Security RFI_PWS Group 2.pdf

DRAFT

[Type text]

PERFORMANCE WORK STATEMENT

Security Access Control

1. BACKGROUND

The Department of Homeland Security, Federal Emergency Management Agency (FEMA) has a requirement to install, maintain and inspect, and repair the electronic security systems and connect those systems to the existing FEMA Enterprise Security System. Some Security monitoring systems at remote locations are tied to the Central Monitoring System located at Mount Weather and other locations. The electronic security consists of a centrally controlled and locally operated physical access control system (PACS). The Card Access System is a Casi 4.5 system that is networked with the other sites using Casi software.

2. SCOPE

The Contractor shall provide technical support services to install, inspect and maintain, repair, and administer Security Access Control Systems at the specified FEMA locations.

3. APPLICABLE DOCUMENTS

• NFPA 72: National Fire Alarm and Signaling Code (2010 Edition)

DCID 6/9

• FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION (FIPS) 201 – Personal Identity Verification (PIV) of Federal Employees and Contractors published by the National Institute of Standards and Technology (NIST).

• FIPS 201, Homeland Security Presidential Directive (HSPD) 12 – Policies for a Common Identification Standard for Federal Employees and Contractors, [PIV I and II].

4. REQUIREMENTS

TASK 1: PREVENTITIVE SYSTEM INSPECTION/MAINTENANCE SERVICES

The contractor shall perform scheduled inspection and maintenance services on:

• Access Control Systems

• Locks and Locksmith Services (currently using MEDECO) Mechanical locks and electric strikes

• Other access devices, components, or support systems and services

Such services will include a visual inspection for proper placement and a physical test of each piece of equipment to prove proper functioning as recommended by the manufacturer. Following scheduled inspection and maintenance the contractor will submit a document verifying that it has been appropriately completed. The document must be signed by an on-site government employee and thereafter forwarded to the COTR for approval. All inspection services shall be performed during the principal period of maintenance, Monday through Friday, 8:00 AM to 4:30 PM. Following the scheduled inspection and maintenance, the contractor will notify the COTR of available upgrades for all systems. The contractor shall notify the COTR in writing after inspections if any installations of replacement parts or upgrades to currently installed systems are required. (See Task 2 for more detail)

Visual system inspection services shall be performed in accordance with the schedule set forth in Chapter 7 (Table 7-3.1- Visual Inspection Frequencies) of the NFPA 72, (most recent edition) and in accordance with Underwriters Laboratories (UL) Standard 2050 and DCID 6/9 (current or as superseded) where applicable.

The frequency of scheduled inspection and maintenance on all systems shall be performed annually, or more frequently, if noted below, or in the NFPA 72, Underwriters Laboratories, or DCID 6/9. Within thirty days (30) of contract award, or within thirty (30) days following the exercise of each option year, the contractor shall forward an inspection and maintenance services schedule to the COTR for approval.

TASK 2: SYSTEM EMERGENCY REPAIR SERVICES

The contractor shall perform unscheduled system repair services on:

All costs for repairs, including repair parts, shall be included with the contractor’s charges for repairs. Upon completion of the effort that is associated with “on-call repairs”, the equipment must meet or exceed manufacturers’ standards and specifications. All replacement equipment must be new or in like new condition. After completion of the above tasks, the contractor shall furnish the COTR those components that required replacement and modify the Inspection Services schedule, if necessary.

Unless authorized by the COTR or Contracting Officer, all services repairs shall be completed within twenty-four (24) hours of the original request time. Additionally, the COTR may deem a repair an emergency situation, and a four (4) hour response shall be required. In the event the contractor is unable to provide the necessary repairs in the required 24 or 4 hour period, the COTR can document the c ontractor as having poor performance.

The Contractor shall have facilities and employees who are available to FEMA to provide four (4) hour on-call repair response to all locations identified in this PWS. All responsible offices must be located within close proximity to ensure this four (4) hour response requirement. On-call repairs shall be performed upon notification by FEMA to the Contractor that the equipment is inoperable or unsuitable for operation.

The Contractor shall maintain a 24-hour per day, seven day per week telephone contact or employ answering service for notification by FEMA of the need for on-call emergency repairs. The Contractor shall provide the Contracting Officer and COTR with the designated point of contact and telephone number for notification purposes when on-call emergency repairs are required.

TASK 3: INSTALLATION SERVICES

When deemed necessary by FEMA, the contractor shall perform installation services on:

All equipment installation will follow the manufacturer’s installation specifications or installation instructions. In cases where there are optional choices in the instructions to install a piece of equipment or a system, the contractor shall contact the COTR for direction. All work shall meet applicable local or state codes for installation or construction and be in accordance with the manufacturers installation instructions and applicable portions of the National Electrical Code (current edition); applicable NFPA standards; NBFA Alarm Installer disciplines for installations.

