Amendment_0002_-_FuT_Specs.pdf

KC46A Beddown Fusel age Tr ai ner , Renovat e B. 3209 JBMDLPTFL163006 XXX Submi ssi on

SECTI ON 01 45 35

SPECI AL I NSPECTI ONS

02/15

PART 1 GENERAL

1. 1 REFERENCES

The publ i cat i ons l i s t ed bel ow f or m a par t of t hi s speci f i cat i on t o t he ext ent r ef er enced. The publ i cat i ons ar e r ef er r ed t o wi t hi n t he t ext by t he basi c desi gnat i on onl y.

I NTERNATI ONAL CODE COUNCI L ( I CC)

I CC I BC ( 2018) I nt er nat i onal Bui l di ng Code

1. 2 GENERAL REQUI REMENTS

Per f or m Speci al I nspect i ons i n accor dance wi t h t he St at ement of Speci al I nspect i ons, Schedul e of Speci al I nspect i ons and Chapt er 17 of I CC I BC.

The St at ement of Speci al I nspect i ons and Schedul e of Speci al I nspect i ons ar e i ncl uded as an at t achment t o t hi s speci f i cat i on. Speci al I nspect i ons ar e t o be per f or med by an i ndependent t hi r d par t y and ar e i nt ended t o ensur e t hat t he wor k of t he pr i me cont r act or i s i n accor dance wi t h t he Cont r act Document s and appl i cabl e bui l di ng codes. Speci al i nspect i ons do not t ake t he pl ace of t he t hr ee phases of cont r ol i nspect i ons per f or med by t he Cont r act or ' s QC Manager or any t est i ng and i nspect i ons r equi r ed by ot her sect i ons of t he speci f i cat i ons.

1. 3 DEFINITIONS

1. 3. 1 Cont i nuous Speci al I nspect i ons

Cont i nuous Speci al I nspect i ons i s t he const ant moni t or i ng of speci f i c t asks by a speci al i nspect or . These i nspect i ons must be car r i ed out cont i nuousl y over t he dur at i on of t he par t i cul ar t asks.

1. 3. 2 Per i odi c Speci al I nspect i ons

Per i odi c Speci al I nspect i ons i s Speci al I nspect i ons by t he speci al i nspect or who i s i nt er mi t t ent l y pr esent wher e t he wor k t o be i nspect ed has been or i s bei ng per f or med.

1. 3. 3 Perform

Per f or m t hese Speci al I nspect i ons t asks f or each wel ded j oi nt or member .

1. 3. 4 Observe

Obser ve t hese Speci al I nspect i ons i t ems on a r andom dai l y basi s.

Oper at i ons need not be del ayed pendi ng t hese i nspect i ons.

1. 3. 5 Speci al I nspect or ( SI )

A qual i f i ed per son r et ai ned by t he cont r act or and appr oved by t he Cont r act i ng Of f i cer as havi ng t he compet ence necessar y t o i nspect a

SECTI ON 01 45 35 Page 1

09/18/18 4: 45 PM

par t i cul ar t ype of const r uct i on r equi r i ng Speci al I nspect i ons. The SI must be an i ndependent t hi r d par t y hi r ed di r ect l y by t he Pr i me Cont r act or .

1. 3. 6 Associ at e Speci al I nspect or ( ASI )

A qual i f i ed per son who assi st s t he SI i n per f or mi ng Speci al I nspect i ons but must per f or m i nspect i on under t he di r ect super vi s i on of t he SI and cannot per f or m i nspect i ons wi t hout t he SI on si t e.

1. 3. 7 Thi r d Par t y

A t hi r d par t y i nspect or must not be company empl oyee of t he Cont r act or or any Sub- Cont r act or per f or mi ng t he wor k t o be i nspect ed.

1. 3. 8 Speci al I nspect or of Recor d ( SI OR)

A l i censed engi neer i n r esponsi bl e char ge of super vi s i on al l speci al i nspect or s f or t he pr oj ect and appr oved by t he Cont r act i ng of f i cer . The SI OR must be an i ndependent t hi r d par t y hi r ed di r ect l y by t he Pr i me Contractor.

1. 3. 9 Cont r act i ng Of f i cer

The Gover nment of f i c i al havi ng over al l aut hor i t y f or admi ni st r at i ve cont r act i ng act i ons. Cer t ai n cont r act i ng act i ons may be del egat ed t o t he Cont r act i ng Of f i cer ' s Repr esent at i ve ( COR) .

1. 3. 10 Cont r act or ' s Qual i t y Cont r ol ( QC) Manager

An i ndi v i dual r et ai ned by t he pr i me cont r act or and qual i f i ed i n accor dance wi t h t he Sect i on 01 45 00. 00 10 QUALI TY CONTROL havi ng t he over al l r esponsi bi l i t y f or t he cont r act or ' s QC or gani zat i on.

1. 3. 11 Desi gner of Recor d ( DOR)

A r egi st er ed desi gn pr of essi onal empl oyed by t he Gover nment r esponsi bl e f or t he over al l desi gn and r evi ew of submi t t al document s pr epar ed by ot her s.

The DOR i s r egi st er ed or l i censed t o pr act i ce t hei r r espect i ve desi gn pr of essi on as def i ned by t he st at ut or y r equi r ement s of t he pr of essi onal r egi st r at i on l aws i n st at e i n whi ch t he desi gn pr of essi onal wor ks. The DOR i s al so r ef er r ed t o as t he Engi neer of Recor d ( EOR) i n desi gn code documents.

1. 3. 12 St at ement of Speci al I nspect i ons ( SSI )

A document devel oped by t he DOR i dent i f y i ng t he mat er i al , syst ems, component s and wor k r equi r ed t o have Speci al I nspect i ons.

1. 3. 13 Schedul e of Speci al I nspect i ons

A schedul e whi ch l i s t s each of t he r equi r ed Speci al I nspect i ons, t he ext ent t o whi ch each Speci al I nspect i ons i s t o be per f or med, and t he r equi r ed f r equency f or each i n accor dance wi t h I CC I BC Chapt er 17.

1. 4 SUBMITTALS

Gover nment appr oval i s r equi r ed f or submi t t al s wi t h a " G" desi gnat i on;

submi t t al s not havi ng a " G" desi gnat i on ar e f or i nf or mat i on onl y. When used, a desi gnat i on f ol l owi ng t he " G" desi gnat i on i dent i f i es t he of f i ce

SECTI ON 01 45 35 Page 2 t hat wi l l r evi ew t he submi t t al f or t he Gover nment . Submi t t al s wi t h an " S" ar e f or i ncl usi on i n t he Sust ai nabi l i t y eNot ebook, i n conf or mance t o Sect i on 01 33 29 SUSTAI NABI LI TY REPORTI NG. Submi t t he f ol l owi ng i n accor dance wi t h Sect i on 01 33 00 SUBMI TTAL PROCEDURES:

SD- 01 Pr econst r uct i on Submi t t al s

SI OR Let t er of Accept ance; G, RO Speci al I nspect i ons Pr oj ect Manual ; G, RO

SD- 06 Test Repor t s

Speci al I nspect i ons Dai l y Repor t s Speci al I nspect i ons Bi weekl y Repor t s

SD- 07 Cer t i f i cat es

Fabr i cat i on Pl ant St eel Joi st I nst i t ut e Member shi p Cer t i f i cat e of Compl i ance Speci al I nspect or of Recor d Qual i f i cat i ons; G, RO Speci al I nspect or Qual i f i cat i ons; G, RO

SD- 11 Cl oseout Submi t t al s

I nt er i m Fi nal Repor t of Speci al I nspect i ons Compr ehensi ve Fi nal Repor t of Speci al I nspect i ons; G, RO

1. 5 SPECI AL I NSPECTOR QUALI FI CATI ONS

Submi t qual i f i cat i ons f or each speci al i nspect or and t he speci al i nspect or of r ecor d.

