SPECIFICATIONS
REQUEST FOR COMPETITIVE SEALED PROPOSAL BHZ1214 DPD VIDEO SURVEILLANCE SYSTEM
Page 1 of 102
TABLE OF CONTENTS
1.0 INTRODUCTION....................................................................................................................3 2.0 BACKGROUND 6 3.0 SCOPE OF SERVICES..........................................................................................................6 4.0 PROPOSAL PROCESS.........................................................................................................8 5.0 PROPOSER QUALIFICATIONS..........................................................................................19 6.0 STATEMENT OF WORK 22 7.0 FUNCTIONAL AND TECHNICAL REQUIREMENTS.........................................................29 8.0 CONTRACT TERMS AND CONDITIONS...........................................................................39 9.0 PROPOSAL PRICING..........................................................................................................41 41 10.0 REQUIRED CITY SCHEDULES AND FORMS.................................................................44 11.0 PROPOSERS HARDWARE AND SOFTWARE CONFIGURATION...............................45 Appendix A System Diagram...............................................................................................47 Appendix B Proposal Pricing...............................................................................................48 Appendix C Reports .............................................................................................................51 Appendix E - Product Vendor Questionnaire........................................................................63 Appendix F - Sensitive, Personal,Commercial Information and Legal Considerations. . .85 Appendix H Service Level Agreement...............................................................................102
Page 2 of 102
1.0 INTRODUCTION
The purpose of this Request for Competitive Sealed Proposal (RFCSP) is to acquire a 60 month turnkey Surveillance Camera System for the City of Dallas (the City) which meets or exceeds all requirements of this document. Currently, the City operates cameras within various Dallas downtown areas with live video streaming. The video management software currently being utilized is OnSSI. Due to the deterrent and evidentiary effectiveness of the surveillance cameras, the Dallas Police Department (DPD) is seeking to implement approximately 300 surveillance cameras located throughout 27 areas in the City, specifically in high crime areas, transmitting wireless video feeds 24hrs a day/365 days a year. This system shall have a mix of cameras installed as semi-permanent installations at fixed locations as well as cameras that have the ability to be moved quickly to various locations, as dictated by criminal activity or any other surveillance efforts. For those units that are determined as mobile cameras, due to the need for flexibility and ability for quick relocations, the mobile cameras will be required to utilize the most flexible wireless technology (cellular). The Department wishes to utilize the most efficient cameras and wireless technologies to fulfill its requirements for the new surveillance system. The Department has been satisfied with the OnSSI software currently used for video gathering, monitoring, and management and wishes to use that same technology for this operational need to minimize or eliminate the learning time for the monitoring teams and to not increase the number of systems supported within the City. In addition, in order to streamline and increase video analysis efforts, the Department wishes to implement a video synopsis (VS) solution that is compatible with OnSSI, which would allow users to view and analyze hours of video that is condensed into significantly shorter timeframes. The goals of the project are: Improve DPDs crime fighting efforts by implementing a state of the art wireless technology Surveillance System. Implement approximately 300 cameras (overt/covert) in the Citys top 27 TAAG areas. Allow DPD the flexibility to install surveillance cameras throughout the City of Dallas, without any geographic/network constraints. Stream, as near real time as possible, video feeds to various locations such as Dallas City Hall, Jack Evans, Substations, police vehicles, and/or laptops. Implement data management architecture/strategy for the storage of video feeds for up to fourteen (14) days, for historical investigative and/or evidentiary purposes. Improve system performance by selecting a vendor to provide ongoing support and maintenance. Streamlined process for relocation of cameras, as dictated by DPDs surveillance needs. Leverage DPDs satisfaction with OnSSI and implement system that continues to use OnSSI Video Management Software Improve DPDs video monitoring efforts by implementing new Video Synopsis software. The new Surveillance Camera System should meet at a minimum, all of the required specifications outlined in this document. The successful Proposer should provide added value and/or functionality above and beyond the minimum requirements.
Page 3 of 102
The scope of this project includes the following: 1. The provision of a industry proven Wireless Surveillance Camera System (to be referred to as the system) that provides DPD the best tools for crime reduction. 2. The selection, installation, configuration and testing of Surveillance Camera Software and hardware that meets or exceeds the City of Dallas minimal requirements, interface, and reporting needs 3. The establishment of a production environment with backup/recovery capability, required to maintain and run the system. 4. Ordering, installation, configuration and testing of hardware that meets the City of Dallas standards, and is capable of supporting the proposed system and projected number of users. 5. The development and delivery of user, administrator and support personnel training and documentation 6. System Administration tools and report capabilities 7. Identification of Proposers roles and responsibilities for project implementation and postimplementation 8. Identification of City roles and responsibilities for project implementation and postimplementation 9. The provider will be responsible for delivery of onsite training to ensure that all appropriate staff are trained and certified in the use of this system. 10. As a result of the expanded number of cameras, the provider will be responsible for the design and installation of additional hardware/software for a minimum of 4 additional video monitoring stations either at City Hall or Jack Evans. The proposer will also be requested to provide the following warranty periods: A. Five (5) year on all camera hardware B. Five (5) year on system maintenance and support C. Five (5) year on camera relocations
Security Clearance
The selected vendor MUST be compliant with the requirements of the FBIs Criminal Justice Information System (CJIS) regarding system and network security, and personnel backgrounds. Serious proposers will be required to sign a non-disclosure agreement (NDA) to be allowed to review
RFCSP Surveillance Camera System Page 4 of 102
those requirements. Any related materials provided to a proposer must be returned. Proposers unwilling to meet these requirements will not be considered.
Page 5 of 102
2.0
BACKGROUND
In 2006, the City of Dallas installed 34 video surveillance cameras in the Central Business District, funded by a grant from the Meadows Foundation. Since 2006, video surveillance has expanded to 115 video surveillance cameras monitoring areas in Jubilee Park, Uptown, and the Arts District. All cameras are installed as permanent fixtures to street poles or buildings and are recorded and monitored 24hours a day by the Video Surveillance task force utilizing OnSSI video management software.
Respondents must not be in default or arrearage under any previous or existing contract(s) with the City, the State or any other political subdivision of the State of Texas. The City reserves the right to disqualify any respondent, or any constituent entity of respondent, that has pending litigation, claims or debt with the City, or if such proposal includes a proposed
Page 6 of 102
subSuccessful Proposer, sub-lessee or supplier that has pending litigation, claims or debts which, in the Citys opinion, may adversely affect the ability of the parties to work efficiently and effectively under the contract contemplated by the RFCSP.
6.
All contract employees utilized under this contract shall be employed directly by the Successful Proposer and/or identified subcontractors to which the contract is awarded. I. A fully qualified labor force shall be on board at the beginning of the contract and maintained throughout the duration of this contract. All contract employees shall receive close and continuous first line supervision by the Successful Proposer.
II.
Each employee of the Successful Proposer shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence, as evidenced by Alien Registration Receipt Card or who presents other evidence from the US Bureau of Citizenship and Immigration Service that employment will not affect his or her immigration status. Acceptable evidence shall consist of a Birth Certificate and appropriate naturalization papers. Each contract employee shall be a minimum of 18 years of age. Vendors shall state the companys procedures used to verify the legal status of contract employees and the authenticity of documents provided by employees. Vendors shall submit these procedures with their bids. Note: Violation of the specified age requirement and/or employment of an undocumented alien shall be just cause for contract termination. Any contract employee who violates this requirement will be removed from City contracts with CIS. III. The Successful Proposer shall conduct a screening/background check on each contract employee prior to being assigned to work in any capacity at a City facility. The successful Proposer shall not assign any employees not in compliance with CJIS requirements based on background checks obtained from the Dallas County Clerk. The City reserves the right to instruct the successful Proposer to remove any contract employee upon review of the employment information form and/or findings of the screening process. The successful Proposer shall maintain and provide CIS a current contract employee list showing all contract employees assigned to work under this contract. The successful Proposer shall immediately report any changes to the contract employee listing and shall furnish information reflecting the changes as they occur. Successful Proposer agrees that all contract employees shall submit to and pass a police background investigation report, a drug test and/or a polygraph examination upon request. Note: The cost associated with the required background check shall be the sole responsibility of the awarded vendor and not be passed on to potential contract employee or the City.
IV.
The selected vendor will be required to carefully review and complete the Security Addendum (Appendix K). The selected vendor should review the attached Texas CJIS Systems Access Policy. This policy details the effect of certain criminal activity as it relates to that person being allowed to work with the City of Dallas Communications and Information Services Department. Specific attention should be given to the column labeled ORIGINAL APPLICATION FOR ACCESS.
Page 7 of 102
Vendor personnel assigned to work on the City of Dallas account must have previously completed a fingerprint background investigation by the Dallas Police Department. The background investigation MUST be successfully completed BEFORE a contractor employee will be allowed access to City of Dallas facilities. Note that a background investigation will be repeated annually to ensure that individuals remain compliant with Systems Access Policy. Each vendor employee will be required to sign the Security Addendum Certification form and it will also need to be signed by a company representative.
System License and Maintenance Hardware and Related Software and Maintenance Hardware & Software System Installation & Configuration Services Training Services Ongoing System Maintenance & Support
Proposals to this RFCSP are not received by the due date and time specified; Any document or item necessary to the proposal is incomplete, improperly executed, indefinite, ambiguous, or missing; Additionally, factors such as, but not limited to, the following may also disqualify a Proposer without further consideration: o Reason to believe collusion exists among the proposers; o Any attempt to improperly influence any member of the City Selection Committee; o Substantial deviations from the Citys contracts; o A Proposers default under any type of agreement which resulted in the termination of that agreement; o The Proposer has a history of filing frequent, excessive, merit-less or fraudulent claims, against the City or against other vendors on a project of the City; o Having defaulted on a previous contract, or performing poorly on a current contract; o The proposer is in arrears on an existing contract or has failed to perform on a previous contract with the City of Dallas within the past five (5) years o Lack of competence, skill, judgment, financial capability, integrity, reputation, reliability or responsibility to perform the work as revealed by the proposal, questionnaires, financial statement, performance history or other relevant information obtained by the City; o The Proposer has a conflict of interest; o The Proposer is involved in any litigation against the City; o The Proposer has delinquent property taxes or owes the City money; and
Page 8 of 102
Contact with any City employee concerning this procurement other than the buyer or his designee, associated with this procurement.
Proposals shall be prepared and submitted in accordance with the provisions of these RFCSP instructions and specifications.
establish that the information that a Proposer submits is a trade secret. If a request is made for information marked Confidential, Trade Secret, or Proprietary, the City will provide the requested material to the State Attorney Generals office for final decision related to the relase of the information.
4.8 Addenda
Any interpretation of or change in the RFCSP will be made by addendum. The City will not be responsible for any other explanations or interpretations. Only formal written addenda will bind the City of Dallas.
