SOW-ElectronicSecuritySystem.pdf

Electronic Security System – Statement of Work Montpelier, VT (024) SSA Office P a g e | 1

PROPERTY OF THE UNITED STATES GOVERNMENT – FOR OFFICIAL USE ONLY

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed

1. Scope of Work. The Montpelier, VT Social Security Administration (SSA) Office requires installation and/or upgrade and support services for the following electronic security systems: Video Surveillance System (VSS) and Intrusion Detection System (IDS) including Duress Alarms. The office is located at 33 School St, Montpelier, VT 05602.

2. General.

A. This scope of work must be followed by the winning bidder, sub-contractor and lessor.

B. All requirements must be adhered to, including notification of project award, discussion of the project prior to start and providing a project schedule.

C. The contracted installer of these systems will herein be referred to as the Contractor.

D. The Contractor:

1. Will propose a schedule of dates and times that the installation will be performed, including anticipated completion date. This information shall be updated as necessary.

2. Will furnish and install all equipment, cables, wires, connector, labor and complete any electrical requirements that are necessary for the installation of the electronic security systems contained within this statement of work.

3. The Contractor shall provide 12 months on-site warranty, including equipment and associated workmanship, commencing from the date of acceptance for the complete system at individual field offices. The Contractor shall restore normal operational conditions of reported problems within two (2) business days of the service request. The customer may request the service via telephone, email, or verbal request.

4. If required the contractor must install all necessary electrical outlets and complete hardwiring of circuits, at needed (or have wired by a licensed electrician), to ensure that all devices function as designed. All electrical work necessary to make the systems function is the responsibility of the Contractor.

P a g e | 2

5. Must provide “as-built” drawings depicting the location of each specific device for all IDS, PACS, VSS, etc. systems to include wiring paths, zone descriptions, camera list, etc. The as-built drawings must be prepared in AutoCAD and delivered both on paper and in electronic format. Copies of the as-built drawings shall be provided to the site representative and sent to dcbfqm.osep.opss.field.operations@ssa.gov.

6. Must securely fasten all wires in the ceiling to overhead wire supports to prevent damage that may occur from existing or future wire runs in the ceilings.

7. Will install system in accordance with all codes and standards set forth by, but not limited to; The National Electrical Code, Underwriters Laboratories and the Local Jurisdiction Having Authority, with a minimum of shielded plenum wiring using plenum or riser wire as required by code/standards. All wiring will be concealed and of a gauge no less than 18 with 4 conductors and copper stranded in composition. Devices that require only two conductors (door strikes) may use a gauge no less than 18 with 2 conductors.

No mechanical pulling of wires is allowed.

8. With the customer present, the contractor will ask the agency contact about the exact proposed location of each required device. This will be done at the start of the job with the contractor and responsible agency contact. Any major changes need to be approved by the contracting officer. (For example, it’s acceptable to put the keypad on the right side of the door instead of the left side with agency contact approval, but the keypad can’t be installed in a private office if it was supposed to be installed at the front door unless the contracting officer approves the change as this would change the “scope” of the project).

9. Each and every item, including each detector, sensor, duress button, control panel, transformer, LAN/Data jack, etc. must be labeled to show the device and/or zone number on the front cover of the specific device.

10. All patching, painting, etc. necessary as a result of this installation or in the event of an error (drilling through a wall by mistake) must be handled by the winning bidder. No additional monies will be paid for repairs, patching, painting, etc. This also applies to demo of any existing electronic security related equipment being replaced by the aforementioned systems.

P a g e | 3

11. The Contractor shall label all wiring with information that allows for easy identification from either terminating location. Except for patch cables, all cable installations will include cable labeling in accordance with the BICSI Standard and ANSI/TIA/EIA-606-A Standard. The Contractor shall install plenum-rated cable.

12. The contractor will ensure all systems (and components) have a one-year warranty, including all parts, labor, wiring, service travel hours, parking, etc.

No additional costs to be paid for service during the one year warranty period due to malfunction of system. One year starts at time of government acceptance.

13. Upon completion of each day's work clean, remove and dispose of any dirt and debris.

14. Remedy project activities that require cutting, drilling, or other damaging effects (intentional or unintentional) on building finishes and clean all debris.

15. Repair all holes and wall damage, refinish, repaint, and clean all debris when removing existing equipment.

16. Match the surface in repair to existing surfaces and finish the surface in repair as flush with the existing surfaces.

17. Coordinate activities with the Facility Manager; if any proposed work is deemed disruptive to the operation or occupants, the Contractor will need to schedule work outside of normal hours at no additional cost to the Government

18. The Contractor shall install all components securely and in accordance with the manufacturer instructions at the indicated locations on the drawing. The Contractor shall verify all components of any existing system as functional when incorporating equipment with new systems.

