TX2298 IDS and VSS SOW Rev 2024-10-01.pdf

PROPERTY OF THE UNITED STATES GOVERNMENT – FOR OFFICIAL USE ONLY

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

Physical Security System Scope of Work

(Prepared by/Date: LaShonda Martin/10/01/2024)

Facility Location and FSL:

FSL_2_

12941 I-45 Houston, TX 77060

Revision date: 03/22/2024

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

REVISION HISTORY

Revision No.

Date Description By

3.0 04/04/2022 Change Video Surveillance System Equipment and updated ePAC req.

EC

3.1 8/4/2022 Video equipment update and Procurement language. Add elevation details.

EC

3.2 12/01/2022 Remove Razberi/ComNET equipment EC

3.3 05/05/2023 MELM2, Video Decoder, POE+, Seneca NVRs.

EC

3.4 08/14/2023 Remove ADEMCO and add data line to IDS panel.

EC

3.5 03/22/2024 Removed VISTA software and ePAC Memory Exp. board. Added 30-days video data deletion and AXIS NVRs.

EC

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

I. STATEMENT OF WORK

1.0 OVERVIEW

1.1 Description: The Internal Revenue Service requires the purchase and installation of a complete physical security equipment (Electronic Access Control System, Video Surveillance System & Intrusion Detection System) as specified in Section 3.6.

1.2 Background: The IRS is required to procure physical security equipment, inclusive of relative construction services and testing for the following project:

Note: This is not considered a construction requirement even though minor construction work may be required for installation of the physical security system.

2.0 RELATED DOCUMENTS

2.1 This scope shall be used in conjunction with documents such as mark-up plans, drawings, and specifications for the project, when applicable. At a minimum, contractor must comply with manufacturer’s specifications found in Section 3.6 below.

FLOOR PLANS AND/OR DRAWINGS INDICATING THE APPROXIMATE DEVICE

LOCATIONS FOR ITEMS IN SECTION 3.6.

2.2 LIST OF ACRONYMS

The acronyms listed below will be used when referring to the corresponding terms:

AEB Alarm Expansion Board AFF Above Finished Floor ADA American Disabilities Act compliant device BPA Blanket Purchasing Agreement CI Criminal Investigation CO Contracting Officer COR Contracting Officer’s Representative CM Configuration Management CCM Command Control Module CSIRC Computer Security Incident Response Center DGDD Door Group Design Document DPS Door Position Switch ECC Enterprise Computing Center ePACS Enterprise Physical Access Control System.

EVSS Enterprise Video Surveillance System ES Electric Strike ESS Electronic Security System DIGI-TRACK PANEL (ISC) Field Identiv/Hirsch Access Control Panel FICAM Federal Identity, Credential and Access Management

FPS conducted a Facility Security Assessment, and this site was without IDS and cameras. Per the ISC Standards a FSL 2 facility should be equipped with IDS and cameras covering the perimeter doors. Remove existing equipment and wiring, replace with new equipment and new wiring. Cameras should be network ready.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

FIPS Federal Information Processing Standard 201-2 references NIST SP800-73, SP800- 76, and SP800-78, 800-116 standards.

FISMA Federal Information Security Management Act FMSS Facilities Management & Security Services FSL Facility Security Level GFE Government Furnished Equipment GSA General Services Administration GSS General Support System HSPD-12 Homeland Security Presidential Directive 12 IDF Intermediate Distribution Frame / Telecommunication Closets IDS Intrusion Detection System IPv6 Internet Protocol version 6 IRM Internal Revenue Manuals IRS Internal Revenue Service IRS-PM Internal Revenue Service National Office-Program Manager ISC Inter-agency Security Committee IPT Integrated Project Team LCP Large Cash Payment (Room) LEM Law Enforcement Manuals IT Information Technology Services MDF Main Distribution Frame / Main Telecommunication Room NAC National Assistance Center [EPACS] NACMA National Armored Cable Manufacturer’s Association NBFAA National Burglar Fire Alarm Association NEC National Electric Code NIST National Institute of Standards and Technology NVR Network Video Recorder OEM Original Equipment Manufacturer OMB Office of Management and Budget PAC Physical Access Control PACS Physical Access Control Systems PII Personally Identifiable Information PIV Personal Identification Verification (card) PIR Passive Inferred Receiver (motion detector) POA&M Plan of Action and Milestones POC Point of Contact PTE Push-To-Exit Button PSS Physical Security Specialist REB Relay Expansion Board REX Request to Exit (device) RREB RS485 Expansion Board SBU Sensitive but Unclassified SNIB3 Serial Network Interface Board 3 TAC Taxpayer Assistance Center TIGTA Treasury Inspector General for Tax Administration TCSIRC Treasury Computer Security Incident Response Center UNAX Unauthorized Access VSS Video Surveillance System (old CCTV).

