2024.07.23 Attachment 1 NTSC PWS_DRAFT.pdf

HTC711-XX-R-R0XX

Attachment 1 (PWS)

PERFORMANCE WORK STATEMENT (PWS)

FOR

UNITED STATES TRANSPORTATION COMMAND

DEFENSE PERSONAL PROPERTY PROGRAM

NON-TEMPORARY STORAGE CONTRACT (NTSC)

TBD

1. DESCRIPTION OF SERVICES:

1.1. The United States Transportation Command (USTRANSCOM) manages Department of Defense (DoD) sponsored shipments and Non-Temporary Storage (NTS) of Household Goods (HHG) belonging to DoD Service Members, DoD Civilians, U. S. Coast Guard Members, and their Families (collectively referred to herein as “customers”). This requirement is for storage services as detailed in this Performance Work Statement (PWS).

1.2. Scope of Work: The Contractor shall provide everything necessary to perform the tasks as identified herein for the storage of containerized HHG in the Continental United States (CONUS) as well as Alaska and Hawaii. This includes, but is not limited to, personnel, supervision, training, licenses, permits and equipment necessary to perform the tasks as identified herein, in accordance with (IAW) Defense Transportation Regulations (DTR) Parts II, IV and V, Joint Travel Regulations (JTR) CONUS Personal Property Consignment Instruction Guide, (PPCIG), OCONUS PPCIG Country Instructions, and all other applicable regulations to include all amendments and supplements. The Contractor shall assume all responsibility from point of receipt to the point custody of HHG transfers to a Government-designated receiving party. The Contractor’s responsibilities include but are not limited to: (1) operating storage facility(s); (2) handling-in HHG; (3) storage of HHG; (4) ensuring adequate protection of shipments is provided at all times; (5) handling-out of HHG; (6) payment of HHG loss or damage claims; and (7) transfer, movement, and storage of NTS Tender of Service (TOS) legacy shipments.

1.3. Defense Personal Property Program (DP3) Performance History. Contractor shall ensure no entity that has been disqualified or revoked from DP3 within three (3) years of shipment acceptance date will perform work under this contract. The Contractor shall ensure that no entity that has been debarred by the U.S. Government will perform work under this contract for the entire period of performance.

1.4. Contractor Tasks:

1.4.1. Transition: The Contractor shall perform all transition-related tasks IAW Appendix A.

1.4.2. Phase-In: The Contractor shall comply with all associated timelines and tasks outlined in Appendix A in order to be fully operational for all services identified herein.

1.4.3. Phase-Out: The Contractor shall comply with all associated timelines and tasks outlined in Appendix A in order to be fully operational for all services identified herein.

1.5. Facilities:

1.5.1. The Contractor shall provide warehouse storage facilities that comply with all local, state, federal, and country fire, safety and construction codes, standards, and ordinances, ensuring that all stored shipments are adequately protected. The Contractor shall ensure that all shipments are not exposed to anything that could cause harm or damage to HHG including, but not limited to, vermin, dust, mold, mildew, moisture, hazardous chemicals, as well as heat, cold, humidity, and direct sunlight.

1.5.2. The Contractor shall conduct a background check at the Contractor’s expense, IAW industry standard, for all persons performing under this contract whose role involves interacting with a customer or handling or transporting shipments prior to any person engaging in services identified herein. The Contractor shall provide employment records to the Government upon request, to the extent allowed by law. The Government has the right to prevent any personnel from performing under the contract due to an unfavorable background check.

1.5.3. The Contractor shall have established protective procedures for all facilities to ensure the adequate safeguards have been taken to preclude unauthorized access and a physical security program to include an electronic detection system.

1.5.4. The contractor shall ensure access control points (restricted entry points) for employees accessing the warehouse with appropriate identification ID cards or scannable technology, Exterior cameras systems must be heavy duty and durable to protect against vandalism and the elements.

The use of motion detection alarms systems to trigger alerts and movements. Facility security measures should run and monitor 24 hours a day, 365 days a year. The contractor shall ensure the warehouse has proper exterior and interior lighting for safety and security. All systems are operating correctly and inspected to reduce risks and vulnerabilities and properly maintained and active in preventing theft and breaches.

1.5.5. The Contractor shall maintain storage facilities IAW the proximity and capacity requirements identified in respective Appendix B per awarded region.

1.5.6. Temperature and Humidity Tolerances: All facilities shall maintain an interior ambient temperature not to exceed 75℉ and not to fall below 35℉. All facilities shall maintain a relative humidity reading range of 30%-55% indoors at all times. The Contractor shall notify the Contracting Officer Representative (COR) and Ordering Officer (OO) of any deviations from the temperature and humidity tolerances.

