28_20_01.02_10.pdf

CP#2 Long Range Discrimination Radar (LRDR) CLR039b LRDR Complex Security - Clear AFS, Alaska AM#2

SECTION 28 20 01.02 10

ELECTRONIC SECURITY SYSTEM

10/07

PART 1 GENERAL

1.1 SYSTEM SUMMARY

Provide an Integrated Electronic Security System (IESS) as described and shown as part of an overall integrated Electronic Security System including modification of existing Government Equipment under supervision of Government Personnel. All computing devices, as defined in 47 CFR 15 , shall be certified to comply with the requirements for Class A computing devices and labeled as set forth in 47 CFR 15 . Electronic equipment shall comply with 47 CFR 15 . Sensors and equipment provided must be on current approved Non-Nuclear Intrusion Detection System List (NNIDSL) as published by the Department of the Air Force.

1.1.1 Existing Central Station

Configure the existing central station at Building 804 (ECF) and Building 900 equipment to provide operator interface, interaction, dynamic and real time monitoring, display, and control. The central station shall control system networks to interconnect all system components including peer and field equipment. The system shall be most current system components of Vindicator V5 or Vindicator compatible components as included on the current Department of The Air Force Non-Nuclear Intrusion Detection System (IDS) Equipment Approval List. Verification of existing system firmware version shall be included in the Group II Technical Package report on existing conditions.

1.1.2 Systems Networks

System networks shall interconnect all components of the system. These networks shall include communications between a central station and any peer or subordinate workstations, enrollment stations, local annunciation stations, portal control stations and ViCADs CCTV system. AM#2... ...AM#2 The systems network shall provide totally automatic communication of status changes, commands, field initiated interrupts and any other communications required for proper system operation. System communication shall not require operator initiation or response. System communication shall return to normal after any partial or total network interruption such as power loss or transient upset. The system shall automatically annunciate communication failures to the operator with identification of the communication link that has experienced a partial or total failure. A communications controller may be used as an interface between the central station display systems and the field device network. The communications controller shall provide those functions needed to attain the specified network communications performance.

1.1.2.1 Field Device Network

The field device network shall provide communication between a central control station and field devices of the system. The field device network shall be configured as shown in the drawings. Field devices shall consist of alarm annunciation local processors and entry control local

SECTION 28 20 01.02 10 Page 1 processors. Each field device shall be interrogated during each interrogation cycle. The field device network shall provide line supervision that detects and annunciates communications interruptions or compromised communications between any field device and the central station.

1.1.2.2 Ethernet Network

The ethernet network shall provide communication between peer central and local processors. The ethernet network shall be configured as shown in the drawings. The ethernet network may be shared with the CCTV network but shall communicate with Intrusion Detection System (IDS) peer and control processors on fiber or copper networks in compliance with manufacturer requirements.

1.1.3 Field Equipment

Field equipment shall include local processors, sensors and controls.

Local processors shall serve as an interface between the central station and sensors and controls. Data exchange between the central station and the local processors shall include down-line transmission of commands, software and databases to local processors. The up line data exchange from the local processor to the central station shall include status data such as intrusion alarms, status reports and entry control records. Local processors are categorized as alarm annunciation or entry control or a combination thereof. Abbreviations for Equipment Identifications used on the Drawings are also shown in the Part 2 product descriptions of this specification, such as CR, CK, LPD, etc.

1.1.4 CCTV System Interface

Provide an interface for connection of the central station to the CCTV system as specified in Section 28 23 23.02 10 CLOSED CIRCUIT TELEVISION SYSTEMS and as shown. This shall not be accomplished by using an electro-mechanical relay assembly.

1.1.5 Intercom Interface

Provide for monitoring of intercom call requests from gate and entry lobby via contacts within the ACS system components. Monitoring of voice communications will be performed through separate security intercommunication systems as specified in Section 28 51 23.02 10 SECURITY INTERCOMMUNICATION SYSTEM and as shown.

1.1.6 Security Lighting Interface

Provide an interface for control of the security lighting system as specified in Section 26 56 00.02 00 EXTERIOR LIGHTING and as shown.

1.1.7 Probability of Detection

Each zone shall have a continuous probability of detection greater than 90 percent and shall be demonstrated with a confidence level of 90 percent.

The intrustion detection capability shall be evaluated separately for each level of alarm during Government Acceptance Testing.

1.1.8 Standard Intruder

The system shall be able to detect a standard intruder moving through a

SECTION 28 20 01.02 10 Page 2 protected zone.

1.1.9 False Alarm Rate

1.1.9.1 Interior

Provide a false alarm rate of no more than 1 false alarm per sensor per 30 days at the specified probability of detection.

1.1.9.2 Exterior

Provide a false alarm rate of no more than 1 false alarm per sensor region per 24-hour period at the specified probability of detection.

1.1.10 Environmental Nuisance Alarm Rate

Environmental alarms during nominal conditions shall not exceed 1 per day per sensor.

1.1.11 Error and Throughput Rates

Error and throughput rates shall be single portal performance rates obtained when processing individuals one at a time.

1.1.11.1 Type I Error Rate

Type I error rate is an error where the system denies entry to an authorized, enrolled identifier or individual. The rate shall be less than 1 percent.

