Attachment 0001 Aucos SOW_72hr.docx

ROCK ISLAND ARSENAL DATE: 29 APRIL 2026

SCOPE OF WORK

RIA-JMTC PLATING SHOP BACKUP/PM/ CALIBRATION/REPAIR/SERVICE FOR AUCOS SYSTEM SOFTWARE AND ALL RECTIFIERS.

1. GENERAL INFORMATION:

The purpose of this contract is to have a qualified contractor provide phone and site support for the RIA-JMTC Plating Shop Aucos system when software failures and faults occur. The Aucos system software controls all the automation and plating processes. Also providing rectifier services including PM/calibration/repair/parts of all rectifiers in the plating department. The equipment is located at Rock Island Arsenal – Joint Manufacturing & Technology Center (RIA-JMTC), Rock Island, IL 61299, building 212, Plating Shop.

2. EQUIPMENT:

AUCOS US software systems, RIA-JMTC Plating Shop designed software that controls all automated plating processes.

Rectifiers used in the plating process combined in the Aucos system automation system.

3. DETAILED REQUIREMENTS:

3.1 RIA-JMTC is requesting Aucos phone support. The requested support requires expertise to instruct JMTC personnel through Server software issues, PC diagnostics, and PLC and Server Collaboration. The Contractor will supply the RIA JMTC-REPRESENTATIVE with a contact phone number for phone support. Once the RIA JMTC-REPRESENTATIVE, or the RIA JMTC-REPRESENTATIVE ’s approved alternate contacts the Contractor for phone support, the Contractor will either reply imminently or schedule the phone support within 24 hours. Phone support will be conducted during normal RIA-JMTC business hours (0700 to 1500 CST, Monday - Friday). If in an emergency and phone support can not remedy the issues a qualified technician will be on site within 72 hours of being requested. Any deviations from these times will be mutually agreed upon by the Contractor and the RIA JMTC-REPRESENTATIVE. Contract will SOFTWARE/PLC phone support sessions, offline reviews, and 2 planned maintenance trips per year. One phone support session equals one trouble ticket. Multiple phone calls may occur to remedy one trouble ticket.

3.2 RIA-JMTC is requesting a qualified technician providing rectifier services including PM/calibration/repair/parts of all rectifiers in the plating department.

3.3 Contractor will provide two site visits per year to perform preventative maintenance. The following operations shall be performed:

3.3.1 Backup of the PLC program including parameters.

3.3.2 PLC hardware check including fault logs.

3.3.3 Backup of the PC program including database parameters.

3.3.4 Database updates (minor versions only), database repairs and speed improvements.

3.3.5 Check of all log files.

3.3.6 Hardware check of the main servers.

3.3.7 Hardware check of the operator clients.

3.3.8 Network connectivity check (packet loss, throughput).

3.3.9 Software bug fixes and handling improvements (no new features).

3.3.10 Technical discussion about new requirements and possible additions to the software. The contractor will provide price quotes to the RIA JMTC-REPRESENTATIVE for any recommended new requirements and additions to the software.

3.3 RIA-JMTC is also requesting one-time Aucos onsite training. The requested support requires expertise with the RIA-JMTC Plating Shops Aucos software control system. The contractor will provide in-depth training and technical knowledge of both PLC programming and the higher-level software architecture of the Aucos line control system. The participant will gain practical understanding of system structure, maintenance procedures, and diagnostic approaches across all major control and IT components. In addition, the training covers relevant fundamentals of electrical and control cabinet technology and interaction with external line components.

3.4 Offline Log File Review:

The line control software is already capable of creating a compressed archive of the logfiles. Aucos will supply JMTC with a step-by-step guide on how to create an archive of the requested log files. Aucos will supply JMTC with instructions on how to download the archive to approved media (CD/DVD, Hard Drive). Aucos may not be able to provide support to JMTC for issues that arise until the log file is supplied if the issue is dependent on log file review. Aucos will supply JMTC a unique user account for access to the encrypted Aucos cloud. Only an Aucos employee working on the case will have access to the files. Once the log file is received, Aucos will have 1 RIA-JMTC business day to respond.

3.5 Offline Video Review:

JMTC IT may record a video of the issues they are experiencing and upload this video to the encrypted DOD safe-site. Aucos may be able to explain what to record via a phone call but the video will not be uploaded until JMTC IT and JMTC Security have reviewed the video. Aucos may not be able to provide support to JMTC for issues that arise until the video is supplied if the issue is dependent on Aucos reviewing the video. Once the video is uploaded, Aucos will have 1 business day to respond. If applicable, Aucos might record a video itself showing a problem-solving approach. Only an Aucos employee working on the case will have access to the files. Once the log file is received, Aucos will have 1 RIA-JMTC business day to respond.

3.6 Offline Debugging:

Offline Debugging will not be allowed to troubleshoot issues. Aucos will add enhanced logging to the line control software in a supplied update.

