Statement_of_Work_-_Attachment_A.pdf

Combined Synopsis Solicitation: ROSS-19-00011

Lenel Physical Security Software Renewal Page 1 of 10

ATTACHMENT A

Schedule of CLINS and Statement of Work

Schedule of Contract Line Items Numbers (CLINS)

Period of Performance: 01/01/2019 TO 12/31/2019

CLIN Description Quantity Unit Unit Price Extended Price

0001 Lenel Direct User Support Renewal

Dongle IDs: 54702/54703

SUSP-PRO-TR-4,

SUDS-NES-PRO

TSS-ESP-PRO

1 LO

0002 Lenel Embedded Integration Licenses for pivCLASS SDK & pivCLASS SUSP:

SWG-1550 (Qty. 1) PVC-API-RTL (Qty. 15) PVC-CM-MS (Qty. 1) PVC-CM-REDNT-MS (Qty. 1) PVC-FXRDR-MS (Qty. 1) PVC-FXRD-REDNT-MS) (Qty 1)

1 LO

TOTAL

Option Period One - Period of Performance: 01/01/2020 TO 12/31/2020

CLIN Description Quanti ty

Unit Unit Price Extended

1001 Lenel Direct User Support Renewal

SUSP-PRO-TR-4

SUDS-NES-PRO

TSS-ESP-PRO

1 LO

1002 HID pivCLASS Software Support Renewal

PVC-CM-MS (Qty. 1) PVC-CM-REDNT-MS (Qty. 1) PVC-FXRDR-MS (Qty. 1) PVC-FXRD-REDNT-MS) (Qty 1)

1 LO

1003 Optional CLIN: Lenel Professional Engineering Services Support

PES-EC-D

PES-00X

1 LO

Lenel Physical Security Software Renewal Page 2 of 11

PES-011

PES-OTD

Option Period Two - Period of Performance: 01/01/2021 TO 12/31/2021

CLIN Description Quanti ty

Unit Unit Price Extended

2001 Lenel Direct User Support Renewal

SUSP-PRO-TR-4

SUDS-NES-PRO

TSS-ESP-PRO

1 LO

2002 HID pivCLASS Software Support Renewal

PVC-CM-MS (Qty. 1) PVC-CM-REDNT-MS (Qty. 1) PVC-FXRDR-MS (Qty. 1) PVC-FXRD-REDNT-MS) (Qty 1)

1 LO

2003 Optional CLIN: Lenel Professional Engineering Services Support

PES-EC-D

PES-00X

PES-011

PES-OTD

1 LO

Lenel Physical Security Software Renewal Page 3 of 11

Lenel Physical Security Software Renewal Page 4 of 11

SECTION I – SUPPLIES/SERVICES AND PRICE/COSTS

1.0 CONTRACT TYPE

This is a Firm Fixed Priced Purchase Order.

Lenel Physical Security Software Renewal Page 5 of 11

SECTION II – STATEMENT OF WORK (SOW)

1.0 GENERAL

1.1 BACKGROUND

The Department of Homeland Security Headquarters (DHS HQ), Office of the Chief Security Officer (OCSO) is managed by the Chief Security Officer (CSO) and staff, which consists of a Chief, Deputy Chief, and four (4) primary Directors, who are responsible for each of the following main Lines-of-Businesses: Executive Operation (EO), Enterprise Security Operations and Support (ESOS), Threat Management Operations (TMO), and DHS HQ Support (HQS).

The OCSO/HQS currently uses a direct support agreement with Lenel/UTC through a Lenel VAR to assist with the operation of HSPD-12 hardware, access control equipment, and intrusion detection alarm monitoring. The current support contract ending in December 2018 under 70RDAD18P00000024 (under dongle ID: 54703/54702) needs to be renewed and amended to meet current and future system demands. The system supports multiple programs in the OCSO that are essential to daily HQ operations. The primary functions of access control, visitor management and alarm monitoring generate tens of thousands of events on a daily basis that are processed by redundant application servers covered by this direct support agreement. System hardware programming maintained with the system includes roughly 200 intrusion accounts, 18,000 active access cards, 1,600 readers, and 6,000 alarm points.

