Attachment 2 Final PWS PFPA Formatted 11-23-11.doc

November 2, 2011

PERFORMANCE WORK STATEMENT

FOR

PENTAGON FORCE PROTECTION AGENCY (PFPA)

INTEGRATED SECURITY SERVICES CONTRACT

(ISSC)

Prepared by

PFPA, SECURITY SERVICES DIRECTORATE

81.0 SCOPE

81.1 Summary Information

81.2 Summary of Work and Information Related to Support and Services

81.2.1 Service and Maintenance

81.2.2 Design and Engineering Services

91.2.3 New Systems or Sub Systems

91.2.4 Support Systems

101.3 Objectives

101.3.1 Interoperability

111.3.2 Scalability

111.3.3 Reliability

111.3.4 Availability

121.4 Current Situation

121.4.1 Pentagon Reservation and Government Owned/Leased Facilities in the National Capital Region

121.4.1.1 Location

121.4.1.1.1 Pentagon Reservation

121.4.1.1.2 Government Facilities

121.4.1.1.3 Residences

121.4.1.2 Operation

131.4.1.2.1 Intrusion Detection System (IDS)

131.4.1.2.2 Access Control System

131.4.1.2.3 Assessment System

141.5 Desired Situation

141.5.1 Pentagon Reservation and Government Owned/Leased facilities within NCR

141.5.1.1 Location

141.5.1.2 Operation

141.6 Summary of Services and Materials Requested

151.6.1 Management and Personnel

151.6.2 System Engineering and Planning

151.6.3 Subsystem Descriptions

151.6.3.1 Common Support Systems

151.6.3.2 Command, Control, and Communications System

151.6.3.3 Access Control System

161.6.3.4 Intrusion Detection System

161.6.3.5 Assessment System

171.6.3.6 Video Badging

171.6.3.7 Active/Passive Barrier Systems

171.6.3.8 Security Booths, Kiosks and Bullet Resistant Components (BRC)

171.6.3.9 Screening Devices

181.6.4 Installation and Testing

181.6.5 Supplemental Requirements

181.6.5.1 Integrated Logistics Support

181.6.5.2 Quality Assurance/Quality Control Program

181.6.5.3 Technical Services

192.0 REFERENCES

192.1 Government Documents

192.1.1 Code of Federal Regulations (CFR)

192.1.2 Department of Defense (DOD)

202.1.3 Office of Director of National Intelligence (ODNI)

202.1.4 National Institute of Standards and Technology (NIST)

212.1.5 Office of Management and Budget (OMB)

212.1.6 U.S. Army, Corps of Engineers

212.1.6.1 Unified Facilities Criteria

222.1.6.2 Unified Facility Guide Specifications (UFGS)

232.2 Commercial Standards and Documents

232.2.1 American National Standards Institute (ANSI)

232.2.2 Institute of Electrical and Electronics Engineers (IEEE)

242.2.3 International Telegraph and Telephone Consultative Committee (CCITT)

242.2.4 International Organization for Standardization (ISO)

252.2.5 National Fire Protection Association (NFPA)

252.2.6 Underwriters Laboratory (UL)

262.3 Acronyms

292.4 Definitions and Requirements Applicable to ISSC Systems

313.0 REQUIREMENTS

323.1 Management and Personnel

323.1.1 Contractor Management

323.1.1.1 Program Management

323.1.1.2 Program Management Plan

323.1.1.3 Program Schedule

323.1.1.4 Review Meetings

333.1.1.5 Reports

333.1.1.5.1 Program Report

333.1.1.5.2 Delivery Order Report

333.1.1.5.3 Installation Progress Report

343.1.2 Contractor Personnel Qualifications

343.1.2.1 Contractor Representatives

343.1.2.2 Minimum Personnel Qualifications

343.1.2.3 Specific Personnel Qualifications

343.1.2.3.1 Key Personnel

353.1.2.3.1.1 Program Manager

353.1.2.3.1.2 Installation Services Manager

353.1.2.3.1.3 Maintenance / Repair Chief

363.1.2.3.1.4 Quality Control Manager

363.1.2.3.1.5 Logistics Manager

363.1.2.3.1.6 Senior Systems Administrator

363.1.2.3.1.7 CCTV System Technical Manager/Administrator

373.1.2.4 Conduct of Personnel

373.1.2.5 Facility Clearance

373.1.2.6 Personnel Security Clearances

383.2 System Engineering and Planning

383.2.1 Site Survey Report

383.2.2 Technical Design Package

393.3 Subsystem Detailed Requirements

393.3.1 Common Support Systems

393.3.1.1 Computers

403.3.1.2 Network Equipment

403.3.1.3 Cabling and Associated Hardware

413.3.1.4 Uninterruptible Power Supplies (UPS)

413.3.2 Command, Control, and Communications System (CCCS)

413.3.2.1 ACS/IDS/CCTV/ Assessment Central System

413.3.2.1.1 System Description

423.3.2.1.2 Performance Requirements

443.3.2.2 Computer Aided Dispatch/Records Management System (CAD/RMS)

443.3.2.2.1 System Description

443.3.2.2.2 Performance Requirements

453.3.2.3 Radio System

453.3.2.3.1 System Description

453.3.2.3.2 Performance Requirements

453.3.2.4 Audio Source Recording (ASR)

453.3.2.4.1 System Description

453.3.2.4.2 Performance Requirements

463.3.3 Access Control System (ACS)

473.3.3.1 Access Control Host and Peripherals

473.3.3.1.1 System Description

473.3.3.1.2 Performance Requirements

493.3.3.2 Delayed Door Egress System (DDES)

493.3.3.2.1 System Description

493.3.3.2.2 Performance Requirements

503.3.3.3 Guard Patrol Supervisory System (GPSS)

503.3.3.3.1 System Description

503.3.3.3.2 Performance Requirements

513.3.3.4 Vehicle Entry Control System

513.3.3.4.1 System Description

513.3.3.4.2 Performance Requirements (license plate reader and automated vehicle identification)

513.3.3.5 Visual Image Recognition System (VIRS) (to be superseded by Privilege Management Program (PMP)

513.3.3.5.1 System Description

523.3.3.5.2 Performance Requirements

523.3.3.6 Privilege Management Program (PMP)

523.3.3.6.1 System Description

