Section_J_Atch_2-SOW_for_APT_Program.pdf

FA8617-17-R-6219

Section J – Attachment 2

Statement of Work for the Advanced Pilot Training (APT) Program

STATEMENT OF WORK

for Engineering and Manufacturing Development, Low Rate Initial Production, Full Rate Production, and

Sustainment Support for the

ADVANCED PILOT TRAINING (APT) PROGRAM

RELEASE/REVISION: DATE:

Rev: 1.0 30 December 2016

Prepared by:

APT Branch

Training Aircraft Division Mobility Directorate

US Air Force Life Cycle Management Center Wright-Patterson AFB, OH 45433

Statement of Work for the Advanced Pilot Training (APT) Program

- ii -

TABLE OF CONTENTS

1.0 INTRODUCTION

2.0 DEFINITIONS

3.0 ENGINEERING AND MANUFACTURING DEVELOPMENT (EMD) / PRODUCTION

REQUIREMENTS

Statement of Work for the Advanced Pilot Training (APT) Program

- iii -

ANNEX A – WORKING GROUPS

ANNEX B – SYSTEM MEETINGS AND SPECIAL INTEREST ACTIVITIES

ANNEX C – APPLICABLE DOCUMENTS

ANNEX D – CERTIFICATIONS AND APPROVALS

ANNEX E – ACRONYM LIST

Statement of Work for the Advanced Pilot Training (APT) Program

- iv -

ANNEX F – PROCEDURE FOR SUBMISSION OF OVER & ABOVE REQUESTS BELOW THE TRUTH

IN NEGOTIATIONS ACT THRESHOLD

ANNEX G – APT SYSTEM TYPE 1 TRAINING THROUGHPUT

ANNEX H – CONFIGURATION ITEM/COMPUTER SOFTWARE CONFIGURATION ITEMS LIST ... 174

ANNEX I – SOW / CLIN MATRIX

Statement of Work for the Advanced Pilot Training (APT) Program

1.0 INTRODUCTION

The Advanced Pilot Training (APT) Program will replace the T-38C used in the United States Air Force’s (USAF) Specialized Undergraduate Pilot Training (SUPT) advanced phase fighter and bomber track as well as the Introduction to Fighter Fundamentals (IFF) course, Pilot Instructor Training (PIT), Euro-NATO Joint Jet Pilot Training (ENJJPT) Undergraduate Pilot Training (UPT), ENJJPT PIT, and ENJJPT IFF. The APT Program will provide student pilots with the foundational flying skills and core competencies required to transition into current generation fighter and bomber aircraft.

Throughout this Statement of Work (SOW) the following applies

a) The APT Program is defined as the APT Aircraft System, the APT Ground Based Training System (GBTS), all support equipment (SE), limited sustainment, training support, aircraft initial spares, and technical data.

b) The APT GBTS is defined as all Aircrew Training Devices (ATD), Ground Training Devices (GTD), other training system components, GBTS SE, academics, and Interactive Multimedia Instruction (IMI).

c) When not explicitly stated, requirements include both aircraft system and GBTS.

d) If the Aircraft requires an external store to accomplish any requirement defined in the contract, then that store is included in the definition for the term Aircraft in Section 2.0 (excluding the travel pods identified in Table 3-37 of the Aircraft SS).

Scope

The scope of this SOW includes all Engineering and Manufacturing Development (EMD), production, and sustainment activities to include but not limited to

a) design, integrate, test, verify, and certify the APT System to meet the APT Aircraft System Specification (SS) and the APT GBTS SS,

b) deliver EMD aircraft for Developmental Test and Evaluation (DT&E),

c) deliver EMD ATDs for DT&E, to include Weapons System Trainers (WST), Unit

Training Device (UTD), and Operational Flight Trainer (OFT),

d) deliver EMD GTDs for DT&E, to include Aircrew Ground Egress Trainers (AGET), Ejection Seat Trainers (EST), appropriate course materials, and part task trainers (PTT),

e) develop, manage, conduct, and deliver Type 1 training for aircrew, maintenance, and simulator instructor personnel,

f) deliver an Aircraft Systems Integration Lab (ASIL),

g) deliver a Software Development Lab (SDL),

h) deliver a Training System Support Center (TSSC),

i) deliver initial spares and SE for the APT Aircraft,

j) ensure all requirements flow down to subcontractors and suppliers,

k) provide Pre-Operational Support (POS), field service representatives (FSR), and Interim

Contractor Support (ICS) for the APT Aircraft in support of transitioning to a

Statement of Work for the Advanced Pilot Training (APT) Program

3.0 ENGINEERING AND MANUFACTURING DEVELOPMENT (EMD) /

PRODUCTION REQUIREMENTS

Air Vehicle

The Contractor shall design the APT Aircraft IAW the Aircraft SS. The Contractor shall integrate, test, certify, manufacture, and deliver APT Aircraft.

Aircraft Electrical Load Analysis The Contractor shall develop and deliver an aircraft Electrical Load Analysis that covers the aircraft and all mission equipment, including personal electronic devices (if applicable) for all mission phases, IAW Military (MIL)-E-7016F. The analysis shall include all primary, secondary, emergency, and external electrical power sources.

(DI-SESS-80567B, Subsystem Design Analysis Report, Electrical Load Analysis, C224)

Update of EMD Aircraft to Production-Representative Configuration The Contractor shall deliver a modification package to the Government for the update of EMD aircraft to the production-representative configuration. The Contractor shall update the EMD Aircraft to the production-representative configuration using the Government-approved modification package and IAW section 3.4.1.15. The Contractor’s modification package shall include the following: (1) how each aircraft will be updated to meet the production-representative baseline configuration, (2) detailed descriptions of any modifications, (3) any areas of non-compliance to the airworthiness certification basis, (4) resultant risks and mitigation plans, (5) operational impacts, and (6) maintenance impacts.

