Defense Personal Property Program (DP3) Household Goods (HHG) Tender of Service (TOS)

2026 Change 3

Managed by:

Department of War (DoW) Personal Property Activity (PPA)

1 Soldier Way, Scott AFB, IL 62225

Effective Date: 15 May 2026

As of: 14 May 2026

DP3 HHG ToS 2026 14 May 2026

Left Blank Intentionally

Table of Contents

LIST OF CHANGES

INTRODUCTION

A. QUALIFICATIONS

1. General

2. General Cyber Security Requirements

B. MUTUAL AGREEMENTS AND UNDERSTANDINGS

1. Service

2. Personnel

3. Through Responsibility

4. Pickup at or Delivery to a Military Terminal

5. Use of a DoW-Approved Alternate TSP

6. Tracing Shipments

7. Storage in Transit (SIT)

8. Weighing Shipments

9. Removal of Property from Facilities Disqualified by DoW PPA

10. Loss or Damage

11. Inconvenience Claim (IC)

12. Statement of Accessorial Services Performed

13. Shipment Inspection by PPSOs

14. Billing Procedures

15. International Shipments

16. Unusual Occurrences

17. Third-Party Declaration

18. Force Protection

19. Customer Satisfaction Survey (CSS) Language Prohibition

20. Origin Servicing Agent Representation

21. Move Management Company’s Performance

22. Foreign Vendor Suitability

23. Protecting the U.S. Government’s Interest When Subcontracting with Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded…

24. Access to Contractor and Subcontractor Records

C. PERFORMANCE REQUIREMENTS

1. Pickup and Delivery Dates

2. Preparation of Articles

3. Packing Requirements

4. Manner of Packing

5. Inventory

6. Overflow Shipments

7. Containers

8. Documents Provided to the PPSO/Aerial Port

9. Documents Provided to the Customer

10. SIT

11. Unloading and Unpacking at Destination

12. Recording Loss or Damage

D. CERTIFICATION

1. Violations

2. Terms and Conditions

Figure B-1. DD Form 619 – Statement of Accessorial Services Performed

Figure B-2. Notification of Loss or Damage AT Delivery

Figure B-3. Notification of Loss or Damage AFTER Delivery

Figure B-4. Unusual Occurrence Notification Form

Figure B-5 Foreign Vendor Report

Figure B-6 Inconvenience Claim Form

LIST OF CHANGES

Version Description Revision Date Page #s

2023 • Administrative updates throughout

• A. Qualifications o 1.c – Updated paragraph and subparagraphs to further define unethical acts

• B. Mutual Agreements and Understandings o 1. – Updated sentence DPMO responsibilities of proprietary information o 2. – Updated paragraph to clarify and provide examples of Military Services and personal information o 2.b. – Further clarified results of unfavorable background checks o 3.b. – New paragraph on use of quality assurance information o 3.f. – New paragraph on prohibition of double brokering o 3.g. – New paragraph on law governing the registration of service providers o 6.a – Added language giving examples of administrative actions o 6.c. – New paragraph outlining administrative action for using agents in non-use o 7. – Clarifying requirements for service providers during tracing of shipments o 9.a.(2)(a) – Removed wording for reweigh prior to placement in SIT o 9.b.(1) – Clarified language for lost certified weight tickets and need for prior approval to be paid o 16. – Updated requirements for international shipments and adhering to use of Cargo Preference Act and Fly America Act o 19.b. – Updated version and date for TSP Certificate of Health Protection Protocol Form

• C. Performance Requirements o 1.k.(2) – Updated in-transit visibility language for notification requirements and timelines o 1.k.(3) – Updated notification language for 24-hour notification and second notification must be telephonically o 1.l.(6) – Added language for any change request in spread to be submitted no later than to the first day of packing o 2.e. –Added lithium battery requirement for

01 Dec 2022

Pg 7

Pg 9

Pg 10

Pg 10

Pg 10

Pg 11

Pg 11

Pg 11

Pg 12

Pg 12

Pg 18

Pg 20

Pg 23

Pg 23

Pg 24 shipping lithium batteries lithium-ion and lithium metal o 5 – Electronic inventories remain highly-encouraged for 2023. Updates to inventory paragraph to increase clarity and requirements when electronic inventories are used o 5.a.(3)(g) – Require a handwritten/hard copy of inventory if failure of e-inventory equipment o 5.a.(9) – Updated privately owned firearm requirements to not ship privately made, non-serialized firearms o 7.h.(4) – Clarified language on placement of seals on HHG shipments

Pg 25

Pg 27

Pg 28

Pg 29

Pg 31

Change 1

• Throughout Document o Revised use of punitive action to administrative action

• B. Mutual Agreements and Understandings o 3.f. – Revised paragraph on use of double brokering o 3.g. – Revised paragraph for TSP registration o 12.d.(6) – Updated paragraph to provide additional information if appealing a claim o 15. – Updated language on International

Shipments to streamline and removed sub paragraphs o 18 – Added paragraph and updated language on pandemic related notifications.

o 18.a – Added new paragraph related to Safety Move processes when received by authorized TSPs.

o 18.c – Removed requirement for HPP Form completion

• C. Performance Requirements o 1.l.(6) – Updated language to clarify any change request in spread dates must be sent to PPSO by the customer and added verbiage.

o 5.a.(10) – Clarified language for POFs that are “manufactured in 1968 or after"

13 Sep 2023

Pg 15

Pg 18

Pg 19

Pg 19

Pg 19-20

Pg 24

Pg 28

2024 • B. Mutual Agreements and Understandings o 16. – Added language on using the DP3 Unusual

Occurrence Notification Form

• C. Performance Requirements o 2.h – Added paragraph on items liable to cause damage

• Figure o Figure B-4 – Added Unusual Occurrence

Notification Form

29 Dec 2023

Pg 19

Pg 25

Pg 40

Change 1

• Added INTRODUCTION

• A. QUALIFICATIONS

o 1.b.(2). – Added language on DPMO efforts to assess program changes with GHC and make applicable updates as necessary.

