Attachment 01 PWS.docx

Attachment (1) CUI N6852026DXXXX

Attachment (1)

Performance Work Statement for Commander Naval Air Systems Command (NAVAIR) Fleet Readiness Center Aviation Support Equipment (FRCASE) Maintenance, Repair, Overhaul & Logistics Support (MROL)

Controlled by: Department of the Navy

Fleet Readiness Center Aviation Support Equipment

CUI Category: PROCURE

DISTRIBUTION STATEMENT D. Distribution authorized to Department of Defense and U.S. DoD contractors only (ADMINISTRATIVE OR OPERATIONAL USE) (26 March 2025). Other requests for this document shall be referred to (FRCASE). POC: Linster Dillahunt; (410) 326-7501; linster.e.dillahunt.civ@us.navy.mil

Table of Contents

SCOPE

Naval Air Systems Command (NAVAIR) Fleet Readiness Center Aviation Support Equipment (FRCASE) mission is to provide agile, relevant, quality Aviation Support Equipment (ASE) maintenance, repair, overhaul and logistics (MROL) services to meet Naval Aviation Enterprise and the Navy’s Fleet Response Plan requirements with improved efficiency and reduced costs. FRCASE provides seamless integrated Support Equipment (SE) MROL services with a goal of reducing repair-cycle time while improving the availability of Ready for Use SE in the fleet and its supporting infrastructure. The headquarters element of FRCASE is located aboard the Naval Air Station (NAS) Patuxent River, Naval Recreation Center (NRC) Solomons Annex, Solomons, MD. FRCASE Solomon’s provides centralized management of multiple FRCASE locations.

The work required by this contract includes modernization, conversion, in-service repair, disassembly, and all other categories of MROL as stated in NAVAIR Instruction 13680. The Contractor shall provide SE Depot level (D-level) and Intermediate (I-Level) scheduled (preventative) and unscheduled (restorative) maintenance; which includes the servicing, functional and operational testing, repair and replacement of unserviceable parts, assemblies, subassemblies and components; making structural repairs, manufacturing of SE parts; incorporation of approved modifications, support configuration, reclamation, and conversions and perform corrosion control to include paint and final finish of SE. This includes logistical support and capabilities that will complement and enhance the work required herein.

Tasking associated with workload standards is allocable to performance-based line items identified in the Schedule (CLIN X100 TOUCH LABOR PERFORMANCE BASED) that include CORE workload. Tasking not associated with workload standards is allocable to non-performance-based line items (CLIN X200 TOUCH LABOR LEVEL OF EFFORT) that include Other Customer Support (OCS). Support for touch labor will be allocable to both a workload standard and non-performance-based line items.

APPLICABLE DOCUMENTS

Department of Defense Specifications (and all revisions)

Secretary of the Navy (SECNAV) Instructions (and all revisions)

Other Government Documents (e.g. NAVAIR Documents)

Industry Documents

Maintenance Records, Forms and Technical Data The Contractor shall follow and maintain all technical data, technical manuals, SE bulletins, SE changes, technical directives, drawings, specifications, and standards. Procedures, instructions, and forms will be provided by either the Government Technical Points of Contact (TPOCs) identified in GTXT.201-9500 or the Government Quality Assurance Representatives (QARs) and shall be utilized in the performance of all work required by the contract. Any referenced publications used shall include the latest changes.

The FRCASE SOP’s and the NAVAIRINST, 3710.1(series) documents the Government’s management processes that are to be used by the Contractor at FRCASE work locations. The Contractor shall use each FRCASE SOP/ NAVAIRINST, 3710.1(series) as a guideline to develop their Ground Operating Procedures (GOP) and ensure an integrated process interface between their process and the process inputs and outputs as identified in the SOPs.

