IDS Statement of Objectives (7).pdf

Statement of Objectives (SOO) for Intrusion Detection System (IDS) at New Boston Space Force Station’s (NBSFS) Sensitive Compartmented Information Facility (SCIF)

1. Introduction

This Statement of Objectives (SOO) defines the requirements for the contractor to Engineer, Design, Furnish, Install, and Test (EDFI&T) an Intrusion Detection System (IDS) for a Sensitive Compartmented Information Facility (SCIF) at New Boston Space Force Station (NBSFS) based on the Vindicator platform. The IDS must comply with all applicable regulations and protect against various physical threats, providing detection, annunciation, and security for the SCIF resource.

1.1 Technical Requirements All IDS installation components and monitoring stations shall adhere to Underwriters Laboratories (UL) Standard UL 2050 for National Industrial Security Systems for the Protection of Classified Material, DAFI 31-101_DAFGM2023-01 11 April 2023, IC Tech Spec for ICD/ICS 705, and be installed by a UL 2050 certified installer. The contractor will provide a NIST (National Institute of Standards and Technology) Certificate for the Vindicator Panel demonstrating 128-bit encryption between the panel and the monitoring station.

1.2 Contractor Responsibilities

• Project Management: Overall management of the project, including scheduling, inspections, compliance, cost estimations, testing services, document control, meetings and minutes, and quality control through all phases, culminating in project closeout.

• Accreditation: The contractor will be responsible for the accreditation to include final ATO/ATC of the system on AFNET or as an independent system.

• Partnership in Design and Implementation: Contractor will be required to engage with the government at all steps in the design/build process to allow for the development of the most cost-effective and technically sound solution. The contractor is responsible to provide the expertise in recognizing and addressing problematic issues and successful execution of this project.

• Escort: The area of work is in a restricted area. The contractor will provide escorts to fulfill escort requirements IAW DAFI 31.101 as outlined in SECTION 01 80 00, NBSFS SECURITY

REQUIREMENT.

• Workers Requirement: Any work to be performed on site, the contractor will only use US Citizens without a felony criminal record. NBSFS Site Security Manager will conduct security checks if they reveal a felony criminal record, or the identified risk is otherwise too great access will be denied or withdrawn.

2. System Objectives

The primary objective of the IDS system is to provide real-time intrusion detection and comprehensive security monitoring for the SCIF, including seamless integration with the access control system, including:

• Detect Intrusions: Provide comprehensive intrusion detection, alarm annunciation, and security monitoring for the SCIF.

• Regulatory Compliance: Adhere to all relevant DoD directives, UL standards, DAFI regulations, IC Tech Specs, and NBSFS local security protocols.

• Access Control Integration: Integrate with existing access control system, enabling functionalities IAW ICD-ICS-705.

• Integration with other Security Systems: Integrate with other security systems, such as video surveillance and access control systems, to provide a more comprehensive security solution. System data that is carried on transmission lines (e.g., access authorizations, personal identification, or verification data) to and from equipment located outside the SCIF shall be protected using FIPS AES certified encrypted lines. If this communication technology is not feasible, transmission lines shall be installed as approved by the AO.

• System Maintenance: Detail the requirements for system maintenance, including preventive maintenance schedules, troubleshooting procedures, and the process for reporting and resolving system malfunctions.

3. System Requirements

The contractor shall design a Vindicator-based IDS that meets the following requirements and adheres to all applicable standards and regulations.

3.1 General Requirements

• Compliance: Adhere to ICD-ICS-705, ESC-SIT-0001, ESE-TP-0023, UFC 4-020-04A, DAFI 31-101, DAFGM 2023-01and all other applicable regulations and standards as listed in the “Applicable Documents and Standards” section.

• Intrusion Detection: The IDS shall detect any alarm system tampering and unauthorized entry into the SCIF.

• Alarm Annunciation: The system shall provide immediate alarm notifications to designated personnel (BDOC and SCIF administrators).

• Security Monitoring: The IDS shall provide comprehensive security monitoring for the SCIF, including integration with the access control system.

• Access Control Integration: The IDS shall integrate seamlessly with the access control system, enabling functionalities such as badge programming, secure badge management, and emergency override capabilities. The system shall support programmable badges issued by the SCIF administrator, allowing for specific access levels and time-based restrictions. A comprehensive audit trail of all badge access attempts shall be maintained and readily accessible to authorized personnel.

• System Maintainability: The IDS shall be designed for ease of maintenance, including delivery of a complement of high-failure replacement parts at project turnover readily available replacement parts and clear troubleshooting procedures.

• Future Expansion: The system shall be scalable to accommodate future expansion of the SCIF (or the IDS infrastructure supporting the SCIF) or changes in its layout, including a minimum of 20% additional capacity for alarm points.

• Cybersecurity: The IDS shall incorporate robust cybersecurity measures to protect against unauthorized access and cyberattacks, complying with NIST SP 800-53 and other relevant cybersecurity standards. This includes secure communication between system components.