19. After job completion and agency acceptance, any materials furnished by the contractor become the sole property of the Government.

20. The Contractor will provide all tools and items to complete the services and activities required under this contract. Remove all unused legacy system cables upon completion of the new system

P a g e | 4

21. The Contractor shall provide user and original equipment manufacturer (OEM) training for the provided systems upon completion of the installation.

Training on the equipment will include the operation of any software associated with the system to end-user key personnel. Specific areas of training may include operational technologies and techniques, minor and routine system testing, and troubleshooting tips. The Contractor shall demonstrate full functionality to the on-site end user.

3. Video Surveillance System (VSS) Specifications.

A. The Contractor shall install all system components and accessories in accordance with the manufacturer’s instructions, NFPA 70 NEC, and shall furnish all necessary connectors, terminators, interconnections, services, and adjustments required for a complete video surveillance system (VSS).

B. The VSS shall consist of all cameras, storage, power, lenses, mounts, housings and video transmission system components necessary to provide an IP based video system.

C. The Contractor shall be responsible for the integration, setup and programming of the VSS.

D. CAT-5 or higher structured cable and associated wiring will be routed through the hollow wall or surfaced mounted inside the “Panduit Duct & Raceway”. All wiring that is above the ceiling must be tied or strapped and not directly lying on top of tiles.

E. Install, preferably, All-in-One Type Desktop PC workstations in Managers’ offices, designated personnel workspaces and the guard desk to allow for separately controlled camera views. (The Guard Workstation shall be programmed to allow the guard to only change views, no additional functionality).

F. Install cameras in the interior of the office. The installed cameras must provide complete coverage of the public contact areas. Refer to Design Drawings for locations.

G. Install cameras on the exterior of the office. The installed cameras must provide complete coverage of the exterior and coverage of public and employee entrances.

Refer to Design Drawings for locations.

P a g e | 5

H. Install Wall Mounted LCD Monitor at location indicated on the drawing. At a minimum, the monitor shall display the camera coverage outside the employee entrance. Contractor shall coordinate with the agency personnel to determine if other views are required.

I. The field of view shall be coordinated between the agency representative on-site and the Contractor to produce the desired area of interest.

J. Test CCTV system for proper operation, train agency personnel on proper system operation procedures. Special attention shall be given to the training of the video recorder. Train the manager and designated personnel how to record, retrieve and download images and files. Provide each camera serial number and IP address to the manager.

4. Video Management System (VMS) minimum specifications:

A. Open API for integration, web-based remote access to video storage, 24/365 operability, configure cameras individually over the VMS, automatic online or offline activation of license with a 30-day grace period.

B. Provide 24/7 motion and event triggered recording.

C. Authenticate with access levels and roles.

D. Able to support IP Cameras, encoders and NVRs from multiple manufactures

E. Export video in native database format and share external views.

F. Camera and Channel License VMS Software

G. Minimum 14 days of video storage based on calculation of 15 frames per second (fps) at 24/7.

H. Enables administrators to define privacy masks for individual cameras, to hide areas in the camera view that must not be visible or recorded.

I. Meet or exceed standards for H.264 capable (legacy\older codecs not acceptable).

J. Video streaming: multi-stream and multi-head camera support

K. Recommend Milestone, OnSSI or equivalent.

P a g e | 6

5. Video Recorder Minimum Specifications:

A. Network Video Recorder or Server and Switch configuration

B. Embedded PoE

C. Windows Embedded 7 Standard (64 bit)

D. Memory: Minimum of 4GB

E. Video Output: HDMI/VGA

F. 2 x USB 2.0

G. Capable of storing a minimum of 2 TB; RAID 5 {storage requirements determined by contractor based on 14-day minimum storage requirement}.

H. Rack mounted.

I. Recommend Razberi or equivalent.

6. Interior IP Camera minimum specifications: Progressive Scan, 3MP resolution, H.264 compression, day/night capability, multiple streaming, digital pan tilt zoom, vandal resistant housing, POE and password protection, varifocal lens.

7. Exterior IP Camera minimum specifications: Progressive Scan, 5MP resolution, H.264 compression, day/night capability, multiple streaming, digital pan tilt zoom, environmental and vandal resistant housing, POE and password protection, varifocal lens.

8. Camera Mounts: The Contractor shall install the camera mounts as specified by the manufacturer and provide mounting hardware sized appropriately to secure the mount, camera and housing; provide grounding and surge protection for each exterior camera installation; and provide/connect electrical and signal transmission cabling to each camera.

