z-ATTCH-16-_and_A-W91QF4-26-Q-A040_CGSC_Access_Control.pdf

Q&A – W91QF4-26-Q-A040 – CGSC Access Control Video System Questions

1. How many days of recorded video is required for the new NVR?

RESPONSE: 30 days of recording based on the resolution/frame rate below.

2. What is the requirement for the resolution and frame rate of the recorded video?

RESPONSE: Full resolution of the existing cameras for Alarm and Time Lapse recording.

3. Is there a requirement for recording at all times? Can the system be set to time lapse mode i.e the system be configured for motion recording at a higher frame rate and then record at a lower frame rate when there is no motion detected?

RESPONSE: Yes, recording at all times with the following minimum settings: Time Lapse – 1 Frame Per Second; Alarm (motion detected)– 15 Frames Per Second with a 4 Second Pre- Alarm and a 10 Second Post Alarm (after last motion detected)

4. Would it be possible to get a copy of the license information from the BVMS server or the system serial number to identify the system?

RESPONSE: Existing system information available: Bosch Proliant DL380 GEN10, Professional Edition 9.0, Viewer Edition 10.0. Specific license number could not be identified.

5. Which version of CCURE 9000 is currently installed and which service pack?

RESPONSE: Version 2.90 Build 368.477 – Anticipate upgrading to C-Cure v3.20 (latest service pack) before installation of this project begins.

6. How many existing panels that are currently installed above ceiling height are planned to be replaced by an iSTAR? What are their locations/Room Numbers?

RESPONSE: There are a total of 6 sub-panels on the 4th floor to support 24 classrooms that will be retained. There was an error of information provided on the walkthrough.

All 4th floor doors will be transferred to the C-Cure solution. These were part of the original door count from the PWS. Each above ceiling panel is 1 controller box (matching what is in the comms closets). However, these are not smart controllers.

They are sub-panels/2 door controllers). It may be possible to use a small C-Cure controller but that will require an ethernet run from the classroom controller location to the nearest comms closet (on the same floor). Each of the sub-panel also has a power supply box that supports the readers, rex motions and locks.

7. Is there a preference for wiring the readers OSDP or Wiegand?

RESPONSE: Preference is OSDP but Wiegand is acceptable if OSDP is not possible with current wiring.

8. Do all buildings except building 127 have Altronix Trove2 Enclosures with composite cable?

RESPONSE: Building 120 CARL (Library) – 1 Controller, 15 Doors (Confirmed Altronix Trove2)

- Building 120 General Instruction Facility – 1 Controller, 11 Doors (Confirmed Altronix Trove2)

- Building 285 Flint – 1 Controller, 7 Doors (Unconfirmed but likely)

- Building 315 Muir – 1 Controller, 7 Doors (Unconfirmed but likely)

- Building 225 Truesdale – 1 Controller, 9 Existing Doors plus 1 New Door (Unconfirmed but likely) NOTE: Updated reader counts by panel and location are in attached spreadsheet “CGSC LENEL Readers Report

9. Are we to supply hardware (Reader, DPS, REX, Electronic Lock) for a new door at Building 225 Truesdale? What are the specifications for the door? What kind of electronic locking hardware is required? Are we to supply/install hardware and new cable to this new door as part of this project? What is the exact location/door number of this new door?

RESPONSE: Please drop the new door requirement for Building 225 Truesdale. It was listed in the original PWS when we thought we would be getting funding approval earlier in the year. We do not have time to add this door and be accurate in the information provided. I have not had time to assess the location, door type and adjoining building construction to adequately address / provide info for this add-on.

10. Will all card readers require a keypad and dual interface (Contacted, contactless)?

RESPONSE: All card readers read contactless and contact for Federal PIV, PIV-I, CIV, and CAC (FIPS-201) with keypad for two factor authentication. The Pin will be set in the software (Pin to Panel). Must also support DESFire, MIFARE and 125 khz legacy contactless cards (HID Prox, Indala, etc.).

The government was able to pull a report from the existing Lenel system and export it to a spreadsheet. That report has a list of controller locations and all the doors currently in the system. Panels are highlighted in blue, total door counts by panel are highlighted in green and the doors to be removed/not connected are highlighted in yellow.

