SOO Honeywell Vindicator Update 04082020.docx

Statement of Objective (SOO) Honeywell Vindicator Alarm System 04 Apr 2020

1. SOO for Products Purchases 460th Space Communications Squadron (460 SCS),Purchase and expansion of an Air Force approved Honeywell Vindicator Alarm System/Intrusion Detection Security (IDS) for Building 730, Buckley AFB, CO 80011

2. Purpose The 460th Space Communication Squadron needs to upgrade their alarm system to an Air Force accredited alarm system/intrusion detection system (IDS) that is compatible with the master Vindicator alarm system at the 460th Security Forces Squadron. The contractor must expend and use only accredited alarm system components to include but not limited to proximity readers, proximity tokens, door alarms, alarm pads, sensors of any type, cameras, and duress alarm buttons. All installments must work harmoniously with each other, the existing vindicator systems in building 730 and with the 460th Security Force Squadron’s Base Defense Operation Center (BDOC).

Contractors shall provide all personnel, equipment, tools, materials, labor, transportation, and supervision necessary to install an Air Force approved and accredited alarm system/IDS and all supporting peripherals to building 730 at Buckley AFB, CO. Installation needs to meet Assessment and Authorization standard set forth in DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT) and AFI 17-101 Risk Management Framework (RMF) for Information Technology (IT). The accredited alarm system/IDS needs to support and be assembled to comply with open storage and PL4 requirements. All activities shall be coordinated with the customer point of contact stated in the contract. All work shall be accomplished in accordance with product manufacturer’s recommendations and industry standards and meet all municipal, state, and federal codes, standards, and guidelines.

The System Security Plan (SSP) for the Vindicator and VICADS systems applicable to this IBDSS system implements DoD and AF Cybersecurity requirements. The applicable SSPs impose additional requirements in support of cybersecurity. The Contractor shall comply with the SSPs applicable to this project and shall design the system in a manner that does not invalidate the Government Approval to Operate (ATO). The Contractor shall install the system in a configuration IAW the SSP annex for the Vindicator and VICADS systems.

Contractor installed communications network equipment shall meet requirements of the system specification that all network devices shall be selected from the DISA Approved Products List (APL) current as of delivery order award date. The DISA APL can be found at: https://aplits.disa.mil/processAPList.

Objectives:

· Meet PL4 requirements

· Meet open storage requirements

· Keep alarm down time to a minimum during installation

· Sensors need to cover all areas where data devices are downstairs

· Install video cameras for the areas outside the doors to the secure area

· Install at a minimum 2 duress alarm buttons

· Install at a minimum 2 door alarms

· Install at a minimum two alarm pads

· Install at a minimum 2 door fob sensors

· Install floor alarms

· Add all current users onto expended accredited alarm system

· Link new alarm system to master Vindicator system at BDOC

· Installment needs to be assessed and authorized by the cognizant authority prior to activation

3. Technical Requirements The contractor shall ensure that all applicable Commercial-Off-The-Shelf (COTS) Information Assurance (IA) and IA-enabled products comply with AFI 17-130, Air Force Cybersecurity Program Management. Some of these products must be Committee on National Security Systems Policy 11 (CNSSP-11) compliant, requiring them to be validated by accredited labs under the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme or National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) Cryptographic Module Validation Program (CMVP) as identified in the sections below.

3.1 Special Asset Tagging

The contractor shall provide special asset tags IAW MIL STD-130, DODI 8320.04, Item Unique Identification (IUID) Standards for Tangible Personal Property and DFARS 252.211-7003, Item Unique Identification and Valuation. The current list of accepted unique item identifier types is maintained at http://www.acq.osd.mil/dpap/pdi/uid/uii_types.html. All DoD recognized unique identification equivalents are listed at http://www.acq.osd.mil/dpap/pdi/uid/iuid_equivalents.html.

3.2 Energy Star Mandate

The contractor shall ensure the product meets Energy Star guidelines.

3.3 IPV6 Mandate

The contractor shall ensure the product meets Internet Protocol Volume 6 (IPV6) capabilities per UCR 2013 and certified by the DoD UC approved products list.

3.4 Unified Capabilities (UCR) 2013 Mandate

The contractor shall provide UC approved products. The UC APL is a consolidated list of products that have completed interoperability and information assurance certification and is managed by Defense Information Systems Agency (DISA).