(DI-MISC-80508B, Technical Report – Study/Services, EMD Aircraft Configuration Modification Report, C136)

Deviations from Production-Representative Baseline Any deviations from the production-representative baseline, to include configuration, operations, and maintenance, shall be approved by the Government through a Request for Variance (RFV) as described in section 3.2.4.5.

(DI-SESS-80640D, Request for Variance (RFV), C226)

Systems Engineering The Contractor shall perform systems engineering IAW Institute of Electrical and Electronics Engineers (IEEE) 15288.1-2014.

Statement of Work for the Advanced Pilot Training (APT) Program

Technical Management

Systems Engineering Management Plan (SEMP) The Contractor shall develop, implement, and maintain a SEMP for the APT Program IAW IEEE 15288.1-2014. The SEMP shall address the overall approach of the Contractor’s technical management of the program. The Contractor’s SEMP shall be consistent with the Government’s APT Systems Engineering Plan (SEP).

(DI-SESS-81785A, Systems Engineering Management Plan (SEMP), C264)

Technical Reviews, Audits, and Technical Interchange Meetings (TIMs) The Contractor shall conduct and host technical reviews and audits IAW Annex B and IEEE 15288.2-2014 as tailored by the Contractor’s SEMP. The Contractor shall conduct and host TIMs for technical issues that arise IAW Annex B.

(DI-ADMN-81249B, Conference Agenda, C002) (DI-ADMN-81505, Report, Record of Meeting/Minutes, C005)

Deficiency Reporting

The Contractor shall develop, implement, and maintain an identification, tracking, and reporting process for problems discovered during EMD. The Contractor’s Problem Report (PR) process shall include any and all problems associated with aircraft system and GBTS, subsystems, hardware, software, SE, and simulation and emulation software. The Contractor’s PR process shall include fleet-wide (all variants) deficiencies, identified prior to contract award and during EMD, that restrict or prevent operation of the GBTS or aircraft system. The Contractor shall provide the Government Type-C Access to this PR database to include planned and actual actions to resolve the PRs. The Contractor shall provide the Government PR status reports, which include its priority and forecasted closure dates. The Contractor shall provide investigation and analysis in support of the Government Deficiency Report (DR) and Watch Item Tracking (WIT) process and shall support DR/WIT reviews, as required, to provide status of DR/WIT identified during testing. WITs will be periodically updated and evaluated for either closure or submittal into the Joint Deficiency Reporting System (JDRS). Prior to sixty (60) days after contract award, the Contractor shall gain Type-A Access to JDRS, IAW Technical Order (TO) 00-35D-54, and provide investigation, material teardown analysis, testing, and reporting of JDRS deficiencies for the period of performance of the contract.

(DI-MGMT-80368A, Status Report, Problem Report Status, C093)

The Contractor shall provide investigation and analysis in support of the Deficiency Review Board (DRB) IAW Annex B. The Contractor shall identify and generate DRs for any APT

Statement of Work for the Advanced Pilot Training (APT) Program

System deficiencies, or deficiencies from any variants of the system, that impact Operational, Safety, Suitability, and Effectiveness of systems, their subsystems, and their support systems to include trainers, test, and SE. Category I DR investigations shall take priority over all other DR investigations. All other DR investigations shall be worked in order of priority provided by the Government. Initial reports for DR investigations in support of safety investigations shall include teardown information and repair cost data. Teardown reports shall include, but are not limited to, visual anomalies, non-destructive inspection results, uncharacteristic component performance, benchmark tests, and possible root cause(s), as appropriate. The Contractor shall coordinate DR investigations with applicable organizations, including the Government, vendors, and subcontractors.

(DI-MGMT-80258A, Material Improvement Project Report, Deficiency Report, C088)

The Contractor shall correct all deficiencies discovered during verification of the Aircraft SS and GBTS SS at no additional cost to the Government. The Contractor shall correct all DRB-identified design and manufacturing deficiencies. These deficiency resolutions shall be submitted to the Government for disposition via a no-cost Engineering Change Proposal (ECP) and remedied IAW the schedule in the Government-approved DR.

(DI-SESS-80639D, Engineering Change Proposal, C225)

Technical Performance Measures (TPMs) The Contractor shall establish a process to identify, track, and manage TPMs and include the process in the SEMP. The Contractor shall use the TPMs in the Government’s SEP as the initial set of TPMs. Any changes to this set of TPMs shall be submitted to the Government for approval. The Contractor shall deliver TPM status reports showing trend lines and any corrective actions needed to meet the required value.

(DI-MISC-80508B, Technical Report – Study/Services, Aircraft Technical Performance Measures (TPM), C134) (DI-MISC-80508B, Technical Report – Study/Services, GBTS Technical Performance Measures

(TPM), C134)

Integrity Programs The Contractor shall develop, implement, and maintain integrity programs for the APT Aircraft, as described in the below subparagraphs using Military Handbook (MIL-HDBK)-515 as a guide.

The Contractor shall document all plans, tasks, test data, analysis, and reports associated with these integrity programs and make available to the Government on the Data Accession List

(DAL).

