Appendix_A_Facilities_Standards.docx

DEFENSE INFORMATION SYSTEMS AGENCY

P.O. BOX 549

FORT MEADE, MARYLAND 20755-0549

DISA EIS CIRCULAR 360-95-3 12 December 2014

FACILITIES ENGINEERING STANDARDS for Defense Enterprise Computing Centers (DECCs)

1. Purpose. This Circular prescribes policy, assigns responsibilities and provides procedures for Facility Operations and Maintenance, and Infrastructure Design and Equipment Installation that support Department of Defense Information Network (DODIN) and Core Data Center (CDC) Information Technology infrastructure support equipment.

2. Applicability. This Circular applies to DISA and to all activities responsible for the construction and equipment installation projects and the operation and maintenance (O&M) of telecommunications and information processing components of the DODIN and CDC locations that are assigned an operational or direct operational support missions which are equipped with auxiliary power systems (standby generators and Uninterruptible Power Systems [UPS]).

3. Authority. This Circular is published in accordance with the DOD Directive 5105.19, Defense Information Systems Agency (DISA).

4. References. See Enclosure 1

5. Objectives. The objectives of this Circular are to: (1) Ensure a high state of operational performance and redundancy of the DECC facility infrastructure’s critical systems, equipment and components that support the Core Data Center (CDC) locations, (2) Maintain facility infrastructure reliability for operational mission support, (3) Determine and monitor the capability of existing facility infrastructure systems, equipment and components to satisfy operational mission requirements, and (4) Provide operational and technical information to form the basis for timely correction of noted deficiencies.

6. Responsibilities.

6.1 Heads of the military departments and defense agencies ensure compliance with the provisions of this Circular and implement actions to adhere to these standards.

6.2 DISA Principal Director for Enterprise Services (ES) (for the Defense Enterprise Computing Centers), and the DISA Principal Director for Operations (OPS) (for telecommunications facilities in CONUS, Central and South America, and the Central Area [Southwest Asia]) and Commanders of DISA-PAC, DISA-EUR, DISA-CONUS, shall:

6.2.1 Establish guidelines for reporting the results of electric power exercises.

6.2.2 Monitor, within their geographical area of responsibility (AOR), DODIN and CDC compliance with the procedures contained in this Circular.

6.2.3 Provide, as necessary, specific implementing guidance to subordinate DISA activities and O&M agencies to meet unique circumstances within an individual AOR.

6.2.4 Recommend to O&M agencies appropriate corrective actions for noted deficiencies in facility infrastructure critical systems and equipment.

6.2.5 Provide support and direction, as needed, to resolve scheduling conflicts with operational requirements created by facility engineering activities and operational procedures.

6.3 Core Data Center (CDC) Commanders and Chiefs shall:

6.3.1 Ensure that the prescribed inspections, tests, and exercises, described in the facility standards, are scheduled and conducted by qualified facility personnel, qualified contractors, or by personnel from the host installation. It is the responsibility of the O&M agency to properly conduct these tests and exercises, or to ensure its agent, in the case of contracted O&M, to do so.

6.3.2 Document, report, and retain the results of inspections, tests, and exercises, as prescribed in the O&M agency’s facility engineering program.

6.3.3 Fully coordinate with subordinate, lateral, higher headquarters, and all connected facilities and local users on dates and times for facility engineering infrastructure upgrade, maintenance and repair projects.

6.3.4 Provide documented results of inspections, tests, and exercises to both the EIS Chief, Facilities Maintenance (ES621), Enterprise Services Directorate and Chief, Quality Management Branch (OP5), Operations Directorate for tracking the trends and analysis of facility operations and maintenance issues.

7. Standards. (See Enclosure 2)

7.1. This DISA Facilities Engineering Standards Circular provides the technical requirements for optimum reliability, system redundancy, operations and maintenance of critical infrastructure and safety within the DISA computing centers.

7.2. The standards at enclosure 2 are formatted in-line with the MasterFormat guide to allow ease of use and direct cross-reference to the engineering, construction and maintenance industry specifications. MasterFormat is a master list of numbers and titles classified by industry standard work results or construction practices, primarily used to organize project documents, operations and maintenance manuals, correlate with detailed cost information and relate drawing notations to specifications. The MasterFormat is produced by the Construction Specifications Institute.

7.3. The standards are based upon the National Electrical Code (NEC), National Fire Protection Association (NFPA), including the Life Safety Code, DOD standards and nationally recognized standards of design and construction.

7.4. The standards provide the minimum requirements for computer center infrastructure redundancy for power and cooling, access raised flooring, fire detection and extinguishing systems, and the safety requirements of the National Electric Code. The standards specify electrical grounding, power, lighting, emergency backup power and redundancy requirements, as well as the criteria for energy management, alternative paths for power supply, ventilation or cooling.