REQUIREMENTS

General Requirements SE Re-work The Contractor shall return the SE and associated MROL equipment under the Contractor assignment to a Ready for Issue (RFI) condition unless Survey authorization is approved by the Support Equipment Controlling Authority (SECA). Control number shall be within the assigned workload standard / turnaround time as defined at the workload assignment by FRCASE within the Support Equipment Management System (SEMS). If a change in the rework hours for a particular Control Number (CNUM) is approved by the Government Site or Production Lead, the Contractor will populate the Additional Hours Request form with the number of hours that represent the requested change. 3.5 MROL and Logistics support shall be conducted at one of the FRCASE work locations in paragraph 3.1.2.1, Work Location. Support activities may occur at other Navy and Marine Corps bases (CONUS or OCONUS), other ASE work sites, or aboard naval vessels in port or at sea (CONUS or OCONUS).

Compatibility The Contractor shall maintain the capability to prepare documents and software packages compatible with the Government IT environment. The current operating environment required for this contract includes:

· Microsoft Windows (Latest version utilized by Government)

· Microsoft Office 365 (including Project)

· Adobe Acrobat (latest version utilized by Government)

· Internet access

The Contractor shall maintain the ability to interface with and transfer data to and from requiring office software applications and their upgraded versions. The Contractor shall ensure that all media are virus free when delivered. The Contractor shall maintain the capability to prepare documents and software packages compatible with the Government IT environment through the security classification of Tier-3. The Contractor shall be capable of Internet and LAN communications with the FRCASE. Contractor personnel shall be capable of maintaining real-time communications, both voice and data transfer capabilities, with FRCASE during business hours whether at Contractor work site or on travel.

Work Location, Meeting Support, Telework and Facilities Work Location Work required by this contract will be performed at FRCASE work locations and customer sites. The FRCASE work locations include, but are not limited to the following:

· NRC Solomons, MD (SOLM)

· Marine Corps Air Station (MCAS) Beaufort, SC (BFT)

· MCAS Cherry Point, NC (CPNC)

· Support Equipment Rework Facility (SERF) Naval Station Everett, WA (EVRT)

· Naval Weapons Station (NWS) Cheatham Annex Williamsburg, VA (CHT)

· NAS Jacksonville, FL (JAX)

· NAS JRB Fort Worth, TX (JRBFTW)

· SERF NAS Lemoore, CA (LMR)

· NAS JRB New Orleans, LA (NOLA)

· Norfolk Naval Ship Yard (NNSY) Portsmouth, VA (Includes Norfolk Naval Station)

· Naval Air Station North Island, CA (NTHI)

· El Centro, CA (ELCEN)

· OCONUS Locations such as Yokosuka and Sasebo Japan

The Contractor shall have Site Supervisors (BLS-49-1011) at the locations identified in Attachment 04 – Team Complement Table. The Contractor shall designate a non-supervisory site lead for all sites which do not have a site supervisor assigned.

Meeting Support The Contractor shall have the capability to host and conduct meetings at the unclassified level in support of the tasking outlined in this PWS. If the specific day / time required herein is not achievable, the Contractor shall make best efforts to reschedule the meeting with the COR / TPOC as soon as practicable.