Cer t i f y i ng Associ at i ons

AABC Associ at ed Ai r Bal ance Counci l

ACI Amer i can Concr et e I nst i t ut e

AWCI Associ at i on of t he Wal l and Cei l i ng I ndust r y

AWS Amer i can Wel di ng Soci et y

FM Fact or y Mut ual

ICC I nt er nat i onal Code Counci l

NDT Nondest r uct i ve Test i ng

NICET Nat i onal I nst i t ut e f or Cer t i f i cat i on i n Engi neer i ng Technol ogi es

PCI Pr ecast / Pr est r essed Concr et e I nst i t ut e

PTI Post - Tensi oni ng I nst i t ut e

SECTI ON 01 45 35 Page 3

Cer t i f y i ng Associ at i ons

UL Under wr i t er s Labor at or i es

1. 5. 1 St eel Const r uct i on and Hi gh St r engt h Bol t i ng

1. 5. 1. 1 Speci al I nspect or

a. I CC St r uct ur al St eel and Bol t i ng Speci al I nspect or cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 1. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

1. 5. 2 Wel di ng St r uct ur al St eel

1. 5. 2. 1 Speci al I nspect or

a. I CC St r uct ur al Wel di ng Speci al I nspect or cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. AWS Cer t i f i ed Wel di ng I nspect or

1. 5. 2. 2 Associ at e Speci al I nspect or

AWS Cer t i f i ed Associ at e Wel di ng I nspect or

1. 5. 3 Nondest r uct i ve Test i ng of Wel ds

1. 5. 3. 1 Speci al I nspect or

NDT Level I I I Cer t i f i cat e

1. 5. 3. 2 Associ at e Speci al I nspect or

NDT Level I I Cer t i f i cat e pl us one year of r el at ed exper i ence

1. 5. 4 Col d For med St eel Fr ami ng

1. 5. 4. 1 Speci al I nspect or

a. I CC St r uct ur al St eel and Bol t i ng Speci al I nspect or cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. I CC Commer ci al Bui l di ng I nspect or wi t h one year of exper i ence, or

c. I CC Resi dent i al Bui l di ng I nspect or wi t h one year of exper i ence, or

d. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 4. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

SECTI ON 01 45 35 Page 4

1. 5. 5 Concr et e Const r uct i on

1. 5. 5. 1 Speci al I nspect or

a. I CC Rei nf or ced Concr et e Speci al I nspect or Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. ACI Concr et e Const r uct i on Speci al I nspect or , or

c. NI CET Concr et e Techni c i an Level I I I Cer t i f i cat e i n Const r uct i on Mat er i al s Test i ng, or

d. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 5. 2 Associ at e Speci al I nspect or

a. ACI Concr et e Const r uct i on Speci al I nspect or i n Tr ai ni ng, or

b. Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence

1. 5. 6 Masonr y Const r uct i on

1. 5. 6. 1 Speci al I nspect or

a. I CC St r uct ur al Masonr y Speci al I nspect or Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 6. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

1. 5. 7 Ver i f i cat i on of Si t e Soi l Condi t i on, Fi l l Pl acement and Load- Bear i ng Requirements

1. 5. 7. 1 Speci al I nspect or

a. I CC Soi l s Speci al I nspect or Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

b. NI CET Soi l s Techni c i an Level I I Cer t i f i cat e i n Const r uct i on Mat er i al Test i ng, or

c. NI CET Geot echni cal Engi neer i ng Techni c i an Level I I Const r uct i on or Gener al i st Cer t i f i cat e, or

d. Geol ogi st - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence, or

e. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 7. 2 Associ at e Speci al I nspect or

a. NI CET Soi l s Techni c i an Level I Cer t i f i cat e i n Const r uct i on Mat er i al Test i ng wi t h one year of r el at ed exper i ence, or

b. NI CET Geot echni cal Engi neer i ng Techni c i an Level I Const r uct i on or Gener al i st Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

SECTI ON 01 45 35 Page 5

c. Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence

1. 5. 8 Spr ayed Fi r e Resi st ant Mat er i al

1. 5. 8. 1 Speci al I nspect or

a. I CC Spr ay- appl i ed Fi r epr oof i ng Speci al I nspect or Cer t i f i cat e, or

b. I CC Fi r e I nspect or I Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

c. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 8. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence

1. 5. 9 Mast i c and I nt umescent Fi r e Resi st ant Coat i ngs

1. 5. 9. 1 Speci al I nspect or

a. I CC Spr ay- appl i ed Fi r epr oof i ng Speci al I nspect or Cer t i f i cat e, or

b. I CC Fi r e I nspect or I Cer t i f i cat e wi t h one year of r el at ed exper i ence, or

c. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 9. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

1. 5. 10 Ext er i or I nsul at i on and Fi ni sh Syst em ( EI FS)

1. 5. 10. 1 Speci al I nspect or

a. AWCI EI FS I nspect or Cer t i f i cat e, or

b. Ext er i or Desi gn I nst i t ut e Cer t i f i cat e, or

c. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 10. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

1. 5. 11 Fi r e- Resi st ant Penet r at i ons and Joi nt s

1. 5. 11. 1 Speci al I nspect or

a. Passed t he UL Fi r est op Exam wi t h one year of r el at ed exper i ence, or

b. Passed t he FM Fi r est op Exam wi t h one year of r el at ed exper i ence, or

c. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 11. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

SECTI ON 01 45 35 Page 6

1. 5. 12 Smoke Cont r ol

1. 5. 12. 1 Speci al I nspect or

a. AABC Techni c i an Cer t i f i cat i on wi t h one year of r el at ed exper i ence, or

b. Regi st er ed Pr of essi onal Engi neer wi t h r el at ed exper i ence

1. 5. 12. 2 Associ at e Speci al I nspect or

Engi neer - I n- Tr ai ni ng wi t h one year of r el at ed exper i ence.

1. 5. 13 Speci al I nspect or of Recor d ( SI OR)

Regi st er ed Pr of essi onal Engi neer

PART 2 PRODUCTS

2. 1 FABRI CATOR SPECI AL I NSPECTI ONS

Speci al I nspect i ons of f abr i cat or ' s wor k per f or med i n t he f abr i cat or ' s shop i s r equi r ed t o be i nspect ed i n accor dance wi t h t he St at ement of Speci al I nspect i ons and t he Schedul e of Speci al I nspect i ons unl ess t he f abr i cat or i s cer t i f i ed by t he appr oved agency t o per f or m such wor k wi t hout Speci al I nspect i ons. Submi t t he f ol l owi ng cer t i f i cat i ons t o t he Cont r act i ng Of f i cer f or i nf or mat i on t o al l ow wor k per f or med i n t he f abr i cat or ' s shop t o not be subj ect ed t o Speci al I nspect i ons.

