254_Security_Classification.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

Reference: The National Operations Security Program (NSPM)

DOD 5205.02

DODD 5205.02E

AFI10-701

75 ABW OPSEC Plan 448 SCMW OPSEC plan

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the DOD and Air Force-sponsored Operations Security (OPSEC) program. The OPSEC Program is directed by NSPM-28, DOD Publications, and applicable Air Force guidance.

OPSEC is a systematic means of identifying and protecting information, which an adversary could use to their advantage or to our disadvantage. Critical Information (CI) is generally unclassified but can become classified through compilation. This sensitive information has been identified by the organization’s OPSEC program as requiring protection. OPSEC Measures (OM) are control standards with which all personnel must comply in order to protect CI against adversaries.

RESPONSIBILITIES:

The 448 Supply Chain Management Wing-Hill (448 SCMW-Hill) Security Manager Michael Mazoyer or the OPSEC Program Coordinator Paul Baldwin will provide / approve OPSEC training curriculum for use by the contractor. Critical Information and Indicator Listings (CIILs) will be protected by all contract personnel. Approved organizational OPSEC measures will be used by all contract personnel to protect critical information in their possession and protect against current foreign intelligence and industrial espionage threats. The OPSEC PM/Coordinator and the Lead contractor must ensure all contract personnel working on the contract or having access to CI attend initial and annually recurring refresher training and that the approved curriculum is presented. Training will be provided before contract personnel are allowed access to or handling of critical information. All contract personnel will comply with the organizations OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat/vulnerability, or other fundamental changes to the OPSEC program. The OPSEC Coordinator is responsible for contacting the OPSEC Program Manager if the contract does not have OPSEC written into it. If the contractor’s duties require off base handling of an organization’s CI then the OPSEC coordinator will ensure that the contractor is briefed on the proper securing of CI at the off base site.

The OPSEC PM/Coordinator for the organization will track OPSEC training statistics for all personnel working on the contract, when each individual has received the required OPSEC training, and when refresher training is due. Forward training statistics to the installation OPSEC PM at the end of each calendar quarter and/or upon request. The OPSEC Coordinator will provide a copy of the 448 SCMW-Hill OPSEC Plan to the contractor upon request and the contractor is subject to the requirements of that plan. The 448 SCMW-Hill OPSEC Plan is “controlled unclassified information (CUI)” and distribution outside the constraints of the contract in part or in its entirety is prohibited. Upon completion of the contract, the contractor will destroy the OPSEC Plan by shredding the document so that it cannot be reconstructed and will delete any electronic copies or the contractor will turn over the OPSEC plan back to the unit OPSEC coordinator for destruction.

Contactors with OPSEC requirements within a contract must ensure employees receive OPSEC training as specified within the contract. Accomplishment of training must not exceed 90 days from initial assignment to a contract with OPSEC requirements. Annual training will be accomplished NLT 30 September of each year. The contractor personnel will not be given access to an organization's CIIL until after training has been completed and documented by the organization OPSEC Coordinator. Prior to seeking approval through Hill AFB Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an OPSEC review by the 448 SCMW-Hill Security Manager or the 448 SCMW-Hill OPSEC PM/Coordinator.

All personnel must promptly report OPSEC related incidents, issues, and concerns to:

448 SCMW-Hill Security manager Michael J. Mazoyer (801)777-4074 michael.mazoyer.1@us.af.mil or 448 SCMW-Hill OPSEC PM/Coordinator Paul Baldwin (801)586-5712 paul.baldwin.3@us.af.mil who will then report it to the installation OPSEC PM, (801)-586-8008

Prime Contract or Solicitation #: FA8251-23-R-0007

Performance Work Statement F-16 Commercial Fire Control Computer (CFCC) Repair

Work Type: Repair Equipment Type: F16 C/D Block 25/30/32 Aircraft

SEPTEMBER 11, 2023

Department of the Air Force Ogden Air Logistics Center (AFMC) Hill AFB, Utah 84056-5609

416th Supply Chain Management Squadron

PR No. FD20202300006

FA8251-23-R-0007

11 September 2023 Page 1

Table of Contents

1.0 Scope

1.1 Scope of Contract

1.2 NFF

1.3 Condemnation

1.4 Standard Repair

1.5 Over and Above

1.6 O&A Request

1.7 Repair

1.8 Mission Essential

1.9 Surge

1.10 Continuous Improvement

2.0 General Information

2.1 General Work Requirement

3.0 Receipt of Equipment at Facility

3.1 Handling/Preservation

3.2 Inventory Inspection

4.0 Specific Work Requirements:

4.1 Cleaning

4.2 Disassembly

4.3 Corrosion Control and Treatment

4.4 Maintenance

4.5 Finishing

4.6 Configuration Management

4.7 Maintenance Philosophy

4.8 Clarifying Information

4.9 NDI

4.10 Uses & Safeguarding Information

5.0 Markings

5.1 IUID Marking

6.0 Security and Foreign Disclosure:

6.1 Security Classification

7.0 Special Tools, Special Test Equipment, and Support Equipment (ST/STE/SE) as GFE:

7.1 GFE Required

8.0 Government Furnished Property and Services

8.1 GFE/GFM/GFP

8.2 Supply Chain Risk Management (SCRM)

8.3 System Securities Plan & SCRM Plan

9.0 Continuity of Operations

9.1 COOP Plan

9.2 The plan will explain:

10.0 Foreign Influence

10.1 Foreign Disclosure Restrictions Apply

11.0 Cybersecurity ........................................................................................................ Error! Bookmark not defined.

