Added: Apr 24, 2008 2:43 pm
Background
The Bureau of Prisons is seeking information from industry sources on HSPD-12 compliant physical access control systems (PACS). The purpose of this Request for Information (RFI) is to conduct market research to determine the availability of products and features for securing access to the Bureau s of Prisons (BOP) Central Office campus. The office campus is physically disbursed across four office buildings in Washington, DC; the buildings are accessible 24 x 7 with monitoring by onsite security staff. The staffing complement is approximately 1500 staff. The potential exists for expansion of a PACS to BOP metropolitan and remote field locations. It is important to understand that the Bureau of Prisons is only seeking information relating to HSPD-12 compliant physical access control systems (PACS).
Vendor Background
1. Briefly describe your products regarding physical access control and the technologies supported
2. Provide references as to any prior HSPD-12 PACS your company has installed and/or assisted in implementing.
Planning and Surveys
1. Will you perform a site survey? Describe what factors are identified during the survey.
2. What types of documentation will be needed by the Federal Bureau of Prisons to complete the survey and installation?
Design
1. What type of access devices/readers will be used for indoor and outdoor locations?
2. How will the access devices/readers interface with the wired infrastructure?
3. Will the device/reader store/forward access activity if network connectivity is disrupted?
4. How is configuration of the devices/readers handled? (locally housed configurations on the readers or a configuration server?)
5. Does the product support the remote display of photos/images to a guard station?
6. How much power is required for the access device/reader and how is it provided (e.g. Power-over-Ethernet)?
7. What wireless standards will the PACS support/implement?
8. Will your PACS support IPv6?
9. Will the design support resource tracking? How?
10. How is the design adjusted to deal with environmental factors?
11. Describe the various servers that will be implemented to support the full PACS architecture to include hardware requirements and software installations.
12. How scalable is the design? What is required to scale from 10 access devices to 100? From 100 to 1000?
Security
1 What type of authentication is used by the access devices/readers?
2. How will physical security of the access device/readers be implemented?
3. What type of encryption is supported?
4. How will access devices/readers be mounted both indoor and outdoor to provide security?
5. Describe any data infrastructure security features you can provide to mitigate snooping attacks, DoS attacks, viruses and worms.
6. Are the operating systems of the various support servers and/or the access devices/readers hardened? If so, describe the features/functions/services that are restricted or have been removed.
Installation
1. How will access devices/readers in hard-to-reach areas be installed? Who will provide the equipment?
2. How will the physical wiring to access devices/readers be protected?
3. What cabling standards will you follow for the physical connection to the access devices/readers?
4. How will the access devices/readers be tied together (i.e. hard-wired to switches, daisy-chained, etc...)
Administration
1. What types of management software will be implemented? Describe the benefits of each type.
2. Can the system be administered through a standard internet browser? Can system administration be done either locally or remotely?
3. Is the administration system secure from unauthorized access? How is this security provided?
4. Does the system provide for remote and local statistics and diagnostics?
5. Is the system compatible with LDAP v3 or higher?
Support and Documentation
1. Is training of agency staff available? (At the Central Office? At field sites?) How?
2. How long after installation would support be provided?
3. After installation, how will the system be tested and/or certified?
4. What type of documentation would be provided after installation?
5. What levels of support are offered (are SLAs available)?
