DRAFT_SOW.pdf

DRAFT SOW – Drive Through Portals

DRAFT

STATEMENT OF WORK/PERFORMANCE SPECIFICATION

LARGE SCALE NON-INTRUSIVE INSPECTION SYSTEMS

PROGRAM

DRIVE-THROUGH PORTAL (DTP)

DRAFT

ii

THIS PAGE INTENTIONALLY LEFT BLANK

iii

Table of Contents

STATEMENT OF WORK

1. SCOPE

1.1. Program Organization

1.1.1. Government Management Organization

1.1.2. Contractor Management Organization

1.2. Purpose

1.3. Background

2. APPLICABLE DOCUMENTS

2.1. Federal Regulations and Publications

2.2. National Standards

2.3. DHS/CBP Documents

3. SYSTEM REQUIREMENTS

3.1. Requirement Definitions:

3.2. General Requirements

3.3. Performance Requirements for Large Scale NII Systems

3.3.1. Sources & Detectors

3.3.2. Computers

3.3.3. Computer Security

3.3.4. Printed Documents

3.3.5. Printer / Scanner

3.4. Systems Integration

3.4.1. Operator Booth

3.4.1.1. Prefabricated Booths

3.4.1.2. DATA/LAN and Voice Connectivity

3.4.1.3. Work Center

3.4.1.4. Workstation Integration and Interface

3.4.2. Integrated Image Capture

3.4.3. Integrated Image Storage

3.4.4. Image Download

3.4.5. Integrated Data Set Download

iv

3.4.6. Integrated Radiation Detection Equipment

3.4.7. Officer Shelters

3.4.8. Passenger Shelters

3.4.9. Closed Circuit Television System

3.5. Safety and Protection Equipment

3.5.1. Safety Interlocks

3.5.2. Peripheral Equipment

3.5.3. Signage

Figure 1. X-Ray Inspection Sign (English)