Some of the doors in the “Reader Report” list doors as NO CARD READER. Treat them as a standard door with reader, lock, door position switch and REX. Any unused parts will be turned over to the government at the conclusion of the contract.

Total door counts with this updated information are as follows:

B127 Lewis and Clark – 128 Doors B120 CARL – 15 Doors

B120 GIF – 11 Doors B285 Flint – 7 Doors B315 Muir – 7 Doors B225 Truesdell – 9 Doors Project Total Number of Doors – 177

Sample Data Sheets for Readers that meet the salient characteristics outlined in the PWS are included in additional data sheets. These are examples and are not to be understood as a required make/model.

System Design may consist of iSTAR Edge G2, iSTAR Ultra G2 and RM/OSDP boards to accomplish an efficiently designed solution meeting or exceeding commercial standards.

11. Please confirm whether any classified work is required under this solicitation.

RESPONSE: No Classified work is required.

12. If classified performance is required, please provide the applicable DD Form 254 and identify required personnel clearance level(s), Facility Clearance Level, and any SCIF/SAPF or classified-processing-area requirements.

RESPONSE: Basic background check required for access to Fort Leavenworth.

13. If no classified performance is required, please confirm that the listed classified-contract references do not create an additional personnel or facility-clearance requirement for this procurement.

RESPONSE: No classified performance required. No additional clearance requirement. US Citizen and able to pass an NCIC III check at the Installation Visitor Control Center (no serious criminal history).

14. Reference: PWS 1.7, 1.9.3, 5.1.1; Part 6 Sections 6.7-6.10, 6.23, 6.25, and 6.28.The PWS requires the successful contractor to be a certified integrator for Software House C-Cure 9000 and the proposed NVS/NVR solution. Technician certifications specifically listed are C-Cure 9000 Installer/Maintainer, C-Cure 9000 Advanced Integrator (Senior Technician), and equivalent NVS/NVR certification. The access-control scope also requires FIPS 201-compatible multi-technology readers supporting PIV, PIV-I, CAC, PIV-C, TWIC, MIFARE Classic, and MIFARE DESFire. Are the certifications specifically listed in PWS 1.7 and 1.9.3 the complete technical certification requirements?

RESPONSE: Contractor must be an authorized vendor for the respective systems (verifiable from the manufacturer). Clarification on technician certifications: If more than one technician is on site, at least 1 technician must have the C-Cure 9000 Installer / Maintainer certification and provide oversite of less experience technicians. Any technician performing programming of the C-Cure Server for the equipment being installed must have the C-Cure Advanced Integrator certification or the Installer / Maintainer certification and a resume of projects personally worked to demonstrate to the government’s Subject Matter Expert that the individual is capable of performing the work.

Senior Technician / Advanced Integrator requirements for the proposed Network Video Server replacement.

15. Is CSEIP (Certified System Engineer ICAM PACS), or another FICAM/ICAM PACS lead-designer/integrator certification required?

RESPONSE: No. However, it is the responsibility of the contractor to provide qualified technicians to ensure a smooth transition from Lenel and Bosch systems to the new equipment.

16. Are any DoD 8140/8570 cybersecurity workforce roles or certifications required for contractor personnel performing the access-control or NVS/NVR work?

RESPONSE: No. The Video System is on a closed restricted network (separate from the DoD/Army Network. Oversight of that network is provided by the CGSC Cyber Team.

17. If additional certifications are required, please identify the certification and the personnel/work role to which it applies.

RESPONSE: No. The Video System is on a closed restricted network (separate from the DoD/Army Network. Oversight of that network is provided by the CGSC Cyber Team.

Reference: PWS Part 6 Section 6.16. Part 6 lists UFGS 28 31 76, Interior Fire Alarm and Mass Notification System. The specific tasks in Part 5 identify access-control replacement and network-video-system/recorder replacement, but no fire-alarm or mass-notification installation task is identified. Please confirm whether UFGS 28 31 76 is applicable to this contract.

RESPONSE: No. That reference was in error. No Fire Alarm work or integration with the Access Control / Video systems.

18. If applicable, please identify the specific fire-alarm or mass-notification work required.

RESPONSE: Not Applicable

19. If no fire alarm or mass-notification work is required, please confirm that UFGS 28

31 76 may be disregarded for pricing and performance.