The latest version of the DHS PIV card (PIV 5 / Oberthur v8.1) is designed to meet the latest security requirements from NIST. Due to this, some of the attributes are stored in different locations within the containers on the card. The DHS HQ PACS, Lenel OnGuard, uses a legacy weigand/serial style methodology to capture the cardholder personal data for import to the cardholder table in the Lenel OnGuard database. Changes by NIST have led to certain containers/objects being arranged in different sequence on the PIV 5, resulting in an import error when the legacy import doesn’t find the data it expects to be stored in a set location. The result is an inability to enroll PIV 5 cards in the legacy, deprecated fashion currently used.

Since manufacturers have been pushed by GSA to focus federal solutions around FICAM compliance, attention has been on registering cards per FIPS-201* rather than adjusting legacy methodologies. Resultantly, in order to import the data required for PACS enrollment, the cards must be properly registered using PKI and cryptographic key challenge response.

*NOTE: FIPS 201 is a United States federal government standard that specifies Personal Identity Verification (PIV) requirements for Federal employees and contractors.

HID pivCLASS authentication software was purchased for HQ PACS in the past; however, product changes by the manufacturer; configuration approval changes by the FIPS-201 evaluation program approved products list (APL); and predecessor task dependencies have changed the landscape so significantly that the OCSO was never able to fully implement the software. The software that was purchased is still relevant and to be incorporated in this solution, but instead of integrating as a

Lenel Physical Security Software Renewal Page 6 of 11 parallel platform as originally designed, it now is to be embedded in the existing Lenel OnGuard GUI through Lenel’s integration with the HID pivCLASS SDK.

Additionally, the originally purchased registration software was purchased with intent to serve only non-DHS agency partner PIV/CAC enrollment, due to a planned IDMS to PACS integration for DHS cardholders. For a number of reasons that integration never occurred, and an alternate long term plan for IDMS integration is now under way. Under the initial design only a single workstation at DHS HQ’s primary enrollment sites was necessary, and only the pivCLASS registration software was purchased. This procurement includes the Lenel Embedded pivCLASS SDK registration software to be installed at all NCR enrollment workstations.

This procurement solves the immediate problem of being unable to import PIV 5. Additionally it establishes the back-end FIPS-201 APL approved registration capability required for future at-the-door authentication.

1.2 SCOPE

Services under this contract shall encompass the Lenel physical security system software (HID pivCLASS license support renewal & Lenel licenses for pivCLASS SDK integration) which requires the direct support agreement for the physical access control system for DHS Headquarters.

The contractor will furnish the licenses and support agreements listed in section 2.0 of this SOW. All products provided in this scope of work will be installed by DHS OCSO.

1.3 OBJECTIVE

To procure a direct support agreement that meets the specifications identified by DHS as outlined in Section 2.0 Specific Requirements/Tasks.

2.0 SPECIFIC REQUIREMENTS/TASKS

2.1 TASK ONE. Direct Support Agreement (Base Year and Option Periods 1 and 2))

The Lenel VAR shall provide the Lenel direct user support agreement for the DHS HQ to continue their software support and upgrades through Lenel.

POP: One (1) year from January 1, 2019, with two (2) 1-year option periods.

Qty PN Description 1 SUSP-PRO-TR-4 PRO SUSP PLAN - Tier 4; 1025-2048 Readers. Covers PRO / PROI Systems 1 SUDS-NES-PRO OnGuard User Direct Technical Support for PRO & PROI systems 1 TSS-ESP-PRO Emergency Technical Support for PRO or PROI systems

Lenel Physical Security Software Renewal Page 7 of 11

2.2 TASK TWO. Lenel Embedded Integration Licenses for pivCLASS SDK & pivCLASS SUSP (Base Year Only)

The Lenel VAR shall provide the Lenel Embedded Integration Licenses and maintenance/support for HID pivCLASS SDK / pivCLASS SUSP.

