EACH_Lynx_SOW_ver20190807.1.pdf

Statement of Work (SOW) Evans Army Community Hospital

Lynx – Emergency Mass Notification and Duress System

1. PURPOSE

The purpose of this document is to describe the requirements for the procurement, installation, and testing of equipment necessary to facilitate the installation and operation of the Lynx Emergency Notifications System.

2. SCOPE OF WORK

Services to be provided shall include 1) system programing, 2) installation design and specifications, 3) cost estimates, 4) project schedules, 5) installation and programming of brand name or equivalent equipment, 6) testing and documentation, 7) disbursement of technical and operational drawings, 8) training of operational personnel on capabilities, operations, maintenance and troubleshooting of the system and 9) provide warranty support, maintenance, on call technical support and on-site support.

3. SPECIFICATIONS AND FACTORS.

A. APPLICABLE STANDARDS

EIA/TIA-455 series, Fiber Optic Test Procedures

TIA/EIA-568A Commercial Building Telecommunications Cabling Standard

EIA/TIA-569 Commercial Building Standard for Telecommunications Pathways and Spaces

EIA/TIA-569-A Commercial Building Telecommunications Wiring Standard

EIA/TIA-570 Residential and Light Commercial Telecommunications Wiring Standard

TIA/EIA-606 Administration Standard for the Telecommunications Infrastructure of Commercial Buildings

FIPS 146 GOSIP Government Open System Interconnection Profile

FIPS 107 Local Area Networks: Baseband CSMA/CD access method and physical layer specifications and link layer protocol.

IEEE 802.3 Carries Sense Multiple Access with Collision Detection (CSMA/CD) Access Method, Physical Layer Specification

NEC National Electric Code (1990 or latest)

NEMA-250 Enclosures for Electrical Equipment (1000 Volts Maximum)

Federal Communications Commission (FCC) Washington, D.C., “The Code of Federal Regulations, Title 47, Telecommunications, Chapter 1 – FCC Part 68”.

DOD Directive 5200.28, Security Requirement for Automated Information Systems (AISs)

Public Law 100-235, Computer Security Act of 1987

OMB Circular No. A-130, Management of Federal Information Resources

OMB Circular No. A-123, Management Accountability and Control

NSTISSI 4009, National Information Systems Security (INFOSEC) Glossary

Army Regulation 25-1, Information Management: Army Information Management

Army Regulation 25-2, Information Management: Management of Sub disciplines Information Assurance

DOD Regulation 5200.1-R, Information Security Program

DOD Instruction 5200.40, DOD Information Assurance Certification and Accreditation Process (DIACAP)

DOD Standard 5200.28-STD, Trusted Computer System Evaluation Criteria (Orange Book)

DOD Regulation 5200.2-R, Personnel Security Program

DOD Regulation 5200.8-R, Physical Security Program

DOD Directive 5205.2, Operations Security Program

NCSC-TG-031, Certification and Accreditation Process Handbook for Certifiers

NCSC-TG-17, Version 1, A Guide to Understanding Identification and Authentication in Trusted Systems NIST Special Publication 800-6, Automated Tools for Testing Computer System Vulnerability

FIPS PUB 31, Guidelines for ADP Physical Security and Risk Management

FIPS PUB 41, Computer Security Guidelines for Implementing the Privacy Act of 1974

FIPS PUB 48, Guidelines on Evaluation of Techniques for Automated Personal Identification

FIPS PUB 65, Guideline for ADP Risk Analysis

FIPS PUB 87, Guideline for ADP Contingency Planning

FIPS PUB 88, Guideline on Integrity Assurance and Control in Database Applications

FIPS PUB 101, Guideline for Life Cycle Validation, Verification, and Testing of Computer Software

FIPS PUB 102, Guideline for Computer Security Certification and Accreditation

FIPS PUB 191, Guideline for the Analysis of Local Area Network Security

NIST SPEC PUB 800-14, Generally Accepted Principles and Practices for Security Information Technology Systems

DISA Instruction 240-110-8, Information Security Program

DISA Instruction 240-110-33, Physical Security Program

NSTISSI 7003, Protective Distribution System (PDS)

Army Regulation 190-13, the Army Physical Security Program

Army Regulation 380-19, Information Systems Security

DISA Instruction 630-230-19, Information Systems Security Program

FTR 1080B-2002, Appendix A, Federal Telecommunications Recommendation (Key Standards & Interfaces in the VTC)

B. CONTRACTOR QUALIFICATIONS

The Contractor shall provide trained and certified personnel resources, materials and equipment to fulfill the requirements of this contract.