RESPONSE: Please disregard any reference that addresses mass-notification or fire-alarm work.

20. Reference: PWS 5.1.2, 5.2.2; Part 6 Section 6.14. PWS 5.1.2 requires a full

Performance Verification Test in the presence of the Government accepting official, and PWS 5.2.2 requires performance verification of each camera with the new Video Management System. Part 6 also references UFGS 28 08 10, Electronic Security System Acceptance Testing. Is UFGS 28 08 10 incorporated in its entirety, or only to the extent specifically described in PWS 5.1.2 and 5.2.2?

RESPONSE: Only the extent identified in the PWS. We will not require a 30 day burn-in with a technician on-site. The intent is to demonstrate full functionality of the systems as they are converted over to new equipment.

21. Is a Contractor Field Test and/or Pre-Acceptance Test required before the Government Performance Verification/Acceptance Test?

RESPONSE: Not required but encouraged. A performance verification test will be performed in the presence of the government accepting official. This will be a pass/fail. If the PVT fails, the accepting official, at his/her discression will reschedule another PVT.

However, multiple PVTs will not be permitted beyond the 2nd retest. It is therefore in the best interest of the contractor to perform their own testing prior to the official PVT/Acceptance. In the event of a failure of a second PVT, the issues will be addressed and appropriate remedy will be adjudicated by the KO.

22. Is an endurance/burn-in test required? If yes, identify the required duration, hours per day of active contractor monitoring, and required contractor staffing.

RESPONSE: No endurance / burn-in. However the contractor is required to warranty their equipment and labor.

23. Is acceptance testing performed once for the completed campus system or separately for each building/phase?

RESPONSE: Given the scope of the project and number of buildings, the government is open to PVT/Commissioning by building/phase.

24. Identify contractor personnel required during Government acceptance testing, including whether a Test Director, system technician, QC Manager, operator, or OEM representative is mandatory.

RESPONSE: There are no minimum number of contractor personnel required for PVT/Acceptance. However, at a minimum the senior technician should be present to demonstrate the correct function of the systems and make any on the spot corrections needed for minor faults.

25. If an acceptance test must be repeated due to existing Government-furnished/reused equipment, Army-network availability, or another condition not caused by contractor work, please define the retest procedure and responsibility.

RESPONSE: If it is determined a failure of the PVT is the result of repurposed equipment, Army Network or conditions outside the control of the contractor (e.g. power outage), reschedule of a PVT will be based on the nature of the failure. For example, if a door lock becomes inoperable and prevents a successful PVT of that door, the rest of the PVT will continue and the contractor will be relieved of demonstrating successful operation that door.

26. If available, please provide the project-tailored UFGS 28 08 10 showing selections applicable to this procurement.

RESPONSE: Project-tailored UFGS references are not available. Treat the referenced UFGS’ as a guide to help the contractor reach a successful completion of the contract.

Given much of the existing equipment and infrastructure will be reused and may not have been installed IAW current UFGS standards, the contractor of this project will not be responsible to bring those items into compliance with current standards.

27. Reference: PWS Part 6 Section 6.15. Part 6 references UFGS 28 10 05, Electronic Security Systems (ESS). Is UFGS 28 10 05 incorporated in its entirety as a performance requirement, or is it a reference standard applicable only where specifically invoked by the PWS?

RESPONSE: The UFGS will apply only to new work required under this project. As stated above, existing conditions may not be compliant with current UFGS standards. It is not within the scope of this project to bring existing equipment and infrastructure into compliance with current standards.

28. If only portions apply, please identify the applicable sections or provide the project-tailored specification.

RESPONSE: Project-tailored UFGS references are not available. Treat the referenced UFGS’ as a guide to help the contractor reach a successful completion of the contract.

Given much of the existing equipment and infrastructure will be reused and may not have been installed IAW current UFGS standards, the contractor of this project will not be responsible to bring those items into compliance with current standards.

29. Reference: PWS 1.4.1.1, 1.15, 5.2.1-5.2.2; Part 6 Sections 6.18-6.20 and 6.29-6.31.

The ACS panels will connect to the existing Fort Leavenworth C-Cure 9000 environment on an Army private VLAN, and the NVS/NVR requirement includes an option to migrate the video system to the main Army network. The PWS references UFC 4-010-06, Army cybersecurity requirements, DoDI 8500.01, DoDI 8510.01 (RMF), and DISA STIGs.