Page 10 of 102
All proposals and attachments shall be in English, complete, and free of ambiguities, alterations, and erasures. A duly authorized officer or agent of Proposer shall execute it. In the event of a conflict between words and numerals, the words shall prevail. Proposals are to be typed and prepared on preferably both sides of 8-1/2" x 11" paper. The Proposer shall provide one (1) unbound single sided (original) copy of the complete proposal and four (4) left bound copies. Proposers shall also provide eight (8) electronic versions of their proposal in Microsoft Word format along with the specifications answered in the document. This should be provided on a flash drive or similar storage device, marked with the vendor name, that has been formatted to be read on any Microsoft based computer. The entire package must be sealed and addressed to: Susan Dunne, Buyer III City of Dallas 1500 Marilla Street - Room 3FN Dallas, Texas, 75201 Mark plainly on the outside of the package the number and title of the procurement to which the proposal is submitted. Indicate the opening time and date on the package. Failure to do this may cause the proposal to be misplaced and not considered. The City requires comprehensive, item-by-item responses to every section within this RFCSP. To facilitate the review of the responses, Proposers shall follow the described proposal format. The intent of the proposal format is to expedite review and evaluation. It is not the intent of the City to constrain Proposers with regard to content, but to assure that the specific requirements set forth in this RFCSP are addressed in a uniform manner amenable to committee review. Although the specifications in the following sections represent the City of Dallas anticipated needs, there may be instances in which it is in the Citys best interest to permit exceptions to specifications and accept alternatives. It is extremely important that Proposers make very clear where exception is taken to the specifications and how alternatives will be provided. Therefore, exceptions, conditions, or qualifications to the provisions of the Citys specifications should be clearly identified as such, together with the reasons, and inserted in the proposal. If the Proposer does not make it clear that an exception is taken, the City will assume the proposal is responding to and will meet the specifications as written. The following describes, in more detail, what is required of a vendors proposal.
Page 11 of 102
incomplete answers to information requests and/or City requirements may lead to disqualifying the Proposers submittal. Proposers should provide submissions in the following format: Proposers shall present responses in the same sequence as presented in this RFCSP Responses shall follow the soliciting RFCSP paragraph. Succinctly state all assumptions. Title any additional information as Additional Information, and include it at the end of each sections response. Make sure that the section number being addressed is listed as well. Additional information regarding products or services that may be of value is welcome Consecutively number pages either at the top or at the bottom of each page within each volume. Include additional "header" or "footer" information (such as company or section title) on each page if desired
If unable to comply with a stated requirement, or if taking exception to a requirement, the response should include a clear, unequivocal explanation. Explain in detail if a requirement is partially but not completely satisfied. Where possible, suggest remedies or counter proposals concerning each requirement. As appropriate, include such exceptions in the Terms and Conditions section of the proposal
Proposers should identify which items will require modifications to their base system/software
Any modifications to system, databases or software should become part of the standard product. Excluded from this requirement are the interfaces. Exceptions will not necessarily be disqualifying. Requirements not specifically addressed in the proposal indicate tacit acknowledgment that the Proposer intends to meet or provide the requirement. A partially addressed requirement is tacit acknowledgment that the proposer will meet all other elements of the requirement(s) As noted in Section 4.2, Proposers shall submit written questions to the City to further clarify any RFCSP item or requirement.
The City will initiate a Best and Final Offer process with the Proposer(s) who are ranked highest. A recommendation for award of a Contract will be made to the proposer(s) that offer the solution that best meets the needs of the City for the Surveillance Camera System and Related Interfaces.
As part of the evaluation process, the City may interview Proposers regarding specific areas of their proposals as well as their references.
Related to Criteria A Value to the City: Value to the City as determined through pricing and benefits.
1.2. Actual cost of various elements of the system as identified in the Proposal Pricing document.
2. 2.1.
Related to Criteria B - Capability and Expertise of the Proposer: Satisfactory company background, references, and financial statements as well as qualifications and experience in the delivery, installation, and maintenance of Surveillance Camera System. Demonstrated successful experience on similar type projects in organizations the size and complexity of the City of Dallas will be favored. Understanding of needs and the ability to offer alternatives and new approaches to the City of Dallas. Leadership and sustainable position in the relevant technical market place.
Page 15 of 102
2.2. 2.3.
Related to Criteria C - Functional Match to City Requirements: The proposed systems ease of use regarding user interaction to provide for the utmost in an officers safety, and integration of modules. Satisfactory performance of all scenarios in the Proposer Demonstrations. Proposer Demonstrations prove that the Proposers answers to Functional Requirements are accurate. Ability to meet the long-term Surveillance Camera System functional needs of the City of Dallas. Vendors provision of long term supported interfaces and/or compatible systems. Related to Criteria D - Technical Match to City Requirements: Ability to meet the long-term Surveillance Camera System technical needs of the City of Dallas. Capability as a Proposer to provide a clearly understand hardware and software configuration that satisfactorily meets the requirements of this RFCSP. True packaged Surveillance Camera System software demonstrated by: 4.4.1Successful history of releases and bug fixes
4.4.1.1. 4.4.1.2. 4.4.1.3.
3.4. Clear and complete responses to the functional requirements contained in the RFCSP.
3.5. 3.6. 4.
4.1. Clear and complete responses to the technical requirements contained in the RFCSP.
4.2. 4.3. 4.4.
4.4.2Support and maintenance 4.4.3Ease of upgrading to a new release 4.4.4Future plans for the proposed Surveillance Camera System System software.
Related to Criteria E - Training and Ease of Use of the System Simple design of the system Related to Criteria F - Business Inclusion and Development Plan Demonstrated inclusion and commitment to and understanding of the Citys Business Inclusion & Development (BID) Plan It is the policy of the City Council policies of Dallas to involve Minority and Women Owned Business Participation) Business Enterprises (M/WBE) to the greatest extent feasible on the Citys construction, procurement and professional services contracts. The information shall be submitted with the proposal and shall include: Submission of an affirmative action plan/policy and the Ethnic Workforce form Submission of documentation showing history of M/WBE utilization on previous contracts on the form provided.
Page 16 of 102
Firm (s) Team make-up includes a significant number of diverse M/WBE firms in meaningful roles on the project. (1) The name, address and telephone number of each M/WBE; (2) the description of the work to be performed by each M/WBE; and (3) the approximate dollar amount/percentage of the participation. Evidence of acknowledgement of the Citys Business Inclusion And Development (BID) Plan, signed BID affidavit that demonstrates intent to comply with the policy and evidence of M/WBE inclusion to meet the BID goal for the project
prior to award for the purpose of obtaining best and final offers. In order to be considered, sealed best and final offers (marked RFCSP Negotiations Confidential on every page) should be submitted in writing to the City Buyer at a time and date subsequently specified by the City. In addition, the Proposer should provide a written guarantee that there will be no additional cost to the City for equipment, materials and labor necessary to meet the intent of this specification and contract documents.
The designated proposer shall execute the Performance and Payment Bonds, (Bonding Requirements) prepared by the City Attorney and provide certificate of insurance evidencing proof of insurance. The designated proposer shall pay cost for such bonds. Proof of insurance must accompany the executed contract.
Proposers should state three recent sales within the past two years of the proposed system with the following details of these references:
2. a. Demonstrate b. References c. Include
recent relevant deployment and system implementation services in Surveillance Camera System. should be of similar size and complexity to the City. Joint ventures should provide similar references for each venture partner. the following information for each reference provided:
Agency name Population served (if applicable) Customer count Implementation Date (if not implemented, then planned date) Project Duration (excluding evaluation, selection and contracting time)
Page 19 of 102
Contact name Contact address Contact phone Contact E-mail address Products or systems installed Brief narrative description of the project o Local government experience o Project management experience o Quality assurance capabilities o Systems integration experience o Technical design capabilities
The City will utilize these references to validate the Proposers past performance and delivery capabilities.
Company name Contact person Telephone number Fax number Local address (that will manage this project) Headquarters address Number of years in operation Number of years in the business Number of years using the current name System Experience System Staff Experience o Number of staff o Average years experience with current Surveillance Camera System offering Research and Development (R&D) Profile o Number of staff o Average years experience o Expenditures in past three fiscal years Previous business name(s), if applicable Company Size Information for current fiscal year: o Assets o Revenues
Page 20 of 102
Company Size Information for previous fiscal year: o Assets o Revenues o Net income after taxes Percent of total income attributable to the Surveillance Camera System proposed Percent of total income dedicated to the research and development in Surveillance Camera Systems Number of employees in each of the following categories: o Management o Marketing/Sales o Administration o Customer Support o R&D o Consulting Support o Total, all categories For each subcontractor: o Name o Office address o Responsibilities
If not stated above, please state whether your company or subcontractors have a local Dallas office. NOTE: Proposer background provided should apply to the company that is seeking the contract award, not Proposers parent, subsidiary, supplier, or agent.
Page 21 of 102
Page 22 of 102
Tracking of task status; Scope Change Control; Risk Management; Data Mapping; Mapping of Requirements to Processes, to Testing, to Training; and Tracking of test problem reports through resolution.
test plan outlining the testing approach, methods, data participants and other items required for successful product testing. Suggested testing includes: Unit Testing Systems Test Integration Test (inclusive of all interfaces) Volume Test Technology Failover Tests (High Availability/Local Business Continuity) The Proposer will assume responsibility for conducting a Surveillance Camera System volume test of the system to meet City requirements to ensure performance and service levels are met. Proposers should specify any third party software required to perform these tests in their proposal as an additional cost. If third party software is not involved in the Volume Test, Proposers should explain the technology they will employ to achieve this test. The Proposer will provide resources for product fixes resulting from errors identified during all of the testing processes. At a minimum, the proposed solution components should include information and costs associated with all aspects of on-going product support and maintenance activities. The City expects the Proposer to provide on-going support that includes, but is not limited to, Technical Support, product fixes, product enhancements, procedural help, access to an active user group or client conference and a schedule of regular product releases.
Page 26 of 102
Recovery of all data within 72 hours; and Recovery of computing environment and support to end users within 72 hours.
All Proposers should include a method to support warranty claims for the sixty (60) month warranty period.
In order to clarify the above, Proposer or its subcontractor data for the above table should include: Years of experience in the Proposed Surveillance Camera System. This should be specific experience with only the proposed system and not earlier products from the same Vendor. Current Project and Expected Roll-off date. Please indicate the staff members current project and the date you expect them to roll-off and be available to the Surveillance Camera System Project. Please indicate which staff and positions will be full time for the duration of the project or for specific phases of the project.
Over the period of the contract, Proposer must notify the City of all personnell changes complete with all information requested above. The City reserves the right of refusal for any personnel recommended for the project.
Page 28 of 102
Method used to identify functional and technical enhancements; Contents or functionality included in releases since Jan 1, 2011; Prioritization method; and Client user involvement in above.
Of the releases since January 1, 2011, please specify the percentage of each release that was related to client user requests versus other sources such as your marketing or sales groups.
Page 29 of 102
7.2.1 Interfaces
The project will handle interfaces from the Surveillance Camera System side and the City will handle the other side of the interface. Specifically hours required to modify the Citys 3rd party applications to support interface requirements are the responsibility of the City and should not be included in the estimates provided by the Proposer. The Proposer should describe their systems abitily to interface with OnSSI and to provide live streaming video to broadband connected laptops in police vehicles.
7.3 Non-Functional Requirements List Non-functional requirements captures conditions that do not directly relate to the behavior or functionality of the solution, but rather describe environmental conditions under which the solution should remain effective or qualities that the system should have. They are also known as quality or supplementary requirements. They do not have a documented use case.
