SFO_N4425524RP00021_Amd1_x.pdf

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

(a) By completing items 8 and 15, and returning or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

E. IMPORTANT: Contractor is not is required to sign this document and return copies to the issuing office.

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NUMBER 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQUISITION NUMBER 5. PROJECT NUMBER (If applicable)

7. ADMINISTERED BY (If other than Item 6) CODE

STANDARD FORM 30 (REV. 11/2016)

Prescribed by GSA FAR (48 CFR) 53.243

FACILITY CODE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended. is not extended.

12. ACCOUNTING AND APPROPRIATION DATA (If required) copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER

NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

PAGE OF PAGES

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

Previous edition unusable

One (1)

Anna C. Borer, Real Estate Contracting Officer

This amendment replaces Attachment A-Room Schedule and Attachment K-Security Requirements FSL II in their entirety.

Section 1.1 A: Requirement A, increased from 30,738 SF to 35,000 consequently increasing the allowable overage for Requirement A to 3,500.

Section 1.1 C: Requirement A preferred parking minimum increased from 130 to 200.

Naval Facilities Engineering Systems Command Northwest 1101 Tautog Circle Silverdale, WA 98315-1101

N4425524RP00021

N4425524RP00021

1 15

05/10/2024

04/12/2024

INSTRUCTIONS (Back Page):

Instructions for items other than those that are self-explanatory, are as follows:

Item 1 (Contract ID Code). Insert the contract type identification code that appears in the title block of the contract being modified.

Item 3 (Effective date).

(1)

(2)

(3)

(4)

(5)

For a solicitation amendment, change order, or administrative change, the effective date shall be the issue date of the amendment, change order, or administrative change.

For a supplemental agreement, the effective date shall be the date agreed to by the contracting parties.

For a modification issued as an initial or confirming notice of termination for the convenience of the Government, the effective date and the modification number of the confirming notice shall be the same as the effective date and modification number of the initial notice.

For a modification converting a termination for default to a termination for the convenience of the Government, the effective date shall be the same as the effective date of the termination for default.

For a modification confirming the contracting officer's determination of the amount due in settlement of a contract termination, the effective date shall be the same as the effective date of the initial decision.

(a)

(b)

(c)

(d)

(e)

(f)

Item 6 (Issued By). Insert the name and address of the issuing office. If applicable, insert the appropriate issuing office code in the code block.

Item 8 (Name and Address of Contractor). For modifications to a contract or order, enter the contractor's name, address, and code as shown in the original contract or order, unless changed by this or a previous modification.

Items 9, (Amendment of Solicitation Number - Dated), and 10, (Modification of Contract/Order Number - Dated). Check the appropriate box and in the corresponding blanks insert the number and date of the original solicitation, contract, or order.

Item 12 (Accounting and Appropriation Data).

When appropriate, indicate the impact of the modification on each affected accounting classification by inserting one of the following entries:

(2) Accounting classification Net decrease $

Include subject matter or short title of solicitation/contract where feasible.

Item 16B. The contracting officer's signature is not required on solicitation amendments. The contracting officer's signature is normally affixed last on supplemental agreements.

(i)

NOTE: If there are changes to multiple accounting classifications that cannot be placed in block 12, insert an asterisk and the words "See continuation sheet".

Item 13. Check the appropriate box to indicate the type of modification. Insert in the corresponding blank the authority under which the modification is issued. Check whether or not contractor must sign this document. (See FAR 43.103.)

Item 14 (Description of Amendment/Modification).

Organize amendments or modifications under the appropriate Uniform Contract Format (UCF) section headings from the applicable solicitation or contract. The UCF table of contents, however, shall not be set forth in this document.

Indicate the impact of the modification on the overall total contract price by inserting one of the following entries:

(i) Total contract price increased by $

(ii) Total contract price decreased by $

(iii) Total contract price unchanged.

State reason for modification.

When removing, reinstating, or adding funds, identify the contract items and accounting classifications.

(g)

(h)

When the SF 30 is used to reflect a determination by the contracting officer of the amount due in settlement of a contract terminated for the convenience of the Government, the entry in Item 14 of the modification may be limited to --

(i) A reference to the letter determination; and

(ii) A statement of the net amount determined to be due in settlement of the contract.

