Street Pretoria 0002 Bid No. Dmsa 2016/2 Supply And

Transcript

PO Box 4197, Pretoria, 0001, Republic of South Africa Tel: +27 12 000 0010 Fax: +27 12 323 6598 Street Address: DITSONG Head Office GaMohle Building 70 WF Nkomo (Church) Street PRETORIA 0002 BID No. DMSA 2016/2 SUPPLY AND INSTALLATION OF SECURITY, ACCESS CONTROL AND CASH MANAGEMENT SYSTEMS AT DITSONG MUSEUMS OF SOUTH AFRICA Compulsory Briefing Sessions: Briefing sessions will take place from 1-2 August 2016 at the various museum sites. The venue and time for the briefing sessions will be communicated in the bid document which will be available from 25 July 2016 at Ditsong Head Office. Bid Documents: Mr Sphiwe Sithole Phone: 012-000 0010 E-mail: [email protected] Closing Date: 26 August 2016 11H00 Validity: 90 days from closing date Cost of Bid document: R 200.00 (Non-refundable) Please note that Bid documents will only be sold at DMSA Head Office and not at the briefing sessions. Please take note of the following: Bids will be evaluated according to the 90/10 preferential points system 1 SPECIAL CONDITIONS OF CONTRACT SUPPLY AND INSTALLATION OF SECURITY, ACCESS CONTROL AND CASH MANAGEMENT SYSTEMS AT DITSONG MUSEUMS OF SOUTH AFRICA 1. MUSEUM PROFILE DITSONG Museums of South Africa (DMSA) is a declared Cultural Institution in terms of Act 119 of 1998 and it is made up of eight museums – seven in Tshwane and one in Johannesburg (Saxonwold). The future of our heritage lays in the upkeep and preservation of our heritage resources. 2. SCOPE Prospective bidders are invited to submit proposals for the supply and installation of security, access control and cash management systems at the below-mentioned museums of DITSONG Museums of South Africa (DMSA). Details of the compulsory briefing sessions are stipulated below:  DITSONG: National Museum of Natural History, 432 Paul Kruger Street, Pretoria Compulsory site meeting: 1 August 2016 at 10h00 Contact person: Mr Shaw Badenhorst (012) 322 7632 / 073-484 8509  DITSONG: National Museum of Cultural History, 149 Visagie Street, Pretoria Compulsory site meeting: 1 August 2016 at 11h30 Contact person: Ms Julia Montlha (012) 324 6082 / 079 846 9169  DITSONG: National Museum of Military History, 22 Erlswold Road, Saxonwold, Jhb Compulsory site meeting: 2 August 2016 at 10h00 Contact person: Mr Themba Ndebele-Monyela (011) 646 5513 / 083-996 0210 3. TERMS OF REFERENCE The proposal shall comply with the following information: - Proof of CIDB Registration is required (original or certified copy) - Proof of PSIRA Registration is required (original or certified copy) - Proof of Public Liability Insurance is required - Secrecy agreement - Undertaking to comply with the Occupational Health and Safety Act, Act 85 of 1993 DITSONG: NATIONAL MUSEUM OF NATURAL HISTORY REQUIREMENT, SPECIFICATION AND MINIMUM STANDARD. Install an Access Control system at Ditsong: National Museum of Natural History. The following specifications for the installation of the Access Control System are applicable and required by Ditsong: 2 - Maintenance plan for all accessories (24 months). - Training of members working on the system. - Optimal performance. - Guarantee and warranty on the main equipment. - System must be upgradable. - UPS and Battery backup. - Anti-tampering. - Technical backup. - Specialised security. - Immediate response. - Manufacture both local and import. - DD1112 (Information and security restrictions) completed by supplier. - Access must be fully remote control ready. - IP 66 for all outdoor items. - Data storage for 3 months. - MIS (Management Information System) – Reporting, time & attendance, security incident reporting, investigations etc. The Access Control System must be able to upgrade as follow: - Incorporating a full control dashboard, enabling a full integrated control system - This specification covers:  Access Control  Intruder Alarm System  Alarms Management  Photo ID Badging  Visitor Management  Guard Tour  Perimeter security  CCTV Integration  Cash Management The system is to be supplied with all equipment, hardware, software, cabling and ancillary services as required to provide an integrated system complete and functional in all respects. The tenderers are to familiarize themselves with all matters related to such requirements and to account for such in the tendered price. Other security system components not included in this specification shall be fully integrated with this integrated - - 3 security system. - It is the responsibility of the tenderer to obtain clarification of all matters in which doubt exists as to the exact intent of this document or in which a conflict appears to have arisen. Such information must be obtained prior to the closing and lodging of tenders. - The response shall clearly detail all pricing for components, cabling, installation, engineering, training, commissioning, setting to work, and 36 months comprehensive warranty. - The tenderer must include as part of the tender submission a complete, clause-by-clause response. All equipment must have at least a 3 year warrantee. FUNCTIONAL OVERVIEW - The Security Management System (The System) shall allow multi-site configuration able to be managed by one or more of the connected sites. - It shall include (but not be limited to) the following:  Access control  Alarms management  Cardholder management  CCTV integration  Integrated Visitor Management  Guard Tour  Perimeter deterrent and detection integration - The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependant on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. - The System shall provide access control in elevators enabling access to any combination of floors over specified time periods. The interface to the elevator manufacturer’s equipment shall be by either low level interface (relay outputs) or by a high level (data) interface. - The System shall monitor the condition of inputs. The System shall be able to be programmed to apply a variety of conditions to the way in which these inputs are monitored and shall enunciate the condition of such inputs in accordance with such programming. - The System shall provide a fully functional intruder alarm system including entry and exit delays where intruder detection sensors are connected to system inputs. The Intruder Alarm Systems component shall be fully integrated with the Access Control aspects of the system. It shall be possible to set (secure) or unset (unsecure) areas from any access control reader associated with an area, access control reader with keypad, Alarms Management Terminal, or as required from defined central control locations. - The System shall provide an integrated software facility for the design and production of photo ID cards. - The System shall be OPC AE (Alarms and Events) and OPC DA (Data Access) compliant, enabling integration of event, status and override data with external OPC compliant automation and business systems. - The System shall allow data exchange with other applications using XML protocols for schedule changes and card record changes. - The System shall support the BACnet communications protocol. 4 - The System shall support a Web Service to allow an external system create remove and modify cardholders, including assigning access rights. - The System shall support a Web Service to allow an external system to create and modify visits and visitors. - The System shall support APIs to allow external systems to receive events from The System, and pass events to The System. - The System shall support the Simple Network Management Protocol (SNMP) protocol. - All system communications must be totally integrated with either existing or new LAN/WAN networks. Tenderers must make themselves familiar with the specific requirements for this project. - Connection to Intelligent Field Controllers (IFCs) shall be achieved using cabling supporting the TCP/IP protocol. The network connection must be on-board the IFC. Interface transceiver units (Ethernet to RS485, RS232 etc) are not acceptable. - The System and Intelligent Field Controllers shall have IPv6 address support. - Remote IFCs not permanently connected to the network can be connected via a PSTN service, using TCP/IP protocols.  Connection from the remote IFC to the server shall be either via dialup to an Internet Service Provider (ISP) using encrypted TCP/IP, and then via an approved firewall through into the IT environment or via dialup directly to a RAS connection on the Server. All system software upgrades shall be downloadable through the network to the IFC, readers and I/O devices. - All data communication between The System and IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication The System and IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication between IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 128-bit AES or stronger. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to elliptic curve ECC P-256 or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. 5 - The System shall report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. - The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. - The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. - The System shall provide emergency evacuation reporting. - The System shall be designed and manufactured by a reputable company who shall be certified under the ISO 9001:2008 (or later) quality procedures. - Where applicable, equipment shall have the following approvals:  FCC Part 15  CE approval BS EN 50130-4 Alarm Systems Electromagnetic Compatibility (Immunity)  CE approval BS EN 55022 Emissions  UL294 Access control  UL1076 Burglar Alarms  ULC-ORD-C1076 Encoders and readers shall also meet:  CE ETS 300 683 Short Range Devices  C-Tick AS/NZS 4251 Generic Emission Standard  C-Tick RFS29 The System software shall be written in a fully structured, fully validated and commercially available language that provides a strictly controlled development environment. - - - The user interface for operational management of site security shall be developed using Microsoft .NET and Windows Presentation Foundation (WPF) development tools. - Comprehensive backup and archiving facilities shall be incorporated as an integral part of the system software. - The System shall include divisioning suitable for multi-tenanted buildings. Operators shall only be able to access those parts of the system which fall within their division and operator privileges. IFCs must support peer to peer communications for input and output communications between IFCs. Systems that require the main server for communications between panels are unacceptable. PRODUCT COMPETENCE - The successful tenderer will be required to demonstrate their competence to supply, install, commission and maintain the product line proposed in the tender submission as follows: - Provide a letter of reference from the product manufacturer confirming the tenderer’s status with the manufacturer, advising:  Exclusive or non-exclusive agreement to provide the system in the geographical territory for this specific project.  