523.3.4 Intrusion Detection Systems (IDS)

523.3.4.1 Primary Intrusion Detection System

523.3.4.1.1 System Description

533.3.4.1.2 Performance Requirements

543.3.4.1.3 System Requirements

543.3.4.2 Audio Duress System (ADS)

543.3.4.2.1 System Description

543.3.4.2.2 Performance Requirements

553.3.4.3 Electronic Article Surveillance System (EASS)

553.3.4.3.1 System Description

553.3.4.3.2 Performance Requirements

553.3.5 Assessment System

553.3.5.1 Video Assessment System (VAS)

553.3.5.1.1 System Description

563.3.5.1.2 Performance Requirements

563.3.5.2 Audio Assessment System (AAS)

563.3.5.2.1 System Description

563.3.5.2.2 Performance Requirements

573.3.6 Video Badging System (VBS)

573.3.6.1 System Description

573.3.6.2 Performance Requirements

583.3.7 Passive and Active Vehicle Barrier Systems

583.3.7.1 System Description

583.3.7.2 Performance Requirements

583.3.8 Security Booths, Kiosks and Bullet Resistant Components (BRC)

583.3.8.1 System Description

593.3.8.2 Performance Requirements

593.3.9 Screening Devices

593.3.9.1 System Description

593.3.9.2 Performance Requirements

593.4 Security System Installation and Testing

593.4.1 Pre-Delivery Testing

603.4.2 Installation

603.4.2.1 Installation Tools and Permits

603.4.2.2 Installation Practices

613.4.2.3 Interfacing with Existing Equipment

613.4.2.4 As Built Drawings

613.4.3 Post Installation Testing

623.5 Integrated Logistics Support

623.5.1 Automated Integrated Logistics Support (ILS) Program

623.5.1.1 Maintenance Management System (MMS)

633.5.1.2 Warranty Management System (WMS)

633.5.1.3 Training Management System (TMS)

633.5.1.4 Configuration Management System (CMS)

633.5.1.5 Documentation Management System (DMS)

643.5.1.6 Management System Reports

643.5.2 Maintenance Plan

643.5.2.1 Hardware Maintenance

643.5.2.2 Replacement and Spare Parts

643.5.2.3 Software Maintenance

653.5.2.4 Preventive Maintenance

653.5.2.5 On-Call Maintenance

653.5.2.5.1 Response to Service Calls

663.5.2.5.2 Completion of Service Calls

663.5.2.6 Technical Support

663.5.3 Warranty

673.5.4 Training

673.5.4.1 User Training (Tenants and PFPA Personnel)

673.5.5 Configuration Management

683.5.6 System and Subsystem Manuals

683.5.6.1 Technical Module

693.5.6.2 Hardware Module

693.5.6.3 Operating System Software Module

693.5.6.4 Application Software Module

703.5.6.5 Operations Module

703.5.7 Risk Management Plan

703.5.8 Quality Assurance/Quality Control (QA/QC) Program

713.5.9 Technical Services

713.5.9.1 Security Industry Evaluation

713.5.9.2 Replacement and Upgrade

713.5.9.3 ISSC Test Bed

713.6 Information Assurance, System Certification and Accreditations:

713.7 Project Installation Plans

723.8 Contract Support Information

723.8.1 General

723.8.1.1 Scope of Work

723.7.1.1.1 Hours of Operation

723.7.1.1.2 Security System Operation

733.8.1.2 Background Information

733.8.1.3 Government Observations

733.8.1.4 Interface with Government Operation

733.8.1.5 Safety

733.8.1.5.1 Pentagon Renovation Program Safety Requirements

733.8.1.5.2 Safety Plan

733.8.1.5.3 Accident Reporting

743.8.1.5.4 Occupational Safety and Health Act (OSHA)

743.8.1.5.5 Smoking

743.8.1.6 Security

743.8.1.6.1 Installation Access

743.8.1.6.2 Vehicle Registration

743.8.1.6.3 Search and Seizure

743.8.1.7 Conservation of Utilities

743.8.1.8 Codes

753.8.2 Property Installed at the Pentagon/Facility and Services

753.8.2.1 Property

753.8.2.1.1 Facilities

753.8.2.1.2 Equipment

753.8.2.1.4 Forms

753.8.2.1.5 Publications

753.8.2.1.6 Parking

753.8.2.2 Services

753.8.2.2.1 Utilities

753.8.2.2.2 Refuse Collection

763.8.3 Contractor Furnished Items

763.8.3.1 Property

763.8.3.1.1 Tools and Special Testing Equipment

763.8.3.1.2 Replacement Parts

763.8.3.1.3 Automated Integrated Logistics System (AILS) Equipment

763.8.3.1.4 Office Supplies

763.8.3.2 Property Storage

763.8.3.3 Disposal of Damaged or Removed Equipment

773.8.3.4 Housekeeping Practices

773.8.4 Applicable Documents

773.8.5 Proposal Response

783.9 Transition Support

783.9.1 Incoming Transition Plan

783.9.2 Option Item: Outgoing Transition Plan

1.0 SCOPE

1.1 Summary Information

The Integrated Security Services Contract (ISSC) is a total system approach to automating and improving the physical security system used to protect Department of Defense (DOD) sites including, the Pentagon, and sites within the National Capitol Region (NCR). ISSC emphasizes the use of computer system based solutions to meet security requirements and integrates the operation of multiple subsystems to improve efficiency and control. Functions and processes within ISSC are divided into 6 major subsystem categories, which are:

a) Common support systems

b) Command, control, and communications systems

c) Access control systems

d) Intrusion detection systems

e) Assessment systems

f) Video badging systems

These major subsystem categories are further divided into minor subsystems, which are defined in subsequent requirements paragraphs. An ISSC is designed and built from the available subsystems to meet individual site requirements. Other types of security, access control and or detection systems may apply in order to encompass unique requirements.

