SCIF_Statement_of_Requirements_16_Sep_19.pdf

STATEMENT OF REQUIREMENTS

7x 20ft’ Sensitive Compartmented Information Facilities (SCIF)

16 Sep 19

1. Scope. The Contractor shall provide all management, tools, equipment, transportation, supervision, and labor required to provide seven (7) semi-permanent, relocatable, turnkey, TEMPEST rated, containerized SCIFs.

a) SCIFs shall come with all necessary power, lighting, cooling, heating, ventilation, physical security, and Electronic Security System (ESS) infrastructures.

b) The areas of concern and special attention include physical security and hardening, acoustic controls, visual controls, access control, electronic and TEMPEST security.

2. Accreditation.

a) The SCIFs shall be constructed and accredited in accordance with Intelligence Community Directive 705 (ICD 705) and Intelligence Community Standards 705 series (ICS 705), and IC Tech Spec for ICD/ICS 705.

b) This system will be used as a U.S. government–accredited facility where Sensitive Compartmented Information (SCI) will be stored, discussed or electronically processed.

c) NSA & DIA validated SCIF with TEMPEST protection.

d) Must meet current government Uniform Facility Standards.

e) Under no circumstances shall plans or diagrams that are identified for SCI be sent or posted on unprotected information technology systems or internet venue without encryption.

3. SCIF Requirements. Each SCIF shall incorporate the following requirements:

a) Design & Configuration.

i) Container shall be configured as a Certified Shielded Enclosure (CSE) that is required to achieve shielding attenuation as defined by the Shielding Effectiveness Test in accordance with NSA NO. 94-106, National Security Agency Specification for Shielded Enclosures dated 24 October 1994, assuring a Certified Shielded Enclosure (CSE) in accordance with ICD 705 Tech Specs and TEMPEST standards.

ii) RF shielding shall provide dB attenuation to meet or exceed NSA 94-106 standards;

certified (tested) RF shielded enclosure with RF shielding properties, which make it TEMPEST compliant as determined by a certified TEMPEST Technical Authority

(CTTA).

iii) Must have a STC rating of 50 or better.

iv) Container conduits and piping passing through envelope shall be protected with dielectric penetrations.

v) Container shall include wall-mounted Heating & Cooling units with and ventilation package to meet required power and heat loads.

(1) HVAC shall meet requirement to support 3 personnel working in austere environments with ambient outside temperatures ranging from 32F-130F.

vi) Container shall include a Path of Egress indicated by battery operated combination emergency light / EXIT sign over all doors.

vii) The HVAC split unit, transformer, and other ancillary components may be externally mounted in order to maximize workspace as long as all ICD 705 Tech Specs requirements are maintained.

viii) Must be relocatable. The U.S. Government requires the flexibility to transport the SCIFs via C-17 aircraft and flatbed line haul. SCIFs designed to be moveable using material handling equipment such as forklifts or cranes.

b) Size. Approximately dimensional layout of a standard 20 foot ISO container or actual 20 foot ISO container capable of for transport universality, durability expectations, and installation in austere/confined locations.

c) Vestibule & Door.

i) Container must provide for a vestibule for entry into secure workspace.

ii) Vestibule must restrict visibility of the entrance to the work area.

iii) Entry to work area must include access control system utilizing HID proxy badge and

PIN pad.

iv) Entry to work space must include an acoustic door package with an ICD 705, Tec

Specs compliant lock package.

v) Vestibule must be included for Security-in-Depth and must allow for two (2) doors.

(1) High-security vault door

(a) TEMPEST tested and certified single knife-edge RF shielding door.

(b) Must incorporate panic device for egress requirements.

(c) Must contain NAPEC hasp to meet forced entry requirements.

(2) Exterior door

(3) Must provide dB attenuation meeting or exceeding NSA 94-106 standards and

RF attenuation.

(a) Must be lockable.

(b) Must be water-resistant.

d) Paint.

i) Interior steel surfaces shall be primed-coated and finished with flat latex paint.

ii) All steel surfaces shall be sandblasted before painted.

e) Walls.

i) Either the exterior must be continuously welded on all six sides or the SCIF must contain a fully welded interior wall. ICD 705 Tech Specs and TEMPEST standards must be maintained.

ii) Shall have at least 1/2” solid steel man bars welded in a 6” grid at any opening greater than 96 square inches.

iii) Container floor, wall, and ceiling assemblies must meet STC 50 / Sound Group 4 acoustic attenuation requirements.

f) Interior.

i) Interior shall incorporate commercial-grade vinyl tile floor.

ii) Shall include 3 individual workstations and 1 printer station.