(1)

(2)

(3)

(4)

(5)

(6)

STANDARD FORM 30 (REV. 11/2016) BACK

(1) Accounting classification Net increase $

Am endm ent 1 ‐ N

4425524RP00021

Attachm ent A ‐ Room

Schedule

No.

Rooms

Area Each Room (SF)

Total Area

(SF)

Partition Height (C/H=Ceiling) or (S/S=Slab) Intended use

Wall

STC

Rating 110V Duplex

Outlets Notes / Other Requirements

No.

Phone Outlets

No. Data Drops Comments (Details behind requirement)

16 120 1,920 C/H Office STD As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Door with locking capability

16 16

Symon board, phone, Data, Scanner/FAX/ TV's/Fire Protection/Acoustical - Reverberation control - ceilings

186 64 11,904 C/H Office STD As Required by Code

- Space for 186 cubicles at 64 sqft each

- RJ45 voice/data jack 186 186

Must be co-located in same bldg/floor;

Fire Protection/Partitions/Carpet tile -repairable/Window coverings

4 400 1,600 C/H Break Room STD As Required by Code

- Painted walls (semi-gloss)

- Vinyl floor 0 4

Space size to accommodate 200 people at all times, kitchen environment (fridge, microwave, sink/countertop, table, chairs) and vending machines.

2 200 400 C/H Conference Room STD As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Black out curtains in windows

4 8

10 people for NMCI wireless connectivity, projector/screen, whiteboards, control/console area, VTC/Fire Protection

1 400 400 C/H Conference Room STD As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Black out curtains in windows

2 4

20 people for NMCI wireless connectivity, projector/screen, whiteboards, control/console area, VTC/Fire Protection

1 700 700 C/H Conference Room STD As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Black out curtains in windows

2 4

35 people for NMCI wireless connectivity, projector/screen, whiteboards, control/console area, VTC/Fire Protection

1 252 252 C/H Plotter Station STD As Required by Code - Same ventilation as occupied spaces 4 4 - 3 plotters (84 SF/Each) with electrical and IT capabilities

1 480 480 C/H Print Stations STD As Required by Code - Same ventilation as occupied spaces 10 10 - 10 printers (49 SF/Each) with electrical and IT capabilities

1 120 120 C/H Expressing Station STD As Required by Code - Sink with cold and hot water 1 1

Must be co‐located in same bldg/floor;

Fire Protection/Partitions/Carpet tile ‐ repairable/Window coverings

25 48 1,200 C/H Stand-Alone Workstations STD As Required by Code

- RJ45 voice/data jack

- Painted walls (semi-gloss)

- Carpeted floors

25 25 Must be co‐located in same bldg/floor;

Fire Protection/Partitions/Carpet tile ‐ repairable/Window coverings

1 9,294 9,294 N/A Circulation STD As Required by Code

- 40% area for circulation

- Will provide for office support 0 0 Carpet tile -repairable/Fire Protection

1 100 100 C/H Ship check laptop room STD As Required by Code

- RJ45 voice/data jack

- Painted walls (semi-gloss)

- Carpeted floors

0 30 Requires 30 NMCI ports/Carpet title-repairable/Fire Protection

Requirement A ent 1 ‐ N

4425524RP00021

Attachm ent A ‐ Room

Schedule

1 100 100 C/H Data Closet STD As Required by Code

- Separate room

- Standalone a/c system

- True floor to ceiling walls

- Anti-static tile floor

- Keyed separately from office

0 0 Fire Protections

1 1280 1,280 C/H Storage STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

8 500 4,000 C/H Drawing file storage STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

1 650 650 C/H Stock room STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

1 600 600 C/H Laydown Room STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

Requirement A GSF: 35,000

No.

Rooms

Approx. Area Each Room

(SF)

Approx.

Total Area

(SF)

Partition Height (C/H=Ceiling) or (S/S=Slab) Intended use

Wall

STC

Rating 110V Duplex

Outlets Notes / Other Requirements

No.