POP: One (1) year from January 1, 2019.

1 SWG-1550

FIPS 201 Credential Management Integration, to enable support for integrated enrollment and authenticated reader management within OnGuard. FICAM Certified in conjunction with HID pivCLASS Software and Devices (sold separately)

15 PVC-API-RTL

Provides for integrated FIPS 201 enrollment into OnGuard using HID pivCLASS enrollment module. Used with the FIPS 201 Credential Management Integration.

One per enrollment workstation.

1 PVC-CM-MS

HID pivCLASS Certificate Manager Maintenance & Support, Annual Subscription.

First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

1 PVC-CM-REDNT-MS

HID pivCLASS Certificate Manager Redundant Maintenance & Support, Annual Subscription. First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

1 PVC-FXRDR-MS

HID pivCLASS Fixed Reader Services Maintenance & Support, Annual Subscription. First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

PVC-FXRD-

REDNT-MS

HID pivCLASS Fixed Reader Services Redundant Maintenance & Support, Annual Subscription. First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

2.3 TASK THREE. HID pivCLASS Software Support Renewal (Option Periods 1 and 2 Only)

The Lenel VAR shall provide the HID pivCLASS software support agreement for the DHS HQ to continue their software support and upgrades through Lenel.

POP: One (1) year from January 1, 2020 (option period 1), with a one (1) year option period.

1 PVC-CM-MS

HID pivCLASS Certificate Manager Maintenance & Support, Annual Subscription.

First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

1 PVC-CM-REDNT-MS

HID pivCLASS Certificate Manager Redundant Maintenance & Support, Annual

Lenel Physical Security Software Renewal Page 8 of 11

1 PVC-FXRDR-MS

HID pivCLASS Fixed Reader Services Maintenance & Support, Annual Subscription. First Year included with purchase. 8 am to 5pm Central Time, Monday - Friday.

PVC-FXRD-REDNT-

MS

HID pivCLASS Fixed Reader Services Redundant Maintenance & Support, Annual

2.4 TASK FOUR. (OPTIONAL) Professional Engineering Services (PES) Support (Option Periods 1 and 2 only)

The Lenel VAR shall provide PES support to assist HQ PACS with a future OnGuard upgrade. A newer version of OnGuard will be added to the GSA APL; HQ PACS will be required to upgrade to the approved version during FY20. Previous PES was onsite for 32 hours (Wednesday – Saturday).

DHS HQ anticipates no more than 32 hours for this request service.

POP: One (1) year from January 1, 2020 (option period 1), with a one (1) year option period.

5 PES-EC-D Daily rate 5 PES-00X Daily expenses (fixed rate) 2 PES-011 In-transit and labor charge 8 PES-OTD Overtime (per hour)

3.0 CONTRACTOR PERSONNEL

All contractor personnel must be US citizens or US persons as defined by ITAR and shall be cleared with the Office of the Chief Security Officer, Headquarters Security Services Division, and the Visitor Management Office. All contractor personnel will be subject to a favorable back ground investigation by DHS. The Facility Security Officer or Employee Supervisor for each of the contractor companies shall submit Visit Authorization Letters for personnel working on this project to DHS Visitor Management Office.

3.1 Employee Identification

Contractor employees visiting Government facilities shall wear an identification badge that, at a minimum, displays the Contractor name, the employee’s photo, name, clearance-level and badge expiration date. Visiting Contractor employees shall comply with all Government escort rules and requirements. All Contractor employees shall identify themselves as Contractors when their status is not readily apparent and display all identification and visitor badges in plain view above the waist at all times.

4.0 OTHER APPLICABLE CONDITIONS

4.1 PERIOD OF PERFORMANCE

Lenel Physical Security Software Renewal Page 9 of 11

The period of performance for this request will be one (1) year from January 1, 2019 with two (2) 1-year option periods.

