B05 AMENDMENT 0006.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04 EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The Solicitation for DBB ARNORTH Bldg 16 South Wing Renovation FSH, is amended as follows:

See SF30 Continuation Sheet(s)

NOTE: <AM#0006> Proposal Bid </AM#0006> Receipt date will be 16 September 2020, 10:00 a.m., CT.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 2

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY

16B. UNITED STATES OF AMERICA 15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer) (Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X 9A. AMENDMENT OF SOLICITATION NO.

W9126G20B0049

X 9B. DATED (SEE ITEM 11)

29-July-2020

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

11-Sept-2020

CODE

US ARMY ENGINEER DISTRICT, FORT WORTH

ATTN: CESWF-CT

819 TAYLOR ST, ROOM 2A19

P.O. BOX 17300

FORT WORTH TX 76102-0300

W9126G 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W9126G20B0049

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

CHANGES TO SOLICITATION W9126G20B0049

CHANGES TO THE SPECIFICATIONS

1. Replacement Sections: Replace the following section with the accompanying new section of the same number and title bearing the notation W9126G20B0049-0006:

28 10 05 ELECTRONIC SECURITY SYSTEMS (ESS)

End of Summary of Changes

FY20 ARNORTH B16 South Wing Renovation FSH20ANB16S

SECTION 28 10 05

ELECTRONIC SECURITY SYSTEMS (ESS)

AMENDMENT NO.6

PART 1 GENERAL

1.1 REFERENCES

The publications listed below form a part of this specification to the extent referenced. The publications are referred to within the text by the basic designation only.

AMERICAN NATIONAL STANDARDS INSTITUTE (ANSI)

ASC/X9 X9.52 (1998) Triple Data Encryption Algorithm Modes of Operation

ASTM INTERNATIONAL (ASTM)

ASTM A123/A123M (2015) Standard Specification for Zinc (Hot-Dip Galvanized) Coatings on Iron and Steel Products

ASTM B32 (2008; R 2014) Standard Specification for Solder Metal

ASTM D709 (2017) Standard Specification for Laminated Thermosetting Materials

BUILDERS HARDWARE MANUFACTURERS ASSOCIATION (BHMA)

ANSI/BHMA A156.23 (2010) Electromagnetic Locks

INSTITUTE OF ELECTRICAL AND ELECTRONICS ENGINEERS (IEEE)

IEEE 802.3 (2015; CORR 2017) Ethernet

IEEE C2 (2017; Errata 1 2017) National Electrical Safety Code

INTELLIGENCE COMMUNITY STANDARD (ICS)

ICS 705-1 (2010) Physical and Technical Security Standard for Sensitive Compartmented Information Facilities

INTERNATIONAL ORGANIZATION FOR STANDARDIZATION (ISO)

ANSI ISO/IEC 7816 (R 2009) Identification Cards - Integrated Circuit Cards

NATIONAL ELECTRICAL MANUFACTURERS ASSOCIATION (NEMA)

NEMA 250 (2014) Enclosures for Electrical Equipment (1000 Volts Maximum)

SECTION 28 10 05 Page 1

W9126G20B0049-0006

NEMA ICS 1 (2000; R 2015) Standard for Industrial Control and Systems: General Requirements

NEMA ICS 2 (2000; R 2005; Errata 2008) Industrial Control and Systems Controllers, Contactors, and Overload Relays Rated 600 V

NEMA ICS 6 (1993; R 2016) Industrial Control and Systems: Enclosures

NATIONAL FIRE PROTECTION ASSOCIATION (NFPA)

NFPA 70 (2017; ERTA 1-2 2017; TIA 17-1; TIA 17-2)

National Electrical Code

NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY (NIST)

NIST FIPS 140-2 (2001) Security Requirements for Cryptographic Modules

NIST FIPS 201-2 (2013) Personal Identity Verification (PIV) of Federal Employees and Contractors

OPEN NETWORK VIDEO INTERFACE FORUM (ONVIF)

ONVIF (2015) Core Specification Version 2.6

TELECOMMUNICATIONS INDUSTRY ASSOCIATION (TIA)

TIA-568-C.2 (2009; Errata 2010; Add 2 2014; Add 1 2016) Balanced Twisted-Pair Telecommunications Cabling and Components Standards

TIA-606 (2012b; Add 1 2015) Administration Standard for the Telecommunications Infrastructure

U.S. DEPARTMENT OF DEFENSE (DOD)

DODI 8500.01 (2014) Cybersecurity

U.S. NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA)

47 CFR 15 Radio Frequency Devices

UNDERWRITERS LABORATORIES (UL)

UL 1037 (2016) UL Standard for Safety Antitheft Alarms and Devices

UL 1076 (1995; Reprint Mar 2015) Proprietary Burglar Alarm Units and Systems

UL 1610 (2016) UL Standard for Safety Central-Station Burglar-Alarm Units

UL 294 (2013; Reprint Feb 2015) Access Control System Units

SECTION 28 10 05 Page 2

UL 437 (2013) Key Locks

UL 50 (2015) UL Standard for Safety Enclosures for Electrical Equipment, Non-Environmental Considerations

UL 634 (2007; Reprint Mar 2015) Connectors and Switches for Use with Burglar-Alarm Systems

UL 639 (2007; Reprint May 2012) Standard for Intrusion Detection Units

UL 681 (2014) Installation and Classification of Burglar and Holdup Alarm Systems

UL 796 (2016) UL Standard for Safety Printed-Wiring Boards

UL 969 (2017) UL Standard for Safety Marking and Labeling Systems

1.2 SUBMITTALS

Government approval is required for submittals with a "G" designation;

submittals not having a "G" designation are for Contractor Quality Control approval.