The tenderer will be fully supported by the manufacturer in meeting the requirements of this specification. - The tenderer shall provide evidence of competency in carrying out the following areas of work: 6 - -  System design  Installation management  System configuration  System commissioning  COCs  System maintenance When working on the system, each employee of the successful tenderer shall be required to carry an identification card issued by the product manufacturer showing evidence of current manufacturer factory training, indicating the level of training. SCOPE OF WORK - BILL 1 (ACCESS CONTROL) Area / Position Recommended Device / System Access / egress at the 2 x standard turnstiles with baggage and wheelchair gate museum main entrance Access tag readers on both sides of the access turn stiles. Paul Kruger Street side The first turnstile to be fitted with the capacity to be overridden in controlling visiting groups Reception area The ticket reception area at the main entrance must be secured with a smash resistance protecting safety glass with communication openings between the cashier and the visitor A cash register that closes automatically after every transaction and not open should no transaction be registered An automatic ticket/access card dispenser at the main reception. New access system for 31 Current access control system: To be replaced access gates and doors (list below) - REQUIREMENT Area Perimeter Main Entrance Description of Door/Gate EACS Measures to be Installed and/or Maintenance performed Minnaar Street Parking Area Main Gate Install proximity bio card readers (both sides of gate) linked to back-up power. The old sliding steel gate installed at the Replace gate runners. main Museum building visitor pedestrian entrance/exit needs to be repaired; the gate is presently unserviceable. Once repaired, this gate can function as the primary access control barrier for building invasion incidents. Main Entrance Staff & Visitors Main Entrance paying visitors Library & Admin TM Aluminium Glass Door (Stairs) 7 Install proximity bio/card reader on both sides of turnstile. Install proximity bio/card reader on both sides of turnstile. Replace existing access control device with proximity bio card reader (both NFI Aluminium Glass Door (Tea Room) NFI Black Steel Gate at Stairs NFI Wooden Door at new N/W Library Passage S/W Door (Goods Lift) Library Main Door New North Wing Fourth Floor North Wing (Lepidoptera) 4th Floor New North Wing (3 x doors) Display Hall 3rd Floor North 3rd Floor Wing, Fire Door 3rd Floor North Wing, 2nd Fire Door 3rd Floor North Wing New North Wing Grey Steel Gate N/W to D/C and Parking Ground Floor Paul Kruger Street N/W Discovery Centre Entrance Visagie Street N/W Discovery Centre Entrance Visagie Street Parking Area Guest Flat Old East Block Visagie Street Parking Area Main Gate Fossiles 8 sides of door), evaluate re-use of door closer/magnetic lock and link with break-glass unit Door maintenance required; evaluate reuse of door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock, install breakglass unit, door maintenance required Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock on a new steel gate for easy visitor verification of visitors by Library staff Install proximity card bio reader (both sides of door) with door closer/magnetic lock on a new steel gate for easy visitor verification of visitors by Department staff, install remote buzzer at door linked to Department head Office Install proximity bio card readers (both sides of door) with door closers/magnetic locks, install breakglass units Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock, install breakglass unit, configure door to be kept open for a specific time to allow school children to use this door to go to the toilets. Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit Install security door e.g. Trellidoor Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break- Old East Block Geological Museum 1 Old East Block Mezzanine 0 New South Wing Ground Floor New South Wing 1st Floor New South Wing 3rd Floor Other - glass unit, Replace Gate Motor with D10 and install new goosenecks – antitamper Grey Steel Gate Passage E/B Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit Server Room Door 11 East Block Install proximity bio card readers both sides of Door Glass Door to Work Shop E/B Secure door with bolt, install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Minnaar Street Parking E/B Glass Door Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance Geo from Display to Offices E/B Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance Control Room Door 53 East Block Install proximity bio card readers both sides of Door Minnaar Street Parking S/W Wooden Install proximity bio card reader (both Door sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance st Fire Door 1 Floor S Wing Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance (2 x Doors) 3rd Floor Offices S Wing Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance Fire Door 3rd Floor S Wing Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to breakglass unit, door requires maintenance Security Manager’s Office Install proximity bio card reader (both sides of door) with door closer/magnetic lock (if applicable) BILL OF QUOTATION DESCRIPTION BILL NO. QTY PRELIMINARY & GENERAL 9 RATE Rate AMOUNT Amount 1A 1.1 BILL NO. 1B Fixed Amount Total for Bill No. 1B (P & G's) 1 R Sum R R ACCESS CONTROL INSTALLATION 1.2 1.2.1 1.3 1.3.1 1.4 1.4.1 1.4.2 1.4.3 1.4.4 1.4.5 1.4.6 1.4.7 1.5 1.5.1 1.5.2 Wire ways Allow for all additional wire ways required on-floor Gate Motor Replace Gate Motor with D10 and install new goosenecks – antitamper Central Equipment Supply and install Access Control Server Quad Core Xeon 2GHz CPU 8GB RAM min 2 x 250GB 10k SATA HDD DVD+/-RW. keyboard, monitor and accessories as specified, Supply, install and configure Command Centre Server Software including engineering and capture of database and graphics Supply and install Access Control Workstation Quad Core 2.8GHz CPU 4GB RAM 512Mb Dedicated video card Supply, install and configure Command Centre Workstation Software Supply, install and configure additional door licenses Supply and install MACI and Varif License Supply and install MSO 300 Fingerprint Enrolment reader including Varif License Field Equipment Supply and install Controller 6000 Supply and install Dual Cabinet with 8 Amp Power Supply and Battery Back-up 10 1 R 1 R 1 R R 1 R R 1 R R 1 R R 11 R R 2 R R 1 R R 3 R R 3 R R 1.5.4 1.5.5 1.5.6 1.5.7 1.5.8 1.5.9 1.6 1.6.1 - Supply and install Universal Reader Interface Wiegand Supply and install Cabinet with 3.5 Amp Power Supply and Battery Back-up Supply and install Biometric Finger Print Terminal including Multitech card reader and wiring Supply and install breakglass door release Supply and install magnetic lock including wiring Surge arrestors to all copper cabling Testing and Documentation Testing and commissioning of access control system R R 31 R R 62 R R 22 R R 20 62 R R R R 1 R R Total for Bill No. 1B Sum R Total for Bill No. 1A and 1B (Access Control Installation) SUM R BILL 2 (TURNSTILES) DESCRIPTION BILL NO. 2 27 QTY RATE AMOUNT 2 2 R R R R 1 1 R R R R TURNSTILES 2.1 2.2 2.3 2.4 Turnstile - Slimline, 3 - arm waist high C/W control logic, PSU and battery backup. Single / Dual direction. Connected to Access Control. Installation on floor 180 DEG Semi Automated Disabled (PARAPLEGIC) Swing Gates opening C/W door closure and magnetic lock for 90 DEG and solenoid for 180 DEG. PSU and Battery Installation on floor Total for Bill No. 2 (Turnstiles) SUM 11 R - Bill 3 (CASH MANAGEMENT) Point of Sale CCTV / People Counting / Additional overview REQUIREMENT Area POS Position of Camera 1 x CCTV Camera above till and client People Counting 1 x CCTV Camera facing the turnstile 5 x Additional CCTV To be indicated by DMSA in tender cameras (as per DMSA meeting requirement) - BILL OF QUOTATION ITEM DESCRIPTION UNIT 3.1 CCTV HEAD-END EQUIPMENT IP Embedded NVR. 16-Ch; Two-way Audio Input; 3.1.1 ea HDMI/VGA Output; 4 SATA; Alarm I/O 3.1.2 Surveillance Hard Disk Drive: 4 TB 3.5" SATA ea 8 Port Unmanaged Fast Ethernet Desktop Switch 3.1.3 ea with Power over Ethernet. PoE ports POS Text Overlay. 4-Port RS-232 Serial Device ea 3.1.4 Server; Supports PPP/SLIP Electronic Cash Register. 1 Media Slot 5 compartments for notes, 9 compartments for 3.1.5 ea coins, 3 position key switch, Opens via USB or with a key 32'' LED Signage Screen. 1366x768 Mode LED Backlit 720/24P HD TV HDMI USB Input for 3.1.6 ea playback of DIVX, JPEGS and MP3s 3.2 3.2.1 3.2.2 3.2.3 3.3 3.3.1 3.4 3.4.1 3.4.2 CAMERAS POS IP Dome Camera. 1.3-MP; Indoor; Motorized ea VF 2.8~12mm Lens People Counting IP Dome Camera. 1.3-MP; ea Indoor; Motorized VF 2.8~12mm Lens 2-MP WDR IR Mini-Bullet Network Camera. 1/3” ea Prog. scan CMOS, Full HD 1080p CABLING Solid Core, UV Protected SF/UTP CAT5e Cable, m Foil, Braiding P's & G's Installation Labour p/d Sundries: All connectors, trunking, wall plugs, etc. ea Total for Bill no 3 CCTV: SUM 12 Description of Camera Text Overlay Camera with built-in analytics (linecrossing) for people counting To be indicated by DMSA in tender meeting QTY AMOUNT TOTAL 1 R R 1 R R 2 R R 1 R R 1 R R 1 R R 1 R R 1 R R 5 R R R R R R R R R - Bill 4 (GLASS CUBICLE) Area / Position Glass Specifications Main Entrance - Reception HI rated 3, clear laminated glass, made from two layers of clear float glass, permanently bonded together by pressure and heat with one or more Polyvinyl Butyral (PVB) plastic interlayers. The result is an SABS approved safety glass that can withstand many blows from a would-be intruder. High Impact (HI) for security in high risk applications – Total thickness is 7.52mm with 1.52 mm PVB Build and install a smash resistance Cubicle and door for the Cashier Total Bill No 4 - 5.2.1 5.2.2 - R Quarterly Full Maintenance Ad Hoc Service Calls Hourly rate for less than 6 hours per day Daily rate for over 6 hours Total for Bill No. 5 (Maintenance) SUM Bill 6 (OFF-SITE MONITORING) Off-Site Event Monitoring (Months) Bill No 6 QTY RATE AMOUNT 24 R R 1 1 R R R 24 R SUM R R Bill 7 (CONTINGENCY) Project Contingencies Bill No 7 R MAINTENANCE 5.1 5.2 - R SUM Bill 5 (MAINTENANCE PLAN) DESCRIPTION BILL NO. 5 1 sum R SUM R R ACCESS CONTROL - Detailed inspection and check on all power supplies - As above on all access control readers, magnetic locks, door-closures and glass break units - The CPUs will get a complete functional test. This included cables, buttons, etc. 13 CCTV UPS - o Software backups o Reports backup o Graphic user interval functional test o Full system check The complete Servicing of turnstiles Services and greasing of gates, loops, etc All doors, gates to be checked and serviced. Check all cables and replace if necessary Check all UPS’s, batteries – with or without loads Cleaning, servicing and refocus of all CCTV equipment. Check and test all recording equipment Check all monitors, impedance testing on all cabling Will make all the relevant backups on the software Check all connections and end of line terminations Check all mountings, brackets and housings. Check en test all moving and unmoving parts Check and test all battery voltages with and without load Check and test all additional specs as per manufacturers and client’s requirement Ensure that cabling is up to standard. Check that no corrosion has taken place Check and test software Providing a full maintenance report. List your response time. On completion of each inspection and maintenance service, the contractor shall present, for the customer’s signature, an acceptance certificate Give the customer notice prior to the site visit. This will be accompanied by a job card clearly stating the scope of work or checks to be carried out. At arrival on site, the technician will report firstly to the appointed person responsible for overseeing the project or contract. Bill 1: Delivery / Installation Access Control Brand and Model Bill 2: Delivery / Installation Turnstiles Delivery Period R Firm: Yes/No Brand and Model R R R R R Bill 3: Delivery / Installation CCTV Bill 4: Glass Cubicle Bill 5: Maintenance Bill 6: Off-Site Monitoring (24 Months) Bill 7: Contingency Price Firm: Yes/No Comply with Specification? Yes/No If GRAND TOTAL VAT INCL R not, Specify Deviations R 14 DITSONG: NATIONAL MUSEUM OF NATURAL HISTORY 1. SECURITY BASELINE DOCUMENT Introduction: The purpose of this document is to serve as a detailed security baseline design for the security installations at the DMSA Museum of Natural History premises. This document will provide details pertaining to the following project specific security requirements: 1.1 Electronic Access Control System 1.2 CCTV System 1.3 Turnstiles 1.4 People Counting 1.5 Cash Management Note: This Security Baseline Document contains high level security control statements which contextualize the DMSA Security Standards. The baseline design will be used as input in the overall project, and in turn, shall be augmented by detailed security equipment design and technical specifications and drawings as provided by the preferred project security service provider. When formulating a site-specific security baseline design, the Project Security Representative will use the applicable combinations of the security measure selections listed below. 