The following list represents the non-functional business requirements for the Surveillance Camera System. Req # 7.3.1 7.3.1.1 7.3.1.2 7.3.2 7.3.2.1 7.3.2.2 7.3.3 7.3.3.1 7.3.3.2 7.3.3.3 7.3.4 7.3.4.1 7.3.5 7.3.5.1 7.3.5.2 7.3.5.3 7.3.5.4 7.3.5.5 7.3.5.6 7.3.6 7.3.6.1 7.3.6.2 7.3.6.3 7.3.6.4 7.3.6.5 7.3.6.6 Requirement Usability The system cameras should be able to quickly be relocated. System configuration should be flexible and easily scalable. Reliability The system will have the ability to will provide a minimum guaranteed service availability rate (uptime rate) of at least 99.9 percent. The system will Operate continuously: 24 hours a day 365 days a year. Performance The cameras should be located so as to provide clear and unobstructed video feeds, The system should allow the user to quickly control the zoom/panning capabilities of the camera. The system should allow the user to clearly identify the location/time of the camera and the area being recorded. Supportability The system should enable staff to add new hardware, software upgrades, and or maintenance without disruption of service. Security The system should have the ability to meet or exceed industry standard security requirements. The system must comply with all Criminal Justice Information Standards (CJIS) requirements. The system must utilize encryption technology to secure video feeds. The system must meet minimum FIPS and NIST security standards. The system should be active directory compliant. System should be secure to prevent unauthorized access and provide layers of access security for users. Maintenance/Serviceability The system should be easily serviceable for repairs and maintenance. The Vendor should provide maintenance coverage plan including: Routine services provided on a periodic basis such as onsite maintenance and cleaning. Routine and as needed lens cleaning from condensation, rain, ice, dust, dirt or any other obstruction. Emergency response services including guaranteed response time Hours and days of coverage
Page 33 of 102
7.3.6.9 7.3.6.10 7.3.6.11 7.3.6.12 7.3.7 7.3.7.1 7.3.7.2 7.3.7.3 7.3.7.4 7.3.7.5 7.3.7.6 7.3.7.7 7.3.7.8 7.3.8 7.3.8.1
Requirement Equipment replacement procedures, including onsite or depot parts repair and replacement Response time for each service call which conforms to requirements in this document , including: a. System Outage b. Network control center outage c. Camera network outage impacting 25% of cameras Escalation procedure from first call to highest level respondent Detailed procedure showing knowledgeable first-time response to service calls Detailed breakdown of all maintenance costs for all equipment, software and services beginning at the end of the warranty period and extending through year five. Any Optional Maintenance service plans. Support The Vendor shall detail the technical and operational support that will be provided: Telephone support (e.g., include toll-free support hotline, hours of operation, availability of 24 x 7 hotline, etc.). Special plans defining levels of support (e.g., tier 1, tier 2, etc.). Delivery method of future upgrades and product enhancements including historical frequency of upgrades by module. Problem reporting and resolution procedures. Bug fixes and patches. Support provided for third-party solutions. Other support (e.g., on-site, remote Web site access to patches, fixes and knowledge base). Texas Occupational Code The Vendor that will access the Citys network or install equipment must be appropriately licensed and certified under Texas Occupational Code 1702 as a Security Company and to maintain that license / certification for the life of the contract.
Page 34 of 102
Requirement entering an identified area. The camera system shall be able to generate alerts or sounds an alarm when user-defined security rules are violated. The camera system shall be capable of object counting defined by object size, direction of movement and area Object search; ability to define an area and find missing objects/vehicles. The camera system shall be capable of motion detection, round-the-clock or by schedule recording mode. The camera system shall be capable of pre and post event recording on motion detect. The camera system shall have adjustable sensitivity level of motion detection. The camera system shall have Forensic Analysis ability Wireless Network The camera system will need to transmit video feeds wirelessly over a commercial Wireless IP cellular broadband network or other wireless technology. Keep in consideration the Citys requirement for some cameras to be relocated quickly and frequently. The service provider is responsible for the design and implementation of all the necessary components for the IP wireless network: geographic/network coverage assessments, configuration of cameras/carrier network cards, and any other necessary infrastructure, software, and carrier components The camera system must be secure to prevent unauthorized access and provide layers of access security for users. The camera system will support contingency mechanisms to ensure operation during a natural or other disaster. Respondents will describe their proposed disaster recovery plan for the Network. The camera system will be easily scaled and upgraded in a modular fashion to support additional cameras. Power Supply The camera power supply shall have the ability to operate on an uninterrupted 110 VAC power supply, 24-hours a day 365 days a year. The Vendor will describe automatic camera operation recovery after restoration of power. The Vendor will describe power maintenance requirements. Camera Enclosure Specifications The camera enclosure shall have the ability to be covertly disguised as to not reveal its identification as a camera The camera enclosure shall also have the ability to be overtly displayed The camera enclosure shall be constructed of a material that is rugged and not subject to heat or distortion under extreme outdoor/weather conditions, nor should it be generally subject to damage or tampering. The camera enclosure shall be waterproof under normal and severe rain conditions. The camera enclosure shall allow for the proper cooling and heating of the camera in order to work as intended. The camera enclosure shall be able to provide the proper ventilation and airflow in accordance with the specifications of the camera selected.
Page 36 of 102
7.5.3.1
7.5.3.2 7.5.3.3 7.5.3.4 7.5.3.5 7.5.4 7.5.4.1 7.5.4.2 7.5.4.3 7.5.5 7.5.5.1 7.5.5.2 7.5.5.3 7.5.5.4 7.5.5.5 7.5.5.6
Req # 7.5.5.7 7.5.5.8 7.5.5.9 7.5.5.10 7.5.5.11 7.5.6 7.5.6.1 7.5.6.2 7.5.6.3 7.5.6.4 7.5.6.5 7.5.6.6 7.5.7 7.5.7.1 7.5.8 7.5.8.1 7.5.8.2 7.5.8.3 7.5.8.4 7.5.9 7.5.9.1 7.5.9.2
Requirement The camera enclosure shall be able to be attached to street light poles, traffic signal poles and utility poles at a minimum height of 15 feet. The camera enclosure shall be able to be attached to buildings. The camera enclosure shall be able to be moved and installed in a simplistic manner. All mounting devices and casing enclosures should be designed to be installed by a single individual of average size. Installation and removal of all mounting devices and casing enclosures should be achieved by the utilization of standard tools. Camera Installation/Location The Surveillance Camera Systems will be located in approximately 20-27 high crime areas. Each crime area covered will contain approximately 10-12 Surveillance Cameras. It is anticipated that some cameras may need to have the ability to be relocated as frequently as once per 180 days. The service provider is expected to manage the entire process for installation and relocation of cameras: gather permits, utility agreements, camera assembly/disassembly, installations, network setup, configuration, and testing. Surveillance Cameras will need to be installed on street poles, buildings, or other permanent fixtures and be out of the reach of passing vehicles and the general public. The system shall be able to display clear views, with no obstructions from objects, shadows, or light distortions. General Camera System Specifications The system must be compatible with Windows XP or better. Digital Video Recording Specifications System should deliver real time or near real time video to all components. The system shall be able to display video feeds consistently up to 30 FPS. The system shall be able to store and archive video feeds 24hrs a day 7 days a week. The system shall be able to store and archive video feeds for a period of at least 14 days. Video Monitoring Specifications The camera system will need to function with OnSSI, DPDs current video monitoring software. The camera system should be internet based and capable of being monitored from remote locations. These include at a minimum, - Dallas City Hall, Jack Evans and all DPD substations - In police vehicles - Laptops The camera system shall be able to display 720 x 480, 640x480 & 320x240 resolution The camera system shall be able to display a map that displays the locations of video cameras within the city The camera system shall be capable of playback of archived video for 1 to 16 cameras at once in a single screen The camera system shall have dual view; ability to look at live and archived video
Page 37 of 102
Req # 7.5.9.7 7.5.9.8 7.5.9.9 7.5.9.10 7.5.9.11 7.5.9.12 7.5.9.13 7.5.9.14 7.5.10 7.5.10.1 7.5.10.2 7.5.10.3 7.5.10.4 7.5.10.5 7.5.10.6 7.5.10.7 7.5.10.8 7.5.10.9 7.5.11 7.5.11.1 7.5.11.2 7.5.11.3 7.5.11.4 7.5.11.5 7.5.11.6 7.5.11.7 7.5.11.8 7.5.11.9
Requirement at the same time in 2 monitors The camera system shall allow video play back with search by date & time The camera system shall have snapshot ability The camera system shall have MPEG4 compression or equivalent The camera system shall have the ability for digital water mark and time and date stamp The camera system shall allow the user to control camera movements: panning, tilting, and zoom in/zoom out. The camera system shall have the ability to choose preset camera assortments The camera system shall have the ability to view archive video files The camera system shall have the ability to save live and archive video stream. DPD Mobile Camera Trailers (MCT) DPD shall also require the need of approximately 4-6 Mobile/Portable trailer mounted Cameras Systems. The mobile camera trailers need to be a self contained system. The mobile camera trailers need to be a self powered system. (examples: Solar, Generator, Battery) The mobile camera trailers shall also be able to be plugged into standard power outlet. The mobile camera trailers shall have a camera mounted telescoping mast system. The mobile camera trailers shall record and transmit 24/7. The mobile camera trailers shall transmit video feeds wireless via cellular wireless broadband technology. All other requirements specified in this document will also be applicable to the mobile camera trailers. The cameras selected should also be able to be retrofitted into DPD existing equipment. (example: DPD mobile observation towers) Video Synopsis (VS) The VS system must be compatible with DPDs OnSSI Video Management Software. The VS system should be able to support up to all of DPDs surveillance cameras including all existing DPD video surveillance camera systems. The VS system should be able to be scaled down to support only selected cameras The VS system should be easily configurable to change synopsis capabilities to different cameras as necessary. The VS system must be able to function with PTZ cameras as well as fixed cameras. The VS system shall average a video synopsis rate of 1 hour of video = 1 minute of synopsis. The VS system should be able to function in High Traffic areas such as intersections, highways, or bridges. The VS system shall be capable of video synopsis of live on line camera feeds for On Demand analysis. The VS system shall be capable of retrieving archived video feeds from various camera channels for Post Event analysis.
Page 38 of 102
Req # 7.5.11.10 7.5.11.11 7.5.11.12 7.5.11.13 7.5.11.14 7.5.11.15 7.5.11.16 7.5.11.17 7.5.11.18 7.5.11.19 7.5.12 7.5.12.1 7.5.12.2
Requirement The VS system shall allow for users to define the time period for video synopsis. The VS system shall allow for users to define the object density for video synopsis. The VS system shall allow for users to define the video speed for video synopsis. The VS system shall be capable of analyzing video feeds that are saved and loaded from other video sources. (Example: private video camera recordings). The VS system shall be capable of indexing objects in video synopsis which includes timestamps of objects in video. The VS system shall have filtering capabilities such as size of object, direction of traffic, and color of object. The VS system shall have the ability to click on an object on synopsis video and load the original video feed at that point in time. The VS system shall have the ability to save and export synopsis videos. The VS system shall have the ability to save and export original camera videos. The VS system shall have alerting/reporting mechanisms that would allow user to determine if any activities occurred during specified time period. Other System Requirements A full and complete set of operating instructions shall be included for the system The vendor shall warranty the System to be free of defects in materials or workmanship. This warranty shall not extend to finish, appearance items, or malfunction due to abuse, neglect, misuse, accidents or operation under other than specified conditions. The vendor shall provide a 5-year full warranty and onsite service with 4-hour response time (Mon. through Sun. 8:00 am - 5:00 pm including all holidays) The vendor shall provide support channels, contacts, and response times for support outside of normal business hours of 8:00am-5:00pm. The vendor shall have a dedicated service department locally based in the Dallas/Fort Worth area and may not contract out the warranty or service plan. Service response shall be within four (4) hours from notification of system casualty.