11.1 System Security Plan

11.2 The contractor's plan shall:

12.0 Deliverable Data Requirements:

12.1 CDRL’s

12.2 CPP - At a minimum, the CPP shall address:

13.0 Services Summary

14.0 Safety and Health

14.1 Occupational Safety & Health

14.2 Mishap notifications shall contain, as a minimum, the following information:

15.0 Technical Orders and Other Directives

16.0 Applicable Government Documents

17.0 Applicable Non-Government Publications

18.0 Terms Explained

18.1 Air Force Acronyms

11 September 2023 Page 2

1.0 Scope

1.1 Scope of Contract

1.1.1 This performance work statement (PWS) establishes the requirement to test and, if necessary, perform essential repair to restore the F-16 Commercial Fire Control Computer (CFCC) to a serviceable condition, but not like new cosmetically. The National Stock Number (NSN) for this part is 1270-01-569-0151 and part number is 57737A100000-02.

The contractor is the OEM and sole source provider of the CFCC. The OEM owns all data rights to repair the CFCC and is responsible for all technical expertise, labor, and material to meet the requirements as established within this PWS. Additional work discovered after award of contract that is not covered by the contract will be negotiated and approved by the contracting officer (CO) through the Administrative Contracting Officer (ACO) prior to work being started. This is a repair services Indefinite Delivery Indefinite Quantity (IDIQ) contract with a five-year ordering period. The CFCC asset or Government Furnished Product (GFP) or Line Replaceable Unit (LRU) are the same – NSN 1270-01-569-0151 (Part Number 57737A100000-02).

1.2 NFF

1.2.1 NFF: No Fault Found consists of an asset that retests okay (RTOK) or Cannot Duplicate (CND). CFCCs that pass initial test will use the No Fault Found Contract Line-Item Number (CLIN) for compensation of the handling and initial test effort and be shipped back to USAF.

1.3 Condemnation

1.3.1 Condemnation and Repair Update: Authorization for condemnation shall be obtained in writing through the CO/ACO and from the Equipment Specialist. Items subjected to a catastrophic failure will not be repaired at the delivery order repair price and shall be negotiated separately on a case-by-case basis. The Government anticipates all assets sent to the contractor to be repaired, and the contractor shall repair all units per agreed upon repair price. Any asset that meets BER or Over and Above requirements must be verified and signed off by DCMA, and the CO must be notified in writing within 60 days of receipt of the asset. The 416 SCMS may evaluate the asset claim, and if they agree, either a modification to the delivery order may be performed to fund the asset, or direction to ship the asset back to Air Force Supply may be given, and another unit may be shipped to the contractor to take the original asset’s place.

1.3.2 The contractor shall not attempt to, without prior written approval from the CO/ACO and the 416 SCMS, exceed 75% of the current Stock List Price (SLP) of a new item identified by the contract by the contract line-item number (CLIN), as this is considered beyond economical repair (BER). If the contractor estimates the total costs of repair of any end item received will exceed the above percentage of the SLP, the contractor shall notify DCMA who must verify and sign off request and then send the request to the PCO/ACO in writing within 60 days of receipt of asset. Contractor shall not perform further services

11 September 2023 Page 3 on any such items except at the direction of the PCO/ACO. The contractor shall take special effort and ensure costs are not built up past the quoted delivery order repair price of any item. Beyond Economical Repair CLIN is meant to reimburse for screening efforts when assets are identified not to be feasibly repairable before work takes place and not meant to compensate all troubleshooting efforts on an item after the work is done. All costs contractor expects to be compensated above repair price must be negotiated before work is to be performed.

1.4 Standard Repair

1.4.1 Standard Repair: The Standard Repairs are comprised of common repairs and replacements performed to bring the CFCC/GFP to a serviceable condition. This repair shall include simple to extensive repair/replacement of components of the LRU. The simple repair/replacement, “Minor Repair”, shall refer to the historical average effort and cost to repair an item to serviceable A condition status. The extensive repair/replacement, “Major Repair”, shall refer to known rare instances where repair to serviceable entails extra parts, above average costs, and/or additional labor. The repair includes all teardown, test, evaluation, troubleshooting, and repairing or replacing parts in the LRU.

1.4.1.1 Reusable disassembled item components may be used as replacement components for restoring functionality of other items. These reusable components are not required to maintain end-item identification. The repair processes used by the contractor shall restore the LRU to serviceable A condition in the facility owned and/or operated by the contractor.

1.5 Over and Above

1.5.1 Over and Above: Over and Above work is defined by one or more of the following on the CFCC LRU assembly: burned, misapplication of power applied to end items, damage from drop or improper packing or handling, misconfigured, the need to cannibalize, or received with a quantity of greater than two defective SRUs that will require complete replacement.

1.5.2 Initial O&A inspection shall consist of information gathering and documentation. Retain any evidence of possible Over and Above issues to show Beyond Fair Wear and Tear (BFWT). If BFWT is suspected, as a minimum, photos of the damage equipment shall be taken, and a narrative of the findings shall be sent to the Contracting Officer (CO). Final judgment on suspected BFWT will be made by the CO in coordination with the 416 SCMS program office.