2.3 REFERENCES

Services to be performed by the Contractor under this scope of work shall conform to all applicable requirements and criteria indicated in the following handbooks and publications and the latest issues and changes thereto:

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

a) General Services Administration Facilities Standards for the Public Buildings Service PBS/PQ-100.1.

b) Internal Revenue Service Facilities Design Criteria and Physical Security Standards for IRS Facilities.

c) Federal Information Processing Standards Publication FIPS-Pub; 174-1 and

d) National Fire Protection Association (NFPA) Codes and handbooks

i. NFPA72,

ii. NFPA101 Life Safety Codes

iii. NFPA70E

iv. National Electric Code NFPA 70.

e) Electronic Industries Association (EIA/TIA Standard 568-A, related bulletins and

569)

f) All applicable Federal, State and local codes and regulations

g) Interagency Security Committee (ISC) Standards

h) Homeland Security Presidential Directive HSPD-12

i) Occupational Safety and Health Standards.

j) Federal Information System Management Act (FISMA)

k) Federal Information Processing Standard Publication (FIPS 201-1)

l) National Institute of Standards and Technology SP 800-73

m) National Institute of Standards and Technology Standard (draft) SP-800-116

n) Americans with Disabilities Act.

o) Underwriters Laboratories (UL)

a. UL 1076 (1995; Reprint Sep 2010), Proprietary Burglar Alarm Units and Systems.

b. UL 634 (2007; Reprint Mar 2013), Connectors and Switches for Use with Burglar-Alarm Systems.

c. UL 639 (2007; Reprint May 2012), Standard for Intrusion Detection Units.

d. UL 609 (1996; Reprint Sep 2010) Local Burglar Alarm Units and Systems

e. UL 1610 (1998; Reprint Sep 2010), Standard for Central-Station Burglar- Alarm Units

f. UL 681 (2014), Installation and Classification of Burglar and Holdup Alarm Systems.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

The above items are a standard listing of handbooks and publications. The contractor will utilize only those sections that are applicable to develop and complete the Scope of Work.

Where conflicts occur, the more stringent requirement shall take precedence.

3.0 PROJECT/WORK IDENTIFICATION

3.1 INSTALLATION:

Installation includes all work and materials necessary for a full and complete system.

Installation may include, but not be limited to the following:

a) Electrical power to all devices.

b) All wiring, conductor, conduits, and connections.

c) VSS, Access Control, IDS (intrusion detection system), duress and any other physical security system tie-ins.

d) Floor prep, flooring, walls and ceiling finish work.

3.2 – 3.4 NOT USED

3.5 GENERAL REQUIREMENTS:

A. Upon award of contract, the Contractor shall contact the Contracting Officer’s

Representatives (COR) and/or POC: LaShonda Martin for commencement and coordination of performance.

B. Prepare a project schedule of dates and times when installation will occur, including anticipated completion dates. This information shall be updated, and the revised schedules forwarded on a weekly basis to the Contracting Officer’s Representatives (COR) and IRS POC through email notification: lashonda.r.martin@irs.gov.

C. Upon commencement of performance, the IRS POC will review with the Contractor of the proposed location for each device (i.e., alarm keypads, duress buttons, access keypads, motion, cameras, etc.) as shown on the drawing. Major changes will only be approved by the Contracting Officer.

D. The Contracting Officer (CO) is the person with the authority to enter into, administer, and/or terminate contracts, make related determinations and findings, make constructive changes, and bind the Government in contractual matters. The IRS POC monitors contract performance and provides technical direction within the terms and conditions of the contract. This individual does not have the authority to make constructive contract changes or bind the Government in contractual matters. The Contractor shall document all proposed changes in writing and address them to the CO with copy to the IRS POC.

The CO is the only government official who can modify and approve changes to the original scope of work.

E. Warranty: The contractor shall ensure all components and systems have a minimum one-year warranty, including parts and labor. The IRS shall not provide additional funding for

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

service during the one-year warranty period due to any alarm system malfunction. The one-year warranty period shall commence at the time of government acceptance.

F. The Contractor shall provide a list of all proposed security equipment and devices to be used in this Contract. This list shall contain and clearly identify the make, model, and technical specifications of proposed security equipment and devices. The security equipment and devices proposed shall be approved by IRS POC.

G. The Contractor shall not substitute equipment/parts for any reason without the prior written approval of the IRS POC. Some items in this scope are part of an enterprise system and substitution is not allowed. Substitutions of any equipment/parts without the written Government approval shall be corrected at the Contractor own expense and delay.

H. The Government (IRS) requires an experienced Contractor to install the Security equipment as required and contained in this specification/statement of work. This is defined as a contractor who has been installing electronic physical security equipment for at least five years and has an association with and/or follows the installation standards presented by the National Burglar Fire Alarm Association (NBFAA), and the state chapters. The Contractor shall install the alarm system according to applicable agency certification and Underwriters Laboratories (UL) guidelines (installation methods, wire supports, etc).

I. Install all necessary electrical outlets (if required), including hardwiring of circuits by a journeyman level licensed electrician to ensure that all devices function as designed [Coordinate with General Contractor (GC) Electrician, if applicable; in some projects the GC electrician will provide power]. All electrical work necessary to make the entire physical security system and equipment function properly is the Security Contractor’s responsibility and may require ‘collaboration’ with local building manager/contractor.

Power circuits can be shared to 80% capacity amount security equipment (ACS; VSS and IDS); but must be dedicated to security devices and in a separate conduit and circuit breaker. All power connections shall be labeled at the breaker panel and at the load device identifying the breaker Number and location.