The City has prepared Terms and Conditions to be used for this project. It is important for the Proposer to become familiar with the paragraph items contained in this section, as they will prevail in the event of any discrepancies or differences between project related or contractual documents. The Citys sample contract documents are included in the RFCSP package. The blank spaces in the Citys contract documents are not to be filled in at the time of submitting the proposal. They are included to familiarize the Proposer with the form of the contract that the successful Proposer will be required to execute. The contract will be tailored to this procurement and completed by the City of Dallas Attorneys Office. Exceptions, conditions, or qualifications to the provisions of the Citys contract documents, if any, should be clearly identified as such (by Page, Paragraph and Line and Word Number), followed by the proposed alternate language. The City utilizes the attached sample contract documents as the basis for completing the final contracts. Do not submit form contracts for wholesale substitution of the City contracts. The City shall consider the number and substance of alterations to the Citys sample contract documents as factors in determining the best offer.
Page 40 of 102
for all required equipment, parts and materials for the System as proposed. A separate list should show the same information for all options in this specification. Provide pricing for all items presented in response to this RFCSP. Options that go beyond the requirements of this RFCSP are welcome, but should be priced separately. Price these options as well as recurring follow-on costs, such as hardware and software maintenance/support, separately from the rest of the project. Provide a total price for the Surveillance Camera System project, excluding only the price of options and their recurring costs mentioned above. Include all costs associated with each phase. Itemize pricing for individual application tailoring should be included in the answers in the Functional and Technical Requirements as a part of Section 7.0. These costs should be brought forward to be a part of the total costs in the Proposal Pricing. Identify dependency relationships between all priced items in the response to Section 7.0, as appropriate in the Functional and Technical Requirements. A pricing template has been provided to assist in providing the City with prices by area of the RFCSP. After acceptance of the system, the successful Proposer should make available to the City of Dallas, without charge, any enhancements, or any other terms, conditions, or circumstances that favor the City and that are made generally available at no charge to the Proposers other customers. Other enhancements, or other terms, conditions, or circumstances offered to other customers for a charge should also be offered to the City at the same charge. During contract negotiations with the selected proposer, the City will evaluate the detailed pricing submitted with the proposal. This pricing will assist the Proposer and the City to agree to terms for payment of services and equipment provided.The basis for these payments will be on the detailed pricing listed in the proposal and payments will be for milestones achieved. After award of contract, any maintenance or improvements in service or other enhancements or features made generally available to customers should also be immediately extended to the City. Specific pricing should be detailed by the following areas:
Page 42 of 102
Change control for this project shall include both increases and decreases in scope, duration and staffing. Specifics include: City shall reduce scope and related fees of functional requirements for the price as stated in the Functional Requirements (Section 7.0) of the Proposers response by removing any of these functional requirements. Scope reductions for requirements that are considered in-process will be mutually negotiated. Functional increases and deceases in scope shall be traded. Proposers should submit a fee schedule that will be the basis of their pricing of change orders. Proposers should state this response as a rate per hour.
The City specific insurance requirements are specified in (section 10.2), (Attachment 3), file at www.bids.dallascityhall.org
10.4 Contracts
The Citys Sample Contracts are specified in the attached files: Turnkey System HW SW Maintenance; Turnkey System License; Turnkey System Acquisition Agreement.
11.1 Development
Proposers should specify the development environments required to effectively conduct the project.
Should the proposed software require any network requirements other than the Citys current Cisco AVVID VoIP network, Proposers should indicate these requirements in this section. Proposers are required to provide bandwidth estimates and recommended infrastructure to support the video transmittal bandwidth needs of the new system.
11.2 Production
Proposers should indicate the methods by which they will accomplish the production performance objectives of the City through the hardware and software environments and related upgrades for the duration of the project. The City desires specifics regarding: Environment/Configurations that will support the City (e.g. production, development, test, training); Business Continuity is specified later in this section of the RFCSP; Planned upgrades; Reporting architecture; Desktop configuration, if any; Sizing of disk storage; and Server sizing.
Page 46 of 102
DPD Server
Video Retrieval Video Storage
Cellular Carrier
Surveillance Camera
Page 47 of 102
1.1 1.1.1
Yes
No
$$$
1.1.2
$$$
1.1.3
$$$
These fees include maintenance during the initial first year? Indicate. If no, cost of first year maintenance.
Yes
No
1.1.4
On-going Third-party Software Maintenance Fees, including Price Escalation Clauses 2nd year, starting in 13th month after contract date 3rd year 4th year
$$$
Page 48 of 102
1.2
$$$
1.3 1.3.1
Implementation (Includes Professional Services Fees: Project Management, Training, etc.) Implementation Fees Description or Phase: Phase $$$
1.3.2
Change Control Items Totals of Section 6.0, but price contained in 8.3.1:
$$$
Hourly Rate for Change Orders 1.3.3 Extensions for Post Implementation Support Describe duration and staff size reductions or increases. $$$
1.3.4 .
Base Pricing
Page 49 of 102
1.4
Proposer Options: Instructions: List and describe options to the above price schedule, including recurring and follow-on costs. Reference the numbered subsections above.
$$$
Page 50 of 102
Appendix C Reports
The City will be relying on the vendor to identify their reporting capabilities and the voting committee will be reviewing and evaluation the reporting capabilities of each vendors offerings. Report Name The Solution shall provide a database schema and entity relation diagram (ERD) to facilitate the creation of any necessary reports to reflect any collected data within the application. Selection Criteria Fields on Report Description
The Solution should contain the ability to create electronic reports triggered by entering a date span, choosing to view files by one officer, with the ability to sort and provide counts and viewed on screen or printed hard copy.
All reports should be on-line accessible as well as have the ability to print on hard copy.
Page 51 of 102
2.0 Product Licensing All licensing of software will revert to the City. Product licensing shall grant the City full use of the product, services and upgrades. Proposers should include a provision for 5-year maintenance and warranties. The City may elect to present to Council a price agreement in addition to the final contract to pay for future maintenance costs. It is anticipated that the duration of the agreement will be 60 months. The City desires an Enterprise license agreement. Proposers should describe their standard for concurrent users.
3.0 Third Party Licensing The successful Proposer will provide all ancillary software related to the entire environment, including monitoring, backup and recovery software. Licensing for third party software should revert to the City. Proposers should note whether the City already has licenses for the proposed software and shall work with the City and its Vendors to incorporate these new licenses under the Citys existing maintenance agreements. At no time will the City accept freeware or unsupported products in conjunction with the proposed solution. The only exception to this relates to products developed by US governmental agencies to be used by local, state, or other federal agencies. 4.0 Hardware 4.1 Desktops The Citys current standard is DELL desktop running Windows XP Professional SP2. The City uses IE 6.0. The City does not currently support Windows VISTA or IE 7.0 4.2 Server Hardware & OS a. The City uses Intel based rack-mounted client server technology. b. INTEL Dual-Core Xeon processors c. Minimum 3 GHz Processors d. Minimum 4 GB RAM e. Dual NICs f. Dual Power Supplies g. The proposal should include rack, KVMs, and all necessary components to be fully functional. h. The Citys Operating System standards are: Microsoft Server 2005 or better Solaris v10 i. The solution should employ a dual server configuration in an Active-Passive configuration to maximize use and provide redundancy. j. The City currently uses Windows based platforms (IBM, Dell) and Sun Solaris based platforms. The successful Proposer will offer solutions to one or the other of these platforms. The Proposer should specify any exceptions. k. Servers must be rack mounted. l. The City expects servers to contain full size 32-bit PCIe cards.
RFCSP Surveillance Camera System Page 53 of 102
m. The City expects a high availability configuration for both application and data. n. The City expects the capability for each server could be used at the same time. o. Each rack is to have redundant power supplies and include a patch panel for network connectivity. p. Cabling within racks shall be properly secured and labeled on both ends with the port and IP Address. q. Power requirements for all components, including amperage draw, power circuitry required, power distribution unit (PDU) capacity rating and configuration examples that show total power draw and requirements per PDU r. Hardware specifications shall include Temperature and Humidity requirements. s. Applications running on the server must run as a service. All servers must be able to be logged off. t. Windows based servers are required to have McAfee installed and running. Proposers shall include in their proposals any known issues or conflicts with their solution and McAfee. u. Proposers shall provide a certification matrix for all software proposed for their solution including specific versions in conjunction with the hardware proposed. v. Application Server may have a choice of using IIS, Apache, etc. w. Web Server can be a Choice of IIS, Apache, or Sun Java. x. Data management (DBMS) can be SQL or Oracle. 5.0 Application Technology a.All resident server software must be run as a service. The service can authenticate using a Local System Account. b.The Citys preference is for thin client browser based applications with no footprint on the workstation. c.Proposers are to adhere to the City of Dallas Web Linking Policy. d.Any web applications should be developed in .NET, ASP, Java, or PHP. e.Interfaces should be XML capable wherever possible. f. The solution should take advantage of advanced caching such as navigation or content object caching. g.The solution should take advantage of page caching to optimize performance. h.The solution should provide Application Program Interfaces that can be plugged in as necessary. i. The solution should address Load Balancing to assure user sessions can be passed between all nodes transparently. j. Proposers software should be able to integrate easily with several other systems using industry standard methods. k. Proposer should provide the information regarding database and file structure needed for a third party to construct or configure interfaces. l. Additional specifications on the existing systems will be provided to short-listed Proposers.
Page 54 of 102
6.0 Data Storage The Citys current standard is a Hitachi Thunder SAN with data storage at RAID 5. 7.0 Data Back Up The City uses Veritas to back up data. 8.0 Data Bases The Citys standard databases are SQL 2005/2008 or Oracle 11g. b. Proprietary data bases are not acceptable. c. Product design and modularity should allow it to be ported to smaller and/or larger platforms without the need for redesign and/or reconfiguration.
a.
10.0 Security
10.1 General Security Requirements
a.
h.
i.
The system should comply with the U.S. Department of Justice Criminal Justice Information Services (CJIS) Division CJIS Security Policy version 4.4 or better. b. City authentication services is based on Active Directory. c. WLAN Mobile Computing should adhere to the 802.11a, g or n standard or better; d. Proposer to provide a diagram indicating placement of all firewalls; e. All Internet traffic should be encrypted; f. All FTP traffic should be in-flight encrypted; g. Malware Protection Requirements oAny device attached to the City network shall install and run adequate protection against malware, if that device is vulnerable to malware infection or attacks. This includes, but is not limited to, servers, workstations, laptops and some mobile devices. Protection shall include, but is not limited to, anti-virus and anti-spyware programs. oThe Citys preferred vendor of malware protection is McAfee from Network Associates. Other vendor products may be considered, but will be reviewed and approved by CIS Information Security. The installed malware protection should be kept up to date with all signature files and all patches, updates and upgrades that the anti-malware vendor may supply over time. oIn addition, the devices attached to the network shall be kept current with all patches and updates to the operating system that may be released in response to discovered security vulnerabilities of that system. The system/security administration should have, at minimum, the ability to assign different user profiles based on individual and group classifications and sub-classifications and assign differential access privileges; and should be active directory aware using the Citys active directory infrastructure. Server User ID/Passwords should conform to City standards. At no time will a generic Server User ID/Password be assigned to Administrators;
RFCSP Surveillance Camera System Page 55 of 102
j.
l.
o.
p.