1.1.11.2 Type II Error Rate

Type II error rate is an error where the system grants entry to an unauthorized identifier or individual. The entry control Type II error rate shall be less than 0.01 percent.

1.1.12 Passage

Passage is ingress and/or egress past an entry control device, or through a portal. Entry control procedures and equipment shall be implemented for passage through each portal as shown.

1.1.13 Detection Resolution

The system shall have detection resolution sufficient to locate intrusions at each device and zone; and tampering at individual devices.

1.1.14 Electrical Requirements

Electrically powered IESS equipment shall operate on 120 volt 60 Hz ac sources as shown. Equipment shall be able to tolerate variations in the voltage source of plus or minus 10 percent, and variations in the line frequency of plus or minus 2 percent with no degradation of performance.

1.1.15 System Reaction

1.1.15.1 System Response

The field device network shall provide a system end-to-end average

SECTION 28 20 01.02 10 Page 3 response time of 1 second or less for every device connected to the system for receipt of 5 alarms within 5 seconds in accordance with ESE-TP-0023 .

Alarms shall be annunciated at the central station within 1 second of the alarm occurring at a local processor or device controlled by a local processor, and within 100 milliseconds if the alarm occurs at the central station. Alarm and status changes shall be displayed within 100 milliseconds after receipt of data by the central station. All graphics shall be displayed, including graphics generated map displays, on the console monitor within 5 seconds of alarm receipt at the security console. This response time shall be maintained during system heavy load.

1.1.15.2 System Heavy Load Condition

For the purpose of system heavy load condition, the system shall consist of central station equipment, communication controllers and all local processors as shown. System heavy load condition is the occurrence of alarms at the rate of 10 alarms per second distributed evenly among all local processors in the system. The alarm printer shall continue to print out all occurrences, including time of occurrence, to the nearest second.

1.1.16 System Capacity

The system will be comprised of scalable processors (Vindicator V5 IDS or ACS) local servers, monitoring stations, as shown. The system shall also monitor and control the inputs and outputs shown. The system will discriminate to the individual sensors, switches, and terminal devices and report status at the appropriate workstations as shown. Include a minimum expansion capability of 25 percent through additional installed or additional hardware and software capabilities. .

1.1.17 Local Control Station Equipment

Local control station equipment, unless designated otherwise, shall be rated for continuous operation under ambient environmental conditions of 36 to 122 degrees F and a relative humidity of 20 to 80 percent.

1.2 REFERENCES

The publications listed below form a part of this specification to the extent referenced. The publications are referred to within the text by the basic designation only.

FEDERAL INFORMATION PROCESSING STANDARD (FIPS)

FIPS 197 (2001) Advanced Encryption Standard (AES)

FIPS 201-2 (2013) Personal Identity Verification (PIV) of Federal Employees and Contractors

INSTITUTE OF ELECTRICAL AND ELECTRONICS ENGINEERS (IEEE)

IEEE 142 (2007; Errata 2014) Recommended Practice for Grounding of Industrial and Commercial Power Systems - IEEE Green Book

IEEE C2 (2012; Errata 2012; INT 1-4 2012; INT 5-7 2013; INT 8-10 2014; INT 11 2015) National Electrical Safety Code

SECTION 28 20 01.02 10 Page 4

IEEE C62.41.1 (2002; R 2008) Guide on the Surges Environment in Low-Voltage (1000 V and Less) AC Power Circuits

IEEE C62.41.2 (2002 and CORR 1, 2012) Recommended Practice on Characterization of Surges in Low-Voltage (1000 V and Less) AC Power Circuits

NATIONAL ELECTRICAL MANUFACTURERS ASSOCIATION (NEMA)

NEMA 250 (2014) Enclosures for Electrical Equipment (1000 Volts Maximum)

NEMA ICS 1 (2000; R 2015) Standard for Industrial Control and Systems: General Requirements

NATIONAL FIRE PROTECTION ASSOCIATION (NFPA)

NFPA 70 (2014; AMD 1 2013; Errata 1 2013; AMD 2 2013; Errata 2 2013; AMD 3 2014; Errata 3-4 2014; AMD 4-6 2014) National Electrical Code

TELECOMMUNICATIONS INDUSTRY ASSOCIATION (TIA)

TIA-568-C.1 (2009; Add 2 2011; Add 1 2012) Commercial Building Telecommunications Cabling Standard

U.S. AIR FORCE (USAF)

ESE-SIT-001 (1 MAR 2013) Standardized Electronic Security Equipment Siting And Design Guidance For Permanent Installations

ESE-TP-0023 (28 NOV 2008) Electronic Security Equipment (ESE) Master Installation Acceptance Test And Turnover Plan

U.S. NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA)

47 CFR 15 Radio Frequency Devices

UNDERWRITERS LABORATORIES (UL)

UL 1037 (1999; Reprint Dec 2009) Safety Antitheft Alarms and Devices

UL 1076 (1995; Reprint Mar 2015) Proprietary Burglar Alarm Units and Systems

UL 294 (2013; Reprint Feb 2015) Access Control System Units

UL 639 (2007; Reprint May 2012) Standard for Intrusion Detection Units

UL 681 (2014) Installation and Classification of

SECTION 28 20 01.02 10 Page 5

Burglar and Holdup Alarm Systems

UL 796 (2010; Reprint Sep 2013) Standard for Printed-Wiring Boards

1.3 SUBMITTALS

Government approval is required for submittals with a "G" designation;

submittals not having a "G" designation are for information only.