J. The Contractor shall furnish and install and test all equipment, cable, wire, connectors, labor and any electrical requirements that are necessary for the successful installation of the physical security systems as described in this Statement of Work.

K. Fasten all wires in the ceiling to overhead wire supports in order to prevent damage that may occur from existing or future wire runs in the ceilings. Wires shall not be supported solely by suspended ceiling. Periodic labels (no more than 20ft) shall be placed on expose wire(s) or conduits to indicate type of wire (i.e., alarm, access, video and device connected). All wiring shall be concealed and of a gauge no less than 18 with 4 conductors and copper stranded in composition, unless otherwise noted. Mechanical pulling of wires is prohibited.

L. Each wire/cable/etc. shall be properly labeled as it enters its termination location on the head end. This is needed for long term troubleshooting purposes. Wire numbers shall be

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

used with a wire legend posted on panels on site with a full description of each device detailing where it is going and where it terminates. The labels shall be printed on letter size label sheets that are self- laminated vinyl that can be printed from a computer data base or spread sheet. The labels shall be 9-1/2 in Length, 8 in Width, White, Polyester, For Use With: Dot Matrix Printer or equal.

M. Every detector, sensor, button, junction box, control panel, transformer, phone jack, etc.

shall be labeled in order to show the device, security system (i.e. ACS, IDS or VSS) and/or zone number on the front cover of the specific device. Each label shall be large enough to be seen from a standing position 12 in. distant without the use of a ladder.

N. Conceal all wires that are in the agency-protected space by “fishing” wire in the walls, ceilings, and doorframes to ensure tamper resistance. At various locations in which walls cannot be fished or channeled place wire in EMT. Wires are not allowed to be exposed or visible. Wire-mold is not permitted. The Contractor shall first attempt to fish wire in walls prior to using EMT in the agency-protected space.

O. Conceal all wires that are outside the agency-protected space by placing wiring in conduit, EMT, metallic tubing, etc. The size of the conduit, EMT, metallic tubing, etc. shall be large enough (i.e., 50% larger than needed) to permit additional wire pulls.

P. Homerun a wire from each device, keypad, receiver, etc. to the alarm control panel, enclosure, spare cabinets, or auxiliary power supply. Splices, t-taps, etc. are not permitted, except inside the control panel, spare enclosure, cabinets, or auxiliary power supply. All wire(s) shall be installed in accordance with UL Standards for alarm, access, and/or VSS.

Q. Contractor shall provide any devices, appliance, material or work not shown on Drawings but mentioned in this Specifications, or vice versa, and any incidental accessories necessary to make the work complete and perfect in all respects and ready for operation, even if not particularly specified, shall be provided without additional expense. The Drawings and Specifications are intended to supplement each other so that any details or equipment shown on either shall be executed the same as if mentioned in both. Note that not all devices required in the specification can be shown in drawings as it is mainly to show location.

R. The Contractor assumes responsibility for all necessary patching, repairing, painting, etc.

as a result of installation or removal of items in the scope of this project, or in the event of an accident (i.e., drilling through drywall by mistake). The Government (IRS) shall not incur any additional costs for patching, repairing, painting, etc.

S. Contractor shall perform a pre-installation and final walk-through of all physical security system with the IRS POC and U.S. Department of Homeland Security/FPS representative to ensure system is complete and acceptable before final invoice and payment. The IRS POC shall coordinate the pre-installation and final walk-through.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

T. Contractor shall demonstrate and train the IRS POC on the full operation of all security systems installed to government personnel. The Contractor shall ensure that required government employees selected by IRS POC, can operate the systems in a competent manner. Contractor shall provide the Government (IRS) with manufacturers technical and/or maintenance booklets of installed physical security equipment.

U. All installed equipment shall remain the property of the United States Government. The

Contractor shall retain no liens, titles, etc. against any installed or uninstalled equipment once payment is received from the government.

V. Remove all old non-operative security equipment, power supplies and wiring from interior of current IDF/MDF/Security room location. No security equipment, wiring, or pathways shall be abandoned in place. Conduit can be abandoned if label property as abandoned and location of the other end at both ends and sealed.

W. Compliance with Manufacturer’s Specifications: The Contractor shall obtain all necessary equipment manufacturer’s installation specifications and drawings to complete all installation and contract work. The Government will not furnish any manufacturer’s information except that which is included in the contract documents. It is the Contractor’s responsibility to see that the equipment is installed to manufacturer’s specifications.

3.6 SPECIFIC REQUIREMENTS: The Contractor will perform the following tasks.

Task No.

Name of Item Description of Scope of Work

3.6.1 - Access Control System (ACS)

1. ePACS -

CARD

READER

1. N/A

2. DOOR

RELEASE

N/A

3.6.2 - FIRE-RATED PLYWOOD FOR DOOR CONTROL & BURGLAR PANEL

1. PLYWOOD Plywood: Prior to Burglar Alarm control panel & Door Control panel installation contractor shall purchase 3/4 inch “fire-rated” plywood measuring approximately 4 feet x 8 feet. Contactor shall fasten plywood to wall prior to installation of all access card control panels, transformers and uninterruptible power supply equipment, shelving, etc. in support of all items described in this work statement. All physical security related items shall be installed on a separate fire rated plywood and not to be shared with any other equipment.