• C. PERFORMANCE REQUIREMENTS

o 1.d. – Made administrative changes to remove reference to “peak season” when the requirement is beyond DP3 peak season.

5 Mar 2024 Pg 8 Pg 8

Pg 22

2025 • A. QUALIFICATIONS

o 1.b. – General: TOS – made updates to the effective year.

30 Jan 2025 Pg 10

2026 • Introduction o Added “civilian employees” to list of personnel whose personal property is moved and added definition of “customer.”

o Changed to “international” to lower case

• A. QUALIFICATIONS

o Added Section 2. “General Cyber Security Requirements”

• B. MUTIAL AGREEMENTS AND

UNDERSTANDINGS

o 10.b- Language change to “After Action” Report

(AAR)

o 11.d- Complete rewrite for “Reimbursement Section”

28 Oct 2025 Pg 10 o 11.e.(4)- Added new line paragraph for this section under “SIT” o 11.f.(2)- Sentence addition to the paragraph o 16.b. Language change to “Customer’s

Representatives” o Added Section 22. “Foreign Vendor Suitability” o Added Section 23. “Protecting the U.S.

Government’s Interest When Subcontracting with Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded” o Added Section 24. “Access to Contractor and

Subcontractor Records”

Change 1 o B.3.f Subcontractor Visibility; Added requirements for TSP to provide information on the company that hauled the shipment.

o B.11.g.(3) Change "forced extended leases" to

"unexpected lease extensions.”

o B.19.b.(6) Updated Contact: “HQ Coast Guard:

smb-comdt-traveltransportationpolicy@uscg.mil Commercial telephone: 206-815-0555”

18 Feb 2026 mailto:smb-comdt-traveltransportationpolicy@uscg.mil

Change 2

• Throughout Document o Replaced “United States Transportation

Command,” “USTRANSCOM,” “Defense Personal Property Management Office,” and “DPMO” with “Department of War Personal Property Activity” or “DoW PPA” as appropriate.

• A. QUALIFICATIONS

o 2.a.(5). – CMMC UID: Added requirements for

CMMC UID

o B.18.b.(1) Updated Contact: DoW PPA

Operations Support and Policy Branch at transcom.scott.tcj9.mbx.pp-ops@mail.mil o B.18.b.(2) Updated Contact: HQ Army:

usarmy.ria.asc.spo-personal-property@mail.mil;

usarmy.belvoir.asc.mbx.jppsoma-apple@mail.mil;

520-706-8613

01 Feb 2026

Change 3

• A. QUALIFICATIONS

o 2.a.(3) – Change: In order to be awarded any shipments after 15 May 2027, the TSP and any subcontractors possessing CUI or FCI must complete by 1 March 2027… mailto:transcom.scott.tcj9.mbx.pp-ops@mail.mil mailto:usarmy.ria.asc.spo-personal-property@mail.mil mailto:usarmy.belvoir.asc.mbx.jppsoma-apple@mail.mil

INTRODUCTION

Purpose: The Tender of Service (ToS) provides the rules and regulations published by the DoW for the movement of personal property for DoW and US Coast Guard (USCG) members and civilian employees, hereafter referred to as “customers.”

Scope: The ToS provides guidelines, rules, regulations, and other information required to participate in the movement of DoW personal property. The ToS specifies rules, regulations, and procedures that Transportation Service Providers (TSPs) are obligated to perform when moving customer personal property.

Authority: The Commander, DoW PPA, is responsible for developing rules and guidelines worldwide for shipment of domestic and international personal property on behalf of the entire DoW, including civilian appropriated and non-appropriated fund employees, and the USCG.

A. QUALIFICATIONS

1. General:

a. Gender: The first-person singular pronoun is used throughout the ToS and refers to a person, partnership, or corporation submitting such tender.

b. ToS:

(1) I understand this ToS, in addition to the Defense Property Program International Tender (IT) and Defense Personal Property Program Domestic Tariff 400NG (400NG), is binding for shipments with a pickup date of 15 May 2026 or later for applicable DP3 shipments I accept including shipments on Bill of Lading(s) (BL), or purchase orders, and will form a part of the conditions thereof.

(2) I accept this ToS, in addition to the IT and the 400NG, is binding until 14 May 2027 or until the U.S. Government publishes new documents superseding 2026 Business Rules.

(3) I will submit to the Director of Operations DoW PPA, the Electronic ToS Signature Sheet (ETOSSS) certifying I have read and understand the terms and conditions and agree to provide service as set forth in this ToS. I will retain the actual ToS for my files.