The application should not grant access to the user until the application can authenticate the user based on user id and password. k. All security administrator procedures should be supported by a detailed logging, auditing and reporting capability. The Offerors proposal should provide a detailed description of the security roles supported by the proposed solution. At a minimum the proposal should describe the granularity, types and levels of security roles allowed by the proposed software. m. Proposer will be required to adhere to the Citys Security Policies to be attached; n. Proposers solution will fully integrate with Active Directory i. Kerberos Authentication; ii. LDAP Authentication; iii. NTLM Authentication WILL NOT BE ALLOWED. Windows based servers are required to have McAfee installed and running. Proposers shall include in their proposals any known issues or conflicts with their solution and McAfee existing on the same server or workstation. Proposers should be prepared to defend exclusions of components from McAfee scanning; Proposers Project Team (including any subcontractors) using their own equipment on the Citys network is required to maintain a current version of a virus protection product. Failure to do so may cause the City to hold the Proposer responsible for damages and recovery costs; q. Winning Proposers Project Team to access solution through a VPN if off-site; r. Provide a function for administrators to monitor who is logged on with the capability of killing the session; s. Proposers should identify any limitations of their solution using the city's proxy servers. 10.2 The Proposers package should include the following provisions for security a. b. c. Provision for security and auditing capabilities. Allowance for inquiry only access to system data. Allowance for configurable security. d. Describe the utilization of encryption technology when communicating with remote users (i.e., handheld devices and laptops). e. Any Internet traffic must have minimum128-bit encryption f. Any FTP traffic must have minimum 128-bit encryption. g. Server user ids/passwords must conform to City standards. h. At no time will a generic server user id/password be assigned to Administrators. i. Proposer will be required to adhere to the Citys security policies. 10.3 Virus Protection All desktop, laptop, and server computers that connect to, or share data with, any other computer on the City of Dallas network shall be protected against infection from
a. RFCSP Surveillance Camera System Page 56 of 102
viruses. The Citys standard for virus protection is McAfee for both servers and workstations. b. Installation means that the product should be properly installed and functional and set to scan all files on the computer in an on-access mode. Files to be bypassed from scanning will be approved and documented by Citys Security Architecture division; and will be approved. c. Proposers shall include in their proposals any known issues or conflicts with their solution and McAfee existing on the same server or workstation. Proposers should be prepared to defend exclusions of components from McAfee scanning.
10.6 Data Security The Citys standard is that all data leaving the Citys network be encrypted.
RFCSP Surveillance Camera System Page 57 of 102
10.7 Encryption a. Must comply with the FBI CJIS security requirements. b. Proven, standard algorithms such as 3DES, Blowfish, RSA, RC5 and IDEA should be used as the basis for encryption technologies. For example, Network Associate's Pretty Good Privacy (PGP) uses a combination of IDEA and RSA or DiffieHellman, while Secure Socket Layer (SSL) uses RSA encryption. Symmetric cryptosystem key lengths must be at least 128 bits. Asymmetric crypto-system keys must be of a length that yields equivalent strength. c. The use of proprietary encryption algorithms is not allowed for any purpose, unless reviewed by qualified experts outside of the vendor in question and approved by the Citys Information Security / Security Architecture division. d. Data Ownership & Access: o All data is and must remain the sole property of the City of Dallas. o All tools and capabilities native to the database should be available to the City of Dallas to allow for full access to that data. o Database query, extract and download capabilities into external formats should be completely operational and available for appropriate City personnel to access. o The Contractor may not use data owned by the City of Dallas for any purpose without the express written consent of the appropriate City representative. o The Contractor should supply the City of Dallas with a data dictionary in electronic format. 10.8 Installation Requirements: The Proposer will be responsible for training CIS personnel on the installation of the mobile applications as well as on-going support, maintenance and imaging of all mobile hardware. Offer should provide coordination of co-habitation and integration at the proposers expense. Additionally, Proposer should provide the installation kit for all automated processes that are necessary for the successful implementation of the proposed software solution. This kit should include the database installation script. The installation kit should be free of viruses and should not come with any material/configuration specific to other Proposers customers. The mobile client installation kit should be in the form of software installation. The City utilizes CA Desktop Management Suite and ConfigureSoft to package and deliver software for installation. Vendor will be responsible for working with CIS personnel to develop these remote installation packages for unattended installation. 10. 9 Product Support: The City requires product support for the implemented system. The proposed method of product support that addresses problems/defects should be included in the proposal. The proposed method of product support should include a support staff access phone number for use by the City. This is to include all the support that is proposed to be used, such as a toll-free telephone number, voice mail, email, live person, etc.
Page 58 of 102
10.10 Vendor Access The Citys standard is RDP via VPN for server support. 10.11 Vendors and Consultants a. The City maintains connectivity with outside agencies. Any connection from these agencies will be from a Virtual Private Network (VPN) connection, if Proposer (or any of their affiliates) is offering a web-based solution. Configuration for establishing the VPN connection and all associated costs should be included in proposal. Any connectivity by the Proposer from outside the Citys facilities should be Cisco-based LAN-to-LAN using Microsoft native support tools (RDP) b. Depending on the frequency and/or number of support personnel involved, the City will disallow use of the VPN client connection for remote access or support, and may instead require vendors / consultants or outside agencies to use a site-to-site VPN tunnel for remote access to the City of Dallas network. 10.12 VPN Standards for Access and Configuration a. It is the responsibility of all authorized users of City of Dallas VPN access to ensure that unauthorized users are not allowed access to the City of Dallas internal networks including family members or others who may normally share non-City owned equipment. b. VPN access by individual users will be controlled through authentication to their Active Directory domain account. c. When actively connected to the corporate network, VPNs will force all traffic to and from the PC over the VPN tunnel; all other traffic will be dropped. d. Dual (split) tunneling is NOT permitted; only one network connection is allowed. e. VPN gateways will be set-up and managed by the Citys Information Security division. f. All computers connected to the Citys network via VPN or any other technology must use an up to date industry certified virus protection product in accordance with City of Dallas anti-virus standards; this includes non-City of Dallas owned or provided equipment. g. VPN users will be automatically disconnected from the Citys network after 30 minutes of inactivity. The user should then logon again to reconnect to the network. Pings or other artificial network processes are not to be used to keep a connection open. h. No time limit will be placed on an active VPN connection. The only limit on VPN connection time will be through enforcement of disconnection after 30 minutes of inactivity. i. When practical, maintenance (any planned downtime event not in response to a system outage) of VPN will be limited to non-critical or times of least activity (if such a period is identifiable); such maintenance will be performed in accordance with City of Dallas Change Management procedures. j. If using computers that are not City-owned equipment to access the Citys private network through a VPN connection, to minimize risk, the user should configure and
RFCSP Surveillance Camera System Page 59 of 102
maintain the equipment in accordance with, or exceeding, City of Dallas Desktop and Security standards (including an industry standard OS level, up to date software, and security patches). k. Proposers should identify any limitations of their solution using the city's proxy servers. 10.14 Software Maintenance The Proposer should make available to the City at no additional charge all updates to the software as they are released so long as the City is currently under the Proposers software maintenance agreement. 10.15 Training Requirements The City requires a hybrid training approach that utilizes both Proposer-supplied trainers as well as a train-the-trainer (TTT). a. The City requires that the software and network infrastructure be in go-live condition prior to the first train-the-trainer session. This should include end-to-end testing in the training environment to ensure system readiness and stability. b. The City will provide space sufficient for conducting the training, as well as secure site for the storing of the training equipment. c. The City requires several types of courses. The type and number of sessions required are: i. System Administrator: One (1) class session with a maximum of twelve (12) students. The length of the session is to be proposed by offeror and will be negotiated with the City during negotiations with the successful offeror. The class session will include hands-on instruction on all content related to the technical side of administering the software, server and database. ii. Train-the-Trainer: Class sessions with a maximum of 12 students per session. The class sessions will include the same hands-on instruction as the end-user class plus best-practices tips for delivering the material and of practice stand-up training by each participant. d. The Proposer is responsible for syllabi and training materials to perform all levels of training adequately. End-User guides and job aids/quick reference cards shall be developed primarily by the Proposer. All material should be provided in electronic format that can be modified with no restrictions on duplication or dissemination. The DPDTraining Coordinator shall have the right to reformat all documents as deemed necessary to match internal style use. e. If the go live date is significantly delayed due to the Proposers actions or faults, any repeat training sessions of the courses listed in Item c above of the RFP, as determined by The City, should, be performed at no cost to the City.
b. Adherence to the Citys Wireless Standards. c. All work shall be in accordance with the respective drawings, written specifications, supplemental information, industry standards, trade practice, and applicable regulatory agencies. All work will follow all such standards and procedures referenced by AIA, ANSI, BICSI, CFR, IEEE, NECA, NEMA, OSHA, UL, TIA/EIA-568 Wiring Standards, TIA/EIA 569, TIA/EIA 606, TIA/EIA-607. d. All cable, racks and hardware will be bonded and grounded in accordance with the National Electric Code. All work shall be performed by competent workmen and executed in a neat and workmanlike manner providing a thorough and complete installation. e. The engineering of cable plants will be designed by an RCDD certified engineer. f. All onsite installation technicians will have completed the IBDN 700 2 day Nordx training course, along with one technician, who has completed the IBDN- 950 10 day Nordx training course. g. All workmen shall properly protect the work site during installation, including shielding of soft or fragile materials, protect against dust or dirt, protect and support cable ends off the floor from other trades and construction. h. All workmen shall abide by all applicable state and county building and OSHA regulations. All work shall be Telecommunications Industry standard specification quality. i. Provide System architecture diagrams and narrative for the proposed solution. j. Submit bandwidth requirements. k. Submit all System connectivity requirements. 12.0 Citys FTP System a. The City maintains two anonymous FTP Servers. One is for internal use only; the other can be used internally or externally to the City. b. The City does provide a user name and password for files placed on these servers for sensitive data. For short term use, the user account expires after 24 hours. c. The size limitation on these servers is governed by connection speed. Current tests indicate a minimum of 20MB can be placed on these servers before the connection times out. d. The expectation is the Proposers solution will be able to post/retrieve data from these sites as needed. 13.0 Citys Email System The City uses Microsofts Outlook running on Exchange 2003 b. The expectation is the solution will be able to transmit emails as needed to the mobilization teams or to interested parties.
a.
Page 61 of 102
14.0 Citys Enterprise GIS (ESRI GIS ArcView 9.1) a. Enterprise GIS consist of ESRIs proprietary ArcView, ArcGIS and ArcSDE geographic information system software designed to provide spatial analysis for City decision making, mapping and planning/forecasting. Enterprise GIS components are imbedded into several enterprise programs currently running at the City of Dallas such as Computer Aided Dispatch (CAD), 311 Customer Response Management System (CRMS), Land Management System (LMS) and Capital Project Management System (CapPro). b. Expectation is that the solution will to be able to retrieve location information by selecting an area on an ESRI map using ESRI tools. The volume of GIS data collected will vary by incident.
Page 62 of 102
Question Will we have access to database schema (entity relationship diagrams, keys, etc.) and data dictionary necessary for City IT staff to understand and access database tables as needed for purposes of report development? Question We need diagrams documenting the application architecture and the various components involved in its support.
Vendor Response
Vendor Response
Question We need all technical details related to the software platform (OS, RDBMS, etc.).