1.1 ELECTRONIC ACCESS CONTROL          The existing electronic access control system (EACS) needs to be replaced with a new system. This system at a minimum should provide a clear segregation of public and “restricted access” areas. The system must prevent visitors or members of the public from easily gaining access to “restricted areas”. “Restricted” and “high-risk” areas must be electronically access controlled. There must be an electronic audit trail available of all access to “restricted” and “high-risk” areas. The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependant on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. The System must report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. The system must be linked to a power back-up source. Maintenance Plan (24 x months) for the System. 15      Training for DITSONG staff members operating and managing the System. Guarantee and Warranty ( 3 x years) on the System. All EACS events/transactions must be backed-up for a minimum period of 3 x months. All system communications must be totally integrated with either existing or new LAN/WAN networks. The existing KA 2096 EACS must be replaced with a new system with bi-directional bio card access control and additional maintenance work as per the door schedule below: Area Description of EACS Measures to be Installed and/or Door/Gate Maintenance performed Perimeter Minnaar Street Parking Install proximity bio card readers (both sides of Area Main Gate gate) linked to back-up power. The old sliding steel Replace gate runners. gate installed at the main Museum building visitor pedestrian entrance/exit needs to be repaired; the gate is presently unserviceable. Once repaired, this gate can function as the primary access control barrier for building invasion incidents. Main Entrance Library & Admin Main Entrance Staff & Visitors Main Entrance paying visitors TM Aluminium Glass Door (Stairs) NFI Aluminium Glass Door (Tea Room) NFI Black Steel Gate at Stairs NFI Wooden Door at new N/W Library Passage S/W Door (Goods Lift) Library Main Door New North Wing 4th Floor Fourth Floor North Wing (Lepidoptera) Install proximity bio/card reader on both sides of turnstile. Install proximity bio/card reader on both sides of turnstile. Replace existing access control device with proximity bio card reader (both sides of door), evaluate re-use of door closer/magnetic lock and link with break-glass unit Door maintenance required; evaluate re-use of door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock, install break-glass unit, door maintenance required Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock on a new steel gate for easy visitor verification of visitors by Library staff Install proximity card bio reader (both sides of door) with door closer/magnetic lock on a new steel gate for easy visitor verification of visitors by Department staff, install remote buzzer at 16 New North Wing 3 Floor rd New North Wing Ground Floor Old East Block Fossiles (3 x doors) Display Hall 3rd Floor North Wing, Fire Door 3rd Floor North Wing, 2nd Fire Door 3rd Floor North Wing Grey Steel Gate N/W to D/C and Parking Paul Kruger Street N/W Discovery Centre Entrance Visagie Street N/W Discovery Centre Entrance Visagie Street Parking Area Guest Flat Visagie Street Parking Area Main Gate Grey Steel Gate Passage E/B Server Room Door 11 East Block Glass Door to Work Shop E/B Minnaar Street Parking E/B Glass Door Old East Block Geological Museum 1 Geo from Display to Offices E/B Old East Block Mezzanine 0 New South Wing Ground Floor Control Room Door 53 East Block Minnaar Street Parking S/W Wooden Door New South Wing 1st Floor Fire Door 1st Floor S Wing New South Wing 3rd Floor (2 x Doors) 3rd Floor Offices S Wing Fire Door 3rd Floor S Wing door linked to Department head Office Install proximity bio card readers (both sides of door) with door closers/magnetic locks, install break-glass units Install proximity bio card reader (both sides of door) with door closer/magnetic lock Install proximity bio card reader (both sides of door) with door closer/magnetic lock, install break-glass unit, configure door to be kept open for a specific time to allow school children to use this door to go to the toilets. Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Install security door e.g. Trellidoor Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, Replace Gate Motor with D10 and install new goosenecks – anti-tamper Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Install proximity bio card readers both sides of Door Secure door with bolt, install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, door requires maintenance Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, door requires maintenance Install proximity bio card readers both sides of Door Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, door requires maintenance Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, door requires maintenance Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to break-glass unit, door requires maintenance Install proximity bio card reader (both sides of door) with door closer/magnetic lock, link to 17 Other Security Manager’s Office break-glass unit, door requires maintenance Install proximity bio card reader (both sides of door) with door closer/magnetic lock (if applicable) The EACS at a minimum must cater for the following:   Visitor Management Open-ended platform for future integration with the IDS, CCTV, Guard Tour, Virtual Perimeter and Cash Management Systems.  Clear segregation of public, staff (restricted access) and high-risk areas.  Photo Identification on Access Credential.  Management of alarms/events.  Emergency evacuation reporting.  Management Information System (MIS) with a minimum requirement of staff time and attendance reports  Master control workstation to be located in the onsite Security Control Room linked with remote access terminal in the Security Manager’s Office.  System to cater for approx. 150 users at this site. Upon system configuration at the end of the project, the EACS must make provision for the following access rights related functionalities:  The Issue of Access Credentials for Permanent Staff  The Issue of Access Credentials for Temporary Staff  The Issue of Access Credentials for Visitors, Contractors, Suppliers and the role of the Museum Host  The Issue of Access Credentials for Tenants and/or other entities sharing the premises  The Revocation of Access Credentials  The Review of Access Credentials 1.2 CCTV System CCTV cameras must be installed at the following locations: Area POS People Counting 5 x Additional CCTV cameras (as per DMSA requirement)    Position of Camera 1 x CCTV Camera above till and client 1 x CCTV Camera facing the turnstiles To be indicated by DMSA in tender meeting Description of Camera Text Overlay Camera with built-in analytics (line-crossing) for people counting To be indicated by DMSA in tender meeting All CCTV cameras must have a recording capacity of a minimum of 35 x days. Head-end equipment must have functionality to record and transfer recorded data to a USB or similar device. All CCTV control equipment must be installed in the site Security Control Room. 18  The system must be linked to a power back-up source.  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty ( 3 x years) on the System. 1.3 TURNSTILES  2 x Waist-height Turnstiles, performing a people-counting function, must be installed at Main Reception. Area EACS Measures to be Installed Access / egress at the museum main entrance 2 x standard turnstiles with baggage and Paul Kruger Street side wheelchair gate Access tag readers on both sides of the access turn stiles (See detailed door schedule above) The first turnstile to be fitted with the capacity to be overridden in controlling visiting groups  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty ( 3 x years) on the System. 1.4 PEOPLE COUNTING People counting will be performed through the turnstiles and 1 x CCTV camera installed facing the turnstiles. 1.5 CASH MANAGEMENT        Smash resistant glass, affording adequate protection for Reception staff against a concentrated forced attack for approx. 30 to 60 seconds must be installed on the Reception counter. Staff entrance to the protected cubicle should be via an access controlled security door, installed in a similar manner to afford adequate protection against forced entry from the outside. The configuration must be of such a nature and design to not interfere with business operations and without extensive changes to the façade of the building or ruining the “look and feel” of the Museum. A cash register that closes automatically (1 x till ONLY) after every transaction and not open should no transaction be registered, must be installed at the Reception Desk. An automatic ticket/access card dispenser must be installed at the Main Reception Desk. The POS plugs into the serial printer, capturing the data. The Point-of-sale (POS) function must be integrated with POS text overlay on the CCTV system. DITSONG: NATIONAL MUSEUM OF CULTURAL HISTORY REQUIREMENT, SPECIFICATION AND MINIMUM STANDARD. Install an Access Control system at Ditsong: National Museum of Cultural History 19 The following specifications for the installation of the Access Control System are applicable and required by Ditsong: - Maintenance plan for all accessories (24 months). Training of members working on the system. Optimal performance. Guarantee and warranty on the main equipment. System must be upgradable. UPS and Battery backup. Anti-tampering. Technical backup. Specialised security. Immediate response. Manufacture both local and import. DD1112 (Information and security restrictions) completed by supplier. Access must be fully remote control ready. AP 66 for all outdoor items. Data storage for 3 months. MIS (Management Information System) – Reporting, time & attendance, security incident reporting, investigations etc. The Access Control System must be able to upgrade as follow: - Incorporating a full control dashboard, enabling a full integrated control system - This specification covers:  Access Control  Intruder Alarm System  Alarms Management  Photo ID Badging  Visitor Management  Guard Tour  Perimeter security 20  CCTV Integration  Cash Management - The system is to be supplied with all equipment, hardware, software, cabling and ancillary services as required to provide an integrated system complete and functional in all respects. The tenderers are to familiarize themselves with all matters related to such requirements and to account for such in the tendered price. - Other security system components not included in this specification shall be fully integrated with this integrated security system. - It is the responsibility of the tenderer to obtain clarification of all matters in which doubt exists as to the exact intent of this document or in which a conflict appears to have arisen. Such information must be obtained prior to the closing and lodging of tenders. - The response shall clearly detail all pricing for components, cabling, installation, engineering, training, commissioning, setting to work, and 36 months comprehensive warranty. - The tenderer must include as part of the tender submission a complete, clause-by-clause response. All equipment must have at least a 3 year warrantee. FUNCTIONAL OVERVIEW - The Security Management System (The System) shall allow multi-site configuration able to be managed by one or more of the connected sites. - It shall include (but not be limited to) the following: -  Access control  Alarms management  Cardholder management  CCTV integration  Integrated Visitor Management  Guard Tour  Perimeter deterrent and detection integration The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependent on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. 