3.6. Reliability, Availability and Maintainability Design Requirements

3.6.1. Basic System Reliability Requirements – Inherent Availability (Ai)

3.6.1.1. Mean Time Between Failures (MTBF)

3.6.1.2. Mean Time to Repair (MTTR)

3.6.1.3. Life Cycle Expectation

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

3.6.3. Classification of Reliability Critical Items

3.6.4. Corrosion Control

3.7. Quality Assurance/Quality Control Plan

3.7.1. Operator Booth Quality Control Documentation (e.g. Fabrication Inspection Plan):

3.8. Testing

3.8.1. Factory Testing

3.8.2. Site Acceptance Testing

3.8.3. Discrimination Testing

3.9. System Safety Program

3.9.1. Radiation Safety

3.9.1.1. Radiation Safety Design Review

3.9.1.2. Radiological Survey and Report

3.9.1.3. Annual Radiation Survey and Report

3.9.2. Safety Plan

3.9.3. Hazardous Materials

3.10. System Installation Services and Support Requirements

3.10.1. Site Surveys

v

3.10.2. Engineering Assessment

3.10.3. Construction Drawings

3.10.4. Engineering Assessment and Construction Drawings Approval Process 32

Table 1: Engineering Assessment and Drawings Approval Process

3.10.5. Site Preparation

3.11. System Installation

3.11.1. As-Built Drawings

3.11.2. Construction Manager Log

4. LIFE CYCLE SUSTAINMENT AND SUPPORT REQUIREMENTS

4.1. Warranty

4.2. System Training

4.2.1. Operator Training

4.2.2. Secondary Operator Training

4.2.3. Train-the-Trainer

4.2.4. Ownership

4.3. Technical Manuals

4.4. System User's Manual

4.5. Operational/Storage Checklist

4.6. Operator Service Manual

4.7. Technical Reviews

4.8. Other Reviews

4.9. Sustainment and Maintenance

4.9.1. Service Support Availability Requirements - Operational Availability (Ao) 39

4.9.2. Service Calls and Work Orders

4.9.2.1. Work Completion Form (WCF)

4.9.2.2. Work Site Cleanliness

4.9.3. Preventive Maintenance

4.9.3.1. NII Monthly Preventive Maintenance Schedule

4.9.3.2. Preventive Maintenance Visit Schedule

4.9.4. Corrective Maintenance

4.9.5. Conditional but Operational Status

vi

4.9.6. Corrosion Control under Preventative and Corrective Maintenance

4.9.7. Annual Configuration Report

4.10. On-Demand Services (Technology Refresh, Other Maintenance, and Other Support Services)

4.10.1. Engineering Services

4.10.2. Ad Hoc Reports

4.10.3. Site Surveys

4.10.4. Provisioning Support

4.10.5. Retrofit Support

4.10.6. System Integration Support and Services

4.10.7. Relocation Services

4.10.8. Site Work

4.10.9. Disposal Services

4.10.10. Emergency Services

4.10.11. Corrective and Replacement Services

4.10.12. Special Events

4.10.13. On-Demand Training

4.10.14. Remote Maintenance Monitoring

5. Information Technology Security

5.1. Basic Requirements

5.2. Security Authorization

5.3. DHS Security Policy Requirement

5.4. Encryption Compliance Requirement

5.5. Security Review

5.6. Access to Unclassified Facilities, Information Technology (IT) Resources, and Sensitive Information

5.7. Personal Identity Verification of Contractor Personnel

5.8. Security Requirements for Unclassified Information Technology Resources

5.9. Contractor Employee Access

5.10. Enterprise Architecture (EA) Compliance

5.11. Supply Chain Risk Management Terms and Conditions:

5.12. IPv6

vii

5.13. CBP Contractor Handling PII Level

5.14. Personal Identification Verification (PIV) Credential Compliance

5.15. DHS Information Technology Portfolio Alignment

6. Accessibility Requirements (Section 508 Compliance)

6.1. Section 508 Applicable EIT Accessibility Standards

6.2. Section 508 Applicable Exceptions

6.3. Section 508 Compliance Requirements

7. CONFIGURATION MANAGEMENT

7.1. Configuration Baseline

7.2. Technical Documentation

7.3. Management of the Technical Documentation

7.4. Engineering Change Proposals (ECPs)

7.5. Configuration Changes

7.6. Configuration Control Reports

7.7. Interchangeability

7.8. Accessibility

8. DOCUMENTATION DELIVERABLES (Data Item Description (DID))

9. APPENDICES:

Appendix A Requirements Matrix

Appendix B Deliverables

Appendix C: Acronyms

Appendix D: Glossary of Terms viii

Version Date Comments

V1 V2 V3

04/29/16 05/18/16 06/10/16

1st Draft 2nd Draft 3rd Draft

STATEMENT OF WORK

1. SCOPE

The U.S. Customs and Border Protection (CBP), based upon operational needs, has an immediate requirement to inspect vehicles for illegal contraband including narcotics and terrorist weapons. Because of the volume of vehicles flowing through the Ports of Entry, a system that allows vehicles to be driven through the system by the vehicle’s driver and with vehicle occupants still inside is required.

This Statement of Work details the minimum requirements for a Drive-Through Portal System. Proposals must meet the minimum requirements in order to be considered and those proposals which exceed these minimum requirements will receive a higher rating. The system shall be offered as a Commercial Off The Shelf Technology (COTS) system. The system must be safe and create exposure rates as low as possible as promulgated by the Nuclear Regulatory Commission (NRC) in 10 C.F.R Part 20, setting the maximum permissible level of radiation dose to the general public at 0.1 Rem (100,000 µR (microrem)) per-year. CBP is seeking a system that shall create dose rates of no greater than 10 µR per scan and a detailed image of the vehicle (from the roof of vehicle to the ground) which allows operators to quickly identify organic compounds (drugs, currency and explosives), high density objects, weapons, and stowaways.

Anticipated Period of Performance: twelve (12) months from date of award.

1.1. Program Organization

This program is under the technical direction of the LS-NII Contracting Officer Representative (COR) assigned to the CBP Laboratories and Scientific Services Directorate (LSSD), Interdiction Technology Branch (ITB) in coordination with CBP Enterprise Network and Technology Support (ENTS) Integrated Logistics Branch (ILB).

1.1.1. Government Management Organization

CBP will manage this program through the CBP LSSD/ITB process for system acquisition, delivery, and acceptance. CBP ENTS/ILB manage Warranty, Operations and Maintenance (O&M), and On-Demand Services. CBP will coordinate with the Contractor to ensure successful system integration. CBP Office of Training Development (OTD) will approve training development. CBP OTD and ENTS Technology Training Support Branch (TTSB) will coordinate operator training presentations. CBP Human Resources Management (HRM) will approve radiation safety.

1.1.2. Contractor Management Organization

The Contractor shall provide a Project Management Plan for CBP review. This plan shall include the scheduling for completion of all tasks required to fabricate, ship, test, train, maintain, and install; this shall include the development of drawings, site preparation and system installation for the Low Energy Drive Through Portal, all major points of contact and the Contractor’s overall management. The Project Management Plan shall be prepared in accordance with Data Item Description (DID) A001. The Contractor shall also provide a work breakdown structure which details the positions and level of effort (% time allocated for each task) allocated to this project.

1.2. Purpose

The purpose of these LS-NII DTP Systems is to enable CBP to perform effective and efficient Non-Intrusive Inspection of conveyances, including passenger occupied vehicles and commercial vehicles for contraband such as illicit drugs, terrorist weapons and currency. These systems will be used for inspection of smaller vehicles such as privately owned vehicles (POV) including cars, sport utility vehicles, pickup trucks, motorcycles, commercial vans, dual-rear wheeled trucks and towed trailers and larger vehicles like buses, recreational vehicles, and truck tractors with empty semitrailers and trailers. Each system shall be capable of providing an NII image with the quality identified within the performance requirements in Appendix A, Section 2 of this SOW to aid CBP personnel in identifying anomalies (potential contraband) within the conveyance.

1.3. Background

CBP is responsible for acquiring and deploying NII technology at U.S. Ports of Entry (POE) to enable CBP Officers to screen commercial traffic for the presence of contraband while facilitating the flow of legitimate trade, cargo, and passengers. Each day CBP Officers use a variety of LS-NII equipment in the course of their work to examine conveyances and cargo. These inspections are aimed at detecting items prohibited from import into or export from the U.S. CBP has an immediate operational need to inspect vehicles for illegal contraband including illicit drugs, terrorist weapons and currency with a system that allows passenger-occupied vehicles to be driven through the system by the vehicles driver and scanned with LS-NII within the exposure limits set by ANSI/HPS N43.17-2009 to ensure the efficient flow of legitimate trade and travel across U.S. borders. These systems are deployed with required operator booths, separate shelters for officers and vehicle passengers, and other ancillary equipment in addition to the DTP system itself (e.g. bollards, signage, surveillance cameras, etc.). In the future, these systems may be integrated with Radiation Detection Equipment (RDE).

