IDS SOO (9.2) Design and Install_redacted pdf.pdf

Statement of Objectives (SOO)

Intrusion Detection System (IDS) and Access Control System (ACS) at New Boston Space Force Station’s (NBSFS) Sensitive Compartmented Information Facility (SCIF)

1. Introduction This Statement of Objectives (SOO) defines the requirements for the contractor to Engineer, Design, Furnish, Install, and Test (EDFI&T)of an Intrusion Detection System (IDS) and Access Control System (ACS) for a Sensitive Compartmented Information Facility (SCIF) at New Boston Space Force Station (NBSFS) based on the Vindicator platform. The IDS/ACS must comply with all applicable regulations and protect against various physical threats, providing detection, annunciation, and security for the SCIF resource. This project is broken into two CLINS. CLIN 1 is the design phase and CLIN 2 is the installation phase. General project requirements are the same on each CLIN such as contractor responsibilities and project management. See Appendix A for facility diagrams.

1.1 Technical Requirements (CLIN 1 and CLIN 2) All IDS/ACS design components and monitoring stations shall adhere to Underwriters Laboratories (UL) Standard UL 2050 for National Industrial Security Systems for the Protection of Classified Material, DAFI 31-101_DAFGM2023-01 11 April 2023, Intelligence Community (IC) Tech Spec for ICD/ICS 705, and be designed for a UL 2050 certified installer to install the design IAW identified standards. The design and install shall adhere to NIST (National Institute of Standards and Technology) Certificate for the Vindicator Panel demonstrating 128-bit encryption between the panel and the monitoring station.

1.2 Contractor Responsibilities (CLIN 1 and CLIN 2)

• Project Management: Overall management of the project, including scheduling, inspections, compliance, cost estimations, testing services, training plan, document control, meetings and in-depth minutes and action items and trackers, and quality control through all phases, culminating in project closeout.

• Accreditation: The contractor will be responsible for the designs system accreditation standards to include final Authority to Operate/Authority to Connect ATO/ATC of the system on AFNET or as an independent system. The contractor will be responsible for the accreditation to include final ATO/ATC of the system on AFNET or as an independent system.

• Partnership in Design and Implementation: Contractor will be required to engage with the government at all steps in the design process to allow for the development of the most cost-effective and technically sound solution. The contractor is responsible for providing the expertise in recognizing and addressing problematic issues and successful execution of this project.

• Escort: The area of work is in a restricted area. The contractor will provide escort officials to fulfill escort requirements IAW DAFI 31.101 as outlined in SECTION 01 80 00, NBSFS

SECURITY REQUIREMENT.

• Workers Requirement: Any work to be performed on site, the contractor will only use US Citizens without a felony criminal record. The contractor must provide credentials at least

10 business days prior to the date when access is being requested. NBSFS Site Security Manager will conduct security checks if they reveal a felony criminal record, or the identified risk is otherwise too great access will be denied or withdrawn.

2. System Objectives (CLIN 1 and CLIN 2) The primary objective of the IDS/ACS system is to provide real-time intrusion detection and access control with security monitoring for the SCIF, including seamless integration:

• Detect Intrusions: Provide IDS/ACS, alarm annunciation, and security monitoring for the

SCIF.

• Regulatory Compliance: Adhere to all relevant DoD directives, UL standards, DAFI regulations, IC Tech Specs, and NBSFS local security protocols.

• Access Control Integration: Deliver a design that is capable to fully integrate with existing access control system, enabling functionalities IAW ICD-ICS-705.

• Integration with Vindicator Systems: Capable to integrate with Vindicator systems, such as video surveillance and access control systems, to provide a more comprehensive security solution. System data transmitted over communication lines (e.g., access authorizations, personal identification, or verification data) to and from equipment located outside the SCIF shall be protected using FIPS AES certified encrypted lines. If this communication technology is not feasible, transmission lines shall be installed as approved by the Authorizing Official (AO).

• System Maintenance: The design will detail the requirements for system maintenance, including preventive maintenance schedules, troubleshooting procedures, and the process for reporting and resolving system malfunctions.

3. System Requirements (CLIN 1 and CLIN 2) The contractor shall design a Vindicator-based IDS/ACS that meets the following requirements and adheres to all applicable standards and regulations:

3.1 General Design Requirements (CLIN 1)

• Compliance: Adhere to ICD-ICS-705, , UFC 4-020-04A, DAFI 31-101, DAFGM 2023-01 and all other applicable regulations and standards as listed in the “Applicable Documents and Standards” section.

• Intrusion Detection: The IDS/ACS shall detect any alarm system tampering and unauthorized entry into the SCIF.