1.5.7. Remote Climate Sensor Monitoring: The Contractor shall provide warehouse facilities equipped with remote climate sensor monitoring technology, if not already equipped. The sensors shall be capable of capturing temperature and humidity, 24 hours a day, seven (7) days a week, 365 days per year. The remote sensor hardware shall be placed in accordance with the equipment manufacturers specifications and recommendations required to provide 100% coverage of the entire facility where HHG shipments are stored. The readings shall be made available to the Contracting Officer (CO) and COR via a remote web-based password-controlled login at all times.

1.5.8. The Contractor shall maintain Warehousemen’s Liability Insurance and shall provide proof of Warehousemen’s Liability Insurance coverage with valuation equating to no less than the net weight of stored shipments for each warehouse location to the COR. The Contractor shall provide a Certificate of Insurance for each warehouse location to the COR within 30 days of an update or renewal.

1.5.9. At a minimum, all storage facilities shall maintain an operational Class 1 fully automatic supervised sprinkler system meeting the requirements for insurance rate credit by the Insurance Services Office or other cognizant fire insurance rating organization (National Fire Protection Agency) with the exception of a wood frame or pole building. Additionally, all storage facilities shall provide a firewall separation resistance rating sufficient to protect the warehouse from the fire exposure of another occupant.

1.5.10. All storage facilities with capacity in excess of three (3) million gross pounds shall provide firewall separation for every three (3) million gross pounds of stored household goods.

1.5.11. All storage facilities shall be located above the 100-year floodplain for the area.

1.5.12. The Government reserves the right to inspect all facilities and lots at no cost to the Government. All facilities shall be available for inspection within 30 minutes of notification by the Government between 0800 hours and 1700 hours on all Government Business Days (GBD). The Contractor shall provide a covered inspection area with lighting and ventilation to perform inspection without the assistance of additional equipment.

1.5.13. The construction, upkeep, physical security, purchase, lease or rental of any commercial structure, land, or equipment for the storage facility shall be the responsibility of the Contractor. Additionally, the Contractor shall either own or be the primary lessor of the warehouse or facility. No subleases or secondary agreements are acceptable.

1.5.14. In the event the Contractor chooses to close a facility, the Contractor should notify the USTRANSCOM-Storage Branch in writing no later than 90 days prior to closure. The notification shall include a movement timeline and the location of the facility where the shipments will be placed into storage. New warehouse receipts showing the new facility location will be provided to the OO electronically. The Contractor shall bare all costs associated with the closure of a facility and movement to another facility. Reporting requirements for facility closures are outlined in Appendix E.

1.6. Shipment Hostage. The Contractor and all subcontractors performing services under this contract acknowledge that holding shipments hostage is a violation of USC Title 37, Section 453, at subparagraph (c)(5) which provides, "No carrier, port agent, warehouseman, freight forwarder, or other person involved in the transportation of property may have a lien on, or hold, impound, or otherwise interfere with the movement of baggage and household goods being transported under this section.”

1.7. Transfer of Custody. When custody of a shipment is transferred to or from the Contractor to another Contractor, the Contractor transferring custody shall furnish the Contractor receiving custody with two (2) legible duplicate copies of the shipment inventory. The Contractor will complete a joint inspection of the exterior of containers for possible damages. If physical damage, signs of water damage, or infestation are evident, the containers shall be unsealed and a joint inspection shall be conducted of the contents by the Contractors. In the event a difference of opinion arises between the losing and gaining Contractors regarding shortage, overage, or the condition of any element of the inventory, the Contractor shall annotate such discrepancies accordingly. If no new damage or loss is discovered, the inspection documents shall state "no differences noted." The absence of any annotation beside an inventory item denotes that the container and items were received in good condition. Both the losing and gaining Contractors shall sign and date the completed inspection documents, provide completed copies, and retain a copy for record.

1.8. Broken Seals. The Contractor shall notify the PPSO Quality Assurance Evaluator (QAE)/Government Surveillance Representative (GSR) any time the seal is broken during the joint inspection process. The notification will also identify any new seal numbers that were applied.

1.9. Claims Payment. The Government will determine liability on all claims arising from performance under this contract. The Contractor shall pay all claims valued at $1,000.00 or less within 30 calendar days of receipt of the Government’s determination of liability and all other claims within 60 calendar days of receipt of the Government’s determination of liability. If the Contractor disagrees with the Government’s determination it may appeal the decision to the CO within 10 calendar days of receipt of the Government’s determination.