The contractor will be required, as needed; to notify COTR of available upgrades for all systems. The contractor then may be required to install replacements and upgrades to currently installed systems. These additions shall be fully compatible with the systems that are currently in place. The new equipment will, without modifications, communicate directly with the currently installed monitoring hardware and software. In the event equipment is to be replaced, it must meet the existing standards or the contractor must upgrade all associated equipment to ensure the system will remain functional.

Access Control Systems: Access Control Systems must be installed to meet, local and National codes. All devices will be at ADA required height. When required fire control system will release locking device to allow free egress. Access control system will be installed in such a way as to show door propped alarms or forced entry alarms on all exterior doors or any other interior doors on sensitive areas such as stairwells, unless otherwise directed by the COTR. All new installations must meet the FIPS 201 standard.

All new equipment installations must include training for the FEMA site security POC or his/her designee.

TASK 4: Access Control System Administrator Support Services

The contractor shall provide system administrator support services to manage the FIPS compliant Casi Access control system. The contractor’s selected individual to this position shall maintain a Top Secret (TS) security clearance. The person assigned to this position shall be a CASI factory trained and certified in the Casi Access control system as an administrator. Contractor shall ensure the individual maintains training in all upgrades and changes to properly administer the system.

This position is located in the Washington DC HQ area and has over sight for all FEMA locations nationwide across 10 FEMA Regions and Headquarters, as well as any additional fixed and disaster sites nationwide including Alaska, Hawaii, Guam, Puerto Rico, and the US Virgin Islands. Travel may be necessary to any FEMA location where the Access Control Systems are located.

5. TECHNICAL REQUIREMENTS

5.1 ACCESS CONTROL SYSTEM REQUIREMENTS

• The selected contractor must have a full understanding of current access control system hardware and software applications and be an authorized dealer for Casi Rusco.

• The FEMA Physical Security Branch representative must approve the Access Control System (ACS) design, devices, and equipment. The Contractor or Lessor must provide a project management plan including a bill of materials (BOM) to the FEMA Physical Security Branch representative and receive approval in writing before any work begins.

• The contractor must be able to purchase, install, program, and test a turn-key Access Control panel. The contractor will provide experienced technicians to install, program, and test the system. The ACS must be controlled and operated by a Government representative. The contractor will provide the Government representative with a programming sheet/port chart and “Redline Drawings” when the project is complete. All equipment and security devices are to be installed according to manufacturer’s specifications. All hardware documentation will be turned over to the FEMA Physical Security Branch representative at the end of the project in both hard copy and soft copy if possible.

• The physical access control system (PACS) must be PIV card compatible, as described in FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION (FIPS) 201 – Personal Identity Verification (PIV) of Federal Employees and Contractors published by the National Institute of Standards and Technology

(NIST).

• The contractor must have the capability to install and service the access control system described in the following paragraphs and be completely knowledgeable of FIPS 201, Homeland Security Presidential Directive (HSPD) 12

– Policies for a Common Identification Standard for Federal Employees and Contractors, [PIV I and II]. The Contractor or Lessor shall ensure that Physical Access Control System (PACS) installation is completed by a vendor listed as a Qualified HSPD-12 Service Provider under GSA schedule 70 as required by Office of Management and Budget Memo M-06-18.

• The host panel and all associated control equipment will be located on an interior wall in the Telecom Management closet (Refer to the floor plans of location).

• All wiring will be clearly labeled for ease of identification and adhere to applicable UL code.

• The power supplies for PACS equipment shall be UL Listed and will be connected to 120 VAC via a hard wire connection; a wall plug shall not be utilized.

• The contractor will provide all necessary equipment mounts, slides, shelves or hardware to support the system.

• All equipment will be properly grounded according to the manufacturer’s specification.

• No perimeter or interior doors will require or utilize any configuration of request-to-exit technology that releases or unlocks the door (except for a request-to-exit button where required for Magnetic locks or by local and state codes).

• All door contacts will be mounted in the top of the frame, six (6) inches from the lockset side of the door. A matching two (2) inch deep hole shall be drilled in the door so as to align with the frame hole when the door is closed.

• All conduit sizing and wiring requirements are the responsibility of the Contractor.

• The contractor shall design, procure, install, program, test, document and provide all required training for a complete turnkey system.