1.6 O&A Request

1.6.1 O&A Request: Request for consideration of Over and Above (O&A) shall be made in writing utilizing procedures identified below in accordance with DFARS PG 217.77 (negotiations shall be IAW DFARS Clause 252.217.7028) and shall follow the instructions stated in the O&A CLIN of this contract. The contractor shall prepare O&A

11 September 2023 Page 4 workload with the following steps:

1.6.1.1 Step 1 – Contractor shall prepare a Work Request (WR). Each WR shall include Contract/Delivery Order, description of the work to be completed, estimated additional cost and hours, justification for WR.

1.6.1.2 Step 2 – Contractor shall send WR information via email to the CFCC program office (Program Manager, Engineer), ACO, CO for review.

1.6.1.3 Step 3 – The CFCC program office shall review and coordinate with CO and the CO will send final approval/disapproval to the contractor prior to O&A related work commencing.

1.7 Repair

1.7.1 The contractor shall not design, develop, or manufacture tooling or test equipment of a specialized nature as a requirement under this work statement without the express direction of the CO through the ACO.

1.7.2 The functional capabilities for which the end-item was designed shall not be changed, modified, or altered unless such changes are directed by this work statement and authorized by the Cognizant Engineer.

1.7.3 The contractor will be allowed to move components among reparable end-items to expedite repair, versus maintaining internal serial number integrity.

1.7.4 The contractor will return the recoverable item to the original specifications of the item.

The contractor shall perform an acceptance test and checkout of each completed end-item to assure serviceability prior to presentation to the Government. If the USAF receives a deficient asset item, it shall be returned to the OEM to process as a Product Quality Deficiency Report (PQDR) and processed as such upon receipt. If DCMA determines the OEM failed to conform to contract requirements the OEM shall re-perform the repair IAW Clause 52.246-4, Inspection of Services - Fixed Price.

1.7.5 Product Quality Deficiency Report: IAW T.O. 00- 35D-54, - a report of deficiency resulting from an initial failure, defect, or nonconforming condition discovered on a new, newly repaired, or overhauled product, and which is discovered when that product is placed into service. It also includes failure that is suspected to be caused by a latent defect resulting from poor workmanship, nonconformance to applicable specifications, drawings, standards, processes, or other technical requirements.

1.7.6 MICAPs will be identified to the contractor and work priorities will be set by direction of the Supply Planner (SP), Equipment Specialist (ES), or Logistics Management Specialist (LMS) to ensure “repair to demand” versus “batch repairing”.

1.7.7 The contractor shall expend no effort under this PWS for additional engineering design or development of the items or components. At no additional cost to the Government, the contractor shall improve their process and maintainability.

1.7.8 The contractor will be allowed to retain condemned units for cannibalization of spare parts

11 September 2023 Page 5 upon approval of the Equipment Specialist. Upon completion of the contract, per existing disposal code assigned to the item, the contractor shall dispose of parts retained for cannibalization.

1.7.9 CFCC LRUs identified as NFF/CND/RTOK shall be returned to the Government within 30 calendar days. CFCC LRUs shall be returned within 60 calendar days. CFCC LRUs that require standard repair containing major repair of components shall be repaired and returned to the Government within 90 calendar days. If long lead replacement items are required, within 210 days.

1.7.10 The contractor shall provide a cumulative repair Monthly Status Report of each LRU identified for repair or replacements on the CFCC detailing all SRU repair or replacements over the period of the contract in an EXCEL format to the CO and LMS monthly (IAW CDRL A005, Monthly Status Report).

1.7.11 The cumulative Monthly Status Report shall be created in an EXCEL format, broken down by LRU and SRU (NSN/serial number), and shall include the following: acceptance diagnostic fault (detailing when an asset passes test in initial or final acceptance testing), each SRU repairs and/or replacements completed, each LRU component repair/replacements, total quantity and cost of each repair, monthly production of assets, quantity of assets at the repair facility, and a cumulative repair quantity and cost totals at the SRU/LRU level. The report shall also identify the lead time for the delivery schedule of each LRU down to actual lead time in three separate categories which shall be identified as 1) less than 30-day NFF/CND/RTOK, 2) less than 60-day standard repair 3) less than 90-day standard repair containing major repair/replacement asset, and 4) less than 210-day long lead replacement items repairs, along with, if any, O&A/Condemn/BER assets.

1.8 Mission Essential

1.8.1 This effort is considered a Mission Essential Service with an MIEC code of 3AE Weapon system is not capable of any mission when subsystem is not operating. Critical to the operation of the subsystem (AFMCMAN23-101V5, pages 61-62). The contractor shall contact the CO for instructions concerning services if a crisis occurs. In reference to DFARS 252.232-7007, the Government shall maintain the right to exercise the surge clause as determined.

1.9 Surge (IAW CDRL B003, Production Surge Plan)

1.9.1 In the event where DoD experiences an unplanned spike or sudden increase in demand, due to major theater warfare or a national emergency (also known as surge) and invokes surge: The contractor shall make every effort to meet and sustain this demand for quantity levels above and beyond normal peacetime requirements. After being notified of the surge demand in writing, the contractor may see additional orders and/or will see the priority status elevated on current orders. The contractor may do one or more of the following to fill the demand:

1.9.1.1 The contractor will maintain a certain level of safety stock on components

11 September 2023 Page 6 to draw from to perform.

1.9.1.2 Add additional shift to increase production within the contractor and with suppliers.

1.9.1.3 The contractor will work with various manufacturing and/or repair sites and their supply chains to expedite production.