(4) I understand submission of this ETOSSS, hereafter referred to as Tender, is a prerequisite to my consideration for DoW approval for the movement of personal property; it does not obligate the U.S. Government in the distribution of traffic; and such submission indicates I consider myself to be qualified, willing, and able to accept shipments from military activities and seek such shipments under the terms set forth herein. Changes, additions, and deletions are effective upon receipt of notification unless specifically stated otherwise.

(5) I agree to comply with all requirements of the DP3 Transportation Service Provider (TSP) Qualification Program as prescribed by the DoW PPA.

(6) I agree to maintain up-to-date documentation with the Department of Transportation and State requirements to operate as a motor carrier or freight forwarder. This includes the ETOSSS, Certificate of Independent Pricing (CIP) and Certificate of Responsibility (COR), and all additional required certifications.

c. Unethical Acts: 1 I agree the ETOSSS is signed with knowledge of the law that:

(1) whoever, in any matter within the jurisdiction of any department or agency of the United States, knowingly and willfully:

(a) Falsifies, conceals, or covers up by any trick, scheme, or device, a material fact;

(b) Makes any false, fictitious, or fraudulent statements, or representation; or

(c) Makes or uses any false writing or document knowing the same to contain any false, fictitious, or fraudulent statement or entry shall be subject to the penalties prescribed in the criminal law of the United States (i.e., 18 U.S.C. § 1001, Statements or Entries Generally).

(2) any person who—

(a) knowingly presents, or causes to be presented, a false or fraudulent claim for payment or approval;

(b) knowingly makes, uses, or causes to be made or used, a false record or statement material to a false or fraudulent claim;

(c) conspires to commit a violation of subparagraph (a), (b), (d), (e), (f), or (g);

(d) has possession, custody, or control of property or money used, or to be used, by the

U.S. Government and knowingly delivers, or causes to be delivered, less than all of that money or property;

1 This is a non-exclusive list. There are other criminal and civil statutes that apply such as:

18 USC § 287, False, Fictitious or Fraudulent Claims 18 USC § 201, Bribery of Public Officials and Witnesses 18 USC §208, Acts affecting a personal financial interest 18 USC § 1516, Obstruction of Federal Audit 18 USC § 1341, Frauds and Swindles (Mail Fraud) 18 USC § 1343, Fraud by Wire, Radio or Television (Wire Fraud) 18 USC § 1832, Theft of Trade Secrets 18 USC § 226, Bribery affecting port security 41 USC § 51-58, Anti-Kickback Act 15 USC § 1, Sherman Antitrust Act 18 USC § 371, Conspiracy to Defraud the United States 18 USC § 1031, Major Fraud Against the United States

(e) is authorized to make or deliver a document certifying receipt of property used, or to be used, by the U.S. Government and, intending to defraud the U.S.

Government, makes or delivers the receipt without completely knowing that the information on the receipt is true;

(f) knowingly buys, or receives as a pledge of an obligation or debt, public property from an officer or employee of the U.S. Government, or a member of the Armed Forces, who lawfully may not sell or pledge property; or

(g) knowingly makes, uses, or causes to be made or used, a false record or statement material to an obligation to pay or transmit money or property to the U.S. Government, or knowingly conceals or knowingly and improperly avoids or decreases an obligation to pay or transmit money or property to the U.S. Government,

(h) shall be subject to the penalties prescribed in the civil law of the United States (i.e., 31 U.S.C. § 3729, False Claims); and

(i) is subject to administrative actions such as suspension and debarment and/or removal from the program.

2. General Cyber Security Requirements:

a. Basic Safeguarding of TSP Information Systems:

(1) To protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) created by or used in the ToS, the U.S. Government is implementing a phased approach to increasing cybersecurity controls including reporting of cybersecurity breaches.

(2) The phased approach models itself on the Cyber Maturity Model Certification (CMMC). In order to be awarded any shipments after 15 May 2026, the TSP and any subcontractors possessing CUI or FCI must complete by 15 March 2026 and maintain as current, an affirmation, by the TSP’s CEO of continuous compliance with the requirements associated with the CMMC Level 1 self-assessment in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) for each CMMC unique identifier (UID) applicable to each of the TSP information systems that process, store, or transmit CUI or FCI and that are used in performance of the contract.

(3) In order to be awarded any shipments after 15 May 2027, the TSP and any subcontractors possessing CUI or FCI must complete by 1 March 2027 and then annually thereafter and maintain as current, an affirmation, by the TSP’s CEO of continuous compliance with the requirements associated with the CMMC Level 2 self-assessment in the SPRS for each CMMC unique identifier (UID) applicable to each of the TSP information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract.

(4) I shall ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit CUI or FCI and that are used in performance of the subcontract.

(5) CMMC UID: All TSPs are required to provide their CMMC UID to DoW PPA at https://piee.eb.mil/ transcom.scott.tcj9.mbx.pp-quality@mail.mil NLT 15 Mar 2026. These UIDs are crucial for the purpose of validating the completions of CMMC assessments by TSPs in SPRS. CMMC UIDs are assigned by SPRS.

b. Handling and Protection of Non-Public Information:

(1) Controlled Unclassified Information (CUI) means information the U.S.