The Contractor acknowledges that the CO’s determination is final and compliance must occur within 10 calendar days of receipt of said determination.

1.10. HHG Handling-In:

1.10.1. The Contractor shall immediately notify the OO and COR upon arrival of shipment and provide warehouse receipt or lot number and other documentation via secure electronic means or via Government designated system prior to performing and accepting inbound shipments.

1.10.2. The Contractor shall accept all HHG shipments and inform the OO within one (1) GBD of performing handle-in of shipment. The Contractor shall have three (3) GBDs to complete the remaining handling-in services.

1.10.3. With the exception of the Transfer of Custody requirement found in PWS Paragraph 1.7., all HHG shipment containers shall remain closed unless otherwise directed by the COR.

The Contractor shall verify that the shipping documents and the corresponding shipment match the recorded data. If discrepancies are noted, to include damaged containers, the Contractor shall annotate the discrepancies on all copies of the shipping documents and prepare an exception sheet. If no Control and Movement Document exists, the Contractor shall contact the COR for proper shipment documentation.

1.10.4. In the event that a HHG shipment arrives in a container that requires replacement the Contractor shall refuse the shipment and notify the COR that a shipment was refused.

1.10.5. When approved by the COR, the Contractor shall unpack all damaged HHG containers and initiate necessary damage mitigation efforts including, but not limited to, laundering, dry cleaning, and treating of finished surfaces, to prevent further damage to, or deterioration of the affected items. The Contractor shall repack HHG shipments for storage after damage mitigation efforts are complete and notify the COR of completion.

1.10.5.1. All repacked or new containers shall be sealed using tamper proof seals.

The Contractor shall update the inventory with new seal number(s) and provide an explanation for the repacked or new container within the customer’s file.

1.10.5.2. All cartons and wrapping material shall be in new or sound condition as well as adequate for the use employed. New packing material shall be used for mattresses, box springs, linens, bedding, and clothing. After packing, cartons shall be closed and sealed by taping lengthwise at all joints. Cartons shall have a minimum average bursting strength of 200 pounds per square inch and dish packs shall have a minimum average bursting strength of 350 pounds per square inch. Cartons shall be stacked in an upright position to minimize crushing, with the exception of mattress cartons. Plastic containers (tote or similar) and similar types of containers shall not be used. However, if items are packed by the customer in plastic or similar type containers, the Contractor shall pack these containers in an approved carton.

1.10.5.3. Linens, towels, bedding, draperies, and other items of this type shall be packed into new wardrobe type cartons and shall be completely sealed.

Clothing shall not be stored in closet bags. Hangers shall be removed from clothing packed in flat wardrobes.

1.10.5.4. All mattresses and box springs, except those in hide-a-beds or sofa beds, shall be placed in cartons and completely sealed.

1.10.5.5. Upholstered furniture, to include wicker and wood frame with cushions, shall be placed right side up on all legs in suitable containers covered by plastic or paper and secured with tape, shrink wrap or equivalent materials so that nothing touches or presses against the upholstery. Removable cushions shall be packed with the master pieces.

1.10.5.6. All rugs, rug pads, and carpets shall be properly rolled (not folded) and covered by paper and secured with tape or equivalent materials.

1.10.5.7. All firearms shall be packed with the bulk of the lot, unless approved by the COR.

1.10.5.8. All articles shall be removed from chests of drawers, bureaus, clothes hampers, and other similar items.

1.10.5.9. Nothing shall be packed in washers, dryers, refrigerators, freezers, stoves, or other major appliances except such items as electrical cords, connecting hoses, and similar items that are required as an integral part of the appliance in its normal operation or items for proper protection and blocking during shipment.

1.10.6. In the event that a shipment arrives with Personally Identifiable Information (PII) (i.e., Social Security Number (SSN), Full Name, Email Address, Home Address, Date of Birth, etc.) stenciled on the container, the Contractor shall notify the COR immediately and sanitize the container. The Contractor shall allow the COR to witness the sanitizing of the PII prior to shipment acceptance.

1.11. HHG Storage:

1.11.1. The Contractor shall maintain an up-to-date locator system to facilitate the prompt identification and location of all stored items. Individual items stored separately shall have an identification tag. This tag shall be fastened to the item without damaging the item. At a minimum, an acceptable system requires the following control data: (1) customer’s name, (2) customer’s rank or grade, (3) lot number, (4) receipt date, and (5) pallet or box number.

1.11.2. The Contractor shall maintain electronic records of all HHG shipments. Electronic records shall include, but are not limited to, inventory sheets, warehouse receipt, warehouse exception sheets, handle-in and handle-out confirmations, certified weight tickets, record of loss and damage, claims, and record of all related correspondence.