1.2 Summary of Work and Information Related to Support and Services

The work to be performed under this contract shall be related to support of systems in multiple areas.

1.2.1 Service and Maintenance

ISSC Contractor shall provide:

a) Service and maintenance of already installed systems at the time of award of this contract.

b) Service and maintenance of systems and subsystems installed while this contract is in force. These systems may be installed by the ISSC Contractor, or sub-contractors working under the scope of the primary contractor.

c) Service and maintenance of upgraded systems and subsystems authorized and installed by ISSC Contractor.

1.2.2 Design and Engineering Services

ISSC Contractor shall provide through his direct employees, or sub-contractors, engineering and design services related to the installed, or to be installed security systems or sub systems. These design and engineering services shall be technical in nature, and be provided by the manufacturers or certified and trained integrators of the systems installed or to be installed in the Pentagon and other associated facilities stated in this document.

1.2.3 New Systems or Sub Systems

ISSC Contractor shall provide all services related to new systems or sub-systems to supplement, update or upgrades of systems in place, including but not limited to new hardware, software, firmware, workstations, servers, system electronic panels, controllers, card readers, CCTV cameras, alarm annunciation systems, communication equipment, equipment interfaces, sensors, etc. Calibration, testing, commissioning of such systems, sub systems and controllers, and associated devices. Where these systems are to be integrated with other systems covered under this contract, Contractor shall provide these services. Such work will be defined and priced under specific delivery order(s).

1.2.4 Support Systems

These systems constitute several subsystems which perform specific tasks and functions in a manner to manage, optimize, operate, service and have all security systems function at the required performance levels. These subsystems consist of Maintenance Management System, Warranty Management System, Training Management System, Configuration Management System, Project Installation Plan and Documentation Management System. Besides these Integrated Logistics Support systems described under paragraph Integrated Logistical Support, the Contractor shall provide, under this contract, technical services, service and maintenance of these support systems themselves, all documentation, configuration, government personnel training, warranty work, etc. related to these support systems. Some of the primary features are described under paragraph: Integrated Logistics Support.

a) These systems shall have configuration with all features set in each system defined at the initial phases of the contract. The Contractor shall ensure that selection of hardware, software and firmware complements all the systems in this area. All relational data bases and report functions, graphical user interfaces, import export functions of the systems shall be the product of a single nationally recognized software company, or of companies which have commercially provided licensed solutions with public demonstrated, error free operations that their packages work in a seamless manner. For instance, SQL data bases shall be of the same software entity, the same version and be used on all Logistic Support systems.

b) Various types of information related to this contract, including but limited to data base stored information and reports shall be imported and exported between these systems. Contract and Delivery Order documentation will be stored in these systems, and associated tasks, services, repairs, cost data, equipment histories, etc. will also be stored as unique and correlated records, such that other sub systems of the logistical support can seamlessly share and use data without operator intervention, and requiring custom scripts developed for various services. Service and maintenance data base shall be correlated and allow system users to readily locate and provide reproducible documents of equipment manufacturer’s manuals, system integrator documentation and engineering drawings for service maintenance, system expansions, upgrades and system or sub system replacements.

c) All databases shall be protected from tampering, unauthorized alterations, internal and external threats from malware, Trojan horses, worms, viruses, etc. Contractor shall use the criteria issued by Department of Defense, and industry standards organizations to implement the safeguards needed to protect the information from unauthorized personnel.

d) These systems, including the data stored shall become the property of the Government at the end of this contract. Contractor shall ensure that all information, software, hardware, and system configuration are maintained in fully functional manner, without any tampering, destruction, or alteration of all stored information, data, etc. till the last day of the contract. The Government reserves its rights to take possession of all data and software at any instance during the life of this contract. The Government may either at the end of this contract, or termination of this contract require the Contractor to submit all electronic files, data bases, records, manuals, documentation, configuration data, archives, etc.

1.3 Objectives

The objective of the ISSC is the design, procurement, installation, training, and maintenance of automated, integrated physical security systems for multiple DOD sites. The overriding design requirement for each of the computer-based subsystems within ISSC shall be open architecture system design concept, which is compatible with existing systems. Open systems are those that conform to open specifications for interfaces, services, and supporting formats. This conformance enables properly engineered subsystems to be easily integrated into a wide variety of systems with minimal changes to interoperate with other subsystems. Integration of the various computer-based subsystems shall be accomplished through compliance with standard interfaces defined by standards bodies such as International Organization for Standardization (ISO), American National Standards Institute (ANSI), Institute of Electrical and Electronics Engineers (IEEE), and applicable DOD Regulations. Adherence to this design philosophy is intended to foster the overall objective of effectively and efficiently designing, procuring, installing, operating, and maintaining automated, integrated physical security systems through the benefits of interoperability and scalability. In addition to these regulations and standards, other applicable national codes and standards may be applicable to the systems and subsystems in this contract. DOD objectives are to implement and integrate standards based as well as code compliant systems.

1.3.1 Interoperability

Interoperability allows a diverse mix of subsystems to operate together as an integrated whole, sharing data and tools in a useful and transparent fashion. Interoperability of components and subsystems is a key design requirement for ISSC and requires the use of subsystems designed to the maximum extent practicable with open standards and defacto open standards.