Government creates or possesses, or information an entity creates or possesses for or on behalf of the U.S. Government, that a law, regulation, or U.S. Government wide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

(2) Federal Contract Information (FCI) means information, not intended for public release, that is provided by or generated for the U.S. Government under the ToS to develop or deliver a service to the U.S. Government. It does not include information provided by the U.S. Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

(3) TSPs operating in the ToS have access to CUI, category, GENERAL PRIVACY (PRVCY) information, which refers to personal information, or, in some cases, “personally identifiable information (PII),” as defined in OMB M-17-12, or “means of identification” as defined in 18 U.S.C. § 1028(d)(7). Examples of PII to which the TSP has access are names of Servicemembers, DoW civilians, and USCG employees and their family members, origin and destination addresses, work and personal telephone/mobile phone numbers, social security numbers, Identification Numbers, work and personal email addresses, and electronic household goods inventories including remote surveys and video, and claims related information including banking information provided to pay inconvenience claims or loss/damage claims.

(4) I agree to use FCI information developed or received, including CUI while performing under the ToS only for the purposes of fulfilling the contracted requirements and to protect such information from unauthorized release or disclosure. Information may be provided to subcontractors only as needed to perform their subcontracted duties.

Such information may not be sold or provided to third parties or others such as advertisers or data-brokers.

c. The following basic safeguarding requirements and procedures are required to protect TSP information technology systems, including mobile applications, that process information received under the ToS program. IAW 48 CFR 52.204-1 and 32 CFR Part 170, these requirements and procedures for basic safeguarding of TSP systems shall include, at a minimum, the following security controls:

(1) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(2) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(3) Verify and control/limit connections to and use of external information systems.

(4) Control information posted or processed on publicly accessible information systems.

(5) Identify information system users, processes acting on behalf of users, or devices.

(6) Authenticate (or verify) the identities of those users, processes, or devices, as a mailto:transcom.scott.tcj9.mbx.pp-quality@mail.mil prerequisite to allowing access to organizational information systems.

(7) Sanitize or destroy information system media containing HHG ToS information before disposal or release for reuse.

(8) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(9) Escort visitors and monitor visitor activity; maintain audit logs of physical access;

and control and manage physical access devices.

(10) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(11) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(12) Identify, report, and correct information and information system flaws in a timely manner.

(13) Provide protection from malicious code at appropriate locations within organizational information systems.

(14) Update malicious code protection mechanisms when new releases are available.

(15) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

d. Cybersecurity Incident Reporting:

(1) “Cyber incident” means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein. Reportable cyber-incidents (regardless of whether the information system contains CUI or there is an impact to performance such as delivery schedule delay), include, but are not limited to, the following:

(a) Cyber-incidents as defined in Table 2.

(b) Notifications by a federal, state, or local law enforcement agency or cyber-center (i.e., National Cyber Investigative Joint Task Force (NCIJTF), National Cybersecurity & Communications Integration Center (NCCIC)) of being a victim of a successful or unsuccessful cyber-event, anomaly, incident, insider threat, breach, intrusion, or exfiltration.

Table 2.

Incident Category Description

Root Level Intrusion Unauthorized privileged access to an information system (IS).

Privileged access, often referred to as administrative or root access, provides unrestricted access to the IS. This category includes unauthorized access to information or unauthorized access to account credentials that could be used to perform administrative functions (e.g., domain administrator). If the IS is compromised with malicious code that provides remote interactive control, it will be reported in this category.

User Level Intrusion Unauthorized non-privileged access to an IS. Non-privileged access, often referred to as user level access, provides restricted access to the IS based on the privileges granted to the user. This includes unauthorized access to information or unauthorized access to account credentials that could be used to perform user functions such as accessing Web applications, Web portals, or other similar information resources. If the IS is compromised with malicious code that provides remote interactive control, it will be reported in this category.

Denial of Service Denial of Service (Incident)-Activity that denies, degrades, or disrupts normal functionality of an IS or DoW information network.

Malicious Logic Installation of software designed and/or deployed by adversaries with malicious intentions for the purpose of gaining access to resources or information without the consent or knowledge of the user. This only includes malicious code that does not provide remote interactive control of the compromised IS. Malicious code that has allowed interactive access should be categorized as Root or User Level Intrusion incidents. Interactive active access may include automated tools that establish an open channel of communications to and/or from an IS.

Ransomware Malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption. Ransomware actors often target and threaten to sell or leak exfiltrated data or authentication information if the ransom is not paid. Ransomware is a reportable incident that may be associated with multiple incident categories depending on the attack vector and execution.

(2) When a cyber-incident occurs, the contractor is required to notify DoW PPA as soon as practical, but no later than 72 hours after discovering a reportable cyber-incident. The reporting timeline begins when the incident is discovered or reported to the company, its employees, contractors, or cybersecurity firm responsible for providing cybersecurity and response for the company. The TSP shall contact the USTRANSCOM Cyber Operations Center (CyOC) via phone at 618-817-4222. If the TSP does not immediately reach the CyOC via phone, the contractor shall send an email notification to transcom.scott.tcj6.mbx.cyoc-dodin-operations@mail.mil.

e. Mandatory Reporting Data:

(1) I shall work with the USTRANSCOM PPA CyOC through resolution of the incident. Within 72 hours of becoming aware of a reportable cyber-incident, the TSP shall provide an initial notification of the incident, even if some details are not yet available, which includes, but is not limited to, the following information:

(c) Company Name

(d) Who will be the POC with contact information

(e) DoW PPA/PPSO POCs (names, telephones, email addresses)

(f) Overall Assessment –Description of incident, data at risk, mitigations applied mailto:transcom.scott.tcj6.mbx.cyoc-dodin-operations@mail.mil

(g) Indicators of compromise

(h) Vector of attack (if known)

(i) Estimated time of attack (if known)

f. The TSP shall provide a follow-on cyber-incident report to the USTRANSCOM PPA CyOC within five calendar days of becoming aware of a reportable cyber-incident, which includes, but is not limited to, the following information:

(1) TSP unique Commercial and U.S. Government Entity (CAGE) code

(2) TSP SCAC

(3) Bill of Lading numbers implicated

(4) Facility CAGE code where the incident occurred if different than the prime TSP location

(5) POC is different than the POC recorded in the System for Award Management (name, address, position, telephone, email)

(6) DoW PPA/JPPSO POC (name, telephone, email)

(7) Contract clearance level (should be unclassified)

(8) DoW programs, platforms, systems, or information involved

(9) Location(s) of compromise

(10) Date incident discovered

(11) Type of compromise (e.g., unauthorized access, inadvertent release, other)

(12) Description of technical information compromised

(13) Any additional information relevant to the information compromise

g. In addition to the reporting required by paragraph e and d, when the TSP discovers a cyber incident that affects a TSP IT system containing ToS CUI or FCI, or that affects the contractor’s ability to perform the requirements of the contract, the Contractor shall:

(1) Conduct a review for evidence of compromise of CUI/FCI, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered TSP information system(s) that were part of the cyber incident, as well as other information systems on the TSP’s network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the TSP’s ability to provide ToS services; and

(2) Rapidly report cyber incidents to DoW at https://dibnet.dod.mil.

(3) Cyber incident report. The cyber incident report shall be treated as information created by or for DoW and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

(4) Medium assurance certificate requirement. To report cyber incidents into DoW Cyber Crime Center (DC3), the TSP or its subcontractor shall have or acquire a DoW-approved medium assurance certificate to report cyber incidents. For https://dibnet.dod.mil/ https://dibnet.dod.mil/ information on obtaining a DoW-approved medium assurance certificate, see https://public.cyber.mil/eca/.

h. Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DC3 in accordance with instructions provided by DC3.

i. Media preservation and protection: When a TSP discovers a cyber incident has occurred, the TSP shall preserve and protect images of all known affected information systems identified in paragraph d.(22).(b) and all relevant monitoring/packet capture data (information, data, logs, electronic files and similar information (See NIST Special Publication 800-61: Computer Security Incident Handling Guide, (current version)) (for at least 90 days from the submission of the cyber incident report to allow DoW to request the media or decline interest. This will permit a subsequent forensic analysis so that an accurate and complete damage assessment can be accomplished by the U.S. Government.

j. Incident Reporting Coordination:

(1) In the event of a cyber-incident, the DoW may conduct an on-site review of network or information systems where FCI/CUI information is resident on or transiting to assist the TSP in evaluating the extent of the incident and to share information in an effort to minimize the impact to both parties. Date and time of on-site visits will be mutually agreed upon by DoW PPA and the TSP in advance.

(2) I agree to allow follow-on actions by the U.S. Government (e.g., DoW PPA, Federal Bureau of Investigation, Department of Homeland Security, DC3) to further characterize and evaluate the suspect activity. The TSP acknowledges that damage assessments might be necessary to ascertain an incident methodology and identify systems compromised because of the incident.

(3) The TSP is not required to maintain an organic forensic capability, but must ensure data is preserved (e.g., remove an affected system, while still powered on, from the network) and all actions documented until forensic analysis can be performed by the U.S. Government or, if the U.S. Government is unable to conduct the forensic analysis, a mutually agreed upon third party (e.g., Federally Funded Research and Development Center (FFRDC), commercial security TSP). Any follow-on actions shall be coordinated with the TSP through the DoW PPA.

(4) I agree to indemnify and hold the U.S. Government harmless for following any recommendations to remedy or mitigate the cyber-incident following the actions under d.(22).(j) and d.(22).(j).

k. Confidentiality and Non-Attribution Statement: The U.S. Government may use and disclose reported information as authorized by law and will only provide attribution information on a need-to-know basis to authorized persons for cybersecurity and related purposes (e.g., in support of forensic analysis, incident response, compromise or damage assessments, law enforcement, counterintelligence, threat reporting, and trend analysis). The U.S. Government may share threat information with other DoW PPA industry partners without attributing or identifying the affected TSP.

https://public.cyber.mil/eca/

B. MUTUAL AGREEMENTS AND UNDERSTANDINGS

1. Service: I will use established, quality commercial practices to provide service in accordance with (IAW) the provisions of this ToS. If requested by the DoW PPA or DoW quality assurance inspectors, I will provide operating procedures or established company standards as needed. The DoW PPA will protect proprietary information IAW law and regulation.