Amer i can I nst i t ut e of St eel Const r uct i on ( AI SC) Cer t i f i ed Fabr i cat i on Pl ant , Cat egor y STD.

St eel Joi st I nst i t ut e Member shi p

At t he compl et i on of f abr i cat i on, submi t a cer t i f i cat e of compl i ance, t o be i ncl uded wi t h t he compr ehensi ve f i nal r epor t of Speci al I nspect i ons, st at i ng t hat t he mat er i al s suppl i ed and wor k per f or med by t he f abr i cat or ar e i n accor dance t he const r uct i on document s.

PART 3 EXECUTI ON

3. 1 RESPONSIBILITIES

3. 1. 1 Speci al I nspect or of Recor d

a. Super vi se al l Speci al I nspect or s r equi r ed by t he cont r act document s and t he I BC.

b. Submi t a SI OR Let t er of Accept ance t o t he Cont r act i ng Of f i cer at t est i ng t o accept ance of t he dut i es of SI OR, s i gned and seal ed by t he SI OR.

c. Ver i f y t he qual i f i cat i ons of al l of t he Speci al I nspect or s.

d. Ver i f y t he qual i f i cat i ons of f abr i cat or s.

e. Pr epar e a Speci al I nspect i ons Pr oj ect Manual , whi ch wi l l cover t he following:

SECTI ON 01 45 35 Page 7

( 1) Rol es and r esponsi bi l i t i es of t he f ol l owi ng i ndi v i dual s dur i ng Speci al I nspect i ons: SI OR, SI , Gener al Cont r act or , Subcont r act or s, QC Manager , and DOR.

( 2) Or gani zat i onal char t and/ or communi cat i on pl an, i ndi cat i ng l i nes of communi cat i on.

( 3) Cont r act or ' s i nt er nal pl an f or schedul i ng i nspect i ons. Addr ess i t ems such as t i mel i ness of i nspect i on r equest s, who t o cont act f or i nspect i on r equest s, and avai l abi l i t y of al t er nat e i nspect or s.

( 4) I ndi cat e t he gover nment r epor t i ng pr ocedur es.

( 5) Pr opose f or ms or t empl at es t o be used by SI and SI OR t o document inspections.

( 6) I ndi cat e pr ocedur es f or t r acki ng nonconf or mi ng wor k and ver i f i cat i on t hat cor r ect i ve wor k i s compl et e.

( 7) I ndi cat e how t he SI OR and/ or SI wi l l par t i c i pat e i n weekl y QC meetings.

( 8) I ndi cat e how Speci al I nspect i ons of shop f abr i cat ed i t ems wi l l be handl ed when t he f abr i cat or ' s shop i s not cer t i f i ed per par agr aph

FABRI CATOR SPECI AL I NSPECTI ONS.

( 9) I ncl ude a sect i on i n t he manual t hat cover s each speci f i c i t em r equi r i ng Speci al I nspect i ons t hat i s i ndi cat ed on t he Schedul e of Speci al I nspect i ons. Pr ovi de names and qual i f i cat i ons of each speci al i nspect or who wi l l be per f or mi ng t he Speci al I nspect i ons f or each speci f i c i t em. Pr ovi de det ai l on how t he Speci al I nspect i ons ar e t o be car r i ed out f or each i t em so t hat t he expect at i ons ar e c l ear f or t he Gener al Cont r act or and t he Subcont r act or per f or mi ng t he wor k.

Make a copy of t he Speci al I nspect i ons Pr oj ect Manual avai l abl e on t he j ob s i t e dur i ng const r uct i on. Submi t a copy of t he Speci al I nspect i ons Pr oj ect Manual f or appr oval .

f . At t end coor di nat i on and mut ual under st andi ng meet i ng wher e t he i nf or mat i on i n t he Speci al I nspect i ons Pr oj ect Manual wi l l be r evi ewed t o ver i f y t hat al l par t i es have a c l ear under st andi ng of t he Speci al I nspect i ons pr ovi s i ons and t he i ndi v i dual dut i es and r esponsi bi l i t i es of each par t y.

g. Mai nt ai n a 3- r i ng bi nder f or t he Speci al I nspect or ' s dai l y and bi weekl y r epor t s and t he Speci al I nspect i ons Pr oj ect Manual . Thi s f i l e must be l ocat ed i n a conspi cuous pl ace i n t he pr oj ect t r ai l er / of f i ce t o al l ow r evi ew by t he Cont r act i ng Of f i cer and t he DOR.

h. Submi t a copy of t he Speci al I nspect or ' s dai l y r epor t s t o t he QC Manager.

i . Di scr epanci es t hat ar e obser ved dur i ng Speci al I nspect i ons must be r epor t ed t o t he QC Manager f or cor r ect i on. I f di scr epanci es ar e not cor r ect ed bef or e t he speci al i nspect or l eaves t he si t e t he obser ved di scr epanci es must be document ed i n t he dai l y r epor t .

SECTI ON 01 45 35 Page 8 j . Submi t a bi weekl y Speci al I nspect i ons r epor t unt i l al l wor k r equi r i ng Speci al I nspect i ons i s compl et e. A r epor t i s r equi r ed f or each bi weekl y per i od i n whi ch Speci al I nspect i ons act i v i t y occur s, and must i ncl ude t he f ol l owi ng:

( 1) A br i ef summar y of t he wor k per f or med dur i ng t he r epor t i ng t i me frame.

( 2) Changes and/ or di scr epanci es wi t h t he dr awi ngs, speci f i cat i ons and mechani cal or el ect r i cal component cer t i f i cat i on, t hat wer e obser ved dur i ng t he r epor t i ng per i od.

( 3) Di scr epanci es whi ch wer e r esol ved or cor r ect ed.

( 4) A l i s t of nonconf or mi ng i t ems r equi r i ng r esol ut i on.

( 5) Al l appl i cabl e t est r esul t s i ncl udi ng nondest r uct i ve t est i ng reports.

k. At t he compl et i on of each Def i nabl e Feat ur e of Wor k ( DFOW) r equi r i ng Speci al I nspect i ons, submi t an i nt er i m f i nal r epor t of Speci al I nspect i ons t hat document s t he Speci al I nspect i ons compl et ed f or t hat DFOW and cor r ect i ons of al l di scr epanci es not ed i n t he dai l y r epor t s.

The i nt er i m f i nal r epor t of Speci al I nspect i ons must be si gned, dat ed and bear t he seal of t he SI OR.

l . At t he compl et i on of t he pr oj ect submi t a compr ehensi ve f i nal r epor t of Speci al I nspect i ons t hat document s t he Speci al I nspect i ons compl et ed f or t he pr oj ect and cor r ect i ons of al l di scr epanci es not ed i n t he dai l y r epor t s. The compr ehensi ve f i nal r epor t of Speci al I nspect i ons must be si gned, dat ed and bear t he seal of t he SI OR.