Phone Outlets

No. Data Drops

PMO Comments (Details behind requirement)

14 120 1,680 C/H Office STD As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Door with locking capability

12 12

Symon board, phone, Data, Scanner/FAX/ TV's/Fire Protection/Acoustical - Reverberation control - ceilings

79 64 5,056 C/H Office STD As Required by Code

- Space for 79 cubicles at 64 sqft each

- RJ45 voice/data jack 48 48

Must be co‐located in same bldg/floor;

Fire Protection/Partitions/Carpet tile ‐ repairable/Window coverings

1 120 120 C/H Expressing Station STD As Required by Code - Sink with cold and hot water 1 1

Must be co‐located in same bldg/floor;

Fire Protection/Partitions/Carpet tile ‐ repairable/Window coverings

2 500 1,000 C/H Conference Room 50-60 As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Black out curtains in windows

2 4

10 people for NMCI wireless connectivity, projector/screen, whiteboards, control/console area, VTC/Fire Protection

1 1400 1,400 C/H Large Conference Room 50-60 As Required by Code

- RJ45 voice/data jacks

- Painted walls (semi-gloss)

- Carpeted floors

- Black out curtains in windows

2 4

70 people for NMCI wireless connectivity, projector/screen, whiteboards, control/console area, VTC/Fire Protection

4 49 196 C/H Print Stations STD As Required by Code - Same ventilation as occupied spaces 2 2 With IT and electrical capability

2 250 500 C/H Break Room STD As Required by Code

- Painted walls (semi-gloss)

- Vinyl floor 0 2

Space size to accommodate 70 people at all times, kitchen environment (fridge, microwave, sink/countertop, table, chairs) and vending machines.

Requirement B ent 1 ‐ N

4425524RP00021

Attachm ent A ‐ Room

Schedule

2 100 200 C/H Storage STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

1 200 200 C/H File Storage STD As Required by Code - Same ventilation as occupied spaces 0 0 Carpet tile -repairable/Fire Protection

1 2,485 2,485 N/A Circulation STD As Required by Code

- 40% area for circulation

- Will provide for office support 0 4 Carpet tile -repairable/Fire Protection

Requirement B GSF: 12,837

Combined: 47,837 GSF

SECURITY REQUIREMENTS - FACILITY SECURITY LEVEL II

THESE PARAGRAPHS CONTAIN ADDITIONAL SECURITY REQUIREMENTS, AND, UNLESS

INDICATED OTHERWISE, ARE TO BE PRICED IN THE SECURITY SECTION OF THE PROPOSAL TO

LEASE SPACE (PLS) ATTACHMENT.

NOTE THAT ITEMS IDENTIFIED AS “SHELL *” REPRESENT A OFFEROR'S OBLIGATIONS OR THE

GOVERNMENT’S RIGHTS AND ARE NOT NECESSARILY ITEMS TO BE CONSTRUCTED.

DEFINITIONS:

Definitions are the same as those used in the Lease unless re-defined in these Security Requirements.

CRITICAL AREAS - The areas that house systems that if damaged or compromised could have significant adverse consequences for the facility, operation of the facility, or mission of the agency or its occupants and visitors. These areas may also be referred to as “limited access areas,” “restricted areas,” or “exclusionary zones.” Critical areas do not necessarily have to be within Government-controlled space (e.g., generators, air handlers, electrical feeds which could be located outside Government-controlled space).

DESIGN-BASIS THREAT – The Design-Basis Threat (DBT) is the profile and estimate of the threats to a Government facility across a range of specific undesirable events, and serves as the basis for determining appropriate security standards. The Offeror's technical consultant(s) shall work in conjunction with the Government, including the Federal Protective Service (FPS), to apply the DBT to the post-award risk assessment. The risk assessment identifies recommended countermeasures and security design features that achieve the minimum baseline level of protection for a particular facility. The baseline level of protection may be further customized to address facility-specific conditions. The OFFEROR is responsible for providing countermeasure provisions outlined in this FSL document, as well as for additional items identified during the post-award risk assessment. Any additional countermeasures identified during this assessment shall be priced in PLS.