21 - The System shall provide access control in elevators enabling access to any combination of floors over specified time periods. The interface to the elevator manufacturer’s equipment shall be by either low level interface (relay outputs) or by a high level (data) interface. - The System shall monitor the condition of inputs. The System shall be able to be programmed to apply a variety of conditions to the way in which these inputs are monitored and shall enunciate the condition of such inputs in accordance with such programming. - The System shall provide a fully functional intruder alarm system including entry and exit delays where intruder detection sensors are connected to system inputs. The Intruder Alarm Systems component shall be fully integrated with the Access Control aspects of the system. It shall be possible to set (secure) or unset (unsecure) areas from any access control reader associated with an area, access control reader with keypad, Alarms Management Terminal, or as required from defined central control locations. - The System shall provide an integrated software facility for the design and production of photo ID cards. - The System shall be OPC AE (Alarms and Events) and OPC DA (Data Access) compliant, enabling integration of event, status and override data with external OPC compliant automation and business systems. - The System shall allow data exchange with other applications using XML protocols for schedule changes and card record changes. - The System shall support the BACnet communications protocol. - The System shall support a Web Service to allow an external system create remove and modify cardholders, including assigning access rights. - The System shall support a Web Service to allow an external system to create and modify visits and visitors. - The System shall support APIs to allow external systems to receive events from The System, and pass events to The System. - The System shall support the Simple Network Management Protocol (SNMP) protocol. - All system communications must be totally integrated with either existing or new LAN/WAN networks. Tenderers must make themselves familiar with the specific requirements for this project. - Connection to Intelligent Field Controllers (IFCs) shall be achieved using cabling supporting the TCP/IP protocol. The network connection must be on-board the IFC. Interface transceiver units (Ethernet to RS485, RS232 etc) are not acceptable. - The System and Intelligent Field Controllers shall have IPv6 address support. - Remote IFCs not permanently connected to the network can be connected via a PSTN service, using TCP/IP protocols.  Connection from the remote IFC to the server shall be either via dialup to an Internet Service Provider (ISP) using encrypted TCP/IP, and then via an approved firewall through into the IT environment or via dialup directly to a RAS connection 22 on the Server. - All system software upgrades shall be downloadable through the network to the IFC, readers and I/O devices. - All data communication between The System and IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication The System and IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication between IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 128-bit AES or stronger. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to elliptic curve ECC P-256 or stronger. Session keys shall be renegotiated on a regular basis at intervals no longer than 30 hours. - The System shall report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. - The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. - The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. - The System shall provide emergency evacuation reporting. - The System shall be designed and manufactured by a reputable company who shall be certified under the ISO 9001:2008 (or later) quality procedures. - Where applicable, equipment shall have the following approvals:  FCC Part 15  CE approval BS EN 50130-4 Alarm Systems Electromagnetic Compatibility (Immunity)  CE approval BS EN 55022 Emissions 23 -  UL294 Access control  UL1076 Burglar Alarms  ULC-ORD-C1076 Encoders and readers shall also meet:  CE ETS 300 683 Short Range Devices  C-Tick AS/NZS 4251 Generic Emission Standard  C-Tick RFS29 - The System software shall be written in a fully structured, fully validated and commercially available language that provides a strictly controlled development environment. - The user interface for operational management of site security shall be developed using Microsoft .NET and Windows Presentation Foundation (WPF) development tools. - Comprehensive backup and archiving facilities shall be incorporated as an integral part of the system software. - The System shall include divisioning suitable for multi-tenanted buildings. Operators shall only be able to access those parts of the system which fall within their division and operator privileges. - IFCs must support peer to peer communications for input and output communications between IFCs. Systems that require the main server for communications between panels are unacceptable. PRODUCT COMPETENCE - The successful tenderer will be required to demonstrate their competence to supply, install, commission and maintain the product line proposed in the tender submission as follows: - Provide a letter of reference from the product manufacturer confirming the tenderer’s status with the manufacturer, advising: -  Exclusive or non-exclusive agreement to provide the system in the geographical territory for this specific project.  The tenderer will be fully supported by the manufacturer in meeting the requirements of this specification. The tenderer shall provide evidence of competency in carrying out the following areas of work:  System design  Installation management  System configuration  System commissioning 24 -  COCs  System maintenance When working on the system, each employee of the successful tenderer shall be required to carry an identification card issued by the product manufacturer showing evidence of current manufacturer factory training, indicating the level of training. SCOPE OF WORK - BILL 1 (ACCESS CONTROL) AREA SECURITY ROOM DESCRIPTION DOOR/GATE OF EACS MEASURES TO BE INSTALLED CONTROL MAIN PEDESTRIAN ACCESS DOOR REPAIR/REPLACE THE UNSERVICEABLE BIOMETRICS READER INSTALLED ON THE SECURITY CONTROL ROOM ACCESS DOOR. LIBRARY 2 X MAIN PEDESTRIAN ACCESS DOORS INSTALLING ELECTRONIC ACCESS CONTROL ON ALL LIBRARY WALKIN VAULT PERIMETER DOORS. THE ELECTRONIC MEASURES SHOULD BE INSTALLED ON THE INTERNAL GRILL GATES AND NOT THE ACTUAL VAULT DOORS. THE MEASURES IN TURN SHOULD BE LINKED TO AN AUDIBLE BUZZER AT THE LIBRARY STAFF MEMBER’S DESK. STORE ROOMS 2 X ROLLER GATES PERIMETER SHUTTER INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE 2 X PERIMETER ROLLER SHUTTER GATES LEADING TO AND FROM THE MAIN MUSEUM BUILDING STORAGE ROOMS (OUTSIDE GROUND LEVEL). 10 X MAIN PEDESTRIAN ACCESS DOORS INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON ALL STORAGE ROOM DOORS (5 X LEVELS) LEADING FROM THE CONNECTING MAIN MUSEUM BUILDING STORAGE AREAS LIFT 25 AND STAIRCASE LOBBIES. UTILITIES UPS ROOM INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE DOOR (BOTH SIDES) TRANSFORMER ROOM/SUBSTATION INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE DOOR (BOTH SIDES) SWITCH GEAR ROOM INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE DOOR (BOTH SIDES) LOW VOLTAGE ROOM INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE DOOR (BOTH SIDES) CORNER SAFE ROOM INSTALLING ELECTRONIC ACCESS CONTROL MEASURES ON THE DOOR (BOTH SIDES) OTHER ACTIVATING ALL INSTALLED BUT NOT CONNECTED READERS ON THE SYSTEM (UNKNOWN NUMBER). UPGRADING SYSTEM SOFTWARE OR CONTROL PC’S WHERE APPLICABLE. CONDUCT A PROPER PREVENTATIVE MAINTENANCE SERVICE OF THE SYSTEM AND APPOINT A DEDICATED SERVICE PROVIDER TO MAINTAIN THE SYSTEM ON A REGULAR BASIS. - QUOTATION DESCRIPTION BILL NO. 1 A 1.1 RATE QTY PRELIMINARY & GENERAL Fixed Amount 1 26 AMOUNT Rate Amount R R Total for Bill No. 1 A (P & G's) BILL NO. 1B ACCESS CONTROL INSTALLATION 1.2 Wireways 1.2.1 Allow for all additional wireways required 1.2.2 on-floor 1.3 1 R Central Equipment Upgrade head-end equipment to 1.3.1 accommodate additional doors 1 R R Supply, install and configure additional 1.3.2 door licenses 21 R R 2 R R 1 R R 3 R R 3 R R 62 R R 31 R R 29 62 R R R R 1 R R 1.3.3 Supply and install MACI and Varif License Supply and install MSO 300 Fingerprint 1.3.4 Enrolment reader including Varif License 1.4 Field Equipment 1.4.1 Supply and install Controller 6000 Supply and install Dual Cabinet with 8 1.4.2 Amp Power Supply and Battery Back-up Supply and install Biometric Finger Print Terminal including Multitech card reader 1.4.3 and wiring 1.4.4 Supply and install breakglass door release Supply and install magnetic lock including 1.4.5 wiring 1.4.6 Surge arrestors to all copper cabling 1.5 Testing and Documentation Testing and commissioning of access 1.5.1 control system Total for Bill No. 1 A+B (Access Control Installation) - R SUM R SUM BILL 2 (TURNSTILES) DESCRIPTION QTY 27 RATE AMOUNT BILL NO. 2 TURNSTILES 2.1 2.2 2.3 2.4 Turnstile - Slimline, 3 - arm waist high C/W control logic, PSU and battery backup. Single / Dual direction. Connected to Access Control. Installation on floor 180 DEG Semi Automated Disabled (PARAPLEGIC) Swing Gates opening C/W door closure and magnetic lock for 90 DEG and solenoid for 180 DEG. PSU and Battery Installation on floor Total for Bill No. 2 (Turnstiles) 4 4 R R R R 1 1 R R R R R SUM - Bill 3 CCTV – No upgrade - Bill 4 (CASH MANAGEMENT) Point of Sale CCTV / People Counting / Additional overview ITEM 4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 4.1.6 4.2 4.2.1 DESCRIPTION UNIT QTY AMOUNT TOTAL CCTV HEAD-END EQUIPMENT IP Embedded NVR. 16-Ch; Two-way Audio Input; HDMI/VGA Output; 4 SATA; Alarm I/O Surveillance Hard Disk Drive: 4 TB 3.5" SATA 8 Port Unmanaged Fast Ethernet Desktop Switch with Power over Ethernet. PoE ports POS Text Overlay. 4-Port RS-232 Serial Device Server; Supports PPP/SLIP Electronic Cash Register. 1 Media Slot 5 compartments for notes, 9 compartments for coins, 3 position key switch, Opens via USB or with a key 32'' LED Signage Screen. 1366x768 Mode LED Backlit 720/24P HD TV HDMI USB Input for playback of DIVX, JPEGS and MP3s CAMERAS POS IP Dome Camera. 1.3-MP; Indoor; Motorized VF 2.8~12mm Lens 28 ea 1 R R ea 1 R R ea 1 R R ea 1 R R ea 1 R R ea 1 R R ea 1 R R 4.2.1 4.3 4.3.1 4.4 4.4.1 4.4.2 - People Counting IP Dome Camera. 1.3-MP; Indoor; Motorized VF 2.8~12mm Lens CABLING Solid Core, UV Protected SF/UTP CAT5e Cable, Foil, Braiding ea R R m R R p/d R R ea R R SUM R P's & G's Installation Labour Sundries: All connectors, trunking, wall plugs, etc. Total for Bill no 4 CCTV: Bill 5 (GLASS CUBICLE) Area / Position Main Entrance Reception Glass Specifications HI rated 3, clear laminated glass, made from two layers of clear float glass, permanently bonded together by pressure and heat with one or more Polyvinyl Butyral (PVB) plastic interlayers. The result is an SABS approved safety glass that can withstand many blows from a would-be intruder. High Impact (HI) for security in high risk applications – Total thickness is 7.52mm with 1.52 mm PVB Build and install a smash resistance Cubicle and door for the Cashier Total Bill No 5 - 1 R R SUM R Bill 6 (MAINTENANCE PLAN) DESCRIPTION BILL NO. 6 RATE QTY AMOUNT MAINTENANCE 6.1 6.2 6.2.1 6.2.2 Quarterly Full Maintenance Ad Hoc Service Calls Hourly rate for less than 6 hours per day Daily rate for over 6 hours Total for Bill No. 6 (Maintenance) - 2 24 R 1 1 R R R R SUM Bill 7 (OFF-SITE MONITORING) 24 Off-Site Event Monitoring 29 R R Bill No 7 - SUM R Bill 8 CONTINGENCY sum Project Contingencies Bill No 8 R SUM R R MAINTENANCE: ACCESS CONTROL - Detailed inspection and check on all power supplies - As above on all access control readers, magnetic locks, door-closures and glass break units - The CPUs will get a complete functional test. This included cables, buttons, etc. o Software backups o Reports backup o Graphic user interval functional test o Full system check - The complete Servicing of turnstiles - Services and greasing of gates, loops, etc - All doors, gates to be checked and serviced. - Check all cables and replace if necessary - Check all UPS’s, batteries – with or without loads CCTV - Cleaning, servicing and refocus of all CCTV equipment. Check and test all recording equipment Check all monitors, impedance testing on all cabling Will make all the relevant backups on the software Check all connections and end of line terminations Check all mountings, brackets and housings. UPS - Check and test all moving and unmoving parts Check and test all battery voltages with and without load Check and test all additional specs as per manufacturers and client’s requirement Ensure that cabling is up to standard. Check that no corrosion has taken place Check and test software Providing a full maintenance report. On completion of each inspection and maintenance service, the contractor shall present, for the customer’s 30 signature, an acceptance certificate Give the customer notice prior to the site visit. This will be accompanied by a job card clearly stating the scope of work or checks to be carried out. At arrival on site, the technician will report firstly to the appointed person responsible for overseeing the project or contract. Bill 1: Delivery / Installation Access Control Brand and Model R Bill 2: Delivery / Installation Turnstiles Brand and Model R Bill 3: Delivery / Installation CCTV Bill 4: CCTV (Cash Management) Bill 5: Glass Cubicle Bill 6: Maintenance (24 Months) Bill 7: Off-Site Monitoring (24 Months) Bill 8: Contingency Comply with Specification? Yes/No Price Firm: Yes/No GRAND TOTAL VAT INCL No upgrade Brand and Model R R R R R R DITSONG: NATIONAL MUSEUM OF CULTURAL HISTORY 1. SECURITY BASELINE DOCUMENT Introduction: The purpose of this document is to serve as a detailed security baseline design for the security installations at the DMSA Museum of Cultural History premises. This document will provide details pertaining to the following project specific security requirements: 1.1 Electronic Access Control System 1.2 CCTV System 1.3 Turnstiles 1.4 People Counting 1.5 Cash Management Note: This Security Baseline Document contains high level security control statements which contextualize the DMSA Security Standards. The baseline design will be used as input in the overall project, and in turn, shall be augmented by detailed security equipment design and technical specifications and drawings as provided by the preferred project security service provider. When formulating a site-specific security baseline design, the Project Security Representative will use the applicable combinations of the security measure selections listed below. 