Revised LEP SOW.pdf

STATEMENT OF WORK/PERFORMANCE SPECIFICATION

LARGE SCALE NON‐INTRUSIVE INSPECTION SYSTEMS PROGRAM

Low Energy Portal (LEP) Block II Drive‐Through System

A0001 Revised SOW

U.S. Customs and Border Protection

THIS PAGE INTENTIONALLY LEFT BLANK

Table of Contents

STATEMENT OF WORK

1. SCOPE

1.1. Program Organization

1.1.1. Government Management Organization

1.1.2. Contractor Management Organization

1.2. Purpose

1.3. Background

2. APPLICABLE DOCUMENTS

2.1. Applicable Federal Regulations and Publications

2.2. Applicable National Standards

2.3. Applicable DHS/CBP Documents, as may be amended

3. SYSTEM REQUIREMENTS

3.1. Requirement Definitions:

3.2. General Requirements

3.3. Performance Requirements for Large Scale NII Systems

3.3.1. Sources & Detectors

3.3.2. Computers

3.3.3. Computer Security

3.3.3.1. Identification and Authentication

3.3.3.2. Access Control

3.3.3.3. Auditing

3.3.4. Printed Documents

3.3.5. Printer / Scanner

3.4. Systems Integration

3.4.1. Operator Booth

3.4.1.1. Prefabricated Booths

3.4.1.2. DATA/LAN and Voice Connectivity

3.4.1.3. Work Center

3.4.1.4. Workstation Integration and Interface

3.4.2. Integrated Image Capture

3.4.3. Integrated Image Storage

3.4.4. Image Download

3.4.5. Integrated Data Set Download

3.4.6. Officer Shelters

3.4.7. Passenger Shelters

3.4.8. Closed Circuit Television System

3.5. Safety and Protection Equipment

3.5.1. Safety Interlocks

3.5.2. Peripheral Equipment

3.5.3. Signage

Figure 1. X-Ray Inspection Sign (English)