3.6.3 - Intrusion Detection System (IDS)

1. INTRUSION

PANEL

Demo existing ADEMCO VISTA 50P with associated devices, wires and power supply. This includes 31 existing Duress Buttons and 2 keypads.

Install (1) Intrusion Detection System (IDS) Control Panel [Similar to Bosch B8512G (or B9512G for more than 99 devices) OR approved equal w/ Mega

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

Center data connectivity]. Approximate location is shown on drawings and must be field verified and approved by security specialist.

Contractor must supply and install all accessories pertaining to each panel.

Items must be mounted securely and resist tampering. Control panels and accessories shall be tested during inspection.

Install (9) alarm keypads [Similar to Bosch B942 touch screen keypads or approved equal] as shown on layout (coordinate locations with Security Specialist). Mount the keypad device(s) at the approximate 54 in. height.

NOTE: Keypads will ONLY alarm and/or trouble conditions in plain English and activate an audible alarm so that IRS employees can recognize trouble/alarm and location. The device/location descriptions must be conveyed to the designated FPS Mega Center.

Specific (additional) tasks are as follows:

- Contractor shall install all (new) burglar equipment according to manufacturer’s specifications. Suggested alarm devices/line modules shall be Belden 8761, 22- gauge (for lengths up to 400 feet) or Belden 8760, 18 gauge for lengths up to 1,200 feet respectively.

- Hardwire the panel OEM supplied transformer box outside and below the control panel with EMT in accordance with the NEC, and UL standards.

- Hardwire surge protector ahead of the panel OEM power supply [Ditek DTK-120HW or equal 50,000A surge rating, 10kA SCCR/In, 700V L-G/L-N;

1500V N-G;].

- Install the OEM included control panel tamper switch on the control panel to a hardwired panel zone. Program as ’24-hour auxiliary’ alarm (i.e., to Mega Center).

- Install the dual battery harness included with the Burglar panel. Also provide cam lock and key [Medeco Cam Locks or UL434 Listed equal].

- Install two 12-volt, 17 or 18 amp-hour batteries into the Burglar control panel [the 7-amp hour rated units is NOT acceptable].

- Install one RJ15 connector w/ CAT6 cable inside the Burglar control panel to IT provided switch port.

- Install two surge protectors [Ditek MRJ45SCPOPX or equal: RJ45 48V ahead of the data lines for the alarm system (i.e., to be eventually linked to the FPS Mega Center).

- Install Auxiliary Power Supply [Altronix AL400ULM or approved equal: 5 PTC Class 2 Outputs (auto-resettable), 12/24VDC @ 4A, FAI, 115VAC] (UL Listed Commercial) w/ tamper switch and program for 24-hour auxiliary alarm. Install auxiliary power supply below the control panel connected by EMT. If hardwired to the AC, install a surge protector ahead of the Auxiliary Power Supply line voltage. Use this for detection device and keypad power on non-polling loop powered devices. All wires that come into or out of all panels/enclosures must be in EMT or fished in the wall into the back of the enclosures. No exposed and/or visible wires are permitted.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

- Install one 12-volt, 17-amp hour battery into the Auxiliary Power Supply.

Connect Auxiliary Power Supply to the control panel’s hardwired panel zones for detection and notification.

- Install at least one UL365 listed spare enclosure below the Auxiliary Power Supply connected by EMT or fish the wires in the wall and into the back of the panel. Install a tamper switch on the panel (programmed as 24-hour auxiliary). Provide cam lock(s) and key(s) [Medeco Cam Locks or UL434 Listed equal] for zone expanders and terminal strips.

- Install OEM zone expanders as required (one minimum) for the number of devices in this scope; inside the spare enclosure mentioned above. A zone per each device is required for every device. Each expander will provide 8 zones via zone expanders. Each individual device must annunciate locally with its specific location and communicate this identification back to the designated FPS Mega Center.

In general, install cam locks w/key [Medeco Cam Locks or UL434 Listed equal] & IDS panel OEM tamper switches on all control panels, enclosures, power supplies, etc. Note: all tamper switches must be linked to Mega Center for monitoring

IDS Requirements:

a. The Contractor shall complete all configuration paperwork and testing coordination and communication for monitoring of the Intrusion alarm with the US Department of Homeland Security, Federal Protective Service Mega Center upon installation completion but prior to final contract completion and final payment. Each point of the system must be individually identified at the keypad and in the Mega Center. All zones must be tested to the Mega Center. Provide a detailed inventory (with manufacturer name and model number) of all equipment installed. The Mega Center will monitor the burglar alarm system. The Contractor shall contact a “Remote Programmer” for this information at the Mega Center.

The applicable “Remote Programmer” contact information can be acquired by the method of email communication through the IRS POC or at www.dhs.gov.

b. Prior to contract completion, the Contractor shall ensure that the alarm system has been uploaded by the FPS Mega Center using Mega Center approved software. Additionally, the Contractor shall ensure that all zones are fully tested and communicated before installation is deemed “complete.

c. Connect IDS panel to Video Surveillance to tag video for closest camera of any IDS alarm.

d. Upon contract completion, but prior to final, the Contractor shall complete all required documentation and forms (Example: IRS/GSA/DHS(FPS)), depicting the location of each specific device for any and all alarm, access, http://www.dhs.gov/

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

VSS, etc. systems to include wiring paths, junction boxes, control panels, etc. Mega Center diagram plans/paperwork shall be prepared in AutoCAD and delivered both on paper and in electronic format.