1.11.3. All files shall remain Government property and shall be utilized by the Contractor only in order to perform under this contract. The Contractor shall be responsible and accountable for all customer files.

1.11.4. The Contractor shall maintain and store all HHG shipments so as to prevent loss or damage. The Contractor shall ensure that all containers remain properly banded prior to staging, while in storage, and when handled out.

1.11.5. Upon approval from the COR, the Contractor shall dispose of unserviceable containers at no cost to the Government.

1.11.6. The Contractor shall fumigate HHG shipments in storage not later than 72 hours after receipt of a written notification from the U.S. Department of Agriculture (USDA) directing fumigation of the shipment IAW USDA fumigation requirements.

1.12. HHG Handling Out:

1.12.1. The Contractor will receive a task order, and other documentation via secure electronic means or via Government designated system, prior to the release of any shipment, from the OO. The Contractor shall release the shipment on the day requested if more than five (5) GBDs from date of task order. If the contractor is unable to release on requested date, they must release on the sixth (6) GBD from task order to the gaining Government-designated receiving party. If the Government-designated receiving party arrives at facility for a pick-up prior to receipt of a task order, the Contractor shall immediately notify the COR for resolution. In no event, shall a Contractor release a shipment without a task order. The Contractor shall transfer custody to the Government-designated receiving party IAW Paragraph 1.7. The Contractor shall weigh partial release shipments and notify the OO of the released weight and the weight of the goods remaining in storage within two (2) GBDs of the partial release.

1.12.2. In the event HHG shipments are released in error, the Contractor shall immediately notify the COR. The Contractor shall provide the COR a written report containing details relevant to the incident including, but not limited to, parties involved and events that occurred. In addition, the Contractor shall provide the COR all documentation pertaining to the incident. If the CO finds the Contractor at fault, the Contractor shall be liable for all resulting costs incurred (i.e. all shipment cost on released lot and any inconvenience claims based on not releasing the correct lot).

1.12.3. At the time of preparation for shipment release by the Government designated receiving party, in the event the Contractor identifies PII (i.e., SSN, Full Name, Email Address, Home Address, Date of Birth, etc.) on the container, the Contractor shall notify the COR immediately and sanitize the container. The Contractor shall allow the COR to witness the sanitizing of the PII prior to shipment release.

1.13. Reweigh. The COR and the OO may request a reweigh which must be conducted IAW CFR Title 49, Part 375.509 and comply with all applicable local, state, and federal laws.

The Contractor shall provide the reweigh tickets to the COR within seven (7) GBDs.

When a reweigh is performed by either the NTSC contractor or the GHC Contractor, the Contractor shall invoice on the lesser of the two (2) weights.

1.14. Converted Shipments. When the OO determines that the member is no longer entitled to storage of household goods at Government expense, the OO is required to notify the Contractor of the impending expiration date to convert the lot to the member’s expense prior to the storage expiration. The notification to the Contractor will include the service order number, date of expiration, and shipper’s name and contact information, to include last known mailing address. The expiration date shall not be back dated.

1.14.1. The customer shall be notified their shipment may be subject to conversion to a commercial account 90 days prior to their storage entitlement expiration and be given a cost estimate for continued storage. If converted to a commercial account, continued storage of the property will be at the customer’s expense until arrangements are made for vehicle pick up. Additionally, once converted to a commercial account and if customer continues to fail to accept their shipment or pay their storage costs, the shipment may be disposed of by the Contractor in accordance with applicable laws.

This attempted notification may be made by any means available (e.g., postal mail, electronic mail, documented phone call, and fax), so long as it is a good faith effort to reach the customer or their representative.

1.15. Disposition of Converted Shipments. The US Government acknowledges there may be circumstances where the Contractor may seek to dispose of property converted to customer’s expense. Before doing so, the Contractor shall seek authorization from the customer by way of a notarized authorization to dispose of the property. If authorization is not obtained, the Contractor shall follow all applicable local, state, and federal laws when disposing of lots converted to customer’s expense.

1.16. NTS TOS Legacy Shipment Phase-In:

1.16.1. The Contractor shall be capable of providing support services regarding the receipt and acceptance of legacy NTS TOS shipments, which could include, but is not limited to, joint inspection, inventory, handle-in services, containerization, and storage services.

1.16.2. The Contractor shall comply with all associated timelines and tasks outlined in Appendix G to complete the required transfer, movement, and storage of legacy NTS TOS shipments.