1.1 ELECTRONIC ACCESS CONTROL 31                Area The Museum has an AC 2500 electronic access control system installed. The system is a combination of a proximity card reader capability linked with a biometrics reader. Either/or can be utilized. The Museum presently has approx. 35 x staff members enrolled on the system. A large number of readers have been installed although some of the readers are not activated. The system provides segregation of public and “restricted access” areas. The AC 2500 (Virdi) system must be retained. The system must be expanded to include all high-value asset store rooms. There must be an electronic audit trail available of all access to “restricted” and “high-risk” areas. The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependant on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. The System must report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. The system must be linked to a power back-up source. Maintenance Plan (24 x months) for the System. Training for DITSONG staff members operating and managing the System. Guarantee and Warranty (3 x years) on the System. All EACS events/transactions must be backed-up for a minimum period of 3 x months. All system communications must be totally integrated with either existing or new LAN/WAN networks. Bi-directional electronic access control and additional maintenance work must be installed/performed as per the door schedule below: Description of EACS Measures to be Installed Door/Gate Security Control Room Main pedestrian access door Repair/replace the unserviceable biometrics reader installed on the security control room access door. Library 2 x Main pedestrian access doors Installing electronic access control on all Library walk-in vault perimeter doors. The electronic measures should be installed on the internal grill gates and NOT the actual vault doors. The measures in turn should be 32 linked to an audible buzzer at the Library staff member’s desk. Store Rooms Utilities Other 2 x Perimeter roller shutter gates Installing electronic access control measures on the 2 x perimeter roller shutter gates leading to and from the main Museum building storage rooms (outside ground level). 10 x Main pedestrian access doors Installing electronic access control measures on all storage room doors (5 x levels) leading from the connecting main Museum building storage areas lift and staircase lobbies. UPS Room Installing electronic access control measures on the door (both sides) Transformer Room/Substation Installing electronic access control measures on the door (both sides) Switch Gear Room Installing electronic access control measures on the door (both sides) Low Voltage Room Installing electronic access control measures on the door (both sides) Corner Safe Room Installing electronic access control measures on the door (both sides) Activating all installed but not connected readers on the system (unknown number). Upgrading system software or control PC’s where applicable. Conduct a proper preventative maintenance service of the system and appoint a dedicated service provider to maintain the 33 system on a regular basis. The EACS at a minimum must cater for the following:   Visitor Management Open-ended platform for future integration with the IDS, CCTV, Guard Tour, Virtual Perimeter and Cash Management Systems.  Clear segregation of public, staff (restricted access) and high-risk areas.  Photo Identification on Access Credential.  Management of alarms/events.  Emergency evacuation reporting.  Management Information System (MIS) with a minimum requirement of staff time and attendance reports  Master control workstation to be located in the onsite Security Control Room linked with remote access terminal in the Security Manager’s Office.  System to cater for approx. 100 users at this site. Upon system configuration at the end of the project, the EACS must make provision for the following access rights related functionalities:  The Issue of Access Credentials for Permanent Staff  The Issue of Access Credentials for Temporary Staff  The Issue of Access Credentials for Visitors, Contractors, Suppliers and the role of the Museum Host  The Issue of Access Credentials for Tenants and/or other entities sharing the premises  The Revocation of Access Credentials  The Review of Access Credentials 1.2 CCTV SYSTEM CCTV cameras must be installed at the following locations: Area Position of Camera Description of Camera POS 1 x CCTV Camera above till and client Text Overlay People Counting 2 x CCTV Camera facing the turnstiles Camera with built-in analytics (line-crossing) for people counting   All CCTV cameras must have a recording capacity of a minimum of 35 x days. Head-end equipment must have functionality to record and transfer recorded data to a USB or similar device. 34  All CCTV control equipment must be installed in the site Server Room.  The system must be linked to a power back-up source.  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty (3 x years) on the System. 1.3 TURNSTILES 4 x Waist-height Turnstiles, performing a people-counting function, must be installed at Main Reception. Area EACS Measures to be Installed Access / egress at the museum main entrance Visagie Street side 4 x standard turnstiles with baggage and wheelchair gate Access tag readers on both sides of the access turn stiles. The first turnstile to be fitted with the capacity to be overridden in controlling visiting groups  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty (3 x years) on the System. 1.4 CASH MANAGEMENT  Smash resistant glass, affording adequate protection for Reception staff against a concentrated forced attack for approx. 30 to 60 seconds must be installed on the Reception counter (1 x Counter, NOT both).  Staff entrance to the protected cubicle should be via an access controlled security door, installed in a similar manner to afford adequate protection against forced entry from the outside.  The configuration must be of such a nature and design to not interfere with business operations and without extensive changes to the façade of the building or ruining the “look and feel” of the Museum.  A cash register that closes automatically after every transaction and not open should no transaction be registered, must be installed at the Reception Desk.  An automatic ticket/access card dispenser must be installed at the Main Reception Desk.  The Point-of-sale (POS) function must be integrated with POS text overlay on the CCTV system. 1.5 PEOPLE COUNTING People counting will be performed through the turnstiles and 2 x CCTV cameras installed facing the turnstiles. Ditsong: National Museum of Military History 35 REQUIREMENT, SPECIFICATION AND MINIMUM STANDARD. Install a Access Control system at Ditsong: National Museum of Military History The following specifications for the installation of the Access Control System are applicable and required by Ditsong: - Maintenance plan for all accessories (24 months). - Training of members working on the system. - Optimal performance. - Guarantee and warranty on the main equipment. - System must be upgradable. - UPS and Battery backup. - Anti-tampering. - Technical backup. - Specialised security. - Immediate response. - Manufacture both local and import. - DD1112 (Information and security restrictions) completed by supplier. - Access must be fully remote control ready. - AP 66 for all outdoor items. - Data storage for 3 months. - MIS (Management Information System) – Reporting, time & attendance, security incident reporting, investigations etc. The Access Control System must be able to upgrade as follow: - Incorporating a full control dashboard, enabling a full integrated control system - This specification covers:  Access Control  Intruder Alarm System  Alarms Management  Photo ID Badging  Visitor Management 36  Guard Tour  Perimeter security  CCTV Integration  Cash Management - The system is to be supplied with all equipment, hardware, software, cabling and ancillary services as required to provide an integrated system complete and functional in all respects. The tenderers are to familiarize themselves with all matters related to such requirements and to account for such in the tendered price. - Other security system components not included in this specification shall be fully integrated with this integrated security system. - It is the responsibility of the tenderer to obtain clarification of all matters in which doubt exists as to the exact intent of this document or in which a conflict appears to have arisen. Such information must be obtained prior to the closing and lodging of tenders. - The response shall clearly detail all pricing for components, cabling, installation, engineering, training, commissioning, setting to work, and 36 months comprehensive warranty. - The tenderer must include as part of the tender submission a complete, clause-by-clause response. All equipment must have at least a 3 year warrantee. FUNCTIONAL OVERVIEW - The Security Management System (The System) shall allow multi-site configuration able to be managed by one or more of the connected sites. - It shall include (but not be limited to) the following: -  Access control  Alarms management  Cardholder management  CCTV integration  Integrated Visitor Management  Guard Tour  Perimeter deterrent and detection integration The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, 37 access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependant on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. - The System shall provide access control in elevators enabling access to any combination of floors over specified time periods. The interface to the elevator manufacturer’s equipment shall be by either low level interface (relay outputs) or by a high level (data) interface. - The System shall monitor the condition of inputs. The System shall be able to be programmed to apply a variety of conditions to the way in which these inputs are monitored and shall enunciate the condition of such inputs in accordance with such programming. - The System shall provide a fully functional intruder alarm system including entry and exit delays where intruder detection sensors are connected to system inputs. The Intruder Alarm Systems component shall be fully integrated with the Access Control aspects of the system. It shall be possible to set (secure) or unset (unsecure) areas from any access control reader associated with an area, access control reader with keypad, Alarms Management Terminal, or as required from defined central control locations. - The System shall provide an integrated software facility for the design and production of photo ID cards. - The System shall be OPC AE (Alarms and Events) and OPC DA (Data Access) compliant, enabling integration of event, status and override data with external OPC compliant automation and business systems. - The System shall allow data exchange with other applications using XML protocols for schedule changes and card record changes. - The System shall support the BACnet communications protocol. - The System shall support a Web Service to allow an external system create remove and modify cardholders, including assigning access rights. - The System shall support a Web Service to allow an external system to create and modify visits and visitors. - The System shall support APIs to allow external systems to receive events from The System, and pass events to The System. - The System shall support the Simple Network Management Protocol (SNMP) protocol. - All system communications must be totally integrated with either existing or new LAN/WAN networks. Tenderers must make themselves familiar with the specific requirements for this project. - Connection to Intelligent Field Controllers (IFCs) shall be achieved using cabling supporting the TCP/IP protocol. The network connection must be on-board the IFC. Interface transceiver units (Ethernet to RS485, RS232 etc) are not acceptable. - The System and Intelligent Field Controllers shall have IPv6 address support. - Remote IFCs not permanently connected to the network can be connected via a PSTN service, using 38 TCP/IP protocols.  