SD-02 Shop Drawings

ESS Components; G

Overall System Schematic; G

SD-03 Product Data

Premise Control Unit; G

Detection Sensors; G

Access Control Unit; G

Access Control Devices; G

Cameras; G

Camera Lenses; G

Camera Housing and Mounts; G

Video Recording; G

Printers; G

Network Switch; G

Uninterruptible Power Supply (UPS); G

Batteries; G

SECTION 28 10 05 Page 3

Component Enclosure; G

Equipment Rack; G

SD-05 Design Data

Backup Battery Capacity Calculations; G

Access Control Throughput Rates; G

CCTV Storage Calculations

SD-07 Certificates

Contractor Qualifications; G

Instructor Qualifications; G

SD-10 Operation and Maintenance Data

Training Plan; G

Training Content; G

ESS Components

SD-11 Closeout Submittals

As-Built Drawings; G

1.3 QUALITY ASSURANCE

1.3.1 Regulatory Requirements

The advisory provisions in each of the publications referred to in this specification are mandatory. Interpret these publications as though the word "must" has been substituted for "should" wherever it appears.

Interpret references in these publications to the "authority having jurisdiction," or words of similar meaning, to mean the Contracting Officer.

Equipment, materials, installation, and workmanship must be in accordance with the mandatory and advisory provisions of NFPA 70 unless more stringent requirements are specified or indicated.

1.3.2 Standard Products

Provide materials and equipment that are products of manufacturers regularly engaged in the production of such products which are of equal material, design and workmanship and:

a. Have been in satisfactory commercial or industrial use for 2 years prior to bid opening, and have been utilized in applications of equipment and materials under similar circumstances and of similar size.

b. Have been available on the commercial market through advertisements, manufacturers' catalogs, or brochures during the 2-year period.

c. Where two or more items of the same class of equipment are required, SECTION 28 10 05 Page 4 provide products of a single manufacturer.

d. Provide commercial off-the-shelf (COTS) products in which the manufacturer allows a network of qualified distributors to sell, install, integrate, maintain, and repair the hardware and software products that make up the system.

1.3.2.1 Alternative Qualifications

Products having less than a 2 year field service record will be acceptable if a certified record of satisfactory field operation for not less than 6000 hours, exclusive of the manufacturers' factory or laboratory tests, is furnished.

1.3.2.2 Material and Equipment Manufacturing Date

Products manufactured more than one year prior to date of delivery to the site are not acceptable.

1.3.2.3 Product Safety

System components are to conform to applicable rules and requirements of NFPA 70. Equip system components with instruction stickers including warnings and cautions describing physical safety, and special or important procedures to be followed in operating and servicing system equipment.

1.3.3 Shop Drawings

1.3.3.1 ESS Components

Submit the ESS Components, Data Package 4 with the ESS Software submittal package.Submit drawings that clearly and completely indicate each ESS component function that includes:

a. Termination device points

b. Interconnections required for system operation

c. Interconnections between modules and devices

d. Proposed wireway or conduit systems to be used including:

(1) Locations

(2) Sizes

(3) Types

e. Drawings showing:

(1) Device locations and spacing

(2) Mounting and positioning details

(3) Riser Diagrams with cable sizes and types

(4) Bill of Materials (Device make, model and quantities)

(5) Alarm and access control zones

SECTION 28 10 05 Page 5

(6) CCTV and sensor coverage areas

(7) Spare capacity

1.3.3.2 Overall System Schematic

Indicate the relationship of integrated components on one-line diagram and show:

a. Power source

b. System controls

c. Impedance matches

d. Interconnecting wire data including:

(1) Number

(2) Size

(3) Identification

(4) Maximum lengths

1.3.4 Evidence of Experience and Qualifications

1.3.4.1 Contractor Qualifications

Submit experience and certified qualifications data prior to installation.

Show that specific installers who will perform the work have a minimum of 5 years of experience successfully installing ESS of the same type and similar design as specified. Include the names, locations, and points of contact of at least two installations of similar type and design as specified in this document where the installer has installed such systems.

Indicate the type of each system installed. Certify that each system has performed satisfactorily in the manner intended for a period of at least 12 months.

1.3.4.2 Instructor Qualifications

Submit the instructor's experience and certified qualifications data prior to installation. Show that the instructor has received a minimum of 24 hours of ESS training from a technical organization such as the National Burglar and Fire Alarm Association, and 2 years experience in installing the specified ESS type.