3. 1. 2 Qual i t y Cont r ol Manager

a. Super vi se al l Speci al I nspect or s r equi r ed by t he cont r act document s and t he I BC.

b. Ver i f y t he qual i f i cat i ons of al l of t he Speci al I nspect or s.

c. Ver i f y t he qual i f i cat i ons of f abr i cat or s.

d. Mai nt ai n a 3- r i ng bi nder f or t he Speci al I nspect or ' s dai l y and bi weekl y r epor t s. Thi s f i l e must be l ocat ed i n a conspi cuous pl ace i n t he pr oj ect t r ai l er / of f i ce t o al l ow r evi ew by t he Cont r act i ng Of f i cer and t he DOR.

Mai nt ai n a r ewor k i t ems l i s t t hat i ncl udes di scr epanci es not ed on t he Speci al I nspect or s dai l y r epor t .

3. 1. 3 Speci al I nspect or s

a. I nspect al l el ement s of t he pr oj ect f or whi ch t he speci al i nspect or i s qual i f i ed t o i nspect and ar e i dent i f i ed i n t he Schedul e of Speci al Inspections.

b. At t end pr epar at or y phase meet i ngs r el at ed t o t he Def i nabl e Feat ur e of Wor k ( DFOW) f or whi ch t he speci al i nspect or i s qual i f i ed t o i nspect .

SECTI ON 01 45 35 Page 9

c. Submi t a copy of t he dai l y r epor t s t o t he QC Manager .

d. Di scr epanci es t hat ar e obser ved dur i ng Speci al I nspect i ons must be r epor t ed t o t he QC Manager f or cor r ect i on. I f di scr epanci es ar e not cor r ect ed bef or e t he speci al i nspect or l eaves t he si t e t he obser ved di scr epanci es must be document ed i n t he dai l y r epor t .

e. Submi t a bi weekl y Speci al I nspect i on Repor t unt i l al l i nspect i ons ar e compl et e. A r epor t i s r equi r ed f or each bi weekl y per i od i n whi ch Speci al I nspect i ons act i v i t y occur s, and must i ncl ude t he f ol l owi ng:

( 1) A br i ef summar y of t he wor k per f or med dur i ng t he r epor t i ng t i me frame.

( 2) Changes and/ or di scr epanci es wi t h t he dr awi ngs, speci f i cat i ons t hat wer e obser ved dur i ng t he r epor t i ng per i od.

( 3) Di scr epanci es whi ch wer e r esol ved or cor r ect ed.

( 4) A l i s t of nonconf or mi ng i t ems r equi r i ng r esol ut i on.

5) Al l appl i cabl e t est r esul t i ncl udi ng nondest r uct i ve t est i ng reports.

f . At t he compl et i on of each DFOW r equi r i ng Speci al I nspect i ons, submi t an i nt er i m f i nal r epor t of Speci al I nspect i ons t hat document s t he Speci al I nspect i ons compl et ed f or t hat DFOW. I dent i f y t he i nspect or r esponsi bl e f or each i t em i nspect ed and cor r ect i ons of al l di scr epanci es not ed i n t he dai l y r epor t s. The i nt er i m f i nal r epor t of Speci al I nspect i ons must be si gned, dat ed and i ndi cat e t he cer t i f i cat i on of t he speci al i nspect or qual i f y i ng t hem t o conduct t he inspection.

g. At t he compl et i on of t he pr oj ect submi t a compr ehensi ve f i nal r epor t of Speci al I nspect i ons t hat document s t he Speci al I nspect i ons compl et ed f or t he pr oj ect and cor r ect i ons of al l di scr epanci es not ed i n t he dai l y r epor t s. The compr ehensi ve f i nal r epor t of Speci al I nspect i ons must be si gned, dat ed and i ndi cat e t he cer t i f i cat i on of t he speci al i nspect or qual i f y i ng t hem t o conduct t he i nspect i on.

h. Submi t dai l y r epor t s t o t he SI OR.

3. 2 DEFECTI VE WORK

Check wor k as i t pr ogr esses, but f ai l ur e t o det ect any def ect i ve wor k or mat er i al s must i n no way pr event l at er r ej ect i on i f def ect i ve wor k or mat er i al s ar e di scover ed, nor obl i gat e t he Cont r act i ng Of f i cer t o accept such wor k.

- - End of Sect i on - -

SECTI ON 01 45 35 Page 10

163006 163006

SECTI ON 25 05 11

CYBERSECURI TY FOR FACI LI TY- RELATED CONTROL SYSTEMS

11/17

PART 1 GENERAL

Many subpar t s i n t hi s Sect i on cont ai n t ext i n cur l y br aces ( " { " and " } " ) i ndi cat i ng whi ch cyber secur i t y cont r ol and cont r ol cor r el at i on i dent i f i er ( CCI ) t he r equi r ement s of t he subpar t r el at e t o. The t ext i nsi de t hese cur l y br aces i s f or Gover nment r ef er ence onl y, and enabl es coor di nat i on of t he r equi r ement s of t hi s Sect i on wi t h t he RMF pr ocess t hr oughout t he desi gn and const r uct i on pr ocess. Text i n cur l y br aces ar e not cont r act or requirements.

Thi s Sect i on r ef er s t o Secur i t y Requi r ement s Gui de ( SRGs) and Secur i t y Techni cal I mpl ement at i on Gui de ( STI Gs) . STI Gs and SRGs ar e ar e avai l abl e onl i ne at t he I nf or mat i on Assur ance Suppor t Envi r onment ( I ASE) websi t e at http://iase.disa.mil/stigs/Pages/index.aspx . Not al l cont r ol syst em component s have appl i cabl e STI Gs or SRGs.

1. 1 CONTROL SYSTEM APPLI CABI LI TY

Ther e ar e mul t i pl e ver si ons of t hi s Sect i on associ at ed wi t h t hi s pr oj ect .

Di f f er ent ver si ons have r equi r ement s appl i cabl e t o di f f er ent cont r ol syst ems. Thi s speci f i c Sect i on appl i es onl y t o t he f ol l owi ng cont r ol systems: New Addi t i on. COnt r ol s i n Exi st i ng Bui l di ng t o r emai n. .

1. 2 RELATED REQUI REMENTS

Al l Sect i ons cont ai ni ng f aci l i t y- r el at ed cont r ol syst ems or cont r ol syst em component s ar e r el at ed t o t he r equi r ement s of t hi s Sect i on. Revi ew al l speci f i cat i on sect i ons t o det er mi ne r el at ed r equi r ement s.

1. 3 REFERENCES

The publ i cat i ons l i s t ed bel ow f or m a par t of t hi s speci f i cat i on t o t he ext ent r ef er enced. The publ i cat i ons ar e r ef er r ed t o wi t hi n t he t ext by t he basi c desi gnat i on onl y.