3.6. Reliability, Availability and Maintainability Design Requirements

3.6.1.1. Life Cycle Expectation

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

3.6.3. Classification of Reliability Critical Items

3.6.4. Corrosion Control

3.7. Quality Assurance/Quality Control Plan

3.7.1. Operator Booth Quality Control Documentation (e.g. Fabrication Inspection Plan):

3.8. Testing

3.8.1. Factory Testing

3.8.2. Site Acceptance Testing

3.8.3. Discrimination Testing

3.9. System Safety Program

3.9.1. Radiation Safety

3.9.1.1. Radiation Safety Design Review

3.9.1.2. Radiological Survey and Report

3.9.1.3. Annual Radiation Survey and Report

3.9.2. Safety Plan

3.9.3. Hazardous Materials

3.10. System Installation Services and Support Requirements

3.10.1. Site Surveys

3.10.2. Engineering Assessment

3.10.3. Construction Drawings

3.10.4. Engineering Assessment and Construction Drawings Approval Process

Table 1: Engineering Assessment and Drawings Approval Process

3.10.5. Site Preparation

3.11. System Installation

3.11.1. As-Built Drawings

3.11.2. Construction Manager Log

4. LIFE CYCLE SUSTAINMENT AND SUPPORT REQUIREMENTS

4.1. Warranty

4.2. System Training

4.2.1. Operator Training

4.2.2. Secondary Operator Training

4.2.3. Train-the-Trainer

4.2.4. Ownership

4.3. Technical Manuals

4.4. System User's Manual

4.5. Operational/Storage Checklist

4.6. Operator Service Manual

4.7. Technical Reviews

4.8. Other Reviews

4.9. Sustainment and Maintenance

4.9.1. Service Calls and Work Orders

4.9.2. Service Support Availability Requirements - Operational Availability (Ao)

4.9.2.1. Operational Availability (Ao)

4.9.3. Customer Wait Time (CWT)

4.9.4. Device Obsolescence Report

4.9.5. Work Completion Form (WCF)

4.9.5.1. Work Site Cleanliness

4.9.6. Preventive Maintenance

4.9.6.1. Preventive Maintenance Schedule

4.9.7. Corrective Maintenance

4.9.8. Conditional but Operational Status

4.9.9. Information Systems Security Administration

4.9.10. Corrosion Control under Preventative and Corrective Maintenance

4.9.11. Annual Configuration Report

4.10. On-Demand Services (Technology Refresh, Other Maintenance, and Other Support Services)

4.10.1. Engineering Services

4.10.2. Ad Hoc Reports

4.10.3. Site Surveys

4.10.4. Provisioning Support

4.10.5. Retrofit Support

4.10.6. System Integration Support and Services

4.10.7. Relocation Services

4.10.8. Site Work

4.10.9. Disposal Services – See Section 4.11

4.10.10. Emergency Services

4.10.11. Corrective and Replacement Services

4.10.12. Special Events

4.10.13. On-Demand Training

4.10.14. Remote Maintenance Monitoring

4.11. Disposal Services

5. Information Technology Security

5.1. Basic Requirements

5.2. Security Authorization

5.3. Enterprise Security Architecture

5.4. Product Assurance

5.5. DHS Security Policy Requirement

5.6. Encryption Compliance Requirement

5.7. Security Review

5.8. Access to Unclassified Facilities, Information Technology (IT) Resources, and Sensitive Information

5.9. CBP Contractor Handling PII Level

5.10. Enterprise Architecture (EA) Compliance

5.11. Supply Chain Risk Management Terms and Conditions:

5.12. Personal Identification Verification (PIV) Credential Compliance

5.13. DHS Information Technology Portfolio Alignment

5.14. IPv6

6. Accessibility Requirements (Section 508 Compliance)

6.1. Section 508 Applicable EIT Accessibility Standards

6.2. Section 508 Applicable Exceptions

6.3. Section 508 Compliance Requirements

7. CONFIGURATION MANAGEMENT

7.1. Configuration Baseline

7.2. Technical Documentation

7.3. Management of the Technical Documentation

7.4. Engineering Change Proposals (ECPs)

7.5. Configuration Changes

7.6. Configuration Control Reports

7.7. Interchangeability

7.8. Accessibility

8. DOCUMENTATION DELIVERABLES (Data Item Description (DID))

9. APPENDICES:

Version Date Comments

V1 V2

V3

03/27/20 7/1/20

1st Draft, Starr and Stobierski IDL Comments from 6/12/20, CWR, and OCC edits are Incorporated OCC comments adjudicated and incorporated

10/1920 OM

STATEMENT OF WORK

1. SCOPE

The U.S. Customs and Border Protection (CBP), based upon operational needs, has an immediate requirement to inspect vehicles for illegal contraband including narcotics and terrorist weapons. Because of the volume of vehicles flowing through the Ports of Entry, a system that allows vehicles to be driven through the system by the vehicle’s driver and with vehicle occupants still inside is required.

This Statement of Work (SOW) details the minimum requirements for a Drive- Through X - R a y System for both pre primary and secondary screening options.

This SOW and the Functional Requirements Document (FRD) make up the requirements documents. The systems shall be offered as a Commercial Off The Shelf (COTS) Technology system. The system must be safe and create exposure rates as low as possible as promulgated by the Nuclear Regulatory Commission (NRC) in 10 C.F.R. Part 20, which sets the maximum permissible level of radiation dose to the general public at 0.1 Rem (100,000 µR (microrem)) per-year. CBP is seeking a system that shall create dose rates of no greater than 10 µR per scan and a detailed image of the vehicle (from the roof of vehicle to the ground) which allows operators to quickly identify organic compounds (drugs, currency and explosives), high density objects, weapons, and stowaways.

The ordering period of this multiple-award indefinite-delivery, indefinite-quantity contract is five (5) years.

1.1. Program Organization

This procurement is under the technical direction of the Contracting Officer Representative (COR) assigned to the CBP Office of Field Operations (OFO) Cargo and Container Security (CCS) NII Program Management Office (NII PMO). The maintenance, repair, and logistic support will be managed by the CBP Enterprise Networks and Technology Support Directorate (ENTSD), Integrated Logistics Division (ILD) with support from Data Analysis Center – Threat Evaluation and Reduction (DACTER), a branch within the NII Division. NII Division Large Scale NII Branch provides functional requirements and overall business owner oversight of the Low energy Portal (LEP) Block II acquisition effort including testing. Future integrated system development will involve coordination with multiple directorates within CBP OIT.

1.1.1. Government Management Organization

CBP will manage this program through the CBP NII PMO process for system acquisition, delivery, and acceptance. CBP Enterprise Networks and Technology Support Directorate (ENTSD) Integrated Logistics Division (ILD) will manage the system(s) during the warranty and maintenance periods to include any corrective maintenance actions, preventive maintenance activities, and if needed, on-demand services. CBP Non-Intrusive Inspection Division (NIID) will approve training development and operator training presentations. CBP Human Resources Management (HRM) will approve radiation safety limits.

1.1.2. Contractor Management Organization

The Contractor shall provide a Project Management Plan for CBP review. This plan shall include the scheduling for completion of all tasks required to fabricate, ship, test, train, maintain, and install; this shall include the development of drawings, site preparation and system installation for the Low Energy Drive Through system, all major points of contact and the Contractor’s overall management. The Project Management Plan shall be prepared in accordance with Data Item Description (DID) A001.

1.2. Purpose

The purpose of these Systems is to enable CBP to perform effective and efficient Non-Intrusive Inspection (NII) of conveyances, including passenger occupied vehicles and buses for contraband such as illicit drugs, terrorist weapons and currency. These systems will be used for inspection of smaller vehicles such as privately owned vehicles (POV) including cars, sport utility vehicles, pickup trucks, motorcycles, commercial vans, dual-rear wheeled trucks and towed trailers, as well as larger vehicles like buses, recreational vehicles, truck tractors with empty semitrailers and trailers. Each system shall be capable of providing an NII image with the quality identified within the performance requirements in the FRD and the SOW to aid CBP personnel in identifying anomalies (potential contraband) within the conveyance.

1.3. Background

CBP is responsible for acquiring and deploying NII technology at U.S. Ports of Entry (POE) to enable CBP Officers to screen commercial traffic for the presence of contraband while facilitating the flow of legitimate trade, cargo, and passengers. Each day CBP Officers use a variety of Large Scale Non-Intrusive Inspection (LS-NII) equipment in the course of their work to examine conveyances and cargo. These inspections are aimed at detecting items prohibited from import into or export from the U.S. CBP has an immediate operational need to inspect vehicles for illegal contraband including illicit drugs, terrorist weapons and currency with a system that allows passenger-occupied vehicles to be driven through the system by the vehicles’ drivers and scanned with LS-NII within the exposure limits set by ANSI/HPS N43.17-2009 to ensure the efficient flow of legitimate trade and travel across U.S. borders. These systems are deployed with required operator booths, separate shelters for officers and vehicle passengers, and other ancillary equipment in addition to the LEP system itself (e.g. bollards, signage, surveillance cameras, etc.). In the future, these systems may be integrated with Radiation Detection Equipment

(RDE).

