HomeMy WebLinkAboutbocc.con.074-2015A uI= I
r It'N Pitkin County
C
Co UN ie Contract Cover Sheet
Please complete the Contract Cover Sheet when the contract is completed and signed by Contractor and Pitkin County
Project Manager.
Return all Contract Cover Sheets and Contracts/Change Orders/Amendments to Procurement
(procurement help(c�pitkincounty.com).Any contracts$50,000 and over will be routed for signatures to County Manager
and Attorney's Office(if required)by Procurement&Contracts Manager.
Contract Information
Contract Number 074-2015A
Project Name Airport Identity Management Upgrade
Contractor Quantum Secure
Budget Line Item 404.66.92400.86617 For this change order
Additional Budget Line Item(s) 404.66.00000.82000 For the service contract
and special notes to Finance
Contract Start Date 4/1/2015
Contract End Date 3/31/2016
Automatic Renewal Yes 0 No®
If Construction: Retainage
If this is a new contractor,please request they complete and submit to Finance a W-9 Form.
Contact Information:
Department Airport
Project Manager Brian Grefe Project Manager 429-2853
Phone
Provide a brief description of the contract:
Airport Management Identity Upgrade
Contract Value Summary:
Contract Amount 26,763.00
This Change order/Amendment amount(if applicable) 74,900.00
New Contract Total 101,663.00
Procurement Method:
None ❑ Informal❑ Formal ❑ Sole Source El Emergency 0 Contract Renewal 0
Contract Type:
Services/Maintenance ® Construction ❑ Goods,Equipment, Supplies ❑
Change Order/Amendment ® Other,please explain 0 Click here to enter text.
NOTE: CLERKS OFFICE WILL KEEP ORIGINAL DOCUMENTS IN COMPLIANCE WITH COLORADO STATE
ARCHIVES RETAINAGE SCHEDULE.ALL ATTACHMENTS MUST BE WITH THIS CHECKLIST.
Contract# 074-2015A Rev.8.31.11 jaa/js
Budget Line Item#404.66.92400.86617 •
Al -if. .I N
CHANGE ORDER/CONTRACT AMENDMENT
Change Order Number:
OWNER: Pitkin County
0233 E.Airport Rd
Aspen,Colorado 81611
CONTRACTOR: Quantum Secure
100 Century Center Ct.Suite 800
San Jose,CA 95112
The Provision of Contract for Provision of Services(the"Agreement")dated April 1,2015 between the Board of
County Commissioners of Pitkin County (the "County") and Quantum Secure (the "Contractor"), is hereby
amended as follows:
Description of Change:
This is an upgrade to version 4.9 of the Airport Identity Management program.The Statement of work is attached.
Reason for Change
TSA regulations arc rapidly changing and have changed significantly since the installation of this program. This
upgrade brings the airport's identity management software up to date and will comply with all current applicable
regulations and Security Directives. This was a planned and budgeted project.
Original Contract Price $26,763.00
Net Increase/Decrease in Contract Price(this change order) $74,900.00(New G.L.Code)
*Total Adjusted Contract Price(including this change order) $101,663.00
In all other res ect the Agreement is in full force and effect and remains unchanged by this Amendment.
. 7 a— W/e.)4 015
Conte« - Date
,e�ia r- - «.-- I -.40
Procurement I fficer Date
- -
County?o)nager Date
*Increasesover$25,000 and/or 10%(single increase or accumulative)of original contract must have County
Manager signature.
._V_.(1E�TILl VI_. `,_.C;!_90 6L)1 ca IIC_^E cu oc]t113._,10 11111711„IIII!1161 iill1 a1
(7., ,, .. -:: - :.
SAFE FOR AVIATION
Airport Identity Management Solution
4.9 Upgrade - Statement of Work
Aspen / Pitkin County Airport (ASE)
r .
x -
„_,kiposslowirif7,,N \ .,--- (f((
`.Ione w ro :�
Ill
..-,�, _.."•, �w:�.ioeawsea�.esi.•mwir. .__.,. .•.x..- - .,,.. ,: ,.
Andy Kuchel
Quantum Secure, Inc.