Vendor Response
Vendor Response
Vendor Response
CIS Data Center Facilities: Question Give a brief description of the server environment. Vendor Response
Question Provide the exact number of servers that will be involved in this project. Question List the recommended vendor and model number of each server and other hardware regardless of the delivery date(s).
Vendor Response
Vendor Response
Vendor Response
CIS Database Systems: Question How much information is the system expected to process? Vendor Response
Question How many people will use the system at the same time? Question Will there be a reporting component to this deployment?
Vendor Response
Vendor Response
Page 64 of 102
Question What type of information will the users be entering into the system? Question How frequently will they be entering this information into the system? Question What type of legal requirements will the system adhere to? Question What type of uptime is the system expected to have? Example: 24 hours daily, 12 hours daily, 8 hours daily Database Engine Software Question What platform is the vendors Database Engine hosted Options: 1. Microsoft Windows SQL 2. Oracle On Microsoft Windows 3. Oracle on Unix 4. DB2 on Microsoft Windows 5. DB2 on Unix
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Question Does this system require a minimum database version in order to operate normally? If the answer is YES to the question, please provide responses to the questions below: Question Database Engine Minimum Version: 1. Microsoft Windows SQL Version 2. Oracle On Microsoft Windows Version 3. Oracle on Unix Version 4. DB2 on Microsoft Windows Version 5. DB2 on Unix Version RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Page 65 of 102
Database Engine License Question What is the volume of data that this system is going to handle? Question What is the structure of the database engine license. Options Include: 1. Server License 2. Processor License 3. Client Access or Named User License Vendor Response Vendor Response
Question If the license structure is Processor License, what is the vendors recommendation for a minimum processor requirement Question If the license structure is Client Access or Named User License, please provide additional responses to the questions below: What is the minimum database license count the business unit is expecting at Go-Live What is the estimated growth rate in database license count by year 2. What is the estimated growth rate in database license count by year 3 and beyond Question Does this system require additional licensing for the application tier components? If the answer is YES, please provide additional responses to the questions below: What is the minimum application license count the business unit is expecting at Go-Live What is the estimated growth rate in application license count by year 2. What is the estimated growth rate in application license count by year 3 and beyond Question Will this system have messaging capabilities built in internally or will it utilize other messaging RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 66 of 102
Question What OUTBOUND interfaces does this system provide? This may include both vendor provided interfaces and third party interfaces, including those presently being used in the City of Dallas. Please provide the number of interfaces, their resource requirements, whether they are automated or manual Question What type of ETL tools will the vendor provide for implementation?
Vendor Response
Vendor Response
Database Security Question How will clients connect to this system. The options are listed below Options Include: 1. Connections are through web access 2. Connections are through direct client connection Please note Network and Security groups may request additional information. Including the recommendation for the purchase of SSL (Secure Socket Layer) Certificates Hardware Question What is the vendors hardware recommendation? Question Is this system a turnkey system? If the response to the above question is YES, please provide responses to the following questions. How many servers is the vendor recommending for this system RFCSP Surveillance Camera System Page 67 of 102 Vendor Response Vendor Response Vendor Response
How many of these servers will be used for database hosting How many of these servers will be used for application tier hosting How many of these servers will be used for web interface hosting Will the vendor be responsible for managing all hardware issues Will the City of Dallas be required to provide sizing and scaling recommendations for this system
Question If this system is not a turnkey solution, has the vendor provided, or will provide hardware sizing recommendation to guide the City of Dallas in sizing and scaling the hardware for this system? Question Will the vendor provide an architectural design document to use during the implementation?
Vendor Response
Vendor Response
Question What is the minimum number of processor count that this system requires in order to function normally? Question On what platform is the vendors operating system solution hosted: 1. Microsoft Windows 2. Unix Solaris 3. Unix Linux 4. Unix AIX 5. Unix System V Question What type and class of server is the vendor recommending? Examples include the following classes: SUN Servers Sun Fire X2100, X4200, V240, V490, V890 Intel Servers IBM 3500 series, etc.
Vendor Response
Vendor Response
Vendor Response
Page 68 of 102
Question What is the amount of physical memory that this system requires in order to function normally. This amount does not include the memory already allocated by the operating system to the database engine. Question Does this system require storage on the production SAN or will it be using the storage on the local server? Question If this system requires storage on the local server, what is the minimum amount of storage required for this system? Please do not include storage of other system on the server. Question If this system requires storage on the production SAN, what is the minimum amount of storage that this system requires? Please do not include global swap space already reserved by the database engine.
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Question Does this system require exclusive access and use of the server hardware? Question If the response to the above question is YES, is the reason for using this system on an exclusive server hardware because of Legal reason, business unit requirement or other reasons? Question Does this system require hardware encryption to protect its data during normal operations? If the response is YES, please provide additional information on vendor recommendation for a hardware assist encryption. Question RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
If the database type is 2 tier or 3 tier, please provide additional information on the questions below: Will this system require a separate web server in order to communicate with its dependent tiers? Select the most appropriate responses from those listed below: 1. This system requires exclusive web server 2. This system will run web services inside the database engine space 3. This system will run the web services inside the application tier space Question If this system has a web component, what type of web services will it use in production? Options Include: 1. Windows IIS 2. Tomcat 3. Apache 4. IBM WebSphere Portal Vendor Response
Question Will this system require load balancing? In a high network traffic environment, load balancing is implemented to efficiently distribute network traffic loads evenly among the various servers. Question What type of reporting will this system provide. Please select the reporting types from the list below: 1. This system will provide reporting to all business units using built-in reporting functionalities 2. This system will provide reporting to all business units using external reporting engines 3. This system will not provide any reporting
Vendor Response
Vendor Response
Question If the response to the question above is 1 or 2, does vendors implementation allow for separation of reporting instances between separate servers? RFCSP Surveillance Camera System
Vendor Response
Page 70 of 102
Question Will there be a need to maintain a very high availability environment? If the response is YES, please provide responses to the questions below: What type of clustering solution does the vendor recommend? Options include: 1. 2. Hardware clustering Software clustering
Vendor Response
Question What mode of clustering does the vendor recommend? Options include: 1. Active-Active clustering 2. Active-Passive clustering
Vendor Response
Question Is this system very critical, requiring a Business Continuity planning as part of the scope? If the response to this question is YES, please provide additional information below. How long can this system be off-line and unavailable before a switch to another system is made Question What type of replication is the vendor recommending for Disaster Recovery purposes? Question What type of failover is the vendor recommending? Question Is there a need for a separate archiving storage? If the response to the above question is YES, please provide responses to the following questions: 1. What is the estimated annual data growth rate 2. What is the size of data that RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 71 of 102
needs to be archived 3. Are there any legal requirements for archiving some data and not archiving others 4. What types of parameters are to be used to process archival data. Examples include dates, types of records, etc 5. At what frequencies will the archives be performed Question Will there be a need to conduct training sessions using separate hardware? If the response to the above question is YES, how many servers is the vendor recommending. Question Will this implementation require hardware, separate from the production hardware to perform data migration? If the response to the above question is YES, how many servers is the vendor recommending. Question Will this implementation require hardware, separate from the production hardware to perform regular testing, development, updates, and proof-of-concepts prior to moving to production? If the response to the above question is YES, how many servers is the vendor recommending. Non-Database Software Question Is there any customized software, interfaces that this system requires? Question What type of ETL tools will the vendor provide for implementation? Question Provide the names of the customized software, interfaces that this system requires. Page 72 of 102 Vendor Response Vendor Response Vendor Response Vendor Response
Vendor Response
Vendor Response
Question Provide the development platform for these customized software and interfaces. Question Will the City be required to maintain this customized software? Question How will this software and other software for this system be installed? Options include remote installation or direct access installation Question How will patch management be implemented on this system and who will be responsible for it? Question At what frequency will the vendor provide patches and upgrades to this system?
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Question What mode will the patches and upgrades for this system be delivered in: Options Include: 1. Patches and upgrades from the vendor delivered through installation media 2. Patches and upgrades from the vendor delivered through manual web download Patches and upgrades from the vendor delivered by system through automatic checking and web download Question Will the City need to develop additional interfaces to this system? Question Does the vendor have a preference on the type of high availability software on which their product will function normally without resorting to additional third party tools? RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Page 73 of 102
High availability software include Clustering software, replications software and load balancing software Please note that the Citys standard for clustering is Veritas Clustering Software Question Will the vendor provide additional training for implementing high availability solutions for this system to CIS staff? Question If this system has a web component, will the vendor be responsible for configuring the above web services, including the security layers? Question Will anti-virus services be deployed on the server supporting this system? Vendor Response Vendor Response Vendor Response
Operations Question How will the system be administered: 1. Vendor administers the system 2. Joint City/vendor administers the system 3. City administers the system If the response to the question above is 1 or 2, please provide response to the question below How will the vendor require access to the server for operational issues? Options Include: Remote Access using City supplied credentials Direct Access using City provided credentials to physically gain access to the data center Question Will the system have its own internal security or will it use the Citys Active Directory. NOTE: Preference is for the system to use the Citys Active Directory. Is the application Active Directory compliant? RFCSP Surveillance Camera System Page 74 of 102 Vendor Response Vendor Response
Question Please provide the server events and database events to be monitored. Question Will the CIS be responsible for monitoring the server events? database events? Question Who will be responsible for providing patch management for the server, including the host operating system? Question Who will be responsible for providing patch management for the database system?
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Question Who will provide reporting enhancement to the system if the needs arise? Question Who will provide continuous training on the use of the system to the users? Question How will archiving of static data be managed during operations? Question How will data restore be handled if there is a need? Question What is the escalation process for issues that are not resolved within the allotted time? Question
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 75 of 102
What would be the vendor recommended maintenance schedule? Database Networking Question What type of network type and/or protocol does the vendor require this system to be on? Options Include: 1. Ethernet 2. IPX/SPX 3. IP Combinations of the above Question Does this system use a different communications protocol other than the default that is available on the database engine? Vendor Response Vendor Response
Question Does this system require a dedicated LAN or WAN? Question Does this system require encrypting data during transaction processing? Question Will this system encrypt data internally at the database level? If the response to the question above is YES, please provide responses to the questions below Does this system require hardware assisted encryption device? Question How many network cards does the vendor recommend for this system in order to function normally? CIS Information Security: Question Please give a very brief description of what the RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 76 of 102
system is for and how it will work: Question Do you have any plans for the disposal, replacement or refreshment of the system? How long is the proposed system expected to operate? Question Please can you supply us with a high-level system diagram and a diagram showing what equipment will be used, where it is located and how it is inter-connected? (Attach to the back of the questionnaire) Question What information will be stored on the system? Does the system accept data from another system and if so, what? Does the system send data to another system and if so, what? Please can you supply us with a reasonably detailed diagram of the information flows within the system and between it and other systems? Once the information is no longer needed, how will it be disposed of? Question What are the principle methods of transporting information? Examples include (but are not limited to): HTTP get; FTP; remotely mounting a file-system (e.g. Windows fileservers, Unix NFS); email. Question Will there be a need to encrypt any of the information exchanges? Please give details: Question Is your requirement likely to need a name registered on the Internet? Vendor Response Vendor Response Vendor Response Vendor Response Vendor Response Vendor Response
Page 77 of 102
Question If you are decommissioning, replacing or refreshing an existing system, how are you planning to destroy any relevant data and any cryptographic keys? Question Is there a need to install any hardware devices that act as servers? Please indicate the types and estimated number of devices: Examples include, but are not limited to: fileservers, web-servers, email servers, media stores; application servers etc. Question Is there a need to install any network hardware? Please indicate the types and estimated number of devices Examples include, but are not limited to: hubs, switches, bridges, firewalls, modems, wirelessLAN hubs, cabling etc. Question Is there a need to install any client devices? Please indicate the types and estimated number of devices Examples include, but are not limited to: desktop PCs/MACs, PDAs, phones, editing stations, modems etc. Question Please indicate if any of the devices (other than the clients) will not be installed in secured (locked) frame rooms owned and managed by the City of Dallas? If the frame rooms are not CIS or CITY owned and managed, please indicate who does own and manage them. Question Please indicate what operating systems will be running on the various devices described above. Please explain which systems will be directly accessed by users (e.g. desktop systems) and which will run in locked frame rooms (e.g. servers). RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 78 of 102
Question If any Operating System is based on Microsoft Windows and will ever be connected to any City of Dallas packet network (including, but not limited to, the Citys IP/Ethernet network), it should comply with current CIS standards for supported versions and should be based on a CIS build. This includes CIS fileserver builds; CIS desktop builds; CIS web-server builds etc. If this constraint will interfere with the systems functionality and (if compliance is not possible), please give details of how the systems will be built, patched, supported and regularly tested. [NB, non standard builds, even if approved from a security perspective, might incur an increased support charge]. Question If the Operating System is based on Microsoft Windows, or if the Operating System uses file-mounting technology, such as NFS or SMB, or file-transfer technology, such as FTP, the device MUST run a CIS approved, real-time virus-scanning system. Please indicate if this constraint will interfere with the systems functionality and (if compliance is not possible) give details of how the system will be protected from the viruses and Trojans and how it will be prevented from infecting other systems (should it become infected).