I. FACILITY ENTRANCES, LOBBY, COMMON AREAS, NON-PUBLIC, AND

UTILITY AREAS.

A. FACILITY ENTRANCES AND LOBBY

1. EMPLOYEE ACCESS CONTROL AT ENTRANCES (SHELL)

The Offeror shall provide key or Physical Access Control System (PACS) for the entrance to this building and to doors identified by the Government as employee entrance doors. All Government employees, under this lease, shall be allowed access to the leased space (including after-hours access).

B. SCREENING REQUIREMENTS

1. ACCOMODATION OF RETAIL/MIXED USE SPACE (SHELL)

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

Amendment 1 - N4425524RP00021

ATTACHMENT K

N4425524RP00021

The Offeror shall accommodate publicly accessible retail and mixed uses through such means as separating entryways.

C. COMMON AREAS, NON-PUBLIC, AND UTILITY AREAS.

1. PUBLIC RESTROOM ACCESS (SHELL)

The Government reserves the right to control access to public restrooms within Government controlled Space.

2. SECURING CRITICAL AREAS (SHELL)

The Offeror shall secure areas designated as Critical Areas to restrict access to authorized personnel only, and post signage accordingly:

a. At a minimum, the Offeror shall secure building common areas such as mechanical and janitorial areas, sprinkler rooms, electrical closets, telecommunications rooms, and janitor closets. Utility, mechanical, electrical, and telecom rooms shall be secured with high-security (UL437) locks.

Keyed locks, PACS card reader, or similar security measures shall strictly control access to Critical Areas. Additional controls for access to keys, PACS, and key codes shall be strictly maintained.

b. Roofs with HVAC systems and access to interior space from the roof shall also be secured with high-security (UL437) locks. Roof access shall be strictly controlled through keyed locks, PACS card reader, or similar measures. Fire and life safety egress shall be carefully reviewed when restricting roof access.

c. In addition, Offeror shall protect the ventilation equipment and system controls from unauthorized access.

3. VISITOR ACCESS CONTROL (SHELL)

Entrances are open to the public during business hours. After hours, visitor entrances are secured, and have a means to verify the identity of persons requesting access prior to allowing entry into the Premises.

4. PUBLIC SPACE RESTRICTIONS WITH PRIMARY VERTICAL LOAD MEMBERS

The Government reserves the right to remove this countermeasure requirement, post-award, based on building-specific conditions. For measurement purposes, standoff shall be considered building support space and not ABOA.

a. RESTRICT CONTACT FROM PUBLIC AREAS WITH PRIMARY VERTICAL LOAD MEMBERS: For partitions separating public space from federal space, the Offeror shall use construction materials which have inherent ductility, and which are able to respond to load reversals. Alternatively, the Offeror can use a minimum standoff of at least 100 mm (4 inches).

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

b. RESTRICT CONTACT FROM MAIL AREA WITH PRIMARY VERTICAL LOAD MEMBERS: In the partitions that separate public mail screening and receiving areas from federal tenants, the Offeror shall use construction materials which have inherent ductility, and which are able to respond to load reversals. Alternatively, the Offeror can use a minimum standoff of at least 150 mm (6 inches).

II. INTERIOR (GOVERNMENT SPACE)

A. IDENTITY VERIFICATION (SHELL)

The Government reserves the right to verify the identity of persons requesting access to the Government-controlled Space prior to allowing entry.

B. FORMAL KEY CONTROL PROGRAM (SHELL)

The Government reserves the right to implement a formal key control program. The Offeror shall have a means of allowing the electronic disabling of lost or stolen access media, if electronic media is used.

III. SITES AND EXTERIOR OF THE BUILDING

A. SIGNAGE

1. POSTING OF SIGNAGE IDENTIFYING THE SPACE AS GOVERNMENTAL (SHELL)

The Offeror shall not post sign(s) or otherwise identify the facility and parking areas as a Government, or specific Government tenant, occupied facility, including during construction, without written Government approval.

2. POSTING OF REGULATORY SIGNAGE (SHELL)

The Government may post or request the Offeror to post regulatory, statutory, sensitive areas and site-specific signage.