Wherever possible, the equipment offered by vendors should interoperate with existing equipment to save replacement costs. However, it is recognized that some replacement will be required especially in the upper levels of existing system architecture. New equipment offered by the Contractor for implementation in later years of the ISSC shall be operationally compatible with equipment previously procured and installed under this contract to the maximum extent practicable.

a) In regards to Homeland Security Presidential Directive 12 (HSPD-12), interoperability means the ability to validate, accept and enroll DOD Common Access Cards (CAC) and other Federal, non-DOD PIV cards in our access control system/Privilege Management Program.

b) Wherever computers are required, they shall be widely available models based on open systems architecture, using multiple manufacturers as sources for components and spare parts. Standard operating systems shall be used, such as but not limited to Microsoft Windows, OS/2, and UNIX in the computer-based systems provided under ISSC.

c) ISSC subsystem computers shall use common widely used buses, including but not limited to ISA, EISA, PCI, S-BUS, and VME. The Contractor shall provide converters, if required, to join unlike buses together.

d) Standard network protocols shall be used, such as Transmission Control Protocol / Internet Protocol (TCP/IP) layered over open standard physical layer protocols such as Ethernet, token ring, or Fiber Distributed Data Interface (FDDI) for Local Area Networks (LANs) and X.25, frame relay or Asynchronous Transfer Mode (ATM) for wide area networks. A LAN shall provide a pathway for data exchange among various ISSC computer-based subsystems.

e) ISSC computer databases shall be Structured Query Language (SQL) compliant to provide commonality to database interfaces.

1.3.2 Scalability

Scalability requires that it be possible for a diverse mix of ISSC subsystems and components to be combined and configured to meet widely varying site requirements. Through open system design ISSC shall be scalable from the smallest system requirements such as a single small building to very large system requirements such as a large building or a campus made up of several buildings. ISSC shall accommodate a range of system sizes, both physical and functional.

1.3.3 Reliability

All systems and sub systems which are directly or indirectly part of the security system or sub systems shall be provided with proven features and demonstrated reliability of at least 99.8%. Reliability shall be achieved by the use of proven product reliability based on system(s) history, mean time between failure data, equipment and system redundancy, and sub system(s) and system configuration to meet the required reliability of at least 99.8%. Electronic Security Systems reliability shall be consistent with the current FIPS requirement.

1.3.4 Availability

All Security Systems and sub systems shall be configured with redundancy and reliability, including all hardware and software, and configured to provide availability of 99.9%

1.4 Current Situation

1.4.1 Pentagon Reservation and Government Owned/Leased Facilities in the National Capital Region

The Pentagon Force Protection Agency (PFPA) provides physical security for both perimeter and interior spaces of the Pentagon Reservation and up to 120 Government owned (to include newly built or renovated BRAC buildings for relocation) and leased facilities. Department of Defense (DOD) activities located in these buildings can also request additional security services on a cost reimbursable basis. DOD regulations mandate minimum-security requirements for all DOD facilities. PFPA and each individual security manager have some flexibility in meeting/exceeding minimum-security requirements based on site-specific needs and mission requirements.

1.4.1.1 Location

All physical security work is performed in buildings, or campus style environments within PFPA areas of responsibility located within the National Capital Region. This primarily encompasses Maryland, Pennsylvania, the District of Columbia and Virginia, but can include other areas within the United States or Overseas as defined by PFPA. The buildings are categorized into four groups: Pentagon Reservation, Government owned Buildings, Government Leased Buildings and Residences in a combination of both urban/rural environments.

1.4.1.1.1 Pentagon Reservation

The DOD owns the Pentagon Reservation, which includes the Pentagon, Navy Annex and the Heating and Refrigeration Plant. The reservation is located in Arlington County, VA and therefore State and local laws, codes and ordinances are jurisdictional to the Pentagon Reservation. The Pentagon has been renovated with the completion of all renovation work by late 2011.

1.4.1.1.2 Government Facilities

The Government owns and leases approximately 120 buildings including the Mark Center for DOD in the NCR. The DOD is responsible for the security at many of these buildings.

1.4.1.1.3 Residences

The residences of the Secretary of Defense, Deputy Secretary of Defense, and others as designated by PFPA are or will be equipped with security equipment, which is installed, operated, and maintained by PFPA.

1.4.1.2 Operation

Security equipment is installed to secure the perimeter of buildings and interior office spaces. Internal spaces must be secured in accordance with (IAW) all applicable DOD regulations to include but not limited to Office of Director of National Intelligence, Intelligence Community Directives (ICD) ICD 503 and ICD 705.1 and ICD 705.2, Protecting Sensitive Compartmented Information within Information Systems, DOD 5200.28 Security Requirements for Automated Information Systems, DOD 5200.400 Information Technology Security Certification and Accreditation Process, DOD 5220.22M National Industrial Security Program Operating Manual (NISPOM), DOD 5200.1R Information Security Program, and Office Secretary of Defense Supplement to DOD 5200.1R.

1.4.1.2.1 Intrusion Detection System (IDS)

The IDS is used to alert the security force of an unauthorized entry. Duress alarms are used to protect key personnel. Equipment enclosures are protected with tamper circuits. IDS sensors of various types are used to protect exterior doors, windows, interior office doors, and office spaces. Motion sensors are used to protect various perimeter areas.

