March 11, 2013 ADDENDUM #1. RFP-DEM-12/ FDEM Facility Security System Replacement

Transcription

1 STATE OF FLORIDA DIVISION OF EMERGENCY MANAGEMENT RICK SCOTT Governor BRYAN W. KOON Director March 11, 2013 ADDENDUM #1 RFP-DEM-12/ FDEM Facility Security System Replacement The Division is issuing ADDENDUM #1 to revise the Scope of Work, Exhibit A. Part IV Doorway Entry Intercoms Public Address, and Visitor Kiosks has been updated to include required components. Please see the revised Scope of Work Attached. This Addendum must be acknowledged by signature below: (Signature) (Print Name and Title) (Company Name) This acknowledgement must be submitted with your bid/proposal in order to be considered responsive. FLORIDA RECOVERY OFFICE DIVISION HEADQUARTERS STATE LOGISTICS RESPONSE CENTER 5900 Lake Ellenor Drive 2555 Shumard Oak Boulevard 2702 Directors Row Orlando, FL Tallahassee, FL Orlando, FL Tel: Fax:

2 EXHIBIT A SCOPE OF WORK FDEM FACILITY SECURITY SYSTEM REPLACEMENT The State of Florida, Division of Emergency Management, requests proposals for Department of Homeland Security compliant upgrades and comprehensive integration of its physical access control systems, surveillance cameras, and digital recording platforms, doorway entry intercoms, Personal Identity Verification (PIV)/ First Responder Authentication Credential (FRAC) credentials and storage database and production software, and visitor management system kiosks. This request also includes options for mobile handheld Personal Identity Verification (PIV) credential readers. Per (1) (b) 1 F.S., this project is being solicited as a Request for Proposal due to the multiple groups of commodities integrated into this project. The Division can specifically define the group of commodities for this project and is capable of defining necessary deliverables; however, the Division is not capable of establishing precise specifications of group(s) of commodities (and the integration thereof) that will be required by this project due to the following reasons: No State Term Contract for the group(s) of commodities exists. The groups of commodities being solicited in this request are highly technical in nature. Electronic access control, surveillance, and other related physical security hardware & software components are primarily distributed through specific vendor networks of integrators. In order for the customer to benefit from any factory-included warranties, the components must be installed and serviced by manufacturer-authorized service representatives and/or integrators. Within the group(s) of commodities solicited: o Some manufacturers use highly proprietary hardware and software communication protocols for their system components that are not compatible with other manufacturers systems. o Other manufacturers use open platform hardware and software communication protocols that allow for increased compatibility among a variety of manufacturers of the interrelated groups of commodities being solicited in this request. The Division intends to reuse as many components of existing physical security systems as possible, so long as those components are compatible with the latest Federal Information Processing Standard (FIPS) 201 and Homeland Security Presidential Directive (HSPD) 12 guidance on Personnel Identity Verification- Interoperable (PIV-I) credentials and systems. o The Division s current primary physical access control and video surveillance systems utilize proprietary technologies.