2. DURESS

BUTTON

Demo 31 existing duress and replace with new ones below.

Install (30) Hard-wired silent duress/panic buttons [Similar to Ademco 269 series; or Amseco HUSK-20 or approved equal]. Contractor must securely install panic buttons under each table or desk, and homerun (hardwire) back to the NEW Burglar Panel. Contractor must verify location with IRS POC. The wires shall be run in conduit through the walls and secure with wire clips under the desk.

Program each button to be identified individually (floor/room/cubicle #) on site through keypad and communicated exact location to the corresponding Mega Center.

3. MOTION

DETECTOR

N/A

4. GLASS

BREAK

DETECTOR

N/A

5. DOOR

CONTACTS

Install (15) door contacts connected to the zone expanders located in the burglar alarm panel. Door Contacts shall meet UL634 LEVEL 2 High Security Listed and have two (2) loops, one for intrusion detection and one for access control [similar to MAGNASPHERE RECESSED: HSS-L2C-111-A / SURFACE-MOUNT: HSS-L2D OR UL634 LEVEL 2 approved equal].

Note: door contacts shall be home run (wired) as a separate zone on the burglar control panel and report to the designated FPS Mega Center. Doors that enter/exit business units require contacts for the burglar alarm and/or access card reader portions of the project. No exposed wiring will be permitted. Ensure that the door contacts are installed in such a way that doorframe(s) and imperfections do not affect the contacts and break them.

6.

STROBE

LIGHT

OR/AND

SOUNDER

N/A

3.6.4 - VIDEO SURVEILLANCE SYSTEM (VSS)

1.

CAMERAS

Demo 4 existing analog cameras with associate wires and NVR.

Install (10) ceiling or wall mounted mini-dome IP cameras w/ 5 megapixel minimum. Contractor must verify location with IRS personnel and refer to plan drawing.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

Install (2) ceiling mounted dome DUO IP cameras; w/ 6 megapixel minimum and multi-lens (no fisheye). Contractor must verify location with IRS personnel and refer to plan drawing.

Install (2) ceiling mounted dome 180-degrees IP cameras; w/ 6 megapixel minimum and multi-lens (no fisheye). Contractor must verify location with IRS personnel and refer to plan drawing.

Cameras must meet these minimum requirements:

• IP cameras - IPv4, IPv6, HTTP, HTTPS, FTP, DNS, DynDNS, NTP, TCP.

Enable IP filter to limit communication to Switch and Server/NVR IP only.

• Wide Dynamic Range (WDR) and True Day/Night

• Infra-Red (IR) illumination (for outdoor)

• Zipstream compression or equivalent Dual Encoder H.264/265/MJPEG.

• IP66 rated enclosure, IK10 Vandal Resistance

• Autofocus, auto-iris

• ONVIF Profile S, T, G and M Compliant

• Hardwired

• NDAA Compliant

Approved Products Are:

• AXIS M, P & Q Series

• Bosch FLEXIDOME IP Series.

• Hanwha

NOTE: It is highly recommended for cameras to match NVR manufacturer to use cameras analytics and ease of installation.

The locations of cameras as shown on drawings are approximate. The final location shall be field verified to get a clear, sharp, distortion free picture and roll-free vertical interval switching. A camera view plan should be created by camera vendor to ensure proper area coverage.

Contractor shall post a minimum of one Video Surveillance Signs.

2.

CAMERA

POWER

SUPPLY/

SWITCH

Install Network / Power over Ethernet (POE) and fiber switches as required for separate VSS network (Must also comply with 2019 NDAA mentioned under Cameras).

POE Switches must be L2 Managed and have POE+ with sufficient power budget for the cameras in this scope, but a 15W minimum per channels (e.g., 120W for 8 channels) and IEEE802.3 class 3 - compliant.

Approved manufacturers are:

• Cisco

• AXIS

• Identiv

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

For locations with multiple cameras at remote locations exceeding 300ft separate POE+ switches shall be installed close to cameras location.

Agency (IRS) network and switches are not allowed to be used for video camera. Video Switches shall be installed in a separate video rack on the wall.

Under no circumstances will the Video switch or equipment be installed on IRS IT racks. Video equipment must be clearly labeled that is it for Video Surveillance.

3.

MONITOR Install (1 - 24” AT NVR and 60” IN TAC WALL) security monitor(s) – with the following minimum specifications: LED; 1920X1080p Minimum Resolution;

HDMI connections, and EPEAT Compliant.

When multiple monitors are required, remote Display(s) Monitors will be for (DISPLAY ONLY). For remote display only use a Video Decoder [Similar to WISENET SPD150/151 or AXIS D1110 or approved equal]. For Control of monitor(s), contractor shall also install a Video Station Console [Similar to HP T540 or approved equal] on the back of monitor(s) with wireless keyboard and mouse.

See drawing for location or coordinate with Security Specialist. For wall locations provide Full-motion TV wall mount and coordinate height with IRS POC. All Monitors will show activity of cameras as indicated by local POC.