100 Century Center Court, Suite 800
San Jose, CA 95112
(408) 753-5154
akuchel@quantumsecure.com
ti
Table of Contents
Table of Contents 1
1 Document Overview 2
2 Project Scope/Objectives 2
3 Project Approach 3
4 Project Tasks&Timelines 3
5 Customer Responsibilities/Assumptions 5
6 SAFE for Aviation Optional Modules 6
7 SAFE for Aviation Peripherals Software 7
8 Professional Services 8
9 Professional Services Pricing 9
10 Approvals 9
QUA\TUV SECURE
1 Document Overview
The purpose of this document is to confirm a common understanding of a follow-on deployment and/or
upgrade of an existing SAFE for Aviation airport identity management solution.This document captures
the initial project scope,approach, and high level functional and technical plans from our understanding
of the requirements.
2 Project Scope/Objectives
Aspen Pitkin County Airport (ASE)wishes to take advantage of the latest edition of SAFE for Aviation—
Version 4.9.The airport has been running SAFE for Aviation version 4.0 since 2010 and is primarily
interested in this upgrade to meet the following business requirements:
Objectives of upgrade:
• Increase capabilities from SAFE's Authorized Signatory Portal to potentially require all
signatories to use this portal as the means to submit applications, authorize renewals, perform
audits, request badge upgrades/downgrades,and to commit terminations.
• Improved reporting capabilities and features.
• Provide capability for Metal Key Audits as part of the SAFE Asset Manager Module 4.9.
• Provide capability for Infraction Management as part of the SAFE Infraction Manager Module
4.9.
• Provide capability for Finance Management as part of the SAFE Finance Manager Module 4.9.
Training objectives:
• On-site support from Quantum Secure's Aviation trainer during a portion of User Acceptance
Testing (UAT)
• On-site support from Quantum Secure's Aviation trainer during cut-over process
• On-site support from Quantum Secure's Aviation trainer during stabilization period
• On-site support for Operator Documentation &Training
• On-site support for Authorized Signatory Portal Training& Limited Release
• Additional webex training days for ongoing training needs
Confidential-SSI Page 2 of 2 SAFE for Aviation SOW ASE v0 8(1)
QUA\TUV SECURE
3 Project Approach
This section serves to provide a high-level overview of the upgrade procedure. During implementation a
detailed Method of Procedure(MOP) Document shall be written for the upgrade steps and followed
during the cut over.
ASE currently has two servers available for use with SAFE:The current production server and the User
Acceptance Test(UAT)Server.The plan is to upgrade SAFE on the UAT Server to version 4.9, and then
convert the UAT Server to become the Production Server during cut-over.The current Product Server
will then become the new UAT Server.
The majority of the upgrade will be conducted remotely with an on-site visit at the airport to support
training,go-live cutover, and Customer Care.
4 Project Tasks &Timelines
ASE Target
High-Level Tasks, Dependencies,and Timeline Estimates Dependencies Date/
Estimate
UAT Server Upgrade:ASE's IT team is responsible for upgrading the
current UAT Server's Operating System(OS)to Windows Server 2008
(32 or 64-bit depending on hardware requirements)and Microsoft SQL ASE IT to TBD
Server has also been upgraded to 2008.Once this is complete,Quantum provide date
Secure will install SAFE V4.9 on the upgraded UAT Server.
Data Migration:All data from the current SAFE system will be migrated
to the SAFE 4.9 server.This will include Person,Card and Privileges etc. Access to ASE 3 Days
including Badge Templates and privileges. data
Reconciliation with CCure 800:A complete reconciliation of all cards
and access levels between CCure 800 and SAFE will be completed. none 1 Week
Data Review: Reconciliation reports shall be produced and data that
requires review shall be added to a spreadsheet and reviewed with the ASE Review 1 Week
ASE team.
Controlled Integration Testing:The integration between CCure 800 and
SAFE will be thoroughly tested on the upgraded server. none 1 Week
User Acceptance Testing:ASE team will participate in guided review of
each section of the application where changes in functionality exist to ASE 1 Week
verify data and functional acceptance. Participation
Operator Documentation&Training:On-Site Instructor-led training for ASE
the ASE operational teams—includes SAFE for Aviation—Credentialing, 3 days
Infractions,Assets, etc... and Authorized Signatory portal training. Participation
Confidential-SSI Page 3 of 3 SAFE for Aviation SOW ASE v0 8(1)
QUA\TUV SECURE
Authorized Signatory Portal Training&Limited Release:On-Site
planning and education for limited release pilot of authorized signatory ASE 2 days
portal. On-Site instructor led training for selected authorized Participation
signatories.