AMERI CAN SOCI ETY OF HEATI NG, REFRI GERATI NG AND AI R- CONDI TI ONI NG

ENGI NEERS ( ASHRAE)

ASHRAE 135 ( 2016) BACnet —A Dat a Communi cat i on Pr ot ocol f or Bui l di ng Aut omat i on and Cont r ol Net wor ks

I NSTI TUTE OF ELECTRI CAL AND ELECTRONI CS ENGI NEERS ( I EEE)

I EEE 802. 1x ( 2010) Local and Met r opol i t an Ar ea Net wor ks - Por t Based Net wor k Access Control

SECTI ON 25 05 11 Page 1

NATI ONAL I NSTI TUTE OF STANDARDS AND TECHNOLOGY ( NI ST)

NI ST FI PS 201- 2 ( 2013) Per sonal I dent i t y Ver i f i cat i on ( PI V) of Feder al Empl oyees and Cont r act or s

U. S. DEPARTMENT OF DEFENSE ( DOD)

DODI 8551. 01 ( 2014) Por t s, Pr ot ocol s, and Ser vi ces Management ( PPSM)

DTM 08- 060 ( 2008) Pol i cy on Use of Depar t ment of Def ense ( DoD) I nf or mat i on Syst ems - St andar d Consent Banner and User Agr eement

1. 4 DEFINITIONS

1. 4. 1 Computer

As used i n t hi s Sect i on, a comput er i s one of t he f ol l owi ng:

a. a devi ce r unni ng a non- embedded deskt op or ser ver ver si on of Mi cr osof t Windows

b. a devi ce r unni ng a non- embedded ver si on of MacOS

c. a devi ce r unni ng a non- embedded ver si on of Li nux

d. a devi ce r unni ng a ver si on or der i vat i ve of t he Andr oi d OS, wher e Andr oi d i s consi der ed separ at e f r om Li nux

e. a devi ce r unni ng a ver si on of Appl e i OS

1. 4. 2 Net wor k Connect ed

A component i s net wor k connect ed ( or " connect ed t o a net wor k" ) onl y when t he devi ce has a net wor k t r anscei ver whi ch i s di r ect l y connect ed t o t he net wor k and i mpl ement s t he net wor k pr ot ocol . A devi ce l acki ng a net wor k t r anscei ver ( and accompanyi ng pr ot ocol i mpl ement at i on) can never be consi der ed net wor k connect ed. Not e t hat a devi ce connect ed t o a non- I P net wor k i s st i l l consi der ed net wor k connect ed ( an I P connect i on or I P addr ess i s not r equi r ed f or a devi ce t o be net wor k connect ed) .

Any devi ce t hat suppor t s wi r el ess communi cat i on i s net wor k connect ed, r egar dl ess of whet her t he devi ce i s communi cat i ng usi ng wi r el ess.

1. 4. 3 User Account Suppor t Level s

The suppor t f or user account s i s cat egor i zed i n t hi s Sect i on as one of t hr ee l evel s:

1. 4. 3. 1 FULLY Suppor t ed

Devi ce suppor t s conf i gur abl e i ndi v i dual account s. Account s can be cr eat ed, del et ed, modi f i ed, et c. Pr i v i l eges can be assi gned t o account s.

1. 4. 3. 2 MI NI MALLY Suppor t ed

Devi ce suppor t s a smal l , f i xed number of account s ( per haps onl y one) .

SECTI ON 25 05 11 Page 2

Account s cannot be modi f i ed. A devi ce wi t h onl y a " User " and an " Admi ni st r at or " account woul d f i t t hi s cat egor y. Si mi l ar l y, a devi ce wi t h t wo PI Ns f or l ogon - one f or r est r i c t ed and one f or unr est r i c t ed r i ght s woul d f i t her e ( i n ot her wor ds, t he account s do not have t o be t he t r adi t i onal " user name and passwor d" st r uct ur e) .

1. 4. 3. 3 NOT Suppor t ed

Devi ce does not suppor t any Access Enf or cement t her ef or e t he whol e concept of " account " i s meani ngl ess.

1. 4. 4 User I nt er f ace

Gener al l y, a user i nt er f ace i s har dwar e on a devi ce al l owi ng user i nt er act i on wi t h t hat devi ce v i a i nput ( but t ons, swi t ches, s l i der s, keyboar d, t ouch scr een, et c. ) and a scr een. Ther e ar e t hr ee t ypes of user i nt er f aces def i ned i n t hi s Sect i on: Li mi t ed Local User I nt er f ace, Ful l Local User I nt er f ace and Remot e User I nt er f ace. I n t hi s Sect i on, when t he t er m " User I nt er f ace" i s used wi t hout speci f y i ng whi ch t ype, i t r ef er s onl y t o Ful l Local User I nt er f ace and Remot e User I nt er f ace ( NOT t o Li mi t ed Local User I nt er f ace) .

1. 4. 4. 1 Li mi t ed Local User I nt er f ace

A Li mi t ed Local User I nt er f ace i s a user i nt er f ace wher e t he i nt er act i on i s l i mi t ed, f i xed at t he f act or y, and cannot be modi f i ed i n t he f i el d. The user must be physi cal l y at t he devi ce t o i nt er act wi t h i t .

Exampl es of Li mi t ed Local User I nt er f ace i ncl ude t her most at s ( Space Sensor Modul es as def i ned i n Sect i on 23 09 13 I NSTRUMENTATI ON AND CONTROL DEVI CES

FOR HVAC) .

1. 4. 4. 2 Ful l Local User I nt er f ace

A Ful l Local User I nt er f ace i s a user i nt er f ace wher e t he i nt er act i on and di spl ays ar e f i el d- conf i gur abl e.

Exampl es of a Ful l Local User I nt er f ace i ncl ude l ocal appl i cat i ons on a computer and user i nt er f aces t o Var i abl e Speed Dr i ves.

1. 4. 4. 3 Remot e User I nt er f ace

A Remot e User I nt er f ace i s a user i nt er f ace on a Cl i ent devi ce al l owi ng user i nt er act i on wi t h a di f f er ent Ser ver devi ce. The user need not be physi cal l y at t he Ser ver devi ce t o i nt er act wi t h i t .

Exampl es of Remot e User I nt er f aces i ncl ude web br owser s and Local Di spl ay Panel s as def i ned i n Sect i on 23 09 00 I NSTRUMENTATI ON AND CONTROL FOR HVAC.

1. 5 ADMI NI STRATI VE REQUI REMENTS

1. 5. 1 Coordination

Coor di nat e t he execut i on of t hi s Sect i on wi t h t he execut i on of al l ot her Sect i ons r el at ed t o cont r ol syst ems as i ndi cat ed i n t he par agr aph RELATED REQUI REMENTS. I t ems t hat must be consi der ed when coor di nat i ng pr oj ect ef f or t s i ncl ude but ar e not l i mi t ed t o:

a. I f r equest i ng per mi ssi on f or wi r el ess communi cat i on, t he Wi r el ess

SECTI ON 25 05 11 Page 3

Communi cat i on Request submi t t al must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nt egr at i on.

b. I f r equest i ng per mi ssi on f or al t er nat e account l ock per mi ssi ons, t he Devi ce Account Lock Except i on Request must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nt egr at i on.

c. I f r equest i ng per mi ssi on f or t he use of a devi ce wi t h mul t i pl e I P connect i ons, t he Mul t i pl e I P Connect i on Devi ce Request must be appr oved pr i or t o cont r ol syst em devi ce sel ect i on and i nt egr at i on.

d. Wi r el ess t est i ng may be r equi r ed as par t of t he cont r ol syst em t est i ng. See r equi r ement s f or t he Wi r el ess Communi cat i on Test Repor t submittal.