Also, install a 550VA Uninterruptible Power Supply (UPS) for each color monitor [Tripp-Lite INTERNET550U; or APC BE550G or 120V, 550VA, approved equal] to keep the monitor powered during a power outage and to condition the voltage. Hardwire all accessories. Note that UPS can be located on wall behind Monitor.

4.

Network Video Recorder

(NVR)

Demo existing NVR with associated components.

Install Network Video Recorder (NVR) for above cameras (for location see drawing or coordinate with IRS POC).

Installer shall calculate and provide NVR data storage capacity to bring all camera video feeds to this unit and record 24/7 for 30 days at 15 frame-per-second. NVR shall be programmed to delete surveillance video after the 30 days period per NARA guidelines.

All cameras and cables must be identified with labels. NVR must also meet the NDAA requirements.

In addition, the equipment listed below is the only equipment allowed to be installed at the IRS, and substitution is not allowed.

IRS NVR APPROVED PRODUCT FOR UP TO 32 CAMERAS:

NOTE: VSS Integrator must be certified by manufacturer.

• AXIS S22 Series

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

• HUSKY IVO

• Identiv Velocity Vision AIO –24 Ports, I7.

Also, install a 1500VA Uninterruptible Power Supply (UPS) [APC SMT1500C;

or Tripp-Lite SMART1500; or 208/120V, 1500VA equal] on shelf in security room to power the NVR, Switches and Cameras. Contractor shall hardwire all accessories

5.

VIDEO

CABLE

Contractor shall connect signal paths between cameras and NVR with orange CAT6e cable (for distance of less than 328 ft / 100 meters) or multi/single mode fiber as required to have a full operational video network. Cameras shall be connected to the NVR/Switch.

For a single camera exceeding 328ft (100 meters) install a PoE Injector and Extender [Similar to PROCET PT-PSE108/109/201 and PROCET PT-PEX- 01GB-OT POE Extender every 328ft OR approved equal].

For locations with multiple cameras at remote locations exceeding 300ft separate Managed 60W POE+ switches shall be installed close to cameras location.

All cabling, jacks, patch cables, and patch panels must be tested and certified to the most current ANSI/TIA/EIA-568 cabling standard for the proper category of cabling. The cabling must be compliant with ANSI/TIA-1152-A accuracy.

All test results must be provided in written and electronic formats.

CAT 6e horizontal cable shall be tested to 250 MHz as defined by TIA/EIA- 568-C.2. Measurements shall be of the "Permanent Link" including cabling, and modular jacks at the information outlet and modular patch panel.

Parameters to be tested must include:

a) Wire Map

b) Length

c) NEXT Loss (Pair-to-Pair)

d) NEXT (Power Sum)

e) ELFEXT (Pair-to-Pair)

f) ELFEXT (Power Sum)

g) Return Loss

h) Attenuation

i) Propagation Delay

j) Delay Skew

3.6.5 - MISCELLANEOUS

7.

CIPHER

LOCK

N/A

8. ELECTRICAL

POWER

Contractor shall install (1) security dedicated 120V, 20a circuits per NEC code (#12AWG, ¾” EMT Conduit) from closest available electrical panel to

RECEPTACLE FOR NEW MONITOR.

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

9.

AUDIO

INTERCOM

N/A

10.

INVENTORY After installation completion and acceptance by IRS POC, Contractor shall provide the government an inventory of all equipment installed within five working days of testing and acceptance. Contractor shall provide IRS POC with a Microsoft Excel spreadsheet inventory delineating all equipment installed that includes a description and product name, quantities and brief location where the equipment is located within the facility and redlined Drawings (showing any field installation update/deviation from original drawings).

VSS and IDS Network Addressing and Configuration – The Integrator shall maintain on site for the Owner one written copy of a complete list of addressing and configuration for all devices within this project. This shall be inclusive of all passwords, IP, MAC, and VLAN information, as well as the complete configuration of all networking and recording hardware, including switches, firewall, recorders, and any other communication device.

In addition, for ePACs access control (MX) panels only, the vendor must fill out an IRS provided excel spreadsheet called Assets Management Report (AMR) and emails it to the PSS AND the following address:

iteuesambatch@irs.gov The following fields are mandatory:

Barcode Serial number Purchase Order Number Manufacturer Model Price Category CPU Type (If computer or server) CPU Speed (If computer or server) Memory (If computer or server) Ship Date Warranty End date IRS Contact Person (SPIF list will be provided to vendor) Ship to Address / Location Building Code (will be provided to vendor)

CERTIFYING ORGANIZATION

The Government estimates that the Contractor will need to supply and install manufacturer’s equipment. It is the Contractor’s responsibility to double check and be certain that all materials/equipment and/or labor are accounted for prior to quote submission. “HOMERUN” each device on its own stranded plenum rated wire or plenum coax with copper core and copper braid to the panel with no splices, “T” taps, no surface wire, etc:

mailto:iteuesambatch@irs.gov

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

3.7 N/A

3.8 OTHER INFORMATION

3.8.1 Government Furnished Equipment:

• Analog telephone line for burglar panel.

• Provide the room location for the electronic equipment to be wall mounted in a secure location under lock and key.