3.5 BIOS Mandate

The contractor shall ensure that all x86 and x64 laptops and desktops be Basic Input/Output System (BIOS) protection compliant with Section 3.1 “Security Guidelines for System BIOS Implementations of SP 800-147,” per DoD CIO.

3.6 Trusted Platform Module (TPM) Mandate

In accordance with DoDI 8500.01, computer assets will include a Trusted Platform Module (TPM) version 1.2 or higher. TPMs must be in conformance with Trusted Computing Group standards and ISO/IEC 11889-1:2009 through ISO/IEC 11889-4:2009.

3.7 FIPS 140-2 Encryption Mandate

The contractor shall ensure that all cryptographic products have FIPS 140-1 or 140-2 security certification through the FIPS 140-1 and 140-2 approved products list.

3.8 Common Criteria Evaluation & Validation Scheme

The contractor shall ensure that products used to protect information on National Security Systems are certified by the NIAP/CCEVS approved product list.

3.9 FIPS 201 Federal Identity Credentialing and Management (FICAM) Mandate The contractor shall ensure that products used to create, print or read smart cards are FIPS 201 compliant and certified by the FICAM approved product list.

3.10 Biometric Mandate -N/A

3.11 High Assurance Internet Protocol Encryptor (HAIPE) Mandate The contractor shall provide IA enabled products that are compliant with the NSA HAIPE program. The contractor shall provide the NSA HAIPE certification from the Original Equipment Manufacturer(OEM) upon delivery.

3.12 TEMPEST Program Mandates

The contractor shall provide TEMPEST products certified by the NSA TEMPEST approved products list.

3.13 Radio Frequency Identification (RFID) Mandate –

The contractor shall provide RFID tagging IAW DoD Radio Frequency Identification Policy, 30 July 2004, or most current version, and DFARS 252.211-7006, Passive Radio Frequency Identification. The contractor shall encode an approved RFID tag using instructions provided in the EPC™ Tag Data Standards in effect at the time of award.

3.14 Section 508 of the Rehabilitation Act Mandate

The contractor shall meet the requirements of the U.S. Access Board’s regulations at 36 CFR Part 1194 which implements Section 508 of the Rehabilitation Act of 1973, as amended.

4. Ordering Table

5. Technical Contractual Requirements

5.1 Technical Refresh

In order to ensure new design enhancements and technological updates or advances, the contractor shall offer, under this requirement, hardware and software components available to the contractor's commercial customers. Furthermore, the contractor shall make available any commercially available updates to the hardware and software provided under this requirement. If such updates are available to other customers without charge, then they shall also be made available to the government without additional charge. The contractor will ship these updates to existing customers who have acquired the hardware/software being updated under this requirement. Vendor commercial product offerings shall include “state of the art” technology, i.e., the most current proven level of development available in each product category.

5.2 Trade Agreement Act (TAA)

All proposed products must be compliant with the Trade Agreements Act of 1979 (TAA) and related clauses in Section I of this contract. In accordance with DFARS 252.225-7021, the Trade Agreements Certificate at DFARS 252.225-7020 shall be provided for each end item defined and specified in a solicitation that exceeds the TAA threshold subject to the waivers and exceptions provided in FAR 25.4, and DFARS 225.4 offered in response to any RFQ issued under this contract. Please note that Federal Acquisition Regulation (FAR) paragraph 25.103(e) includes an exemption from the Buy American Act (BAA) for acquisition of information technology that is commercial items.

5.3 Authorized Resellers

The contractor may be an authorized reseller of new and refurbished/remanufactured equipment for OEMs proposed under this requirement. The contractor may also procure directly from the OEM or utilize other legitimate distribution channels to provide the required products in accordance with the OEM’s policies on reselling. Any contractor’s channel relationships with their OEM partners (gold, silver, etc.) will be represented in the best pricing offered. If the contractor is not an OEM reseller, the contractor shall clearly identify this on the submitted proposal and list the OEM resell partner’s registered relationship with the OEM. Requirements may restrict the use of authorized resellers, specific OEMs, or identify required OEMs. The contractor shall ensure all products are genuine and eligible for any OEM warranties, maintenance agreements and licensing as offered. Genuine products are those products the OEM, by their policy, considers not “secondary”, destroyed, stolen or scrapped.

