which will be electric strikes (fail secure).

FDA REQUIREMENTS

7. All perimeter doors will be equipped with recessed magnetic door intrusion alarm contacts including doors with card readers.

8. Door alarms will be monitored into a central alarm station (local or remote.).

FIRE DOORS

LESSOR REQUIREMENTS

1. Fire doors will meet all fire standards/codes, (NFPA or local codes).

2. Doors will have, as a minimum, two-point locking latch.

3. Interior hinges.

4. Exterior knob sets, handles, or latches will not be installed, or removed if present.

FDA REQUIREMENTS

5. Doors will be equipped with recessed magnetic door intrusion alarm contacts.

6. Door alarms will be monitored into a central alarm station (local or remote.)

SHIPPING AND RECEIVING DOORS (SOLE OCCUPANT ONLY)

1. Metal type roll-up door.

2. Electrically powered with key-controlled "on/off" system.

3. Manual chain in the event of power failure.

FDA REQUIREMENTS

4. Floor mounted/door mounted balanced magnetic door intrusion alarm contacts.

5. Door alarm(s) will be monitored into a central alarm station (local or remote).

MAIN ENTRANCE (ACCESS CONTROL SYSTEM) (More than one entry may be controlled)

LESSOR REQUIREMENTS

1. Locking hardware will be electric strikes (fail secure).

2. System will have a key override feature to deactivate door lock if required.

3. Card access system will be tied into generator and UPS system.

FDA REQUIREMENTS

4. Install Monitor Dynamics, Inc. (MDI) card access system.

5. Interior shunt (mounted in panic hardware) to deactivate alarm upon egress during security hours.

6. Access system will have minimum 24-hour back-up battery for system memory in the event of power failure.

ROOF HATCHES/ROOF DOOR (APPLIES FOR SOLE TENANT OR OCCUPATION

OF TOP FLOOR)

LESSOR REQUIREMENTS

1. Hollow metal.

2. Interior hinges.

3. Locking mechanism will be a double cylinder Medeco or similar high security lock

(deadbolt) with a minimum1 inch-bolt throw. Lock will not be keyed on the master perimeter system.

4. Card reader doors will be keyed alike.

FDA REQUIREMENTS

5. Doors will be equipped with card reader.

6. Door will be equipped with recessed magnetic intrusion door alarm contacts that are monitored into a central alarm station (local or remote.)

GARAGE AREA (INSIDE PARKING)

LESSOR REQUIREMENTS

1. Same specifications as shipping and receiving door(s).

FDA REQUIREMENTS

2. If a pedestrian door is part of the overhead door, or is separate, it will be equipped with recessed magnetic door intrusion alarm contacts.

3. Garage door will be equipped with heavy-duty floor mounted contacts.

4. Door alarm will be remoted to a central station (local or remote).

5. Card access will be required to access garage with loop detector for egress from garage.

SECURED AREA FOR GOVERNMENT VEHICLES

LESSOR REQUIREMENTS

1. If an outside, secured area has been provided for government vehicles, i.e. fenced area, the same specifications shall be used as outlined in perimeter fencing except that the height may be 6 feet in lieu of 8 feet. See Attachment B.

2. Gate type will be developed during construction, i.e. swing, slide, double or single gates, etc.

3. Lighting requirements must meet lighting standards for parking lots.

PERIMETER PARKING

LESSOR REQUIREMENTS

1. All FDA facilities must have minimum set back requirements as specified under the

Department of Justice Vulnerability Assessment Study of Federal Facilities.

2. Control of parking to include tiger teeth, gates, bollards, and physical barriers, arms, guard houses, loop detectors, etc.

3. Control of adjacent parking where necessary.

4. Poles for camera installation.

FDA REQUIREMENTS

5. Card readers for gate or arm entrance.

6. Closed circuit television (CCTV) surveillance cameras with time-lapse recorders and emergency call stations if necessary.

INTERIOR CONTROLLED AREAS

The following areas have been designated as Controlled Areas:

• Solvent storage area/alcohol storage

• IT and IT equipment room

• Drug vault or drug storage room

• Sample storage room

• Document room

1. Perimeter walls will be slab-to-slab.

2. Entrance doors to these areas will be hollow metal or solid wood.

3. Interior hinges, or "pinned" or "spot-welded" pins if exterior hinges.

4. Locking mechanism for these areas will be high-security type lock such as Medeco, Abloy or

Best. Locks will be "keyed" separately and not be on the building master system.

5. Doors with card readers must be equipped with an electric strike (fail secure) and a store room function knob lock with a high security cylinder as noted in number 4.

FDA REQUIREMENTS

6. Doors will be equipped with card readers, recessed magnetic contacts.

ADDITIONAL ELECTRONIC ALARM /SURVEILLANCE EQUIPMENT

FDA REQUIREMENTS

1. Closed Circuit Television (CCTV) with monitors and time-lapse video recorders are required at entrances, parking areas, shipping and receiving, and isolated areas needing additional protection or surveillance.

2. Intrusion Detection Systems are required, i.e. document areas, IT areas, etc. and any other controlled areas.

GUARD SERVICE

LESSOR/FDA/GSA REQUIREMENTS

1. If guard service is not provided by GSA or the building owner, FDA will have the option to request the delegation for contract guard service. Guards/Contract will meet all requirements set forth for contract guards as outlined by GSA and FDA.