(DI-MGMT-81453A, Data Accession List (DAL), C100)

The Contractor shall develop and implement an ASIP Master Plan IAW Military Standard (MIL- STD)-1530C and MIL-STD-1568. Additional guidance can be found in MIL-HDBK-1587. The Contractor’s ASIP Master Plan shall describe the procedures, analyses, and methods necessary to process Loads Environmental Spectra Survey (L/ESS) and Individual Aircraft Tracking (IAT) data obtained from the APT Aircraft. The Contractor shall provide the L/ESS data and IAT data in the L/ESS Data Report and IAT Data Reports, respectively. The Contractor shall perform and provide a report on the following IAW MIL-STD-1530: Durability and Damage Tolerance (DADT) Analysis, DADT Test, Internal Loads and Static Strength Analysis, Flutter Analysis, Flutter Model Test, Flight Flutter Test, Airframe Rigidity Test, and an Analytical Condition Inspection. The Contractor shall develop and implement a Corrosion Prevention and Control Program (CPCP). The Contractor shall deliver a CPC plan that describes the CPCP. The Contractor’s CPC plan shall include corrosion prevention and control measures for all aircraft structures and components, as described in MIL-STD-1568D. The Contractor shall provide a Finish Specification to support the CPC plan. The Contractor shall support the Corrosion Prevention Advisory Board IAW MIL-STD-1530C and Annex A.

(DI-SESS-81956, Aircraft Structural Integrity Program (ASIP) Master Plan, C268) (DI-SESS-81450B, Loads Environmental Spectra Survey (L/ESS) Data Report, C235) (DI-SESS-81917, Individual Aircraft Tracking (IAT) Data Report, C267) (DI-SESS-81983, Durability and Damage Tolerance (DADT) Analysis Report, C270) (DI-SESS-81485A, Durability and Damage Tolerance (DADT) Test Report, C236) (DI-SESS-80198B, Internal Loads and Static Strength Analysis Report, C221) (DI-MISC-81390A, Flutter Analysis Report, C170) (DI-MISC-81389A, Flutter Model Test Report, C169) (DI-MISC-81388A, Flight Flutter Test Report, C168) (DI-MISC-81387A, Airframe Rigidity Test Report, C167) (DI-MISC-81391, Analytical Condition Inspection Report, Engine Lead-the-Fleet / ACI Report, C171) (DI-MFFP-81403A, Corrosion Prevention and Control Plan, C073) (DI-MFFP-81402A, Finish Specification, C072)

The Contractor shall develop, implement, and maintain a MECSIP IAW MIL-STD-1798C. The Contractor's MECSIP shall include development, delivery, and maintenance of a MECSIP Master Plan. The Contractor's plan shall define overall strategy and depict the time-phased scheduling and integration of all required MECSIP tasks for design, development, qualification and force management of the specific system hardware, including Contractor, subcontractor, and off-the-shelf equipment. The Contractor's plan shall include discussion of unique features, exceptions to MIL-STD-1798, including associated risk assessments; a complete discussion of each proposed task; rationale for each task and subtask; and an approach to address and resolve

Statement of Work for the Advanced Pilot Training (APT) Program those problems that can be anticipated in the execution of the plan. The Contractor's development of the schedule shall consider all interfaces, the impact of schedule delays, mechanisms for recovery, and other problem areas. The Contractor shall classify all MECSIP components for criticality as safety-critical, mission-critical, durability-critical, durability-non-critical or other/expendable components. The Contractor shall classify all MECSIP safety-critical and mission-critical parts utilizing the procedures in MIL-STD-1798. The Contractor shall provide the supporting analysis and test reports used to identify the criticality classifications for all safety-critical and mission-critical MECSIP components. The Contractor shall consider the Failure Modes, Effects, and Criticality Analysis (FMECA) and the Hazard Analysis for each specific system in the component classification process. The Contractor's list of MECSIP safety-and mission-critical parts shall include, but not be limited to, Work Unit Code, part number, and part nomenclature or description as identified in the TOs.

(DI-MISC-80508B, Technical Report-Study/Services, Mechanical Equipment and Subsystem Integrity Program (MECSIP) Master Plan, C144) (DI-SAFT-81932, Critical Safety Items (CSI)/Critical Application (CAI) List, C218)

The Contractor shall develop and implement a PSIP plan IAW MIL-STD-3024 with Change 1.

For tailoring guidance, refer to MIL-STD-3024 Section 6. The CPCP for the aircraft shall include the plan for the engine. The Contractor shall support PSIP and Propulsion Working Groups IAW Annex A.

(DI-MISC-80508B, Technical Report-Study/Services, Propulsion System Integrity Program (PSIP) Master Plan, C145) (DI-MFFP-81403A, Corrosion Prevention and Control Plan, C073)

Open System, Modular Design The Contractor shall develop, deliver, and maintain an Open System Management Plan, which shall contain, but is not limited to, the following: the design approach and documentation used in the modular open architecture, inter-component dependencies, and the approach to technology insertion, life cycle sustainability, interface design and management, treatment of proprietary or vendor-unique components, and reuse of pre-existing or common items (for both the aircraft and GBTS). As part of its Open System Management Plan, the Contractor shall, at a minimum, describe how the proposed system architecture meets the Open Systems Architecture (OSA) requirement as called for in the Aircraft SS. The Contractor’s plan shall also include for all newly developed and modified Line Replaceable Units (LRUs) and/or Shop Replaceable Units (SRUs) (with respect to both hardware and software interfaces) a spreadsheet that identifies the following information:

• Component or interface type to include whether the interface is key

• Whether a component or interface is proprietary/non-proprietary

• The Interface Control Document (ICD) that defines each interface and location of ICD

Statement of Work for the Advanced Pilot Training (APT) Program

• The type of data-right associated with each interface

The Contractor shall complete and deliver a proposed list of hardware and Operational Flight Programs/Software Items (OFP/SIs) that are defined as key components and interfaces.