RESPONSE: The option to migrate the video system to the main Army Network will NOT be exercised. The video system will remain on a Closed Restricted Network.

29. Will the Government retain responsibility for the system RMF authorization/ATO following these modifications?

RESPONSE: Yes. The contractor will need to provide the government representative with the MAC addresses of the panels that will connect to the Army Network. Timing of this information is important as a Change Request must be submitted by the government rep to the Network Enterprise Center on Fort Leavenworth and receive approval to connect prior to making those network connections. Typically, the C-Cure panels are approved in 30 days or less.

30. Is the contractor required to obtain or maintain an ATO, or only furnish technical artifacts supporting the Government authorization process?

RESPONSE: No.

31. Please identify required contractor RMF/cybersecurity deliverables, including any required hardware/software inventories, network/data-flow diagrams, ports/protocols/services lists, security-control/CCI responses, STIG checklists, vulnerability-scan results, SBOM, POA&M support, eMASS inputs, or System Security Plan information.

RESPONSE: All RMF/Cybersecurity requirements, vulnerability scans and other items listed above are maintained by the government. The contractor does not have any Cyber requirements under this contract other than to provide the MAC addresses in a timely manner (30 days prior to installation).

32. Reference: PWS 5.2.1-5.2.2; Part 6 Section 6.31. PWS 5.2.1 requires the proposed

NVS/server to be pre-hardened for FIPS 140-2, encryption/data at rest, and Army STIG compliance. Please identify the specific DISA STIG/SRG baselines applicable to the proposed NVR/VMS solution. Who performs the official STIG/vulnerability assessment, and what assessment/scanning tool will be used? What evidence must the contractor submit to demonstrate compliance? What severity/category of findings must be remediated prior to acceptance? How will findings that cannot be remediated without violating the VMS manufacturer-supported configuration be handled? Who is responsible for documenting or approving vendor exceptions, compensating controls, residual findings, or POA&M items? Please confirm whether the STIG requirement applies to the base private/standalone video configuration as well as the option to migrate the NVS/NVR and cameras to the Army production network.

RESPONSE: The requirement to harden the NVS/Server is depreciated due to the fact that we will be maintaining the system in a Closed Restricted Network. No FIPS 140-2 or STIG compliance requirements.

33. Reference: PWS 1.15 and 1.16. PWS 1.15 restricts transmission of Government documents or information to methods meeting NIST SP 800-171 requirements and specifically identifies DOD SAFE as an approved Government site. Will the contractor receive, process, store, or transmit Controlled Unclassified Information (CUI) on contractor-owned/nonfederal information systems?

RESPONSE: The contractor will not be required to process, store or transmit CUI.

However, it cannot be ruled out.

34. If yes, please identify the expected CUI category/type and all applicable DFARS cybersecurity clauses.

RESPONSE: Any information would likely be OPSEC (no PII or PHI).

35. If applicable, identify the required CMMC level and any SPRS/NIST SP 800-171 assessment status or score required prior to award.

RESPONSE: Not Applicable.

36. Reference: PWS 1.4.1.1, 5.2.1-5.2.2. PWS 1.4.1.1 requires new ACS panel connections to the existing Army network and coordination with Government personnel for approval. The NVS requirement includes an option to migrate the camera system to the main Army network. Please identify the division of responsibility between Government and contractor for VLAN assignment, IP addresses, network switch ports, firewall/ACL changes, certificates, DNS/NTP, network jack/patching, cybersecurity/network approval, and Army network scanning.

RESPONSE: For the ACS panels, all panels will be programmed for DHCP. All VLAN and related requirements beyond DHC configuration are the responsibility of the government.

NVS will remain on the CRN and IP Addresses will be coordinated but likely will transfer from the old system to the new system. The CGSC IT department will provide support to ensure seamless connection to the CRN.

37. Please identify the Government lead time offerors should assume for network provisioning and connection approval.

RESPONSE: MAC addresses will be needed 30 days in advance for ACS panels.

