Building Automation System

The Vendor is required to provide building automation system (BAS), and generator focused solely on computer/server, software platform stability, cybersecurity, patching, and data protection.
- Systems covered under contract
• BAS server/host workstation
• BAS supervisory software and licensing maintenance
• Windows/OS environment and update compliance
• Antivirus/anti-malware protection
• Database backup and restoration readiness
• Virtual machine hosting (if applicable)
• Network firewall/security configuration for BAS
• User accounts, credentials, and permission access
- Responsibilities
1. Routine maintenance:
• Apply OS/security patches quarterly
• Maintain BAS software updates and version control
• Conduct malware scans and prevent threats
• Monitor CPU, memory, storage utilization
2. Cybersecurity requirements:
• Maintain firewall and network isolation per best practice
• Review cybersecurity configuration annually
• Monitor for intrusion or unauthorized connection attempts
3. Backup and disaster recovery:
• Maintain automated daily/weekly scheduled backups
• Offsite + onsite storage required
• Verify recovery capability quarterly
4. Access control management:
• Create and disable user accounts when authorized
• Maintain password policies, MFA preferred
5. Response requirements:
• Standard support response within 24 hours
• Critical outage response within 4 hours.