(DI-MGMT-80004A, Management Plan, Open Systems Management Plan, C079) (DI-MGMT-80004A, Management Plan, Key Components & Interface Listing, C079)

Systems Requirements

Requirements Management and Traceability The Contractor shall perform requirements management to manage, track, and bi-directionally trace all system requirements, both vertically and horizontally, from the approved SSs and the Technical Airworthiness Authority (TAA)-approved APT Tailored Airworthiness Certification Criteria (TACC) to the lowest level specifications. The Contractor shall utilize a requirements management database tool that is compatible with Dynamic Object Oriented Requirements System (DOORS). The Contractor shall conform its requirements database to the Government DOORS database to be provided upon contract award. The Contractor shall include all system, subsystem, Configuration Item/Computer Software Configuration Items (CI/CSCIs) performance and detail, and interface requirements, and associated verifications in the database. The Contractor shall include all criteria in the TACC in the database. The Contractor shall update the database to ensure widow and orphan requirements are addressed. The Contractor shall provide the Government Type-D Access to the requirements management database. The Contractor shall provide an export of the current version of the database that can be successfully imported to DOORS. The Contractor’s requirements database implementation shall allow the Government to generate and print reports. The Contractor shall ensure the requirements management database is capable of providing a real-time output of a Requirements Traceability Matrix (RTM) and a Specification Requirement Verification Matrix (SRVM) that includes the verification status of each requirement.

(DI-MISC-80508B, Technical Report – Study/Services, Requirements Management Database, C124) (DI-MISC-81283, Specification Requirement Verification Matrix, Aircraft SRVM, C166) (DI-MISC-81283, Specification Requirement Verification Matrix, GBTS SRVM, C166)

System Specifications The Contractor shall implement and maintain the Aircraft and GBTS SSs. The Contractor shall use the requirements management database to generate deliverable SSs.

(DI-IPSC-81431A, System/Subsystem Specification (SSS), Aircraft System Specification, C053) (DI-IPSC-81431A, System/Subsystem Specification (SSS), GBTS System Specification, C054)

Statement of Work for the Advanced Pilot Training (APT) Program

Subsystem, Configuration Item/Computer Software Configuration Items (CI/CSCI) Performance, and CI/CSCI Detail Specifications

The Contractor shall develop, implement, deliver, and maintain subsystem, CI/CSCI performance, and CI/CSCI detail specifications for the aircraft system and GBTS. The Contractor’s specifications shall be derived from and maintain traceability to the associated SSs.

The Contractor shall use the requirements management database to generate deliverable specifications.

(DI-IPSC-81431A, System/Subsystem Specification (SSS), Aircraft Subsystem Specification, C053) (DI-SDMP-81493A, Program-Unique Specification Documents, Aircraft CI Performance Specifications, C220) (DI-SDMP-81493A, Program-Unique Specification Documents, Aircraft CI Detail Specifications, C220) (DI-IPSC-81431A, System/Subsystem Specification (SSS), GBTS Subsystem Specification, C054) (DI-SDMP-81493A, Program-Unique Specification Documents, GBTS CI Performance Specifications, C219) (DI-SDMP-81493A, Program-Unique Specification Documents, GBTS CI Detail Specifications, C219) (DI-IPSC-81433A, Software Requirements Specification (SRS), Aircraft SRS, C055) (DI-IPSC-81433A, Software Requirements Specification (SRS), GBTS SRS, C055) (DI-IPSC-81441A, Software Product Specification (SPS), Aircraft SPS, C063) (DI-IPSC-81441A, Software Product Specification (SPS), GBTS SPS, C063)

Interface Control Documents (ICDs) and Interface Requirements Specifications (IRSs)

The Contractor shall develop, deliver, and maintain ICDs and IRSs at the CI/CSCI level and higher IAW Electronic Industries Alliance (EIA)-649-1, Section 3.2.5.1. The Contractor shall identify the internal and external interface requirements for the system and its CI/CSCIs.

(DI-SESS-81248B, Interface Control Document (ICD), Aircraft ICDs, C233) (DI-SESS-81248B, Interface Control Document (ICD), GBTS ICDs, C232) (DI-IPSC-81434A, Interface Requirements Specification (IRS), Aircraft IRS, C056) (DI-IPSC-81434A, Interface Requirements Specification (IRS), GBTS IRS, C056)

The Contractor shall support the ICWG to review, analyze, and evaluate interface requirements per Annex A and the guidelines set forth in EIA-649-1, Section 3.2.5.2. The Contractor shall ensure that interfacing equipment suppliers and subcontractors provide a representative to support the ICWG.

Statement of Work for the Advanced Pilot Training (APT) Program

Configuration Items / Computer Software Configuration Items The Contractor shall develop, deliver, and maintain a list of CI/CSCIs. The Contractor’s list shall contain the items provided in Annex H as a baseline. The Contractor shall ensure the list of CI/CSCIs is representative of its proposed APT Aircraft System and GBTS designs. The Contractor shall also submit recommended changes to the CI/CSCI list in Annex H for Government approval. The Contractor’s list shall be developed using EIA-649-1, Section 3.2.1 (2), a through f, as a guide. The Contractor shall designate all OFP/SIs associated with key components as CSCIs unless they are 100 percent reused software, and then the designation would be on a case-by-case basis as agreed to by the Government. The Contractor shall uniquely identify each CI/CSCI and provide a design document identifier. The Contractor shall develop, document, and process all Requests for Nomenclature for all CIs IAW MIL-STD-196E. The Contractor shall process Computer Program Identification Numbers through the Automated Computer Program Identification Number System IAW TO 00-5-16 for all OFP/SIs if one does not currently exist.