1.4 Environmental Conditions

1.4.1 Interior Conditions

Equipment installed in environmentally protected interior areas must meet performance requirements specified for the following ambient conditions:

1.4.1.1 Temperature

32 to 120 degrees F. Components installed in unheated security protected areas must meet performance requirements for temperatures as low as 0

SECTION 28 10 05 Page 6 degrees F

1.4.1.2 Pressure

Sea level to 15,000 feet above sea level

1.4.1.3 Relative Humidity

5 to 95 percent

1.4.1.4 Fungus

Components must be constructed of nonfungus nutrient materials or be treated to inhibit fungus growth

1.4.1.5 Acoustical Noise

Components must be suitable for use in high noise areas above 100 dB, without adversely affecting their performance

1.4.2 Exterior Conditions

Components in enclosures must meet performance requirements when exposed to the following ambient conditions:

1.4.2.1 Temperature

Minus 25 to 140 degrees F

1.4.2.2 Pressure

Sea level to 15,000 feet above sea level

1.4.2.3 Solar Radiation

Six hours of solar radiation per day at dry bulb temperature of 120 degrees F including 4 hours of solar radiation at 104 watts per square foot

1.4.2.4 Sand and Dust

Wind driven for up to 6 miles per hour (mph)

1.4.2.5 Rain

2 inches per hour and 5 inches per hour cyclic with wind plus one period of 12 inches per hour

1.4.2.6 Humidity

5 to 95 percent

1.4.2.7 Fungus

Warm, humid atmosphere conducive to the growth of heterotropic plants

1.4.2.8 Salt Fog

Salt atmosphere with 5 percent salinity

SECTION 28 10 05 Page 7

1.4.2.9 Snow

Snow loading of 48 (psf) per hour; blowing snow of 4.6 psf per hour

1.4.2.10 Ice Accretion

Up to 1/2 inches of radial ice

1.4.2.11 Wind

Continual velocity up to 50 mph with gusts to 66 mph, except that fence sensors must detect intrusions up to 35 mph

1.4.2.12 Acoustical Noise

Components must be suitable for use in high noise areas above 110 dB without adversely affecting their performance. Examples areas include flight lines, runup pads, and generator sites.

1.5 SYSTEM CALCULATIONS AND ANALYSIS

1.5.1 Backup Battery Capacity Calculations

Submit calculations showing that backup battery capacity exceeds sensor operation, communications supervision, and alarm annunciation power requirements for proposed equipment plus 25 percent spare capcity.

1.5.2 CCTV Storage Calculations

Submit calculations showing the required storage capacity for each video storage device.

1.6 ESS SOFTWARE, DATA PACKAGE 4

Submit the ESS software, Data Package 4 with the ESS Components submittal package. Describe the functions of all software in the software manual and include:

a. All information necessary to enable proper loading, testing, and operation

b. Terms and functions definitions

c. Use of system and application software

d. Procedures for system initialization, start-up and shutdown

e. Alarm reports

f. Reports generation

g. Database format and data entry requirements

h. Directory of all files

i. All communication protocol descriptions, including data formats, command characters, and a sample of each type of data transfer

j. Interface definition

SECTION 28 10 05 Page 8

k. List of software keys

1.7 AS-BUILT DRAWINGS

Maintain a separate set of drawings, elementary diagrams, and wiring diagrams of the system to be used for as-built drawings. Keep this set accurately and neatly up-to-date with all changes and additions. This set is not to be used for installation purposes.

Finish the final drawings submitted with the test report for as-built requirements.

PART 2 PRODUCTS

2.1 SYSTEM DESCRIPTION

Provide a complete and integrated electronic security system (ESS) that the meet requirements of a secure facility. ESS must be compatible with the Installation's central monitoring system and monitored within the secure/protected area and at the Installation central monitoring station ESS consisting of the following subsystems and features:

a. Intrusion Detection System (IDS)

b. Access Control System (ACS)

c. Closed-circuit Television System (CCTV)

d. Communications System

e. Security Lighting Systems

f. Section 26 20 00 INTERIOR DISTRIBUTION SYSTEM

2.2 PERFORMANCE REQUIREMENTS

Integrate the installed and operating subsystems into the overall ESS system to detect intrusion, control access, provide CCTV surveillance, provide visual verification, and perform as an entity, as specified below. Provide electronic equipment that complies with 47 CFR 15 and are suitable for the environment where they will be installed.

2.2.1 Growth Capability

Provide capability for modular ESS expansion of inputs, outputs, card readers, and remote control stations with minimal equipment modification.

Software must be able to handle design requirements plus 25 percent spare capacity. Growth capability is not to be limited by the provided products.

2.2.2 Hazardous Locations

When located in areas where fire or explosion hazards exist, provide system components rated and installed according to Chapter 5 of NFPA 70.

2.2.3 Network Certification

Certify all Platform Information Technology (PIT) in accordance with DODI 8500.01 and the individual service implementation policy.

SECTION 28 10 05 Page 9

2.2.4 Maintainability

Provide components that can be maintained using commercially available tools and equipment. Arrange and assemble components to be readily accessible to maintenance personnel without compromising system defeat resistance and with no degradation in tamper protection, structural integrity, EMI or RFI attenuation, or line supervision after maintenance when it is performed in accordance with manufacturer's instructions.

2.2.5 Availablity

Provide components rated for continuous operation. Provide solid-state electronic components mounted on printed circuit boards, conforming to UL 796. Provide boards that are plug-in, quick-disconnect type. Do not impede maintenance with densely packed circuitry. Provide power-dissipating components with safety margins of not less than 25 percent with respect to dissipation ratings, maximum voltages, and current-carrying capacity. Provide solid-state type or hemetically sealed electromechanical type light duty relays and similar switching devices.