2. Personnel: I will deliver quality moving and storage services to DP3 members. I will service DP3 shipments with a trained, professional workforce that treats Military Service (e.g., U.S. Army, U.S. Navy, U.S. Air Force, U.S. Marine Corps, U.S. Space Force and U.S. Coast Guard) personnel and their families with respect; protects their home and belongings from damage; prioritizes prompt, accurate correspondence; and protects their personal information (e.g., personally identifying information (PII), telephone numbers, addresses, etc.) from inappropriate release.

a. I will ensure a background check is conducted, in accordance with industry standards and at my expense, on all personnel whose role involves interacting with a customer.

b. I will make employment records available to the DoW upon request, to the extent allowed by law. The DoW has the right to prevent certain employees from performing due to an unfavorable background check;

personnel with an unfavorable background will not be permitted to enter a military installation (e.g., fort, post, base, camp, station, etc.) nor are they authorized to service a shipment.

c. I will ensure all persons interacting with customers on and off installation meet the specific requirements for local installation access as listed in DoDM 5200.08, Vol 3, Section 4 Physical Security Program (see https://www.esd.whs.mil).

d. I will only use qualified personnel in their assigned duties in the handling of personal property. Company representatives must present a clean, professional appearance.

e. I will ensure at least one English-speaking representative is always available when performing packing, loading, and delivery services.

f. I understand smoking (including e-cigarettes) is not allowed in the customer’s residence, or within 50 feet of the personal property.

g. I will not dispatch personnel to a customer’s residence who appear to be under the influence of alcohol or drugs, or in possession of a firearm. If at any time after dispatching, my personnel become under the influence of alcohol or drugs or are in possession of firearms or drugs or uses abusive language during the handling of a customer’s personal property, I will replace said individual(s) immediately with other qualified personnel.

3. Through Responsibility:

https://www.esd.whs.mil/

a. I understand all shipments tendered to me must be moved under my responsibility from origin to destination.

b. I understand that inspection or quality assurance actions are not considered proprietary or privileged information and may be disclosed publicly to customers and their families and in support of actions against an agent or in support of other program interests.

c. I agree that if through my fault, or the fault of my agent, I ship the wrong personal property or all or a portion of a shipment is sent to the wrong destination, I will be responsible for the return of the erroneous shipment and movement of the correct personal property to the customer’s destination at my expense. Movement must be expedited when the customer needs the property as ordered by the Personal Property Shipping Office (PPSO).

d. I understand I am not liable for movement costs for shipments released in error by a DoW contractor, PPSO, owner, or owner’s representative.

e. I understand if I am unable to perform in such a manner as to complete the through movement of a shipment in a timely manner, the U.S. Government may take possession of the personal property and complete the movement. I understand I am liable for all additional costs incurred by the U.S. Government in excess to those costs that would have been incurred if I had maintained total through movement of the shipment.

f. Double Brokering of any DoW HHG is not permitted. TSPs may not solicit drivers with a price for specific loads through broker or load boards unless they have already been awarded that freight by a DoW shipper. Double brokering is defined as when a TSP assigns a shipment to a carrier who then brokers the shipment to another carrier. TSPs awarded DoW HHG shipments are responsible for ensuring that its underlying TSP(s) handle and deliver freight without the underlying TSP contracting the use of additional TSPs and brokers.

To ensure subcontractor visibility, the awarded TSP shall record the following information in the “General Remarks” block in DPS no later than two (2) GBDs after the shipment’s departure from the origin:

(1) The legal name and US DOT number of the service provider hauling the shipment.

(2) The shipment’s date of departure from the origin location.

g. TSP is solely responsible for the acts and omissions of any third party or outsourcing that the TSP elects to enter into a private contract with. TSPs, household goods agents, or other vendors shall be responsible for conducting their own due diligence when making private commercial decisions, whether to contract commercially, concerning the performance of service under a particular bill of lading. TSPs, subcontractors and vendors are required to resolve their commercial problems and disputes independently of DoW PPA, presumably through measures available to entities involved in commercial contracting (e.g., mediation, arbitration, recourse to the judicial system, collection agencies) Reports: I agree to provide reports to DoW PPA

DoW PPA as required and upon request.

4. Pickup at or Delivery to a Military Terminal:

a. I understand when I have been notified an entire shipment is available for pickup at a military terminal (air or surface), I must pick up the shipment as soon as possible, but not later than (NLT) one U.S. Government Business Day (GBD) for military air terminals and NLT five GBDs for military water terminals from the date of receipt of notification.

b. Upon delivery of a shipment to a military air or ocean terminal, I agree to provide the terminal with a memorandum copy of the BL describing the shipment.

5. Use of a DoW-Approved Alternate TSP:

a. I understand DoW PPA publishes a list of approved TSPs and a list of TSPs that have been disqualified or revoked. TSPs appearing on the disqualified or revoked lists shall not to be used by other approved TSPs. I understand the use of aforementioned TSPs may result in administrative actions (e.g., revocation from the DP3 program, non-use, suspension, etc.)

against me (see DTR Part IV, Chapter A-405, Quality Assurance, of this regulation). I will monitor the overall service performance of agent representatives providing relocation services at the origin and destination.

The quality assurance plan will be in place to reverse trends of substandard performance.

b. I understand and accept that the performance of an alternate TSP I chose to use will be reflected in my Performance Score.

c. I understand the use of SIT/NTS or other local agents who are in a non-use status for origin or destination services in any capacity for DoW personal property shipments may result in administrative action.