(DI-SESS-82007, Configuration Item (CI) Documentation Recommendation, C271) (DI-MISC-81454C, Automated Computer Program Identification Number (ACPIN) Data and Control Record, AF IMT 1243, C175) (DI-SESS-81254C, Request for Nomenclature, C234)

Specification Tree The Contractor shall prepare a specification tree, for the entire system, that includes and labels all of the CIs and CSCIs as defined by SOW paragraph 3.2.2.5. The Contractor shall ensure the specification tree maintains requirements traceability from the Aircraft and GBTS SSs to the lowest level specifications in the tree and from the lowest level back up to the SSs. The Contractor shall include the specification tree in the SEMP.

(DI-SESS-81785A, Systems Engineering Management Plan (SEMP), C264)

System Security

Program Security The Contractor shall comply with the security requirements specified on the Department of Defense (DD) Form 254. The Contractor shall ensure all Contractor personnel who require Type-H Access to classified information have the appropriate clearance prior to handling the classified information. The Contractor shall ensure all Contractor personnel needing Type-A Access to Government network systems have, at a minimum, a favorable Tier 1 personnel security investigation. The Contractor shall comply with DoD 5220.22-M and maintain a facility approved for the use and storage of classified material, up to and including material classified as SECRET. The Contractor shall comply with DFARS Clause 252.204-7012.

Statement of Work for the Advanced Pilot Training (APT) Program

Protection of Controlled Unclassified Information (CUI) The Contractor shall comply with Department of Defense Manual (DoDM) 5200.01, Volume 4, Enclosures 3 and 4, for identification, protection, and training requirements of CUI. The Contractor shall be responsible for training its personnel and conducting out-processing procedures identified in DoDM 5200.01, Volume 4, Enclosure 4. The Contractor shall comply with DoD 5400.7-R_ AFMAN 33-302 requirements. The Contractor shall protect unclassified DoD information not approved for public release on non-DoD Information Systems IAW Department of Defense Instruction (DoDI) 8582.01, Enclosure 3, and the APT Program’s Security Classification and Declassification Guide.

Operations Security (OPSEC) The Contractor shall apply OPSEC in its management of the APT System IAW Air Force Instruction (AFI) 10-701 to reduce program vulnerability from successful adversary collection and exploitation of the program’s critical information. The APT Program Office will provide the Contractor with its OPSEC Plan, which contains the program’s Critical Information List (CIL), as an annex to the APT Program Protection Plan (PPP). The APT Program Office will include revisions to the CIL with updates to the PPP.

Program Protection Surveys The Contractor shall support Program Protection Surveys of Contractor and subcontractor facilities handling CPI and critical components (CC) to ensure compliance with protection measures IAW Air Force Pamphlet (AFPAM) 63-113. The Contractor shall immediately notify the APT Program Office upon the discovery of any loss, compromise, or suspected compromise of identified CPI or CC.

Requirements Flow-Down to Subcontractors and Suppliers The Contractor shall include language in all subcontracts that ensures subcontractors and suppliers: 1) comply with all applicable system security requirements in the SOW and 2) support, as necessary, the Government-led efforts to update the PPP.

System Security Engineering Working Group (SSEWG) The Contractor shall support SSEWG meetings, to include creating a group charter, providing technical briefings, supporting development of the PPP and other program documents, tracking issues and action items, working assigned action items, and preparing and distributing meeting minutes as specified in Annex A.

Program Protection Plan (PPP) The APT PPP and supporting annexes will be provided. The Contractor shall provide support from all appropriate areas of expertise to assist the Government in the development and approval of an updated, Contractor design-specific PPP, including, but not limited to, CPI identification, Statement of Work for the Advanced Pilot Training (APT) Program

AT, Criticality Analysis, vulnerability identification, risk assessment, countermeasure development, Supply Chain Risk Management (SCRM), counterfeit prevention, software assurance, and cybersecurity. The Contractor shall, as requested by the Government, provide support to continue to update the PPP and its associated annexes. The Contractor shall plan for and execute program protection IAW the PPP and program guidance. The Contractor shall develop, implement, and maintain a Program Protection Implementation Plan.

(DI-ADMN-81306, Program Protection Implementation Plan (PPIP), C003)

Critical Program Information Assessment The Contractor shall support a Government-led CPI assessment utilizing a CPI identification process, based on the CPI Decision Aid in AFPAM 63-113, to establish the CPI baseline. The Contractor shall assess system and subsystem component changes for CPI and update the baseline, if necessary. For design changes occurring during the Production phase, the Contractor shall support Government-led updates to the latest list of CPI. The Contractor shall document the CPI assessment(s) in the AT Plan and include a brief description of the component(s) found as candidate CPI, why they meet the stated thresholds for consideration as CPI, and a technical description of their function.

(DI-MGMT-80004A, Management Plan, Anti-Tamper (AT) Plan, C121)

Anti-Tamper The Contractor shall provide AT requirements recommendations for Resident CPI, including those identified as a result of CPI assessment updates. The Contractor shall flow down AT requirements to the applicable subsystem and lower-level specifications, develop test plans and test procedures, and accomplish verification testing. The Contractor shall document the AT analysis, protection requirements, and testing in an AT Plan based on the DoD AT Plan Template.