3 Soliciting this project as a request for quote or an invitation to bid will enable the Division to maximize physical security upgrades across all three of its facilities, while balancing each facility s unique security needs with available funding. Various combinations or versions of commodities or contractual services may be proposed by vendors to meet the specifications of this RFP. Successful proposals from responsive vendors should thoroughly engage the Required Components in Sections I-IV below, with additional consideration for the Additional Options in Sections I-IV, plus Section V. Vendors must disclose any commodity or service that is being sub-contracted out to another vendor. Due to the sensitive security nature of the Division s facilities, the exact locations, installation specifications, and vulnerabilities identified to be addressed by the upgrades in this RFP will not be posted publically, but will be available to the selected vendor. Project Background and Facilities This project includes system upgrades at all three Division Facilities: For purposes of this document, Facility A and, Facility B are located in Tallahassee, FL, and Facility C is located in Orlando, FL. Facility A is a single story Special Facility; Facility B is a three-story commercial office building; and Facility C is a combination office and warehouse complex. The Division has evaluated an existing secondary access control system that utilizes the dnafusion software platform from OpenOptions, Inc. Given our prior software investment and significant number of unused door/controller licenses purchased as part of the system, coupled with the open architecture of the system, the Division has determined that this platform should be re-used as the primary access control and video surveillance platform for this project. Responsive vendors will specifically address re-use of this system and licenses in their proposal, or adequately demonstrate that their alternative solution(s) meet or exceed the features and functionality of the dnafusion platform in a more cost-effective manner than would otherwise be achieved by reusing the existing dnafusion environment. Project Assumptions: The following assumptions apply to all three facilities or the project as a whole unless otherwise stated. One credential that will work at all three locations, yet have security limitations on access to and within each facility through the OpenOptions software. Customer desires maximum integration of all system components Division-Wide into one viewing and management platform. The customer will supply any non-proprietary server and client workstation hardware to meet the technical specifications of the system,

4 There is open and available wire conduit between electrical rooms in facility A and B.. Part I Credential Issuing, Storage and Management This section addresses hardware and software requirements for Personal Identity Verification Interoperable / First Responder Authentication Credential and Visitor credential. All bids MUST include this Part in their proposal. Three Systems will be provided. One for Facility A, one for facility C and a portable field system for credentialing in the field. Required Components Must be compliant with FIPS-201 standards for security and specific fields referenced for PIV-I credentials. Software must be compatible with the dnafusion software platform from OpenOptions, Inc. such as Fusion ID Credential Management System Credentialing The system must be capable of issuing a nationally approved FIPS 201 PIV /First Responder Authentication Credential (FRAC) card. The card must contain HID RFID proximity, and CONTACT SMART chip; and be capable of printing 1D/2D bar code, photo, half-tone seals and other text-required information on the card in accordance with federal requirements. Personal Identity Verification Interoperability for Non-Federal Issuers; FEDERAL CIO web reference document: ved=0cd4qfjae&url=http%3a%2f%2fwww.idmanagement.gov%2fdocuments%2fpi v_io_nonfed_issuers_may2009.pdf&ei=paz9unpi46q8wtyhihycw&usg=afqjcnfrsgo3yhqzqqcpcgedxe1wb84uq&sig2=agvplnvysr83rqcnjkxjew Visitor Kiosk Systems There is a requirement for three Visitor ID System Kiosks. Each Kiosk must be selfcontained to scan drivers license, draw information from the license, capture a copy of the license into the database, and produce an adhesive or plastic card temporary ID based on a defined format. If the visitor does not have a driver s license, the systems must be capable to taking a photograph and the visitor manually entering their information. Contractor must provide visitor management software compatible with dnafusion software platform from OpenOptions, Inc. and Fusion ID Credential

5 Management System such as WayPoint Visitor Management software Required Add-On Modules DNA Fusion Integration Waypoint is integrated with DNA Fusion Security Management System to automatically update and verify visitor data, activate and deactivate badges, and assign access levels to visitors. Photo Badging Visitor badges can be custom designed and printed upon visitor arrival or in advance with Waypoint. Plus, Waypoint prints and reads barcodes on visitor badges. Pre-Registration via Web Visitors no longer have to wait to be registered. With Waypoint, sponsors can register visitors or groups of visitors, create visitor badges, and update changing visitor data before visitors arrive to a facility. Sex Offender Screening The threat of sex offenders can be avoided when Waypoint screens visitors through national and state sex offender registries. The visitor systems shall capture the photograph, name, agency, company they are with, person they are visiting and location. The Visitor credentials should maintain the ability to be granted temporary access on the primary system. Both primary FRAC and visitor systems need to have web-enabled request portals where authorized users can self-create their ID profile, which is then transmitted to an approval flow for Division staff to approve and process. Contractor will work with DEM staff to incorporate portals into an existing ASP.NET website. Reuse of Exsisting Equipment Reuse existing Datacard SP-75 Plus ID Card printers for FRAC credentials (equipped with 2-sided printing, smart chip and mag stripe encoding, and custom holographic laminate. Reuse existing Datacard SP-55 ID card printers and/or Dymo Label Printers for visitor credentials. Deliverables Primary FRAC database installed.