Submittals with an "S" designation following the “G” are for inclusion in the Sustainability Notebook, in conformance to Section 01 33 29.02 00 SUSTAINABILITY REPORTING. Other designations following the "G" designation identify the office that will review the submittal for the Government. Submit the following in accordance with Section 01 33 00.02 00

SUBMITTAL PROCEDURES:

SD-02 Shop Drawings

Group I Technical Data Package; G

SD-08 Manufacturer's Instructions

Group IV Technical Data Package; G

Existing System Integration Plan; G

SD-09 Manufacturer's Field Reports

Group II Technical Data Package; G

SD-10 Operation and Maintenance Data

Group V Technical Data Package; G Operator's Training Report

AM#2...

...AM#2

1.4 DEFINITIONS

1.4.1 Intrusion Alarm

An alarm resulting from the detection of a specified target, attempting to intrude into the protected area or when entry into an entry-controlled area is attempted without successfully using entry control procedures.

1.4.2 Nuisance Alarm

Nuisance alarms are those caused by an influence the sensor was designed to detect, such as an animal or an act of nature (such as high wind), but is not related to an intrusion. NOTE: The influence that caused the nuisance alarm must be clearly identifiable, short term, and followed by an immediate reset or it is considered a false alarm.

1.4.3 Environmental Alarm

A nuisance alarm resulting from environmental factors.

SECTION 28 20 01.02 10 Page 6

1.4.4 False Alarm

False alarms are those for which no cause can be determined.

1.4.5 Duress Alarm

A normally covert alarm condition which results from a set of pre-established conditions such as entering a special code into a keypad indicating immediate personal danger. This alarm category shall take precedence over other alarm categories.

1.4.6 Fail-Safe Alarm

An alarm resulting from detection of diminished functional capabilities.

1.4.7 Power Loss Alarm

An alarm resulting from a loss of primary power.

1.4.8 Entry Control Alarm

An alarm resulting from improper use of entry control procedures or equipment.

1.4.9 Identifier

A card credential, keypad personal identification number or code, biometric characteristic or any other unique identification entered as data into the entry control database for the purpose of verifying the identity of an individual. Identifiers shall be used by the IESS for the purpose of validating passage requests for areas equipped with entry control equipment.

1.4.10 Entry Control Devices

Any equipment which gives a user the means to input identifier data into the entry control system for verification.

1.4.11 Facility Interface Device

A facility interface device shall be any type of mechanism which is controlled in response to passage requests and allows passage through a portal.

1.4.12 Portal

Specific control point, such as a door or a gate, providing entry or access from one security level to another.

1.4.13 Probability of Detection

Twenty-two successful detections out of 22 tests or 37 successful detections out of 38 tests.

1.4.14 Standard Intruder

Person that weighs 100 pounds or less and is 5 ft tall or less, dressed in a long-sleeved shirt, slacks and shoes (unless environmental conditions at the site require protective clothing) and walking, running, crawling or

SECTION 28 20 01.02 10 Page 7 jumping through a protected zone in the most advantageous manner for the intruder.

1.5 SUBMITTAL OF TECHNICAL DATA AND COMPUTER SOFTWARE

All items of computer software and technical data (including technical data which relates to computer software), which is specifically identified in this specification shall be delivered in accordance with the CONTRACT CLAUSES, SPECIAL CONTRACT REQUIREMENTS. All data delivered shall be identified by reference to the particular specification paragraph against which it is furnished.

1.5.1 Group I Technical Data Package

The data package shall include the following as required:

1.5.1.1 System Drawings

a. Functional System block diagram, identifying communications protocols, wire type and quantity, and approximate distances.

b. Local processor installation, including typical block and wiring diagrams.

c. Field equipment enclosure with local processor installation and schematics.

d. Device wiring and installation drawings.

e. Details of connections to power sources, including power supplies and grounding.

f. Details of surge protection device installation.

g. Entry control system block diagram and layout.

h. CCTV assessment block diagram and layout.

i. Details of interconnections with Security Lighting system.

j. Intrusion detection system block diagram and sensor layout (including exterior and interior zones) as well as sensor detection patterns.

k. Exterior Card Reader Enclosure

1.5.1.2 Manufacturer's Data

The data package shall include manufacturer's data for all materials and equipment, including terminal devices, local processors and central station equipment provided under this specification.

1.5.1.3 Certifications

Specified manufacturer's certifications shall be included with the data package certification.

SECTION 28 20 01.02 10 Page 8

1.5.1.4 Key Control Plan

Provide a key control plan including the following:

a. Procedures that will be used to log and positively control all keys, access cards and electronic passwords during installation.

b. A listing of all keys and where they are used.

c. A listing of all persons allowed access to the keys.

d. A listing of all persons with temporary access cards and system passwords.

1.5.1.5 Information Assurance

Submit information/documentation in accordance with DoDI 8510.01, DoDI 8500.01, and CNSSI 1253 for any IDS equipment planned for use which is not currently certified and listed on the HAF/A4S IDS Approved Equipment List. Documentation shall include but not be limited to documents such as: System Security Design Specifications (SSDS), Ports, Protocols and Services (PPS) requirements, Functional Requirements Traceability Matrices, Application and Security Requirements Security Technical Implementation checklists, Security Functional Test Plans & Procedures, security design requirements, security requirement Verification and Validation (V&V), sensitivity of the data being processed, identification of system vulnerabilities, and identification of existing and planned countermeasures.