3.7 On-Site Software Modifications (Window based Line Control):

When a software modification is required or requested, Aucos can compile a new executable on their own assets. This executable is transferred to JMTC owned and provided media and then security scanned. Aucos can use their encrypted cloud to share media with site if needed. If using the cloud, Aucos must provide a hash of the executable to verify its authenticity. After the security check, a JMTC employee will copy the executable onto the line control server. Aucos will never connect an asset to the plating shop nor any JMTC Information System, network, or computers.

3.8 On-Site Software Modifications (Allen Bradley PLC):

The secondary server has an RS Logix installation. Aucos may be allowed to work with the secondary server under IT supervision to troubleshoot and update the PLC software. Aucos will never connect their own assets to the plating network. Depending on the PLC firmware it might be required to update the RSLogix or add additional licenses. Aucos will let JMTC know the required steps. JMTC will handle installations and eventual licensing fees. Aucos cannot archive a copy of the PLC program. If the PLC is damaged, Aucos will not be able to supply any kind of backup. JMTC is creating and archiving regular backups of the PLC. As Aucos does not have access to the PLC software offline, any modification requires an on- site visit. The software cannot be prepared offline, and all modifications must be done through the secondary server while on site.

3.9 Rectifier PM/CALIBRATION/SERVICE:

RIA-JMTC is requesting a qualified technician providing rectifier services including PM/calibration/repairs of all rectifiers in the plating department.

4 DETAILED CONTRACTOR RESTRICTIONS:

4.1 Contractor may not have access (RDP, TeamViewer, PC-Anywhere, GoTOMyPC, ScreenConnect, etc.) to RIA-JMTC information systems infrastructure assets. Contractor will work with and through JMTC assets for all technical implementations, RIA JMTC-REPRESENTATIVE corrections, and diagnostics.

4.2 Contractor on site must be escorted and monitored by JMTC personal while implementing or diagnosing RIA-JMTC information systems.

4.3 Contractors working with RIA-JMTC information systems will not have physical access to RIA-JMTC information systems. This includes workstation, PLC, Server, Switch, or router.

4.4 Contractor is not to retain government data.

4.5 Contractor is not to use or possess removable media on the premises without RIA-JMTC IT approval.

4.6 Contractor is not to access RIA-JMTC information systems with a non-government asset. This includes (RS232, RS485, Ethernet. Etc.).

4.7 Contractor will supply the required tools to do a simple click & collect feature, so RIA-JMTC personnel can download log files from the system and send to the contractor for evaluation.

5 DETAILED RIA-JMTC RESPONSIBILITES:

5.1 RIA-JMTC will provide a qualified IT person, maintenance technician, and line operator as needed for phone support and site visit support.

5.2 All log files must be reviewed by RIA-JMTC ISSM in collaboration with other IT / Cyber Security personnel, RIA-JMTC OPSEC Officer and Legal which shall examine and conduct an OPSEC Review prior to sending any log files to a vendor outside of DoD. All Government data going outside of the DoD must have a STA 7114 form completed for OPSEC Review.

5.3 Per contractor request, RIA-JMTC personnel will create a backup of the log files (per paragraph 4.7) and download them to a USB drive, CD/DVD, Hard Drive or JMTC approved media. RIA-JMTC personnel will than upload the files to an encrypted contractor cloud site for contractor evaluation.

6 QUALIFICATIONS:

6.1 Contractor must have access and expert knowledge of the Aucos software system that was designed to operate RIA-JMTC Plating Shop. The Contractors technicians, onsite or on the phone must possess the expertise to troubleshoot and correct any Aucos system failures or faults that occur at the RIA-JMTC Plating Shop.

6 7 INSPECTION/FINAL ACCEPTANCE:

7.1 The RIA JMTC-REPRESENTATIVE will monitor contractor performance on this contract, in accordance with the Quality Assurance Surveillance Plan (QASP).

7.2 Upon completion of any phone or onsite troubleshooting and repair, the RIA JMTC-REPRESENTATIVE will confirm that the requested Aucos system issues were corrected, and the Plating Shop is functioning. Any deviations from this SOW will be communicated to the RIA JMTC-REPRESENTATIVE ASAP.

8 INVOICING:

The Contractor must send all invoices to the RIA JMTC-REPRESENTATIVE for verification and approval. Once the RIA JMTC-REPRESENTATIVE has accepted the invoice, the RIA JMTC-REPRESENTATIVE will notify the Contractor. The Contractor shall than invoice using Wide Area Workflow per 52.0000-4942. The Contractor, when submitting the invoice into the WAWF system, will select; “auto send a notification to the RIA JMTC-REPRESENTATIVE by email” (you will enter the RIA JMTC-REPRESENTATIVE ’s email address). If this is not performed the contractor must contact the RIA JMTC-REPRESENTATIVE to notify him/her of pending transactions in WAWF. WAWF invoicing shall be completed by the contractor within 30 business days of RIA JMTC-REPRESENTATIVE invoice acceptance.