6 Software application configured at 2 customer locations with photo ID camera and existing card printers for authorized users to create, program, validate, and issue individual FRAC credentials. Visitor system database installed. Visitor system clients and drivers license readers installed and configured at three customer locations on customer provided workstations with existing card printers and/or Dymo label printers. Proximety readers will be HID compliant. Part II Data Management, Physical Access Control and Security Data Management Assumptions All clients and servers will be capable of being connected to the customer s existing Windows domain The controllers shall be listed for either FIPS 197 validated 256-bit encryption or listed for FIPS to ensure secure communications between server and controller(s). Existing Wiring Due to the age of the wiring and lack of integration across past upgrades at each facility, the wiring in Facility A will need to be back pulled prior to installing new IP based wiring and cables. Facility B will be all new wiring. Facility C wiring may be reused if applicable. This work will be required of the awarded contractor. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Access Control to Facilities Due to the security requirements of each facility, contractor will need to work with the Division in regards to installation schedule, and ensure that no door to any secure area is ever left opened or unsecured during the installation phase. Required Components Facility A: Readers - All readers must be ADA compliant 2 3 tier EXTERIOR (Long Range RFID, SMART Chip, Proximety + PIN + Biometric) exterior readers with all associated door controllers, exit sensors, wiring, and related hardware. (Example: HID bioclass Biometric Keypad SMART Card Reader )

7 8 New 2 tier INTERIOR (Long Range RFID PROX + PIN) interior readers with all associated door controllers, exit sensors, wiring, and related hardware. Note: there are 2 existing readers with a door controller, exit sensors, and wiring for this same configuration that have been identified for re-use. 2 New 1 factor INTERIOR (Long Range RFID PROX) readers for time keeping accountability. Wiring System wiring is old and left over from several prior systems. As such, it is deem unreliable and will need to be removed in order to run new wiring for the new system. Contractor will be required to back pull all old wiring as part of this award and replace with new wiring as required. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Facility B: Readers 4- New 2 tier (Long Range RFID, SMART Chip, Proximety + PIN) exterior readers with all associated door controllers, exit sensors, wiring, and related hardware. Note: there are 4 existing readers with a door controller, exit sensors, and wiring for this same configuration that have been identified for re-use. 1 New 2 tier (Long Range RFID PROX + PIN) interior reader with all associated door controllers, exit sensors, wiring, and related hardware. Wiring There is existing wiring that is PROX Only that may or may not be used if deemed appropriate. Contractor will be required to install all necessary wiring on this facility. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Facility C: Readers 3-3 tier (Long Range RFID, SMART Chip, Proximety + Pin + Biometric) readers with all associated door controllers, exit sensors, wiring, and related hardware. C 5-2 tier (Prox + Pin) interior readers with all associated door controllers, exit sensors, wiring, and related hardware. Wiring A current system exists in this facility similar to Facility A. It may or may not be usable for the new system. Contractor will need to determine if the wiring must be replaced or not. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to