• Alarm Annunciation: The system shall provide immediate alarm notifications to designated personnel (BDOC and SCIF administrators) through an independent monitoring system from the currently installed system.

• Security Monitoring: The IDS/ACS shall provide security monitoring for the SCIF, including integration with the access control system.

• Access Control Integration: The IDS/ACS shall integrate seamlessly with the access control system, enabling functionalities such as badge programming, secure badge management, and emergency override capabilities. The system shall support programmable badges issued by the SCIF administrator, allowing for specific access levels and time-based restrictions. A comprehensive audit trail of all badge access attempts shall be maintained and readily accessible to authorized personnel.

• System Maintainability: The IDS/ACS shall be designed for ease of maintenance, including a sustainable delivery of high-failure replacement parts along with readily available spares.

The design contractor shall provide Government-approved venders that can fulfill this requirement. As part of the installation delivery of a complement of high-failure replacement parts shall be part of the project turnover.

• Future Expansion: The system shall be scalable to accommodate future expansion of the SCIF (or the IDS/ACS infrastructure supporting the SCIF) or changes in its layout, including a minimum of 20% additional capacity for alarm points.

• Cybersecurity: The IDS/ACS shall incorporate robust cybersecurity measures to protect against unauthorized access and cyberattacks, complying with NIST SP 800-53 and other relevant cybersecurity standards. This includes secure communication between system components.

• Installation restrictions for the entire encasement of the SCIF at :

o No penetrations are allowed to the exterior structure of the room.

o There is a junction box installed on the exterior wall with a ¾” passthrough to an interior junction box for the power feed.

o There is a junction box installed on the exterior wall with a ¾” passthrough to an interior junction box for communication.

• Installation restrictions for the interior of Room :

o Wall penetrations shall not exceed the depth of a 1 ¼” screw. If additional support is required for hanging on the wall. Contractors shall use a high-load winged anchor or removable sleeve anchor to support heavier loads.

o No floor penetration.

o Contractors are responsible for the replacement and installation if they damage the drop ceiling.

o Any conduit or pathways installed are required to be surface mounted.

o All conduit and pathways need to be surface mounted with 1 ¼ removable sleeve anchors. The conduit shall be galvanized, one piece standard electrical metallic tubing (EMT) conduit with proper di-electric couplings. All junction boxes must be grounded to the overhead Steel Truss.

o All power wires and communication wires will be in conduit, fixed by beam clamps on the steel truss.

• Installation Limitations for all areas of the installation:

o Tampers shall be installed at any junctions or areas where connections or splices are located and will be wired separately and labeled individually.

o Any conduits will be installed in a permanent fashion such as welding, epoxy, fusion, etc. Set screws shall not be used.

• Power Requirements: The IDS/ACS requires a dedicated and independent emergency power system to ensure uninterrupted operation in case of primary power failure. This system must automatically engage without causing alarm activation and provide a minimum of twenty-four (24) hours of continuous power.

o Acceptable sources include dedicated battery banks, uninterruptible power supplies (UPS), or generators specifically designated for the IDS/ACS.

o Note: Utilizing existing base generators or UPS systems intended for general purposes does not fulfill this requirement. The contractor is responsible for providing a separate and independent power solution to guarantee the continuous functioning of the IDS/ACS during any outage.

o Note: NBSFS will identify the panel where the contractor can connect the rooms circuit to. NBSFS will not install the circuit breaker, connect to circuit to the circuit breaker. Due to the need for power availability, the panel cannot be powered down to install the circuit.

• Structural Constructability: Contractor will survey building to assess load limitation with installation limitations. The design will provide a mounting plan with drawings that will address routing and pathways within . For all wall-mounted equipment a structural calculation will be provided to the Government to address the fastener limitation.

4. Contractor Design Responsibilities (CLIN 1) The contractor shall deliver a design package in accordance with the requirements outlined in this document that includes but is not limited to:

• Site Survey: Conduct a comprehensive, physically on-site survey to assess all necessary information for the design of a successful installation of the new system, to include the existing infrastructure, determine optimal cable runs, and identify suitable locations for new equipment.

• System Architecture: A detailed, documented description of the proposed system architecture, including as-builds, building layout, blueprints, cabling infrastructure, equipment locations, network diagrams, component specifications, communication protocols and installation procedures.

• Software Design: Specifications for all system software, including user interfaces, licensing, functionality, and security features, baseline configurations. The contractor will ensure all software is approved for use on DoD systems IAW DAFMAN 17-1203.

• Security Procedures: IAW 31-101 as outlined in SECTION 01 80 00, NBSFS SECURITY

REQUIREMENT.

• Interoperability Assessment: A detailed assessment of the system's interoperability with existing base IDS/ACS systems, identifying any potential challenges and proposing solutions.