Vendor Response
Vendor Response
Question Does any of the information stored in a fileserver need to be cryptographically secured against viewing or changing? Does any of the information need to be signed to prove its origin? How is it intended to perform the encryption/signing? How will the keys be stored, transferred or destroyed? Question Will the system require the installation of any shrink-wrapped software (e.g. video editing software, word-processors etc.) that will ever be run on City of Dallas standard servers and RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Page 79 of 102
desktops, or run on systems connected to any City of Dallas network. If so, please indicate whether the software has gone through (or is going through) the CITY approval process. Question Will the system require the installation of any database system (e.g. Oracle, SQLServer etc.)? If so, please give 1) product names, 2) the expected number of Server licenses & 3) the expected number of Client licenses. Question Will the system require the development of any software? If so, please indicate whether this is being built in house or outside of the City of Dallas. Vendor Response Vendor Response
Question What languages/platforms are being used? Question What process and procedures will be applied to ensure the software is well written and designed to avoid security design faults? How will the software be maintained during its lifecycle? Question Does the software need to exchange information directly with another internal City of Dallas application? How is this achieved? Question Does the software need to exchange information directly with an external, nonCity application? How is this achieved? Question Does any of the information stored by a database or application need to be cryptographically secured against viewing or RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 80 of 102
changing? Does any of the information need to be signed to prove its origin? How is it intended to perform the encryption/signing? How will the keys be stored, transferred or destroyed? Question Please give a brief description of how the system is expected to use and interact with network technologies. A diagram should also be supplied. Question Is the system dependent on addressable network protocols, such as 1) Telephony technologies e.g. dialed-ISDN, dialed-telephony, X25, Frame-Relay, ATM-SVCs and/or 2) packet data technologies e.g. Ethernet, NetBIOS, (TCP/UDP)/IP? Question Will any computers, PCs, Servers, PDAs, appliances etc. need to operate with two network interfaces at the same time? Examples include (but are not limited to): 1) a PC with two network cards, one of which is connected to the Citys VOIP Network, and the other to a private network. 2) A PC with a network card connected to the Citys VOIP Network and a modem connected to the Internet (e.g. via dialup or DSL) or a 3rd partys network. 3) A PC with a network card connected to any Citys VOIP Network and a modem connected to the Internet (e.g. via dialup or DSL) or a 3rd partys network. 4) A device connected to the Citys VOIP network and a 3rd-party Wireless Hot-spot. Question Please indicate if the intention is to run the system over its own physical or logical LAN or WAN infrastructure inside the City of Dallas. If so, please explain your reasons for not using the Citys own internal network infrastructure. RFCSP Surveillance Camera System Page 81 of 102 Vendor Response Vendor Response Vendor Response Vendor Response
Question Other than via the City of Dallas RAS systems, externally-initiated dialed-telephony, ISDN links and IP connections are not permitted to be connected via Modem or ISDN-Terminal-Adapter to any City of Dallas systems which run Operating Systems (such as Windows, Unix, VMS etc.) or are connected to the network via Ethernet/IP connections. Please indicate if this constraint will interfere with the systems functionality. Question Internally initiated IP connections based on HTTP, HTTPS, Telnet, FTP, Real and Socks are permitted. Please indicate if these protocols are not sufficient for the system. In some cases, if a dedicated firewall is required, there may be a charge for installation and support and this will need to be budgeted for. Question What requirements will the system have in terms of automated network services, such as DNS (machine naming), DHCP (machine addressing), WINS (machine naming), LDAP (user and machine directory lookup), NTP (time services) etc? Question Is there any need to set-up a cryptographically secure link between two network devices (e.g. a IPSEC VPN or SSL link)? How will this be achieved? How will the end-nodes be protected against attack? How will the keys be created, exchanged, stored and destroyed? Question Some systems do not support user and administrator accounts. Other solutions may not be usable when accounts and logins are enabled. Please indicate if your system fits into the category and explain how the system is able to detect who is doing what to the information that it is handling. RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 82 of 102
Question Some systems do not offer a means of proving who the user is. Other solutions are not able to function properly if the users and administrators have to prove their identity. If your system fits into this category, please indicate this and give some details on how the system prevents a user (or even a complete stranger) from processing information that they are not supposed to have access to. Question How do the users and administrators uniquely identify themselves to the system (e.g. username, smart-card etc.)? Question If relevant, how do other applications or systems that need to gain access to the data uniquely identify themselves? Question How do the users and administrators prove that they are who they say they are (e.g. password, smart-card, securID etc.)? If passwords are used, will they be configured to meet the Citys Information Security guidelines for password length, complexity and frequency of updates? Question If relevant, how do other applications or systems that need to gain access to the data prove that they are the system they claim to be? Question How does the system hand out the necessary privileges needed for an individual to do their job? How does it prevent people or systems accessing material or information if they dont have the right? Question If relevant, how does the system hand out the necessary privileges for another application RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 83 of 102
or system to gain the correct access to information? How does it prevent access to the wrong material? Question Will your system be able to integrate with any or all of the following: Microsoft NTLM authentication? Microsoft Active Directory? RADIUS? Kerberos? PKI? Question What logs are kept of successful/unsuccessful usage attempts? Question What training will be needed by users and administrators to ensure they understand how to use and operate the system securely? Vendor Response Vendor Response Vendor Response
Page 84 of 102
You will need to indicate if your system needs to comply with any of the above. Question Will the system need to store information about living individuals? Question Will the system be used to store financial details? Will it need to store credit card details? Question Does the system need to be registered under the terms of the Data Protection Act? Page 85 of 102 Vendor Response Vendor Response Vendor Response
Question Please state which legislation applies (see the list above). Question Will the system have a site or portal enabling external users to contact the City of Dallas? Question Will the system have information that is held for legal compliance reasons?
Vendor Response
Vendor Response
Vendor Response
Question What information will an external user need to provide and what is the purpose of their interaction with the system? Question Does the system need to keep functioning even if local services (such as human access to the site and mains/chilling) are restricted due to an unforeseen event? Question If the system is affected by an external event, how long can it be unavailable before major problems ensue? 1. Product Documentation: Product Documentation Question What documentation is available with this product? In what formats is the documentation available? Does some or all of the documentation require online support or internet connectivity? Data Dictionary Question Do users of this product get an updated copy of the data dictionary with every release of the product? RFCSP Surveillance Camera System
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Vendor Response
Page 86 of 102
Product Training: Time To Train a CSR Question How much time it take to train a CSR to use the system? Time To Train Operations Support Personnel Question How much time is required to train operations support personnel? External Interfaces: External Interfaces Question What are some of the common external interfaces built into the product? How difficult is it to incorporate a new external transaction interface to the product? Vendor Response Vendor Response Vendor Response
Performance and Capacity Management: Capacity and Performance Benchmark Question Have any tests been performed to measure the throughput capacity and overall performance of the product? If yes, were these test done at an independent site or the vendors laboratory? If these tests were documented, please provide a copy of the document prior to any product architectural presentation. Number of Concurrent Users Question What is the maximum number of concurrent users allowed by the system without any performance degradation? At the City of Dallas: Product Currently being Used at the City of Dallas Question Is this product or some other version of the product currently being used at the City of Dallas? RFCSP Surveillance Camera System Page 87 of 102 Vendor Response Vendor Response Vendor Response
Other Products of Your Company Question Are there any other products of your company currently being used or evaluated at the City of Dallas? Provide details. Vendor Response
Page 88 of 102
7.3 Non-Functional Requirements List Non-functional requirements captures conditions that do not directly relate to the behavior or functionality of the solution, but rather describe environmental conditions under which the solution should remain effective or qualities that the system should have. They are also known as quality or supplementary requirements. They do not have a documented use case.
The following list represents the non-functional business requirements for the Surveillance Camera System. Req # 7.3.1 7.3.1.1 7.3.1.2 7.3.2 Usability The system cameras must be able to quickly be relocated. System configuration must be flexible and easily scalable. Reliability The system will have the ability to will provide a minimum guaranteed service availability rate (uptime rate) of at least 99.9 percent. The system will Operate continuously: 24 hours a day 365 days a year Performance The cameras should be located so as to provide clear and unobstructed video feeds, The system must should allow the user to quickly control the zoom/panning capabilities of the camera. Requirement Proposers Response Additional Costs Comments
Page 89 of 102
Req #
Requirement The system should allow the user to clearly identify the location/time of the camera and the area being recorded. Supportability The system should enable staff to add new hardware, software upgrades, and or maintenance without disruption of service. Security The system should have the ability to meet or exceed industry standard security requirements. The system must comply with all Criminal Justice Information Standards (CJIS) requirements. The system should utilize encryption technology to secure video feeds. The system should meet minimum FIPS and NIST security standards. The system should be active directory compliant. System should be secure to prevent unauthorized access and provide layers of access security for users. Maintenance/Serviceability The system should be easily serviceable for repairs and maintenance. The Vendor should provide maintenance coverage plan including: Routine services provided on a periodic basis such as onsite maintenance and cleaning. Routine and as needed lens cleaning from condensation, rain, ice, dust, dirt or any other obstruction.