1.5.2 Group II Technical Data Package

Prepare and submit a report of "Current Site Conditions" to the Government documenting site conditions that significantly differ from the design drawings or conditions that affect performance of the system to be installed. Provide specification sheets, or written functional requirements to support the findings, and a cost estimate to correct those site changes or conditions. Do not correct any deficiency without written permission from the Government.

1.5.3 Group IV Technical Data Package

Prepare existing system integration plan AM#2... ...AM#2 for the Government Acceptance Testing (GAT) test in accordance with SECTION 28 20 00.02 00

CERTIFICATION OF ELECTRONIC SECURITY SYSTEMS.

1.5.3.1 Operation and Maintenance Manuals

Deliver draft copies of the operator's, software, hardware, functional design, and maintenance manuals, as specified below, to the Government prior to beginning the performance verification test for use during the test period.

1.5.3.2 Operator's Manuals

Fully explain all modifications to existing procedures and instructions for the operation of the system, including:

a. Alarm and system messages and printing formats.

b. System entry requirements.

SECTION 28 20 01.02 10 Page 9

1.5.3.3 Software Manual

Describe the functions of all new software revisions and include all other information necessary to enable proper loading, testing, and operation of the system Include supplmental pages with changes to the following in the manual updates:

a. Definition of terms and functions.

b. Use of system and application software.

c. Procedures for system initialization, start-up and shutdown

d. Alarm reports.

e. Reports generation,

f. Database format and date entry requirements.

g. Directory of all disk files.

h. Description of all communication protocols, including data formats, command characters, and a sample of each type of data transfer.

i. Interface definition.

1.5.3.4 Hardware Manual

A manual describing all new equipment furnished including:

a. General description and specifications.

b. Installation and checkout procedures.

c. Equipment electrical schematics and layout drawings.

d. System schematics and layout drawings.

e. Alignment and calibration procedures.

f. Manufacturer's repair parts list indicating sources of supply.

g. Interface definition.

1.5.3.5 Data Entry

Enter all data needed to make the system operational. Deliver the data to the Government on data entry forms, utilizing data from the contract documents, Contractor's field surveys, and other pertinent information in the Contractor's possession required for complete installation of the database. Identify and request from the Government, any additional data needed to provide a complete and operational IESS. The completed forms shall be delivered to the Government for review and approval at least 30 days prior to the Contractor's scheduled need date. When the IESS database is to be populated in whole or in part from an existing or Government furnished electronic database, demonstrate the field mapping scheme to correctly input the data.

1.5.3.6 Graphics

Where graphics are required and are to be delivered with the system, create and install the graphics needed to make the system operational.

Utilize data from the contract documents, Contractor's field surveys, and other pertinent information in the Contractor's possession to complete the graphics. Identify and request from the Government, any additional data needed to provide a complete graphics package. Graphics shall have sufficient level of detail for the system operator to assess the alarm.

Supply hard copy, color examples at least 8 x 10 inches in size, of each type of graphic to be used for the completed system. The graphics examples shall be delivered to the Government for review and approval at

SECTION 28 20 01.02 10 Page 10 least 30 days prior to the Contractor's scheduled need date.

AM#2... 1.5.4 Unused

...AM#2

AM#2... 1.5.5 Unused

AM#2... ...AM#2

1.5.6 Group V Technical Data Package

Deliver final copies of the manual updates as specified, bound in hardback, loose-leaf binders PDF files, to the Government within 30 days after completing the endurance test. Each manual's PDF file shall be book marked to match the index. The draft copy used during site testing shall be updated with any changes required prior to final delivery of the manuals. Each manual's contents shall be identified on the cover. The manual shall include names, addresses, and telephone numbers of each subcontractor installing equipment and systems, and nearest service representative for each item of equipment. The manuals shall have a table of contents and tab sheets. Tab sheets shall be placed at the beginning of each chapter or section and at the beginning of each appendix. The final copies delivered after completion of the endurance test shall include modifications made during installation, checkout, and acceptance.

The number of hard copies in addition to PDF of each manual to be delivered shall be as specified below.

1.5.6.1 Operator's Manual

A copy of the final and approved updates to existing Operator's Manual.

1.5.6.2 Software Manual

A copy of the final and approved updates to existing Software Manual.

1.5.6.3 Hardware Manual

A copy of the final and approved updates to existing Hardware Manual.

1.5.6.4 Maintenance Manual

A copy of the final and approved updates to existing Maintenance Manual.

1.5.6.5 Final System Drawings

Maintain a separate set of drawings, elementary diagrams and wiring diagrams of the system to be used for final system drawings. This set shall be accurately kept up-to-date with all changes and additions to the IESS and shall be delivered to the Government with the final endurance test report. In addition to being complete and accurate, this set of drawings shall be kept neat and shall not be used for installation purposes. Complete list of all IP and MAC addresses for equipment within the system for RFM documentation use..Final drawings submitted with the endurance test report shall be finished drawings on optical disk in AutoCAD 2015 or REVIT 2015 format.