• Training Plan: A comprehensive plan for training NBSFS user and maintainer personnel on the operation and administration/sustainment of the new IDS/ACS. Deliver training products for future reference. Also, define the specific training requirements or best practices for different user roles (e.g., SCIF administrator, BDOC operator, general SCIF users).

• Cost Development:

o Detailed Cost Estimate: The contractor shall provide a detailed and transparent cost estimate for all aspects of the installation. This estimate shall include a breakdown of costs for labor (including hourly rates and estimated hours for each task), materials (including itemized lists of all equipment, hardware, and software), subcontracts (if any), travel, permits, testing, and any other anticipated expenses.

The estimate shall be sufficiently detailed to allow the Government to validate the reasonableness and accuracy of the proposed costs. The Contractor will provide an itemized Bill of Materials (BOM) with vendor quotes for each item.

o Cost Justification: The contractor shall provide a written justification for all costs included in the estimate, explaining the rationale behind the proposed resources and pricing. This justification shall reference industry standards, vendor quotes, and historical data, where appropriate, to support the cost estimate.

o Life Cycle Cost Analysis: The contractor shall provide a life cycle cost analysis that includes the initial cost of the system, the cost of maintenance and operation over the expected life of the system, and the cost of eventual replacement.

• Implementation Plan: A high-level, government approved, master schedule (such as a POAM, Gantt Chart, Venn diagram, etc.) plan outlining the steps, timeline, and resources required for the system's implementation. This plan should include:

o Phased Implementation Schedule: A clear timeline outlining all major project milestones, including procurement, installation, configuration, testing, training, and handover, with estimated durations for each phase.

o Resource Allocation Plan: The Contactor shall define all support requirements needed from the government within 14 calendar days of the award. The resource allocation plan shall be provided, detailing the personnel, equipment, and materials required for each phase of the project. This plan shall include, but not be limited to:

o Risk Assessment and Mitigation Plan: An assessment of potential risks that could impact the timeline and proposed mitigation strategies for each identified risk.

o Communication Plan: A proposed plan for regular communication and reporting to Government stakeholders (NBSFS, 66 CONS, etc.) throughout the process.

5. Design (CLIN 1) The contractor shall supply a full design IAW UFGS 01 33 16.00 10 DESIGN DATA (DESIGN AFTER AWARD). The contractor will coordinate with the government on any potential deviations from the listed guideline to allow for implementation of an information technology system. Required design documentation shall include operation and maintenance manuals, as-builts, drawings, Adobe PDF stamped/signed by Designer of Record, and specifications listed elsewhere in Statement of Objectives. The contractor shall submit their proposed design solution and installation approach with narrative clearly conveying understanding of the requirements, including a list of approved equipment for Government review and acceptance for the complete design. Design submittals shall include 10% design following design charrette, followed by 35%, 65%, 90%, and 100% design submittals.

Project Kick-Off Meeting with 10% design charrette

Within 21 calendar days after award

Title 1A 35% Design Submittal Within 60 calendar days after Kick-Off Meeting

Title 1A 35% Submittal Review Within 14 calendar days Title 1A 35% Comment Review Meeting Within 1 calendar day Title 1B 65% Design Submittal Within 28 calendar days after approval of 1A

Report.

Title 1B 65% Submittal Review Within 14 calendar days Title 1B 65% Comment Review Meeting Within 1 calendar day Title 1D 90% Design Submittal Within 28 calendar days after approval of 1B

Report.

Title 1D 90% Design Submittal Review Within 14 calendar days Title 1D 90% Comment Review Meeting Within 1 calendar day Title 1D 100% Design Submittal Within 28 calendar days after approval of 1C Title 1D 100% Design Submittal Review Within 7 calendar days Title 1D 100% Comment Review Meeting Within 1 calendar day Title 1D 100% Design Submittal Corrections Within 7 calendar days after 100% review meeting Title 1F Final Design Submittal Within 7 calendar days after 100% Design

Submittal Corrections for final review

5.1 Design Review (CLIN 1)

The contractor will present the design package to all government stakeholders (Contracting, 66 CONS, NBSFS, etc.), for review and approval at each design phase. The review will focus on:

• Project progress/milestones/challenges

• Compliance with all stated requirements.

• Technical feasibility and soundness of the design.

• Cybersecurity posture and adherence to DoD security standards.

• Interoperability with existing base systems.

• Clarity and completeness of documentation.

• Design shall also account for all requirements listed in the “Applicable Documents and

Standards” section.

6. Contractor Installation Responsibilities. (CLIN 2) The contractor shall be responsible for the complete and correct installation of the IDS/ACS, adhering to all specifications and requirements outlined in this SOO and the approved design.

