Q_&_A_-_El_Paso.pdf

On page 5 of the solicitation under section I.1 Schedule of Supplies/Services Question 01: What items are included in Items #10 & #20?

There are two phases to this project, the design phase and the installation phase. Item 10 references the design phase and item 20 references the installation phase.

On page 5 of the solicitation under section I.2 Delivery Schedule Question 02: Are the delivery dates stated to mean the start of the performance period or the end of the performance period?

The delivery date reference in the solicitation is the end of the performance period for the completed contract as stated in combined synopsis/solicitation on the FBO website. The performance period for each phrase is determined by the Notice to Proceed date, as prescribed in the statement of work.

8.0 Period of Performance

8.1 The performance period for the design of this work is ninety (90) calendar days from issuance of the Notice to Proceed (NTP) - design.

8.2 The performance period for the installation of this work is ninety (90) calendar days after approval of the design.

In Attachment One – Statement of Work: SOW/AMO-1 – Paragraph 1.2 – States (in part):

“Each of the properties must be capable of operating as a stand-alone entity with the ability of becoming a single “fully integrated security system,” through nothing more than interconnection and programming at a later date –through a separate contract.”

Question 03: Does this mean CBP requires independent, stand-alone servers/databases for storing card, user and event data at each of the 4 locations?

Either each system must be a complete stand-alone system or through technology, have one system that will communicate and command all other sites.

Question 04: Is the system to be designed to include all necessary hardware and software licensing for the future “fully integrated security system”?

Any and all hardware and licensing as required for a future fully integrated security system.

Question 05: Does the phrase “nothing more than interconnection and programming at a later date – through a separate contract“, mean that the building-to-building communications infrastructure (fiber optic is assumed) will be in place for the future “fully integrated security system”?

Yes

In Attachment One – Statement of Work: SOW/AMO-1 – Paragraph 1.3 – States (in part):

“Currently, the existing access control systems are outdated and beyond their useful life, have failing components and numerous operational deficiencies, are three independent systems, and are not in compliance with HSPD-12 or FIPS-201.”

Question 06: Should the new PACS system be designed to perform a Certificate Revocation Check on the PIV credential when it is presented at any new PIV Class reader?

The new system must be HSPD-12 and FIPS 201 compliant. Therefore, to be compliant with HSPD-12 and FIPS 201, the PKI certificates that were issued by the Federal Government at the time the credential was created need to be re-validated every 18 hours (per the FIPS 201 specification) by ensuring the certificates have not been revoked by the US Federal Government’s Certificate Authority. That is the definition of “Certificate Revocation Checking”. The two-step validation is not required.

In Attachment One – Statement of Work: SOW/AMO-1 – Paragraph 2.1 Question 07: Can the government please confirm the quantity of existing card readers in each building as well as new readers to be added to each building?

During the pre-bid site walk, each building was thoroughly explained, card readers were counted and quantity and locations of new card readers were defined – rely on that information.

In Attachment One – Statement of Work: SOW/AMO-1 – Paragraph 4.1 General Requirements Question 08: Are new architectural plans (Construction Documents) for each of the 4 buildings to be developed by a registered Texas Architect before work can begin after award?

Drawings, per Part 5.1.1 9of the Statement of work) shall be presented and approved before any work can be installed.

Question 09: Does the El Paso International Airport require any permits for this SOW since the El Paso International Airport Director must approve Construction Documents?

As this is a repair/improvement project of an existing system, permits are not required.

Question 10: Does the requirement for UPS backup to “maintain system integrity for a minimum of 8-hours” include all head-end equipment, card reader controllers and lock power supplies?

UPS must maintain the integrity of the entered and stored data of the head-end equipment.

Question 11: One page 3, in the statement “New access control and surveillance system shall be fully compliant with FIPS-201 requirements.” Is the term “surveillance system” relevant to this

SOW?

This is a typographical error – disregard the statement in its entirety.

Question 12: One page 3, in the statement “The Contractor shall generate and provide floor plans of each building showing the locations of each access control point for review and approval by the Government. Currently there are no floor plans available for this effort.” It is unclear as to whether or not an Architect or Engineer is required to draw up floor plans if the contractor is required to generate them in question 8 above? Please clarify.

It was perceived that due to Part 5.1.1 (of the Statement of Work) that the locations of each access control point would be shown on the drawings prepared by the Architect. The Contractor can show those locations “IF” the contractor and Architect can reach agreement on ownership of the drawings.

Question 13: On page 4, under 4.1.7, in the statement “Card readers shall be weather-proof with Dual Technology, Contact-less Smartcards, and Proximity or Long Range readers.” Does FIPS- 201 allow long range readers? Also, should the readers be contact (insertion chip for reading), contactless (for proximity), and have an integral keypad? Please clarify.

Any card reader installed on the exterior of a building must be weather proof. Card readers at traffic gates shall be contact-less long range readers. All other card readers are to be contact-less and proximity readers only if a PIV-4 card reader will serve as a proximity reader.

Question 14: On page 4, under 4.1.8, in the statement “Program the new systems for no less than 100 PIV cards, for current CBP and approved contractor access, dependent upon their need for access to various parts of the facility. Program 30 visitor cards.” Will CBP be supplying all PIV cards for contractor programming?

Furnishing of the cards will be a responsibility of the Contractor.

Question 15: On page 5, under 4.2.6, in the statement “Each new system, at each location, shall be a stand-alone system but, through future programming efforts can become part of an integrated security system.” This refers back to question 03. In order to be “stand-alone”, each system (in each building) will have to have a separate server/database. Is this the government’s intention?

Each system must be stand-alone or through technology, one system that can command and control all other sites.

Question 16: If the FAA frequency manager will allow point-to-point FIPS 140-2 wireless, encrypted Ethernet radios to be used at the CBP site, would the government consider these devices for building-to-building network communications for centralizing the access control head-end in the operations building instead of the 4 separate stand-alone systems. These radios would be less costly than having 4 server/databases running 4 stand-alone systems.

Only if the El Paso International Airport and FAA would approve such radios and then the radios would operate from a given frequency assigned by ELP/FAA.