1.4.1.2.2 Access Control System

Presently, a digital video badging system creates a DOD Building pass, which is used for access control. The video badging system and the access control systems are linked via network such that badge numbers and necessary personnel data is automatically transmitted to the access control system upon badge creation. Homeland Security Presidential Directive 12 (HSPD 12) mandates a common identification standard for federal employees and Contractors. Based upon this directive, the National Institute for standards and technology (NIST) developed the Federal Information Processing Standards Publication 201 (FIPS 201). Current specifications are defined by SEIWG-012, but subject to change as per FIPS 201 implementation. Eventually the only accepted access control credentials will be the CAC, other Federal agency PIV cards, PIV-I, PIV-C, FRAC, TWIC and the non-CAC eligible (vendors, concessions, etc) alternative card. These cards will replace the DOD building pass after they are phased out.

a) DOD plans to implement biometric identification system(s) such as finger prints and iris scan technologies for access control. Such systems shall be integrated with current systems and become part of the ISSC.

b) Biometric systems in combination with card readers will be integrated and used for access and also as a credential validation system to allow access at designated spaces, perimeter access, turnstiles, etc.

c) System which are HSPD 12 compliant, including readers which can authenticate credentials of personnel with common access card (CAC) are being implemented at various location and will become part of the access control systems.

d) The systems will be supported by an Access Control Center manned by contractor staff for the purpose of administering access control rosters and PIC/PIN issuance.

1.4.1.2.3 Assessment System

The assessment system allows law enforcement personnel to monitor and assess public areas through the use of video cameras and audio intercommunication. The Closed Circuit Television (CCTV) system is used to monitor interior and exterior areas. The signals are transmitted over fiber optic cable, coaxial cable, telephone lines or wireless. An audio duress system is used to communicate between the monitoring office and remote intercom devices.

1.5 Desired Situation

1.5.1 Pentagon Reservation and Government Owned/Leased facilities within NCR

PFPA will continue to provide security for the perimeter and interior spaces of the Pentagon and over 120 other buildings. The ISSC Contractor shall perform system engineering, installation, maintenance and monitoring of the various security systems as directed by PFPA.

1.5.1.1 Location

All physical security work shall be performed by the ISSC Contractor in buildings, or campus style environments within PFPA areas of responsibility located within the National Capital Region (NCR). This encompasses Maryland, Pennsylvania, the District of Columbia and Virginia. The buildings are categorized into four groups: Pentagon Reservation, Government Owned Buildings, Government Leased Buildings, and Residences in a combination of urban/rural environments

1.5.1.2 Operation

Security equipment is installed to secure the perimeter of buildings and interior office spaces. Internal spaces must be secured in accordance with all applicable DOD regulations to include but not limited to Office of Director of National Intelligence, Intelligence Community Directives (ICD), ICD 705.1, ICD 705.2 and ICD 503, Protecting Sensitive Compartmented Information within Information Systems, DOD 5200.28 Security Requirements for Automated Information Systems, DOD 5200.400 Information Technology Security Certification and Accreditation Process, DOD 5220.22M National Industrial Security Program Operating Manual (NISPOM), and DOD 5200.1R Information Security Program.

Increasing amounts of automated security equipment will be installed to secure the perimeter of buildings and interior office spaces to include; offices, supply rooms, and utility rooms (electrical, mechanical, communications). The use of digital video badging systems to create building passes and ID badges with standardized badge numbers encoded on magnetic stripe or smart chip is expected to increase and promote sharing of badges among DOD facilities. HSPD-12 and FIPS-201 specifications outline these new requirements and are referenced in performance criteria of systems below. Electronic article surveillance will be increasingly common to protect the DOD from loss of pilferable equipment and materials. The use of automated situation assessment systems will increase in all facilities allowing control center personnel to monitor public areas and respond quickly to situations. The DOD facilities, as a whole, require a complete integrated physical security system. Systems designed will be open and interoperable with other existing systems located within DOD. New and upgrades of existing systems shall be compliant with FIPS 201.

1.6 Summary of Services and Materials Requested

The Contractor shall provide the complete services necessary for the delivery of requested security systems at the Pentagon and other DOD sites as specified in individual delivery orders.

1.6.1 Management and Personnel

The Contractor shall provide all requisite services, resources as well as qualified and trained personnel to function under a management structure, which supports the analysis, system engineering, design, purchase, installation, maintenance support and training of large-scale security systems at multiple sites occurring simultaneously at geographically diverse locations.

1.6.2 System Engineering and Planning

Contractors shall provide professional system engineering services by personnel who are trained, certified, licensed as well as experienced in the installation, application and maintenance of complex security systems. In addition, work shall include cost estimating, planning, design, integration, programming, training and maintenance. The system can be scaled to support small areas such as a utility closet to larger complexes such as the Pentagon which has numerous entry points, thousands of tenants, visitors, and hundreds of internally controlled spaces.

1.6.3 Subsystem Descriptions

The Contractor shall provide a complete system(s) or sub-systems, including the hardware and software necessary for the operation of a turn-key security system. At the time of delivery and acceptance to the Government these subsystems shall be fully configured with all requisite features, interfaces, and application programs; where connectivity or interfacing with existing or future systems is required such physical and logical connectivity features and equipment shall be provided as a part of such systems. All computer based, central processor and microprocessor based systems shall have security features which meet DOD policies and regulations, such as data encryption, anti-hacking software features or programs, malware and anti-virus protection software. The general performance requirements for the nine major sub-system components are defined in the following paragraphs.

1.6.3.1 Common Support Systems

All of the subsystems that form a part of ISSC require common support systems or components. These items may include: computers, network equipment; cabling (twisted pair, coaxial, wireless and fiber), associated cabling hardware (transceivers, connectors, terminators, patch panels, and racks), and uninterruptible power supplies. These items are the basic components of ISSC, which shall be usable and interchangeable throughout ISSC.

1.6.3.2 Command, Control, and Communications System

The Command, Control, and Communications System (CCCS) serves as the focal point of ISSC where several subsystems are integrated. It provides the hardware and software that can control all other ISSC subsystems and provide a common user interface to the ISSC operator. The CCCS may also support a Computer Aided Dispatch/Records Management System (CAD/RMS), a Radio System, Audio Source Recording (ASR) and Mustering System.