1.17. Assurance and Process Improvement. The Contractor shall provide audit and quality systems documentation and shall support the Government assurance or audit activities regarding any process undertaken by the Contractor within the scope of work. The Contractor shall participate in Government-defined working groups and initiatives that are part of the personal property governance process.

1.18. Invoicing. The Contractor shall submit payment requests IAW the PWS and Appendix D.

All services deemed payable by the DoD will be processed via the Third-Party Payment System (TPPS) or equivalent payment system. Any fees associated with the use of TPPS will be the Contractor’s responsibility.

1.19. Information Technology (IT) Systems: The Contractor shall provide and maintain a secure, web-based IT system able to manage HHG shipments, provide storage visibility, and allow Government data access. The Contractor’s IT system shall successfully interface with a Government managed system for the purposes of issuing and receiving any and all task orders, TPPS payment requests, and Government data access, to include any improvements made to the Government managed system(s) during the course of contract performance. The Contractor shall submit to the CO and COR a disaster recovery and continuing operations plan no later than (NLT) 15 calendar days after contract award. The plan shall be submitted in a Microsoft Word or Adobe PDF format. The Contractor’s system shall maintain relation of the Government’s order number (Procurement Instrument Identifier or PIID) and related order data fields to the fulfillment information necessary to locate and identify the lot. The Contractor’s electronic response to secure electronic means or via Government-designated system for each task order shall include an address to the discreet location indicating where the lot is stored.

1.19.1. Systems Integration.

1.19.1.1. Government Approved Data Warehouse Interface –The Contractor shall provide an interface with a Government data warehouse to feed all NTS data to include, but not limited to; task order, fulfillment, and status data associated with the contract.

1.19.1.2. Ordering Interface – The Contractor’s Information Technology (IT) system shall be fully integrated with applicable Government managed IT system for the purpose of receiving customer storage requirements and able to accept task orders or task order modifications NLT contract base period year one (1) start date. The Contractor shall make modifications or improvements to their IT system in the event that changes are made to the Government managed systems during the course of contract performance.

This requirement is based on successful testing completed no later than 30 days prior to the contract base period year one (1) start date. System testing for this capability will be available within 60 days of contract award date. In the event of Contractor’s IT system or Government’s IT system failure, the Contractor shall have a secure method of accepting task orders via electronic mail or DoD SAFE from the Government, until system failures are resolved.

1.19.1.3. Data Access. The Contractor shall provide an interface with access to all order, fulfillment, and status data associated with the contract based on the authenticated business partner's role. All data associated with the contract over its lifecycle shall be available for Government access in a queryable format. Contractor’s IT system shall possess flexible online query and export capabilities. Data shall be synced no less than every 24 hours with the Government’s data warehouse. The Contractor shall provide access to additional information as requested by the Government representative.

1.19.1.4. System Availability. The Contractor’s system shall be available at least 98% of the time. Compliance will be computed by dividing hours of availability by the total hours in the month. Scheduled downtime shall be coordinated with the Government at least 48 hours prior to downtime start. The Contractor’s system shall include system failover and disaster recovery capabilities to mitigate degradations in system performance.

1.19.1.5. Documentation. The Contractor shall prepare and retain accurate and legible documentation. Any manual documentation created and retained relevant to task orders and performance of this contract shall be scanned, retained, and related to the appropriate task orders such that all related information is available electronically.

The Contractor shall maintain a record of the location of all household goods shipments. Documentation shall include, but is not limited to, inventory sheets, warehouse receipt, warehouse exception sheets, handle-in and handle-out confirmations, certified weight tickets, record of loss and damage, claims, and record of all related correspondence.

1.20. Cybersecurity.

1.20.1. Operationally Critical Support. The services designated under this contract are determined to be “operationally critical support” as defined in DFARS 252.204-7012 Safe-Guarding Covered Defense Information and Cyber Incident Reporting.

1.20.2. PII/Security, Covered Defense Information. The Contractor will have access to Covered Defense Information (CDI) in the form of "other information" as defined in DFARS 252.204-7012 and described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html. The CDI requiring safeguarding or dissemination controls is as follows:

1.20.2.1. Customer relocation orders which contain Personally Identifiable Information (PII);

1.20.2.2. Reserved for any other items provided to or generated by the Contractor (such as reports) that meet the definition of PII/CDI.