SECTION 28 20 01.02 10 Page 11

1.6 QUALITY ASSURANCE

1.6.1 Test Procedures and Reports

Test procedures shall explain in detail, step-by-step actions and expected results, demonstrating compliance with the requirements specified. Test reports shall be used to document results of the tests. Reports shall be delivered to the Government within 7 days after completion of each test.

1.6.2 Line Supervision

1.6.2.1 Signal and Data Transmission System (DTS) Line Supervision

All signal and DTS lines shall be supervised by the system. The system shall supervise the signal lines by monitoring the circuit for changes or disturbances in the signal, and for conditions as described in UL 1076 for line security equipment. The system shall initiate an alarm in response to a current change of 5 percent or greater. The system shall also initiate an alarm in response to opening, closing, shorting, or grounding of the signal and DTS lines.

1.6.2.2 Data Encryption

The system shall incorporate data encryption equipment on data transmission circuits as shown. The algorithm used for encryption shall be the Advanced Encryption Standard (AES) algorithm described in FIPS 197 standards as a minimum.

1.6.3 Data Transmission System

Provide DTS as specified in SECTION 27 10 00.02 00 BUILDING TELECOMMUNICATIONS CABLING SYSTEM and as indicated.

1.7 ENVIRONMENTAL REQUIREMENTS

1.7.1 Interior, Controlled Environment

System components, except the console equipment installed in interior locations, having controlled environments shall be rated for continuous operation under ambient environmental conditions of 36 to 122 degrees F dry bulb and 20 to 90 percent relative humidity, non-condensing.

1.7.2 Interior, Uncontrolled Environment

System components installed in interior locations having uncontrolled environments shall be rated for continuous operation under ambient environmental conditions of 0 to 122 degrees F dry bulb and 10 to 95 percent relative humidity, non-condensing.

1.7.3 Exterior Environment

System components that are installed in locations exposed to weather shall be rated for continuous operation under ambient environmental conditions of -30 to plus 122 degrees F dry bulb and 10 to 95 percent relative humidity, condensing. In addition, the system components shall be rated for continuous operation when exposed to performance conditions as specified in UL 294 and UL 639 for outdoor use equipment. Components shall be rated for continuous operation when exposed to rain as specified in NEMA 250, winds up to 85 mph and snow cover up to 2 feet thick, SECTION 28 20 01.02 10 Page 12 measured vertically.

1.7.4 Hazardous Environment

System components located in areas where fire or explosion hazards may exist because of flammable gases or vapors, flammable liquids, combustible dust, or ignitable fibers or flying particles, shall be rated and installed according to Chapter 5 of the NFPA 70 and as shown.

1.8 MAINTENANCE AND SERVICE

1.8.1 Warranty Period

Provide all labor, equipment, and materials required to correct deficiencies of added systems components provided under this work and software corrections of the central security systems, for a period of one year after formal written MAJCOM acceptance of the system to include scheduled and nonscheduled adjustments.

1.8.1.1 Description of Work

The repair of the system includes all computer equipment, communications transmission equipment and DTS, local processors, sensors and entry control, facility interface, and support equipment during the Warrany period. Responsibility shall be limited to Contractor installed equipment. Repair, calibration, and other work shall be provided and performed in accordance with the manufacturer's documentation and instruction.

1.8.1.2 Personnel

Service personnel shall be certified in the maintenance and repair of the specific type of equipment installed and qualified to accomplish work promptly and satisfactorily. The Government shall be advised in writing of the name of the designated service representative, and of any change in personnel.

1.8.1.3 Schedule of Work

For other than repair requests by the Government, Contractor shall include teleconference or site visits at five and 11 month after MAJCOM Certification to review any outstanding issues with the contractor provided components of the overall system.

1.8.2 Government Regular Maintenance

The Government will assume all maintenance responsibility for the system once final MAJCOM Certification has been issued following Phase II Testing in accordance with the requirements of SECTION 28 20 00.02 00

CERTIFICATION OF ELECTRONIC SECURITY SYSTEMS.

1.8.2.1 Description of Work

The day to day adjustment of the system includes all computer equipment, software updates, communications transmission equipment and DTS, local processors, sensors and entry control, facility interface, and support equipment. Responsibility is increased to include to Contractor installed equipment provided under this Contract. Normal periodic maintenance and calibration, and other work shall be provided and performed in accordance

SECTION 28 20 01.02 10 Page 13 with the manufacturer's documentation and instruction. The maintenance manual shall include descriptions of maintenance for all equipment including inspection, periodic prevention maintenance, fault diagnosis, and repair or replacement of defective components.

1.8.2.2 System Modifications

System modifications shall not be made without prior approval of the Government. Any modifications made to the system shall result in the updating of the operation and maintenance manuals as well as any other documentation affected.

1.8.3 Emergency Service

The Government will initiate service calls when the system is not functioning properly. Qualified personnel shall be available to provide service to the complete system. The Government shall be furnished with a telephone number where the service supervisor can be reached at all times.

Service personnel shall be at site within 24 hours after receiving a request for service. The system shall be restored to proper operating condition within 8 hours after service personnel arrive onsite and obtain access to the system.

1.8.3.1 Operation

Performance verification test procedures shall be used after all repair activities to verify proper component and system operation.