1.6.3.3 Access Control System

The Access Control System (ACS) provides automated control of designated doors, turnstiles, gates and vehicle barriers through various types of identification devices. In an integrated system, this subsystem is centrally controlled by the CCCS front-end host, which may have several associated client stations to allow monitoring, and management functions to be performed from several different locations. At the periphery it is made up of access control devices and associated hardware including, but not limited to card readers, keypads, biometric personal identity verification devices, and locking devices. Between these end devices and the CCCS host processor, the Independent Local Processor (ILP) serves to distribute the capability of the ACS by hosting portions of the main access control database and independently controlling a segment of the overall system. An ILP can be connected directly to the CCCS front end or may be connected to another ILP, which is in turn connected to the CCCS front end. Communication occurs between the host and an ILP on an as needed basis to report events to the host and update the ILP’s database. This hierarchical architecture allows for scalability from very small systems up to very large systems. The ACS may also include a Delayed Door Egress System (DDES), a Guard Patrol Supervisory System (GPSS), a Vehicle Entry Control System, and a Video Recognition System (VIRS).

1.6.3.4 Intrusion Detection System

The Intrusion Detection System (IDS) provides monitoring of alarm sensors connected to the inputs of an ILP. In an integrated system, this subsystem is centrally controlled by the CCCS front-end computer. At the periphery it is made up of alarm initiating devices and associated hardware including, but not limited to door contacts (BMS), motion sensors, video motion sensors, glass shock sensors, cabinet tamper switches, duress switches, and exterior perimeter protection devices. Between these end devices and the CCCS host processor, the ILP serves to distribute the capability of the IDS. An ILP can be connected directly to the CCCS front end or may be connected to another ILP, which is in turn connected to the CCCS front end. This hierarchical tree architecture allows for scalability from very small systems up to very large systems. The IDS may also include an Audio Duress System (ADS) and an Electronic Article Surveillance System (EASS).

1.6.3.5 Assessment System

The Assessment System, which consists of the Video Assessment System (VAS) and the Audio Assessment System (AAS), allows law enforcement personnel to monitor and assess public areas through the use of video cameras and audio intercommunication devices. It is an integrated subsystem of ISSC, which is interfaced to and controlled by the CCCS front-end system. The closed circuit television equipment includes, but is not limited to cameras, housings, mounts, lenses, signal amplification, and equalization devices, transmission media, recording equipment, switching/control equipment, and lighting enhancements. Audio intercoms are coupled to CCTV cameras for alarm caller assessment purposes. Master intercoms are also integrated with ISSC Command and Control to facilitate communications between control room personnel and remote sites. A determination will be made during the site survey process whether the sites existing phone system/lines may be used for the AAS.

1.6.3.6 Video Badging

The Video Badging System (VBS) consists of a system of personal computers equipped with video cameras and badge printers operating networked to enable multiple enrollment and administration workstations to provide cardholder enrollments, badge issuance, database configuration, and report functions.

A commonality of communications protocols and database applications between the VBS and the ISSC CCCS allows the exchange of data for automatic enrollment of new cardholders into the ISSC access control system database, electronic enforcement of workflows and processes, and retrieval of video image and badge data information for card holders from the VBS database.

The VBS must be compatible with FIPS –201 standards.

1.6.3.7 Active/Passive Barrier Systems

Contractor may be required to perform this requirement under a separately funded delivery order installation task.

The Passive and Active Vehicle Barrier Systems consist of all industry and DOD Force Protection standard barrier systems, to include but not limited to, barriers, traffic control, landscaping, environmental design, physical perimeter security and vehicle standoff strategies which support security and law enforcement operations. Contractor shall comply with minimum requirements set forth in UFC 4-022-02, Selection and Application of Vehicle Barriers, as well as requirements set forth in IDO’s.

1.6.3.8 Security Booths, Kiosks and Bullet Resistant Components (BRC)

Contractor may be required to perform this requirement under a separately funded delivery order installation task. The Security Booths, Kiosks and Bullet Resistant Components (BRC) shall consists of all material, labor and equipment to fabricate, deliver and install (BR) hardened security booths, desks, kiosks, and vehicle/pedestrian “access point” structures, for both interior/exterior applications, IAW DOD Regulations, Force Protection Standards, Unified Facility Criteria (UFC), NCPC, and site specific design/property owner constraints. These Kiosks will house a variety of security controls, systems and equipment as defined by individual delivery orders. Design and placement of equipment shall be based on factors such as utilization of systems, ease of use, rapid ingress and egress, as well as duress alarms, where applicable. Where BRC components are needed or specified those components shall conform to DOD regulations, policies and stated standards.

1.6.3.9 Screening Devices

Contractor may be required to perform this requirement under a separately funded delivery order installation task.

Screening devices shall consist of all electronic systems designed to detect contraband, weapons, hazardous materials, CBRNE, or other prohibited items. Systems to include but not limited to x-ray machines, metal detectors, hand held detectors, under vehicle inspection system, whole body imagers, and mobile screening systems.

1.6.4 Installation and Testing

The Contractor shall be responsible for the complete configuration, system engineering, programming, integration, shipment, installation, and testing of systems as per Individual Delivery Orders (IDO). The Contractor shall develop a system, which shall support site-specific Government requirements.

a) The Contractor shall provide the services of a qualified team of installation professionals with the necessary experience to install the equipment properly while having minimal effect on the day-to-day operations of the facility.

b) All engineers and technicians working on ISSC systems shall have certification and training from original equipment manufacturer in their area of expertise. All individuals performing work shall have at least 3 years of hands on experience on applicable hardware, software or system integration on the systems installed, to be installed, serviced, or upgraded under this contract.