9. Monitor and Mount

A. 26” (Minimum) 1080P Color LCD Monitor

B. WALL MOUNT FOR LCD MONITOR

P a g e | 7

10. Workstation minimum specifications: The workstation must meet or exceed the minimum specifications for the client workstation software stated in the manufacturers VMS documentation. A minimum of a 19” monitor screen. An All-in-One style desktop PC/workstation is preferred. The workstation must have a wireless keyboard and mouse.

11. Keyboard-Video-Mouse (KVM) minimum specifications: 17” LCD screen, rack mounted, resolution of 1280x1024, two USB ports and supports four computers.

12. Uninterruptable Power Supply (UPS): Rack mounted UPS to provide backup for the VSS equipment that will allow the system to operate for two hours base with a minimum output power of 1200 Watts. The nominal output and input voltage shall be 120V.

13. Cabling minimum specifications: Unshielded Plenum Rated Cat6e Purple.

14. Equipment Rack specifications: If the contractor cannot use the existing racks located in the Data Communication Room (DCR) then the contractor shall provide a Swing Out Wall Mount Rack. Contractor shall verify rack mount size to hold all rack mounted equipment that will be part of the VMS.

15. Additional VSS instructions.

A. The Contractor shall conceal CCTV wiring in the wall, floor, or ceiling to prevent safety hazards. The Contractor shall conceal wiring in a conduit to provide a professional finish when wiring outside the walls or ceiling. The agency shall accept a combination of concealed and conduit wiring for a site. The Contractor shall conceal wiring, if required, on exterior walls and roofing with approval from the customer. The Contractor shall meet all safety standards and building codes. The Contractor shall include all additional wiring work, such as firewall penetration.

B. Install and configure all components required for the fully integrated VSS solution.

C. The Contractor shall provide as-built documents to the agency for the complete installation of CCTV equipment.

D. Remove any existing cameras that will not be part of the new VSS.

16. Intrusion Detection System Specifications.

A. The IDS system shall have the capability to monitor each public customer service desk and other areas in the office as separate zones. The manufacturer product guide will always take precedence over recommendations in this statement of work.

P a g e | 8

B. The IDS/Duress alarm shall be connected to the Department of Homeland Security (DHS)/Federal Protective Service (FPS) MegaCenter per DHS/FPS requirements. The Multi-Regional Emergency Management Control Centers (MegaCenters) handle alarm monitoring and radio dispatch of Federal Protective Service Officers (PSO) and Contract Guards for alarm response, criminal activities and emergencies for agency offices in GSA federally owned properties and leased space.

C. The Contractor shall provide the designated DHS/FPS MegaCenter, (DMC) with a complete zone list with alpha descriptions, as outlined in the MegaCenter Alarm Requirements Document, (MAR Package). Assist the DMC with panel programming.

The contractor shall provide the DMC with the complete zone list 24 hours before scheduled testing of equipment. Zone all sensors individually unless indicated otherwise.

D. The FPS MegaCenter will only accept UL commercially listed panels from Honeywell (Ademco), Bosch (Radionics), Caddx, or DMP. Vendor must be a licensed distributer and installer of the system they are installing.

E. The IDS shall consist of alarm panel, keypads, expansion modules, recessed magnetic door contacts, dual technology glass break detectors, glass break tester for agency, dual technology ceiling mounted passive infrared motion detectors, auxiliary DC power supply, battery backup, surge protector, wireless momentary duress push buttons switches, 22/2, 22/4 plenum rated wire, and miscellaneous hardware.

F. IDS sensors shall provide complete coverage of all perimeter doors and ground floor windows. Sensors should be redundant and programmed to prevent nuisance alarms.

G. Duress alarms shall be installed discreetly at all public customer service desks, guard stations and other selected areas within offices, refer to design drawings.

H. Alarm annunciation panels must be installed in close proximity to management offices, the guard station and other select locations within offices.

I. Each point of the system shall be individually identified at the keypads and in the MegaCenter. All alarm zones/points including duress must be tested to the MegaCenter.

P a g e | 9

17. IDS Control Panel must meet the following minimum requirements

A. Listed for UL Commercial Burglary.

B. Supports up to 128 zones.

C. Supports commercial wireless devices.

D. Provides integrated CCTV switching capability.

E. Provides supervision of peripheral devices.

F. Supports up to 96 optional relay outputs.

G. Supports alarm reporting via Internet

18. IDS Panel Keypad must meet the following minimum requirements:

A. Color touch screen keypad display

B. Illuminated LCD display for system messages

C. User-friendly menu operation

D. Graphical buttons for data or command entry

E. System instructions through integrated on-screen help

F. Display multiple events in order of priority

G. Command button for performing functions, Enter button for passcode entry

H. Sounder emits distinct warning tones and allows volume adjustment

19. IDS Sensors (Photoelectric, Motion, Position, Acoustic and Seismic Sensors) must meet the following minimum requirements.