Cut-Over Process:During this process the upgraded UAT Server will be ASE's IT team
converted into the new Production Server. support
A Method of Procedure(MOP)document shall be published which shall Weekend
dictate each step from taking down the current Production Server, until Activity-Friday 3 days
SAFE V4.8 is up and operational on the new Production Server. evening after
the badging
office is closed
Stabilization Period:On-site customer care to insure badge office none 1 day
opening goes smoothly and any issues are immediately addressed
Additional WebEx based training days:Additional training days offered ASE 2 days
via WebEx for ongoing training/support needs.Time/Date TBD by ASE Participation
Confidential-SSI Page 4 of 4 SAFE for Aviation SOW ASE v0 8(1)
QUA\TUV SECURE
5 Customer Responsibilities/Assumptions
The following assumptions have been used to create this SOW and are subject to further verification in
project:
• Senior management must support the project with timely business decisions.
• Quantum will provide reconciliation reporting to assist in identifying data anomalies, but data
cleansing is the sole responsibility of airport and will be performed in a timely manner to adhere
to key project milestone dates.
• Quantum Secure will identify in advance and airport will commit necessary resources,security
application documentation, interfaces to systems and PACs when required and will ensure their
availability through the implementation.
• Airport is responsible for all commercial and project dependencies of integration to third-party
systems and services—CBT, DACS, PACS,etc.
• Airport is responsible for all commercial and project dependencies for required hardware,
workstations, peripherals, networks,etc.
• All necessary system parameters for various integration points(APIs, Web Services, Database
Schemas, Field Mappings, interface configurations,etc.)are made available prior to the start of
the deployment.
• Remote access to SAFE Test Systems is required for Quantum named staff.
Airport and Quantum understand that adherence to the above assumptions is critical to the success of
the project. Non-adherence will affect project schedule may incur additional costs through Change
Orders.
Confidential-5S1 Page 5 of 5 SAFE for Aviation SOW ASE v0 8(1)
QUANTUV SECURE
6 SAFE for Aviation Optional Modules
The following are the modules of the SAFE for Aviation Identity Management Solution included in this
proposal:
SAFE for Aviation Optional Modules
Financial Manager-Tracks and manages fees associated with badging, background
checks,fingerprinting and issuing of any physical security assets.Allows users to
charge fees to a person or his/her employer. Provides an interface to manage Required
fees/tariff for various services and invoicing to tenants.Can be configured for Escrow
account draw.
Infraction Manager(Violations)-Provides capability for organization to log any type
of security policy infractions and associated penalties against airport worker identities
Required
for use in triggering notifications to appropriate parties as well as automatic badge
and privilege revocation if appropriate.
Asset Manager(Metal Keys)-Provides central management, issuance,and audit of
one or multiple physical security assets;ex. (Metal Key, Fobs,Tokens,Vehicle,Cell Required
Phone,etc.) Provisioned to identities managed within SAFE for Aviation core.
Vehicle Manager—Manages permit issuance,audits,and vehicle details for land side Not
and airside vehicles associated with companies and their workers. Required
Mobile App—supporting user interactions using all common type mobile devices— Not
iPhone/Android for convenience -notifications, infraction issuance,etc. Required
Appointment Manager—configurable appointment scheduling for use by Authorized Not
Signatories and Applicants/Badge holders. Required
Watch List Manager-Manages internal list of physical identities that are potential Not
threats to an organization along with their risk profile and historical details. Includes Required
complex search algorithm to match identities including visitors on watch list.
Aviation Analytics-Provides business information trending and metrics to measure
operational activities and credential issuance and usage. Metrics include identity and Not
badge categories,employer activity trends, badge allocation trends, unused badges, Required
badge usage,site utilization,etc.
Visitor Manager-Standalone web-based solution for visitor pre-registration,visitor Not
check-in/check-out,and badge printing functions. Integrates with different peripherals Required
for streamlining and automation. Can be configured with kiosks(priced separately).
SOC Console—Operator console for SOC and Communications type operator functions Not
allowing view(read only)of appropriate identity information;Supervisory role may Required
suspend a badge.