2. APPLICABLE DOCUMENTS

Documents cited shall be referenced and used as called for in this Statement of Work/Performance Specification and the DIDs.

2.1. Federal Regulations and Publications

a. Code of Federal Regulations, 29 CFR 1910.120, Occupational Safety and Health Standards (OSHA), 2012

b. Code of Federal Regulations, 49 CFR 172, Hazardous Materials Table, 2012

c. Code of Federal Regulations, 21 CFR 1020.31 Radiographic Equipment

d. United States Code, (44 USC 35), Federal Information Security Management Act (FISMA) of 2014

e. Office of Management and Budget (OMB) Circular A-130, Security of Federal Automated Information Resources.

f. Office of Management and Budget (OMB) guidance M-05-24

g. United States Code, (40 USC 1441 et seq.) Computer Security Act of

h. United States Code (5 USC 552a), The Privacy Act, 2010

i. United States Code (6 USC 133), Critical Infrastructure Information Act of 2002 (Title II, Subtitle B, of the Homeland Security Act)

j. Code of Federal Regulations (49 CFR 1520), Protection of Sensitive

Security Information

k. OMB Memorandum M-05-22, August 2, 2005

l. United States Code (29 USC 701) Rehabilitation Act of 1973, as amended by the Workforce Investment Act of 1998 (29 USC 794), Section 508

m. United States Code (36 CFR 1194) Software Applications and Operating Systems

n. Federal Acquisition Regulations (FAR 39.203), Electronic and Information Technology

o. Federal Acquisition Regulations (FAR), 27.409(b)(1) Solicitation Provisions and Contract Clauses as modified by Rights in Data – General, (FAR 52.227-14) 2007

Note: The regulations can be accessed by going to: http://ecfr.gpoaccess.gov.

2.2. National Standards

a. Human Engineering Design Criteria Standards Part 1: Project

Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889), http://ecfr.gpoaccess.gov/

b. American National Standards Institute, ANSl/HPS N43.3, General Radiation Safety - Installations Using Non-Medical X-Ray and Sealed Gamma-Ray Sources, Energies up to 10 MeV, 2008.

c. American National Standards Institute, ANSl/HPS N43.14, Radiation Safety for Active Interrogation Systems for Security Screening of Cargo, Energies up to 100 MeV, 2011.

d. American National Standards Institute, ANSI/IEEE N42.46, Determination of the Imaging Performance of X-Ray and Gamma-Ray Systems for Cargo and Vehicle Security Screening, 2008.

e. Federal Information Processing Standards Publication (FIPS PUB), Number 199, Security Requirements for Cryptographic Modules, 2001

f. Federal Information Processing Standards (FIPS) 197, Standards for Security Categorization of Federal Information and Information Systems

g. Federal Information Processing Standards (FIPS) 140-2, Standards for Security Requirements for Cryptographic Modules

h. Federal Information Processing Standards Publication (FIPS PUB) Number 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors, August 2013.

i. American National Standards Institute, ANSI/IEEE N42.42, Standard Data Format for Radiation Detectors Used for Homeland Security,

j. American National Standards Institute, ANSI/IEEE N43.17, Radiation Safety for Personnel Security Screening Systems Using X-Ray or Gamma Radiation, 2009

2.3. DHS/CBP Documents

a. DHS Sensitive Systems Policy Directive 4300A, Version 12.01, February 12, 2016

b. DHS 4300A Sensitive Systems Handbook v12.0 November 15, 2015.

c. U.S. CBP HB 1400-05D Information Systems Security Policies and

Procedures Handbook Version 6.0 March 03, 2016

d. DHS Management Directive (MD) 11042.1 Safeguarding Sensitive

But Unclassified (For Official Use Only)

e. Homeland Security Presidential Directive-12 (HSP0-12), Policy for a

Common Identification Standard for Federal Employees and Contractors, August 2004

f. DHS Enterprise Data Management Policy MD 103-01, 6/3/08

g. DHS Section 508 Program Management Office and Information

Technology Accessibility MD 4010.2, 2005

h. CBP Port Radiation Inspection, Detection and Evaluation (PRIDE) 2.0

Interface Control Document (ICD) version 5, 2015

3. SYSTEM REQUIREMENTS

CBP is seeking currently available Commercial off the Shelf (COTS) technology.

As such, the Contractor shall submit actual pictures of the system, all system components to the system, LPR, operator console, operator work station with monitors, scan tunnel, operator booths, cameras, vehicle gauge, bollard locations, guard rails (no artist renditions or simulated photos shall be accepted for any system or system components) and images detailing conformance with the imaging specifications. The Contractor shall also provide:

• Descriptions of the physical system footprint (length, width, height and weight)

• Installation requirements (facilities requirements)

• Environmental operating parameters to include environmental limitations that preclude system operations, i.e. wind speeds, high/low temperatures, etc.

• Environmental operating specifications (tie downs, canopies)

CBP will deploy these systems at various CBP POEs (land border crossings along the Southwest/Northern borders, seaports and airports) within the United States as designated by CBP. CBP may identify specific deployment sites and schedules within the Request for Proposal (RFP).

3.1. Requirement Definitions:

1. Threshold: The minimum level of operational performance that the

Government is willing to accept is considered a threshold value.

2. Objective: A level of performance that significantly improves mission performance, safety, or supportability beyond that of the threshold value, and represents the desired yield for system performance is considered an objective.