1.8.4 Software

Provide a description of all software updates to the Government, who will then decide whether or not they are appropriate for implementation. After notification by the Government, implement the designated software updates and verify operation in the system. These updates shall be accomplished in a timely manner, fully coordinated with system operators, and shall be incorporated into the operation and maintenance manuals, and software documentation. Make a system image file so the system can be restored to its original state if the software update adversely affects system performance.

AM#2...

...AM#2

PART 2 PRODUCTS

2.1 MATERIALS REQUIREMENTS

2.1.1 Materials and Equipment

Units of equipment that perform identical, specified functions shall be products of a single manufacturer. All material and equipment shall be new and currently in production. Each major component of equipment shall have the manufacturer's model and serial number in a conspicuous place.

System equipment shall conform to UL 294 and UL 1076 . All components must meet AM#2... AM#2... be listed on Approved Products List ...AM#2 requirements of SECTION 01 91 10.02 29 CYBERSECURITY/RISK MANAGEMENT

FRAMEWORK REQUIREMENTS..

SECTION 28 20 01.02 10 Page 14

2.1.2 Nameplates

Laminated plastic nameplates shall be provided for local processors. Each nameplate shall identify the local processor and its location within the system. Laminated plastic shall be 1/8 inch thick, white with black center core. Nameplates shall be a minimum of 1 x 3 inches, with minimum 1/4 inch high engraved block lettering. Nameplates shall be attached to the inside of the enclosure housing the local processor. Other major components of the system shall have the manufacturer's name, address, type or style, model or serial number, and catalog number on a corrosion resistant plate secured to the item of equipment. Nameplates will not be required for devices smaller than 1 x 3 inches.

2.1.3 Power Line Surge Protection

Equipment connected to alternating current circuits shall be protected from power line surges. Equipment protection shall withstand surge test waveforms described in IEEE C62.41.1 and IEEE C62.41.2 . Fuses shall not be used for surge protection.

2.1.4 Sensor Device Wiring and Communication Circuit Surge Protection

Inputs shall be protected against surges induced on device wiring.

Outputs shall be protected against surges induced on control and device wiring installed outdoors and as shown. Communications equipment shall be protected against surges induced on any communications circuit. Cables and conductors, except fiber optics, which serve as communications circuits from console to field equipment, and between field equipment, shall have surge protection circuits installed at each end. Protection shall be furnished at equipment, and additional triple electrode gas surge protectors rated for the application on each wire line circuit shall be installed within 3 feet of the building cable entrance. Fuses shall not be used for surge protection. Test the inputs and outputs in both normal mode and common mode using the following two waveforms:

a. A 10 microsecond rise time by 1000 microsecond pulse width waveform with a peak voltage of 1500 Volts and a peak current of 60 amperes.

b. An 8 microsecond rise time by 20 microsecond pulse width waveform with a peak voltage of 1000 Volts and a peak current of 500 amperes.

2.1.5 Power Line Conditioners

Furnish a power line conditioner for and each local processor. The power line conditioners shall be of the ferro-resonant design, with no moving parts and no tap switching, while electrically isolating the secondary from the power line side. The power line conditioners shall be sized for 125 percent of the actual connected kVA load. Characteristics of the power line conditioners shall be as follows:

a. At 85 percent load, the output voltage shall not deviate by more than plus or minus 1 percent of nominal when the input voltage fluctuates between minus 20 percent to plus 10 percent of nominal.

b. During load changes of zero to full load, the output voltage shall not deviate by more than plus or minus 3 percent of nominal. Full correction of load switching disturbances shall be accomplished within 5 cycles, and 95 percent correction shall be accomplished within 2 cycles of the onset of the disturbance.

SECTION 28 20 01.02 10 Page 15

c. Total harmonic distortion shall not exceed 3.5 percent at full load.

2.1.6 Field Enclosures

2.1.6.1 Interior Sensor

Sensors to be used in an interior environment shall have a housing that provides protection against dust, falling dirt, and dripping noncorrosive liquids.

2.1.6.2 Exterior Sensor

Sensors to be used in an exterior environment shall have a housing that provides protection against windblown dust, rain and splashing water, and hose directed water. Sensors shall be undamaged by the formation of ice on the enclosure.

2.1.6.3 Interior Electronics

System electronics to be used in an interior environment shall be housed in enclosures which meet the requirements of NEMA 250 Type 12.

2.1.6.4 Exterior Electronics

System electronics to be used in an exterior environment shall be housed in stainless steel enclosures which meet the requirements of NEMA 250 Type 4X.

2.1.6.5 Corrosion Resistant

System electronics to be used in a corrosive environment as defined in NEMA 250 shall be housed in metallic non-corrosive enclosures which meet the requirements of NEMA 250 Type 4X.

2.1.6.6 Power Equipment

Power equipment operating over 24 volts shall be located in separate or barriered compartments within the interior electronics compartment.