Connection from the remote IFC to the server shall be either via dialup to an Internet Service Provider (ISP) using encrypted TCP/IP, and then via an approved firewall through into the IT environment or via dialup directly to a RAS connection on the Server. - All system software upgrades shall be downloadable through the network to the IFC, readers and I/O devices. - All data communication between The System and IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication The System and IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 256-bit AES or stronger. - All data communication between IFCs shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to 1024-bit RSA or stronger. Session keys shall be re-negotiated on a regular basis at intervals no longer than 30 hours. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall be encrypted using an industry standard symmetric encryption algorithm equivalent to 128-bit AES or stronger. - All data communication between IFCs and Edge Devices such as readers and I/O devices shall use an industry standard asymmetric encryption algorithm for mutual authentication and session key negotiation. This algorithm shall be equivalent to elliptic curve ECC P-256 or stronger. Session keys shall be renegotiated on a regular basis at intervals no longer than 30 hours. - The System shall report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. - The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. - The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. - The System shall provide emergency evacuation reporting. - The System shall be designed and manufactured by a reputable company who shall be certified under the ISO 9001:2008 (or later) quality procedures. - Where applicable, equipment shall have the following approvals: 39 -  FCC Part 15  CE approval BS EN 50130-4 Alarm Systems Electromagnetic Compatibility (Immunity)  CE approval BS EN 55022 Emissions  UL294 Access control  UL1076 Burglar Alarms  ULC-ORD-C1076 Encoders and readers shall also meet:  CE ETS 300 683 Short Range Devices  C-Tick AS/NZS 4251 Generic Emission Standard  C-Tick RFS29 - The System software shall be written in a fully structured, fully validated and commercially available language that provides a strictly controlled development environment. - The user interface for operational management of site security shall be developed using Microsoft .NET and Windows Presentation Foundation (WPF) development tools. - Comprehensive backup and archiving facilities shall be incorporated as an integral part of the system software. - The System shall include divisioning suitable for multi-tenanted buildings. Operators shall only be able to access those parts of the system which fall within their division and operator privileges. - IFCs must support peer to peer communications for input and output communications between IFCs. Systems that require the main server for communications between panels are unacceptable. PRODUCT COMPETENCE - The successful tenderer will be required to demonstrate their competence to supply, install, commission and maintain the product line proposed in the tender submission as follows: - Provide a letter of reference from the product manufacturer confirming the tenderer’s status with the manufacturer, advising: -  Exclusive or non-exclusive agreement to provide the system in the geographical territory for this specific project.  The tenderer will be fully supported by the manufacturer in meeting the requirements of this specification. The tenderer shall provide evidence of competency in carrying out the following areas of work: 40 -  System design  Installation management  System configuration  System commissioning  COCs  System maintenance When working on the system, each employee of the successful tenderer shall be required to carry an identification card issued by the product manufacturer showing evidence of current manufacturer factory training, indicating the level of training. SCOPE OF WORK - BILL 1 (ACCESS CONTROL) Area / Position Access / egress at the museum main entrance CCTV Reception area New access system for 27 access gates and doors - Recommended Device / System 2 x standard full-height turnstiles with baggage and wheelchair gate Access tag readers on both sides of the access turn stiles. The first turnstile to be fitted with the capacity to be overridden in controlling visiting groups CCTV cameras to be installed in the Front, open area and residents. The ticket reception area at the main entrance must be secured with a smash resistance protecting safety glass with communication openings between the cashier and the visitor A cash register that closes automatically after every transaction and not open should no transaction be registered An automatic ticket/access card dispenser at the main reception. Current access control system: None REQUIREMENT Area Perimeter Description of Door/Gate Entrance Boom EACS Measures to be Installed Main vehicle entrance/exit gate off Erlswold Way, Replace manual boom with Automated Boom; remote operated (key-fob) Vendor pedestrian Install proximity bio/card reader on both sides access gate next to the of gate. large wheeled vehicle access gate leading from the parking area to Sapper’s Park Main entrance Install proximity bio/card reader on both sides pedestrian access of door, link to break-glass unit door/gate Premises Pedestrian gate Secure gate with bolt, install biometric reader (both 41 (northern perimeter) Reception Library sides of door) with door closer/magnetic lock, link to break-glass unit 2 x Turnstiles Install proximity bio/card reader on both sides of turnstiles. 2 x Doors (Front Door and Install Biometric Access Control. Reader in / out rear door ( south eastern (both sides of door) with door closer/magnetic lock, corner) link to break-glass unit 2 x Doors (Library Archive Rooms ( both Document and Film) 2 x Perimeter pedestrian access doors at the SA Legion Offices Install proximity bio/card reader on both sides of door, linked to break glass-units 1 x Emergency Escape Break Glass Unit at the emergency escape door SA Legion Offices Link to break-glass unit. Main Store Perimeter access door of the Main Store Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass unit. Workshop Admin Area 2 x Perimeter pedestrian access doors to the Workshop Admin area 2 x Perimeter pedestrian access doors to the Workshop Admin area; Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass units. SA Legion Offices Workshop Admin Offices 3 x Gates/doors Install proximity bio/card reader on both sides of doors, with door closer/magnetic lock, linked to break-glass units. 3 x Perimeter pedestrian access doors to the Workshop; Secure gate with bolt, install biometric reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Reception Door; Main pedestrian entrance/exit door Administration Offices Install Biometric Access Control. Reader in / out (both sides of door) with door closer/magnetic lock, link to break-glass unit Control Room Door Install Biometric Access Control. Reader in / out (both sides of door) with door closer/magnetic lock, link to break-glass unit Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass unit. SAAACA Offices Main pedestrian entrance/exit door SAAACA Offices Ward Room Pedestrian entrance/exit Ward Room Conference Centre 4 x Selected access Install proximity bio/card reader on both sides of door door, with door closer/magnetic lock, linked to break glass unit. 42 Install proximity bio/card reader on both sides doors Centre Curator's block of door, with door closer/magnetic lock. Gates Secure gate with bolt, install biometric reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Grey Steel Gate Passage Install Biometric Access Control. Reader in / out E/B Resident's Door - Conference BILL OF QUOTATION DESCRIPTION BILL NO. 1A 1 1.1 QTY PRELIMINARY & GENERAL Fixed Amount 1 Total for Bill No. 1A (P & G's) BILL NO. 1B 1 1.1 1.1.1 1.2 1.2.1 1.2.2 1.2.3 1.2.4 1.2.5 1.2.6 1.2.7 R RATE AMOUNT Rate Amount R R Sum ACCESS CONTROL INSTALLATION Wireways Allow for all additional wireways required on-floor Central Equipment Supply and install Access Control Server Quad Core Xeon 2GHz CPU 8GB RAM min 2 x 250GB 10k SATA HDD DVD+/-RW. keyboard, monitor and accessories as specified, Supply, install and configure Command Centre Server Software including engineering and capture of database and graphics Supply and install Access Control Workstation Quad Core 2.8GHz CPU 4GB RAM 512Mb Dedicated video card Supply, install and configure Command Centre Workstation Software Supply, install and configure additional door licenses Supply and install MACI and Varif License Supply and install MSO 300 Fingerprint Enrolment reader including Varif License 43 1 R 1 R R 1 R R 1 R R 1 R R 0 R R 2 R R 1 R R 1..3 Field Equipment 1.3.1 Supply and install Controller 6000 Supply and install Dual Cabinet with 8 Amp Power Supply and Battery Backup Supply and install Universal Reader Interface Wiegand Supply and install Cabinet with 3.5 Amp Power Supply and Battery Backup Supply and install Biometric Finger Print Terminal including Multitech card reader and wiring Supply and install breakglass door release Supply and install magnetic lock including wiring Surge arrestors to all copper cabling Automated Boom Testing and Documentation Testing and commissioning of access control system 1.3.2 1.3.4 1.3.5 1.3.6 1.3.7 1.3.8 1.3.9 1.4 1.5 1.5.1 Total for Bill No. 1A and 1B (Access Control Installation) - Sum 2 R R 2 R R 13 R R 27 R R 54 R R 25 R R 27 54 R R R R R R 1 R R SUM R BILL 2 (TURNSTILES) DESCRIPTION BILL NO. 2 RATE QTY AMOUNT TURNSTILES 2.1 2.2 2.3 2.4 Turnstile – Full height, C/W control logic, PSU and battery backup. Single / Dual direction. Connected to Access Control. Installation on floor 180 DEG Semi Automated Disabled (PARAPLEGIC) Swing Gates opening C/W door closure and magnetic lock for 90 DEG and solenoid for 180 DEG. PSU and Battery Installation on floor Total for Bill No. 2 (Turnstiles) SUM 44 2 2 R R R R 1 1 R R R R R - BILL 3 (CCTV AND CASH MANAGEMENT) - REQUIREMENT Zone Front Gate Description of Area and type Description of Coverage of Camera Overview (4 MP Long Range) Pole mount, covering the main area at the guard house, driver of the vehicle Number plate (4 MP Short Pole mount, covering the number Range) plate of the vehicle Overview (4 MP Long Range) Front Area of the Main Building and 4 x Cameras(4 MP Long towards the side of the building Range) Open areas 14 x Outdoor Cameras covering the following areas: (a) pedestrian gate (b) Sapper’s Park (Overview) (c) aircraft open display area (d) overview Paratrooper memorial ( e) overview benches opposite restaurant facing display area (f) 2 x CCTV cameras covering hallway on eastern side of admin offices (g) hallway opposite Ward Room (h) curator’s area (i) midget submarine area (j) CCTV camera facing north gate (2 MP Short Range) (k) internal workshop courtyard (2 MP) (l) western perimeter behind admin offices. (All 4 MP Short Range) Residents 3 x Cameras (2 MP) POS 1 x CCTV Camera above till and client People Counting 1 x CCTV Camera facing the turnstiles - Facing towards the parking area Overviews of the parking and open areas. Mounted against the building Overviews of the outdoor open areas inside museum premises. Mounted against the buildings Street, gate and open areas Text Overlay Camera with built-in analytics (linecrossing) for people counting BILL OF QUOTATION (INCLUDE POINT OF SALE AND PEOPLE COUNTING) ITEM 3.1 DESCRIPTION CCTV HEAD-END EQUIPMENT UNIT 45 QTY RATE TOTAL 3.1.1 3.1.2 3.1.3 3.1.4 3.1.5 3.1.6 3.1.7 3.1.8 3.1.9 3.1.10 3.2 3.2.1 3.2.2 3.3 3.3.1 32-Channel Embedded NVR (Channels: 32 x VGA / 24 x 720p / 12 x 1080p @ 25fps) 200Mbps input, 160Mbps output, Self-adaptive dual Giga-bit LAN interface, dual IP, load balancing, network redundancy , H.264/MPEG4, HDMI, VGA & CVBS output, RS485, RS232, CVMS, Up to 32TB internal storage, Two-way Audio, 19’’ 2U Rack mount chassis. Surveillance Hard drive - 4TB SATA Monitor 40" with mounting bracket 24 Port 10/100 Smart Switch with 4 Gigabit Ports and 24 Port PoE; 2 x SFP slots for Fiber Gigabit Ethernet Modules ea 1 R R ea ea 1 1 R R R R ea 1 R R POS Text Overlay. 