2. APPLICABLE DOCUMENTS

The current versions of the following Applicable Documents shall be referenced and used as called for in this Statement of Work/Performance Specification and the DIDs.

2.1. Applicable Federal Regulations and Publications

a. Code of Federal Regulations, 29 CFR Part 1910, Occupational Safety and Health Standards (OSHA)

b. Code of Federal Regulations, 49 CFR Part 172, Subpart B, Table of Hazardous Materials and Special Provisions

c. Code of Federal Regulations, 21 CFR 1020.31, Radiographic Equipment

d. United States Code, (44 USC Chapter 35), Federal Information Security Modernization Act (FISMA) of 2014

e. Office of Management and Budget (OMB) Circular A-130, Management of Federal Information Resources, Appendix III, Security of Federal Automated Information Resources

f. Office of Management and Budget (OMB) guidance M-05-24, August 5, 2005

g. United States Code (5 USC 552a), The Privacy Act

h. United States Code (6 USC 133), Critical Infrastructure Information Act of 2002 (Title II, Subtitle B, of the Homeland Security Act)

i. Code of Federal Regulations (49 CFR Part 1520), Protection of

Sensitive Security Information

j. OMB Memorandum M-05-22, August 2, 2005

k. United States Code (29 USC 701 et seq.) Rehabilitation Act of

1973, as amended, Title V, Section 508

l. Code of Federal Regulations (36 CFR Part 1194), Electronic and Information Technology Accessibility Standards, including 36 CFR 1194.21, Software Applications and Operating Systems

m. Federal Acquisition Regulation (FAR Subpart 39.2), Electronic and Information Technology

Note: The regulations can be accessed by going to: http://ecfr.gpoaccess.gov.

2.2. Applicable National Standards

a. Human Engineering Design Criteria Standards Part 1: Project

Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889)

b. American National Standards Institute, ANSl/HPS N43.3, General Radiation Safety - Installations Using Non-Medical X-Ray and Sealed Gamma-Ray Sources, Energies up to 10 MeV, 2008.

c. American National Standards Institute, ANSl/HPS N43.14, Radiation Safety for Active Interrogation Systems for Security Screening of Cargo, Energies up to 100 MeV, 2011.

d. American National Standards Institute, ANSI/IEEE N42.46, Determination of the Imaging Performance of X-Ray and Gamma-Ray Systems for Cargo and Vehicle Security Screening, 2008.

e. Federal Information Processing Standards Publication (FIPS PUB), Number 140-2, Security Requirements for Cryptographic Modules, 2001

f. Federal Information Processing Standards (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems

g. Federal Information Processing Standards (FIPS) 197,Advanced Encryption Standards

h. Federal Information Processing Standards Publication (FIPS PUB) Number 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors, August 2013.

i. American National Standards Institute, ANSI/IEEE N42.42, Standard Data Format for Radiation Detectors Used for Homeland Security,

j. American National Standards Institute, ANSI/HPS N43.17, Radiation Safety for Personnel Security Screening Systems Using X-Ray or Gamma Radiation, 2009

k. American Society of Civil Engineers (ASCE) 7 Minimum Design Loads for Buildings and Other Structures and the International Building Code

2.3. Applicable DHS/CBP Documents, as may be amended

a. DHS Sensitive Systems Policy Directive 4300A, Version 13.1, July 27, 2017

b. DHS 4300A Sensitive Systems Handbook v12.0 November 15, 2015.

c. U.S. CBP HB 1400-05D Information Systems Security Policies and

Procedures Handbook Version 7.0 November 16, 2017

d. DHS Management Directive (MD) 11042.1 Safeguarding Sensitive

But Unclassified (For Official Use Only) Information

e. Homeland Security Presidential Directive-12 (HSPD-12), Policy for a

Common Identification Standard for Federal Employees and Contractors, August 2004

f. Human Engineering Design Criteria Standards Part 1: Project Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889)

g. U.S. Customs and Border Protection (CBP) Cost-Wise Readiness (CWR) Directive 5225-03 h.

i. DHS Enterprise Data Management Policy Directive 103-01, 8/25/2014

j. DHS Section 508 Program Management Office and Information

Technology Accessibility MD 4010.2, 10/26/2005

k. CBP Port Radiation Inspection, Detection and Evaluation (PRIDE) 2.0

Interface Control Document (ICD) version 5, 2015

3. SYSTEM REQUIREMENTS

CBP is seeking currently available Commercial off the Shelf (COTS) technology.

CBP will deploy these systems at various CBP POEs (land border crossings along the Southwest/Northern borders, seaports and airports) within the United States as designated by CBP. CBP may identify specific deployment sites and schedules within the Request for Quotation (RFQ) for individual orders.

3.1. Requirement Definitions:

1. Threshold: The minimum level of operational performance that the

Government is willing to accept is considered a threshold value.

2. Objective: A level of performance that significantly improves mission performance, safety, or supportability beyond that of the threshold value, and represents the desired yield for system performance is considered an objective.