The Contractor shall have networking, coding, and peripheral hardware specialists on staff that are experienced in the designing, installing, and training of Lynx Version v7.17.05.4 (4th release of May, 2017), information systems with integrated video teleconferencing systems according to the applicable standards in the above paragraph 3A.

The Contractor shall provide a pre-installation site readiness checklist to include a design and implementation plan for the project. This plan shall be subject to approval by the Government and shall be utilized by the Contractor to complete the installation.

The Contractor shall have installers who are properly trained in the installation, operation and testing of visual information presentation systems and components with integrated video teleconferencing systems.

The Contractor shall adhere to all OSHA and local safety regulations.

The Contractor shall meet National Security requirements and must possess at least a secret clearance.

4. PROJECT OVERVIEW

BLDG 7500/7503/7505 – Lynx – Emergency Notification Network System

Requirements, Capabilities and Salient Characteristics (i.e. hardware)

a. Concept. The Lynx – Emergency Notification Network System, is an automated process to activate emergency “Codes” in the Fort Carson MEDDAC main complex.

(1) Code Blue – Cardiac Respiratory Arrest (overhead announcement and pager)

(2) Code Pink – Infant/Child abduction (overhead announcement and call security/Radio)

(3) Code Silver – Child Adult Lost (overhead announcement and call security/Radio)

(4) Code Black – Bomb Threat (notify Security) - Output devices/Restricted authorization/overhead announcement/security

(5) Code Gray – Disaster (notify PTMS) - Output devices/Restricted authorization/overhead announcement

(6) Code Green – Combative Person (notify Security) - Output devices/overhead announcement /Radio connect

(7) Code Orange – Hazmat (notify Safety, Security and Environmental Control) - Output devices/overhead announcement /Radio connect

(8) Code White – Armed intruder - Output devices/overhead announcement/Radio connect

(9) ACTIVE SHOOTER - Output devices/overhead announcement /Radio connect

(10) Code Yellow – Utility Failure (notify Facility Engineer) - Output devices/ overhead announcement /Radio connect

(11) Code Violet – Newborn Arrest (overhead announcement and pager)

(12) Code Red – Fire (default notification alerts, build redundancy notification to Fire

Dept. Pending allowance by Fort Carson Fire Department – if allowed)

(13) Gas Alarms (10 different gases) (notify Facility Engineer) notification/House

Supervisor via pager

Output devices - Computer Screens/Waiting Room Monitors/Display boards Lynx Programs - LynxSign, LynxDispatcher, LynxNet Messenger, LynxMessenger Pro, LynxMessenger Popup.

b. Software Based Notifications.

(1) One alarm can be activated with more than one message sent out based upon Roll or

Location

(2) Popup Messages can include images and instructions

(3) Popup alerts can go out to 1,000s of computers in seconds

(4) Popup alerts can have a different look and feel based upon the issue

(5) The Windows based Popup can occur even when logged off or locked (Optional)

(6) Code Based Notifications are manually activated via keyboard or optional peripheral hardware (e.g. a button at a Nurse Station:

a) The PC Based LynxKeyPro Notification

b) Operates Logged on, Logged off or Locked

c) Monthly Test Employee Feature

d) Encrypted using TLS 1.2

c. Authority to Operate (ATO) on a government network:

(1) Lynx completed the RMF Accreditation process at Fort Belvoir Community Hospital.

The RMF accreditation included a number of checklists and STIG self-assessments, plus a IV&V site visit by DHA auditors. It was completed June 2017.

(2) Based on market research, Lynx is the only known emergency notification system with an ATO. It is an absolute imperative that the EACH Emergency Notification System have an active ATO. Non-ATO systems will not be considered.

d. Activation endpoints.

a) 500 keyboard activation systems, using LynxMessenger Pro

b) ~2,700 capable of receiving desktop notifications, using LynxMessenger

c) 24 nurse stations with button activation for Code Blue

e. Automatic (non-human) emergency notification systems activating in the Communications Room.

a) Code Green Panel (notification above)

b) Gas Alarm Panel – Audible alarm, notifies facility engineer via pager

c) Fire Alarm Panel – (if approved by the Fire Department) notifies the fire department via telephonic notification.