Coordination with the CGSC IT department is required for CRN connection but it is controlled locally and will not likely have long lead times.

38. Please confirm whether delays in Government network provisioning will affect contractor schedule responsibility or acceptance milestones.

RESPONSE: If timelines for MAC addresses are followed, there is no foreseen delays that would affect the contractor.

39. Reference: PWS 1.6.2.1-1.6.2.2; Part 6 Section 6.11. The project requires removal/replacement of existing Lenel controllers, readers, and associated equipment, and Part 6 references AR 735-5, Property Accountability. Please identify the required disposition and property-accountability procedure for equipment removed during the lifecycle replacement.

RESPONSE: The contractor will turn over the equipment removed to the government for disposal.

40. Must removed equipment be inventoried or tracked by serial number?

41. Will Government hand receipts or other property-transfer documentation be required?

42. Is removed equipment to be turned over to the Government, staged at a designated location, or disposed of by the contractor?

RESPONSE: Turned over to the Government. Allowances for staged location is also possible. Will coordinated that with the successful contractor during the post award conference.

43. What property-accountability documentation is required at closeout?

RESPONSE: No specific documentation but the contractor will provide a list of items (make, model, quantity) to the government rep so internal accountability can be accomplished.

44. Reference: PWS 1.4.1 and 5.1.1. PWS 1.4.1 directs reuse of existing power supplies, door locks, door sensors, request-to-exit devices, wiring, and other equipment as much as possible. The condition and compatibility of those existing components may not be fully determinable until field verification. Please clarify responsibility for existing components found to be defective, incompatible with C- Cure/iSTAR Ultra G2, or otherwise unsuitable for reuse.

RESPONSE: For the ACS, the only retained equipment is system agnostic (door locks/strikes, power supplies, REX motions, wiring). One site condition to be aware of:

Some of the wiring to readers on Building 127 Lewis and Clark was run with 24 AWG Stranded 6 conductor wire. Power to those readers is currently fed by doubling up 2 wires for positive and negative power inputs. The length of runs is short enough to support this if the replacement readers do not exceed 250 miliamps max power draw. All the other buildings (Flint, Muir, CARL, GIF, Trusdell have traditional access control multi-cable (banana cable).

45. Should offerors include replacement of potentially nonserviceable existing components in the base price, or assume serviceable existing equipment will be reused and deficient existing equipment will be addressed separately after Government approval?

RESPONSE: Assume serviceable existing equipment with deficient existing equipment addressed separately.

46. If replacement is handled separately, please identify the authorization/pricing process for discovered conditions.

RESPONSE: I will defer to the contracting office to answer this question.

47. Reference: PWS 1.4, Part 5 Tasks 5.1 and 5.2; CGSC ESS Equipment List 2026.

The provided equipment inventory includes existing intrusion-detection, balanced magnetic switch, motion sensor, duress, and other ESS equipment in addition to ACS and CCTV components, while the specific tasks identify the ACS lifecycle replacement and NVS/VMS replacement. Please confirm that IDS, duress, and other ESS equipment not specifically identified for replacement in Tasks 5.1 and 5.2 is existing-to-remain, except as necessary to preserve existing interfaces and functionality.

RESPONSE: The IDS, Duress and other ESS equipment was listed as part of the CAC inventory spreadsheet and should not be identified for replacement. There are no known interfaces between IDS, ACS and Video.

48. If any IDS/duress devices are to be replaced or migrated, please identify the required quantities and scope.

RESPONSE: Not applicable.

49. Reference: PWS 1.4.1.1.1; Solicitation CLIN 0001. PWS 1.4.1.1.1 states that each building will be priced and installed as a complete conversion and that phased options by building are required, while the solicitation identifies a single CLIN 0001.

Please confirm whether offerors should provide separate pricing for Building 127 Lewis & Clark, Building 120 CARL (Library), Building 120 General Instruction Facility, Building 285 Flint, Building 315 Muir, Building 225 Truesdale, the NVS/NVR replacement, and the optional migration of the NVS/NVR/cameras to the main Army network.

RESPONSE: Yes, please break down costs by building.

50. Please confirm whether these are informational building-level breakouts/options under CLIN 0001 or whether a revised CLIN structure will be issued.

RESPONSE: Amendment pending for CLIN by building.