2.2.6 Fail-Safe Capability

Provide fail-safe capability in critical elements of the ESS including, but not be limited to, the capability to monitor communication link integrity and to provide self-test. Provide fault annunciation when diminished functional capabilities are detected. Annunciate fail-safe alarms to clearly distinguish from other types of alarms.

2.2.7 Line Supervision

Provide the same geographic resolution for fault isolation at the systems level as provided for intrusion detection. Provide either a static or dynanmic system with active mode for line supervision of communication links of the ESS.

a. The static system must represent "no-alarm" always by the same signal, which is different than the originally transmitted signal.

b. The dynamic system must represent "no-alarm" with a signal which continually changes with time.

2.2.8 Power Loss Detection

Detect AC and DC power loss and generate an alarm when a critical component of the system experiences temporary or permanent loss of power. Annunciate the alarm in the Secured Area and the Security Command Center to clearly identify the component experiencing power loss.

2.2.9 Controls and Designations

Provide controls and designations as specified in NEMA ICS 1.

2.2.10 Special Test Equipment

Provide all special test equipment, special hardware, software, tools, and programming or initialization equipment needed to start or maintain any part of the system and its components. Special test equipment is defined as any test equipment not normally used in an electronics maintenance

SECTION 28 10 05 Page 10 facility.

2.2.11 Electromagnetic Interference (EMI)

Configure and provide ESS components employing electromagnetic radiation constructed to provide minimal vulnerability to electronic countermeasures.

2.2.12 Electromagnetic Radiation (EMR)

Provide only ESS communication components which are Federal Communications Commission (FCC) licensed and approved. Provide system components which are electromagnetically compatible.

2.2.13 Interchangeability

Use off-the-shelf components which are physically, electrically, and functionally interchangeable with equivalent components as complete items.

Equivalent, replacement components must not require new or other component modification. Do not use custom designed or one-of-a-kind items.

Interchangeable components or modules must not require trial and error matching in order to meet integrated system requirements, system accuracy, or restore complete system functionality.

2.3 INTRUSION DETECTION SYSTEM (IDS)

The IDS primary function is to detect intrusion into secured areas.

Utilize a single database for all IDS programming data that seamlessly integrates with the ESS under a single operating environment. The IDS events must be viewable as separate or as a combined list of all ESS events. Control the IDS alarm monitoring through software control from the

ESS.

a. Provide both supervised and non-supervised alarm point monitoring.

b. Arm or disarm alarm points both manually and automatically by time of day, day of week or by operator command.

2.3.1 IDS Components

Provide components:

a. Premise Control Units (PCU)

b. Detection Sensors

c. Tamper Switches

2.3.2 Detection Sensitivity

The sensitivity of the IDS must allow for the following:

a. Locating intrusions within 75 feet zones along a line or perimeter

b. Locating intrusions at individually protected assets or at an individual portal

c. Locating intrusions within the coverage on a single volumetric sensor

d. Locating failures or tampering at individual sensors

SECTION 28 10 05 Page 11

2.3.3 Detection Alarm and Reporting Capacity

Collect, communicate, and display up to 256 sensor zone alarms and to enable control of four card reader with integral keypad for arming and disarming inside of the protected area with a delayed alarm.

Identify individual sensors in alarm if the sensor zone is a multiple alarm source combination. Annunciate a single alarm within 1 seconds maximum, after sensor transducer or other detection device activation except that alarms transmitted by radio frequency signaling must communicate in less than 3 seconds.

2.3.4 False Alarm Rate

The false alarm rate for each interior IDS zone must not exceed one false alarm per 30-day period. The false alarm rate for each exterior IDS zone must not exceed one false alarm per 24-hour period.

2.3.5 Nuisance Alarm Rate

The nuisance alarm rate for each interior IDS zone must not exceed three nuisance alarms per 30-day period. The nuisance alarm rate for each exterior IDS zone must not exceed three nuisance alarms per 24-hour period.

2.3.6 Premise Control Unit (PCU)

Install the PCU command processor in a tamper resistant enclosure that is specified in paragraph "Component Enclosure". Package the following with the PCU:

a. Power transformer

b. Battery(s)

c. Network connection cable

d. Keypad(s)

e. Keypad connection cable(s)

f. Additional components as required for full functionality

2.3.6.1 PCU Capabilities

Provide the PCU at a minimum but not limited to, the following capabilities;

a. Expansion to a total of at least 10,000 user codes with 99 user profile definitions.

b. Support 8 keypads with alphanumeric display. Each keypad must be capable of arming and disarming securing and accessing any system area based on a pass code or access control card and or key FOB authorization. Provide keypad alphanumeric display with complete prompt messages during all stages of operation and system programming and display all relevant operating and test data.

c. Four 4 shift schedules per area.

SECTION 28 10 05 Page 12

d. A total of at least 100 programmable output relay schedules.

e. 64 individual reporting areas.

f. Data line supervision or two separate lines of communication.

g. Support programming to require the same or different access code entered within a programmed delay time of 2 minutes after disarming before activating a silent ambush alarm.

h. Support area programming that disables schedule and time-of-day changes while system is armed so that area can only be disarmed during scheduled times.

i. Provide a minimum of a 4,000 event log buffer per PCU. Record and hold alarm activity information in the log buffer until the ESS is connected and receives the information. Provide a software-configurable warning log buffer filling notification for PCU(s) configured with network switch capabilities.

j. Support a Network Interface Card (NIC) plug-in module with built in network router capable of 128 Bit AES Rijndael Encryption process certified by NIST (National Institute of Standards and Technology).