e. I f t he Devi ce Audi t Recor d Upl oad Sof t war e i s t o be i nst al l ed on a comput er not bei ng pr ovi ded as par t of t he cont r ol syst em, coor di nat i on i s r equi r ed t o i dent i f y t he comput er on whi ch t o i nst al l t he sof t war e.

f . Cyber secur i t y I nt er connect i on Schedul e must be coor di nat ed wi t h ot her wor k t hat wi l l be i nt er connect ed t o, and i nt er connect i ons must be appr oved by t he Gover nment bef or e r el y i ng on t hem f or syst em functionality.

g. Cyber secur i t y t est i ng suppor t must be coor di nat ed acr oss cont r ol syst ems and wi t h t he Gover nment cyber secur i t y t est i ng schedul e.

h. Passwor ds must be coor di nat ed wi t h t he i ndi cat ed cont act f or t he pr oj ect s i t e.

i . I f appl i cabl e, HTTP web ser ver cer t i f i cat es must be obt ai ned f r om t he i ndi cat ed cont act f or t he pr oj ect s i t e.

j . Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s f or each cont r act or usi ng cont r act or owned comput er s.

1. 6 SUBMITTALS

Gover nment appr oval i s r equi r ed f or submi t t al s wi t h a " G" desi gnat i on;

submi t t al s not havi ng a " G" desi gnat i on ar e f or Cont r act or Qual i t y Cont r ol appr oval . Submi t t al s wi t h an " S" ar e f or i ncl usi on i n t he Sust ai nabi l i t y eNot ebook, i n conf or mance wi t h Sect i on 01 33 29 SUSTAI NABI LI TY REPORTI NG.

Submi t t he f ol l owi ng i n accor dance wi t h Sect i on 01 33 00 SUBMI TTAL

PROCEDURES:

SD- 01 Pr econst r uct i on Submi t t al s

Wi r el ess Communi cat i on Request ; G

Devi ce Account Lock Except i on Request ; G

Mul t i pl e I P Connect i on Devi ce Request ; G

Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s; G

Cont r act or Tempor ar y Net wor k Cyber secur i t y Compl i ance St at ement s; G

SD- 02 Shop Dr awi ngs

SECTI ON 25 05 11 Page 4

User I nt er f ace Banner Schedul e; G

Net wor k Communi cat i on Repor t ; G

Cyber secur i t y Ri ser Di agr am; G

Cont r ol Syst em I nvent or y Repor t ; G

Cyber secur i t y I nt er connect i on Schedul e; G

SD- 03 Pr oduct Dat a

Cont r ol Syst em Cyber secur i t y Document at i on; G

SD- 06 Test Repor t s

Wi r el ess Communi cat i on Test Repor t ; G

SD- 07 Cer t i f i cat es

Sof t war e Li censes; G

SD- 11 Cl oseout Submi t t al s

Passwor d Summar y Repor t ; G

Sof t war e Recover y And Reconst i t ut i on I mages; G

Devi ce Audi t Recor d Upl oad Sof t war e; G

1. 7 CYBERSECURI TY DOCUMENTATI ON

1. 7. 1 Cyber secur i t y I nt er connect i on Schedul e

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o CA- 3( b) , CCI-00258}

Pr ovi de a compl et ed Cyber secur i t y I nt er connect i on Schedul e document i ng connect i ons bet ween t he i nst al l ed syst em and ot her syst ems. Pr ovi de t he f ol l owi ng i nf or mat i on f or each devi ce communi cat i ng bet ween syst ems: Devi ce I dent i f i er , Devi ce Descr i pt i on, Tr anspor t l ayer Pr ot ocol , Net wor k Addr ess, Por t ( i f appl i cabl e) , MAC ( Layer 2) addr ess ( i f appl i cabl e) , Medi a, Appl i cat i on Pr ot ocol , Ser vi ce ( i f appl i cabl e) , Descr i pt i ve Pur pose of communi cat i on. For communi cat i on wi t h ot her aut hor i zed syst ems al so pr ovi de t he For ei gn Dest i nat i on and POC f or Dest i nat i on. I f ot her cont r ol syst em Sect i ons used on t hi s pr oj ect i nc l ude submi t t al s document i ng t hi s i nf or mat i on, pr ovi de copi es of t hose submi t t al s t o meet t hi s r equi r ement .

I n addi t i on t o t he r equi r ement s of Sect i on 01 33 00 SUBMI TTAL PROCEDURES, pr ovi de t he Cyber secur i t y I nt er connect i on Schedul e as an edi t abl e Mi cr osof t Excel f i l e ( a t empl at e Cyber secur i t y I nt er connect i on Schedul e i n Excel f or mat i s avai l abl e at http://www.wbdg.org/FFC/NAVGRAPH/graphtoc.pdf .)

1. 7. 2 Net wor k Communi cat i on Repor t

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o CA- 9;

CCI - 002102, CCI - 002103, CCI - 002104, CCI - 002105 and al so t he submi t t al

SECTI ON 25 05 11 Page 5 r equi r ement s associ at ed wi t h CM- 6, CM- 7 and SC- 41}

Pr ovi de a net wor k communi cat i on r epor t . For each net wor ked cont r ol l er , document t he communi cat i on char act er i st i cs of t he cont r ol l er i ncl udi ng communi cat i on pr ot ocol s, ser vi ces used, and a gener al descr i pt i on of what i nf or mat i on i s communi cat ed over t he net wor k. For each cont r ol l er usi ng I P, document al l TCP and UDP por t s used. I f ot her cont r ol syst em Sect i ons used on t hi s pr oj ect i ncl ude submi t t al s document i ng t hi s i nf or mat i on, pr ovi de copi es of t hose submi t t al s t o meet t hi s r equi r ement .

I n addi t i on t o t he r equi r ement s of Sect i on 01 33 00 SUBMI TTAL PROCEDURES, pr ovi de t he Net wor k Communi cat i on Repor t as an edi t abl e Mi cr osof t Excel file.

1. 7. 3 Cont r ol Syst em I nvent or y Repor t

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o CM- 8( a) , CP- 12, SI - 17, I A- 3; CCI - 000389, CCI - 000392, CCI - 000398, CCI - 002855, CCI - 002856, CCI - 002857, CCI - 002773, CCI - 002774, CCI - 002775, CCI - 000777, CCI - 000778, CCI - 001958}

Pr ovi de a Cont r ol Syst em I nvent or y r epor t usi ng t he I nvent or y Spr eadsheet l i s t ed under t hi s Sect i on at ht t p: / / www. wbdg. or g/ FFC/ NAVGRAPH/ gr apht oc. pdf document i ng al l devi ces, i ncl udi ng net wor ked devi ces, net wor k i nf r ast r uct ur e devi ces, non- net wor ked devi ces, i nput devi ces ( e. g. sensor s) and out put devi ces ( e. g. act uat or s) . For each devi ce pr ovi de al l appl i cabl e i nf or mat i on f or whi ch t her e i s a f i el d on t he spr eadsheet i n accor dance wi t h t he i nst r uct i ons on t he spr eadsheet .