• Power Requirements: The IDS/ACS requires a dedicated and independent emergency power system to ensure uninterrupted operation in case of primary power failure. This system must automatically engage without causing alarm activation and provide a minimum of twenty-four (24) hours of continuous power.

o Acceptable sources include dedicated battery banks, uninterruptible power supplies (UPS), or generators specifically designated for the IDS/ACS. Utilizing existing base generators or UPS systems intended for general purposes does not fulfill this requirement. The contractor is responsible for providing a separate and independent power solution to guarantee the continuous functioning of the IDS/ACS during any outage.

4. Contractor Design Responsibilities

The contractor shall deliver a comprehensive design package in accordance with the requirements outlined in this document that includes but is not limited to:

• Site Survey: Conduct a comprehensive, physically on-site survey to assess all necessary information for a successful installation of the new system, to include the existing infrastructure, determine optimal cable runs, and identify suitable locations for new equipment.

• System Architecture: A detailed, documented description of the proposed system architecture, including building layout, blueprints, cabling infrastructure, equipment locations, network diagrams, component specifications, communication protocols and installation procedures.

• Software Design: Specifications for all system software, including user interfaces, licensing, functionality, and security features, baseline configurations. The contractor will ensure all software is approved for use on DoD systems IAW DAFM 17-1203.

• Security Procedures: IAW 31-101 as outlined in SECTION 01 80 00, NBSFS SECURITY

REQUIREMENT.

• Interoperability Assessment: A detailed assessment of the system's interoperability with existing base IDS systems, identifying any potential challenges and proposing solutions.

• Training Plan: A comprehensive plan for training NBSFS user and maintainer personnel on the operation and administration/sustainment of the new IDS. Deliver training products for future reference. Also, define the specific training requirements or best practices for different user roles (e.g., SCIF administrator, BDOC operator, general SCIF users).

• Implementation Plan: A high-level, government approved, master schedule (POAM, Gantt Chart, Venn diagram, etc.) plan outlining the steps, timeline, and resources required for the system's implementation. This plan should include:

o Phased Implementation Schedule: A clear timeline outlining all major project milestones, including procurement, installation, configuration, testing, training, and handover, with estimated durations for each phase.

o Resource Allocation Plan: A breakdown of the resources (personnel, equipment, materials) required for each phase of the implementation, including any specialized expertise or subcontracting needs. Contractor shall define all support requirements needed from the government within 14 calendar days from award.

o Risk Assessment and Mitigation Plan: An assessment of potential risks that could impact the implementation timeline and proposed mitigation strategies for each identified risk.

o Communication Plan: A proposed plan for regular communication and reporting to customer stakeholders (NBSFS, 66 CONS, etc.) throughout the implementation process.

5. Design

The contractor shall supply a full design IAW UFGS 01 33 16.00 10 DESIGN DATA (DESIGN AFTER AWARD). The contractor will coordinate with the government any potential deviations from the listed guideline to allow for implementation on an information technology system. Required design documentation shall include drawings, Adobe PDF stamped/signed by Designer of Record, and specifications listed elsewhere in Statement of Objectives. Contractor shall submit their proposed design solution and installation approach with narrative clearly conveying understanding of the requirements, including approved equipment for government acceptance for the complete design.

Design submittals shall include 10% design following design charrette, followed by 35%, 65%, 90%, and 100% design submittals.

Project Kick-Off Meeting Within 21 calendar days after award Title 1A 35% Design Submittal Within 60 calendar days after Kick-Off

Meeting Title 1A 35% Submittal Review Within 14 calendar days Title 1A 35% Comment Review Meeting Within 1 calendar day Title 1B 65% Design Submittal Within 28 calendar days after approval of 1A

Report.

Title 1B 65% Submittal Review Within 14 calendar days Title 1B 65% Comment Review Meeting Within 1 calendar day Title 1D 90% Design Submittal Within 28 calendar days after approval of 1B

Report.

Title 1D 90% Design Submittal Review Within 14 calendar days Title 1D 90% Comment Review Meeting Within 1 calendar day Title 1D 100% Design Submittal Within 28 calendar days after approval of 1C Title 1D 100% Design Submittal Review Within 7 calendar days Title 1D 100% Comment Review Meeting Within 1 calendar day

Title 1D 100% Design Submittal Corrections Within 7 calendar days after 100% review meeting

Title 1F Final Design Submittal Within 7 calendar days after 100% Design Submittal Corrections for final review

5.1 Design Review

The contractor will present the design package to all government stakeholders, for review and approval at each design phase. The review will focus on:

• Project progress/milestones/challenges

• Compliance with all stated requirements.

• Technical feasibility and soundness of the design.

• Cybersecurity posture and adherence to DoD security standards.

• Interoperability with existing base systems.

• Clarity and completeness of documentation.

• Design shall also account for all requirements listed in the “Applicable Documents and

Standards” section.