• The Contractor will be required to provide and install all necessary cable for the PACS. All cable runs will be homeruns. The Contractor will, if necessary, obtain a low voltage permit needed for DHS cabling requirements.

• The PACs must have the capability of meeting or being upgraded to meet future NIST or other government standards for physical access.

• The system shall provide a variety of integral functions including the ability to:

Regulate access and egress;

Provide identification credentials;

Monitor, track and interface alarms linked to Security Management System (SMS) events.

Fully supervised protective circuits and devices with 24 hour reporting of tampers Each protective device on a separate reporting zone with EOL protection at the device.

ACS Control Panel - The type of panel to be installed will be a Casi-Rusco manufactured control panel – no exceptions.

The installer must be a vendor who is experienced in programming the advanced software features associates with this panel and which is required for this security management control application.

Card Readers – The contractor will be required to purchase and install dual reader interface module card readers designed to meet the growing requirement for “Open Architecture” electronics in the access control and security marketplace. The device must be designed to minimize wiring and labor associated with installing field hardware, and provides the flexibility to meet a wide range of system architecture applications. All card readers shall be mounted 42 inches centered from the finished floor.

5.2 ELECTRIC STRIKE REQUIREMENTS

Fail Secure/Safe Electric Strikes – Electric strikes provide the electronic release of a locked door. They allow the door to be opened without retracting the latch bolt. This occurs by the releasing of the electric strike lip (sometimes called a keeper or gate). When the door closes the beveled latch bolt rides over the lip and falls into the strike pocket.

The following 24 volt DC electronic door strikes will be used:

• Electronic Strike Make and Model o HES 1006 plus correct option plate for associated door

Request to Exit (REX) Sensors – Passive Infrared Detectors (PIR) specifically designed for request-to-exit applications.

They detect motion in their coverage area and signal an access control system or door control device. All ‘Request to Exit’ PIRs will be wired normally open (NO). The contractor will provide and install PIR sensors, on every door that has a card reader and strike. The purpose of this REX PIR is to shunt the door position switch (DPS) when the door is opened from the inside.

The following request to exit sensors will be used:

• Request to exit PIR make and model:

o Bosch DS160i series.

5.2 TRAINING

• The Contractor will provide no fewer than (4) four hours of on-site training and technical assistance for the system.

6. DELIVERABLES

ID

Deliverables Performance Standards Delivery Schedule

1.0 Post Maintenance/Inspection Report Will be provided in final PWS Will be provided in final PWS

2.0 Post Installation Report Will be provided in final PWS Will be provided in final PWS

3.0 Post Repair Report Will be provided in final PWS Will be provided in final PWS

7. PERSONNEL QUALIFICATIONS

All personnel assigned to this contract must satisfy the requirement set forth in NFPA 72, Chapter 7, paragraph 7-1.2.2,(a) “Factory Trained and Certified”. All personnel must meet respective State certified technician requirements and shall follow electrical code and NBFAA installer disciplines for installation. The Contractor shall provide a listing of all certified and trained personnel approved to work at each location identified above within thirty (30) days of contract award. This list shall be updated and provided as necessary to the COTR throughout the base and each option year of the delivery order.

8. PLACE OF PERFORMANCE

The contractor shall provide technical support services nationwide across 10 FEMA Regions and Headquarters, as well as any additional fixed and disaster sites nationwide including Alaska, Hawaii, Guam, Puerto Rico, and the US Virgin Islands.

9. PERIOD OF PERFORMANCE

The contractor shall provide technical support services from October 1, 2011 to September 30, 2011 (base year), and for four (4) subsequent one (1) year option periods.

10. SECURITY

The full time system administrator who manages the FIPS compliant access control system must maintain Top Secret security clearance.

11. QUALITY ASSURANCE SURVEILLANCE PLAN

Random Sampling will be the primary method of surveillance. During a random sampling inspection any faults will be noted. A fault is defined as work that is found to be unacceptable under any of the performance standards or failure elsewhere in this PWS. There will be a final inspection of this delivery by the COTR who will accept the work as complete or note any deficiencies. Any deficiencies will be documented and reflected in the contractor’s future past performance evaluations.

12. WARRANTIES

12.1 Newly Installed Systems - The contractor shall guarantee all materials to be free of defects for a minimum of one (1) year from the date of acceptance by FEMA. If the manufacturer’s warranty is longer, it shall be covered for that period. All labor will be guaranteed for a period of one (1) year.

12.2 Repairs – The contractor shall guarantee all materials and labor for a period of ninety (90) days from the date of repair.

13. PERFORMANCE REQUIREMENT SURVILLANCE (PRS)

Shall be provided in final PWS