3. Objective values are not required, but can be defined to provide guidance to the Contractor with respect to areas where increased capability is of interest to the government. If Objectives are defined, the interval between the Objective and Threshold values for a given parameter is the government program manager's (PM) trade-space.

4. Single Requirement: Some requirements will have only a single parameter value and, when this is the case, these values are thresholds.

3.2. General Requirements

Each LS-NII DTP system shall meet the requirements defined in this Statement of Work. The Contractor shall perform the work necessary to develop, test and deliver the procured equipment. The Contractor shall also provide training, warranty, logistics, on-demand services and training in support of these LS-NII

DTP systems as identified in the Performance Requirements Section 3.3 (see Appendix A). The Contractor shall prepare Monthly Progress Reports in accordance with the attached DID A006 while performing tasks within this SOW.

3.3. Performance Requirements for Large Scale NII Systems

The contractor shall deliver a system that satisfies the requirements in Appendix A (requirements matrix).

3.3.1. Sources & Detectors

As part of the LS-NII DTP system, the Contractor shall deliver X-ray imaging sources and detectors, which shall incorporate transmission and reflective imaging capabilities that are capable of meeting the Performance Specifications as described in Appendix A, Section 2. System shall include an Uninterruptable Power Supply (UPS) for the operating system and a power conditioner to regulate and maintain power sufficient to allow graceful shut down of systems to avoid tube failure and power supply failure.

3.3.2. Computers

As part of the LS-NII system, the Contractor shall provide computers and server(s) to meet all the requirements of this SOW and its appendixes (see Appendix A for specifications). The DTP system shall be equipped with wireless technology that can be encrypted in accordance with DHS Sensitive Systems Policy Directive 4300A, Section 4.6, Wireless Network Communication. The wireless capability shall have the ability to be disabled when not in use.

3.3.3. Computer Security

All LS-NII System computers and software programs that enable a User to analyze/enhance images and store an Image Data Set (IDS), and the Data Base computers and programs that store an IDS, shall have the following security features incorporated. Computers and server(s) with enough memory and speed to meet all the requirements of this SOW. Desktop computers shall be equipped with Operating Systems of Windows 7 32bit or greater; capable of Windows 8 64bit upgrade. Laptop operating systems shall be Windows 7 64bit or greater;

capable of upgrade to Windows 8 64bit. The system shall be capable of upgrade to Windows 10. The system shall have a wireless technology that can be encrypted in accordance with DHS 4300A policy. The wireless capability shall have the ability to be disabled when not in use.

See Appendix A for contents of an IDS which shall be created for each system scan.

3.3.3.1. Identification and Authentication

A. Levels of Access – The Contractor shall provide three levels of CBP User access (Operator Level 1, Operator Level 2, and Administrator). Operator Level 1 shall be able to perform all system functions except copying and deleting images or Data Sets. Operator Level 1 shall not have access to User Accounts. Operator Level 2 (Supervisor) shall be able to perform all Operator Level 1 functions plus be able to create and delete Operator Level 1 accounts, copy and delete images and data set files, and reset Level 1 and Level 2 passwords. Operator Level 2 shall have access to Operator Level 1 Accounts. The Administrator shall be able to perform all Operator Level 1 and Level 2 functions plus have access to all Accounts. The Administrator shall be able to create, edit and delete all Accounts. The Contractor shall create a simplified procedure for the Administrator and Operator Level 2 to create, edit and delete User Accounts. Operator Level 1 and Level 2 shall not have access to Windows except for those hard drives that have IDS stored on them or the external drives from which an image may be imported or an image or IDS may be exported or copied. The CBP Administrator Account shall have access to Windows Operating System.

B. Passwords – All passwords used to access the NII system for operation are required to be Strong Passwords. Strong passwords have the following requirements:

1. Are at least 12 characters in length

2. Comply with the DHS hardening guides for operating systems and the configuration guides for applications. In the absence of guidance, the ISSO will determine the appropriate password complexity based on the level of risk.

3. Are not the same as any of the user’s previous 8 passwords

4. Strong passwords do not contain any dictionary word

5. Strong passwords do not contain any proper noun or the name of any person, pet, child, or fictional character.

6. Passwords do not contain any employee serial number, Social

Security number, birth date, phone number, or any information that could be readily guessed about the creator of the password.

7. Strong passwords do not contain any simple pattern of letters or numbers, such as “qwerty” or “xyz123”.

8. Strong passwords do not contain any word, noun, or name spelled backwards or with a single digit appended, or with a two-digit “year” string, such as 98xyz123.

9. Strong pass phrases, if used in addition to or instead of passwords, follow the same guidelines.

10. Strong passwords are not the same as the User identification (ID).

11. Strong passwords shall contain special characters.

C. The NII system must have the ability to:

1. Deactivate unused accounts automatically if they have not been used in 45 days.

2. Passwords should not be set to the null string.

3. Automatic password change frequency. The system shall require the user to change their password every 90 days.

4. Password Storage – The system shall store all user account passwords in encrypted form.

3.3.3.2. Access Control

A. Unique User Accounts – The system shall enable all users to have unique account identifiers, including separate identifiers for operator accounts and administrator accounts.

B. Automatic Account Lockout – The system shall lock a user account for twenty (20) minutes after three consecutive failed logon attempts.

C. Automatic Session Termination – The system shall lock the user login session after twenty (20) minutes of inactivity. The system shall require the user to authenticate with the user account password to regain system access after the system lock. After 60 minutes of inactivity, the system shall log the user account of the system.