I n addi t i on t o t he r equi r ement s of Sect i on 01 33 00 SUBMI TTAL PROCEDURES, pr ovi de t he Cont r ol Syst em I nvent or y Repor t as an edi t abl e Mi cr osof t Excel file.

1. 7. 4 Sof t war e Recover y and Reconst i t ut i on I mages

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o CP- 10;

CCI - 000550, CCI - 000551, CCI - 000552}

For each comput er on whi ch sof t war e i s i nst al l ed under t hi s pr oj ect , pr ovi de a r ecover y i mage of t he f i nal as- bui l t comput er . Thi s i mage must al l ow f or bar e- met al r est or e such t hat r est or at i on of t he i mage i s suf f i c i ent t o r est or e syst em oper at i on t o t he i maged st at e wi t hout t he need f or r e- i nst al l at i on of sof t war e.

1. 7. 5 Cyber secur i t y Ri ser Di agr am

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o PL- 2( a) ;

CCI - 003051, CCI - 003053}

Pr ovi de a cyber secur i t y r i ser di agr am of t he compl et e cont r ol syst em i ncl udi ng al l net wor k and cont r ol l er har dwar e. I f t he cont r ol syst em speci f i cat i ons r equi r e a r i ser di agr am submi t t al , pr ovi de a copy of t hat submi t t al as t he cyber secur i t y r i ser di agr am. Ot her wi se, pr ovi de a r i ser di agr am i n one- l i ne f or mat over l ayed on a f aci l i t y schemat i c.

SECTI ON 25 05 11 Page 6

1. 7. 6 Cont r ol Syst em Cyber secur i t y Document at i on

Thi s subpar t ( and i t s subpar t s) r el at es t o SA- 5 ( a) , ( b) , ( c) ; CCI s:

CCI - 003124, CCI - 003125, CCI - 003126, CCI - 003127, CCI - 003128, CCI - 003129, CCI - 003130, CCI - 003131}

Pr ovi de a Cont r ol Syst em Cyber secur i t y Document at i on submi t t al cont ai ni ng t he i ndi cat ed i nf or mat i on f or each devi ce and sof t war e appl i cat i on.

1. 7. 6. 1 Sof t war e Appl i cat i ons

For al l sof t war e appl i cat i ons r unni ng on comput er s pr ovi de:

a. admi ni st r at or document at i on t hat descr i bes secur e conf i gur at i on of t he sof t war e { r el at es t o CCI - 003124}

b. admi ni st r at or document at i on t hat descr i bes secur e i nst al l at i on of t he sof t war e { r el at es t o CCI - 003125}

c. admi ni st r at or document at i on t hat descr i bes secur e oper at i on of t he sof t war e { r el at es t o CCI - 003124}

d. admi ni st r at or document at i on t hat descr i bes ef f ect i ve use and mai nt enance of secur i t y f unct i ons or mechani sms f or t he sof t war e { r el at es t o CCI - 003127}

e. admi ni st r at or document at i on t hat descr i bes known vul ner abi l i t i es r egar di ng conf i gur at i on and use of admi ni st r at i ve ( i . e. pr i v i l eged) f unct i ons f or t he sof t war e { r el at es t o CCI - 003128} f . user document at i on t hat descr i bes user - accessi bl e secur i t y f unct i ons or mechani sms i n t he sof t war e and how t o ef f ect i vel y use t hose secur i t y f unct i ons or mechani sms { r el at es t o CCI - 003129}

g. user document at i on t hat descr i bes met hods f or user i nt er act i on whi ch enabl es i ndi v i dual s t o use t he sof t war e i n a mor e secur e manner { r el at es t o CCI - 003130}

h. user document at i on t hat descr i bes user r esponsi bi l i t i es i n mai nt ai ni ng t he secur i t y of t he sof t war e { r el at es t o CCI - 003131}

1. 7. 6. 2 For HVAC Cont r ol Syst em Devi ces

1. 7. 6. 2. 1 HVAC Cont r ol Syst em Devi ces FULLY Suppor t i ng User Account s

For al l HVAC Cont r ol Syst em Devi ces whi ch FULLY suppor t user account s, provide:

a. Document at i on t hat descr i bes secur e conf i gur at i on of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003124}

b. Document at i on t hat descr i bes secur e oper at i on of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003124}

c. Document at i on t hat descr i bes ef f ect i ve use and mai nt enance of secur i t y f unct i ons or mechani sms f or t he devi ce { f or r ef er ence onl y: r el at es t o

CCI-003127}

SECTI ON 25 05 11 Page 7

d. Document at i on t hat descr i bes known vul ner abi l i t i es r egar di ng conf i gur at i on and use of admi ni st r at i ve ( i . e. pr i v i l eged) f unct i ons f or t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003128}

e. Document at i on t hat descr i bes user - accessi bl e secur i t y f unct i ons or mechani sms i n t he devi ce and how t o ef f ect i vel y use t hose secur i t y f unct i ons or mechani sms; or a speci f i c i ndi cat i on t hat t her e ar e no user - accessi bl e secur i t y f unct i ons or mechani sms i n t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003129} f . Document at i on t hat descr i bes met hods f or user i nt er act i on whi ch enabl es i ndi v i dual s t o use t he devi ce i n a mor e secur e manner { f or r ef er ence onl y: r el at es t o CCI - 003130}

1. 7. 6. 2. 2 Al l Ot her HVAC Cont r ol Syst em Devi ces

For al l HVAC Cont r ol Syst em Devi ces whi ch do not FULLY suppor t user account s, pr ovi de:

a. Document at i on t hat descr i bes secur e conf i gur at i on of t he devi ce; or a speci f i c i ndi cat i on t hat t her e ar e no secur e conf i gur at i on st eps t hat appl y { f or r ef er ence onl y: r el at es t o CCI - 003124}

b. Document at i on t hat descr i bes ef f ect i ve use and mai nt enance of secur i t y f unct i ons or mechani sms f or t he devi ce; or a speci f i c i ndi cat i on t hat t her e ar e no secur i t y f unct i ons or mechani sms i n t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003127}

c. For devi ces whi ch i ncl ude a user i nt er f ace, document at i on t hat descr i bes met hods f or user i nt er act i on whi ch enabl es i ndi v i dual s t o use t he devi ce i n a mor e secur e manner { f or r ef er ence onl y: r el at es t o

CCI-003130}

1. 7. 6. 3 Def aul t Requi r ement s f or Cont r ol Syst em Devi ces

For cont r ol syst em devi ces wher e Cont r ol Syst em Cyber secur i t y Document at i on r equi r ement s ar e not ot her wi se i ndi cat ed i n t hi s Sect i on, pr ovi de:

a. Document at i on t hat descr i bes secur e conf i gur at i on of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003124}

b. Document at i on t hat descr i bes secur e i nst al l at i on of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003125}

c. Document at i on t hat descr i bes secur e oper at i on of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003124}

d. Document at i on t hat descr i bes ef f ect i ve use and mai nt enance of secur i t y f unct i ons or mechani sms f or t he devi ce { f or r ef er ence onl y: r el at es t o