6. Contractor Installation Responsibilities

The contractor shall be responsible for the complete and correct installation of the IDS, adhering to all specifications and requirements outlined in this SOO and the approved design. These responsibilities include, but are not limited to:

• Site Preparation: Preparing the installation site, including any necessary modifications to existing infrastructure, ensuring compliance with all safety and security regulations. This includes coordinating with NBSFS personnel for utility shutdowns or disruptions if required.

• Equipment Installation: Installing all IDS components, including sensors, control panels, wiring, and communication equipment, in accordance with manufacturer specifications and industry best practices. This also includes the secure installation of the VSC, SAW, and VCC units within their designated locations and enclosures.

• System Configuration: Configuring the IDS software and hardware, including programming alarm zones, setting access levels, and establishing communication links with monitoring stations. This includes configuring the encryption settings for secure communication.

• Cable Management: Installing and managing all cabling in a neat, organized, and secure manner IAW ICD-ICS-705. All cabling outside the SCIF shall be protected per the specifications outlined in this SOO and approved design.

• Testing and Verification: IAW ICD-ICS-705, and DAFI 31-101Contractor will conduct thorough testing and verification of all installed components and system functionality, ensuring compliance with the provided test plan and achieving all performance objectives.

This includes providing detailed documentation of test results.

• Cleanup and Restoration: The contractor shall be required to clean up the installation site upon completion of the work, restoring any affected areas to their original condition, and removing all debris and waste materials.

• Documentation: Providing complete and accurate as-built documentation, including diagrams, schematics, and configuration settings.

• Training: Deliver comprehensive training to designated NBSFS personnel on the operation and maintenance of the IDS, as detailed in the training requirements section.

• Warranty Support: Provide a one-year warranty or manufacturer's standard commercial warranty (whichever is longer), including workmanship and 24/7 response, within 4 hours of notification, for alarm conditions and troubleshooting beyond site capabilities.

• Security Compliance: Adhering to all security requirements and regulations throughout the execution of this effort, ensuring the protection of classified information and the integrity of all secure resources and areas, including the SCIF. This includes obtaining necessary clearances and access badges for all contractor personnel.

The contractor shall coordinate all installation activities with the designated NBSFS point of contact and obtain all necessary approvals before commencing any work. The contractor is responsible for ensuring that all installation work is performed in a safe, supervised and professional manner, minimizing disruption to ongoing operations at NBSFS. The installation period of performance to complete the installation is three months after final design submittal is approved

7. System Acceptance

Upon completion of the installation and testing, the contractor shall initiate the System Acceptance phase. This phase will involve the following activities:

• Final Inspection: The contractor and the designated NBSFS point of contact will conduct a final inspection of the installed system to verify that all components are installed correctly, all cabling is properly managed, and the system meets all aesthetic and functional requirements.

• System Demonstration: The contractor will demonstrate the full functionality of the IDS to the NBSFS point of contact, including alarm activation, notification procedures, access control integration, and system reporting capabilities. This demonstration should cover all normal operating scenarios and emergency procedures.

• Documentation Review: NBSFS will review with the contractor all as-built documentation provided by the contractor to ensure its completeness and accuracy. This includes verifying that all diagrams, schematics, and configuration settings reflect the final installed system.

• Training Validation: The government will validate the effectiveness of the training provided by the contractor by observing designated personnel operating the system and responding to simulated alarm scenarios.

• Final Acceptance Report: Upon successful completion of all acceptance activities, the contractor will prepare a Final Acceptance Report documenting all activities undertaken for the project, including the results of the acceptance process. The contractor shall provide a copy of this report. Final acceptance and payment will be contingent upon successful completion of all acceptance criteria.

8. APPLICABLE DOCUMENTS AND STANDARDS.

The following list does not include all standards. The contractor will use the latest version of all applicable documents and standards. The contractor shall obtain and comply with any other applicable manuals not identified in this list that would be required to meet industry standards.

• DAFMAN 17-1203 INFORMATION TEHNOLOGY ASSET MANAGEMENT AND

ACCOUNTABLIITY

• DAFMAN 91-203 AIR FORCE OCCUPATIONAL SAFETY FIRE, AND HEALTH STANDARDS

• DAFI31-101_DAFGM

• DoDI 6055-17, DoD Installation Emergency Management (IEM) program

• IC Tech Spec for ICD/ICS 705

• SECTION 01 08 00, NBSFS SECUIRTY REQUIREMENT

• NFPA 70 - National Electric Code.

• NFPA 70E, Standard for Electrical Safety in the workplace.

• NFPA 72 - National Fire Alarm Code.

• Non-Nuclear Configuration Management Database (CMD) Equipment Approval List -

AFLCMC/HBU

• UFC 3-520-01 Interior Electrical Systems.

• UFGS 01 33 16.00 10 DESIGN DATA (DESIGN AFTER AWARD)

• UFGS 01 35 26 GOVERNMENTAL SAFETY REQUIREMENTS

• UFGS 01 45 00 QUALITY CONTROL

• UFGS 01 74 19 CONSTRUCTION WASTE MANAGEMENT AND DISPOSAL

• UFGS 01 78 00 CLOSEOUT SUBMITTALS