5. TESTING AND ACCEPTANCE

The Contractor must test the (turnkey) emergency notifications and demonstrate that it is operational, meets specifications and interfaces with all required equipment before final acceptance of the installation is made. All work is subject to visual and operational inspection prior to acceptance. Installation shall be Quality Assured prior to acceptance; of which shall be conducted by a Government Representative. Acceptance is contingent upon successfully training the operators on previously stated tasks and providing an operations manual.

6. WARRANTY AND MAINTENANCE REQUIREMENTS

All hardware and workmanship shall be warranted for a period of one year or the duration of the OEM’s warranty, whichever is longer. The warranty shall cover all materials and labor necessary to resolve any problems resulting from defects in materials or workmanship.

Warranty and maintenance shall include coverage on all hardware and software components.

Warranty must include the procurement and installation of required physical hardware & software components due to defects in materials, software or workmanship at the expense of awarded contractor. Materials shall not be purchased prior to award of contract due to Manufacture warranty. The warranty period shall commence no sooner than completion of the project and receipt of all documentation/programming. Parts removal and replacement as well as RMA procedures shall be conducted by contractor; NOT the customer. Provide unscheduled maintenance during normal duty hours Monday through Friday, 0800-1700 hrs, excluding holidays and base closures. Telephonic service call responses must be returned within one (1) hour. On-site service technicians must arrive within four (4) hours if telephonic resolution cannot be achieved. Four (4) quarterly Preventative Maintenance Inspections will be provided to ensure that all firmware is updated to the latest versions.

7. DESIGN REVIEW/COMPONENT SELECTION

Prior to commencement of work, the Contractor shall provide a design and implementation plan for the project. This plan shall be subject to approval by the Government and shall be utilized by the Contractor to complete the installation.

The design shall address the requirements specified in this document. Components and methods to be used in the project shall be reviewed at this time. The design review should include physical drawings of floor plan of room, equipment layout, cable labeling and testing schemes. All of which shall be finalized at this time prior to installation.

The outcome of the design review shall be an installation design, along with installation drawings and documents that shall be used by the Contractor for the premise installation work. The Government POC’s prior to starting the installation shall approve these documents.

8. SCHEDULING AND INSTALLATION

HOURS OF WORK.

The Contractor shall provide coverage at the specified government site during the following hours Monday through Friday, 8:00 am to 5:00 PM work week excluding Federal holidays.

All tours of duty are subject to change to meet workload requirements. Any variation from the above schedule shall require Government approval prior to contractor performance.

9. COST ESTIMATES

Cost estimates based on the specifications and requirements contained in this document shall be provided at no cost to the government. Costs shall be broken out for each segment of the statement of work.

Any changes to the installation design resulting in a change in cost shall be approved by the Contracting Officer prior to the commencement of alternate work. Any additional labor and/or materials added to this project resulting in a change in cost must be negotiated through a change order. Change orders shall follow the pricing structure set forth in this proposal.

Changes to the installation design which DO NOT result in an increase in cost may be made and approved by Government POC’s.

10. GOVERNMENT FURNISHED RESOURCES

The Contractor shall identify in the task proposal; the type, amount and time frame for any required government resources, including those listed below. The following resources shall be provided by the Government:

The Government shall provide a Performance Work Statement (PWS).

All provided documentation and programming shall remain the sole property of the Government and shall be returned upon completion of this task.

11. DOCUMENTATION

The following documents shall be provided within 30 days of project completion.

1. Lynx (or like) Programming

2. Two final drawings of the as built (installed) Lynx systems showing all components, cable routes and termination points.

3. OEM documents for all components used in the project.

4. Copies of all design and installation documentation.

5. Software and users manuals for all computer and electronic related components.

6. Warranty and maintenance documentation shall include coverage on all hardware and software components. To include physical hardware components due to defects in materials, software or workmanship at the expense of awarded contractor. The enclosed conditions shall be for a period of one year or the duration of the OEM’s warranty, whichever is longer.

All information and documentation for this project shall not be shared or used with other entities other than the Government.

12. TRAINING

The Contractor is required to perform on site customer training in the correct use and operation of each AV/VTC system prior to Government acceptance.

13. SUPPORT

The Contractor shall provide 1 year 24/7 telephonic technical support, on-site support, quarterly Preventative Maintenance Inspections (PMI) visits and next day parts replacement/install. Option years are exercised at the discretion of the Government.