2.3.6.2 Overcurrent Protection and Indication

When overcurrent more than it is rated for is detected by the PCU, communication bus(es) and keypad(s) are to be shut down and an overcurrent notification LED lit to indicate the situation.

2.3.6.3 Manual and Self-Test

All testing from any alphanumeric keypad include testing for: standby battery, alarm bell or siren, and communication to the Security Command Center (SCC). Include provisions for an automatic, daily, weekly, 30 day, or up to 60 day communication link test from the PCU installation site to the SCC. Include a provision for displaying the internal system power and wiring conditions.

Include the following for internal monitoring points:

a. The bell circuit

b. AC power

c. Battery voltage level

d. Charging voltage

e. Panel box tamper

f. Phone trouble line 1

g. Phone trouble line 2

h. Transmit trouble

i. Network trouble

SECTION 28 10 05 Page 13

A battery test must be automatically performed to test the integrity of the standby battery by disconnecting the standby battery from the charging circuit and placing a load on the battery. Perform this test at an interval no greater than 180 days.

2.3.7 Detection Sensors

a. Sensors are to detect facility perimeter or protected zone penetrations by unauthorized personnel or intruders and transmit an alarm signal to the alarm annunciation system upon change detection. Accomplish this with a probability of detection (PD) of 0.9 with a 95 percent confidence level and conforming to UL 639 where applicable.

b. Required sensor power is 12 VDC unless otherwise specified.

c. An interior IDS zone is a room or space within a building that can be armed and disarmed independently from all other zones.

d. Provide line supervision for all sensors with an end-of-line resistor at the sensor or within a tampered junction box with conduit from the junction box to the sensor.

d. Provide sensors and components rated for operation in the installed environment. The sensors must transmit an alarm signal to the alarm annunication system upon change detection. Provide all sensors with a tamper switch and elements housed in a tamper-alarmed enclosure in accordance of paragraph "Component Enclosure".

2.3.7.1 Interior Sensors

2.3.7.1.1 High Security Balanced Magnetic Switch (BMS)

Mount the BMS inside the secure location and on the opening side of the door. BMS sensors do not have the capability to incorporate an end-of-line (EOL) resistor.

2.3.7.1.1.1 Level 1 Switch

UL 634. Level 1 High Security

2.3.7.1.1.2 Level 2 Switch

UL 634. Level 2 High Security

2.3.7.1.2 Dual Technology Sensors

UL 639. Provide sensor combining passive infrared (PIR) and microwave sensors configured and manufactured specifically to be mounted in a single tamper alarmed enclosure. The sensor must provide selectable "AND" logic or "OR" logic for alarm indication configured in the "OR" logic state.

Provide sensors that have a local means of indicating detection for use during installation and calibration with a means of disabling the indication.

The sensor is to have an LED walk test indicator which is not visible during normal operations. When visible, the walk test indicator will light when the sensor detects an intruder. Provide a sensor equipped with a manual control, located within the sensor's housing, to enable and disable the test indicator or with the test indicator located within the sensor

SECTION 28 10 05 Page 14 housing so that it can only be seen when the housing is open or removed.

2.3.7.1.3 Photoelectric Sensors

UL 639. The sensor is to detect opaque bodies and not allow an intruder to disable detection by shining another light source into the receiver.

Provide sensor with a local means of indicating detection for use during installation and calibration with a means of disabling the indication.

2.3.7.2 Exterior Sensors

2.3.7.2.1 Monostatic Microwave Sensor

a. Multiple sensors must be able to operate in adjacent zones without interfering with each other. Provide sensors with adjustable sensitivity controls within the sensor that are not accessible when the sensor housing is in place. The sensor must be adjustable to obtain the coverage pattern shown and have range cut off capabilities of field selected distance 100 to 400 feet.

b. The monostatic microwave sensor must consist of an integrated transceiver. The sensor detects changes from a standard intruder in the received microwave signal sensor's detection pattern. The sensor must transmit an alarm signal to the alarm annunciation system upon detecting such changes. The sensor must detect a standard intruder moving perpendicular through the sensor's detection pattern at a speed of 0.2 to 25 fps.

c. The sensor is to be equipped with an LED walk test indicator which is not visible during normal operations. When visible, the walk test indicator is to light when the sensor detects an intruder. Provide sensors equipped with a manual control, located within the sensor's housing, to enable and disable the test indicator or with the test indicator located within the sensor housing so that it can only be seen when the housing is open or removed.

2.3.7.3 Tamper Switches

a. Corrosion-resistant tamper switches are required for the following IDS and CCTV equipment with hinged doors or removable covers that contain open circuits:

(1) Enclosures

(2) Cabinets

(3) Housings

(4) Boxes

(5) Raceways

(6) Fittings

(7) Sensors

b. Tamper switches are to initiate an alarm signal when the door or cover is moved as little as 1/4 inch from the normally closed position.

SECTION 28 10 05 Page 15

Mechanically mount tamper switches to maximize defeat time when enclosure covers are opened or removed. One second is the minimum amount of time required to depress or defeat the tamper switch after opening or removing the cover. Enclosure and tamper switch must prevent direct line of sight to internal components and prevent switch or circuit tampering. Conceal mounting hardware so switch cannot be observed from enclosure exterior.

c. Tamper switches on doors which are opened to make normal maintenance adjustments to the system and to service power supplies must not have a maintenance position. Provide two positions tamper switches.