(DI-MGMT-80004A, Management Plan, Anti-Tamper (AT) Plan, C121)

Criticality Analysis The Contractor shall support a Government-led Criticality Analysis that follows the procedural steps in Chapter 13 of the Defense Acquisition Guidebook. For design changes occurring during the Production phase, the Contractor shall support Government-led updates to the latest Criticality Analysis. The Contractor shall develop, document, and update the Criticality Analysis tables as depicted in Appendix C, Tables C-1 and C-2, of the DoD’s Program Protection Plan Outline and Guidance, Version 1.0, and include them in the SSEWG meeting minutes. The Contractor shall provide the following information for each Level I and II CC identified by the Criticality Analysis.

• Company description (company name, address, website, Contractor and Government Entity code),

• Company type (e.g., supplier, integrator, prime, Original Equipment Manufacturer

[OEM]),

Statement of Work for the Advanced Pilot Training (APT) Program

• Whether the supplier facility has a security clearance, and

• Brief description of product and/or service acquired

(DI-ADMN-81505, Report, Record of Meeting/Minutes, C005)

Supply Chain Risk Management The Contractor shall establish and implement a SCRM process and integrate it into the program’s risk management process to ensure that the APT System does not incorporate counterfeit parts, malicious code, or any other elements that would allow adversaries to gain unauthorized access to data, alter data, interrupt communications, or otherwise disrupt operations. The Contractor shall support the Government-led supply chain risk assessment to prioritize the CCs, assess for supply chain risk as defined in DoDI 5200.44, and develop and document mitigations or countermeasures to minimize the risks. If additional CCs are identified as a result of updates to the Criticality Analysis or changes to suppliers of previously identified CCs, the Contractor shall support the Government-led supply chain risk assessment to prioritize these CCs, assess for supply chain risk, and develop and document mitigations or countermeasures to minimize the risks. The Contractor shall require its suppliers and subcontractors to participate in the supply chain risk mitigation activities. The Contractor shall require its subcontractors and suppliers to notify them of changes that affect supply chain risk, such as changes in their suppliers, locations, processes, or technology. The Contractor shall notify the Government within thirty (30) days of these changes. The Contractor shall include supply chain risks in the Risk Management Status Report.

(DI-MGMT-81809, Risk Management Status Report, C112)

Counterfeit Prevention The Contractor shall develop, implement, and maintain a Counterfeit Prevention Plan that describes how it will prevent the procurement of counterfeit materials and parts using Society of Automotive Engineers (SAE) AS5553A as a guide. The Counterfeit Prevention Plan shall include a description of the processes for reviewing suppliers and subcontractors and approving ones that meet appropriate counterfeit avoidance criteria. The Contractor shall require its suppliers and subcontractors to participate in counterfeit prevention activities.

(DI-MISC-81832, Counterfeit Prevention Plan, C183)

If the Contractor uses custom application-specific integrated circuits that are custom-designed, custom-manufactured, or tailored for a specific DoD military end use, then the Contractor shall acquire them using a trusted flow from supplier(s) accredited by the Defense Microelectronics Activity. The Contractor shall buy parts directly from OEMs, OCMs, and authorized distributors. The Contractor shall provide rationale for any exceptions to this and conduct a supply chain risk assessment to determine the potential risk of obtaining counterfeit parts from such sources. The Contractor shall establish testing and verification requirements for items not

Statement of Work for the Advanced Pilot Training (APT) Program timelines. The Contractor shall document the process to evaluate and incorporate fixes, patches, updates, and new releases of COTS and open source software components in the SDP. The Contractor shall document fixes, patches, updates, new releases that cannot be implemented, and rationale in the SDP. The Contractor shall ensure that the standard methodology for installation, operation, maintenance, update, and/or patching of software does not alter the secure configuration settings from the approved configuration without prior coordination and approval by the Government. The Contractor shall ensure the configuration management of COTS is included in the overall program configuration management process and is documented in the Configuration Management Plan (CMP).

(DI-IPSC-81427A, Software Development Plan (SDP), Aircraft SDP, C052) (DI-IPSC-81427A, Software Development Plan (SDP), GBTS SDP, C052) (DI-SESS-80858C, Supplier’s Configuration Management Plan, C228)

Cybersecurity The Contractor shall support the APT Program Office and other stakeholders, to include Air Force Life Cycle Management Center Directorate of Engineering (AFLCMC/EN-EZ), to identify, manage, and verify cybersecurity requirements as derived from National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, for the APT Program, IAW relevant, current DoD, Federal, and Air Force requirements. The Contractor shall implement a cybersecurity strategy, as developed by the Government, for the system, its subsystems, components, support systems, and equipment IAW DoDI 8510.01, NIST SP 800-37, AFI 33-210, and the USAF Platform Information Technology (IT) Guidebook, Version 1.5 (released December 19, 2013).

The Contractor shall provide support, source data, and analysis required to support the Government in conducting assessment and authorization (A&A) activities for the system IAW DoDI 8500.01 and DoDI 8510.01 in support of Authority to Operate (ATO) from the designated authorizing official. The Contractor shall provide the artifacts necessary to support the development of the Government’s APT Aircraft System and a GBTS Architecture Analysis Report describing system components, boundaries, interconnections with other systems or networks, and data flows. The Contractor shall support development of the system’s installation and configuration documentation developed for consistent deployment of the systems to multiple locations. The Contractor shall document security control implementation and configuration requirements. The Contractor shall meet operational security needs of the hosting installation and shall work with the Information System Security Manager or Information System Security Officer at each location to meet configuration and installation requirements. The Contractor shall utilize Committee on National Security Systems Instruction (CNSSI) 1253 and the NIST SP 800-53 derived security controls, as provided by the Government in the Aircraft and GBTS Security Controls Traceability Matrices, for the risk management framework (RMF)-based A&A

Statement of Work for the Advanced Pilot Training (APT) Program of the APT Aircraft System and GBTS. The Contractor shall ensure and document bi-directional traceability between RMF security controls and allocated requirements. The Contractor shall include cybersecurity RMF activities and events in the Integrated Master Schedule (IMS) and document schedule risks and delays accordingly.