A. UL Standards 639

B. ANSR.BP1448

P a g e | 10

C. IP54 rated

D. Motion Sensors should comprise multiple sensor technologies (such as microwave, PIR, etc.)

E. Incorporate false alarm reduction technology

F. Be designed for deployment and application

20. Duress Alarms must meet the following minimum requirements:

A. Wireless capability for all duress buttons at Security Posts and public interview stations.

B. Duress Button(s) for office staff will be configured to annunciate at the facilities nominated security post(s).

C. Duress Button(s) for security posts will also annunciate at the FPS Mega Center.

D. Configurable annunciations to covertly alert recipients.

E. Capable of remote notifications via POTS, LAN and VOIP methods to the designated FPS Mega Center.

F. UL 636 Certified

G. The Contractor will mount buttons to the underside desk/counter at the locations indicated. Mount buttons securely to the desk, wall or specified position using specified mounting standards.

H. Contractor will configure and program all duress alarms to report to the facility’s main security post. Duress Button(s) at the main security post will also signal the designated FPS Mega Center.

21. Power Supplies must meet the following minimum requirements:

A. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

B. Power supplies shall indicate power loss, low battery and restorations.

P a g e | 11

C. The system shall indicate exact location of power supply, location of panel, panel number, breaker and number.

D. Each power supply shall have a battery capable of maintaining the IDS for a minimum of 8 hours.

22. Additional IDS instructions.

A. When installing magnetic door contacts, the contractor shall wire each device on a separate zone to alarm panel. End of Line Resistor (EOLR) will be at the device, not in the alarm panel. See design drawing.

B. When installing remote stations (keypads) the contractor shall wire keypads to control panel per manufacturer specifications.

C. When installing 360’ dual tech ceiling mounted passive infrared motion detectors the contractor shall wire each device on a separate zone to alarm panel. EOLR will be at the device, not in the panel.

D. Install components and wiring according to manufacturer recommendations and applicable codes, whichever is most stringent

E. Mount control panel equipment 54 inches above finished floor, unless specified otherwise

F. Install Power Supply Units (PSU) inside cabinets

G. Connect and configure PSUs to power devices as specified

H. Use surface metal raceway only when approved by the COR to cover alarm wiring in finished areas where conduit is not appropriate

I. Install end-of-line resistors at the device, not in the alarm panel

J. The system will allow authorized SSA personnel to administer and program the system.

K. The IDS furnished should be capable of remote notifications via POTS, LAN and VOIP methods to the designated central monitoring station.

L. All alarm systems must have a zone assigned to the alarm system Panel Tamper.

P a g e | 12

M. UL 1076; UL 1610; UL 609 Certified

N. Annunciations must be configurable to covertly alert recipients.

O. Must install this system as if it were a UL Listed Burglar Alarm system for commercial facilities, even though this installation will not need a UL Certificate. In other words, it must be installed in such a way that it would pass the inspection process for a UL Commercial Burglar Alarm.

23. Physical Access Control System Specifications.

A. Agency seeks PIV-enabled physical access control system that integrates with other security systems that are agency compliant. In addition, agency seeks HSPD-12 compliant PACS that shall have the capability to integrate into a centralized “Lenel” enterprise management and control system (future use). Therefore, proposed PACS must expose its functionality through both a native user interface and a programmatic application-programming interface (API).

B. The PACS System must conform to the following:

1. FICAM/HSPD-12 Compliance. PACS must be capable of identifying both traditional proximity access cards as well as the current PIV card formats.

Agency follows the SP800-73-2 guidelines in identifying each PIV card uniquely with a 14-digit badge number (consisting of FASC-N Agency Code (4 digits) + FASC-N system code (4 digits) + FASC-N Credential Number (6 digits) within the enterprise PACS system. Each subordinate PACS must be capable of identifying the PIV card using that format. Additionally, any access control technology supporting the PIV card format must also adhere to requirements outlined in FIPS 201-1/2 which obligates conformity to ISO7816, ISO14443 and SP800-96.

C. Native User Interface Requirements.

1. The physical access control systems must support a native user interface for operator and administrators. The interfaces components must be capable of running on the standard agency Microsoft Windows 7 client PC image. The interface may be either web-based or a Windows GUI (rich client). Web-based interfaces must function within Microsoft Internet Explorer versions 9 through 11.