3. Objective values are not required, but can be defined to provide guidance to the Contractor with respect to areas where increased capability is of interest to the government. If Objectives are defined, the interval between the Objective and Threshold values for a given parameter is the government program manager's (PM) trade-space or design decisions.

4. Single Requirement: Some requirements will have only a single parameter value and, when this is the case, these values are thresholds.

3.2. General Requirements

Each LEP system shall meet the requirements defined in this Statement of Work and associated FRD. The Contractor shall perform the work necessary to develop, test and deliver the procured equipment. The Contractor shall also provide training, warranty, maintenance, logistics, on-demand services and training in support of these LEP systems as identified in the Performance Requirements Section of the FRD. The Contractor shall prepare Monthly Progress Reports in accordance with the attached DID A006 while performing tasks within this SOW.

3.3. Performance Requirements for Large Scale NII Systems

The contractor shall deliver a system that satisfies the requirements in the FRD and this SOW.

3.3.1. Sources & Detectors

As part of the LEP system, the Contractor shall deliver X-ray imaging sources and detectors that shall incorporate transmission and reflective imaging capabilities that are capable of meeting the Performance Specifications as described in the FRD. System shall include an Uninterruptable Power Supply (UPS) for the operating system and a power conditioner to regulate and maintain power sufficient to allow graceful shut down of systems to avoid tube failure and power supply failure.

3.3.2. Computers

As part of the LS-NII system, the Contractor shall provide computers and server(s) to meet all the requirements of this SOW and the FRD. The LEP system shall be equipped with wireless technology that can be encrypted in accordance with DHS Sensitive Systems Policy Directive 4300A, Section 4.6, Wireless Network Communication. The wireless capability shall have the ability to be disabled when not in use.

3.3.3. Computer Security

All LS-NII System computers and software programs that enable a User to analyze/enhance images and store an Image Data Set (IDS), and the Data Base computers and programs that store an IDS, shall have the following security features incorporated. Computers and server(s) with enough memory and speed to meet all the requirements of this SOW. Desktop computers shall be equipped with Operating Systems of Windows 10 32bit or greater; capable of Windows 10 64bit upgrade. Laptop operating systems shall be Windows 10 64bit or greater.

The system shall have a wireless technology that can be encrypted in accordance with DHS 4300A policy. The wireless capability shall have the ability to be disabled when not in use.

3.3.3.1. Identification and Authentication

A. Levels of Access – The Contractor shall provide three levels of CBP User access (Operator Level 1, Operator Level 2, and Administrator). Operator Level 1 shall be able to perform all system functions except copying and deleting images or Data Sets. Operator Level 1 shall not have access to User Accounts. Operator Level 2 (Supervisor) shall be able to perform all Operator Level 1 functions plus be able to create and delete Operator Level 1 accounts, copy and delete images and data set files, and reset Level 1 and Level 2 passwords. Operator Level 2 shall have access to Operator Level 1 Accounts. The Administrator shall be able to perform all Operator Level 1 and Level 2 functions plus have access to all Accounts. The Administrator shall be able to create, edit and delete all Accounts. The Contractor shall create a simplified procedure for the Administrator and Operator Level 2 to create, edit and delete User Accounts. Operator Level 1 and Level 2 shall not have access to Windows except for those hard drives that have IDS stored on them or the external drives from which an image may be imported or an image or IDS may be exported or copied. The CBP Administrator Account shall have access to Windows Operating System.

B. Passwords – All passwords used to access the NII system for operation are required to be Strong Passwords. Strong Passwords meet the following requirements:

1. Are at least 12 characters in length

2. Comply with the DHS hardening guides for operating systems and the configuration guides for applications. In the absence of guidance, the ISSO will determine the appropriate password complexity based on the level of risk.

3. Are not the same as any of the user’s previous 8 passwords

4. Strong passwords do not contain any dictionary word

5. Strong passwords do not contain any proper noun or the name of any person, pet, child, or fictional character.

6. Passwords do not contain any employee serial number, Social Security number, birth date, phone number, or any information that could be readily guessed about the creator of the password.

7. Strong passwords do not contain any simple pattern of letters or numbers, such as “qwerty” or “xyz123”.

8. Strong passwords do not contain any word, noun, or name spelled backwards or with a single digit appended, or with a two-digit “year” string, such as 98xyz123.

9. Strong pass phrases, if used in addition to or instead of passwords, follow the same guidelines.

10. Strong passwords are not the same as the User identification (ID).

11. Strong passwords shall contain special characters.

C. The NII system must have the ability to:

1. Deactivate unused accounts automatically if they have not been used in 45 days.

2. Passwords should not be set to the null string.

3. Automatic password change frequency. The system shall require the user to change their password every 90 days.

4. Password Storage – The system shall store all user account passwords in encrypted form.

3.3.3.2. Access Control

A. Unique User Accounts – The system shall enable all users to have unique account identifiers, including separate identifiers for operator accounts and administrator accounts.

B. Automatic Account Lockout – The system shall lock a user account for twenty (20) minutes after three consecutive failed logon attempts.

C. Automatic Session Termination – The system shall lock the user login session after twenty (20) minutes of inactivity. The system shall require the user to authenticate with the user account password to regain system access after the system lock. After 60 minutes of inactivity, the system shall log the user account of the system.

D. Warning Banner – The DHS Chief Information Security Officer (CISO) stipulates that a warning banner statement be displayed on all DHS systems during user account logon. The system shall prompt the user to accept the current language before they can authenticate with the user id and user password to access the system. The current language required follows:

1. You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S. Government-authorized use only.

2. Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties.