8. Exemptions

8.1 An exemption to comply to the Facility Standards specified in the enclosure may be obtained from the Commanders of DISA-PAC, DISA-EUR, DISA-CONUS, the DISA Principal Director for Enterprise Services, or the DISA Principal Director for Operations, as appropriate. Complete justification must be provided to substantiate the request. Inspections, reporting, and record keeping are still required. In all cases, temporary exemptions shall be revalidated annually.

8.2 The auxiliary electric power system successfully transferred load to the system supported by the intended generator loads and lasted for a minimum of one hour and occurred within 14 days of the scheduled operational test. In this case, the scheduled operational test is not required, although all reporting and record keeping requirements still pertain.

9. Changes. Recommended changes to this Circular, together with full and complete supporting rationale, should be sent to Chief, Facilities Maintenance, Enterprise Services Directorate Attn: Facilities Engineering, (ES521), P.O. Box 4598, Greenwood Village, Colorado, 80155-4598, or e-mail to: disa.denver.esd.list.dl-facilities@mail.mil.

10. Additional Guidance. The Commanders of DISA-PAC, DISA-EUR, DISA-CONUS, DISA Principal Director for Enterprise Services, and divisions within the DISA Principal Director for Operations may provide additional specific implementation guidance to DODIN and CDC locations within their AOR. Such guidance must be provided to Enterprise Information Services Directorate (EIS), Facilities Maintenance (ES621) for approval, prior to publication.

SUMMARY OF SIGNIFICANT CHANGES. This revision expands the focus from EIS computing centers to include all facility infrastructure critical systems, equipment and components of DISA Core Data Center locations. The standards outline minimum critical infrastructure redundancies, preventive maintenance programs and follows commercial and industry best practices, operational testing and training requirements is included.

*This Circular replaces DISA EIS Facility Standard document 350-195-3, dated 14 December 2012 and must be reissued, cancelled, or certified current within five years of its publication. If not, it will expire 10 years from its publication date and be removed from the D1SA Issuance postings.

OPR: ESD disa.denver.esd.list.dl-facilities@mail.mil

DISTRIBUTION: P

Enclosure 1

REFERENCES

ANSI/NFPA 75, Fire Protection of Information Technology Equipment, “CURRENT EDITION.”

DODI 6055.1, DoD Safety and Occupational Health (SOH) Program, “CURRENT EDITION.”

MIL-HDBK-470A, Designing and Developing Maintainable Products and Systems (Volume I), “CURRENT EDITION.”

MIL-STD-882D, Standard Practice: System Safety, “CURRENT EDITION.”

NFPA 70, National Electrical Code, “CURRENT EDITION.”

NFPA 70B, Recommended Practice for Electrical Equipment Maintenance, “CURRENT EDITION.”

NFPA 70E, Standard for Electrical Safety in the Workplace, “CURRENT EDITION.”

NFPA 110, Standard for Emergency and Standby Power Systems, dated, “CURRENT EDITION.”

UFC 1-200-01 General Building Requirements, with Change 2, “CURRENT EDITION.”

UFC 1-200-02 High Performance and Sustainable Building Requirements, with Change 3, “CURRENT EDITION.”

UFC 3-410-01 Heating, Ventilating, and Air Conditioning Systems, with Change 1Revised, “CURRENT EDITION.”

UFC 3-520-01, Interior Electrical Systems, “CURRENT EDITION.”

UFC 3-540-01 Engine-Driven Generator Systems for Backup Power Applications, “CURRENT EDITION.”

UFC 3-550-01 Exterior Electrical Power Distribution with Change 1, “CURRENT EDITION.”

UFC 3-575-01 Lightning and Static Electricity Protection Systems, “CURRENT EDITION.”

UFC 3-600-01 Fire Protection Engineering for Facilities, with Change 3, “CURRENT EDITION.”

UFC 4-020-01 DoD Security Engineering Facilities Planning Manual, “CURRENT EDITION.”

UFC 4-021-02 Electronic Security Systems, “CURRENT EDITION.”

TIA-942, Telecommunications Infrastructure Standard for Data Center, “CURRENT EDITION.”

DISAC 360-95-3

FACILITIES ENGINEERING STANDARDS

Table of Contents

Table of Figures

Table of Attachments

Table of Acronyms

Enclosure 2 DISAC 360-95-3

FOR OFFICIAL USE ONLY (FOUO)

SPECIFICATIONS GROUP

General Requirements Subgroup Div 01 General Requirements 01 10 00 Summary 01 11 00 Summary of Work 01 11 13 Work Covered by Contract Documents Work accomplished at DISA datacenters is accomplished by a number of different contract vehicles, All work shall use standardized Statements of Work (SOW) or Performance Work Statements (PWS) using boilerplate components from other internal DISA organizations. These boilerplate statements ensure that other standards and requirements are met Statements of work for all facility or construction contracts shall cite or reference all applicable standards, specifications, and codes, as well as rules, regulations and policies Sensitive information including site addresses and points of contact will not be included on SOWs and PWSs until after award of a contract.