(DI-MGMT-82000, DoD Information Assurance Certification and Accreditation Process (DIACAP) and Risk Management Framework (RMF) Deliverable Data, Aircraft RMF Deliverable Data, C120) (DI-MGMT-82000, DoD Information Assurance Certification and Accreditation Process (DIACAP) and Risk Management Framework (RMF) Deliverable Data, GBTS RMF Deliverable Data, C120)

The Contractor shall ensure that cybersecurity risks are identified and managed as a performance risk as part of the overall program risk management process. The Contractor shall ensure that cyber risk management activities are consistent with guidance provided in DoDI 8510.01 and other relevant guidance in effect at the time of contract award and support.

(DI-MGMT-81808, Contractor’s Risk Management Plan, C111)

The Contractor’s cybersecurity workforce shall maintain compliance with the cybersecurity training and certification requirements in Department of Defense Directive (DoDD) 8140.01 and meet the investigative-level requirements established in Enclosure 3 of DoDI 8500.01. The Contractor shall ensure that training materials, technical manuals, and other technical data developed for the program address the appropriate cybersecurity controls (e.g., administrative, procedural, inherited) or requirements that affect system operational, maintenance, access, installation, and continuous monitoring activities. Contractor employees or individuals under contract or subcontract that are designated to provide administrative services or support to the Government and require Type-A Access and/or entry to Government assets shall maintain compliance with the cybersecurity training and certification requirements in DoDD 8140.01, DoDI 8570.01-M and AFMAN 33-285, and hold a SECRET security clearance.

The Contractor shall provide Cyber Awareness training before authorizing the use of systems that manage Government information and before performing assigned duties. The Contractor shall provide employees with initial and annual refresher training in the employment and operation of specified systems managing and maintaining Government-controlled information.

Configuration and Data Management The Contractor shall perform configuration management and data management for the APT Program that assures systematic tracking, controlling, and reporting activities for change control, Statement of Work for the Advanced Pilot Training (APT) Program to include evaluation, review, coordination, approval, documentation, implementation, and verification of changes to approved baselines for configuration control. The Contractor and subcontractor processes shall comply with configuration management and data management requirements in DoDI 5000.02. The Contractor shall use MIL-HDBK-61A SE and American National Standards Institute Electronics Industry Association (ANSI/EIA)-649B as guides. The Contractor shall ensure that the subcontractors adhere to configuration management processes to ensure changes and configuration control are tracked and maintained, as documented in the Contractor’s CMP. The Contractor shall ensure that all requirements are flowed down to its subcontractors and vendors.

Configuration Management The Contractor shall establish and maintain a disciplined configuration management process to manage hardware and software changes to the APT Program’s configuration baselines and associated documentation. The Contractor shall apply these processes to control system products to include, but not limited to, flight manuals, GBTS operating manuals, maintenance manuals, temporary and permanent modifications, ECPs, Contract Change Proposals (CCPs), RFVs, DRs, and Technical Data Packages (TDPs). With regard to CIs for which the Government is not the Current Document Change Authority (CDCA), the Contractor shall be responsible for managing configuration of the items. The Contractor shall ensure compliance with all specifications and ICDs to which the item was originally developed, tested, and procured. The Contractor shall apply configuration control to each CI/CSCI, its components, and its configuration documentation. Product configuration changes and variances shall be documented, coordinated, and recorded in the status accounting system. The Contractor shall generate the configuration documentation required for the configuration baselines being established by the Government.

Data Management The Contractor shall establish and maintain data management procedures for the preparation, quality control, administration, and delivery of data required by the CDRL as specified in the delivery order. The Contractor shall prepare, maintain, and track the contract data status, schedule and ensure timely data deliveries. The Contractor shall provide the Government with data status reports.

(DI-MGMT-80368A, Status Report, Data Status Reports, C089)

Classified and Unclassified Data Markings The Contractor shall provide classification markings IAW DoD 5220.22-M. Classified and unclassified data, including metadata, Bill of Materials (BOM), data file deliveries, and the Summary Report, shall be packaged and shipped separately. Contract requirements for protection of classified data shall apply.

Statement of Work for the Advanced Pilot Training (APT) Program

Configuration Management Plan (CMP) The Contractor shall develop, submit and maintain a CMP, using MIL-HDBK-61A table A-3 as a guide. The Contractor shall describe its processes, methods and procedures used to manage the functional and physical characteristics of the assigned CI/CSCI(s) for the life of the program.

The Contractor’s CMP shall include the Contractors and subcontractors' configuration management principles, practices, and metrics. The Contractor’s CMP shall include a methodology for generating, measuring, and reporting configuration management performance data. The Contractor’s CMP shall address data handling, processing, storage, integrity, transfer, releasability, and disclosure, security, and maintenance documentation requirements. The Contractor shall include a Specification Requirements Verification Plan as an annex to the CMP.

The Contractor’s Specification Requirements Verification Plan shall describe the processes and procedures used to verify compliance to specification requirements. The Contractor’s Specification Requirements Verification Plan shall address the Specification Verification Review (SVR) as described in IEEE 15288.2 section 5.9.