Proposers Response
Additional Costs
Comments
7.3.3.3 7.3.4 7.3.4.1 7.3.5 7.3.5.1 7.3.5.2 7.3.5.3 7.3.5.4 7.3.5.5 7.3.5.6 7.3.6 7.3.6.1 7.3.6.2 7.3.6.3
7.3.6.4
Page 90 of 102
Requirement Emergency response services including guaranteed response time Hours and days of coverage Equipment replacement procedures, including onsite or depot parts repair and replacement Response time for each service call, including: a. System Outage b. Network control center outage c. Camera network outage impacting 25% of cameras Escalation procedure from first call to highest level respondent Detailed procedure showing knowledgeable first-time response to service calls Detailed breakdown of all maintenance costs for all equipment, software and services beginning at the end of the warranty period and extending through year five. Any Optional Maintenance service plans. Support The Vendor shall detail the technical and operational support that will be provided: Telephone support (e.g., include toll-free support hotline, hours of operation, availability of 24 x 7 hotline, etc.). Special plans defining levels of support (e.g., tier 1, tier 2, etc.). Delivery method of future upgrades and product enhancements including historical frequency of upgrades by module. Problem reporting and resolution procedures. Bug fixes and patches.
Proposers Response
Additional Costs
Comments
7.3.7.2 7.3.7.3
Page 91 of 102
Requirement Support provided for third-party solutions. Other support (e.g., on-site, remote Web site access to patches, fixes and knowledge base). Texas Occupational Code The Vendor that will access the Citys network or install equipment must be appropriately licensed and certified under Texas Occupational Code 1702 as a Security Company and to maintain that license / certification for the life of the contract.
Proposers Response
Additional Costs
Comments
7.3.8.1
Page 92 of 102
Req # 7.4.1
Requirement
Regulatory / Legal
The system must comply with all Criminal Justice Information Standards (CJIS) requirements. This system must comply with all State of Texas laws This system must comply with all City of Dallas Local Judicial Rules The system should comply with FIPS and NIST standards
7.4.1.1 7.4.1.2
7.4.1.3 7.4.1.4
Page 93 of 102
Requirement Digital Camera Specifications All cameras shall be outdoor rated and have Pan/Tilt/Zoom (PTZ) capabilities. All cameras will provide excellent resolution out to a minimum distance of 500 feet. Excellent resolution would be the ability to clearly read a 3 inch letter (license plate) at that distance. The cameras should be capable of operating in all light conditions, to include low light and near dark conditions. The following are the minimum hardware requirements for the cameras. The requirements listed are minimum guidelines and it is expected for the vendor to recommend cameras that may meet or exceed all of the requirements. - 1.4.1 Resolution: 530 lines - Minimum Illumination: Color 1.4 lux, B/W: 0.06 lux - Backlight on/off adjustable - Iris control: auto/manual - Focal length: 3.4-122.4 mm - Optical zoom: 36x - Aperture max: F1.6-4.5 - Pan Angle: 360 endless - Pan Speed: 300/sec - Tilt angle: +-90 - 0 - Tilt Speed: 300/sec - Operating Temperature: 0-170
Page 94 of 102
Req #
Requirement - Heating/Cooling Fans - Programmable movement and preset positions - Motion and Object Detection - Ability to switch between color and BW based on amount of available light (lux) Limited number of cameras may need the ability for infrared capabilities. Camera Intelligent Behavior Recognition The camera system shall be able to provide real-time alarming on unattended object to flag items left behind in an area. The camera system shall be able to provide real-time alarming on missing object to flag items removed from an area. The camera system shall be able to provide real-time alarming on people/objects entering an identified area. The camera system shall be able to generate alerts or sounds an alarm when user-defined security rules are violated. The camera system shall be capable of object counting defined by object size, direction of movement and area Object search; ability to define an area and find missing objects/vehicles. The camera system shall be able be capable of motion detection, round-the-clock or by schedule recording mode. The camera system shall be capable of pre and post event recording on motion detect. The camera system shall have adjustable sensitivity level of motion detection. The camera system shall have Forensic Analysis ability Wireless Network The camera system will need to transmit video feeds wirelessly over a commercial Wireless IP cellular
Proposers Response
Additional Costs
Comments
Page 95 of 102
Req #
Requirement broadband network. The service provider is responsible for the design and implementation of all the necessary components for the IP wireless network: geographic/network coverage assessments, configuration of cameras/carrier network cards, and any other necessary infrastructure, software, and carrier components The camera system should be secure to prevent unauthorized access and provide layers of access security for users. The camera system will support contingency mechanisms to ensure operation during a natural or other disaster. Respondents will describe their proposed disaster recovery plan for the Network. The camera system will be easily scaled and upgraded in a modular fashion to support additional cameras. Power Supply The camera power supply shall have the ability to operate on an uninterrupted 110 VAC power supply, 24hours a day 365 days a year. The Vendor will describe automatic camera operation recovery after restoration of power. The Vendor will describe power maintenance requirements. Camera Enclosure Specifications The camera enclosure shall have the ability to be covertly disguised as to not reveal its identification as a camera The camera enclosure shall also have the ability to be overtly displayed The camera enclosure shall be constructed of a material that is rugged and not subject to heat or distortion under extreme outdoor/weather conditions, nor should it be
Proposers Response
Additional Costs
Comments
7.5.3.2 7.5.3.3
7.5.3.4 7.5.3.5 7.5.4 7.5.4.1 7.5.4.2 7.5.4.3 7.5.5 7.5.5.1 7.5.5.2 7.5.5.3
Page 96 of 102
Req # 7.5.5.4 7.5.5.5 7.5.5.6 7.5.5.7 7.5.5.8 7.5.5.9 7.5.5.10 7.5.5.11 7.5.6 7.5.6.1 7.5.6.2 7.5.6.3
7.5.6.4 7.5.6.5
Requirement generally subject to damage or tampering. The camera enclosure shall be waterproof under normal and severe rain conditions. The camera enclosure shall allow for the proper cooling and heating of the camera in order to work as intended. The camera enclosure shall be able to provide the proper ventilation and airflow in accordance with the specifications of the camera selected. The camera enclosure shall be able to be attached to street light poles, traffic signal poles and utility poles. The camera enclosure shall be able to be attached to buildings. The camera enclosure shall be able to be moved and installed in a simplistic manner. All mounting devices and casing enclosures should be designed to be installed by a single individual of average size. Installation and removal of all mounting devices and casing enclosures should be achieved by the utilization of standard tools. Camera Installation/Location The Surveillance Camera Systems will be located in approximately 10-12 high crime areas. Each crime area covered will contain approximately 1012 Surveillance Cameras. It is estimated that cameras may need to have the ability to be relocated as frequently as once per 90 days. The service provider is expected to manage the entire process for installation and relocation of cameras: gather permits, utility agreements, camera assembly/disassembly, installations, network setup, configuration, and testing. Surveillance Cameras will be installed on street poles,
Proposers Response
Additional Costs
Comments
Page 97 of 102
Req #
7.5.6.6 7.5.7 7.5.7.1 7.5.8 7.5.8.1 7.5.8.2 7.5.8.3 7.5.8.4 7.5.9 7.5.9.1
Requirement buildings, or other permanent fixtures and be out of the reach of passing vehicles and the general public. The system shall be able to display clear views, with no obstructions from objects, shadows, or light distortions. General Camera System Specifications The system should be compatible with Windows XP or better. Digital Video Recording Specifications System should deliver real time or near real time video to all components. The system shall be capable to display video feeds consistently up to 30 FPS. The system shall be able to store and archive video feeds 24hrs a day 7 days a week. The system shall be able to store and archive video feeds for a period of at least 14 days. Video Monitoring Specifications The camera system will need to function with OnSSI, DPDs current video monitoring software. The camera system should be internet based and capable of being monitored from remote locations. These include at a minimum, - Dallas City Hall, Jack Evans and all DPD substations - In police vehicles - Laptops The camera system shall be able to display 720 x 480, 640x480 & 320x240 resolution The camera system shall be able to display a map that displays the locations of video cameras within the city The camera system shall be capable of playback of archived video for 1 to 16 cameras at once in a single screen The camera system shall have dual view; ability to look
Proposers Response
Additional Costs
Comments
Page 98 of 102
7.5.9.12 7.5.9.13 7.5.9.14 7.5.10 7.5.10.1 7.5.10.2 7.5.10.3 7.5.10.4 7.5.10.5 7.5.10.6 7.5.10.7 7.5.10.8
Requirement at live and archived video at the same time in 2 monitors The camera system shall allow video play back with search by date & time The camera system shall have snapshot ability The camera system shall have MPEG4 compression or equivalent The camera system shall have the ability for digital water mark and time and date stamp The camera system shall allow the user to control camera movements: panning, tilting, and zoom in/zoom out. The camera system shall have the ability to choose preset camera assortments The camera system shall have the ability to view archive video files The camera system shall have the ability to save live and archive video stream. DPD Mobile Camera Trailers (MCT) DPD shall also require the need for approximately 4-6 Mobile/Portable Cameras Systems. The mobile camera trailers need to be a self contained system. The mobile camera trailers need to be a self powered system. (examples: Solar, Generator, Battery) The mobile camera trailers shall also be able to be plugged into standard power outlet. The mobile camera trailers shall have a camera mounted telescoping mast system. The mobile camera trailers shall record and transmit 24/7. The mobile camera trailers shall transmit video feeds wireless via cellular wireless broadband technology. All other requirements specified in this document will be
Proposers Response
Additional Costs
Comments
Page 99 of 102
Req #
7.5.11.8 7.5.11.9
Requirement applicable to the mobile camera trailers. The cameras selected must also be able to be retrofitted into DPD existing equipment. (example: DPD mobile observation towers) Video Synopsis (VS) The VS system should be compatible with DPDs OnSSI Video Management Software. The VS system should be able to support up to all of DPDs surveillance cameras. The VS system should be able to be scaled down to support only selected cameras The VS system should be easily configurable to change synopsis capabilities to different cameras as necessary. The VS system should be able to function with PTZ cameras as well as fixed cameras. The VS system shall average a video synopsis rate of 1 hour of video = 1 minute of synopsis. The VS system should be able to function in High Traffic areas such as intersections, highways, or bridges. The VS system shall be capable of video synopsis of live on line camera feeds for On Demand analysis. The VS system shall be capable of retrieving archived video feeds from various camera channels for Post Event analysis. The VS system shall allow for users to define the time period for video synopsis. The VS system shall allow for users to define the object density for video synopsis. The VS system shall allow for users to define the video speed for video synopsis. The VS system shall be capable of analyzing video feeds that are saved and loaded from other video sources.
Proposers Response
Additional Costs
Comments
Req #
7.5.12.2 7.5.12.3
7.5.12.4
Requirement (Example: private video camera recordings). The VS system shall be capable of indexing objects in video synopsis which includes timestamps of objects in video. The VS system shall have filtering capabilities such as size of object, direction of traffic, and color of object. The VS system shall have the ability to click on an object on synopsis video and load the original video feed at that point in time. The VS system shall have the ability to save and export synopsis videos. The VS system shall have the ability to save and export original camera videos. The VS system shall have alerting/reporting mechanisms that would allow user to determine if any activities occurred during specified time period. Other System Requirements A full and complete set of operating instructions shall be included for the system The vendor shall warranty the System to be free of defects in materials or workmanship. This warranty shall not extend to finish, appearance items, or malfunction due to abuse, neglect, misuse, accidents or operation under other than specified conditions. The vendor shall provide a 5-year full warranty and onsite service with 4-hour response time (Mon. through Sun. 8:00 am - 5:00 pm) The vendor shall have a dedicated service department locally based in the Dallas/Fort Worth area and may not contract out the warranty or the follow-on service plan. Service response shall be within four hours from notification of system casualty.
Proposers Response
Additional Costs
Comments
Proposers will be required to adhere to the Service Level Thresholds established in the attached SLA Document (Appendix H).