1.9.2 DoD will be notified in advance of and be given the opportunity to negotiate any expedite charges that might apply at the time of surge. Contractual requirements for production of this contract are addressed in Part 2 of the PWS. The schedule and surge requirements will be on a best-effort basis Transition Plan. (IAW CDRL B003, Production Surge Plan).

1.10 Continuous Improvement

1.10.1 An Obsolescence and Configuration Management (OCM) program shall be established and monitored by the contractor. The OCM program shall include engineering support for the CFCC system along with maintenance of all tooling and equipment needed to perform repair.

1.10.2 The contractor shall obtain any waivers needed for all tooling and equipment used in the CFCC repair that is not within cybersecurity compliance.

1.10.3 Air Force cybersecurity requirements shall be maintained for the CFCC security level.

1.10.4 The contractor shall address repair time, security, software upgrades, cost restraints, and continuous program improvement. The contractor shall develop, implement, and manage a sustainment program that economically and rapidly supports the F-16 CFCC program requirements under secure conditions, while providing accurate program data to identify tooling, equipment, and process anomalies needing improvement.

2.0 General Information

2.1 General Work Requirement

2.1.1 This performance work statement establishes the minimum work requirements for the disassembly, inspection, repair and update to the latest approved configuration, re-assembly, and test to restore the F-16 repaired items to a serviceable condition (but not like new cosmetically). All assets returned as serviceable shall be returned to HILL AFB (DoDAAC SV3210).

2.1.2 The contractor will be allowed to move components among end-items to expedite repair, versus maintaining serial number integrity, however this practice shall be limited as to not produce BER assets as a direct result.

2.1.3 Technical Data: The removal, disassembly, inspection, essential repair, update, test, assembly, and reinstallation of component parts and equipment will conform to the instructions in this work statement and all applicable technical data/directives listed in

11 September 2023 Page 7

Section 16.

3.0 Receipt of Equipment at Facility

3.1 Handling/Preservation

3.1.1 The contractor shall exercise care to prevent any damage, pilferage, or loss of GFP/GFE while it is in the contractor’s possession. While the end-items are in the possession of the contractor, they shall be handled and stored in such a manner to preclude damage by handling, weather, or foreign matter.

3.1.2 The contractor shall store all GFP in a secure area and provide protection against all adverse environment conditions based on the classification of the LRU.

3.1.3 Reusable shipping containers, packaging, and crating material in which the GFP is received shall be handled with care. Reusable containers shall be stored for reuse, and configuration of the containers shall not be altered.

3.2 Inventory Inspection

3.2.1 An inspection for proper identity, completeness, and obvious damage shall be performed on each item upon its receipt at the contractor’s facility.

3.2.2 Any deficiencies found as a result of initial inspection shall be brought to the attention of the ACO or DCMA Quality Assurance Representative (QAR). Disposition shall be directed back from the Equipment Specialist, SP, or LMS through the ACO or DCMA

QAR.

4.0 Specific Work Requirements

4.1 Cleaning

4.1.1 The contractor shall clean the end-items thoroughly prior to and after disassembly and maintain cleanliness during this maintenance effort IAW T.O. 1-1-689 and T.O. 00-25- 234 and MIL-HDBK- 454C.

4.1.2 INSPECTION: The contractor shall accomplish a thorough inspection of each end-item, reusable or replacement component parts and materials (external and internal) for the following: End-item for loose or missing parts, materials and attaching hardware.

4.1.3 End-item for dents, punctures, bent pins, cracked, wrinkled, or misalign conditions that may cause chafing.

4.1.4 Component parts, material, and attaching hardware to determine serviceability, and

11 September 2023 Page 8 conformance with the technical data.

4.1.5 Structural parts for dents, punctures, cracks, oversized holes, evidence of chafing, corrosion, and deterioration.

4.2 Disassembly

4.2.1 The contractor shall receive, inspect, and disassemble each item only to the extent necessary to accomplish inspection, testing, fault isolation, and maintenance IAW technical data listed in Section 16 as applicable, and Government approved contractor technical data.

4.2.2 Replacement parts and materials shall also be IAW Section 16. If a deviation from the technical data is required, and the contractor desires the use of a substitute part, an approval request in letterform shall be submitted to the ACO/CO, who will obtain the appropriate engineering office determination and respond accordingly.

4.2.3 Serviceable precision matched or mated component parts shall be handled in a manner to ensure their reinstallation as a matched set.

4.2.4 Maintenance of the items shall be accomplished using only current Government approved technical data.

4.2.5 If any applicable technical data is changed, revised, amended, or supplemented after award of contract, and an increase or decrease in work requirements is involved, the contractor shall inform the ACO/CO and the LMS. Any increase in labor and/or materials shall be accomplished by a revision to this work statement and other appendix packages as applicable, and negotiated by the CO, prior to work being accomplished.