3. By using this information system, you understand and consent to the following:

a. You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.

b. The government may disclose or use any communications or data transiting, stored on, originated from or directed to or from this information system for any lawful government purpose.

4. You are NOT authorized to process classified information on this information system.

3.3.3.3. Auditing

A. Audit Records – System will retain audit records sufficient in detail to facilitate the reconstruction of events if compromise or malfunction occurs.

Audit records shall contain at least the following information:

1. Identity of each user and device accessing or attempting to access the system

2. Time and date of the access and the logoff

3. Activities that might modify, bypass, or negate information security safeguards

4. Security – relevant actions associated with processing

5. All activities performed using an administrator account/identity

B. Audit Record Access – Audit records and audit logs should be protected from unauthorized access, modification, or destruction.

C. Audit Record Retention – Audit records should be maintained on the system for a minimum of ninety (90) days. Audit records shall be preserved for a period of 7 years as part of managing records for each system to allow audit information to be placed online for analysis with reasonable ease.

D. Audit Reduction / Report Generation – The system will provide an audit reduction and report generation capability that:

1. Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents

2. Without altering the original content or time ordering of audit records

E. The system will have the capability to tag each scan with the user name who conducted it. The user name and time shall be displayed with the image and the IDS.

3.3.4. Printed Documents

All LEP systems shall have the capability of printing all the items of an IDS. All printed documents shall have "FOR OFFICIAL USE ONLY - LAW ENFORCEMENT SENSITIVE" in the header or footer. The footer shall indicate system type and location.

3.3.5. Printer / Scanner

Printers shall be capable of quality printing, including color, while retaining a limited physical footprint. Print/scan devices may be combined or separate units.

3.4. Systems Integration

Integration of NII inspection system equipment and its supporting Subsystems shall be the responsibility of the NII systems Contractor.

3.4.1. Operator Booth

The Contractor shall conduct a site survey in accordance with DID A024 of all anticipated sites for Operator booths. The Contractor shall provide and install the booth(s) in accordance with CBP approved drawings.

The Contractor shall deliver an operator’s booth accompanying each LEP scanning system that will house the primary and secondary operator stations and a CBP workstation. A larger booth may accommodate two or more portals located in close proximity in lieu of 2 or more separate booths. The number and size will be determined based on local site surveys. The provision of the operator's stations is a requirement for the Contractor. The provision of the CBP workstation is not included as a requirement for the Contractor.

3.4.1.1. Prefabricated Booths

If determined based on local site surveys to install furnished, prefabricated booths, then the Contractor shall install, in accordance with CBP approved drawings, an operator’s booth in accordance with the following:

A. Structural Performance: Booth(s) shall comply with American Society of Civil Engineers (ASCE) 7 Minimum Design Loads for Buildings and Other Structures and the International Building Code, and the building code and regulations enforced by the authority having jurisdiction at the locations the booths will be installed.

B. The minimum Structural Design Criteria regardless of the jurisdiction shall be: (jurisdictional requirements may exceed these minimum factors)

1. Importance Factor: 1

2. Basic Wind Speed: 130 mph, 3-Second Gust

3. Wind Exposure: Surface Roughness Category C

4. Ground Snow Load: 25 psf

5. Snow Exposure: Terrain Category C

6. Seismic Response Coefficient (Cs): 0.24g

7. Floor Live Load: 50 psf

8. Access Platform Live Load: 100 psf or a concentrated live load of 300 pounds on an area of 4 square inches at any point along the element.

C. Thermal Movements: Provide booths that allow for thermal movements resulting from the following maximum change (delta) in ambient and surface temperatures by preventing buckling, opening of joints, overstressing of components, failure of joint sealants, failure of connections, and other detrimental effects. Base engineering calculation on surface temperatures of materials due to both solar heat gain and nighttime-sky heat loss. Temperature Change (Delta): 120 degree F (67 degree C), ambient material surfaces.

D. The booth(s) shall be self-supporting aluminum or galvanized steel booth(s) for installation on existing asphalt, concrete pavement, or elevated steel structure.

E. Booth size shall nominally be 8’ x 12’ however larger size of 8’ x 19’ for two systems may be required. Control centers are future options refer to FRD for description.

F. The door shall be of solid metal construction, mini blind/shade for door should be encased in glass pane or frame to prevent damage.

G. No window shall open outward.

H. All booth windows shall have tinted screens or an application of a tinted material I. Installed interior venetian blinds on all booth windows J. Interior lighting with dimmer for common area K. The booth floor shall resist frequent usage and require minimal maintenance, comply with OSHA and other applicable regulations, with at least a 10 year lifespan (e.g. diamond plated steel, spray-on/roll-on epoxy-like flooring, etc.) with a Thermal Resistance Value (R-Value) R-30 and UL Rating Class A with a flame spread rating less than 25; it shall not be fabricated of compressed wood materials.

L. Steps shall be constructed of galvanized steel or aluminum (if steps are required).

M. The gutters and downspouts shall direct the water away from the booth.

Water shall not be directed or accumulate on the booth access walk way (including the stairs, landing and electrical boxes).

N. Work area shall include (1) file cabinet, off the floor computer CPU mount or cart and trash can.

O. Furniture (including chairs) shall be included sufficient to accommodate the primary and secondary operator’s stations.