1.20.3. Cybersecurity Incident Reporting

1.20.3.1. In addition to the DFARS 252.204-7012 reporting requirements for unclassified systems and DoD Manual (DoDM) 5220.22, National Industrial Security Program Operating Manual (NISPOM) for classified systems, reportable cyber-incidents include, but are not limited to, the following:

http://www.archives.gov/cui/registry/category-list.html

1.20.3.2. Unauthorized data exfiltration, manipulation or disclosure of any DoD information resident on or transiting the Contractor's unclassified or classified information systems or networks.

1.20.3.3. Unauthorized access to the Contractor’s unclassified or classified information system(s) or networks(s) on which DoD information is resident or transiting.

1.20.3.4. Cyber-incidents as listed in the MITRE ATT&CK Framework are incorporated herein by reference, which affect network or information systems where DoD information is resident or transiting.

1.20.3.5. Notifications by a federal, state, or local law enforcement agency or cyber-center (i.e., National Cyber Investigative Joint Task Force (NCIJTF), National Cybersecurity & Communications Integration Center (NCCIC)) of being a victim of a successful or unsuccessful cyber-event, anomaly, incident, insider threat, breach, intrusion, or exfiltration.

1.20.3.6. If the cyber-incident affects a classified system, vulnerabilities associated with the incident will be classified per the current version of USTRANSCOM Instruction 31- 02, Security Classification Guide.

1.20.4. Cybersecurity Incident Reporting Timelines

1.20.4.1. In addition to providing the notification required by DFARS 252.204-7012, the Contractor shall notify USTRANSCOM as soon as practicable, but no later than 72 hours after discovering a reportable cyber-incident. The reporting timeline begins when the incident is discovered or reported to the company, its employees, Contractors, or cybersecurity firm responsible for providing cybersecurity and response for the company. The Contractor shall contact the USTRANSCOM Cyber Operations Center (CyOC) via phone at 618-220-4222. If the Contractor does not immediately reach the CyOC via phone, the Contractor shall send an email notification to transcom.scott.tcj6.mbx.cyoc@mail.mil.

1.20.5. Mandatory Reporting Data

1.20.5.1. The Contractor shall work with the USTRANSCOM CyOC through resolution of the incident. Within 72 hours of becoming aware of a reportable cyber-incident, the Contractor shall provide an initial notification of the incident, even if some details are not yet available, which includes, but is not limited to, the following information:

(a) Company Name

(b) Who will be the POC with contact information

(c) CO POC (name, telephone, email)

(d) Overall Assessment –Description of incident, data at risk, mitigations applied mailto:transcom.scott.tcj6.mbx.cyoc@mail.mil

(e) Indicators of compromise

(f) Vector of attack (if known)

(g) Estimated time of attack (if known)

1.20.5.1.1. The Contractor shall provide a follow-on cyber-incident report to the USTRANSCOM CyOC which includes, but is not limited to, the following information:

(a) Contract numbers affected

(b) Facility CAGE code where the incident occurred if different than the prime Contractor location

(c) POC if different than the POC recorded in the System for Award Management (name, address, position, telephone, email)

(d) CO POC (name, telephone, email)

(e) Contract clearance level

(f) DoD programs, platforms, systems, or information involved

(g) Location(s) of compromise

(h) Date incident discovered

(i) Type of compromise (e.g., unauthorized access, inadvertent release, other)

(j) Description of technical information compromised

(k) Any additional information relevant to the information compromise

1.20.5.2. Incident Reporting Coordination

1.20.5.2.1. In the event of a cyber-incident, USTRANSCOM may conduct an on-site review of network or information systems where DoD information is resident on or transiting to assist the Contractor in evaluating the extent of the incident and to share information in an effort to minimize the impact to both parties. Date and time of on-site visits will be mutually agreed upon by USTRANSCOM and the Contractor in advance.

1.20.5.2.2. The Contractor agrees to allow follow-on actions by the Government (e.g., USTRANSCOM, Federal Bureau of Investigation, Department of Homeland Security, DC3, etc.) to further characterize and evaluate the suspect activity. The Contractor acknowledges that damage assessments might be necessary to ascertain an incident methodology and identify systems compromised as a result of the incident. Once an incident is identified, the Contractor agrees to take all reasonable and appropriate steps to preserve any and all evidence, information, data, logs, electronic files and similar type information (reference NIST Special Publication 800-61: Computer Security Incident Handling Guide, (current version)) related to the incident for subsequent forensic analysis so that an accurate and complete damage assessment can be accomplished by the Government.

1.20.5.2.3. The Contractor is not required to maintain an organic forensic capability, but must ensure data is preserved (e.g., remove an affected system, while still powered on, from the network) and all actions documented until forensic analysis can be performed by the Government or, if the Government is unable to conduct the forensic analysis, a mutually agreed upon third party (e.g., Federally Funded Research and Development Center (FFRDC), commercial security Contractor, etc.).