4-Port RS-232 Serial Device Server; Supports PPP/SLIP ea 1 R R 8 Port Gigabit PoE Smart Switch, 2 x SFP slots for Fiber Gigabit Ethernet Modules.(8 x PoE Ports / 46W) ea 3 R R ea 1 R R ea ea ea 1 2 2 R R R R R R ea 1 R R ea 2 R R ea 6 R R Electronic Cash Register. 1 Media Slot 5 compartments for notes, 9 compartments for coins, 3 position key switch, Opens via USB or with a key 3KVA UPS Inline 1KVA UPS Inline Lockable 9U Wall mount cabinet POLE Pole 4m hot dip galvanized with Plinth Kiosk (700x500x300). Industrial 4 port switch, PSU 12V 5A, Splice box, C/B, 2x SFP, 2x Fibre patch leads, 8x Splice, 8x Pigtails, Finger trunking, 1x Lock, UPS 1KVA CAMERAS 4-MP Long Range WDR EXIR Network Bullet Camera. 1/3" Progressive CMOS, ICR, 0 Lux with IR, 2688x1520:20fps, IR: 80M, 4mm/F1.4 Lens, IP66, H.264/MJPEG, Dual-stream, IP66, DC12V & PoE, 3D DNR, BLC, Support Mobile Monitoring via EZVIZ P2P, H.264+ Optimized Codec 46 3.3.2 3.3.3 3.3.4 3.3.5 3.4 3.4.1 3.4.2 3.4.3 3.4.4 3.4.5 3.5 3.5.1 3.5.2 - 4-MP WDR IR Mini-Bullet Network Camera. 1/3” Prog. scan CMOS, 2688x1520 Resolution, Min Ill: [email protected] / 0Lux with IR on, True D/N, IR: 30M, Lens options: 4mm, IP66, H.264+ Optimized Codec, 12VDC, PoE. 2-MP WDR IR Mini-Bullet Network Camera. 1/3” Prog. scan CMOS, Full HD 1080p, Min Ill: [email protected] / 0Lux with IR on, True D/N, IR: 30M, Lens options: 4mm, IP66, H.264+ Optimized Codec, 12VDC, PoE. POS IP Dome Camera. 1.3-MP; Indoor; Motorized VF 2.8~12mm Lens People Counting IP Dome Camera. 1.3-MP; Indoor; Motorized VF 2.8~12mm Lens CABLING UTP CAT5 Solid Copper Fibre 8 Core Bosal, 20mm (for outdoor) Conduit PVC 20mm (for indoor) Power Cabling, 2.5mm P's & G's Installation Labour Set-up & Commissioning ea 14 R R ea 5 R R ea 1 R R ea 1 R R R R R R R R R R R R m m m m m p/d p/d R R Total for Bill 3 (CCTV) Bill 4 (GLASS CUBICLE) Area / Position Main Entrance - Reception Glass Specifications HI rated 3, clear laminated glass, made from two layers of clear float glass, permanently bonded together by pressure and heat with one or more Polyvinyl Butyral (PVB) plastic interlayers . The result is an SABS approved safety glass that can withstand many blows from a would-be intruder. High Impact (HI) for security in high risk applications – Total thickness is 7.52mm with 1.52 mm PVB Build and install a smash resistance Cubicle and door for the Cashier Total Bill No 4 - R R R 1 R R SUM R Bill 5 (MAINTENANCE PLAN) DESCRIPTION QTY 47 RATE AMOUNT BILL NO. 5 MAINTENANCE 5.1 5.2 5.2.1 5.2.2 Quarterly Full Maintenance Ad Hoc Service Calls Hourly rate for less than 6 hours per day Daily rate for over 6 hours Total for Bill No. 5 (Maintenance) - R 1 1 R R R R SUM Bill 6 (OFF-SITE MONITORING) Off-Site Event Monitoring 24 Bill No 6 - 24 R SUM R R Bill 7 CONTINGENCY sum Project Contingencies Bill No 7 R SUM R R MAINTENANCE: ACCESS CONTROL - Detailed inspection and check on all power supplies - As above on all access control readers, magnetic locks, door-closures and glass break units - The CPUs will get a complete functional test. This included cables, buttons, etc. o Software backups o Reports backup o Graphic user interval functional test o Full system check - The complete Servicing of turnstiles - Services and greasing of gates, loops, etc - All doors, gates to be checked and serviced. - Check all cables and replace if necessary - Check all UPSses, batteries – with or without loads 48 CCTV - Cleaning, servicing and refocus of all CCTV equipment. Check and test all recording equipment Check all monitors, impedance testing on all cabling Will make all the relevant backups on the software Check all connections and end of line terminations Check all mountings, brackets and housings. UPS - Check en test all moving and unmoving parts Check and test all battery voltages with and without load Check and test all additional specs as per manufacturers and client’s requirement Ensure that cabling is up to standard. Check that no corrosion has taken place Check and test software Providing a full maintenance report. List your response time. On completion of each inspection and maintenance service, the contractor shall present, for the customer’s signature, an acceptance certificate Give the customer notice prior to the site visit. This will be accompanied by a job card clearly stating the scope of work or checks to be carried out. Bill 1: Delivery / Installation Access Control Brand and Model Brand and Model Brand and Model Bill 2: Delivery / Installation Turnstiles Bill 3: Delivery / Installation CCTV Bill 4: Glass Cubicle Bill 5: Maintenance (24 Months) Bill 6: Off-Site Monitoring (24 Months) Bill 7: Contingency Price Firm: Yes/No Comply with Specification? Yes/No R R R R R R If not, Specify Deviations GRAND TOTAL VAT INCL R At arrival on site, the technician will report firstly to the appointed person responsible for overseeing the project or contract. DITSONG: NATIONAL MUSEUM OF MILITARY HISTORY 1. SECURITY BASELINE DOCUMENT Introduction: The purpose of this document is to serve as a detailed security baseline design for the security installations at the DMSA Museum of Military History premises. 49 This document will provide details pertaining to the following project specific security requirements: 1.1 Electronic Access Control System 1.2 CCTV System 1.3 Turnstiles 1.4 People Counting 1.5 Cash Management Note: This Security Baseline Document contains high level security control statements which contextualize the DMSA Security Standards. The baseline design will be used as input in the overall project, and in turn, shall be augmented by detailed security equipment design and technical specifications and drawings as provided by the preferred project security service provider. When formulating a site-specific security baseline design, the Project Security Representative will use the applicable combinations of the security measure selections listed below. 1.1 ELECTRONIC ACCESS CONTROL               Area The existing electronic access control system (EACS) needs to be installed at the site. This system at a minimum should provide a clear segregation of public and “restricted access” areas. The system must prevent visitors or members of the public from easily gaining access to “restricted areas”. “Restricted” and “high-risk” areas must be electronically access controlled. There must be an electronic audit trail available of all access to “restricted” and “high-risk” areas. The System shall provide a means to control access through nominated doors having electric locking door status monitoring and token or biometric access control readers. Access rights associated with a presented access token or biometric identifier shall be checked for validity based on token or identifier, access area, access time and any other access management function defined in this specification, as stored in intelligent field controllers. Access shall be granted or denied dependant on the access privilege. Access rights shall be programmed in a variety of ways to allow flexibility as defined elsewhere in this specification. The System must report all events to the operator(s) as configured and shall produce and maintain a log of all system events, alarms and operator actions. The System shall provide a means for an operator to extract information relative to the event log and system configuration and produce this information in the form of printed reports, emailed reports directly from The System itself, screen displays or exported files. The System shall provide for a Windows based User Interface with Site Plans and interactive icons representing the location and real-time status of Access Control, and Alarm Monitoring equipment. The system must be linked to a power back-up source. Maintenance Plan (24 x months) for the System. Training for DITSONG staff members operating and managing the System. Guarantee and Warranty ( 3 x years) on the System. All EACS events/transactions must be backed-up for a minimum period of 3 x months. All system communications must be totally integrated with either existing or new LAN/WAN networks. Bi-directional electronic bio access control and additional measures must be installed as per the door schedule below: Description of EACS Measures to be Installed 50 Perimeter Door/Gate Entrance Boom Vendor pedestrian access gate next to the large wheeled vehicle access gate leading from the parking area to Sapper’s Park Reception Library Main entrance pedestrian access door/gate Premises Pedestrian gate (northern perimeter) 2 x Turnstiles 2 x Doors (Front Door and rear door ( south eastern corner) Main vehicle entrance/exit gate off Erlswold Way, Replace manual boom with Automated Boom; remote operated (keyfob) Install proximity bio/card reader on both sides of gate. Install proximity bio/card reader on both sides of door, link to break-glass unit Secure gate with bolt, install biometric reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Install proximity bio/card reader on both sides of turnstiles. Install Biometric Access Control. Reader in / out (both sides of door) with door closer/magnetic lock, link to break-glass unit 2 x Doors (Library Archive Rooms ( both Document and Film) 2 x Perimeter pedestrian access doors at the SA Legion Offices Install proximity bio/card reader on both sides of door, linked to break glass-units 1 x Emergency Escape Break Glass Unit at the emergency escape door SA Legion Offices Link to break-glass unit Main Store Perimeter access door of the Main Store Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass unit. Workshop Admin Area 2 x Perimeter pedestrian access doors to the Workshop Admin 2 x Perimeter pedestrian access doors to the Workshop Admin area; Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, SA Legion Offices Install proximity bio/card reader on both sides of doors, with door closer/magnetic lock, linked to break-glass units. 51 area Workshop Admin Offices linked to break glass units. 3 x Gates/doors 3 x Perimeter pedestrian access doors to the Workshop; Secure gate with bolt, install biometric reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Reception Door; Main pedestrian entrance/exit door Administration Offices Install Biometric Access Control. Reader in / out (both sides of door) with door closer/magnetic lock, link to break-glass unit Control Room Door Install Biometric Access Control. Reader in / out (both sides of door) with door closer/magnetic lock, link to break-glass unit Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass unit. SAAACA Offices Main pedestrian entrance/exit door SAAACA Offices Ward Room Pedestrian entrance/exit door Ward Room Conference Centre 4 x Selected access doors Conference Centre Curator's block Gates Resident's Door Grey Steel Gate Passage E/B Install proximity bio/card reader on both sides of door, with door closer/magnetic lock, linked to break glass unit. Install proximity bio/card reader on both sides of door, with door closer/magnetic lock. Secure gate with bolt, install biometric reader (both sides of door) with door closer/magnetic lock, link to break-glass unit Install Biometric Access Control. Reader in / out The EACS at a minimum must cater for the following:      Visitor Management Open-ended platform for future integration with the IDS, CCTV, Guard Tour, Virtual Perimeter and Cash Management Systems. Clear segregation of public, staff (restricted access) and high-risk areas. Photo Identification on Access Credential. Management of alarms/events. 