4.2 PLACE OF PERFORMANCE

The primary place of performance will be a combination of the Contractor’s facilities and the Department of Homeland Security Headquarters, 3801 Nebraska Avenue NW, Washington, DC 20528.

5.0 GOVERNMENT FURNISHED RESOURCES

The Contractor shall use Government furnished information, data and documents only for the performance of work under this contract, and shall be responsible for returning all Government furnished information, data and documents to the Government at the end of the performance period.

The Contractor shall not release Government furnished information, data and documents to outside parties without the prior and explicit consent of the Contracting Officer.

5.1 The Lenel VAR does not need to provide any on-site support for this agreement.

DHS Headquarters has trained Lenel technicians that will be available to perform the software upgrades as required through the Lenel support agreement.

5.2 All servers will be government furnished.

6.0 CONTRACTOR FURNISHED PROPERTY

The Contractor shall furnish all facilities, materials, equipment and services necessary to fulfill the requirements of this contract, except for the Government Furnished Resources specified in SOW 5.0.

7.0 GOVERNMENT ACCEPTANCE PERIOD

The COR will review deliverables prior to acceptance and provide the contractor with an e-mail that provides documented reasons for non-acceptance. If the deliverable is acceptable, the COR will send an e-mail to the Contractor notifying it that the deliverable has been accepted.

7.1 The COR will have the right to reject or require correction of any deficiencies found in the deliverables that are contrary to the information contained in the Contractor’s accepted proposal. In the event of a rejected deliverable, the Contractor will be notified in writing by the COR of the specific reasons for rejection. The Contractor shall have an opportunity to correct the rejected deliverable and return it per delivery instructions.

7.2 The COR will have ten (10) business days to review deliverables and make comments. The Contractor shall have five (5) business days to make corrections and redeliver.

8.0 DELIVERABLES

Lenel Physical Security Software Renewal Page 10 of 11

ITEM SOW

REFERENCE DELIVERABLE / EVENT DUE BY

DISTRIBUTION

1 2.0 Licenses, support agreements January 1, 2019 COR, DHS Program Manager

9.0 ACRONYMS

CAC: Common Access Card E-PACS: Enterprise Physical Access Control System FICAM: Federal Identity Credential and Access Management FIPS: Federal Information Processing Standard Publication GSA: General Services Administration GUI: Graphical User Interface ICBP: Intelligence Community Badging System IDMS: Identity Management System NIST: National Institute of Standards and Technology PACS: Physical Access Control System PES: Professional Engineering Services PIV: Personal Identity Verification PKI: Public Key Infrastructure VAR: Value Added Reseller

Lenel Physical Security Software Renewal Page 11 of 11

SECTION III – PROVISIONS/CLAUSES

52.212-2 Evaluation – Commercial Items (Oct 2014)

(a) The Government will award a contract resulting from this solicitation to the responsible offeror whose offer conforming to the solicitation will be most advantageous to the Government, price and other factors considered. The following factors shall be used to evaluate offers; Lowest Price Technically Acceptable.

Award will be made on the basis of the lowest evaluated price of proposals meeting or exceeding the acceptability standards for non-cost factors (Lowest Price Technically Acceptable, FAR 15.101-2).

Technical Acceptability will be comprised of three subfactors: 1) Delivery Time; 2) Meeting the specifications of the Item Purchase Description; 3) Completion of solicitation package and all attachments.

(b) Options. The Government will evaluate offers for award purposes by adding the total price for all options to the total price for the basic requirement. The Government may determine that an offer is unacceptable if the option prices are significantly unbalanced. Evaluation of options shall not obligate the Government to exercise the option(s).

(c) A written notice of award or acceptance of an offer, mailed or otherwise furnished to the successful offeror within the time for acceptance specified in the offer, shall result in a binding contract without further action by either party. Before the offer’s specified expiration time, the Government may accept an offer (or part of an offer), whether or not there are negotiations after its receipt, unless a written notice of withdrawal is received before award.

(End of Provision)