4.3 Corrosion Control and Treatment

4.3.1 Accomplish corrosion control and treatment as required, using methods and materials IAW and T.O. 1-1-689, SAE-AS12500 and MIL-STD-1568D.

4.4 Maintenance

4.4.1 The contractor shall repair, update, inspect, reassemble, and test the reworked end-item and components and calibrate, if applicable, IAW T.O. 00-25-234 or other Government approved technical data, and the technical data listed in Section 16 as applicable.

4.5 Finishing

4.5.1 The contractor shall replace damaged internal protective finish to the extent necessary to ensure serviceability and provide adequate protection IAW Government approved contractor technical data, and the technical data listed in Section 16.

4.5.2 External finishing of the end-item shall be accomplished only to the extent necessary to

11 September 2023 Page 9 provide adequate protection, using high quality commercially available finish materials.

Minor scratches are to be touched up or spot painted to provide necessary protection.

4.5.3 The contractor shall replace damaged markings, identification, and decals as outlined per the applicable technical data, Government approved contractor technical data and MIL-

STD-130.

4.6 Configuration Management

4.6.1 Repair Update: The contractor shall update the end-items as outlined in technical orders and other directives listed in Section 16. This shall be accomplished concurrently with the maintenance required by this work statement and shall be to the latest approved and supportable configuration.

4.6.2 The contractor shall induct all CFCC (1270-01-569-0151) configurations in the contract.

Performance and reliability Class 2 Revision Notices will be incorporated as determined by the contractor. These revision notices will be incorporated under the repair contract.

Correction of deficiency (COD) updates and improvement engineering change proposals (ECPs) which are negotiated and funded separately, will be accomplished in accordance with the mutually agreed to schedules. Items will not be updated to the latest approved and supportable configuration specified in the contract under the following conditions:

4.6.3 Updates are not funded/authorized separately, e.g., spares not covered by the production COD clause.

4.6.4 Updates will not be required if the received configuration is compatible with configurations in use at the time of receipt and those updates are not required to satisfy update schedules which are bilaterally agreed to between the contractor and the Government.

4.6.5 The contractor shall manage all DMS issues to sustain the CFCC LRU for its life within the F-16 Military Aircraft. As such, replacement items can include new major components] Fit, Form, Function, and Interface (F3I) for the CFCC LRU is maintained.

For this contract, all costs to sustain DMS issues are the responsibility of the contractor to acquire those parts to sustain the CFCC LRU.

4.6.6 Serial number tracking by the contractor is REQUIRED for all GFP.

4.6.7 Unique Identification (UID) Marking: The UID mark IAW MIL- STD-130 shall be verified, refer to T.O. 00-25-260. The CFCC part number UID label is THT-67-428 and shall be placed in accordance with the 57737A10000 Government (JEDMICS) drawing.

4.6.8 NFF/CND/RTOK Conditions: End-Items deemed to be serviceable on initial inspection, and subsequently pass acceptance test procedures (ATP) will not be repaired and will be considered end-items that meet NFF/CND/RTOK conditions.

4.6.9 Government Acceptance Inspection: All completed work shall be subject to acceptance inspection by DCMA QAR.

4.6.10 The contractor shall perform an acceptance test and checkout of each completed end-

11 September 2023 Page 10 item to assure serviceability prior to presentation to the Government. Test and checkout shall be accomplished IAW the specifications found in Section 16 and Government approved contractor tech data.

4.6.11 Upon satisfactory completion of final acceptance test, the contractor shall cover and seal all port, vents, and electrical connections/plugs with suitable caps to prevent entry of foreign matter or damage during handling and shipment IAW NAS 847.

4.7 Maintenance Philosophy

4.7.1 Maintenance Philosophy: It is the intent of the Government under this contract that the contractor will induct funded end-item(s) (for the purpose of this contract, end-item is defined as the NSN listed under the CLIN) and repair that end item and subcomponents.

Items are to be repaired to a serviceable operating condition.

4.8 Clarifying Information

4.8.1 Clarification Statement: NSN Stock classes change frequently. The item itself does not change. When the stock class changes but the NIIN does not change, treat the CLIN as the same item.

4.9 NDI

4.9.1 Non-Destructive Inspection (NDI): The contractor shall accomplish NDI by disassembly to the extent necessary to assure a definite acceptance or rejection of the suspected item or area. (NOTE: T.O. 33B-1-1 provides examples of inspection methods and criteria).

4.9.2 The contractor shall accomplish inspections during the maintenance process while the item is accessible for the following:

4.9.3 Correct dimensions of replacement parts.

4.9.4 Correct type and quantity of parts and materials.

4.9.5 Check for insulation between dissimilar metals.

4.10 Uses & Safeguarding Information

4.10.1 Uses and Safeguarding of Information: Information from the secure website is considered proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor’s name and contract number associated with the data.

11 September 2023 Page 11

5.0 Markings

5.1 IUID Marking

5.1.1 The contractor shall replace damaged markings, identification, and decals IAW the latest version of MIL-STD-130. IUID markings are required for all end-items and subcomponents to the end-item IAW with contractor’s technical order and the Government’s technical orders and directives (IAW AFMCI 20-104 PARAGRAPH 3.12).

5.1.2 IUID markings currently in place on items undergoing repair shall be protected from damage or removal during repair. Ensure 2-D matrix IUID markings are readable per TO 00-25-260. Should IUID marking be rendered unreadable during repair, the contractor shall notify the CO for determination.