8 supply any necessary new patch panels and they shall meet customer s current conventions. Deliverables Contractor shall provide in their proposal separate breakdowns of parts and labor associated with each of the three facilities. Order of installation shall be; A, B then C respectively. Customer requires a system that can be monitored from network connections for both alarm triggers, arming, credential rules (permissions) as well as security cameras; by authorized personnel. Planning Assumptions Due to the age of the wiring and that several upgrades had been done to each facility, that wiring in each facility may have to be back pulled prior to installing new IP based wiring and cables. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Due to the security requirements of each facility, contractor will need to work with the Division in regards to installation schedule, and ensure that no secure area is ever left opened or unsecured during the installation phase. Part III Video Surveillance and Digital Recording This section addresses comprehensive integration of existing and new video surveillance cameras and their associated digital recording platforms. Required Components Facilities A and B: A new hybrid digital video recording platform with at least 180 days of digital video storage capacity. Vendor must provide both hardware and software for the platform. In addition to any specific video viewing and/or management tools that are packaged with the solution, video from all cameras should be viewable within the dnafusion platform. The recording platform: Must re-use up to 18 existing Bosch stationary and/or PTZ hard-wired cameras in both facilities A and B, or demonstrate that it is more cost-effective to replace existing cameras with new IP-based cameras of comparable feature sets and motion/zoom ranges. Have capacity to re-use at least 4 looping hard-wire inputs from a secondary camera system in facility B, or demonstrate that it is more cost-effective to add 4 new IP-based cameras at the same locations as the 4 cameras in facility B.

9 Allow the customer to use any per-camera licenses on the platform as either analog or IP-based cameras (as existing cameras fail, their replacements will be IP-based). All new cameras must be IP-based and include wiring and power supplies. If PoE is used, cameras must include a power injector if needed for the specific location. Base package should include at least 8 concurrent licenses for users to view live camera video or recordings at any given time. software should allow for, at minimum, four permissions levels, with the ability to restrict network/system configuration, system management to include recording erasure and camera settings, operator resources to include playback and available camera views, and view-only, based on the user accessing the system. Facility C: This facility currently has a Panasonic WJ-HD616 recorder with 16 stationary and PTZ cameras. All cameras from this facility need to be viewed across the network as part of the overall dnafusion installation at a central monitoring point in Facility A. If the proprietary recording and/or camera technology used by Panasonic is not compatible with this installation, then the vendor shall specify DVR and/or camera upgrades needed to make the video and/or recordings compatible with the common monitoring platform at Facility A. Additional Options - Please note: Options will not be calculated in Price Proposal and shall be quoted separately. Facility A: Adjust the placement of at least 1 existing Bosch PTZ camera (ceiling tile mounted) that is within 200 feet of existing DVR location, with access via a dropped ceiling. Replace 3 existing stationary Bosch cameras at Facility A with new IP-based wide-angle megapixel stationary cameras that are within 50, 150, and 250 feet respectively of the DVR location. List as cost per camera, to include wiring and installation. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Add 3 new fixed wide-angle IP-based cameras, two of which are within 250 feet of existing DVR location. Additional license (cost per each additional concurrent user) to view video or access server. All Facilities:

10 Web-browser-based viewing of all cameras and/or recordings for authorized users on other network endpoints. Deliverables All cameras at facilities A, B, and C accessible from client connection at central monitoring point in Facility A. Authorized users able to access permitted cameras and features from their user accounts anywhere on the customer network. All cameras able to be integrated into current dnafusion system, or alternative central access control and security management platform with accompanying cost-benefit analysis. Any optional work included in project award completed to specifications for each individual option. Assumptions All clients and servers will be capable of being connected to the customer s existing windows domain. Part IV Doorway Entry Intercoms Public Address, and Visitor Kiosks Required Components Intercoms: Certain exterior and interior door access to each facility shall be supplied with an IPbased intercom system. All door stations used to initiate intercom calls must have an integrated CCTV camera. (Current system used: Aiphone IS-IPDV Video Door Station Surface Mount) All master stations where calls from door stations are answered should be able to view video from the CCTV camera integrated into the door station. All master stations should be able to unlatch the door at the station calling. (Current system used: Aiphone IS-MV Master Station for the IS Series - AJ- ISMV) All door and master stations must be installed and configured as follows: Facility A: Two exterior door stations. Two interior door stations. Three master stations, two co-located at answering point 1 and one at answering point 2 All door stations will be answered only by master stations in Facility A, however one or both exterior door stations need have the capability to be switched between answering point 1 and 2 as their primary ring location ON DEMAND by the customer.