D. Warning Banner – The DHS Chief Information Security Officer (CISO) stipulates that a warning banner statement be displayed on all DHS systems during user account logon. The system shall prompt the user to accept the current language before they can authenticate with the user id and user password to access the system. The current language required follows:

1. You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S. Government-authorized use only.

2. Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties.

3. By using this information system, you understand and consent to the following:

a. You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.

b. The government may disclose or use any communications or data transiting, stored on, originated from or directed to or from this information system for any lawful government purpose.

E. You are NOT authorized to process classified information on this information system.

3.3.3.3. Auditing

A. Audit Records – System will retain audit records sufficient in detail to facilitate the reconstruction of events if compromise or malfunction occurs.

Audit records shall contain at least the following information:

1. Identity of each user and device accessing or attempting to access the system

2. Time and date of the access and the logoff

3. Activities that might modify, bypass, or negate information security safeguards

4. Security – relevant actions associated with processing

5. All activities performed using an administrator account/identity

B. Audit Record Access – Audit records and audit logs should be protected from unauthorized access, modification, or destruction.

C. Audit Record Retention – Audit records should be maintained on the system for a minimum of ninety (90) days. Audit records shall be preserved for a period of 7 years as part of managing records for each system to allow audit information to be placed online for analysis with reasonable ease.

D. Audit Reduction / Report Generation – The system will provide an audit reduction and report generation capability that:

1. Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents

2. Without altering the original content or time ordering of audit records E. The system will have the capability to tag each scan with the user name who conducted it. The user name and time shall be displayed with the image and the IDS.

3.3.4. Printed Documents

All LS-NII Systems shall have the capability of printing all the items of an IDS. All printed documents shall have "FOR OFFICIAL USE ONLY - LAW ENFORCEMENT SENSITIVE" in the header or footer. The footer shall indicate system type and location.

3.3.5. Printer / Scanner

Printers shall be capable of quality printing, including color, while retaining a limited physical footprint. Scan/print devices may be combined or separate units.

3.4. Systems Integration

Integration of NII inspection system equipment and its supporting Subsystems shall be the responsibility of the NII systems Contractor.

3.4.1. Operator Booth

The Contractor shall conduct a site survey in accordance with DID A024 of all anticipated sites for Operator booths. The Contractor shall provide and install the booth(s) in accordance with CBP approved drawings.

The Contractor shall deliver an operator’s booth accompanying each DTP scanning system that will house the primary and secondary operator stations and a CBP workstation. A larger booth may accommodate two or more portals located in close proximity in lieu of 2 or more separate booths. The number, size and construction (permanent or temporary) operators' booths will be determined based on local site surveys. The provision of the operator's stations is a requirement for the Contractor (see Appendix A). The provision of the CBP workstation is not included as a requirement for the Contractor.

3.4.1.1. Prefabricated Booths

If determined based on local site surveys to install furnished, prefabricated booths, then the Contractor shall install, in accordance with CBP approved drawings, an operator’s booth in accordance with the following:

A. Structural Performance: Booth(s) shall comply with American Society of Civil Engineers (ASCE) 7 Minimum Design Loads for Buildings and Other Structures and the International Building Code, and the building code and regulations enforced by the authority having jurisdiction at the locations the booths will be installed.

B. The minimum Structural Design Criteria regardless of the jurisdiction shall be: (jurisdictional requirements may exceed these minimum factors)

1. Importance Factor: 1

2. Basic Wind Speed: 130 mph, 3-Second Gust

3. Wind Exposure: Surface Roughness Category C

4. Ground Snow Load: 25 psf

5. Snow Exposure: Terrain Category C

6. Seismic Response Coefficient (Cs): 0.24g

7. Floor Live Load: 50 psf

8. Access Platform Live Load: 100 psf or a concentrated live load of

300 pounds on an area of 4 square inches at any point along the element.

C. Thermal Movements: Provide booths that allow for thermal movements resulting from the following maximum change (delta) in ambient and surface temperatures by preventing buckling, opening of joints, overstressing of components, failure of joint sealants, failure of connections, and other detrimental effects. Base engineering calculation on surface temperatures of materials due to both solar heat gain and nighttime-sky heat loss. Temperature Change (Delta): 120 degree F (67 degree C), ambient material surfaces.

D. The booth(s) shall be self-supporting aluminum or galvanized steel booth(s) for installation on existing asphalt, concrete pavement, or elevated steel structure.

E. Booth size shall nominally be 8’ x 12’ F. The door shall be of solid metal construction, mini blind/shade for door should be encased in glass pane or frame to prevent damage.

G. No window shall open outward.

H. All booth windows shall have tinted screens or an application of a tinted material I. Installed interior venetian blinds on all booth windows J. Interior lighting with dimmer for common area K. The booth floor shall resist frequent usage and require minimal maintenance, complies with OSHA and other applicable regulations, with at least a 10 year lifespan (e.g. diamond plated steel, spray-on/roll-on epoxy-like flooring, etc.) with a Thermal Resistance Value (R-Value) R-30 and UL Rating Class A with a flame spread rating less than 25; it shall not be fabricated of compressed wood materials.

L. Steps shall be constructed of galvanized steel or aluminum (if steps are required).

M. The gutters and downspouts shall direct the water away from the booth.

Water shall not be directed or accumulate on the booth access walk way (including the stairs, landing and electrical boxes).