5.1.3 IUID markings which will be potentially destroyed during repair due to technical direction (i.e., paint removal, sand blasting, etc.) shall be recorded prior to maintenance action and replaced with the same UII as part of the repair action.

5.1.4 IUID is an international standard based approach adopted by the DOD that makes the acquisition, repair, and deployment of items faster and more efficient and shall be utilized by all Commercial Fire Control Computers.

5.1.5 See https://dodprocurementtoolbox.com/search?keywords=iuid

6.0 Security and Foreign Disclosure:

6.1 Security Classification

6.1.1 Contract Security Classification Specification DD Form 254 IS REQUIRED. The CFCC is a classified item with a SECRET level (SCU 9 and beyond). The CFCC is classified due to the software that is installed in it and shall be maintained throughout its repair efforts

6.1.2 Per export control limitations, Foreign Disclosure Restrictions IAW AFMCMAN 21-149, and AFMCI 20-102 Do Apply.

6.1.3 Quality: The inspection system requirements acceptable to the Government are specified in Schedule Section E of the contract/order.

6.1.4 Accessory and Component Reuse, Maintenance, and Replacement: Maintenance and replacement of accessory and component parts will be IAW specific work requirements listed in Section 3 of this work statement, the technical data cited in Section 4, and the appropriate Government-approved contractor technical data.

6.1.5 Electrostatic Discharge (ESD): Proper ESD procedures shall be in place prior to contract award. The contractor shall implement or maintain an ESD control program. Reference https://dodprocurementtoolbox.com/search?keywords=iuid

11 September 2023 Page 12

ANSI/ESD-S20.20-2014, ESD-TR20.20.

7.0 Special Tools, Special Test Equipment, and Support Equipment (ST/STE/SE) as GFE:

7.1 GFE Required

7.1.1 Board Level Testers (BLT) (PN: 57745A100000-000, SN:0001 & SN:0002). The contractor shall maintain all tooling and equipment required to repair.

7.1.2 No additional ST/STE/SE necessary to accomplish maintenance and ensure serviceability of the end-item(s) will be provided under this contract.

7.1.3 Any type of GFP (to include end-items) will always be returned or shipped utilizing a DD 1348-1A unless otherwise directed by the ACO/CO and LMS representative. This is the authorized shipping document, not a DD250, so that the item can be properly identified upon contractor’s return.

8.0 Government Furnished Property and Services

8.1 GFE/GFM/GFP

8.1.1 Government-Furnished Equipment (GFE): An all-inclusive term to define all types of equipment defined in FAR, Part 45. It includes facilities, plant equipment, agency peculiar property, special tooling, and special test equipment. Annual reporting dollar values on Department of Defense (DOD) property in the custody of contractors (DD Form 1662, DOD Property in the Custody of Contractors), items must be categorized according to the specific FAR property definitions. The GFE, if authorized on this contract will be stated, and identified in an attachment to this PWS or as another uniquely identified section as part of this contract. The contractor will comply with the GFE related clauses in the basic contract.

8.1.2 Government-Furnished Material (GFM): Government property supplied to the contractor, for incorporation into an end-item to be delivered under the contract or which may be consumed in the performance of the contract. It includes, but is not limited to, raw and processed material, parts, components, and assemblies. The GFM is also referred to as materials and direct materials under the terms of the contract (FAR 45.301).

8.1.3 Additional GFM Will "NOT" be provided. However, there was GFM from the previous Program Office Contract FA8251-18-D-0019 that will be utilized for GFP requirements.

The contractor shall provide an Annual Government Property Inventory Report. The contractor shall conduct an annual 100% physical inventory over the course of a year’s Government Furnished Material (GFM) / Property (GFP) / Equipment (GFE):

8.1.4 GFP to be repaired: Noun: CFCC; NSN: 1270-01-569-0151WF; PN: 57737A100000-02

8.1.5 Government Property Inventory Report: The contractor shall provide an Annual

11 September 2023 Page 13

Government Property Inventory Report. The contractor shall conduct an annual 100% physical inventory over the course of a year’s time of each NIIN/PN.

9.0 Supply Chain Risk Management (IAW CDRL B001, SCRM)

9.1 SCRM (IAW CDRL B001, SCRM)

9.1.1 The contractor shall identify, assess, plan for, and mitigate actual or potential threats, vulnerabilities, and disruptions to the Air Force's supply chain throughout the lifecycle to ensure mission effectiveness. The contractor shall inform and include the Government in any mitigations or alterations to the program.

9.1.2 The SCRM plan shall address the broad spectrum of supply chain risks that have the potential to: jeopardize the integrity of products, services, people, and technologies;

compromise intellectual property; disrupt the flow of product, materiel, information, and finances needed for continued Air Force operations; and drive materiel cost increases to the program.

9.1.3 The contractor shall develop and execute processes for identifying supply chain risks as early as possible; the persistent and comprehensive tracking, monitoring, and re-evaluation of supply chain risks and their corresponding mitigation actions; and communicating supply chain risks to affected stakeholders and the Government.

9.1.4 The contractor shall notify in writing the identified actual and potential supply chain risks.

The contractor's SCRM program and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product and/or service.