Event Correlation-Allows data exchange between SAFE and PSIM systems like NICE, Not
Proximex and VidSys through web services. Required
Confidential-SSI Page 6 of 6 SAFE for Aviation SOW ASE v0 8(1)
QUA\TUV SECURE
7 SAFE for Aviation Peripherals Software
Quantum Secure supports a number of devices in each of the categories below.We don't supply the
hardware but will work with you to recommend peripherals/hardware that supports the systems you
have already invested in at your airport.
Hardware/Peripherals Controls(Modules provide policies and drivers for use of
agreed devices); Hardware must be purchased separately.
Photo Capture—Modern, inexpensive cameras; utilize"Face Finder"technology to
ensure ease of getting the photo right. Required
Document Scanning-High-speed, multi-page and single-page scanners enable rapid
capture of breeder and other documents into the SAFE for Aviation document Required
management repository.
Electronic Signature—Used for receipt of badge, acknowledgement of terms and
conditions, etc.; allows storage of signature within badge holder record for future Required
comparisons.
Fingerprint Biometric—Supports use at biometric access points(ANSI 378)as well as
authentication of individuals at touch points in your airport including citations, Required
training, badging office,etc.
Touch Screen Tablet-Eliminate paper by displaying and retrieving acknowledgement
for forms like Disqualifying Crimes, Privacy Act,Terms&Conditions,etc. TBD
ID Verification-Verify authenticity of scanned document(US& Intl.)and provide risk
score on authenticity while capturing data and image of standard document for direct TBD
use in SAFE for Aviation.
Mobile Device Support—SAFE's browser based operator screens are supported on
commercially available wireless handheld devices for operational mobility.Additional Not
testing and console ergonomics may be required depending on planned use. Specific Required
devices and capabilities are subject to agreement with client.
Confidential-SSI Page 7 of 7 SAFE for Aviation SOW ASE v0 8(1)
QUANTUM SECURE
8 Professional Services
Quantum Secure Professional Services
Implementation Services—A highly qualified services team will be responsible for
gathering the specific business and technical configurations required and project
managing the end to end implementation project including Requirements Definition, Required
Design, Construction, User Acceptance Testing,and Launch phases and activities using
industry standard CMM software delivery methodology.A Project Manager will be
assigned as a single point of contact for Quantum Secure.
Data Reconciliation—Services to identify anomalies and assist in reconciling data
between integral systems using the agreed unique person identifier(UPID).These Required
typically include, PACS data, DACS,training, keys systems,violations systems,etc.
Systems and services to be agreed. Does not include data cleansing.
Operator Documentation&Training—As part of our standard implementation
services.The project team will guide and train both system administrators and
operational staff in train the trainer sessions(Live or virtual). Each configured operator Required
role includes a standard operating procedures guide in printed and electronic form
along with IT and administration guides.
Solution Enhancements-Any services to integrate non-standard systems, processes, Not
user consoles or other client specific policies to adapt the solution to specific Required
environments. Estimated based on requirements.
Other services required—Any other client or implementation specific services Not
requested or needed. Estimated based on requirements. Required
Confidential-SSI Page 8 of 8 SAFE for Aviation SOW ASE v0 8(1)
QUA\TUV SECURE
9 Professional Services Pricing
QS-50020 Project Management 5 $2,000.00 $10,000.00
QS-50011 Implementation Services 17 $1,800.00 $30,600.00
QS-50011 Data Reconciliation 3 $1,800.00 $5,400.00
:Training Support for UAT, Cut-
QS-50011 lover&Stabilization 6 $1,800.00 $10,800.00
QS-50011 Operator Doc&Training 3 $1,800.00 $5,400.00
QS-50011 Authorized Signatory Training 2 $1,800.00 $3,600.00
QS-50011 Additional WebEx Training 2 $1,800.00 $3,600.00
n/a Travel, Lodging, Parking,etc. 11 $500.00 $5,500.00
$74,900.00
*Training includes 11 onsite days for training support during UAT, Cut-over and stabilization, Operator
Doc&Training for ASE operational staff,Authorized Signatory portal training and 2 additional days to be
used via webex for additional training support.
10 Approvals
Name: Name: Andy Kuchel
Title: Title: Vice President, Business Development
Date: Date:
Signature: Signature:
Confidential-SSI Page 9 of 9 SAFE for Aviation SOW ASE v0 8(1)