Change Management Process The Contractor shall manage and track change activities using a systematic, measurable change process. The Contractor shall ensure that baselines are maintained and controlled. The Contractor’s configuration change and variance documentation shall address all areas of impact, to include cost, operational, sustainment and implementation actions. The Contractor shall use an ECP to document changes to baseline documentation. The Contractor shall update and maintain the APT Aircraft and the GBTS SSs through the use of ECPs and Specification Change Notices (SCN). Upon Government approval of the SCN, the Contractor shall submit a complete revision of the appropriate specification to include the change(s). All Changes to the APT Aircraft and the GBTS SSs shall be submitted to the program office. ECPs and SCNs shall be submitted for lower level specifications and ICDs when the Government is the CDCA. The Contractor shall submit all Class I ECPs to the program office for approval. The Contractor shall support the Government Configuration Control Boards. The Contractor shall submit all Class II ECPs to the Defense Contract Management Agency (DCMA) for classification review and submit a copy to the program office. All submitted ECPs shall include a completed Airworthiness Determination Form (ADF) and an Environment, Safety, and Occupational Health (ESOH) assessment report and/or impact statement. The Contractor shall classify ECPs IAW MIL-HDBK-61A, section 6.2.2, Table 6-2. The Contractor’s CCPs shall be issued for non-technical changes to the contract. The Contractor shall submit all CCPs to the program office for approval. The Contractor shall obtain the Government’s approval on any product that is not in conformance with the SSs and lower level specifications when the Government is the CDCA.

The Contractor shall accomplish this by submitting an RFV prior to the delivery to the Government. The Contractor’s submitted RFVs shall include a completed ADF and an ESOH assessment report and/or impact statement.

Statement of Work for the Advanced Pilot Training (APT) Program

(DI-SESS-80639D, Engineering Change Proposal (ECP), C225) (DI-ADMN-81401B, Contract Change Proposals (CCPs), C004)

(DI-SESS-80643D, Specification Change Notice (SCN), C227)

Configuration Audits The Contractor shall host, support, and co-chair (with the Government) FCAs and Physical Configuration Audits (PCA) encompassing all CIs and CSCIs for the entire APT Program IAW Annex B. The Contractor shall generate agendas, develop and distribute meeting minutes and action items, and work assigned action items. The Contractor shall perform FCAs/PCAs IAW the program Integrated Master Plan (IMP) and IMS and may accomplish them incrementally.

The Contractor shall produce and deliver a Configuration Audit Plan for the FCA and PCA. The Contractor shall be responsible for ensuring that subcontractors, vendors, and/or suppliers participate in FCAs and PCAs as appropriate. The Contractor shall deliver an SRVM delineating the status of each requirement. The Contractor shall generate and make available the documentation necessary to support the FCA/PCA IAW EIA-649-1.

(DI-SESS-81646B, Configuration Audit Plan, Aircraft Configuration Audit Plan, C251) (DI-SESS-81646B, Configuration Audit Plan, GBTS Configuration Audit Plan, C251) (DI-MISC-81283, Specification Requirement Verification Matrix, Aircraft SRVM, C166) (DI-MISC-81283, Specification Requirement Verification Matrix, GBTS SRVM, C166)

Configuration Status Accounting (CSA) The Contractor shall establish and maintain a configuration status system. The Contractor shall perform CSA to document the current configuration, status of changes in work, change history, and the as-designed, as-built, as-delivered, and as-modified configuration of all CIs within the APT System. The Contractor shall adhere to the capabilities in EIA-649-1, 3.4.1. The Contractor shall incorporate all approved configuration changes and Engineering Release Records into its CSA system. The Contractor shall give the Government, at a minimum, Type-C Access to this database.

Delivery Method for Contract Data Requirements List Deliveries The Contractor shall electronically deliver all contractual data using the Government-controlled system, Multi-user ECP Automated Review System (MEARS). The Contractor shall ensure that an adequate number of Contractor personnel obtain Type-A Access to MEARS. The Contractor shall complete training required by the Government on the MEARS system.

Integrated Digital Environment (IDE) The Contractor shall establish, maintain, and provide the Government Type-F Access to a secure IDE to enable collaboration and information sharing of all technical and programmatic data used on or produced for the performance of this contract. The Contractor shall develop, implement, Statement of Work for the Advanced Pilot Training (APT) Program and maintain IDE Training Materials. The Contractor shall provide the Government initial training and associated instructional material for the IDE and other Contractor databases and systems for which Type-F Access is required by the Government. The Contractor shall provide updated training and training materials to the Government IDE team on the same schedule as updates are provided to users internal to the company.

(DI-ILSS-80872, Training Materials, Training Materials for IDE, C045)

Data Accession List The Contractor shall develop and maintain a DAL that includes contract-referenced data, existing data, and internally generated data used by the Contractor to develop, test, and manage the program, and not otherwise delivered IAW a CDRL. The Contractor shall flow this requirement down to the subcontractors and suppliers and shall include their data on the DAL. Upon request, the Contractor shall deliver data items from the DAL.

(DI-MGMT-81453A, Data Accession List (DAL), C100)

Item Unique Identification (IUID) The Contractor shall develop, implement, and maintain an IUID Plan IAW MIL-STD-130N.

The Contractor shall apply IUID markings permanently to the components and maintain serialized item management tracking (e.g., using automatic identification technology, and unique identification) processes IAW MIL-STD-129R, MIL-STD-130N and DFARS 252.211-7003.