P. Under desk lighting shall be provided Q. Highly insulated booth envelope rated at R-30 or better.

R. Pitched or vaulted roof with 6” to 18” overhangs S. Exterior site lighting at all exterior doors T. Heating, Ventilation and Air Conditioning (HVAC) unit shall be adequately sized for the climatic conditions and interior space found at each installation site listed.

1. Baseboard heaters rated at 1500 watts each shall be installed inside each operator’s booth in main interior area and be controlled by a separate thermostatic controls

2. Non-ceiling mounted Air Conditioning (AC) unit with louvered vents in main interior area

3. Adequate ventilation fans above LAN alcove to provide the required air flow for equipment

U. Booth Security

1. Default cypher/key access lock on main exterior door, an example is the Unican Simplex 1000.

2. Primary power integrated smoke detector/alarm, and installed 5 pound type ABC fire extinguisher located adjacent to the door

3. Manual operable roll down exterior security shutters on all windows

4. Reflective glazing on all windows rated R X or better V. Electrical service: Interior mounted 200A power panel with breakers and circuits sufficient to supply all booth systems, and prewired interior and exterior lighting switches and power receptacles. Provide panel schedule with pre-installed circuits and loads labeled.

W. Building shall bear the Underwriter’s Laboratories National Electrical Code (NEC) classification insignia to verify that the electrical wiring system has been reviewed by an independent third party, and has been found to be in compliance with the NEC

3.4.1.2. DATA/LAN and Voice Connectivity

Conduit pathway for connectivity shall be installed as part of the installation. OIT conduit (DATA/Voice) pathway to be coordinated with OIT or IT Administrator.

Conduit pathway shall extend from the LAN closet and Telecommunications closet to the LEP system control booth.

3.4.1.3. Work Center

The Contractor shall deliver a Work Center ergonomically designed for housing the system's Workstation in accordance with DHS standards found in Human Engineering Design Criteria Standards Part 1: Project Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889), Section 5.2.9, at http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7889.pdf.

3.4.1.4. Workstation Integration and Interface

The Contractor shall configure and integrate all workstations/servers and computer software/operating systems to include a system Operator Console, Contractor-provided Closed Circuit television cameras and the system’s controls and displays into a system that enables a conveyance to be scanned, the conveyance image(s) to be analyzed, a system operator to make a Suspect or Non-suspect decision and store all the items associated with the scan into an IDS and then store/retrieve the IDS. The Contractor shall meet additional integration requirements such as computer hardware/software as specified in the FRD.

3.4.2. Integrated Image Capture

All LEP systems shall be capable of capturing and displaying all of the items that are contained in an IDS. The IDS shall include, as a minimum, the radiographic image, a video capture snapshot image from each system CCTV camera, a Data Sheet or Manifest, operator notes, the operator’s Suspect or Non-suspect decision and the User's name. Additional IDS element requirements, if applicable, are specified in the FRD. This Metadata shall be the sole property of CBP.

3.4.3. Integrated Image Storage

All LEP systems shall be capable of storing all IDS created for a period of 90 Days with no less than two (2) Terabytes of storage. The system shall provide an option at the Administrator level for auto delete of Non-Suspect files that are over 90 days old.

3.4.4. Image Download

All LS-NII Systems shall be capable of storing an x-ray image generated by the system as a jpg file and as a TIF file. The TIF file shall contain the full dynamic gray-level range of the x-ray image. The Systems shall be capable of exporting stored image files to encrypted media storage devices, FIPS 140-2 Level 2 or greater, flash and hard drives. The image will be configured in a format where CBP may easily transfer the image from one computer containing the image analysis software to another computer containing the image analysis software without the loss of the image analysis functionality.

3.4.5. Integrated Data Set Download

All LE systems shall be capable of exporting an IDS in its native format to encrypted media storage devices, FIPS 140-2 Level 2 or greater, flash and hard drives. The IDS shall consist of the data specified within this SOW and the FRD.

The consolidated IDS shall encompass all of the data required to perform an offsite scan review and analysis as though the reviewer was stationed at the original data site. The system shall also be capable of creating and exporting a summary scan report for each conveyance scanned – the format of this report shall be PDF.

3.4.6. Officer Shelters

CBP may also require up to two additional Officer Shelters to shield the Staging and Secondary Officers from direct weather. These shelters should provide shelter from direct sunlight, precipitation and have a counter for storage. There shall be a left-hand entrance design and a right-hand entrance design. They do not have to be climate controlled.

3.4.7. Passenger Shelters

The Contractor shall provide and install shelter(s) to protect Vehicle Passengers from direct weather. The number (up to two per site) and location of the shelter(s) will be determined by the site survey. There shall be a left-hand entrance design and a right-hand entrance design. Passenger shelters shall have a metal bench that must include cuff bar or rings. They do not have to be climate controlled.

3.4.8. Closed Circuit Television System

The Contractor shall provide and install a Closed Circuit Television System (CCTV) that is approved by CBP on the Technology Reference Model (TRM). The CCTV system shall capture live video of vehicles traveling through the LEP system. The CCTV system shall be independent of the camera(s) used for capturing images of the vehicle undercarriage and IDS. These cameras shall be integrated to the Border Security Deployment Program (BSDP) network. The CCTV will allow Officers to view license plates, determine make/model, and have situational awareness of the operating area. The Contractor shall supply four high-resolution, IP, day/night, Pan- Tilt-Zoom (PTZ), CCTV Surveillance Cameras, approved by CBP on the TRM, that are independent of the system’s scanning function. The CCTV systems shall have video storage for 30 days and the ability to archive video clips.