B. LANDSCAPING AND ENTRANCES

1. LANDSCAPING REQUIREMENTS (SHELL)

Landscaping shall be neatly trimmed to minimize the opportunity for concealment of individuals, packages/ containers, and parking areas. If Landscaping exists, the Offeror shall provide trees, hedges, berms, or any combination of these to create buffer zones to separate public areas and other functions. Landscaping shall not obstruct the views of security guards and Video Surveillance System (VSS) cameras or interfere with lighting or Intrusion Detection System (IDS) equipment.

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

2. HAZMAT STORAGE (SHELL)

Where applicable, Offeror shall locate HAZMAT storage in a restricted area or storage container away from loading docks, entrances, and uncontrolled parking.

3. PLACEMENT OF RECEPTACLES, CONTAINERS, AND MAILBOXES (SHELL)

Trash receptacles, containers, mailboxes, FedEx-UPS boxes, vending machines, or other fixtures and/or features that could conceal packages, briefcases, or other portable containers shall be located away from building exterior and entry points.

C. PARKING

1. PUBLIC ACCESS TO GOVERNMENT PARKING AREAS (SHELL)

Offeror shall designate Government employee and visitor parking areas.

IV. SECURITY SYSTEMS

A. Security System Testing and Maintenance Criteria: The Offeror in consultation and coordination with a security provider, either internal or external, as determined by the Lease Contracting Officer, and the Government security representative shall implement a testing and preventive maintenance program for all security systems the Offeror has installed. Testing must be based on established, consistent, agency-specific protocols, to be determined at the time of design. All testing shall be documented. Operational performance testing shall be conducted annually and functional testing shall be conducted more frequently, as determined by the Government. Components which fail, either during testing or throughout the life of this lease shall be repaired or replaced by the Offeror within a reasonable timeframe as determined by the Government. Any critical component that becomes inoperable must be replaced or repaired by the Offeror within five business days. Critical components are those required to provide security (IDS, VSS, PACS, etc.) for a perimeter access point or critical area. "Replacement" may include implementing other temporary measures in instances where the replacement or repair is not achievable within the specified time frame (e.g. a temporary barrier to replace an inoperable pop-up vehicle barrier, etc.). Failure by the Offeror to provide sufficient replacement measures within the timeframe identified above may result in the Government providing guard service, the cost of which must be reimbursed by the Offeror.

B. VIDEO SURVEILLANCE SYSTEM

OFFEROR PROVIDED DESIGN, INSTALLATION, AND MAINTENANCE

The Offeror shall design, install, and maintain a Video Surveillance System (VSS) as described in this section.

The VSS system will support the entry control system (at personnel entrances and exits to the space), with time lapse video recording and digital image storage, that will allow Government employees to view and communicate remotely with visitors before allowing access to the Space. As determined by the Government the VSS system shall provide unobstructed coverage of designated pedestrian entrances and exits.

Technical review of the proposed system shall be coordinated with the Government security representative, at the direction of the Contracting Officer, prior to completion of the CD’s, as well as prior to installation. VSS

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

system testing, and acceptance shall be conducted by the Government prior to occupancy. The VSS system shall comply with the Architectural Barriers Act, section F230.0. The Government will centrally monitor the VSS system. Government specifications are available from the Lease Contracting Officer. VSS system components which fail or require maintenance, or which fail during testing should be serviced in accordance with the Security System Maintenance Criteria listed above.

The Offeror shall comply with FAR 52.204-25: Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment (Nov 2021). See https://www.acquisition.gov/far/part-

52#FAR_52_204_25.

GOVERNMENT PROVIDED SCOPE AND PRODUCT, INSTALLATION, AND MAINTENANCE

The Government may provide and install an entry control system, with time lapse video recording and digital image storage, that will allow Government employees to view and communicate remotely with visitors before allowing access. This Video Surveillance System (VSS) shall provide the Government with unobstructed coverage, as determined by the Government, of designated pedestrian entrances and exits. The Offeror shall permit twenty-four-hour VSS coverage and recording, provided and operated by the Government. The Government will centrally monitor the VSS surveillance. Government specifications are available from the Contracting Officer.