2.3.7.3.1 Tamper Switch Performance Requirements

Tamper switches are to be:

a. Inaccessible until switch is activated.

b. Under electrical supervision at all times, irrespective of the protection mode in which the circuit is operating.

c. Annunciated to be clearly distinguishable from intrusion detection alarms and exempt from being disarmed, shunted, or silenced.

d. Spring-loaded and held in the closed position by the door, or cover protected.

e. Wired to break the circuit when the door or cover is disturbed.

f. Wired so that each sensor and device is annunciated individually at the central reporting processor.

2.4 ACCESS CONTROL SYSTEM (ACS)

Provide an access control system based upon a modular distributed microprocessor architecture complete with access control cards and ready for operation.

a. The ACS card credentials are required to be Common Access Cards (CAC), and CAC cards are being provided by the Government. Interface system with and provide alarm and other status to the overall ESS. Provide ACS that meets the communications requirements of UL 1076 and UL 294 and has the capability of controlling up to 16 card readers and keypads per card reader controller, 256 alarm inputs, or 256 relay outputs or any components combination.

b. System is to grant or deny access or exit based upon:

(1) Keypad identification data

(2) CAC card identification data

(3) Video

(4) Biometric reader identification data

(5) Smart card identification data

(6) Identification technologies combination

SECTION 28 10 05 Page 16

(7) Input through the access control devices compared to data stored within the system

(8) Time of day, day of week, and special day and holiday scheduling with card validation override.

c. Decision to grant or deny access or exit is to be based upon authorization for such data to be input at a specific location for the current time period.

d. Provide ACS that supports the configuration and simultaneous monitoring of multiple access control devices when TCP/IP communication interfaces are used between the ESS and the primary Access Control Unit (ACU).

The events of the ACS are to be viewable as separate or as a combined list of all ESS events. Provide overall control of the ACS, alarm monitoring, and photo identification through software control of the

ESS.

e. Access control, photo imaging, and programming data must reside on a single database and instantly accessible to every networked PC workstation connected to the ESS.

f. Provide both supervised and non-supervised alarm point monitoring.

g. Provide the capability to arm or disarm alarm points both manually and automatically by time of day, day of week or by operator command and the capability to disarm alarm points based on a valid access event.

h. When used for elevator control, the ACS is to grant access to elevator floors based on a valid credential, or by schedule.

i. Provide programmable 'delay' setting for all alarm points. The alarm points are not to report an ENTRY type alarm until the delay setting has expired and not report a dwell type alarm condition until the alarm has been active for the full delay period.

j. Provide the capability to place ACU(s) in an off-line mode. In the off-line mode, the ACU(s) must retain a historical summary of all ACU activity transactions, up to the maximum capacity of the ACU memory buffer. Provide the ability for manual operator control of system output relays with the manual functions to energize, de-energize, enable or disable.

k. Provide the ability to display a stored 'video image' of the cardholder based on card activity, and switch real-time CCTV camera to the card reader location for specific card usage. The card reader must not activate the door lock until positive operator acknowledgment from the

SCC.

2.4.1 ACS Badging Requirements

Include fully integrated badging capabilities, including image capture, image editing, badge design, and badge printing. Allow for each cardholder to be assigned to both a badge design formatted for badge printing and a dossier design formatted for standard paper printing. The system must permit the storage of four different images:

a. Main photograph

SECTION 28 10 05 Page 17

b. Alternate photograph

c. Signature

d. Fingerprint

Provide for interfacing with external badge programs, in which stored photo images are displayed in a cardholder information window but other badge features are supported by the external program. Include one or more networked PC workstations with the photo imaging components at which all of the required image capture equipment has been installed.

2.4.2 ACS Programming

Provide software capable of, but not limited to, the following programming:

2.4.2.1 Time Schedules

Provide up to 256 user-definable time schedules. These time schedules are to determine the day(s) and times that access will be granted or a scheduled event is to occur. Any and all of the time schedules are to be available for defining access privileges and scheduled events. Provide ALWAYS and NEVER schedules that cannot be altered or removed from the system. Each user-defined time schedule must have the option of reacting or not reacting to user-defined special days, with the ability to react uniquely to each type of special day.

2.4.2.2 Special Days

Provide an unlimited number of user definable special days to be used for configuring exceptions to the normal operating rules, typically for specifying holiday operating rules. Allow for each special day to be assigned to a user-defined type.

2.4.2.3 ACU Daylight Savings Time Adjustment

Provide a software-configurable, user defined adjustment for Daylight Savings Time. The ACU must not need to be connected to a PC workstation in order for the adjustment to occur.

2.4.2.4 Scheduled Events

Any access controlled reader is to be capable of scheduled unlock periods to allow for card-free access. The access controlled reader is to also be capable of requiring one valid access event before beginning a scheduled unlock period.

Any access control point is to be capable of requiring a valid card as well as a PIN code via keypad on a scheduled basis for high security areas. The use of PIN via keypad functions must not reduce the number of card readers or alarm points available in the ACU(s). Any designated alarm input must be able to be scheduled Armed and Disarmed. Any relay output must be capable of scheduled ON and OFF periods to allow for automatic input and output system control.