3.5. Safety and Protection Equipment

The Contractor shall provide and install all safety and protection equipment, including safety interlocks, peripheral equipment, signage, and lighting in accordance with CBP-approved Contractor Safety Plan, see section 3.9.

3.5.1. Safety Interlocks

The Contractor shall provide safety interlocks such as operator proximity/presence sensors for all systems for the protection of pedestrian traffic and untrained personnel.

The Contractor shall provide Emergency Stop Switches for all systems that will enable an operator to manually interrupt the scanning process by disabling the transmission of X-rays in an emergency or when there is an unauthorized entry inside the system's Radiation Control Area. See ANSI N43.3-2008, paragraph 7.5.2, and ANSI N43.14-2011, chapter 6.1, for more details on safety interlocks.

The LEP systems shall also provide visible (flashing lights) alarms when actively radiating.

3.5.2. Peripheral Equipment

The Contractor shall provide devices (bollards, guard rails, etc.) to prevent/protect the system from being hit by vehicles traveling through/near the system. The location of guard rails shall ensure all conveyances (vehicles and trailers) with an outer track width (i.e. the dimension from the outer tire tread on one tire to the outer tire tread on the opposite tire on the same end of the vehicle) equal to or less than the width of the scanning area are able to pass through the system (i.e. if the scanning area is 8.5 feet wide, then guard rails are at least 8.6 feet wide). Oversize detection equipment shall address the placement of guard rails in addition to the system tunnel size.

3.5.3. Signage

All signs, including electronic radar speed displays, shall be visible to the driver entering the system. The Contractor shall provide and install signs notifying vehicles and occupants are subject to inspection. Signs shall be provided in English, Spanish, and French Canadian. View Figure 1 for sign design, with the necessary information in English. Additional signage for pre-primary systems will be required based on the site survey and shall be required for providing direction to drivers. Below figure are examples of signage.

Figure 1. X-Ray Inspection Sign (English)

3.6. Reliability, Availability and Maintainability Design Requirements

The Contractor shall design the System to meet the Reliability, Availability and Maintainability (RAM) requirements for Mean Time Between Failure (MTBF) and capability to achieve the service performance metrics of Operational Availability (Ao) and Customer Wait Time (CWT). The following are minimum design requirements for this system and subsystems.

COST-WISE READINESS

U.S. Customs and Border Protection (CBP) Cost-Wise Readiness (CWR) Directive 5225- 03 focuses on optimizing the performance of system and support services, and establishing efficiency initiatives to minimize investment and sustainment costs while achieving capability and availability (readiness) outcomes. Mandatory CWR metrics to be reported include a CWR Key Performance Measurement (KPM) for readiness (materiel availability), a CWR KPM for materiel ownership costs, a CWR Key Performance Attribute (KPA) for materiel reliability, and a CWR KPA for supply chain materiel mean downtime, along with an assessment of resource-to-outcome sensitivities (best application of resources to achieve/sustain CWR outcomes). Representative KPM and KPA definitions are in Section 5 of CWR Directive 5225-03. Accordingly, the Contractor shall deliver and sustain key subsystems that meet the readiness requirements for materiel availability, the reliability requirement, and the mean downtime requirement that provides the best Total Ownership Cost. The Contractor is encouraged to conduct and report an analytical assessment that offers, for government consideration, an alternative balanced solution of optimum reliability and sustainment cycle time KPAs that result in minimal life cycle costs.

Cost-Wise Readiness Requirements

The following are minimum requirements for key subsystem(s) readiness drivers:

CWR METRIC

ACRONYM CWR

REQUIREMENT

Materiel Availability MA = Am > 95%

Mean Time Between Failure

MR = MTBF > 1,000 Hours

Mean Downtime MDT < 24 Hours

Total Ownership Cost

TOC

Derived From Contractor Analytical Assessment

Key Performance Measurements (KPMs)

Materiel Availability (MA) Am

Materiel Availability (MA) is a measure of the percentage of the total inventory of key subsystems operational (ready for tasking) and capable of performing an assigned mission over a given time. This can be expressed as the number of operationally available subsystems divided by the total population. Key subsystem MAs support the percentage of time that a system is operationally capable of performing an assigned mission.

Determining the optimum value for MA requires a comprehensive analysis of the subsystem and its planned use, including the planned operating environment, operating tempo, reliability alternatives, maintenance approaches, and supply chain solutions. MA is largely influenced by key subsystem downtime, both planned and unplanned, requiring the early examination and determination of critical factors such as the total number of key subsystems to be fielded and the major categories and drivers of subsystem downtime.

MA must address the total population of the key subsystems planned for operational use, including those temporarily in a non-operational status once placed into service. The total lifecycle timeframe, from placement into operational service through the planned end of service life, must be included.

The CWR Materiel Availability KPM as defined for the inventory of key subsystems shall be no less than 95%.

Materiel Availability (MA) = Am =

Number of Key Subsystems Operational* (includes spares) Total Population of Key Subsystems (includes spares)

*Operational means in a materiel condition such that the subsystem is capable of performing an identified mission for which it was designed.