1.6.5 Supplemental Requirements

1.6.5.1 Integrated Logistics Support

The Contractor shall develop a comprehensive integrated logistics support (ILS) program, which shall control and monitor the status of all installed equipment using an automated system. The Contractor shall provide training and maintenance services to support the deployed equipment and permit the facility to utilize the ISSC to its maximum effectiveness. The Contractor shall use an automated program, which shall track, and control all documentation associated with the ISSC program. Additional requirements for Integrated Logistics support are stated in subsequent major paragraph of this document.

1.6.5.2 Quality Assurance/Quality Control Program

The Contractor shall develop a quality control and assurance program (QC/QA), which shall aid in the satisfactory performance of all tasks under this contract and compliance with all applicable DOD Regulations, Instructions, Codes, and Standards. Part of the QC/QA shall include but is not limited to Probability of Detection, False Alarm Rates, and Acceptable Quality Levels for all systems and subsystems provided, upgraded or replaced existing systems or sub systems.

1.6.5.3 Technical Services

The Contractor shall maintain a test bed, conduct briefings, industry demonstrations, and on-site support of all ISSC equipment.

2.0 REFERENCES

All references are applicable for work performed this contract. Government regulations, Government criteria, national and international codes and standards, as well as industry standards available with the latest dates of issue shall be used for design, installation, all equipment selection, software features and selection for this contract.

2.1 Government Documents

2.1.1 Code of Federal Regulations (CFR)

47 CFR 15

Radio Frequency Devices

21 CFR 1020

Performance Standards for Ionizing Radiation Emitting Product

32 CFR-32

Conduct on the Pentagon Reservation

2.1.2 Department of Defense (DOD)

AI-30

Administrative Instruction-30, Security for Pentagon Reservation

DCSSC (May 2002) Pentagon Renovation (PENREN) Design and Construction, Security Standards and Criteria

DOD 2000.12

DOD Anti-Terrorism, Force Protection (AT/FP) Program

DOD 2000.12H

DOD AT/FP Handbook

DOD 2000.16

DOD Anti-Terrorism, Standards

DOD Dir. 5220.22M National Industry Security Program Operating Manual, (January 1995).

DOD Dir. 5200.1R Information Security Program

DOD 5200.2R

Personnel Security Regulation

DOD Dir. 5200.8R Security of DOD Installations and Resources

DOD DTM 09-012

Interim Policy Guidance for DOD Physical Access Control

DOD 5200.28

Security Requirements for Automated Information Systems

DOD 5200.400

Information Technology Security Certification and Accreditation Process

DOD 8500.1

Information Assurance (IA)

DOD 8500.2

Information Assurance (IA) Implementation

DODD O-8530.1

Computer Network Defense (CND)

DOD 8570.1

Information Assurance Training, Certification, and Workforce Management

DOD 5400.7-R

DOD Freedom of Information Act Program

DODI 1000.13

Identification (ID) Cards for Members of the Uniformed Services, Their Dependents, and Other Eligible Individuals

SEIWG-012

Prime Item Product Function Specification for Magnetic Stripe Credentials (2/28/94).

2.1.3 Office of Director of National Intelligence (ODNI)

Intelligence Community

Directive (ICD) 503 Intelligence Community Information Technology Systems Security

Risk Management, Certification and Accreditation (15 September 2010)

ICD 704

Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information (01 October 2008)

ICD 705

Sensitive Compartmented Information Facilities (2008)

ICS 705-1

Physical and Technical Security Standards for Sensitive Compartmented Information Facilities (2008)

ICS 705-2

Standards for the Accreditation and Reciprocal Use of Sensitive Compartmented Information Facilities (2008)

2.1.4 National Institute of Standards and Technology (NIST)

FIPS Pub 46‑1 Data Encryption Standard

FIPS Pub 140-2 Security Requirements for Cryptographic Modules

FIPS 197

Advanced Encryption Standard

FIPS 201

Federal Information Processing Standards.

FIPS 201-1

Personal Identity Verification of Federal Employees and Contractors

NIST SP800-73

Interfaces for Personal Identity Verification

NIST SP800-76

Biometric Data Specification for Personal Identity Verification

NIST SP800-79

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

NIST SP800-116

A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS)

2.1.5 Office of Management and Budget (OMB)

HSPD-12

Homeland Security Presidential Directive #12

OMB 05-24

Implementation of HSPD-12

OMB M-11-11

Continued Implementation of Homeland Security Presidential Directive (HSPD) 12– Policy for a Common Identification Standard for Federal Employees and Contractors

2.1.6 U.S. Army, Corps of Engineers

2.1.6.1 Unified Facilities Criteria

UFC 4-010-01

DOD Minimum Anti-Terrorism Standards for Buildings, includes Change 1

UFC 4-020-01

DOD Security Engineering Facilities Planning Manual

UFC 4-020-02

Security Engineering Design: Concept Design (FOUO)

UFC 4-020-03

Security Engineering Design: Final Design (FOUO)

UFC 4-022-01

Security Engineering Entry Control Facilities/Access Control Points

UFC 4-022-02

Selection and Application of Vehicle Barriers, with Change 1

UFC 4-022-03

Design of Security Fences, Gates, and Guard Facilities

2.1.6.2 Unified Facility Guide Specifications (UFGS)

Note: UFGS are to be used as attachments to Individual Delivery Orders, when completed/edited by Government. This is not limited to the following UFGS; commercial or other specifications shall be used based on systems, equipment and requirements not addressed in these Government specifications:

UFGS 02841N

Traffic Barriers

UFGS 07 84 00

Fire Stopping

UFGS 08 39 54

Blast Resistant Doors

UFGS 08 87 16

Fragment Retention Film for Glass

UFGS 08 34 02

Bullet Resistant Components

UFGS 28 20 00.00 20

Electronic Security System (ESS), Commercial

UFGS 26 55 53.00 10

Exterior Lighting Including Security and CCTV Applications

UFGS 28 23 23.00 10

Closed Circuit Television Systems

UFGS 28 20 01.00 10

Electronic Security Systems

UFGS 32 31 13

Chain Link Fence and Gates

UFGS 32 31 13.53

High Security Chain Link Fences and Gates

UFGS 34 41 26.00 10

Access Control Point Control System

UFGS 34 71 13.19

Active Vehicle Barriers

2.2 Commercial Standards and Documents

Applicable commercial standards, including but not limited to those listed below are applicable to the ISSC contract. Other standards and codes applicable are in the UFCs and UFGs; in addition other standards, codes and regulations may be listed in individual delivery orders issued under the ISSC contract.