01 14 00 Work Restrictions 01 14 13 Access to Site Access to DISA datacenter locations is strictly limited to authorized personnel, and to contractors/vendors with awarded government contracts. The DISA Field Security Office (FSO) is the proponent for all security-related access inquiries.

The criteria for determining whether a contract needs to be classified (i.e., requires a DD254 and FCL (Facility Security Clearance), with clearances for personnel) is: 'Will the contractor personnel come into contact with classified information during performance of job duties?” The following is the list of necessary and sufficient conditions, all of which must be reasonably met, in order to have a facilities contract request security clearances:

a. Is it reasonably likely that contractor personnel will come into contact with classified information?

b. Are contractor personnel going to be working in controlled areas more than 16 hours per week?

c. Is the contract requirement long-term (multiple performance periods) and on-going?

d. Are the functions being performed historically services performed by host agency BOS programs, where host agency personnel would have had clearances as a result of their military/government employment?

Sponsorship for new FCLs are reserved for site-wide or enterprise-wide O&M contractors Sponsorship for these FCLs is conducted by the Government Contracting

01 14 16 Coordination with Occupants 01 14 19 Use of Site 01 20 00 Price and Payment Procedures Cost estimating for datacenter construction and replacement shall be conducted using both PACES (Parametric Cost Estimating System) and R.S. Means Cost Estimating tools.

01 24 00 Value Engineering Value Engineering shall be conducted on all capital improvement projects in the design and construction phases to determine cost savings and efficiencies in the project execution.

01 30 00 Administrative Requirements 01 31 00 Project Management and Coordination 01 31 13 Project Coordination The standards used for design, construction, operation and maintenance of the DISA datacenter facilities are the same as the standards used by the host installation except as described herein. The DISA Facility Standards may be more restrictive than host installation standards. The DISA Facility Managers will ensure compliance with both the host installation and DISA Facility Standards. This includes but is not limited to advising host installation engineering organizations of DISA requirements and stopping work that is not in compliance.

01 32 00 Construction Project Documentation 01 32 16 Construction Progress Schedule Planned progress schedules for projects are required submissions in technical and cost proposals from vendors for all work.

Progress schedules shall be updated and submitted in association with the deliverable requirements in that section, not less than monthly during the period of performance of projects (from date of award until final acceptance by the Government).

01 33 00 Submittal Procedures 01 33 23 Shop Drawings, Product Data, and Samples Drawings and drawing packages submitted for progress and design reviews shall conform to the requirements of the Record Drawing Configuration Management (CM) Specification in section 01 78 39.

01 35 00 Special Procedures 01 35 53 Security Procedures All Information Technology (IT) systems designed, implemented, and operated in the DISA environment are subject to a strict set of Information Assurance (IA) requirements before those systems are allowed to operate or connect to any other system. Prior to operation or connection of any system, the Service Provider for that system shall obtain all necessary certification(s), accreditation(s), and authorization(s). This requirement applies to services covering:

a. Building Automation Systems (BAS)

b. Access Control & Closed Circuit Television Systems

c. Computerized Maintenance Management Systems (CMMS) The contracted Service Provider shall conduct all necessary IA activities to achieve and maintain certification and accreditation of any IT systems during the performance of any contract involving the operations and maintenance of IT systems.

Security System Accreditation Agreement (SSAA) worksheets submitted for the DoD Information Assurance Certification and Accreditation Process (DIACAP) Implementation Plan must take into account modular updates to the systems, patches and how they will be tested and installed, access to out-of-band (OOB) network systems for LAN access, who will be designated as the system administrator(s) for the system(s), how backups will be performed, et cetera..

The processes involved in obtaining and maintaining certification and accreditation are complex and beyond the scope of this Standard to fully define. The publications listed herein and other mandatory guidance that can be obtained from http://iase.disa.mil/ are critical to ensuring that IT systems supporting the enterprise are safe.

Figure 01-06: Security References

01 40 00 Quality Requirements 01 41 00 Regulatory Requirements Offices that write, control and/or implement standards for DISA Enterprise Services Facilities:

a. DISA Director

b. Principal Director for DISA Enterprise Services

c. DISA Enterprise Services, Operations

d. DISA Enterprise Services, Operations Denver, Facilities Engineering

e. DISA CS Site Facility Managers

f. Military Departments

g. Major Commands

h. Major Command Engineers

i. Host Base Engineers or Installation Public Works Officers

j. GSA and GSA Contractors

k. Local, state and federal laws, ordinances, and procedural requirements

01 41 13 Codes References listed herein may impact scope, design, and/or schedule and are listed for reference. All references are (U) unless noted otherwise.

Deviations and Conflicts in Standards

a. This DISA Facility Standards apply to all DISA Enterprise Services sites for all repair, remodeling, new construction, operation and maintenance. DISA Facility Engineering may authorize variances/waivers from the standards. Some waivers may be time specific and may be rescinded by the authority having jurisdiction (AHJ).

b. All references herein are mandatory unless otherwise stated. . The current version of all references is implied.

c. More stringent guidance shall survive in case of conflicting standards within…