9 POINT OF CONTACT:

Prior to contract execution, the contractor shall identify to the RIA JMTC-REPRESENTATIVE a primary and alternate contractor’s POC. RIA-JMTC RIA JMTC-REPRESENTATIVE shall work with the contractor’s primary or alternate POC to schedule all phone support sessions, and onsite planned work. Also, the contractor shall identify a primary and alternate contractor’s invoicing /WAWF POC.

10 SECURITY: Security training (not needing a CAC)

10.1. AT Level I Training.

All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas shall complete AT Level I awareness training. The RIA JMTC-REPRESENTATIVE will be provided a copy of the RIA-JMTC AT Level I awareness training and assuring the training is completed.

The contractor shall sign a Memorandum of Record for each contractor employee and subcontractor employee to the RIA-JMTC Operations Center prior to a RIA-JMTC electronic keys and access pass being issued.

10.2. Access and General Protection/Security Policy and Procedures.

The contractor and all associated subcontractor’s employees shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Director of Emergency Services.

The contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DoD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the change clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

10.3. For contractors that do not require CAC but require access to a DoD facility or installation.

Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center interstate identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility access and local security policies and procedures (provided by government representative). The RIA JMTC-REPRESENTATIVE will provide guidance to complete the Access Control Records Check Request Form thru the RIA Directorate of Emergency Services.

10.4. Access Badges and Electronic Keys.

Contractor will acquire and need to return all issued U.S. Government Common Access Cards, installation badges, and/or access passes. Use FAR 52.204-9 or PADDS Clause IF00015 IF00015 at the end of the contract or the last day of an individual contractor’s employment.

10.4.1. RIA-JMTC electronic keys and access passes are accountable items and will be returned within 24 hours of no longer being needed. Items will be returned to the RIA JMTC-REPRESENTATIVE or placed in a drop box at a RIA-JMTC access point.

10.4.2. Contractors who routinely fail to return these items will not be issued them in support of any future contract.

10.5. IWATCH (See Something, Say Something) Training.

The Contractor and all associated subcontractors shall brief all employees on the local iWATCH program. The iWATCH training will be provided in the RIA-JMTC AT training.

10.6. Impact on contractor performance during increased FPCON during periods of increased threat.

During FPCONs Charlie and Delta, services may be discontinued/postponed due to higher threat. Services will resume when FPCON level is reduced to level Bravo or lower. The FPCON descriptions will be provided in the RIA-JMTC AT training.

The RIA JMTC-REPRESENTATIVE will keep the contractors informed on the current FPCON or any possible FPCON change.

10.7. Random Antiterrorism Measures Program (RAMP) participation.

Contractor personnel working on Rock Island Arsenal are subject to participation in installation RAMP security program (e.g. vehicles searches, wearing of ID badges, etc.).

Contractors will comply with any instructions given by the Rock Island Arsenal Police Department.

The RAMP program is discussed in the RIA-JMTC AT training.

10.8. Parking: The contractor shall park in designated/approved parking areas only. The RIA JMTC-REPRESENTATIVE and/or the Arsenal Police & Security personal may designate other areas to park depending upon the work situation.

11 SAFETY AND ENVIRONMENTAL:

11.1 Safety: When services are performed onsite the contractor is responsible for complying with all federal, state, and local safety and environmental regulations, including, but not limited to: Rock Island Arsenal, Department of the Army (DA), Occupational Safety and Health Act, Environmental Protection Agency (EPA), Illinois Environmental Protection Agency (IEPA). The contractor must adhere to all Rock Island Arsenal Safety requirements, policies, and statutes. The contractor shall be responsible for obtaining any hot work/open flame permits required from the Rock Island Arsenal Fire Department. The contractor(s) while working on equipment at the RIA-JMTC will wear proper PPE, to include but not limited to: safety glasses (with side shields), protective foot wear (steel toe), proper clothing (no shorts, tank tops, etc.), safety harness (when working off the floor), welding and cutting apparel (as needed) and adhere to OSHA NFPA 70E Arch Flash when working on electrical equipment. The contractor shall also have and observe an approved electrical lock-out tag-out procedure. As required by the RIA JMTC-REPRESENTATIVE, the contractor may be required to submit a Safety Site Plan in limited and justified circumstances.

11.2 Environmental: When services are performed onsite all hazardous wastes, acid, and contaminated material generated by the execution of this service contract will be disposed of IAW all applicable federal, state, and local laws and regulations. All transport and decontamination will be performed IAW all applicable interstate, federal, state, and local laws, and regulations. Any materials and/or wastes generated from this effort shall be labeled with appropriate transportation/disposal documentation for off-site disposal to include but not limited to Hazardous waste manifests and associated Land Disposal Restriction. Prior to discussing any environmental issues with the environmental agency of primacy, the contractor shall contact the Contracting Officer (KO) for direction.

11.3 Ozone Depleting Chemicals (ODCs): When services are performed onsite the contractor shall assure that none of the materials used contain Class I ODCs as defined by Public Law 102-484, Section 326 during execution of the tasks outlined in this SOW. Parts and equipment shall not contain polychlorinated biphenyl (PCB), ozone depleting substances (Class I or Class II), or asbestos materials.

5 | Page