Security and Access Control Software

The vendor is required to provide security and access control software (ACS) solution should support enterprise-level management of physical access to facilities, including user credentialing, access permissions, reporting, and real-time monitoring.
- ACS shall include:
•    ACS manager: a cloud-managed service that provides a centralized resource for administration, software, and database management.
•    ACS control panels: devices that communicate with the ACS manager to perform local authorization of access requests, manage credential readers and other input and output devices, and log activity.
•    System interfaces: the ACS must have an open, standards-based interface for integration with other electronic safety and security systems, such as video surveillance, intrusion detection, or mass notification systems.
- Products
1. Description
•    Cloud-based software-as-a-service offering (system software) for configuration, management, and monitoring of physical access control for buildings and properties. 
•    System software interacts with cloud-managed on-site access control system hardware and other systems and devices, with integration options for video surveillance, intrusion detection, perimeter protection, and other physical security systems and devices, as well as building automation systems, single and multi-tenant residential automation systems, and networkable IoT sensors and sensor systems. 
•    Functionality includes AI deep-learning-based activity anomaly detection.
2. System functionality
•    The system must offer a web-based user interface with a customizable dashboard for a single view of security trends, events, and video feeds. 
•    It must also provide mobile applications for remote management and use as a mobile credential.
3. Advanced features:
•    Anti-pass back: the system must support both hard and soft anti-pass back controls to prevent credential misuse and maintain the integrity of access records. 
•    Emergency scenarios: it must allow for the creation and activation of named lockdown scenarios for specific doors, initiated via the web or mobile app, or by duress buttons connected to system inputs. 
•    Anomaly detection: the system should continuously learn user behavior patterns and use AI to detect and flag anomalous activities with priority alerts, such as an unusual access time or location for a specific user. 
•    Video integration: the system must support integration with milestone systems XProtect.
4. User and access management:
•    Principle of least privilege: the software must use a granular, role-based privilege scheme for administrators, allowing the assignment of specific permissions for sites and user groups.
5. Multi-factor authentication (MFA):
•    The system must support MFA for administrator logins using the time-based one-time password algorithm (TOTP) and google authenticator.
- Access control system interfaces
•    Credential reader interfaces: the system must support both the legacy Wiegand and the modern open supervised device protocol (OSDP) protocols, including two-way communication and encryption.
•    Locking hardware interface: the control panels must provide a lock relay output configurable for fail-safe or fail-secure operation, with the option to supply power directly to the hardware or act as a dry contact. 
•    Network connectivity: panels shall connect via fast ethernet 10/100 Mbps, with optional support for power over ethernet PoE and wireless methods such as wi-fi and cellular communication. 
•    System integrations:
o    Video surveillance: the system must provide a restful API integration to pass activity and alerts to a video management system (VMS). 
o    It should support the ability for the VMS to display live and recorded video synchronized with access events. 
o    Fire alarm: the system must have an interface to receive a signal from a fire alarm control point (FACP) to trigger the unlocking of doors for life safety. 
o    Identity and access management (IAM): the system must provide an API and a connector to automate user provisioning and support single sign-on (SSO).

- Contract Period/Term: 3 years
- Questions/Inquires Deadline: October 1, 2025