2.4.2.5 Maximum User Capability

Up to 64,000 individual users may be given access cards or codes and have

SECTION 28 10 05 Page 18 their access controlled and recorded.

2.4.2.6 Active and Expire Dates

Any card or user may be configured with activation and expiration dates.

The card can be assigned to any valid access group and will be activated and expired according to the specified dates.

2.4.2.7 Maximum Use Settings

Any card or user may be configured with maximum number of uses for that card. The card can be assigned to any valid access group and will be expired according to the specified number of card uses.

2.4.2.8 Door Outputs

Provide each access control reader with two dedicated relay outputs. Both relays are to provide Normally Open and Normally Closed contacts. Use the first relay for electric lock control while the second is software configurable to activate for door forced open, door left open too long, duress, passback violations, invalid access attempts and valid unlock conditions. Allow for both relays to be separately programmable for energize times from 1 second to 10 minutes. The second relay must allow a delay time to be specified, causing its activation to be delayed after an activating condition occurs.

2.4.2.9 Anti-Passback

Provide global anti-passback capability. Any door on the system can be linked to one of 256 user defined passback areas or two 1 pre-defined areas. Each door may be set up to automatically forgive passback entries at one of the following intervals:

(1) Never

(2) Midnight

(3) Every 12 hours (Midnight and Noon)

(4) Every 6 hours

(5) Every 2 hours

(6) Each hour

(7) Every 30 minutes

Each door can be configured to deny or grant access for passback violations and individual users can be exempt to the passback rules. The anti-passback features must be a global function and operate completely independent of the ACS software, except configuring the passback rules.

Additionally, the operator is to have the ability to manually forgive an individual user or all users by command from the ACS.

2.4.2.10 Two Person Rule

Any access control reader on the system is to have the ability via software prgoramming to require two valid cards for access. Any access control reader on the system that includes a keypad is to also have the ability to

SECTION 28 10 05 Page 19 require a valid PIN number associated with each of the two valid cards.

2.4.2.11 User List or Who's In (Muster Reports)

Provide the capability to generate dynamic lists of users in certain access-controlled areas, based either upon selected users or selected areas. The lists must have the option of automatically refreshing after a user-selected interval of time.

2.4.2.12 Crisis Mode

Provide support for a "crisis mode", in which user-selected alarm point activations cause changes to user access privileges. The changes to user access privileges must be configurable to restrict normal access to no access or limited access.

2.4.2.13 Door Groups

Allow up to 128 door groups to be configured. Doors belonging to the same group are be able to be locked, unlocked, disabled, and enabled on command from the ACS.

2.4.2.14 Door Interlocking

Allow a group of doors to be software configured so that if any door in the group is unsecure, all other doors are automatically disabled. This feature is also known as a "mantrap" configuration. The interlocking features must not require the ACS to be on-line for proper operation.

2.4.2.15 PIN Required

Provide support for the required use of a keypad code, in addition to a valid credential during user-selected schedules.

2.4.2.16 Remote Door Control

Provide the ESS operator the capability of manually controlling any access point by issuing a simple command from the ACS. Provide the operator the ability to lock, unlock, enable, and disable any door or Door Group in this manner. This activity is to cause an entry to be logged displaying the door name, number and time that it was performed.

2.4.2.17 Key Control

When interfaced with an approved key-control system, the system is to allow users to deny access to certain doors for any users who have keys in their possession.

2.4.2.18 Guard Tour

Provide support for user-defined guard tours configurable in a set pattern of tour points, or following a mode in which all tour points can be visited in any order within an allotted time. Allow for a tour to be started by ACS command, by use of a selected card at a selected reader, or by use of a selected keypad code at a selected keypad. Detect guard late-to-point, point missed, and point out-of-sequence events. Generate a report at tour completion.

SECTION 28 10 05 Page 20

2.4.2.19 Reader Disable

Provide support for disabling readers in reaction to a user-selected number of invalid access attempts. Locate a camera to view the card reader and interface to record the events of invalid access attempts.

2.4.2.20 Disable Event Messages

Allow users to disable user-selected event messages (Door Forced Open, Door Open Too Long, Door Closed, Request to Exit) for user-selected doors.

Allow users to disable certain messages (Door Forced Open, Door Open Too Long) according to a user-selected schedule.

2.4.2.21 Input and Output Groups

Allow for up to 256 user-defined (input and output) groups to be defined.

Each Input device is to be able to be linked to these groups for arming, disarming, shunting and unshunting as well as output control.

2.4.2.22 Delays

Each alarm device must allow a delay to be specified which is either an entry type or a dwell type. An entry-type delay is to prevent the input from issuing an alarm event until the delay elapses. If unarmed during the delay period, the alarm is to be ignored. A dwell-type delay requires the input to remain in the alarm state for the full delay duration before issuing an alarm.

2.4.2.23 Output Configuration

Allow each output relay to be software configurable as:

(1) Follows

(2) Latch

(3) Timeout

(4) Scheduled

(5) Timeout Re-triggerable

(6) Limit

(7) Counter

Allow for a time schedule to automatically control the activiation and de-activation of the Scheduled type with all other types configured to activate based on input and output group conditions. Additionally, a time schedule must be specified to configure when the output is to actively monitor the input and output groups.