2. The native user interface shall support user authentication via a username/password mechanism at a minimum with an option for transport

P a g e | 13 security (confidentiality and integrity) via the SSL/TLS protocols or equivalent cryptographic mechanisms. Special consideration is available to authenticate mechanisms that can authenticate the operator via a PIV card or via an existing logo to the agency network (Active Directory). The native user interface shall support role-based access control to its own feature set to distinguish between operators and administrators of different types.

3. API Requirements. The API shall expose all functions that are available in the native user interface, including all access control, intrusion detection, event monitoring and video capabilities. The API entry point shall support username/password authentication at a minimum. The entry point shall support an option for transport security via SSL/TLS protocol or equivalent cryptographic mechanisms. Special consideration is available to authentication mechanisms that can authenticate the integrated system via a device certificate. The API shall support role based access control to its own feature set to distinguish between integrated systems of different types. The API shall comply with the following requirements in functionality:

4. All searches shall be case-insensitive

5. All searches shall allow wildcards

6. Searches shall be allowed on Name (First, Last, Middle)

7. Searches shall be allowed on Credential number

8. Searches shall be allowed on Access levels (e.g. search for all cardholders who have access to level “X”)

9. Read/Write access shall be granted to the following:

10. Access Level (Name and Time Period)

11. User Information (Name, User, Defined Fields, and Photo)

12. Credential Information (Badge Number, Badge Type/Affiliation, Badge Status:

active, disabled, etc.., PIN, Activation Date, Deactivation Date, Access Levels, Access Level Start Date and Access Level End Date)

P a g e | 14

24. Installation:

A. Install a Physical Access Control System

B. Provide proper capacity and quantity of power supplies to provide power for the number of powered devices per approved design.

C. Install HSPD-12 compliant card readers as designated on the site design drawings.

D. Install UL 437 rated high security lock mortise lever sets.

E. Coordinate with the agency on locations of control panels, power supplies.

F. Install and configure all components required for the fully integrated access control solution.

G. Install all components indicated in the design documentation.

H. Access control system must include a back-up battery system with transformer/charger that will allow the system to operate for a minimum of 24 hours on battery power and be able to read and process standard HID as well as PIV smart cards.

I. The contractor will be required to enroll all local SSA HSPD-12 PIV Smart Cards into the access control software and train onsite SSA management with the necessary skills to maintain the data base on a day-to-day basis as well as to create and modify templates and door schedules.

J. The contractor will program the system with four templates, one for management that features 24/7 access to all doors, one for employees that features access to all doors except the DCR (LAN Room) door, with access from (Insert time period ex.

6:30AM-6:00PM M-F, and from 6:30AM-3:30PM on Saturday), one for the guard/PSO and one for the cleaning crew with access hours determined by local management and that does not include access to the DCR (LAN Room) door.

K. All access (PIV/HID) cards must include a 4-digit pin to access. Please ask users to provide a 4-digit pin. Users must enter their 4-digit pin with their credential card to get access for doors with reader with number pad.

L. It is the responsibility of the contractor to calculate the load to ensure that there are sufficient backup batteries for a minimum of twenty four (24) hours standby in case of a power failure.

P a g e | 15

M. Will install fail safe electric strikes at all access control door locations. The Electronic Access Control system will operate these electric strikes to grant access with a valid credential. The electric strikes shall be the model most appropriate for the doorframe.

N. Provide an appropriate power supply/transformer to power the specified number of door strikes. All electric strikes on exterior, outward opening doors shall have the appropriate ‘Jimmy Plate’ installed over the strike. Offset for any backpressure conditions.

O. For all electric strikes - Program the electric strike to stay energized for two (2) seconds. The installer may extend the two seconds upon request from the office manager if there is a disabled employee that may need additional time. Program the access control to only allow this individual the extended time delay

25. Emergency Egress minimum specifications:

A. Install Emergency Exit Pre- Alarm monitor points, the monitor points will be programmed to be monitored on the portion 2 keypads located at the security desk and the Managers Office. EOLR will be at the device, not in the panel.

B. Will install emergency egress in accordance with all codes and standards set forth by, but not limited to; IBC, NFPA 101, ANSI/BHMA Standard A156.4 for Delayed Egress Locking Systems, and ANSI/BHMA A156.5 for minimum exit device requirements.

C. All delayed egress devices shall meet all applicable UL test requirements.

D. The emergency egress shall delay opening for 15 seconds and must allow free egress upon power failure or fire alarm. A maximum force of 15-pounds shall initiate the 15-second timer.

E. An audible alarm is required.

F. Signage stating how the delayed egress functions must be posted on the door.