Any follow-on actions shall be coordinated with the Contractor via the CO.

1.20.5.2.4. The Contractor agrees to indemnify and hold the Government harmless for following any recommendations to remedy or mitigate the cyber-incident following the actions under 1.5.1. and 1.5.2.

1.21. Confidentiality and Non-Attribution Statement

1.21.1. The Government may use and disclose reported information as authorized by law and will only provide attribution information on a need-to-know basis to authorized persons for cybersecurity and related purposes (e.g., in support of forensic analysis, incident response, compromise or damage assessments, law enforcement, counterintelligence, threat reporting, and trend analysis). The Government may share threat information with other USTRANSCOM industry partners without attributing or identifying the affected Contractor.

1.22. Required Reports. (See Appendix E).

1.22.1. The Contractor shall provide all reports and notifications included in Appendix E, Required Reports, via electronic mail as Microsoft Excel spreadsheets on a monthly basis unless otherwise approved by the CO or specified below. Reports shall be sent via email to the COR unless otherwise specified. The reports shall be provided monthly, no later than the fifteenth (15th) calendar day of the month. The Contractor shall make the raw data used to compile all reports available to the Government by either exporting all DoD shipment data into a DoD system or providing DoD users (approximately 500) access to its transportation management system. Additional reports may be requested by the CO as needed.

1.22.2. Title to all items, including reports as well as information and data included in said reports, shall pass to the Government upon acceptance, regardless of when or where the Government takes physical possession IAW FAR 52.212-4(n).

2. SERVICE DELIVERY SUMMARY:

2.1. The Contractor consents to the release of any and all performance data collected as it pertains to the performance objectives identified in the Service Delivery Summary.

PERFORMANCE

OBJECTIVE

PWS PARAGRAPH PERFORMANCE

THRESHOLD

Handle-In of HHG within 3 GBDs

Para. 1.10.2. 98% per month

Handle-Out of HHG within 5 GBDs

Para. 1.12.1. 98% per month

On Time Submission of Required Reports

Para. 1.22.1. 98% per month

Timely Payment of Claims Para. 1.9. 98% per quarter

Temperature and Humidity Tolerances

Para. 1.5.4. 98% per month

Remote Climate Sensor Monitoring

Para. 1.5.5. 98% per month

Timely Cyber-Incident Reporting

Para. 1.20.3. No more than one late cyber-incident report or unreported cyber-incident in a twelve (12) month period

System Availability Para. 1.19.1.4. At least 98% availability.

3. ORDERING PROCEDURES.

3.1. Ordering Officer procedures. Ordering Officers may book to any region or facility, at their discretion using the established warehouse locations and rates on file.

3.1.1. Add ordering criteria – such as linehaul distance, pricing, etc.

3.1.2. If the Contractor would like to counter-offer a different warehouse based on either saturation concerns or in the event that a more optimal solution exists, counteroffers must be received by the Ordering Officer with in the same 2 business days. The Government will either accept or reject said counteroffer at their discretion.

3.1.3. The Contractor must be able to meet capacity requirements at any given time and does not have the option to reject or deny a booking.

3.2. Timelines for order acceptance or counteroffer.

3.2.1. Orders must be accepted or counter-offered within 2 business days.

3.2.2. The Contractor shall provide justification for the counter offer (i.e. dock saturation, warehouse at capacity)

3.2.3. The OO and Contractor may subsequently agree to amendments/changes prior to delivery. Contractors shall have one business day to review and, if desired by Contractor, to counteroffer.

3.3. Warehouse selection and proximity considerations. The OO will select the warehouse within the closest proximity to the origin pick up location.

4. SECURITY (PHYSICAL, PERSONNEL, INFORMATION, ANTI-

TERRORISM/FORCE PROTECTION and INDUSTRIAL).

3.1. General Security Information. The work associated with this PWS is at the unclassified level. No access to classified information is authorized. Some positions may require IT/ADP level III privileges which requires a T-5 background investigation. However, even those positions will not access classified information.

3.2. Controlled Unclassified Information (CUI). It is anticipated the Contractor will receive CUI under this contract in the form of Personally Identifiable Information. The Contractor shall handle all CUI in accordance with NIST SP 800-171, DFARS 252.204-7012, 252.204-7019 and 252.204-7020.

3.3. Citizenship Requirements. All the Contractor personnel performing services under this contract are not required to be citizens of the United States of America. However, neither dual citizens nor non-US citizens are eligible for Common Access Cards (CACs) unless they meet the parameters stated in DoD Directive-Type Memorandum 08-003.