• IP address for each door control panel and data drop for each panel by IT

3.8.2 Related Work: Contract documents indicate the work of contract, and related requirements and conditions that have an impact on the project. Related requirements and conditions that are indicated on the contract documents include but are not necessarily limited to the following: (1) Existing site conditions and restrictions; (2) Alterations and coordination with existing work; (3) Other work to be performed concurrently by the Government; and (4) Other work to be performed concurrently by separate contractors.

3.8.3 Working Hours: Work shall be performed Monday through Friday (excluding holidays and weekends) from 7 AM – 6 PM. Any afterhours work will require prior written approval.

3.8.4 Trash Disposal: Contractor shall provide garbage/waste receptacles for disposal of trash (such as wrapping paper, boxes, etc.) and be removed by Contractor upon completion of work.

3.9 CONTRACTOR RESPONSIBILITIES

3.9.1 Contractor shall furnish all labor, materials, and equipment necessary to perform the job.

3.9.2 Contractor is required to (i) be licensed; (ii) maintain insurance coverage that is common within the industry and for the nature of work.

3.9.3 All Contractor personnel shall be required to wear proper identification, which may include company attire with logo, badge, etc. when working in the government facility.

[Identification card or badge (if needed) is to be displayed on contractor employees at all times.]

3.9.4 Contractor shall provide personnel who are professional, reliable, trained, and experienced in performing the job requirements.

3.9.5 Contractor must ensure that all personnel working on this requirement be: (I) a U.S.

citizen or have lawful permanent resident status, and (ii) fluent in the English language. Contractor shall not employ any person to perform work under this requirement with any of the following background history: conviction of a felony, a crime of violence or a serious misdemeanor, a record of arrest for continuing offenses, or failure to file or pay federal income tax.

3.9.6 Contractor shall provide timely and professional customer service (i.e., address concerns, issues, and other administrative functions). For purposes of this contract timely means no later than by the close of business next business day.

3.9.7 Contractor personnel shall maintain a neat, clean, and hazard-free working environment to the extent practicable. All work shall be done using the highest

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

standards of the trade and in compliance with all federal, state, and local codes.

Contractor personnel shall take all necessary precautions to avoid scarring, marring or damaging government’s property. Contractor(s) shall incur any cost to repair or restore to its original condition Government property damaged during the performance of this work. Upon completion, all packing materials, debris, dust, etc. shall be removed from the premises and discarded in accordance with local and state regulations. The work area shall be left in “ready to occupy” conditions.

3.9.8 The work shall be carried out in such a manner so that there will be little no interference with the proper execution of Government business. All persons employed in contract work shall, while on the premises, comply with all building regulations.

3.10 IRS RESPONSIBILITIES

3.10.1 IRS POC shall provide access to the respective work area(s).

3.10.2 IRS POC shall assist in making the appropriate decisions with regards to specific location/placement, procedures, and programming. The IRS POC shall be readily available during the contract term and shall make decisions without delay. All required and applicable changes shall be executed through contract modification. Contract modifications shall be executed by the Contracting Officer.

II. INFORMATION SYSTEM SECURITY REQUIREMENTS FISMA SECURITY CONTRACT

LANGUAGE (MAJOR IT SYSTEMS / APPLICATIONS or SERVICES)

1. CONTRACTOR SECURITY TRAINING

IR1052.224-9001 Mandatory IRS Security Training for Information Systems, Information Protection and Facilities Physical Access (JUN 2021) The Federal Information Security Modernization Act of 2014 (FISMA) requires each federal agency to provide periodic information security awareness training to all contractors/subcontractors involved in the management, use, or operation of Federal information and information systems. In addition, contractor/subcontractor personnel are subject to the Taxpayer Browsing Protection Act of 1997, which prohibits willful unauthorized inspection of returns and return information and details that any violation of the Act could result in civil and criminal penalties. Contractor/subcontractor personnel are subject to the Privacy Act of 1974 (5 U.S.C. 552a; Pub. L. No. 93-579), December 1974.

Contractor/subcontractor personnel are bound by the Records Management by 93 Federal Agencies (44 U.S.C. Chapter 31) regarding the care and retention of federal records.

a. The contractor must ensure all new contractor/subcontractor personnel complete all assigned briefings which are based on the responses provided on the Risk Assessment Checklist Form 14606. These responses pertaining to access to any IRS system, including basic LAN, email and internet; access to any Sensitive but Unclassified (SBU) data; and access to any IRS facility. Since new contractor/subcontractor personnel will not have access to the IRS training system, the COR shall provide softcopy versions of each briefing.

i. Exception: Contractor personnel (including subcontractors) performing under IRS contracts with Nonprofit Agencies Employing People Who Are Blind or Severely Disabled (as described in FAR Subpart 8.7) are exempted from the aforementioned briefing requirements, unless the contractor requests access to the training, or there is

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

a compelling justification for requiring the training that is approved by the Contracting Officer (CO). An example of this would be in an instance where visually impaired personnel is assigned to perform systems development and has potential staff-like access to IRS information.

ii. Contractor/subcontractor personnel working with IRS information at contractor-controlled facilities with no access to the IRS network will be subject to all mandatory briefing excepting the Facilities Management Physical Security briefing as outlined in Publication 4812.