N. Workstation accommodations for 4 officers in a common work area with capacity to configure four (4) desks with two (2) desk height casework work surfaces, one (1) file cabinet, off the floor computer CPUs and four

(4) under counter file pedestals or one (1) under counter lateral file cabinet.

O. Furniture (including chairs) shall be included sufficient to accommodate the primary and secondary operator’s stations as well as for file storage

P. Under desk lighting shall be provided Q. Highly insulated booth envelope rated at R-30 or better.

R. Pitched or vaulted roof with 6” to 18” overhangs S. Exterior site lighting at all exterior doors T. Securable full height 19-inch Local Area Network (LAN)/video equipment cabinet in LAN alcove equipped with overhead cable trays and prewired communication cables to receptacles at common area workstations.

U. Heating, Ventilation and Air Conditioning (HVAC) unit shall be adequately sized for the climatic conditions and interior space found at each installation site listed.

1. Baseboard heaters rated at 1500 watts each shall be installed inside each operator’s booth in main interior area and be controlled by a separate thermostatic controls

2. Non-ceiling mounted Air Conditioning (AC) unit with louvered vents in main interior area

3. Adequate ventilation fans above LAN alcove to provide the required air flow for equipment

V. Booth Security

1. Default cypher/key access lock on main exterior door

2. Primary power integrated smoke detector/alarm, and installed 5 pound type ABC fire extinguisher located adjacent to the door

3. Manual operable roll down exterior security shutters on all windows

4. Reflective glazing on all windows rated R X or better

W. Electrical service: Attached 250A main service disconnect, manual transfer switch and generator power receptacle for temporary service power and interior mounted 200A power panel with breakers and circuits sufficient to supply all booth systems, and prewired interior and exterior lighting switches and power receptacles. Provide panel schedule with pre-installed circuits and loads labeled.

X. Building shall bear the Underwriter’s Laboratories National Electrical Code (NEC) classification insignia to verify that the electrical wiring system has been reviewed by an independent third party, and has been found to be in compliance with the NEC

3.4.1.2. DATA/LAN and Voice Connectivity

Conduit pathway for connectivity shall be installed as part of the installation. OIT conduit (DATA/Voice) pathway to be coordinated with OIT or IT Administrator.

Conduit pathway shall extend from the LAN closet and Telecommunications closet to the DTP control booth.

3.4.1.3. Work Center

The Contractor shall deliver a Work Center ergonomically designed for housing the system's Workstation in accordance with DHS standards found in Human Engineering Design Criteria Standards Part 1: Project Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889), Section 5.2.9, at http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7889.pdf.

3.4.1.4. Workstation Integration and Interface

The Contractor shall configure and integrate all workstations/servers and computer software/operating systems to include a system Operator Console, Closed Circuit television cameras and the system’s controls and displays into a system that enables a conveyance to be scanned, the conveyance image(s) to be analyzed, a system operator to make a Suspect or Non-suspect decision and store all the items associated with the scan into an IDS and then store/retrieve the IDS. The Contractor shall meet additional integration requirements such as computer hardware/software are specified in Appendix A.

3.4.2. Integrated Image Capture

All LS-NII Systems shall be capable of capturing and displaying all of the items that are contained in an IDS. The IDS shall include, as a minimum, the radiographic image, a video capture snapshot image from each system CCTV camera, a Data Sheet or Manifest, operator notes, the operator’s Suspect or Non-suspect decision and the User's name. Additional IDS element requirements, if applicable, are specified in Appendix A. This Metadata shall be the sole property of CBP.

3.4.3. Integrated Image Storage

All LS-NII Systems shall be capable of storing all IDS created for a period of 90 Days with up to two (2) Terabyte of storage. A warning shall be provided when the hard drive used to store the IDS files reaches 70% of its maximum storage capacity and again when it reaches 90% of its maximum storage capacity. The warnings shall alert the Operator for the need to copy and delete IDS files. If the hard drive reaches 99% of its maximum storage capacity, a warning shall be provided and the system will not be allowed to scan until IDS files have been copied and deleted. The system shall provide an option at the Administrator level for auto delete of Non-Suspect files that are over 90 days old.

3.4.4. Image Download

All LS-NII Systems shall be capable of storing an x-ray image generated by the system as a jpg file and as a TIF file. The TIF file shall contain the full dynamic http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7889.pdf gray-level range of the x-ray image. The Systems shall be capable of exporting stored image files to encrypted media storage devices, FIPS 140-2 Level 2 or greater, flash and hard drives. The image will be configured in a format where CBP may easily transfer the image from one computer containing the image analysis software to another computer containing the image analysis software without the loss of the image analysis functionality.

3.4.5. Integrated Data Set Download

All DTP LS-NII Systems shall be capable of exporting an IDS in its native language to encrypted media storage devices, FIPS 140-2 Level 2 or greater, flash and hard drives. The IDS shall consist of the data specified within Appendix A. The consolidated IDS shall encompass all of the data required to perform an offsite scan review and analysis as though the reviewer was stationed at the original data site. The system shall also be capable of creating and exporting a summary scan report for each conveyance scanned – the format of this report shall be PDF.

3.4.6. Integrated Radiation Detection Equipment

(OPTION) All DTP LS-NII systems shall be capable of integrating with Radiation Detection Equipment and capturing ANSI N42.42 and PRIDE 2.0 ICD version 5 compliant data in the inspection record. Additional integration requirements may be addressed as an On-Demand Service (see section 3.7).