3.4. Clearance Requirements and Position Sensitivity. Contractor personnel in Information Assurance (IA) administrative privileges or who will monitor DoD IT systems or software as designated by DOD 8500.1/DoDM 5200.02 may be rated at the various levels listed below. The stipulation of the numbers and what IT/Automated Data Processing (ADP) levels the Contractors will have been approved by the COR or the CO before the start of the contract. The Contractor shall comply with all appropriate provisions of applicable security regulations while assigned to this contract for DOD and USTRANSCOM. The following guidance will be followed when determining background investigation and clearance levels for this contract depending on requirements:

3.4.1. POSITION LEVEL:

3.4.1.1. Information Technology (IT)-III

3.4.1.2. Automated Data Processing (ADP)-III

3.4.1.3. Or Non-Sensitive Positions (Position of Trust Determination w/No Classified Access)

3.4.1.4. All other positions involved in computer activities and Common Access Card. No clearance is granted for classified access and only a Position of Trust (PoT) is awarded and posted in JPAS.

3.4.2. Background Investigation Requirements:

3.4.2.1. (Non-Sensitive/IT-III/ADP-III) Requirements for Position of Trust Determinations (No Classified Access - Tier 1/NACI):

3.4.2.1.1. Positions designated by the Government as Non-Sensitive/IT-III/ADP-III require a favorably adjudicated Tier 1/NACI investigation or greater IAW DoDI 5200.46, DoD Investigative and Adjudicative Guidance for Issuing the Common Access Card (CAC), dated 9 Sep 2014, DoDM 1000.13, Vol 1, DoD Identification (ID) Cards:

ID Card Life-Cycle, dated 23 Jan 2014, and National Background Investigations Bureau (NBIB) standards. Before a CAC or NIPRNet access will be granted, a favorable Tier 1/NACI investigation or greater must be on record in Joint Personnel Adjudication System (JPAS), and a favorable Federal Bureau of Investigation (FBI) National Criminal History Check (fingerprint check) on record with the National Background Investigations Bureau (NBIB). A CAC may be issued on an interim basis based on a favorable FBI fingerprint check and successful submission of a Tier 1 investigation to NBIB, and on record in JPAS.

3.4.2.1.2. NOTE: The above requirements for Non-Sensitive/IT-III/ADP-III positions are for unclassified access and systems only. No classified access will be granted based on the Tier 1 investigation. USTRANSCOM will only process Tier 1 investigations and will not complete any personnel security investigations (Tier 3/Tier 5) for classified access. It is incumbent upon the Contractor to have the appropriate investigations completed upon start of the contract.

3.5. Facilities Clearance Level (FCL). The Contractor is not required to have a valid Facilities Clearance Level. If the Contractor already has a FCL no access to classified information will be allowed unless there is a revision to the security requirements stated in a DD Form 254.

3.6. Contractor Compliance. Contractor shall comply with installation access and security requirements of the bases they may have to access or work on.

3.7. NOTE TO THE PRIME CONTRACTOR FACILITY SECURITY OFFICER (FSO):

3.7.1. The Prime Contractor shall forward the name, address, email address and telephone number of the Company FSO and their alternate to the USTRANSCOM Protection Programs Division TCJ3-MP to: andrew.p.daub.civ@mail.mil and steven.g.stegen.civ@mail.mil

3.8. USTRANSCOM Protection Programs Division (Industrial Security) Points of Contact:

USTRANSCOM

Attn: TCJ3 - (Andrew Daub or Steve Stegen) 508 Scott Drive mailto:andrew.p.daub.civ@mail.mil mailto:steven.g.stegen.civ@mail.mil

Scott AFB IL 62225

USTCJ3-MP Approval: Steven Stegen, USTRANSCOM (Protections Programs Branch)

USTCJ3- MP Tracking #: USTRANSCOM-MP-0088-19

NTSC APPENDICES

Appendix A – Transition, Volume Phase-In, and Volume Phase-Out

Appendix B – Regional Map

Appendix B.1 – Region 1 Southeast

Appendix B.2 – Region 2 Mid-Atlantic

Appendix B.3 – Region 3 Northeast

Appendix B.4 – Region 4 Central (North)

Appendix B.5 – Region 5 Central (South)

Appendix B.6 – Region 6 Western

Appendix C – Claims and Liability Rules

Appendix D – Third Party Payment System (TPPS) Invoicing

Appendix E – Required Reports

Appendix F – Remediation Efforts

Appendix G – NTS TOS Legacy Shipment Phase-In