iii. Service Personnel: Inadvertent Sensitive Information Access Training Contractor personnel performing: (i) janitorial and cleaning services (daylight operations), (ii) building maintenance, or (iii) other maintenance and repair and need staff-like access to IRS facilities are required to complete Inadvertent Access to Sensitive Information (SBU) Access training.

iv. Service Personnel Security Awareness Training: Contractor personnel providing services in the following categories are required to complete FMSS Physical Security Training:

1. Medical;

2. Cafeteria;

3. Landscaping;

4. Janitorial and cleaning (daylight operations);

5. Building maintenance; or

6. Other maintenance and repair

b. In combination these mandatory briefings are known as IRS Security Awareness Training (SAT). The topics covered are: Cybersecurity Awareness, Privacy Information Protection and Disclosure, Unauthorized Access to Taxpayer Data, Records Management, Inadvertent Sensitive Information Access, Insider Threat and/or Facilities Physical Security. The completion of the assigned mandatory briefings constitutes the completion of the Security Orientation.

c. The SAT must be completed by contractor/subcontractor personnel within 5 business days of successful resolution of the suitability and eligibility for staff-like access as outlined in IR1052.204- 9000 Submission of Security Forms and Related Materials and before being granted access to SBU data. The date listed on the memo provided by IRS Personnel Security shall be used as the commencement date.

d. Training completion process:

The contractor must submit confirmation of completed SAT mandatory briefings for each contractor/subcontractor personnel by either:

i. Using Form 14616 signed and dated by the individual and authorized contractor management entity and returned to the COR. This option is used for new contractor/subcontractor personnel and any that do not have an IRS network account.

ii. Using the IRS training system which is available to all contractors with IRS network accounts

e. Annual Training. For contracts/orders/agreement exceeding one year in length, either on a multiyear or multiple year basis, the contractor must ensure that personnel complete assigned SAT mandatory briefings annually no later than October 31st of the current calendar year. The contractor must submit confirmation of completed annual SAT on all personnel unable to complete the briefings in the IRS training systems by submitting

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

completed Form 14616 assigned to this contract/order/agreement, via email, to the COR, upon completion.

f. Contractor’s failure to comply with IRS privacy and security policy (to include completion and certification of SAT requirements within the timeframe specified) may be subject to suspension, revocation or termination (temporarily or permanently) of staff-like access to IRS IT systems and facilities.

g. Flow down of clauses. The contractor shall include and flow down, in its subcontracts (or arrangements or outsourced service agreements) that entails staff-like access to SBU information by a subcontractor, at any tier, the same Federal Acquisition Regulation (FAR) and local privacy and security or safeguard clauses or provisions for protecting SBUSystem Review / Site Visit

2. SAFEGUARDING / PROTECTING SENSITIVE PERSONALLY IDENTIFIABLE

INFORMATION (PII)

Sensitive PII is defined as any information that permits the identity of an individual to be directly or indirectly inferred, including any information that is linked or linkable to that individual, regardless of whether the individual is a U.S. citizen, legal permanent resident, or employee or contractor to the Department. Sensitive PII is Personally Identifiable Information, which if lost, compromised, or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

Information Systems can be either electronic or manual. IRM 10.8.1 requires IRS sensitive information is to be handled and protected at the contractor's site, including any information stored, processed, or transmitted using the contractor's computer systems.

Contractor personnel shall perform a background investigation and/or clearance required;

receive security awareness and specialized IT security training required for contractor activities or facilities; and any facility physical security requirements.

IRS sensitive data (e.g., Sensitive But Unclassified (SBU), Personally Identifiable Information (PII) that is processed, stored, or transmitted by an information system outside of IRS facilities or IRS IT information system shall be protected with FIPS 140-2 or later validated cryptographic modules with approved modes of operation.

A list of NIST validated modules is available at the following link:

http://csrc.nist.gov/groups/STM/cmvp/validation.html.

a. The CSP/Contractor shall ensure that individuals accessing an information system processing, storing or transmitting information requiring special protection satisfy the personnel screening criteria.

Note: This requirement is defined by FedRAMP.

b. The organization shall:

Screen individuals prior to authorizing access to the information system; and Rescreen individuals according to FedRAMP Assignments: for national security clearances; a reinvestigation is required during the 5th year for top secret security clearance, the 10th year for secret security clearance, and 15th year for confidential security clearance. For moderate risk law enforcement and high impact public trust level, a reinvestigation is required during

Copying, Dissemination, or Distribution of these drawings, plans, or specifications to unauthorized users is prohibited.

Do not remove this notice and properly destroy documents when no longer needed.

the 5th year. There is no reinvestigation for other moderate risk positions or any low-risk positions.

The CSP/Contractor shall ensure that data is used, only as identified, in the IRS contract and that the data will be used for nothing else to ensure the privacy of the individual.

The CSP/Contractor is responsible for maintaining an inventory of all PII provided to the contractor, generated by the contractor, or used by the contractor sufficient to enable notification to taxpayers, if disclosed. The inventory of PII must be updated semi-annually with a final inventory notification provided to the COR.

Most IRS information is categorized as Sensitive But Unclassified (SBU). This includes:

i. Federal Tax Information (FTI)

ii. Personally…