3.4.7. Officer Shelters

CBP may also requires up to two additional Officer Shelters to shield the Staging and Secondary Officers from direct weather. These shelters should provide shelter from direct sunlight, precipitation and have a counter for storage. They do not have to be climate controlled. Additional requirements are included in Appendix A.

3.4.8. Passenger Shelters

The Contractor shall provide and install shelter(s) to protect Vehicle Passengers from direct weather. The number (up to two per site) and location of the shelter(s) will be determined by the site survey. Passenger shelters shall have a metal bench that has the ability to be secured to the concrete and include cuff bar or rings. Additional requirements are included in Appendix A.

3.4.9. Closed Circuit Television System

The Contractor shall provide and install a Closed Circuit Television System (CCTV) that is approved by CBP on the Technology Reference Model (TRM).

The CCTV system shall capture live video of vehicles traveling through the DTP LS-NII system. The CCTV system shall be independent of the camera(s) used for capturing images of the vehicle undercarriage. The CCTV will allow Officers to view license plates, determine make/model, and have situational awareness of the operating area. Additional requirements are included in Appendix A

3.5. Safety and Protection Equipment

The Contractor shall provide and install all safety and protection equipment, including safety interlocks, peripheral equipment, signage, and lighting in accordance with CBP approved Contractor Safety Plan, see section 3.9.

3.5.1. Safety Interlocks

The Contractor shall provide safety interlocks such as operator proximity/presence sensors or "dead man switches" for all systems for the protection of pedestrian traffic and untrained personnel.

The Contractor shall provide Emergency Stop Switches for all systems that will enable an operator to manually interrupt the scanning process by disabling the transmission of X-rays in an emergency or when there is an unauthorized entry inside the system's Radiation Control Area. The number and locations of the emergency stops shall be as specified in the performance requirements Appendix A. See ANSI N43.3-2008, paragraph 7.5.2, and ANSI N43.14-2011, chapter 6.1, for more details on safety interlocks. The DTP LS-NII systems shall also provide audible and visible (flashing lights) alarms when actively radiating.

3.5.2. Peripheral Equipment

The Contractor shall provide devices (bollards, guard rails, etc.) to prevent/protect the system from being hit by vehicles traveling through/near the system. The location of guard rails shall ensure all conveyances (vehicles and trailers) with an outer track width (i.e. the dimension from the outer tire tread on one tire to the outer tire tread on the opposite tire on the same end of the vehicle) equal to or less than the width of the scanning area are able to pass through the system (i.e. if the scanning area is 8.5 feet wide, then guard rails are at least 8.6 feet wide). Oversize detection equipment shall address the placement of guard rails in addition to the system tunnel size.

3.5.3. Signage

All signs, including electronic radar speed displays, shall be visible to the driver entering the system. The Contractor shall provide and install signs notifying vehicles and occupants are subject to inspection. Signs shall be provided in English, Spanish, and French. View Figure 1 for sign design, with the necessary information in English.

Figure 1. X-Ray Inspection Sign (English)

3.6. Reliability, Availability and Maintainability Design Requirements

The Contractor shall design the NII system to meet the Reliability, Availability and Maintainability (RAM) requirements for Inherent Availability (Ai) and Operational Availability (Ao) (see section 4.2). The following are minimum requirements for these systems.

3.6.1. Basic System Reliability Requirements – Inherent Availability (Ai)

The System and all its components shall be designed to operate satisfactorily at a given point in time when used under the stated conditions in the environment described in this statement of work. It excludes logistics time, waiting or administrative downtime, and preventive maintenance downtime. It includes corrective maintenance downtime. Inherent availability is generally derived from analysis of an engineering design and is calculated as the mean time between failures (MTBF) divided by the MTBF plus the mean time to repair (MTTR).

The Inherent System Availability for each serialized system shall be calculated annually based on a 365 day year. For this Ai, a minimum of 0.9900 must be achieved for each year for the entire 10 year life cycle period for the system. The Ai is calculated using the following:

Ai = Mean Time Between Failures (MTBF) Mean Time Between Failures (MTBF) + Mean Time to Repair (MTTR)

3.6.1.1. Mean Time Between Failures (MTBF)

The time between failures (TBF) is the time duration from the start of when the system is placed into an ‘operational’ status until suffering a failure. A failure is defined as a malfunction that degrades performance or operational capability, which cannot be tolerated for even a brief period before correction. The total time between failures (TTBF) is the sum of all TBFs for the reporting period. The mean time between failures (MTBF) is calculated as the TTBF divided by the total number of failures for that reporting period. The overall system shall be designed to possess a MTBF of no less than 1000 hours. The Government will calculate the MTBF on an annual basis.

The MTBF for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTBF = Total Time Between Failures (TTBF) Total Number of Failure Incidents

3.6.1.2. Mean Time to Repair (MTTR)

The time to repair (TTR) is the time duration from the start of a repair activity to correct a failure until the system is returned to full performance and capability.

The total time to repair (TTTR) is the sum of all TTRs for the reporting period.

The mean time to repair (MTTR) is calculated as the TTTR divided by the total number of repair activities for that reporting period. The overall system shall be designed to possess a MTTR to achieve the Ai requirement. The Government will calculate the MTTR on an annual basis.

The MTTR for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTTR = Total Time to Repair (TTTR) Total Number of Repair Activities

3.6.1.3. Life Cycle Expectation

The designed operating life of the system shall be no less than 10 years. The system shall be capable of exceeding a normal operating period of 16 hours a day, 6 days a week, 52 weeks a year during an operating life of 10 years and be capable of surge operations consisting of 24 hours a day, 7 days a week for 2 weeks (336 hours).