2.1.7 Tamper Provisions

2.1.7.1 Tamper Switches

Enclosures, cabinets, housings, boxes, and fittings having hinged doors or removable covers and which contain circuits or connections of the system and its power supplies, shall be provided with cover operated, corrosion-resistant tamper switches, arranged to initiate an alarm signal when the door or cover is moved. Tack welding in lieu of tamper switches are acceptable on boxes without IDS devices installed within. The enclosure and the tamper switch shall function together and shall not allow direct line of sight to any internal components before the switch activates. Tamper switches shall be inaccessible until the switch is activated; have mounting hardware concealed so that the location of the switch cannot be observed from the exterior of the enclosure; be connected to circuits which are under electrical supervision at all times, irrespective of the protection mode in which the circuit is operating;

shall be spring-loaded and held in the closed position by the door or

SECTION 28 20 01.02 10 Page 16 cover; and shall be wired so that the circuit is broken when the door or cover is disturbed. Note: All enclosure doors, field distribution boxes, J-box covers, etc., within the IDS, which are equipped with anti-tamper switch mechanisms, must be tested for proper operation and annunciation at the CCDE.

2.1.7.1.1 Non-sensory Enclosures

Tamper switches must be installed on all non-sensory enclosures.

2.1.7.1.2 Sensory Enclosures

Tamper switches must be installed on all sensory enclosures or housings.

2.1.7.2 Enclosure Covers

Covers of pull and junction boxes provided to facilitate initial installation of the system need not be provided with tamper switches if they contain no splices or connections, but shall be protected by tamper resistant security fasteners. Labels, or nameplates for exterior locations, shall be affixed to such boxes indicating they contain no connections.

2.1.8 Locks and Key-Lock Switches

2.1.8.1 Locks

Locks shall be provided on system enclosures for maintenance purposes.

Locks shall be UL listed, conventional key type lock having a combination of 5 cylinder pin and 5-point 3 position side bar. Keys shall be stamped "U.S. GOVT. DO NOT DUP." The locks shall be arranged so that the key can only be withdrawn when in the locked position. Maintenance locks shall be keyed alike and only 2 keys shall be furnished for all of these locks.

These keys shall be controlled in accordance with the key control plan as specified in paragraph Key Control Plan.

2.1.8.2 Construction Locks

A set of temporary locks shall be used during installation and construction. The final set of locks installed and delivered to the Government shall not include any of the temporary locks. Provisions for government furnished locks during interim construction packages shall be included on all gates.

2.1.9 System Components

System components shall be designed for continuous operation by Vindicator or UL recognized components of a security system. and in accordance with ESE-SIT-001 . Electronic components shall be solid state type, mounted on printed circuit boards conforming to UL 796 . Printed circuit board connectors shall be plug-in, quick-disconnect type. Power dissipating components shall incorporate safety margins of not less that 25 percent with respect to dissipation ratings, maximum voltages, and current carrying capacity. Control relays and similar switching devices shall be solid state type or sealed electro-mechanical.

2.1.9.1 Modularity

Equipment shall be designed for increase of system capability by

SECTION 28 20 01.02 10 Page 17 installation of modular components. System components shall be designed to facilitate maintenance through replacement of modular subassemblies and parts.

2.1.9.2 Maintainability

Components shall be designed to be maintained using commercially available tools and equipment. Components shall be arranged and assembled so they are accessible to maintenance personnel. There shall be no degradation in tamper protection, structural integrity, EMI/RFI attenuation, or line supervision after maintenance when it is performed in accordance with manufacturer's instructions.

2.1.9.3 Product Safety

System components shall conform to applicable rules and requirements of NFPA 70 and UL 294 . System components shall be equipped with instruction plates including warnings and cautions describing physical safety, and special or important procedures to be followed in operating and servicing system equipment.

2.1.10 Controls and Designations

Controls and designations shall be as specified in NEMA ICS 1 .

2.1.11 Special Test Equipment

Provide all special test equipment, special hardware, software, tools, and programming or initialization equipment needed to start or maintain any part of the system and its components. Special test equipment is defined as any test equipment not normally used in an electronics maintenance facility.

2.1.12 Alarm Output

The alarm output of each sensor shall be a single pole double throw (SPDT) contact rated for a minimum of 0.25 A at 12 Volts dc.

2.2 CENTRAL STATION HARDWARE

The central station computer is existing within Entry Control Facility located at Building 800.

2.3 CENTRAL STATION SOFTWARE

Existing Vindicator V5 processors, Vindicator Control Center (VCC) and Security Archiving Workstation (SAW) and Vindicator Badging Manager (VMB)software supports all specified functions.

2.3.1 Real Time Clock Synchronization

The system shall synchronize each real time clock within 1 second and at least once per day automatically, without operator intervention and without requiring system shutdown.

2.3.2 Application Software

The application software shall provide the interface between the alarm annunciation and entry control local processors; monitor all sensors and

SECTION 28 20 01.02 10 Page 18

DTS links; operate displays; report alarms; generate reports; and assist in training system operators. Firmware and software versions within field devices and Vindicator V5 units shall be at the same level as existing Vindicator systems used at Building 800. The following functions are applicable to the LRDR facilities.

2.3.2.1 Operator's Commands

The operator's commands shall provide the means for entry of monitoring and control commands, and for retrieval of system information. The operator's commands shall perform tasks including:

b. Acknowledge alarms.

c. Clear alarms.

d. Place zone in access.

d. Place zone in secure.

e. Test the system.

f. Control security lighting.

g. Entry control functions including:

1. Individually open Building 903 vehicle gates.

2. Individually open Building 903 entry man-door.

2.3.2.2 System Access Control

The system provides a means to define system operator capability and functions through multiple, password protected operator levels. Changes made to the system software shall be reviewed by Government personnel and all changes shall be monitored by Government Personnnel.