9.1.5 As part of the overall SCRM approach, the contractor shall establish, document, and maintain documentation about subcontractors/vendors for all parts that will be used for Government contracts.

9.1.6 The contractor shall continuously monitor their sources of supply for unknown, unauthorized, non-certified, or unqualified sources providing parts or services from any sub-tier supplier within the contractor's supply chain. The contractor shall investigate and submit findings to include root causes, impacts and a corrective action (IAW CDRL

B001, SCRM).

10.0 Continuity of Operations (IAW CDRL B001, SCRM)

10.1 COOP Plan (IAW CDRL B001, SCRM)

10.1.1 Contractor shall include a SCRM plan detailing the offeror's supply chain risk management approach, providing specific emphasis on the risks associated with a.)

Continuity of Operations b.) Foreign Influence and c.) Cybersecurity. The contractor shall detail the specific supply chain risk (listed below) and provide a management and

11 September 2023 Page 14 mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.

10.1.2 The contractor will develop and/or update a Continuity of Operations Plan (COOP), also known as a Business Operations Plan, which outlines the processes and actions to prepare for, and respond to, unplanned natural and man-made disruptions to mission essential operations and provide that to the U.S. Government. The COOP will address disruptions caused by:

10.1.3 a) natural causes possible in the local vicinity (winter weather, earthquakes, hurricanes, fires, flooding, wind, pandemics, etc.) and

10.1.4 b) man-made causes (cyber-attacks, electrical outages, strikes affecting workforce, civil unrest, modes of transportation, and receiving/shipping goods, etc.

10.2 The plan will explain:

10.2.1 a) how work will continue in the same or alternate facility(ies),

10.2.2 b) ability to use and/or augment the current workforce,

10.2.3 c) ability to repair/restore key infrastructure (machinery, computers, logistics etc.)

10.2.4 d) how to communicate with and inform the US Government and others in the supply chain.

10.2.5 Contractor shall provide essential records management for personnel working on U.S.

Government contracts. Records will be accessible to key members of the organization.

Contractor shall ensure continuous records management support (training, etc.) despite any changes in personnel.

10.2.6 If applicable the contractor shall prepare for the continuation of essential DOD services during crisis IAW DFARS 252.237-7023, DFARS 252.237-7024, and other applicable references as necessary. In a state of emergency, if the Government deems necessary, the contractor shall provide all services necessary to ensure mission accomplishment. On occasion, services may be required to support an activation, or exercise of contingency plans outside normal duty hours.

11.0 Foreign Influence (IAW CDRL B001, SCRM)

11.1 Foreign Disclosure Restrictions Apply

11.1.1 The contractor shall disclose any Foreign Ownership, Control, or Influence (FOCI) for the purpose of initial or continued facility clearance eligibility. A Standard Form 328 Certificate Pertaining to Foreign Interest shall be submitted to the Government cognizant security office specified in each DD254.

11.1.2 The contractor shall provide information regarding FOCI. If the contract requires access

11 September 2023 Page 15 to classified information, DD254, Contract Security Classification Specification, shall be required. Contractor shall provide an update on its financial health and potential FOCI when a merger or acquisition occurs.

11.1.3 Foreign contractor participation is excluded at the prime and subcontractor level, unless authorized through a current approved National Interest Determination (NID). It is solely the responsibility of the contractor to obtain necessary certification from the U.S.

Department of State and to comply with the federal laws and regulations. Question must be directed to the U. S. Department of State’s Directive of Defense Trade Controls.

11.1.4 Subcontract Management. The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team only after notification to the Procuring Contracting Officer (PCO) and Contracting Officer Representative (COR).

11.1.5 Foreign Disclosure: Foreign Disclosure Restrictions apply.

12.0 Cybersecurity (CDRL B001, SCRM)

12.1 System Security Plan

12.1.1 The contractor shall develop and implement a cybersecurity protection of supply chain information plan and provide a copy to the U. S. Government. The contractor shall conduct early and continuous monitoring throughout the contract to prevent or reduce impacts of cyber vulnerabilities where adversaries are able to exploit, steal, alter, manipulate, interrupt, or destroy system functionality, information, or technology.

12.2 The contractor's plan shall:

12.2.1 a) make specific reference to those aspects of the National Institute of Standards and Technology Special Publication (NIST SP) 800-161, “Supply Chain Risk Management Practices for Federal Information Systems and Organizations” that represent the contractor's implemented processes and practices.

12.2.2 b) include a description of how the contractor shall protect the supply chain from exploitation due to the insertion of counterfeits/malware, unauthorized production, tampering, theft, insertion of malicious software and hardware, functionality alteration, and any other elements that would allow adversaries to gain unauthorized access to data, alter data, interrupt communications, or otherwise disrupt operations.

12.2.3 c) inform the U. S. Government of any instances of unauthorized access and/or compromise, such as those listed in item “b” to contractor’s digital information and parts and components.

12.2.4 d) make specific reference to those aspects of NIST SP 800-53 that represent the

11 September 2023 Page 16 processes and practices the contractor will implement. The plan and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product.

12.2.5 The contractor and any subcontractors shall provide to the Government a system security plan (or extract thereof) and any associated plans of action developed to satisfy the adequate security requirements of DFARS 252.204-7012, and in accordance with NIST Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations” in effect at the time the solicitation is issued or as authorized by the contracting officer, to describe the contractor’s unclassified information system(s)/network(s) where covered defense information associated with the execution and performance of this contract is processed, is stored, or transmits.