(1) Each workstations requires the ability to connect to four separate and secure networks plus an additional printer station for a non-secure network (total 10 lines).

g) Power Generation.

i) Contractor shall include a freestanding generator capable of providing sufficient power to operate all contractor provided/installed components as well as enough power to operate at least 12 computers, 1 shredder, 1 printer, 1 VTC suite, and sufficient power reserves for miscellaneous small electronics.

ii) Contractor shall plan for at least a 100 AMP power draw inclusive of all SCIF components (HVAC, IDS, etc.) and above equipment.

iii) Generator shall produce a sound level of no more than 70 dBA.

iv) Shall include an external power conditioner for sure power for EURO 230v/400v

50Hz.

v) Shall include Uninterrupted Power Supply (UPS) and surge suppression equipment to support Workstations (Laptop/Desktop), printers, security equipment, etc.

vi) UPS requires Incoming (commercial) power to be EURO voltage. Output shall be

230v/400v 50 Hz.

vii) SCIFs shall contain power requirements to support EURO (230v/400v, 50Hz) voltage.

viii) At least four additional power EURO standard outlets to be used for miscellaneous purposes.

ix) Shall include 1 main distribution panel EURO voltage 230v/400v 3 phase.

x) Shall include a container/SCIF mounted automatic transfer switch that ties to tactical quiet generator system for main distribution panel.

xi) Shall include all necessary military spec’d cabling and connectors.

h) Communications.

i) Each SCIF shall be coded and configured using fiber optic wiring for 4 networks (NIPR/SIPR/JWICS/NSA Network). Network cables shall be color coded in green, red, yellow, blue, and an additional purple cabling for each workstation.

ii) Must have three secure channels and one non-secure channel with one of the secure channels isolated for NSA and dedicated VOIP.

iii) Must include panel port feature built into the container exterior wall that allows a connection (standard mil-spec antenna connectors) to external antenna array for satellite ground terminals in tri-band (C-, X- and Ku-Band) or single band configuration up to Ka-Band.

iv) LAN/Network hubs shall be provided/installed.

v) No local storage is required.

vi) All components must meet ICD 705 Tech Specs and CNSSAM standards.

i) Intrusion Detection.

i) Include a UL-2050 compliant Intrusion Detection System (IDS).

ii) Include Color CCTV system, with camera in Vestibule and monitor in SCIF, for visually observing visitors.

iii) Include remote-end, head-end monitoring center compatible with Vista 128 Intrusion

Detection System (or similar item with NSA and DIA validations).

(1) Reporting must be capable of being handled via fiber connection to U.S.

command post on local compound.

(2) Include interior monitor in SCIF.

5. Security.

a) SCIFs shall be manufactured completely at the vendor’s location and in a secure and controlled environment.

b) Manufacturing must meet the following security requirements:

i) All design and construction shall be performed by U.S. Company using U.S.

persons.

ii) All employees must be U.S. citizens and bound by corporate and security non-disclosure agreements.

iii) Employees must receive periodic security awareness briefings and work within a corporate security program that has oversight by a Security Program Manager.

iv) Vendor must maintain technical, procedural, and institutional processes to protect product design and intent for use.

v) Contractor shall ensure, at no time, any information is released about this solicitation nor resulting contract, specifically the purpose, design, location, security features, etc.

vi) Contractor shall maintain a "security-in-depth" environment consisting of unique electronic devices, hardware, product documentation, and security industry recognized mitigations for ensuring the product is free from manipulation or exploitation.

c) SCIFs shall be in U.S. custody throughout construction and ultimately to final destination.

6. Quality Assurance.

a) Manufacturing site, facilities, SCIF construction shall be fully accessible to the customer for potential scheduled and unscheduled inspections.

b) Contractor shall maintain a documented quality assurance / quality control program throughout fabrication process.

c) Contractor shall have the electrical system inspected and approved by a certified electrical inspector prior to shipping.

d) Contractor shall test Intrusion Detection System (IDS).

i) Testing shall be performed by U.S. citizens working for a U.S. company.

7. Technical Assistance.

a) Contractor shall provide full access to a Subject Matter Expert (SME) for guidance with completion of the U.S. Gov’t submission of Construction Security Plan (CSP) and Fixed Facility Checklist (FFC), as well as advice and assistance with all ICD 705 regulations.

8. Delivery Schedule.

a) The contractor may deliver the SCIFs in bulk or as individual shipments.

b) Following construction completion, the SCIFs must be escorted to a U.S. port facility by

U.S. citizens for transport by a U.S. flagged carrier. Upon arrival at overseas port, the container must be met by U.S. citizens who will take custody of the shipment and escort the SCIFs to final destination.

c) Contractor is required to perform door-to-door delivery to Stuttgart Army Airfield, Germany, including all transportation requirements for on loading and off-loading at final destination in accordance with ICD 705 Tech Specs.

d) The contractor shall inform the government of any delays that may occur as soon as they are foreseen or recognized.

9. Post Award Deliverables.

a) The contractor shall plan for and upon construction completion; provide a Construction

Security Plan meeting the criteria contained in ICD 705 Tech Specs.

b) Prior to shipping, the Contractor shall provide a Shipping Plan for approval by the U.S.

Government.

10. Warranty & Maintenance.

a) Contractor shall include a manufacturer provided warranty for an initial period of at least

1 year.

i) Contractor provided warranty terms and conditions will be included in resulting contract.

11. Points of Contact (POC). Available at contract award. See request for quote.