These responsibilities include, but are not limited to:

• Site Preparation: Preparing the installation site, including any necessary modifications to existing infrastructure, ensuring compliance with all safety and security regulations. This includes coordinating with NBSFS personnel for utility shutdowns or disruptions if required.

• Equipment Installation: Installing all IDS/ACS components, including sensors, control panels, wiring, and communication equipment, in accordance with manufacturer specifications and industry best practices. This also includes the secure installation of the Vindicator Site Commander (VSC), Security Access Workstation (SAW), and Vindicator Command and Control (VCC) and all other applicable Vindicator IDS/ACS units within their designated locations and enclosures.

• System Configuration: Configuring the IDS/ACS software and hardware, including programming alarm zones, setting access levels, and establishing communication links with monitoring stations. This includes configuring the encryption settings for secure communication.

• Cable Management: Installing and managing all cabling in a neat, organized, and secure manner IAW ICD-ICS-705. All cabling outside the SCIF shall be protected per the specifications outlined in this SOO and approved design.

• Testing and Verification: IAW ICD-ICS-705, and DAFI 31-101Contractor will conduct thorough testing and verification of all installed components and system functionality, ensuring compliance with the provided test plan and achieving all performance objectives.

This includes providing detailed documentation of test results.

• Cleanup and Restoration: The contractor shall be required to clean up the installation site upon completion of the work, restoring any affected areas to their original condition, and removing all debris and waste materials.

• Documentation: Providing complete and accurate as-built documentation, including diagrams, schematics, and configuration settings.

• Training: Deliver comprehensive training to designated NBSFS personnel on the operation and maintenance of the IDS/ACS, as detailed in the training requirements section.

• Warranty and Sustainment Support: Provide a one-year warranty or manufacturer's standard commercial warranty (whichever is longer), including one-year sustainment that covers workmanship and 24/7 response, within 4 hours of notification, for alarm conditions and troubleshooting beyond site capabilities.

• Security Compliance: Adhering to all security requirements and regulations throughout the execution of this effort, ensuring the protection of classified information and the integrity of all secure resources and areas, including the SCIF. This includes obtaining necessary clearances and access badges for all contractor personnel.

The contractor shall coordinate all installation activities with the designated NBSFS point of contact and obtain all necessary approvals before commencing any work. The contractor is responsible for ensuring that all installation work is performed in a safe, supervised and professional manner, minimizing disruption to ongoing operations at NBSFS. The installation period of performance to complete the installation is three months after final design submittal is approved

7. System Acceptance (CLIN 2) Upon completion of the installation and testing, the contractor shall initiate the System Acceptance phase. This phase will involve the following activities:

• Final Inspection: The contractor and the designated NBSFS point of contact will conduct a final inspection of the installed system to verify that all components are installed correctly, all cabling is properly managed, and the system meets all aesthetic and functional requirements.

• System Demonstration: The contractor will demonstrate the full functionality of the IDS/ACS to the NBSFS point of contact, including alarm activation, notification procedures, access control integration, and system reporting capabilities. This demonstration should cover all normal operating scenarios and emergency procedures.

• Documentation Review: NBSFS will review with the contractor all as-built documentation provided by the contractor to ensure its completeness and accuracy. This includes verifying that all diagrams, schematics, and configuration settings reflect the final installed system.

• Training Validation: The government will validate the effectiveness of the training provided by the contractor by observing designated personnel operating the system and responding to simulated alarm scenarios.

• File Management: The contractor is responsible for producing a project closet with all associated correspondence, documentation, meeting recordings and minutes, warranties and all other pertinent project data. The project file plan requirements will be IAW AF 33-322

• Final Acceptance Report: Upon successful completion of all acceptance activities, the contractor will prepare a Final Acceptance Report documenting all activities undertaken for the project, including the results of the acceptance process. The contractor shall provide a copy of this report. Final acceptance and payment will be contingent upon successful completion of all acceptance criteria.

8. APPLICABLE DOCUMENTS AND STANDARDS. (CLIN

1 and CLIN 2) The following list does not include all standards. The contractor will use the latest version of all applicable documents and standards. The contractor shall obtain and comply with any other applicable manuals not identified in this list that would be required to meet industry standards.

• AF 33-322 Records Management and Information Governance Program

• DAFMAN 17-1203 INFORMATION TECHNOLOGY ASSET MANAGEMENT AND

ACCOUNTABLIITY

• DAFMAN 91-203 AIR FORCE OCCUPATIONAL SAFETY FIRE, AND HEALTH STANDARDS

• DAFI31-101_DAFGM

• DoDI 6055-17, DoD Installation Emergency Management (IEM) program