12.2.6 The contractor shall {develop, update} an incident-handling capability plan that utilizes guidance provided in NIST SP 800-61 revision 2, Computer Security Incident Handling Guide, consisting of 1) incident response policy and plan, 2) procedures for performing incident handling and reporting, 3) guidelines for communicating with outside parties regarding incidents, 4) incident team structure and staffing model, 5) relationships and lines of communication between the incident response team and other groups, both internal and external, 6) services the incident response team should provide, and 7) staffing and training the incident response team. Any incident reported to Defense Industrial Base Cybersecurity Program (https:\\dibnet.DoD.mil) shall also be reported to the responsible contracting officer within 24 hours.

12.2.7 The contractor shall provide information to obtain a Defense Intelligence Agency – Threat Assessment Center (DIA-TAC) Report when Critical Components are known based on the Functional Thread Analysis. The contractor shall trace the Bill of Materials to the lowest critical components. The contractor shall update design via system engineering processes to ensure above-medium risk components are not in the system.

12.2.8 The contractor shall ensure all hardware, with special emphasis on lowest critical components (CCs) and components containing Critical Program Information (CPI), are from trusted sources and are manufactured by approved personnel as documented in the contractor Security Plan. The contractor shall develop a SCRM plan documented in the contractor Security Plan, in accordance with (IAW) the current version of Committee on National Security Systems Directive (CNSSD) No. 505 and NIST SP 800-161, to mitigate supply chain risk. The contractor shall ensure that no critical components procured are on the Section 806 (National Defense Authorization Act for FY 2011 (Public Law 111-383)) and Section 2339a (Title 10, United States Code) Lists in the Supplier Performance Risk System (SPRS) (CDRL 25, 27, 29). The contractor shall develop and implement a Counterfeit Parts Prevention Program in compliance with Defense Federal Regulation (DFAR) 252.246–7007 Contractor Counterfeit Electronic Part Detection and Avoidance System, using SAE AS5553, SAE AS6171, SAE AS6081, and Independent Distributors of Electronics Association (IDEA) Standard [IDEA-STD-1010B] or similar practices to prevent the inclusion of counterfeit parts or parts with malicious logic. The contractor shall perform acceptance testing on lowest CCs and components containing CPI in accordance with the Counterfeit Parts Prevention Program.

12.2.9 The contractor shall implement Department of Defense (DoD) Trusted Systems and

11 September 2023 Page 17

Networks (TSN) strategies that integrates robust systems engineering, SCRM, security, counterintelligence, intelligence, cybersecurity, hardware and software assurance, and information systems security engineering disciplines to manage risks to system integrity and trust IAW DODI 5200.44 Protection of Mission Critical Functions to Achieve TSN

(IAW CDRL B001, SCRM).

13.0 Deliverable Data Requirements

13.1 CDRL’s

13.1.1 CDRL A001, CAV AF: The contractor will report supply and maintenance transactions through the repair process from receipt to shipment. Refer to the CAV AF system Statement of Work for the technical requirements/considerations, responsibilities, and reporting requirements of the CAV AF system. The purpose of CAV AF is to maintain asset visibility and accountability throughout the repair process, update asset condition and balance to Air Force supply systems, reports financial and inventory imbalances, and feeds production and unit repair costs to the maintenance and budgeting systems (IAW

CDRL A001, DI-MGMT-81634C)

13.1.2 Contractor is required to comply with all CAVAF requirements identified in the CDRL and attachments to the contract. Additionally, upon completion of the repair, the contractor is required to print four copies of the DD1348-1 from CAVAF for shipping. It is recommended the PDF be saved at the contractor’s facility prior to printing (Note: The DD1348-1A forms are not saved/stored in CAV AF and cannot be reproduced by the system). One copy is to be placed outside of the shipment container, one copy inside the shipment container with the returnable repair asset, provide one copy to DCMA electronically uploaded to WAWF as part of the Receiving Report DD250, and retain the fourth copy for the contractor’s records (IAW CDRL A001, DI-MGMT-81634C).

13.1.3 CDRL A002, Contract Depot Maintenance (CDM) Production Report: The contractor shall report monthly by contract delivery order on all applicable categories, totals, and on-hand balances, providing all listed DID requirements for each repair location, including subcontractor facilities, if applicable, for the contract’s maintenance occurrence actions during the reporting period (IAW CDRL A002, DI-PSSS-81995A).

13.1.4 CDRL A003, Government Property Inventory Report: The contractor shall provide an Annual Government Property Inventory Report. The contractor shall conduct an annual 100% physical inventory over the course of a year’s time of each NIIN as not to impede maintenance operations. Upon completion of all NIIN’s 100% physically inventory, the contractor shall provide the AF Government inventory listing of the result of all AF Government Furnished Property (GFP) in the contractor’s possession, by contract, and by National Stock Number (NSN). The contractor shall submit a Table for each designated repair facility/DoDAAC location for which the contractor has received inventory during the reporting period, including subcontractor facilities if applicable. The report should include all AF Government Furnished Property in possession of the contractor. (IAW

CDRL A003, DI-MGMT-80441D).

13.1.5 CDRL A004, Maintenance Data Collection Record (DRILS):…