6. Tracing Shipments: I agree to trace shipments upon request from a PPSO or the customer. I agree to acknowledge such a request and notify the requester of the shipment location within one GBD from the initial request domestically and within 72 hours (three GBDs) for international shipments.

7. Storage in Transit (SIT): I understand SIT at origin and/or destination must be in a DoW-approved storage facility and may be approved based on the customer’s ability to accept delivery. I will refer to the DTR, Part IV, Chapter A-402, Shipment Management, IT and 400NG for further details. If shipment is placed in “SIT AT ORIGIN” at U.S. Government’s direction, I will notify the customer of placement into SIT to allow the customer to make arrangements at destination. Upon release from SIT at origin, I agree to notify the customer of the new RDD.

8. Weighing Shipments:

a. I will weigh all shipments IAW the IT and 400NG and enter the shipment weight in Defense Personal Property System (DPS), within four GBDs after shipment pickup date or prior to the shipment arrival, whichever is earlier, to allow the customer or PPSO the opportunity to request a reweight. I will also provide the weight tickets to the origin PPSO within seven GBDs after shipment pickup.

(1) Weighing Professional Books, Papers, and Equipment (PBP&E):

(a) When PBP&E (also known as Military (M-PRO) or Spouse (S- PRO)), are included as part of the shipment, the weight of such articles will be annotated separately on the inventory; weight may be obtained using bathroom, certified platform-type, or warehouse scales.

(b) In the event scales are not readily available, a constructive weight of seven pounds per cubic foot may be used for PBP&E and the symbol will be inserted by the TSP or agent after the weight to indicate a constructed weight was used.

(2) Reweighing:

(a) I agree to reweigh a shipment in accordance with the IT and 400NG.

(b) Upon request of the PPSO or customer to witness the reweigh, the TSP must provide reweigh date and time to give a reasonable opportunity for the interested parties to be present at the weighing.

(c) When a shipment is reweighed and the weight recorded is less than the net or gross weight secured at the initial weighing, I agree to update DPS by entering the lesser weight(s) prior to invoicing or within four GBDs of reweighing, whichever is earlier, and to invoice the U.S. Government on the lower of the two net or gross weights. I will also provide the weight tickets to the origin PPSO within seven GBDs after shipment pickup.

(d) In the event the reweigh is not performed prior to initial invoicing, I will submit a supplemental invoice to refund any reduced charges based upon the new weight obtained.

(e) I will reweigh all international shipments IAW IT Item 505 at destination to enable witnessed reweighs. Note: Some OTO locations don’t have certified scales; therefore, exceptions may apply.

(3) Lost Certified Weight Tickets:

(a) When certified weight tickets are lost and otherwise unobtainable, I must request prior approval from the PPSO to utilize a constructed weight to be paid for services rendered.

(b) Any request for payment based on a constructed weight must be in writing and contain a detailed description with all related documentation of the circumstances surrounding the loss of the weight tickets, to include all efforts to obtain certified true copies.

(c) The TSP is required to submit a legible inventory, signed by the customer or designated representative of all items packed and transported at U.S. Government’s expense. Upon PPSO approval, TSP must use the Weight Estimator (located at https://www.ustranscom.mil/dp3/weightestimator.cfm, download Weight Estimator) to obtain the cubed weight for items. For all items not covered in the Weight Estimator, the cube will be converted to a weight basis using seven pounds per cubic foot including PBP&E.

9. Removal of Property from Facilities Disqualified by DoW PPA: When the approval of my facilities or the SIT warehouse is rescinded by the DoW PPA from further use, and it is considered necessary by the PPSO to remove the personal property to prevent damage or contamination, I will immediately move the property to another DoW-approved warehouse. The costs of such removal will be at no expense to the U.S. Government or the customer.

10. Loss or Damage:

a. I will exercise care to prevent loss or damage of personal property in the process of packing and unpacking and will protect personal property in my possession.

b. I agree to follow all provisions outlined in the DP3 Claims and Liability Business Rules. The responsible TSP will submit a written “After Action” Report (AAR) within ten GBDs to the DoW PPA for all unusual occurrence shipments which includes the BL number, the customer’s name, the root cause of the unusual occurrence and efforts the TSP is taking to resolve. Once all mitigation efforts are complete, the TSP responsible will submit a written report of all known facts and events in chronological order.

c. If a claim is not settled within the 60-day period, I will, at that time and at the expiration of each succeeding 30-day period while the claim remains pending, advise the claimant in writing the status of the claim and the reasons for delay in making final disposition.

d. I will ensure the DPS is updated with final action taken, including date and total amount of the settlement.

e. I acknowledge that I am responsible for real property damage. Prior to a pack-out/delivery, I will install floor coverings in high traffic areas of interior areas (finished) living spaces (e.g., floor coverings for entry and interior hallways). In addition, I will protect doorways in high traffic areas (e.g., entry doorways, etc.) prior to a pack-out/delivery. Upon arrival and before departure from residence, I will conduct a joint inspection (walk-around) with the customer and report real property condition and note any damages (interior and exterior) in writing to the member on the "DP3 Real Property Damage Form" located at https://www.ustranscom.mil/dp3/docs/otherpdfs/0300+2021_Business_Rules/Real%20 Pr o perty%20Damage%20Form%201%20Feb%202021.pdf I will advise the customer to notify the responsible TSP within seven calendar days of the damage occurring during the pack-out/pickup/delivery regardless of whether the damage was reported on the form. My seven calendar day notification starts on the first day after the pickup/delivery dates. My failure to provide a point of contact for real property damage negates the seven calendar day period. I must arrange for a repair firm to inspect real property damage within 15 calendar days of notification by the customer. Customers must request a claim and seek recovery or restitution directly from the TSP responsible.