52   Emergency evacuation reporting. Management Information System (MIS) with a minimum requirement of staff time and attendance reports  Master control workstation to be located in the onsite Security Control Room linked with remote access terminal in the Security Manager’s Office.  System to cater for approx. 100 users at this site. Upon system configuration at the end of the project, the EACS must make provision for the following access rights related functionalities:  The Issue of Access Credentials for Permanent Staff  The Issue of Access Credentials for Temporary Staff  The Issue of Access Credentials for Visitors, Contractors, Suppliers and the role of the Museum Host  The Issue of Access Credentials for Tenants and/or other entities sharing the premises  The Revocation of Access Credentials  The Review of Access Credentials 1.2 CCTV SYSTEM CCTV cameras must be installed at the following locations: Zone Front Gate Front Area of the Main Building and towards the side of the building Open areas Description of Area and type of Camera Overview (4 MP Long Range) Description of Coverage Number plate (4 MP Short Range) Pole mount, covering the main area at the guard house, driver of the vehicle Pole mount, covering the number plate of the vehicle Overview (4 MP Long Range) Facing towards the parking area 4 x Cameras(4 MP Long Range) Overviews of the parking and open areas. Mounted against the building 14 x Outdoor Cameras covering Overviews of the outdoor open areas the following areas: (a) inside museum premises. Mounted pedestrian gate (b) Sapper’s against the buildings Park (Overview) (c) aircraft open display area (d) overview Paratrooper memorial ( e) overview benches opposite restaurant facing display area (f) 2 x CCTV cameras covering hallway on eastern side of admin offices (g) hallway opposite Ward Room (h) curator’s area (i) midget submarine area (j) CCTV camera facing north gate (2 MP Short Range) (k) internal workshop courtyard (2 MP) (l) western perimeter behind admin 53 offices. (All 4 MP Short Range) Residents POS People Counting 3 x Cameras (2 MP) 1 x CCTV Camera above till and client 1 x CCTV Camera facing the turnstiles Street, gate and open areas Text Overlay Camera with built-in analytics (linecrossing) for people counting   All CCTV cameras must have a recording capacity of a minimum of 35 x days. Head-end equipment must have functionality to record and transfer recorded data to a USB or similar device.  All CCTV control equipment must be installed in the site Security Control Room (Admin Offices).  The system must be linked to a power back-up source.  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty (3 x years) on the System. 1.3 TURNSTILES  2 x Full-height Turnstiles, performing a people-counting function, must be installed at Main Reception. Area EACS Measures to be Installed Access / egress at the museum main entrance 2 x standard turnstiles with baggage and wheelchair gate Access tag readers on both sides of the access turn stiles. The first turnstile to be fitted with the capacity to be overridden in controlling visiting groups  Maintenance Plan (24 x months) for the System.  Training for DITSONG staff members operating and managing the System.  Guarantee and Warranty (3 x years) on the System. 1.4 CASH MANAGEMENT  Smash resistant glass, affording adequate protection for Reception staff against a concentrated forced attack for approx. 30 to 60 seconds must be installed on the Reception counter.  Staff entrance to the protected cubicle should be via an access controlled security door, installed in a similar manner to afford adequate protection against forced entry from the outside.  The configuration must be of such a nature and design to not interfere with business operations and without extensive changes to the façade of the building or ruining the “look and feel” of the Museum.  A cash register that closes automatically after every transaction and not open should no transaction be registered, must be installed at the Reception Desk.  An automatic ticket/access card dispenser must be installed at the Main Reception Desk.  The Point-of-sale (POS) function must be integrated with POS text overlay on the CCTV system. 1.5 PEOPLE COUNTING 54 People counting will be performed through the turnstiles and 1 x CCTV camera installed facing the turnstiles. 4. BID CONDITIONS 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 4.11 4.12 4.13 4.14 4.15 4.16 4.17 Bidders are required to attend all three compulsory briefing sessions at the three museums. One service provider will be appointed for the whole project and therefore non-attendance of any of the three briefing sessions will disqualify the bidder. Bidders must complete an attendance register at each museum as proof of attendance of the briefing sessions. Prices must be quoted in SA Rand. The total bid price (SBD1) must be for the whole project. If the owner of the company is a VAT vendor, VAT must be included in the bid. DMSA head office may request clarification or further information regarding aspects of the bid documentation. No incomplete or late bids will be accepted. Bids will be evaluated on functionality and PPPFA & associated regulations. Bidders who claim points in respect of B-BBEE Status Level of Contribution must be substantiated by means of a B-BBEE certificate issued by a Verification Agency accredited by SANAS or a Registered Auditor approved by IRBA or an Accounting Officer as contemplated in the CCA. Bidders must register on National Treasury’s Central Supplier Database (CSD) prior to submitting bids. Proof of CSD registration must be included in the bid submission. Any effort by a bidder to influence bid evaluation, bid comparisons or bid award decisions in any manner, will result in rejection of the bid concerned. Short-listed bidders may be requested to do verbal presentations about their proposals. The bidder must properly complete and furnish all information required, where after the bidder and his witnesses must sign the bid document. The onus rests with the bidder to ensure that the complete bid document reaches the bid box before the bid closing time and date. DMSA reserves the right to withdraw the bid. DMSA will notify bidders in the media of the bid decision, which decision shall be final and binding, and no further correspondence shall be entered into. The bidder confirms that he/she has satisfied himself/herself as to the correctness and validity of his/her bid, that the bid price covers all his/her obligations under this bid and accepts that any mistakes regarding the price and calculations will be at his/her own risk. No incomplete or late bids, or bids submitted telephonically or per fax or e-mail, will be accepted. DMSA may request clarification or further information regarding any aspect of the bid. The bidder must supply the requested information in writing within two (2) working days after the request has been made otherwise the bid may be disqualified. The bid document must be signed in the original, that is in ink. Forms with photocopied signatures or other such reproduction of signatures will be rejected. For the purpose of the bid, unless the contrary appears from the context; 4.22.1 the plural includes the singular and vice versa 4.22.2 any reference to one gender includes the other gender and vice versa. 5. COMPANY INFORMATION The following information is required from bidders who are interested in submitting a proposal: 5.1 Company profile 5.2 Proof of registration on National Treasury’s Central Supplier Database (CSD) 55 5.3 5.4 5.5 5.6 5.7 5.8 5.9 6. Names of directors/members of company Certified copies of directors’/members’ ID documents Employment equity details Completed SBD forms (attached) Contact persons and information B-BBEE Certificate (original or certified copy) Trade references for previous contracts BID REQUIREMENTS 6.1 Bid submission requirements Service Providers are required to submit their proposals in the following format: 6.1.1 Functionality This part must contain at least the following:     Compliance with Terms of Reference (clause 3) The company profile outlining the company’s available infrastructure, staff complement and the company’s suitability for this contract; The qualifications, skills and capability of persons assigned to this contract; Trade references for previous contracts; 6.1.2 Price proposal This part must contain at least the following:     The Bidder should provide an itemized or detailed breakdown for all relevant costs; The total bid price; The completed bid documentation; Central Supplier Database (CSD) registration report. 6.2 Bid evaluation 6.2.1 An Evaluation Panel will be established by DMSA. The panel will evaluate all bids received, according to the criteria indicated (7 hereunder). 6.2.2 The panel reserves the right to call bidders to complete any outstanding elements of their bids, or make presentations of their bids. 6.2.3 The decision of DMSA will be final. 6.2.4 Any bidder failing to submit any element of the Bid Submission Requirements set out in the above, may, at the discretion of the Evaluation Panel, be rejected as unsuitable for evaluation and will therefore not be further considered. 56 7. EVALUATION CRITERIA FOR MEASURING FUNCTIONALITY Evaluation will be based on a points system. The bids will first be evaluated on functionality. The threshold score is 50 %, and only those bids that achieve 50 % or more are evaluated in terms of the 90/10 preference points system in the Preferential Procurement Policy Framework Act (PPPFA), where 90 points must be used for price only and 10 points are used for B-BBEE Status Level of Contribution (For a detailed explanation of the calculation of points for price and B-BBEE Status Level of Contribution please refer to the attached SBD 6.1 form). Functionality will be evaluated according to the following criteria and scoring system: Values: 1 = Poor; 2 = Average; 3 = Good; 4 = Very good; Criteria 5 = Excellent Weights Functionality 1 Compliance with Terms of Reference (clause 3) 15 2 15 Assessment of the company profile (Property, Plant, Equipment, Staff complement & Infrastructure) Qualifications, skills, experience & capability (profiles of key staff to be assigned to this project) 3 4 Value Score 10 Trade references for previous contracts 10 50 (a) Totals: a) b) c) (So) The value awarded for each criterion should be multiplied by the weight for the relevant criterion to obtain the score for the various criteria; The scores for each criterion should be added to obtain the total score; and The following formula should be used to convert the total score to percentage for functionality: Ps = So X 100 Ms where: Ps = percentage scored for functionality by bid under consideration So = total score of bid under consideration Ms = maximum possible score, i.e. 5 x (a) = 250 8. TIMING AND SUBMISSIONS 8.1 8.2 8.3 The closing date for submitting bids is 26 August 2016 at 11:00. Proposals need to be valid for 90 days from the closing date. Bids must be addressed and the bid number indicated on a sealed envelope and submitted into the bid box at DMSA Head Office, Ga Mohle Building,Ground floor, 70 WF Nkomo (Church) Street, Pretoria during office hours (07:30-16:00). DITSONG National Museum of Natural History; DITSONG National Museum of Cultural History; DITSONG National Museum of Military History; DITSONG Kruger Museum; DITSONG Pioneer Museum; DITSONG Sammy Marks Museum; DITSONG Willem Prinsloo Agricultural Museum; DITSONG Tswaing Meteorite Crater Council: Prof FM Lucky Mathebula (Chairperson), Ms D Offringa, Adv. MJ Ralefatane, Dr P Bayliss, Mr C Kneale, Ms K Rapoo CEO: Adv. BD Mushwana 57