2.2.1 American National Standards Institute (ANSI)

ANSI A 1.4

(1983) Sound Level Meters

ANSI C2 (1993)

National Electrical Safety Code

ANSI C2

(1990; TIA 90-2 Errata) National Electrical Safety Code

ANSI X3.64

(1979; R 1990) Additional controls for Use with American National Standard Code for Information Interchange

ANSI X3.135

(1992) Information Systems - Database Language SQL (Includes ANSI X3.168-1989)

ANSI X3.154

(1988) Office Machines and Supplies - Alphanumeric Machines-Keyboard Arrangement

ANSI X3.166

(1990) Fiber Distributed Data Interface (FDDI) Physical Layer Medium Dependent

ANSI X3.92

(1981; R 1988) Data Encryption Standard

2.2.2 Institute of Electrical and Electronics Engineers (IEEE)

IEEE Std 100-2000 IEEE Standard Dictionary of Electrical and Electronics Terms

IEEE Std C62.41.1-2002 IEEE Guide on the Surge Environment in Low-Voltage (1000 V and Less) AC Power Circuits

IEEE Std C62.41.2-2002 IEEE Recommended Practice on Characterization of Surges in Low Voltage (1000V and less) AC power circuits

IEEE Std 62.42-2005 IEEE Guide for the Application of Component Surge-Protective Devices for Use in Low-Voltage [Equal to or Less than 1000 V (ac) or 1200 V (dc)] Circuits

IEEE Std 62.43 -2003 IEEE Guide for Application of Surge Protectors Used in Low Voltage (Equal to or less than 1000 V, rms or 1200 V, dc) Data Communication and Signaling Circuits.

IEEE Std C62.48 -2005 IEEE Guide on Interactions Between Power System Disturbances and Surge-Protective Devices

IEEE Std C62.64-1997 IEEE Standard Specifications for Surge Protectors Used in Low-Voltage Data, Communications, and Signaling Circuits

IEEE Std C62.72 -2007 IEEE Guide for the Application of Surge-Protective Devices for Low-Voltage (1000 V or Less) AC Power Circuits

IEEE Std 142-2007 IEEE Recommended Practice for Grounding of Industrial and Commercial Power Systems

IEEE Std 446-1995 Emergency and Standby Systems for Industrial and Commercial Applications

IEEE Std 1100-2005 IEEE Recommended Practice for Powering and Grounding Sensitive Electronic Equipment (IEEE Emerald Book) [ANSI]

2.2.3 International Telegraph and Telephone Consultative Committee (CCITT)

CCITT‑01

(1988) Data Communication Over the Telephone Network, Series V Recommendations (CCITT Blue Book ‑ Vol. VIII ‑ fascicle VIII.1)

2.2.4 International Organization for Standardization (ISO)

ISO 9002

Standards and Quality

ISO 7810

(1985) Identifications Cards - Physical Characteristics

ISO 7811/1

(1985) Identification Cards - Recording Technique, Part 1: Embossing

ISO 7811/2

(1985) Identification Cards - Recording Technique, Part 2:Magnetic Stripe

ISO 7811/3

(1985) Identification Cards - Recording Technique, Part 3: Location of Embossed Characters on I0-1 Cards

ISO 7811/4

(1985) Identification Cards - Recording Technique, Part 4: Location of Read-Only Magnetic Tracks 1 and 2

ISO 7811/5

(1985) Identification Cards - Recording Technique, Part 5: Location of Read-Write Magnetic Track - Track 3

ISO 7816

Identification Cards – Integrated Circuit Cards – Parts 1 – 15

ISO/IEC 8802.3

(1993) [ANSI/IEEE Std. 802.3, 1993 Edition], Information Technology -- Local and Metropolitan area networks -- Part 3: Carrier Sense Multiple Access with collision detection (CSMA/CD) access method physical layer specifications

ISO 10007

Quality Management - Guidelines for Configuration Management

ISO 14443-1

Identification Cards – Contactless Integrated Circuit Cards – Proximity Cards – Part 1 – Physical Characteristics

ISO 14443-2

Identification Cards – Contactless Integrated Circuit Cards – Proximity Cards – Part 2 – Radio Frequency Power and Signal Interface

ISO 14443-3

Identification Cards – Contactless Integrated Circuit Cards – Proximity Cards – Part 3 – Initialization and Anti-collision

ISO 14443-4

Identification Cards – Contactless Integrated Circuit Cards – Proximity Cards – Part 4 – Transmission Protocol

2.2.5 National Fire Protection Association (NFPA)

NFPA 70

National Electrical Code (2011 Edition)

NFPA 72

National Fire Alarm and Signaling Code (2008)

NFPA 101

Life Safety Code (2009 Edition)

NFPA 780

Standard for Installation of Lightning Protection Systems (2011 Edition)

2.2.6 Underwriters Laboratory (UL)

UL 294

Standard for Access Control System Units (1999)

UL 681

Standard for Installation and Classification of Burglar and Holdup Alarm Systems (1999)

UL1076

Standard for Proprietary Burglar…