The TSP must allow the customer to file a claim for any damages to real property with the TSP. I must provide the "DP3 Real Property Damage Form" to the customer at pack-out/pickup/delivery.

11. Inconvenience Claim (IC):

a. I hereby reaffirm it is my responsibility to pick up on the agreed date and deliver shipments on or before the Required Delivery Date (RDD) as reflected on the BL, (i.e., to include short fuse shipments) and to meet the agreed upon delivery date out of SIT. When I am unable to meet these requirements, I must advise the customer on IC rules prior to the missed pickup, RDD or agreed upon delivery out of SIT as listed below. I will advise the customer they must file a claim with my company for payment and will outline the process for doing so.

b. I understand the IC process provides a simplified method for customer to account for inconveniences associated with my inability to meet agreed and/or required dates. I understand the IC is intended to offset expenses incurred by a customer and their dependents because they are not able to use necessary items in their shipment to establish their household. The per diem provides my company a method to calculate a baseline amount for IC payment by location for the customer. I understand that customers who are not able to use necessary items in their shipment to establish their household may incur personal expenses beyond the baseline amount and I will review and consider those claims in accordance with the guidance in B.11.g.

c. I agree to acknowledge an IC from a customer or a PPSO within five GBDs from the date of contact.

d. Reimbursement:

(1) I agree to reimburse the customer for inconvenience within 30 days of receipt of an IC. I will compensate the customer for all days that result from my failure to pick up on the agreed dates and/or deliver on or before the RDD as stated on the BL or correction notice thereof, when the member is available for delivery. I agree the inconvenience claim will be computed beginning the day after the agreed upon date or missed RDD as specified on the BL and ending the day that the shipment is actually delivered. The actual day of delivery will be included in the inconvenience claim period.

(2) I shall pay the customer a daily amount based on the U.S. Government meal and incidental expense (M&IE) per diem rate (excluding lodging) at the applicable https://www.ustranscom.mil/dp3/docs/otherpdfs/0300%2B2021_Business_Rules/Real%20Property%20Damage%20Form%201%20Feb%202021.pdf https://www.ustranscom.mil/dp3/docs/otherpdfs/0300%2B2021_Business_Rules/Real%20Property%20Damage%20Form%201%20Feb%202021.pdf https://www.ustranscom.mil/dp3/docs/otherpdfs/0300%2B2021_Business_Rules/Real%20Property%20Damage%20Form%201%20Feb%202021.pdf https://www.ustranscom.mil/dp3/docs/otherpdfs/0300%2B2021_Business_Rules/Real%20Property%20Damage%20Form%201%20Feb%202021.pdf pickup or delivery location for the customer and all dependents traveling with the customer on approved, funded relocation orders. Daily per diem rates can be found at (https://www.defensetravel.dod.mil/site/perdiemCalc.cfm).

(a) For customers, the payment is calculated as the full M&IE per diem rate for the number of days at the affected location.

(b) For each dependent traveling to the new location on approved, funded relocation orders, per diem is calculated at 75 percent of the full M&IE per diem rate for the number of days at the affected location.

(c) Dependents traveling with the customer on approved, funded relocation orders will be verified by the customer on the Inconvenience Claim Form.

(d) Calculated Daily Per Diem Example:

Customer receives 100% of daily M&IE per diem rate; spouse and one child 75% of daily M&IE per diem rate.

Location: Mesa, Arizona for one day, 27 February 2025

Service Member: $81.00 (Meals) + $5.00 (Incidentals) = $86.00 (ME&I)

Spouse and Dependents daily per diem at 75%: $86.00 * 75% = $64.50 * 2 = $129.00

Total Per Diem Payable = $86.00 + $129.00 = $215.00

e. Unaccompanied Baggage (UB): ICs for UB shipments will be solely based on actual expenses incurred and will follow the processes outlined in para B.11.f.

f. SIT: I am responsible for an IC payment when a shipment goes into SIT if I fail to make two documented unsuccessful attempts to contact the customer that are made six hours apart. Customers are authorized an IC between the date placed into SIT and the first available delivery date (FADD) out of SIT.

(1) I am responsible for an IC payment in the event I do not meet an RDD, and customer is not able to receive the shipment, due to good cause (i.e., hospitalization, training, etc.), on FADD provided by myself. Customers are authorized an IC between the RDD and the FADD. However, the request must be accompanied by proper documentation substantiating the claim (i.e., doctor’s evaluation, orders, etc.).

(2) I am responsible for an IC payment when a shipment is placed into SIT and I am unable to deliver the shipment out of SIT within the following dates whichever is later:

(a) Within seven GBDs of the date the customer makes first contact requesting delivery or

(b) Within two GBDs of the requested delivery date when the requested https://www.defensetravel.dod.mil/site/perdiemCalc.cfm date exceeds seven GBDs from when the customer makes first contact requesting delivery.

(c) Compensation is calculated using the methodology described in B.11.d.(2) -B.11.d.(4) above.

g.…