Security Cameras and Lenel HSPD-12/FIPS 201-3 Compliant Door Access Control Systems - Installation, Service, and Maintenance for the Great Plains Area Indian Health Service (GPAIHS), Office of Information Technology (OIT) Department, Aberdeen, South Dakota

Sources Sought Notice

This notice is a market research tool to determine the availability of qualified Indian Small Businesses Economic Enterprises (ISBEEs) and Indian Economic Enterprises (IEEs) capable of performing a requirement for security cameras, Lenel HSPD-12/FIPS 201-3 compliant door access control systems, installation, service, and maintenance for the Great Plains Area Indian Health Service (GPAIHS). This is NOT a solicitation, request for proposal, or invitation for bid. No contract will be awarded from this announcement.

• Design, furnish, install, and maintain Homeland Security Presidential Directive 12 (HSPD-12) compliant Physical Access Control Systems (PACS) and video surveillance systems and alarms.

• Systems must comply with HSPD-12 and FIPS 201-3 standards.

• Maintain fully functional, continuously operating door access and video surveillance systems.

• Provide secure, auditable, and centrally managed access.

• Integrate panic devices and intrusion detection systems.

• Minimize system downtime and security vulnerabilities.

• The contractor must be certified or have a certified sub-contractor in LenelS2 OnGuard software applications and hardware installation/maintenance.

• A Windows OS Server upgrade is anticipated during the contract period.

• Anticipated contract type: Firm-Fixed-Price, Indefinite-Delivery/Indefinite-Quantity (IDIQ).

• Anticipated period of performance: 5-year ordering period.

• Place of performance: Designated federal facilities within the Great Plains and Billings Area, including North Dakota and South Dakota.

• This is a Sources Sought notice, not a solicitation. Responses are capability statements.

• Interested parties should submit capability statements via email to Wenda Wright at wenda.wright@ihs.gov.

• The due date for receipt of statements is April 24, 2026, at 4:00 p.m. Central Standard Time (CST).

• Capability statements should not exceed 10 single-sided pages and must include specific information such as company name, POC, UEI, business size, capability narrative, past performance, and certifications.

• The government is determining the appropriate acquisition method, including whether a set-aside is possible for ISBEEs and IEEs.

• Applicable NAICS code: 541519 (Other Computer Related Services).

• Respondents must be registered on the System for Award Management (SAM.gov).

• No reimbursement will be made for costs associated with providing information.

• Responses will not be considered adequate responses to a solicitation.

• The government reserves the right to use information provided for any purpose deemed necessary.

• No proprietary, classified, confidential, or sensitive information should be included in responses.

Form / Attachment / Pricing Sheet

This document is an Excel spreadsheet listing CLINs (Contract Line Item Numbers) for items and services related to an Indefinite Delivery, Indefinite Quantity (IDIQ) contract for Access Control/Video Surveillance/Intercom/Panic/Intrusion systems. It serves as a guide for bidders to provide pricing for option year costs.

• Itemized List: Provides a numbered list of specific equipment and services.
• Descriptions: Details the type of equipment (e.g., cameras, door readers, software licenses, network switches, cabling) or services (e.g., installation, project management, software assurance, service and support).
• Unit Type: Specifies the unit of measure for each item (e.g., EA for Each, PER HR for Per Hour, FT for Feet).
• HSPD12 Compliance: Several items explicitly mention HSPD12 compliance, indicating a requirement for identity credentialing.
• Networking and Cabling: Includes a comprehensive list of networking hardware, cabling, connectors, and patch panels.
• Support and Maintenance: Lists options for software assurance and service/support contracts.

This document is crucial for bidders as it outlines the specific types of products and services that may be procured under the IDIQ contract. Bidders should use this list as a template to understand the scope of potential orders and to prepare their pricing proposals for the various CLINs, including option years. It helps in assessing the technical requirements and the breadth of offerings expected.