CCI-003127}

e. Document at i on t hat descr i bes known vul ner abi l i t i es r egar di ng conf i gur at i on and use of admi ni st r at i ve ( i . e. pr i v i l eged) f unct i ons f or t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003128} f . Document at i on t hat descr i bes user - accessi bl e secur i t y f unct i ons or mechani sms i n t he devi ce and how t o ef f ect i vel y use t hose secur i t y f unct i ons or mechani sms { f or r ef er ence onl y: r el at es t o CCI - 003129}

SECTI ON 25 05 11 Page 8

g. Document at i on t hat descr i bes met hods f or user i nt er act i on whi ch enabl es i ndi v i dual s t o use t he devi ce i n a mor e secur e manner { f or r ef er ence onl y: r el at es t o CCI - 003130}

h. Document at i on t hat descr i bes user r esponsi bi l i t i es i n mai nt ai ni ng t he secur i t y of t he devi ce { f or r ef er ence onl y: r el at es t o CCI - 003131}

1. 8 SOFTWARE UPDATE LI CENSI NG

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o SI - 2 ( a) , ( c) ; CCI - 001227, CCI - 002605}

I n addi t i on t o al l ot her l i censi ng r equi r ement s, al l sof t war e l i censi ng must i ncl ude l i censi ng of t he f ol l owi ng sof t war e updat es f or a per i od of no l ess t han 5 year s:

a. Secur i t y and bug- f i x pat ches i ssued by t he sof t war e manuf act ur er .

b. Secur i t y pat ches t o addr ess any vul ner abi l i t y i dent i f i ed i n t he Nat i onal Vul ner abi l i t y Dat abase at http://nvd.nist.gov wi t h a Common Vul ner abi l i t y Scor i ng Syst em ( CVSS) sever i t y r at i ng of MEDI UM or hi gher .

Pr ovi de a s i ngl e Sof t war e Li censes submi t t al wi t h document at i on of t he sof t war e l i censes f or al l sof t war e pr ovi ded

1. 9 CYBERSECURI TY DURI NG CONSTRUCTI ON

{ For Ref er ence Onl y: Thi s subpar t ( and i t s subpar t s) r el at es t o AC- 18, SA- 3, CCI - 00258}

I n addi t i on t o t he cont r ol syst em cyber secur i t y r equi r ement s i ndi cat ed i n t hi s sect i on, meet f ol l owi ng r equi r ement t hr oughout t he const r uct i on process.

1. 9. 1 Cont r act or Comput er Equi pment

Cont r act or owned comput er s may be used f or const r uct i on. When used, cont r act or comput er s must meet t he f ol l owi ng r equi r ement s:

1. 9. 1. 1 Oper at i ng Syst em

The oper at i ng syst em must be an oper at i ng syst em cur r ent l y suppor t ed by t he manuf act ur er of t he oper at i ng syst em. The oper at i ng syst em must be cur r ent on secur i t y pat ches and oper at i ng syst em manuf act ur er r equi r ed updat es.

1. 9. 1. 2 Ant i - Mal war e Sof t war e

The comput er must r un ant i - mal war e sof t war e f r om a r eput abl e sof t war e manuf act ur er . Ant i - mal war e sof t war e must be a ver si on cur r ent l y suppor t ed by t he sof t war e manuf act ur er , must be cur r ent on al l pat ches and updat es, and must use t he l at est def i ni t i ons f i l e. Al l comput er s used on t hi s pr oj ect must be scanned usi ng t he i nst al l ed sof t war e at l east once per day.

1. 9. 1. 3 Passwor ds and Passphr ases

The passwor ds and passphr ases f or al l comput er s must be changed f r om t hei r def aul t val ues. Passwor ds must be a mi ni mum of ei ght char act er s wi t h a

SECTI ON 25 05 11 Page 9 mi ni mum of one upper case l et t er , one l ower case l et t er , one number and one speci al char act er .

1. 9. 1. 4 Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s

Pr ovi de a s i ngl e submi t t al cont ai ni ng compl et ed Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s f or each company usi ng cont r act or owned comput er s. Cont r act or Comput er Cyber secur i t y Compl i ance St at ement s must use t he t empl at e publ i shed at http://www.wbdg.org/FFC/NAVGRAPH/graphtoc.pdf .

Each St at ement must be s i gned by a cyber secur i t y r epr esent at i ve f or t he r el evant company.

1. 9. 2 Tempor ar y I P Net wor ks

Tempor ar y cont r act or - i nst al l ed I P net wor ks may be used dur i ng const r uct i on.

When used, t empor ar y cont r act or - i nst al l ed I P net wor ks must meet t he f ol l owi ng r equi r ement s:

1. 9. 2. 1 Net wor k Boundar i es and Connect i ons

The net wor k must not ext end out s i de t he pr oj ect s i t e and must not connect t o any I P net wor k ot her t han I P net wor ks pr ovi ded under t hi s pr oj ect or Gover nment f ur ni shed I P net wor ks pr ovi ded f or t hi s pur pose. Any and al l net wor k access f r om out si de t he pr oj ect s i t e i s pr ohi bi t ed.

1. 9. 3 Gover nment Access t o Net wor k

Gover nment per sonnel must be al l owed t o have compl et e and i mmedi at e access t o t he net wor k at any t i me i n or der t o ver i f y compl i ance wi t h t hi s specification

1. 9. 4 Tempor ar y Wi r el ess I P Net wor ks

I n addi t i on t o t he ot her r equi r ement s on t empor ar y I P net wor ks, t empor ar y wi r el ess I P ( Wi Fi ) net wor ks must not i nt er f er e wi t h exi st i ng wi r el ess net wor k and must use WPA2 secur i t y. Net wor k names ( SSI D) f or wi r el ess net wor ks must be changed f r om t hei r def aul t val ues.

1. 9. 5 Passwor ds and Passphr ases

The passwor ds and passphr ases f or al l net wor k devi ces and net wor k access must be changed f r om t hei r def aul t val ues. Passwor ds must be a mi ni mum 8 char act er s wi t h a mi ni mum of one upper case l et t er , one l ower case l et t er , one number and one speci al char act er .

1. 9. 6 Cont r act or Tempor ar y Net wor k Cyber secur i t y Compl i ance St at ement s

Pr ovi de a s i ngl e submi t t al cont ai ni ng compl et ed Cont r act or Tempor ar y Net wor k Cyber secur i t y Compl i ance St at ement s f or each company i mpl ement i ng a t empor ar y I P net wor k. Cont r act or Tempor ar y Net wor k Cyber secur i t y Compl i ance St at ement s must use t he t empl at e publ i shed at http://www.wbdg.org/FFC/NAVGRAPH/graphtoc.pdf . Each St at ement must be s i gned by a cyber secur i t y r epr esent at i ve f or t he r el evant company. I f no t empor ar y I P net wor ks wi l l be used, pr ovi de a s i ngl e copy of t he St at ement i ndi cat i ng t hi s.

SECTI ON 25 05 11 Page 10

1. 10 CYBERSECURI TY DURI NG WARRANTY PERI OD

Al l wor k per f or med on t he cont r ol syst em af t er accept ance must be per f or med usi ng Gover nment Fur ni shed Equi pment or equi pment speci f i cal l y and i ndi v i dual l y appr oved by t he Gover nment .

PART 2 PRODUCTS

( NOT USED)

PART 3 EXECUTI ON

3. 1…