After notice to proceed, the Offeror shall advise the Government of the appropriate time to install the equipment during the construction of the Space. The Offeror shall facilitate the installation by allowing access to electrical panels and other areas of the building as necessary. The Offeror's construction schedule shall reflect the installation of this equipment.

C. INTRUSION DETECTION SYSTEM

OFFEROR PROVIDED DESIGN, INSTALLATION, AND MAINTENANCE

The Offeror shall design, install, and maintain an Intrusion Detection System (IDS) as described in this section. The Government requires an IDS, which will cover perimeter entry and exit doors, and operable ground-floor windows. Basic Security-in-Depth IDS components include: magnetic door switch(s), alarm system keypad, passive infrared sensor(s) (PIR), an alarm panel (to designated monitoring center) and appropriate communication method i.e. telephone and/or Internet connection, glass-break detector, magnetic window switches or shock sensors. Technical review of the proposed system shall be coordinated with the Government security representative, at the direction of the Lease Contracting Officer, prior to completion of the CDs, and prior to installation. System testing and acceptance shall be conducted by the Government prior to occupancy.

Basic Security-in-Depth IDS shall be connected to and monitored at a central station operated by the Department of Homeland Security Mega Center. Emergency notification lists shall be coordinated with the monitoring station to include all applicable Government and Offeror points of contact, including law enforcement (Federal Protective Service and facility security force). Monitoring shall be designed to facilitate a real-time detection of an incident, and to coordinate an active response to an incident. The Offeror must complete the Mega Center Alarm Requirements (MAR) application process specified by the Government to meet the monitoring requirements for a functional IDS. The Government creates an FPS monitoring account

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

https://www.acquisition.gov/far/part-52#FAR_52_204_25 https://www.acquisition.gov/far/part-52#FAR_52_204_25 https://www.acquisition.gov/far/part and works with the Offeror to complete the Mega Center Alarm Requirement (MAR) in conjunction with the installing security vendor. Components which fail or require maintenance, or which fail during testing shall be serviced in accordance with the Security System Maintenance Criteria listed above.

GOVERNMENT PROVIDED SCOPE AND PRODUCT, INSTALLATION, AND MAINTENANCE The Offeror shall permit installation of a perimeter Intrusion Detection System (IDS) to be operated by the Government.

The Government shall provide and install an IDS on perimeter entry and exit doors, and operable ground-floor windows. Basic Security-in-Depth IDS— include: magnetic door switch(s), alarm system keypad, passive infrared sensor(s) (PIR), an alarm panel (to designated monitoring center) and appropriate communication method i.e. telephone and/or Internet connection, glass-break detector, magnetic window switches or shock sensors.

Basic Security-in-Depth IDS shall be connected and monitored at a central station. Emergency notification lists shall be coordinated with the monitoring station to include all applicable Government and Offeror points of contact, including law enforcement (Federal Protective Service and facility security force). Monitoring shall be designed to facilitate a real-time detection of an incident, and to coordinate an active response to an incident.

After notice to proceed, the Offeror shall advise the Government of the appropriate time to install the equipment during the construction of the Space. The Offeror shall facilitate the installation by allowing access to electrical panels and other areas of the building, as necessary. The Offeror's construction schedule shall reflect the installation of this equipment.

D. DURESS ALARM

OFFEROR PROVIDED DESIGN, INSTALLATION, AND MAINTENANCE

The Offeror shall design, install, and maintain a duress alarm system. Technical review shall be coordinated with the Government security representative, at the direction of the Contracting Officer, prior to completion of the CDs, as well as prior to installation. System testing and acceptance shall be conducted by the Government prior to occupancy. This system shall comply with the Architectural Barriers Act, section F230.0.

The Offeror in consultation and coordination with the security provider and Government shall conduct security system performance testing annually. Testing must be based on established, consistent agency-specific protocols, documented and furnished to the Contracting Officer. Components which fail or require maintenance, or which fail during testing should be serviced in accordance with the Security System Maintenance Criteria listed above.