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

The Contractor shall provide predictive Obsolescence Analysis of system components and a Component Replacement Analysis in the Contractor’s format at time of proposal, see DID A002. The Component Replacement Analysis shall include:

A. Procedures for the procurement of critical items, to include availability and procurement lead times.

B. Criteria and procedures for the design and redesign of critical items C. Procedures for controlling and monitoring of critical items after manufacture to meet the Ai and Ao requirements (e.g., date coding, traceability, assembly techniques, test requirements, acceptance test requirements, control of contractors’ and manufacturers’ controls, in-process controls, special handling, and storage requirements).

3.6.3. Classification of Reliability Critical Items

A Critical Item is an identified weak link in a system, has an adverse impact on, or contributes to failures of the system performing its mission, creates potential safety problems, significantly degrades the scanned image quality, or contributes to other areas of high risk to overall system reliability. The Contractor shall classify all LS-NII items as critical if one or more of the following conditions are satisfied, see DID A002:

1. Item represents a significant new development or application.

2. Item has critical failure modes.

3. Item has history indicating need for improvement. A Preplanned

Product Improvement Plan (PPIP) shall be developed and provided by the Contractor for any item with a history of needing improvement in the Contractor’s format.

4. Item has known operating life, limited shelf life, or environmental sensitivity (e.g., vibration, thermal, etc.) that warrants controlled surveillance.

5. Item whose failure can result in the failure of the system and which is not compensated by redundancy or alternate operational procedures.

3.6.4. Corrosion Control

The Contractor shall apply industry best practices, techniques, and measures to prevent and mitigate corrosion of the NII equipment, such as using corrosion resistant material, properly treating and preparing surfaces, and watertight design and construction.

3.7. Quality Assurance/Quality Control Plan

The Contractor shall provide a Quality Assurance/Quality Control (QA/QC) plan based on the most current and applicable certified ISO processes and procedures. The Contractor’s QA/QC plan shall define key performance measures to include traceable metrics, verifiable performance standards, and address risk identification and mitigation processes used to meet the performance requirements in this Statement of Work.

The Contractor shall provide a QA/QC Plan in accordance with DID A012.

3.7.1. Operator Booth Quality Control Documentation (e.g. Fabrication Inspection Plan):

Contractor shall make visual inspections as necessary to ensure compliance with specified requirements. Additionally verify and provide a checklist to the CBP COR in accordance with DID A012 and DID A013 for the following:

1. Materials comply with the specified requirements (any exceptions are approved by CBP COR prior to use). All materials are properly stored handled and protected from damage. Damaged materials are removed from site and not used in the booth manufacture.

2. Overall dimensions and configuration are correct.

3. Panels are installed without buckles, ripples, or waves and in uniform alignment with modulus.

4. Side laps are formed, sealed, fastened, or seam locked as required.

5. Adequate amount of the appropriate sealant is applied to prevent air/liquid leaks for at least 10 years

6. The proper number, type, and spacing of attachment clips and fasteners are installed.

7. Door and windows include all hardware and are weather sealed with at least a 10 year lifespan.

8. Structural member includes anchorage devices.

9. Insulation provided to at least an R-30 rating.

10. Suspended ceiling is included and cut-to-size to ensure at least 7 foot clearance.

11. HVAC systems present and weather-sealant included complying with the Reliability, Availability and Maintainability requirements.

12. Electrical components installed in accordance with appropriate electrical code and wiring complete.

13. Rain gutter and downspouts included adequate to ensure little/no standing water at all times.

14. Shipping instructions included.

15. CBP authorization to ship (includes appropriate signatures and dates).

3.8. Testing

The Contractor shall be prepare and submit an Acceptance Test Plan (ATP) in accordance with the attached DID A013. The Contractor shall perform inspections and tests necessary to ensure that LS- NII Inspection Systems conforms to CBP approved technical documentation and configuration, to include operational testing of the first article delivery. Using the approved ATP, the Contractor shall conduct verification and validation tests to ensure the system meets all performance requirements and to verify it can be operated as specified in the system’s Operator’s Manual (DID A008). Additional Contractor testing requirements, if applicable, are identified in the performance Section 3.3 (see Appendix A) of this SOW. The Contractor shall provide the test articles as defined in ANSI N42.46, Chapter 4, to affect this level of testing.

3.8.1. Factory Testing

A CBP team will conduct a CBP Factory Test (FT) of all units at the Contractor’s facility to verify that the unit is suitable for shipment to its intended POE. The CBP team shall conduct an FT in accordance with a CBP FT Plan for the first POV and Bus systems. The Contractor shall provide the appropriate test articles for the CBP team to test the technical performance in accordance with the ANSI N42.46- 2008 standards, Chapter 4.

As part of the FT, the Contractor shall provide documentation showing that the system meets the ANSI N43.17 Radiation Safety for Personnel Security Screening Systems Using X-Rays.

3.8.2. Site Acceptance Testing

A CBP team shall conduct a CBP Site Acceptance Test (SAT) for each unit at its designated location. The CBP team shall conduct the CBP SAT in accordance with a CBP SAT Plan (SATP) for that system. The CBP SAT shall consist of a review of the Contractor’s pre-SAT documentation and Radiation Survey/Leak Test Report (DID A015), plus an inventory and physical inspection of the system, system component operations and tests of the total integrated system against actual targets.