Statement of Work (SOW) / Performance Work Statement (PWS)

The Indian Health Service (IHS) aims to enhance the safety and security of its patients, staff, and facilities by designing, furnishing, installing, and maintaining Homeland Security Presidential Directive 12 (HSPD-12) compliant Physical Access Control Systems (PACS) and video surveillance systems. This includes compliance with Federal Information Processing Standard (FIPS) 201-3 and other applicable federal security and privacy regulations.

• Installation, configuration, integration, service, and ongoing maintenance of security camera systems, intrusion alarms, and Lenel door access control systems.

• Contractor must be certified or have a certified sub-contractor for LenelS2 OnGuard™ software applications and hardware.

• Government retains rights to all data, hardware, and software, with full access to all system elements.

• Existing infrastructure includes Recording Servers, Access Panels, Lock Power Supply, Cameras, Card Readers, Electrical Strikes, Exit Door Push Buttons, Panic Buttons, alarm systems, and Door Monitor Switches.

• Current software: Milestone Systems XProtect Corporate (Surveillance), OnGuard and Lenel (Access Control).

• Estimated minimum hardware: 535 Door Readers, 225 Door Reader Modules, 56 Lenel Controllers, 80 HSPD12 PAM Modules, 800 Interior IP Cameras, 120 Exterior IP Cameras, 30 Virtual Servers, 80 Panic Buttons, 15 Intercom master door stations with 36 Doors.

• Contractor is responsible for Windows OS Server upgrades and maintenance for recording servers.

• Contractor responsibilities include providing transportation, maintaining competence and integrity, notifying COR of delays, installing/maintaining IP-based security cameras and infrastructure, installing intrusion detection systems and panic buttons, installing Lenel OnGuard hardware/software, integrating access control with PIV credentials, configuring badge readers for multi-factor authentication, and providing network integration.

• System integration must be seamless with existing physical security systems and synchronize with Active Directory, PIV card database, and other federal identity management systems.

• PACS core uptime: ≥ 99.5% monthly (Remedy: Credit 5% MRC/site per 0.1% below 98.5%).

• VMS recording uptime: ≥ 99.5% monthly (Remedy: Same as above).

• Patch currency (Critical/High): ≤14 / ≤30 days respectively (Remedy: Finding on quarterly audit = corrective action plan in 10 days).

• Backup success (servers/config): ≥98% monthly (Remedy: Restore test failure = plan & retest in 5 days).

• APL attestation: Quarterly, no gaps (Remedy: Gap = stop-work on non-APL work until resolved).

• Government QA will review monthly logs, sample doors/cameras, and change records against the QASP.

• Acceptance & Commissioning: Includes design package acceptance, function tests (door, PIV, video), security verification, performance tests, documentation & training delivery, and a 30-day burn-in defect period.

• Period of Performance: 12-month base period from award, with four (4) 12-month option periods.

• Place of Performance: Designated federal facilities throughout the Great Plains and Billings Area. A list of specific cities and estimated square footage is provided.

• Compliance: HSPD-12, FIPS 201-3, NIST SP 800-116, DHS 4300A, Federal Acquisition Regulation (FAR), Privacy Act, HIPAA Security Rule, and others.

• Vendor Credentials: Aruba Gold Partner, Cisco Gold Partner, Cisco CCNP Routing and Switching, CCNP Data Center, PMP, ITIL, manufacturers and CISSIP certified personnel, Leviton Certified Technician, LenelS2 Certified Partner.

• Government-Furnished Equipment (GFE): May include badges, network access, and secure storage space.

• Contractor Personnel: Must undergo background checks and adhere to facility access protocols and cybersecurity/physical security regulations.

• Constraints: Must procure APL-validated PACS solutions, comply with §889 prohibitions, never lock out the Government, and observe confidentiality/privacy requirements. Indemnification, liability, and statute of limitations provisions are waived and governed by federal law.