CLEANING PERSONNEL

1. Under Section 301(j) of the Food, Drug, and Cosmetics Act, to protect privileged and trade secret information all cleaning of FDA space will be done during normal work hours Monday through Friday between 8:00 a.m. to 4:30 p.m. All controlled areas will be cleaned under the escort of a guard or a FDA employee.

2. All cleaning personnel must complete and pass local police checks or background investigations in accordance with FDA and GSA requirements. See Attachment A.

MAINTENANCE PERSONNEL

1. Maintenance personnel will also be required to complete and pass local police checks or background investigations in accordance with both FDA and GSA requirements. See Attachment A.

SECTION II.

FDA OCCUPANT IN MULTI-TENANT BUILDING (Multi-tenant space with commercial tenants is not recommended. Housing FDA in a federal facility with other Government agencies is preferred.)

OVERALL SECURITY

• FDA will not share or occupy office space with any non-FDA occupants.

• In addition to the requirements in Section I, the following are required.

• In event the total number of federal employees occupying a space is ten (10) or less, just the requirements listed in this section are mandatory).

INTERIOR WALLS/CORRIDOR WALLS

LESSOR REQUIREMENTS

1. Where FDA space (perimeter walls) abuts a non-FDA tenant, that perimeter wall will be “true” slab-to-slab. If current walls are not slab-to slab, walls should be extended with expanded metal placed between drywall to prevent access through wall(s) and/or over "drop ceiling".

FDA REQUIREMENTS

2. When FDA occupies more than one floor, controlled access is required on entrance doors and stairwell side of stairwell doors, i.e. keypads.

WINDOWS

1. Whenever windows grant access to FDA space (first floor windows), they should be modified to reduce that possibility, e.g. permanently sealed or window security locks.

LIGHTING

1. Adequate perimeter lighting will be checked to ensure all exit/entrance doors have sufficient lighting and that they are working properly. NOTE: This includes fire doors if applicable.

Lighting levels should be 2.5 foot-candle.

PERIMETER AND INTERIOR DOORS WITHIN FDA SPACE

Where applicable, the selection of perimeter doors should include:

1. Solid wood or hollow metal doors.

2. Interior door hinges. If existing doors have exterior door hinges, they should be “pinned” or “spot welded” to prevent removal of pins and/or doors.

3. Locking hardware should include “high security” knob-sets (eg. Medeco, Abloy or Best), in addition to single cylinder dead bolts, minimum bolt throw 1” mounted above knob set. Both knob-set and dead bolt should be keyed-alike.

4. Jimmy plates shall be installed over all perimeter locks if dead-bolt locks.

5. All Interior Door will have Key Locks installed and all Locks will be keyed different from building master key for all FDA space.

6. All Perimeter doors will be checked to ensure heavy duty door closures are installed, working properly and that existing doors are not warped, preventing them from normal closing and proper locking.

INTRUSION DETECTION/ACCESS CONTROL SYSTEM (will be required for FDA spaces with a “minimum” of twenty (20) federal employees).

1. Card readers will be utilized on all perimeter door entrances.

2. Intrusion alarms, door contacts, and window sensors will be utilized to protect all FDA space.

3. Video intercoms with remote release stations may be utilized.

PROTECTION OF GOVERNMENT VEHICLES

LESSOR RESPONSIBILITY

1. Protection should be afforded to government vehicles leased from GSA.

2. Protection shall be by means of protective fencing and/or enclosed garage or parking areas that can be properly secured during non-working hours. See Attachment B.

• 41 CFR 101-20.103-1; Standard Protection

• 41 CFR 101-20.103-2; Special Protection

ATTACHMENT A

SPECIAL CONTRACT REQUIREMENTS

Security Clearance Requirements (Janitorial and Maintenance).

I. All LOCATIONS

A. Unless otherwise specified, the contractor will submit to the GSA Contracting Officer before the starting date of the contract, two (2) completed Forms FD-258, "Fingerprinting Charts" and one (1) GSA Form 176, "Statement of Personal History" for the contractor and all employees who have access to the building in performance of the contract work.

These forms will be submitted to GSA for a full background investigation. The required forms will be furnished by the Government (GSA).

B. These forms are required for all replacement employees before entrance on duty.

C. The Government shall have and exercise full and complete control over granting, denying, withholding or terminating clearances for Contractor employees.

D. If the Contracting Officer receives an unsuitable report of any employee after processing these forms, or if the Contracting Officer's Representative finds a prospective employee to be unsuitable or unfit for his assigned duties, the contractor shall be advised immediately that such employee cannot continue to work or be assigned to work under the contract.

E. For employees cleared through this process while employed by a contractor who is subsequently replaced by another contractor, in the same building, the new contractor shall only be required to submit another set of these forms if the employee has not been cleared within the last 2 years.

F. In order for the contractor employee to receive a FDA badge, he/she must have the following documents completed when they report to ORPS. .

• Form FDA 3391, FDA Security Card Access Request-To FDA

• Form FD-258, Applicant Fingerprint Chart (2 cards must be completed)-To GSA

• GSA Form 176, Statement of Personal History-To GSA

Upon receipt of a favorable fingerprint return notification from GSA to FDA Personnel Security Branch and after completion of the required forms, an FDA building pass can be issued.