GOVERNMENT PROVIDED SCOPE, PRODUCT, INSTALLATION, AND MAINTENANCE

The Offeror shall permit installation of a duress alarm system to be provided and operated by the Government. The Government, in coordination with a security provider, either internal or external, as determined by the Contracting Officer, shall document and implement duress procedures for emergency situations.

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

After notice to proceed, the Offeror shall advise the Government of the appropriate time to install the equipment during the construction of the Space and shall facilitate the installation, including access to electrical panels and other areas of the building, as necessary. The Offeror's construction schedule shall reflect the installation of this equipment.

E. SECURITY SYSTEMS DESIGN

The Offeror, in consultation and coordination with security providers (internal or external) and the agency designated security representative, shall ensure at the time of system design, system construction, and throughout the term of the Lease, that alarm and PACS panel, VSS components, controllers, and cabling shall be secured from unauthorized physical and logical access.

V. STRUCTURE

NOTE: FOR ADDITIONAL BLAST RESISTANT MEASURES REQUIRED IN NEW LEASE

CONSTRUCTION PROJECTS, REFER TO LEASE PARAGRAPH “SECURITY FOR NEW

CONSTRUCTION”.

A. WINDOWS

LOCK GROUND FLOOR WINDOWS

If a Government tenant occupies ground floor space in the Building, the Offeror shall provide a means to lock all operable, ground floor windows with secure latches. As part the PLS, any operable, ground floor windows shall be monitored via IDS.

B. BUILDING SYSTEMS

1. EMERGENCY GENERATOR PROTECTION (T.I.)

If an emergency generator is required by the Government, the Offeror shall locate it, either pre-existing or installed as part of Tenant Improvements, in a secure area, protected from unauthorized access and vehicle ramming, if outdoors. The emergency generator and its fuel tank must be located at least 25 feet from loading docks, entrances, and parking areas. Alternatively, if the 25 foot distance cannot be achieved, Offeror shall protect utilities in accordance with the post-award DBT analysis through a combination of standoff, hardening, and venting methods.

2. SECURING AIR INTAKE GRILLES

Offeror shall secure all accessible air intake grills from tampering or removal. Whenever possible, locate outdoor air intakes at least 30 feet above grade, and preferably at roof level.

VI. OPERATIONS AND ADMINISTRATION

A. FACILITY SECURITY COMMITTEE (SHELL *)

The Offeror shall cooperate and work with the buildings Facility Security Committee (FSC) throughout the term of the Lease. The FSC is responsible for addressing facility-specific security issues and approving the implementation of security measures and practices. The FSC consists of representatives of all Federal tenants in the facility, the security organization, and the leasing department or agency.

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

B. ACCESS TO BUILDING INFORMATION (SHELL *)

Building Information—including mechanical, electrical, vertical transport, fire and life safety, security system plans and schematics, computer automation systems, and emergency operations procedures shall be strictly controlled. Such information shall be released to authorized personnel only, approved by the Government, by the development of an access list and controlled copy numbering. The Lease Contracting Officer may direct that the names and locations of -Government tenants not be disclosed in any publicly accessed document or record. If that is the case, the Government may request that such information not be posted in the building directory.

Offeror shall have emergency plans and associated documents readily available in the event of an emergency.

C. CONSTRUCTION SECURITY PLAN (SHELL)

The Offeror shall develop and implement a construction security plan. The plan should specify who is responsible for the security of the site during each phase of the project until final completion. The construction security plan shall describe in detail, how the Government’s information, assets, equipment, and personnel will be protected during the construction process. (This shall include background checks, restrictions on accessibility, and escorts for the construction personnel). The required security measures will vary with the risk presented during the project. The Offeror shall also submit a security plan for all post-occupancy construction and alterations projects in the leased Space, throughout the term of this Lease.

VII. CYBERSECURITY (SHELL *)

A. Offerors are prohibited from connecting any portion of their building and access control systems (BACS) to any federally-owned or operated IT network. BACS include systems providing fire and life safety control, physical access control, building power and energy control, electronic surveillance, and automated HVAC, elevator, or building monitoring and control services (including IP addressable devices, application servers, or network switches).