2.4.2.24 Remote Output Control

Provide the operator the capability of manually controlling any output point by issuing a simple command from the SCC. Based upon the output type, provide the ESS operator the ability to ENABLE, DISABLE, turn ON and turn OFF any output in this manner. A FOLLOWS type output must not be capable of being turned OFF or ON. Log an entry when this activity is performed displaying the output name and time performed. Manual control of

SECTION 28 10 05 Page 21 outputs are not permissible in ICS 705-1 applications.

2.4.2.25 Remote Reset Command

Provide the capability for any ACU to reset manually or by command issued from the ACS with the option of simulating the ACU reset settings, or forcing a reset type as specified by the user. The remote reset command is not to cause the ACU to degrade its level of protection to any access points defined.

2.4.2.26 Time Zone

Allow the user to select the time zone in which the ACU is located, so that event times displayed for that ACU will match the local time where the ACU is located.

2.4.2.27 User-Selected LED Behavior

Allow the user to select different behaviors for the LEDs of each access controlled reader.

2.4.2.28 Traced Cards

Provide the capability of selecting any number of cardholders for the purpose of limiting reports to only traced users displaying all traced cardholder events in a user-selected alternate color.

2.4.2.29 Badge Print Tracking

Support setting a print limit for any badge. The software will track the number of times any badge has been printed, as well as display the date and time of the most recent printing.

2.4.3 Error and Throughput Rates

Rates must be portal to portal performance averages obtained when processing individuals one at a time. Features are not to reduce capability to meet throughput requirements when serial verification techniques or multiple attempts are required to satisfy error performance requirements.

A Type I error denies access to an authorized enrolled individual. A Type II error grants access to an unauthorized individual. Subsystem Type I and Type II error rates must both be less than 0.1 percent. At the error rates, subsystem access throughput rate must be minimum of 12 individuals per minute through one card reader and keypad access control device.

2.4.4 Access Control System Central Processing

a. Provide serial management and control of system processing. Provide a microprocessor control device able to monitor and control units and up to 32 card reader and keypad access control devices. Central processor must interrogate and receive responses from each ACU within 100 milliseconds. Failure to respond to an interrogation is to cause an alarm.

b. Provide the central processor with a Ethernet interface port to communicate with the printer. Provide an operator interface to control system operating functions. Provide the central processor with a

SECTION 28 10 05 Page 22 facility-tailorable data base for a minimum of 1000 cardholders with by-name alphanumeric printout, and for automated IDS monitoring, management, and control functions.

c. Provide enrollment equipment as required in paragraph ENROLLMENT CENTER

EQUIPMENT.

d. Provide system configuration controls and electronic diagnostic aids for subsystem setup and troubleshooting with the central processor.

Components are not to be accessible to operations personnel and must be tamper alarmed.

2.4.5 Access Control Unit(ACU)

UL 294. Provide micro-processor based ACU with all access and input and output decisions to be made by the individual ACU(s). Provide modular solution which will allow for present security requirements and the capability to expand. Configure all field ACU panels to intercommunicate via TCP/IP or fiber-optic communication. Equip all field ACU(s) with a tamper contact.

Designate one ACU as "Primary", responsible for all ACS-to-ACU communications. All other ACU(s) up to a maximum of 32 are to be designated as "Secondary" and communicate with the "Primary" via an TCP/IP network or fiber-optic configuration. Provide ACU capable of, but not limited to, the following:

a. Built-in surge suppression circuitry on plug-in modular circuit boards with surge suppression, configured as an integral component of the system and self-sacrificing in the event of extreme surges or spikes.

b. Capable of supporting at least 2 ports and be expandable in increments of two ports up to a maximum of 16 ports per ACU.

c. Each port configured by ACS to support any one of the following peripheral devices:

(1) Card reader

(2) Alarm Monitoring Module

(3) Output Relay Module

(4) Elevator Reader

(5) Elevator Output Module

Any device combination can be supported on each ACU, up to a total of 16 devices per ACU.

d. Capability of supporting multiple card reader technologies simultaneously, including:

(1) Keypad

(2) Card and Keypad

(3) CAC compatible

SECTION 28 10 05 Page 23

(4) Biometrics

This capability must be an integral part of the ACU and will not require special external equipment.

e. Built-in battery back-up of programmed information sustainable for a period of at least 90 days.

f. Powered by a 12 24 VDC power source rated at a minimum of 2 amperes with a battery back-up for complete system operation in the event of power failure. Provide battery backup for all ACU(s) to sufficiently power the ACU for 8 hours continuous service.

g. Electric strikes, other locking devices and ancillary peripherals on a separate power supply with battery back-up for continued operation in the event of power failure as specified in paragraph "Backup Power".

h. A minimum of a 10,300 event log buffer per ACU to record and hold access and alarm activity information until the ACS is connected and receives the information. Provide a software-configurable warning log buffer filling notification for ACU(s) configured with network switch capabilities.

2.4.6 Access Control Devices

UL 294. The card, card reader, and panels must meet encryption requirements that are specified in paragraph DATA ENCRYPTION. Devices are to be tamper alarmed, tamper and vandal resistant, and solid state, containing no electronics which could compromise the access control subsystem should the subsystem be attacked.

2.4.6.1 Card Readers

Provide surface card readers as indicated for each individual location.

Provide and contactless type card readers capable of reading CAC and Keypad type of access control cards.

Keypads…