5.4 Remanufactured/Refurbished Products

Any product offering that is remanufactured or refurbished shall be clearly identified as such by the contractor on the submitted proposal. Remanufactured products shall have the OEM or factory certification, if available, for that product. Remanufactured and refurbished products shall be certified according to the standards set forth in the policy of the OEM.

5.5 Items on Backorder

In their response to a Request for Quote (RFQ), the contractor shall provide notification, if applicable, that a particular item is on backorder, the expected lead-time to fulfill the order, etc. It shall be implicit that a response to an RFQ with no items identified on backorder is a declaration that the items are available at the time of quote submission.

5.6 Warranty

The contractor shall provide any OEM pass through warranty and standard commercial warranties applicable to the products being purchased at no cost. This shall apply to new, refurbished and remanufactured equipment.

5.7 Hardware and Associated Software and Peripherals

All hardware delivered under this requirement shall include associated software, documentation and associated peripherals required for operations (such as controllers, connectors, cables, drivers, adapters, etc.) as provided by the OEM. This is true only if the applicable OEM provides such items with the product itself.

5.8 Software

For all software that is outside of hardware and purchased independently, the contractor shall provide the software license registered to the customer’s organization.

5.9 Installation

The only time that installation services can be procured is when the services and cost are included in the price of the product as sold commercially. In the rare instances where installation services are required/offered, the contractor shall provide installation support related to the applicable products(s) as defined in the requirement. Contractors will be escorted by military members in building areas that are deemed sensitive by the unit.

5.10 Customer Support

The prime contractor shall provide 24x7 live telephone support during the warranty period to assist in isolating, identifying, and repairing software and hardware failures, or to act as liaison with the manufacturer in the event that the customer requires assistance in contacting or dealing with the manufacturer.

5.11 Product Maintenance

The contractor shall provide associated maintenance and upgrades to include spares/parts and emergency support worldwide, during the warranty period.

6. Delivery Requirements

6.1 Timeframes

The contractor shall adhere to the following Product Delivery Capability requirements when providing products under this requirement. The contractor shall deliver the quantities of selected products to meet ordinary as well as fluctuating (war-time, Terrorist Tempo, Ops Tempo) government requirements in accordance with prescribed delivery schedules stipulated in individual DOs. Delivery of products will be to continental United States (CONUS), outside continental United States (OCONUS), and remote locations as identified below. For Area of Responsibility’s (AOR’s) and/or remote sites that do not permit commercial deliveries, the vendor’s delivery capabilities must be in accordance with AFI 24-203, Preparation and Movement of Air Force Cargo, 13 April 2007. Additional delivery terms or schedules, such as ship-in-place, expedited shipping or shipping to APO/FPO addresses, shall be negotiated between the Contractor and the Ordering Contracting Officer (OCO).

Definitions: CONUS: The 48 contiguous states, Alaska, Hawaii, and the District of Columbia. OCONUS: Germany, Italy, Japan, Korea, Belgium, Turkey, Puerto Rico, United Kingdom, and the Netherlands. Remote OCONUS: those locations that are not listed under CONUS or Named OCONUS.

The following figure sets forth the maximum performance parameters for deliveries:

6.2 Delivery Delays

Contractors are required to meet the timeframes as stated in unless Department of Commerce approval and/or review activities prevent the contractor from meeting these timeframes. In the event that the contractor determines they are unable to achieve the stated timeframes, the contractor shall notify the Contracting Officer within two (2) business days of such determination, or immediately upon such determination if operating under the Emergency/War Tempo timelines.

Shipping Information All products shall be shipped to: 460 SCS/SCOS 84 N Aspen St Bldg 730 Buckley AFB, CO 80011

Inspection/Acceptance: The following Government officials are responsible for receiving the products and performing inspection:

Primary POC: GS13 Uliya Sparks; uliya.sparks@us.af.mil; 720- 847-2034 Alternate POC: GS11 Kerry Winsel, kerry.winsel.1@us.af.mil; 720-847-1367

Appendix 1 – Building 730 Basement Layout

Appendix 1 Building 730 – Basement image1.png image2.gif image3.jpeg