B. In the event of a cybersecurity incident related to BACS, the Offeror shall initially assess the cyber incident, identify the impacts and risks to the Building and its occupants, and follow their organization’s cyber and IT procedures and protocols related to containing and handling a cybersecurity incident. In addition, the Offeror shall immediately inform the Lease Contracting Officer’s (LCO’s) designated representative, i.e., the Lease Administration Manager (LAM), about cybersecurity incidents that impact a federal tenant’s safety, security, or proper functioning.

C. Offerors are encouraged to put into place the following cyber protection measures to safeguard facilities and occupants:

1. Engineer and install BACS to comply with the Department of Homeland Security Industrial Control Systems Computer Emergency Response Team (DHS ICS-CERT) cyber security guidance and recommendations (https://ics-cert.us-cert.gov/Recommended-Practices).

2. Refer to the National Institute of Standards and Technology Cyber Security Framework (NIST- CSF) (https://www.nist.gov/cyberframework) and cybersecurity guidance in the DHS

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

https://www.nist.gov/cyberframework https://ics-cert.us-cert.gov/Recommended-Practices

Commercial Facilities Sector-Specific Plan (https://www.dhs.gov/publication/nipp-ssp-commercial-facilities-2015) for best practices to manage cyber risks.

3. Encourage vendors of BACS to secure these devices and software through the following:

a. Develop and institute a proper Configuration Management Plan for the BACS devices and applications, so that the system can be supported.

b. Safeguard sensitive data and/or login credentials through the use of strong encryption on devices and applications. This means using NIST- approved encryption algorithms, secure protocols (i.e., Transport Layer Security (TLS) 1.1, TLS 1.2, TLS 1.3) and Federal Information Processing Standard (FIPS) 140-2 validated modules.

c. Disable unnecessary services in order to protect the system from unnecessary access and a potential exposure point by a malicious attacker. Examples include File Transfer Protocol- FTP (a protocol used for transferring files to a remote location) and Telnet (allowing a user to issue commands remotely). Additionally, use of protocols that transmit data in the clear (such as default ZigBee) should be avoided, in favor of protocols that are encrypted.

d. Close unnecessary open ports to secure against unprivileged access.

e. Monitor and free web applications and supporting servers of common vulnerabilities in web applications, such as those identified by the (Open Web Application Security Project (OWASP) Top 10 Project (https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project).

f. Enforce Least Privilege, where proper permissions are enforced on a device or application so that a malicious attacker cannot gain access to all data. Enforcing Least Privilege will only allow users to access data they are allowed to see. Additional information can be found at https://www.beyondtrust.com/blog/what-is-least-privilege/.

g. Protect against Insufficient User Access Auditing, where device or application does not have a mechanism to log/track activity by user. Enforce changing of factory default Username and Password to prevent unauthorized entry into the BACS system.

h. Use updated antivirus software subscription at all times. Kaspersky-branded products or services, prohibited from use by the Federal Government, are not to be utilized.

i. Conduct antivirus and spyware scans on a regular basis. Patching for workstations and server Operating System (OS), as well as vulnerability patching should follow standard industry best practices for software development life cycle (SDLC).

j. Discontinue the use of end of life (EOL) systems and use only applications/systems that are supported by the manufacturer.

k. Operating Systems must be supported by the vendor for security updates (e.g., do not use Windows Server 2003).

l. Proposed standard installation, operation, maintenance, updates, and/or patching of software shall not alter the configuration settings from the approved United States Government Configuration Baseline (USGCB) or tenant agency guidance (if applicable).

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

https://www.beyondtrust.com/blog/what-is-least-privilege https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.dhs.gov/publication/nipp-ssp

m. Disallow the use of commercially-provided circuits to manage building systems and install building systems on a protected network, safeguarded by the enterprise firewalls in place.

Workstations or servers running building monitor and control systems are not connected and visible on the public internet.

n. Systems should have proper system configuration hardening and align with Center for Internet Security (CIS) benchmarks or other industry recognized benchmarks. Additional information can be found at https://www.cisecurity.org/cis-benchmarks/.

SECURITY REQUIREMENTS (LEVEL II) OFFEROR: ________ GOVERNMENT: ________

REV (08/29/2022)

https://www.cisecurity.org/cis-benchmarks