6-SLCI26041 Attachment 2 Scope of Work.docx

Scope of Work – Aviation Channeling Services

1. General Requirements The Offeror shall furnish, at its sole cost and expense, all labor, supervision, materials, supplies, equipment, tools, transportation, communication systems, and any ancillary services necessary to perform and complete the services described herein, in accordance with the terms and conditions of this Contract, for the full duration of the contractual period.

2. General Security Requirements The Offeror shall comply with all applicable security controls established by the Department of Homeland Security (DHS) and the Transportation Security Administration (TSA) to ensure full adherence to the Government’s security requirements. These controls are defined in DHS Policy Directive 4300A, the TSA Management Directive 1400 series, and are aligned with the current standards set forth in National Institute of Standards and Technology (NIST) Special Publication 800-53, as well as any subsequent revisions/amendments.

3. Regulatory Compliance The Offeror shall maintain full compliance with all applicable federal regulations, including the Transportation Security Administration’s (TSA) Designated Aviation Channeling (DAC) Services Provider Program, as required under 49 CFR Part 1542 and related TSA Security Directives.

4. VPN Security Compliance The Offeror shall fully comply with the Airport’s VPN security requirements. Prior to accessing the Airport’s VPN, the Offeror shall implement appropriate security measures as determined by the City. Specific VPN requirements will be determined by the City and will depend on the Offeror’s proposed solution.

5. Security Protocols The Offeror shall establish and enforce security protocols for all employees and subcontractors. Such protocols shall include, but are not limited to, background screening, employment verification, and the protection of client confidentiality.

6. Identity Assurance The Offeror shall comply with the requirements as outlined in the Identity Assurance guidelines set forth in NIST Special Publication 800-63, Revision 4, as well as any subsequent revisions or updates issued by the National Institute of Standards and Technology (NIST).

7. Transition Support In the event of a transition to a new DAC provider, the Offeror shall provide all necessary assistance to ensure continuity of services and prevent any disruption to operations.

8. Permitting The Offeror shall obtain and maintain all permits, licenses, and approvals required to perform the services under this Contract.

9. Web Interface Functionality The Offeror shall provide a secure, web-based user interface at Salt Lake City International Airport that includes, at a minimum:

· User authentication

· Enrollment data capture and upload (biographic and biometric)

· Support for multiple file formats (.csv, .xlsx, .xml)

· Processing of update, delete, and revoke requests

· Management and transmission of badge and credential information to TSA (e.g., badge number, type, and status)

· Display of TSA Security Threat Assessment (STA) status and fingerprint-based Criminal History Records Check (CHRC) numbers as assigned by the DAC provider

· Record search and query functionality

· Display of TSA bulletins and broadcast messages on the DAC provider’s website and within the user interface

10. System Integration The Offeror shall interface with the Airport’s current badging and fingerprint systems provider, Honeywell, for data transmission and automation. Coordination with Honeywell shall be at no additional cost to the City. The City reserves the right to change systems providers during the term of this Contract.

11. Electronic Channeling The Offeror shall provide electronic submission of fingerprint and STA data.

12. Data Submission and Quality Control The Offeror shall electronically transmit CHRC and STA biographic and biometric data as a single, combined submission to TSA via a secure Virtual Private Network (VPN) tunnel. The Offeror shall validate and implement quality control measures for all data received from the Airport prior to submission.

13. Customer Service The Offeror shall provide live customer service support, at a minimum, Monday through Friday from 0700 to 1700 Mountain Time (MT), excluding City-recognized holidays.

14. Communication Protocols The Offeror shall maintain communication with the Aviation Department via phone or email. All inquiries from the Aviation Department Representative (ADR) shall be acknowledged and responded to within twenty-four (24) hours.

15. Manual Fingerprint Cards If required, the Offeror shall process and forward inked fingerprint cards using a traceable delivery method. Upon receipt, the Offeror shall digitize and submit the data in the same manner as electronic submissions.

16. Real-Time System Updates The Offeror shall provide real-time responses and updates to the Airport’s system without requiring manual intervention.

17. Database Validation The Offeror shall validate the Airport’s existing database against TSA records to ensure accuracy and compliance.

18. Tracking and Status Monitoring The Offeror shall provide the capability for Airport to track and view the status of each biographic and biometric submission.

19. Manual Record Updates The Offeror shall ensure that Airport has the ability to manually update records as necessary.

20. Monthly STA Submissions The Offeror shall submit monthly STA data for the entire Airport badged population to the ADR, as required by TSA Security Directives or upon request.

21. Daily Submittal Reporting The Offeror shall provide web-based daily submittal reports summarizing all transactions submitted, including any associated errors. These reports shall allow Aviation to track and monitor the status of each submission.

22. Online Reporting The Offeror shall provide online reporting capabilities, including the ability to search for applicant details, credit and debit memos, invoices, and transaction types.

23. eBadge Program Support The Offeror shall support the U.S. Customs and Border Protection’s eBadge Trusted Worker Program at no additional cost to the City.

24. Professional Standards and Corrections The Offeror shall be responsible for the professional quality, accuracy, and coordination of all services provided. Any deficiencies shall be corrected or revised at no additional cost to the City, subject to ADR approval. Failure to perform in accordance with this Contract may result in the imposition of liquidated damages as specified in the Solicitation.

25. Invoicing Requirements The Offeror shall submit monthly invoices for services rendered in the prior month no later than the fifth (5th) calendar day of the following month. Invoices shall be submitted in accordance with the pricing established in the Fee Schedule.

26. Post-Incurred Invoicing Invoices shall be submitted only after the associated fingerprint and STA costs have been incurred.

27. Payment Terms Invoices shall be paid monthly in arrears, subject to City review and acceptance.

28. Monthly Billing Reports The Offeror shall provide detailed monthly billing reports by the first week of the following month. Reports must reconcile 100% of charges and include all supporting documentation for audit purposes.

29. Invoice Format and Review Invoices must be submitted in a format acceptable to the City (currently .pdf and .xlsx) and include all necessary supporting data. The Offeror shall cooperate with the ADR to resolve any invoice-related questions or discrepancies.