2.3.2.3 Alarm Monitoring Software

This existing Vindicator program shall monitor all sensors, local processors and DTS circuits and notify the operator of an alarm condition.

2.3.2.4 VCC Monitor Display Software

Monitor display software shall provide for text and graphics map displays that include zone status integrated into the display. Different colors shall be used for the various components and real time data. Colors shall be uniform on all displays.

2.3.2.5 Map Displays/Graphics Linked to Alarms

a. Relate new and modified system map displays or other graphics to alarms. Whenever one of the predefined alarms is annunciated on a system control terminal, the map display or graphic related to the alarm shall be automatically displayed. The definition of which maps or graphics shall be displayed with each alarm shall be selectable by system operators through simple menu choices as part of the system initial configuration.

SECTION 28 20 01.02 10 Page 19

b. Provide system graphics to allow multiple levels of information for the system operator. The initial level shall provide an overall site map distinguishing sensored facilities and assets. Active links or icons shall be used to trigger the display of subsequent maps, providing greater detail and definition of the area symbolized. These active links or icons shall be color dynamic, reflecting in real-time the highest priority off-normal conditions of the device or map it represents. Multiple layers may be used to arrive at the specific device locations.

c. The system may utilize two monitors for text and map displays respectively for enhancing operator performance.

2.3.2.6 Entry Control Enrollment Software

The enrollment station exists at the existing entry control facility as shown and shall continue existing database management functions for the system, and shall allow an operator to change and modify the data entered in the system as needed.

2.4 FIELD PROCESSING HARDWARE

2.4.1 Alarm Annunciation Local Processors (LPD)

The alarm annunciation local processors Vindicator V5 IDS, Vindicator V5 ACS, AES-1500 or other approved processor for supporting interior or exterior sensor devices shall respond to interrogations from the field device network, recognize and store alarm status inputs until they are transmitted to the central station and change outputs based on commands received from the central station. The local processor shall also automatically restore communication within 10 seconds after an interruption with the field device network and provide dc line supervision on each of its alarm inputs.

2.4.1.1 Inputs

Local processor inputs shall monitor dry contacts for changes of state that reflect alarm conditions. The local processor shall have at least 8 alarm multistate inputs which allow wiring as normally open or normally closed contacts for alarm and tamper conditions. It shall also provide line supervision for each input by monitoring each input for abnormal open, grounded, or shorted conditions using dc current change measurements. The local processor shall report line supervision alarms to the central station. Alarms shall be reported for any condition that remains off normal at an input for longer than 500 milliseconds. Each alarm condition shall be transmitted to the central computer during the next interrogation cycle.

2.4.1.2 Outputs

Local processor outputs shall reflect the state of commands issued by the central station. The outputs shall be a form C contact and shall include normally open and normally closed contacts. The local processors shall have an aggregate of at least four command outputs above those required for specified IDS functions.

SECTION 28 20 01.02 10 Page 20

2.4.1.3 Communications

The local processor shall be able to communicate with the Central Station via RS485 or TCP/IP as a minimum.

2.4.1.4 Processor Power Supply

Local processor and sensors shall be powered from an uninterruptible power source. The uninterruptible power source shall provide 4 hours of battery back-up power in the event of primary power failure and shall automatically fully recharge the batteries within 12 hours after primary power is restored. If the facility is without an emergency generator, the uninterruptible power source shall provide 24 hours of battery backup power. There will be no equipment malfunctions or perturbations or loss of data during the switch from primary to battery power and vice versa.

Batteries shall be sealed, non-outgassing type. The power supply shall be equipped with an indicator for ac input power and an indicator for dc output power. Loss of primary power shall be reported to the central station as an alarm.

2.4.1.5 Auxiliary Equipment Power

A GFI service outlet shall be furnished inside the local processor's enclosure.

2.4.2 Entry Control Local Processor (CRIB)

The entry control (Vindicator V5 ACS) or portal (Vindicator MR-52, MR-51e or similar) processors shall respond to interrogations from the field device network, recognize and store alarm status inputs until they are transmitted to the central station and change outputs based on commands received from the central station. The local processor shall also automatically restore communication within 10 seconds after an interruption with the field device network and provide dc line supervision on each of its alarm inputs. The entry control local processor shall provide local entry control functions including communicating with field devices such as card readers, keypads, biometric personal identity verification devices, door strikes, magnetic latches, gate and door operators and exit pushbuttons as shown. The entry control processor shall also accept data from entry control portal and field devices as well as database downloads and updates from the central station that include enrollment and privilege information. The processor shall also send indications of success or failure of attempts to use entry control field devices and make comparisons of presented information with stored identification information. The processor shall grant or deny entry by sending control signals to portal control devices and mask intrusion alarm annunciation from sensors stimulated by authorized entries. The entry portal local processor shall use inputs from entry control devices to change modes between access and secure. The entry control processor shall maintain a date-time and location stamped record of each transaction and transmit transaction records to the central station. The processor shall operate as a stand-alone portal controller using the downloaded data base during periods of communication loss between the local processor and the central station. The processor shall store transactions during periods of communication loss between the local processor and the central station for subsequent upload to the central station upon restoration of communication.

SECTION 28 20 01.02 10 Page 21

2.4.2.1 Inputs

Local processor inputs shall monitor dry contacts for changes of state that reflect alarm conditions.