11 The front and interior lobby door must also have an under desk electronic release button to indecently unlatch door while button is depressed. Facility B: Four exterior door stations. Four master stations. Door station calls must be capable of being scheduled to route to various master stations based on time of day and day of week. o Two exterior call boxes (north/south lobby) will ring on two master stations in Facility B during business hours o One exterior call box (mailroom) will ring on the third master station in Facility B during business hours; or be capable of transferring to the first two master stations if no answer within a window of time or in do-notdisturb mode. o All three call boxes will ring in Facility A, point 1 after hours and on weekends. o Facility C: Three exterior door stations. Two master stations. Door stations calls must be capable of being scheduled to route to various master stations based on time of day and day of week. Any control stations needed for the proper function of the intercom system must be installed in a manner that each building s intercom stations can continue to function on the building s local network in the event of a wide-area network disruption. Facility A and B MAY be able to be located on the same control station however a separate control station is needed for facility C. Visitor Kiosks: WayPoint software will be used as the Visitor Management Software since it is compatible with dnafusion Open Options software for the security system. Vendor will provide all software, link the visitor platform to the primary system, and also provide all scanners, cameras, and printers needed for the visitor platform IF the customer s existing scanners and printers are not compatible for reuse. Additional Options - Please note: Options will not be calculated in Price Proposal and shall be quoted separately. Ability for any of the required intercom door stations to be routed to an external telephone number as part of the intercom call flow. Need to discuss telephone requirements with customer for this option.

12 Area of Rescue Assistance intercoms for facility B: 9 intercoms meeting ADA guidelines to be mounted and installed in stairwell landings. If PoE is used, devices must include a power injector if needed for the specific location. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Distress calls from these intercoms must be able to be answered from master stations in facility A or facility B. IP Addressable and powered Public Address speakers for facility A and B: 10 ceiling-mounted speakers for office suites, lobbies, and large rooms. 16 wall-mounted horn style speakers for open cubicle areas and hallways If PoE is used, devices must include a power injector if needed for the specific location. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. IP Addressable and powered Public Address speakers for facility C: 6 ceiling-mounted speakers for office suites, lobbies, and large rooms. 12 horn style speakers for open cubicle areas, storage space and warehouse areas. If PoE is used, devices must include a power injector if needed for the specific location. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. Deliverables Visitor-Management software installed and configured on customer-provided workstations or kiosks, communicating with the OpenOptions platform. Optional PA Systems shall be addressable from certain intercom master stations or hand held speaker microphones as follows: Facility A : 3 locations (1 Master and 2 remote) Facility B : 4 locations (1 Master and 3 remote) Facility C : 6 locations (1 Master and 5 remote) If separate amplifiers are needed, each facility shall be on its own separate PA amplifier and local to that facility. Assumptions

13 No wiring for these systems currently exists and will need to be run. In addition to meeting any other required specifications, all wiring intended as a network connection shall be to CAT6 specifications. The contractor will be required to supply any necessary new patch panels and they shall meet customer s current conventions. All current wiring for an outdated 3 door analog intercom system in Facility A must be removed upon installation of the new door and master stations. Part V Service and Maintenance Contract Company will propose a 5-year annual service and maintenance contract to service all equipment. Service Company must have a 1-hour or less response time to each site (Tallahassee and Orlando, FL) for CRITICAL issues such as total system failures, doors that do not function, credential system failures. A Next Business Day response will be acceptable for non-critical issues, routine service and maintenance, annual inspections. While this will be a 5-year contract, the annual Service and Maintenance contract shall be paid each fiscal year beginning in July of each year. Service and maintenance shall include all replacement parts for the system included in the system. Should a factory warranty not cover the 5-year period, the vendor shall extend the warranty through the 5-year term. Expendable supplies such as ID Cards, card printer ribbon, lanyards, clips etc. will not be included in the replacement part requirement and purchase of these supplies will remain with the State. The State may consider purchasing these supplies through the same vendor as installing the system so long as they are competitive in pricing.