Total Ownership Cost (TOC)

Total Ownership Cost provides balance to the sustainment solution by ensuring Operations and Support (O&S) costs associated with materiel readiness are considered in making decisions. Cost elements can include maintenance, sustaining support, and continuing system improvements, as necessary. This KPM value should cover the planned lifecycle timeframe for the entire population of key subsystems’ readiness drivers, consistent with the timeframe used in the MA KPM. Sources of reference data, cost models, parametric cost estimating relationship and other estimating techniques or tools must be identified in supporting analysis. Programs must plan for maintaining the traceability of costs incurred to estimates and must plan for testing and evaluation. The planned approach to monitoring, collecting, and validating operating and support cost data to supporting the KPM must be provided.

The aforementioned analytical assessment can serve as the basis for deriving the Total Ownership Cost (TOC) KPM.

Key Performance Attributes (KPAs)

Materiel Reliability (MR) = MTBF

Materiel Reliability (MR) is a measure of the probability that the key subsystems will perform without failure over a specific interval. MR must be sufficient to support the capability needed for the mission. MR is generally expressed in terms of a Mean Time Between Failure (MTBF), and once operational can be measured by dividing actual operating hours by the number of failures experienced during a specific interval. MR may initially be expressed as a desired failure-free interval that can be converted to MTBF for use as a KPA. Specific criteria for defining operating hours and failure criteria must be provided together with the KPA.

The CWR Materiel Reliability KPA as defined for key subsystems shall be no less than 1000 hours mean time between failure.

Materiel Reliability (MR) = MTBF = Total Operating Hours

Total Number of Failures

Mean Downtime (MDT)

Mean Downtime (MDT) is the average total downtime required to restore a key subsystem to its full operational capabilities. MDT includes the time from reporting of a key subsystem being down to the key subsystem being given back to operations for use. MDT includes administrative time of reporting, logistics and materiel’s procurement, and lockout/tag out of equipment, etc. for repair.

The CWR Materiel Mean Downtime KPA as defined for key subsystems shall be no worse than 24 hours.

Mean Downtime = MDT =

Total Downtime for All Failures Total Number of Failures

CWR Reporting

The Contractor shall submit data with the frequency identified below for each key subsystem group by location in Contractor format containing performance outcomes for the following CWR Metrics:

A. Material Availability - Monthly B. Mean Time Between Failure - Monthly C. Mean Downtime - Monthly D. Total Ownership Cost - Annually

The Contractor shall deliver the report in a government approved electronic format as agreed to by the Government.

Mean Time Between Failures (MTBF)

The time between failures (TBF) is the time duration from the start of when the system is placed into an ‘operational’ status (Priority level 3) until suffering a failure (Priority level 1).

A failure is defined as a malfunction that degrades performance or operational capability, which cannot be tolerated for even a brief period before correction (Priority level 1 work order). The total time between failures (TTBF) is the sum of all TBFs for the reporting period. The mean time between failures (MTBF) is calculated as the TTBF divided by the total number of failures for that reporting period. The Government will calculate the MTBF on an annual basis.

The MTBF for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTBF = Total Time Between Failures (TTBF)

Total Number of Failure Incidents

The minimum MTBF requirement for the system is: 1,000 Hours.

Mean Time to Repair (MTTR)

The time to repair (TTR) is the time duration from the start of a repair activity to correct a failure until the system is returned to full performance and capability.

The total time to repair (TTTR) is the sum of all TTRs for the reporting period.

The mean time to repair (MTTR) is calculated as the TTTR divided by the total number of repair activities for that reporting period. The overall system shall be designed to possess a MTTR . The Government will calculate the MTTR on an annual basis.

The MTTR for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTTR = Total Time to Repair (TTTR) Total Number of Repair Activities

The minimum MTTR requirement for the system is 24 hours

3.6.1.1. Life Cycle Expectation

The designed operating life of the system shall be no less than 10 years. The system shall be capable of exceeding a normal operating period of 16 hours a day, 6 days a week, 52 weeks a year during an operating life of 10 years and be capable of surge operations consisting of 24 hours a day, 7 days a week for 2 weeks (336 hours).

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

The Contractor shall provide predictive Obsolescence Analysis of system components and a Component Replacement Analysis in the Contractor’s format at time of proposal, see DID A002. The Component Replacement Analysis shall include:

A. Procedures for the procurement of critical items, to include availability and procurement lead times.

B. Criteria and procedures for the design and redesign of critical items

C. Procedures for controlling and monitoring of critical items after manufacture to meet the performance metrics (e.g., date coding, traceability, assembly techniques, test requirements, acceptance test requirements, control of contractors’ and manufacturers’ controls, in-process controls, special handling, and storage requirements).

3.6.3. Classification of Reliability Critical Items

A Critical Item is an identified weak link in a system, has an adverse impact on, or contributes to failures of the system performing its mission, creates potential safety problems, significantly degrades the scanned image quality, or contributes to other areas of high risk to overall system reliability. The Contractor shall classify all LS-NII items as critical if one or more of the following conditions are satisfied, see DID A002:

1. Item represents a significant new development or application.

2. Item has critical failure modes.

3. Item has history indicating need for improvement. A Preplanned

Product Improvement Plan (PPIP) shall be developed and provided by the Contractor for any item with a history of needing improvement in the Contractor’s format.

4. Item has known operating life, limited shelf life, or environmental sensitivity (e.g., vibration, thermal, etc.) that warrants controlled surveillance.

5. Item whose failure can result in the failure of the system and which is not compensated by redundancy or alternate operational procedures.

3.6.4. Corrosion Control

The Contractor shall design and/or fabricate the system, booth, and shelters that apply industry best practices, techniques, and…