Post Award Conference (PAC) The Contractor shall participate in a PAC, which should be held within 15 calendar days after contract award. The PAC date shall be coordinated between the Contractor and the Contracting Officer. The Contractor shall be prepared to discuss its proposed mobilization approach with the Government team. The purpose of the PAC is to introduce Contractor and Government personnel, discuss details of the upcoming effort and resolve any concerns that may arise as a result of the discussion (see FAR 42.503 and DFARS 242.503). The conference will be held at the Government's facility in Solomon’s, MD. The Contractor shall capture meeting notes and distribute to attendees after the meeting. (CDRL A001) Weekly Production Meetings Weekly Production Meetings shall be held every Monday from 0800-0900 Eastern unless requested otherwise by FRCASE. The Contractor shall participate in weekly production meetings by providing production status of all active workload. Topics to address shall include at a minimum: identifying all completed tasking from the week prior, comparison of actual performance to Workload Standard (WLS), identifying priorities for the week, identifying challenges and risks to active workload, actions taken to mitigate these challenges, and any recommendations for improving execution of required tasking. The Contractor shall capture meeting notes and distribute to attendees after the meeting. (CDRL A001) Weekly Supply Meetings Weekly Supply Meetings shall be held every Wednesday from1230-1330 Eastern unless requested otherwise by FRCASE. The Contractor shall participate in weekly supply meetings by providing supply status of all active workload. Topics to address shall include at a minimum: identifying all completed tasking from the week prior, comparison of actual performance to supply metrics identified in the QASP, identifying priorities for the week, identifying challenges and risks to active workload, actions taken to mitigate these challenges, and any recommendations for improving execution of required tasking. The Contractor shall capture meeting notes and distribute to attendees after the meeting. (CDRL A001) Weekly Financial Meetings Weekly Financial Meetings shall be held every Monday, from 0900-1000 Eastern unless requested otherwise by FRCASE. The Contractor shall participate in weekly financial meetings by providing summary of financial status of all active workload. Topics to address shall include at a minimum: identifying status of all unpaid invoices, comparison of available funding to total projected expenditures for each task order, identifying challenges and risks to active workload, actions taken to mitigate these challenges, and any recommendations for improving execution of required tasking. The Contractor shall capture meeting notes and distribute to attendees after the meeting. (CDRL A001) Monthly Contract Meetings Monthly Contract Meetings shall be held the second Tuesday of every month from 1100-1130 Eastern unless requested otherwise by the PCO/COR. The Contractor shall brief the Government on the content provided in CDRL A002 by providing additional context or insights into the data submitted and highlight where performance is trending significantly above or below required metrics. The Contractor shall also brief the Government on challenges or risks to contract administration, actions taken to mitigate these challenges, and any recommendations for improving administration or performance of the contract. The Contractor shall capture meeting notes and distribute to attendees after the meeting. (CDRL A001) Quarterly Program Management Reviews Quarterly Program Management Reviews shall normally be held on the first week of each fiscal quarter (October, January, April, and July) unless requested otherwise by the COR. The exact location, date, and time for each Review shall be coordinated with the COR at least 4 weeks prior to the Review. The Contractor shall brief the Government on their actual performance for the quarter and for the contract year to date. Topics to address shall include at a minimum: compliance to safety, security, and environmental requirements of the contract, execution to quality assurance metrics, status of staffing by labor category and site location, summary of travel events with any noteworthy accomplishments or challenges identified in trip reports, execution to production and supply metrics, financial status, and status of contract administration challenges. The Contractor is encouraged to provide recommendations to address issues identified or otherwise discussed during the review. The Contractor shall capture meeting notes and distribute to attendees after the meeting (CDRL A001) Telework/Remote Work The Contractor may permit employees to telework upon approval of the Contractor’s telework policy by the Contracting Officer Representative (COR) or FRCASE Leadership.

Facilities The Government will provide access to workspaces, telephones, printers, copy machines, shredders, computers, and network access necessary to carry out assigned tasks.

Progress Reporting The Contractor shall provide a progress and financial status report. (CDRL A002) Contract Status Reporting The Contractor shall submit a Quality Status Report (QSR) (CDRL A003).

Work Schedule Operational Hours The Contractor shall provide the required services and staffing coverage during normal business hours. Normal business hours are 8.5 hours (including a 30-minute lunch break), each Monday through Friday, except for federal holidays and other days as directed by Executive Order. The Contractor may decide the exact start and end times for each site so long as they fall within the local Government office hours (e.g. some sites have flexibility to start as early as 0600 and end as late as 1800).

Compressed Work Schedule (CWS) CWS is an alternative work schedule to the traditional five 8.5 hour workdays (which includes a 30-minute lunch) worked per week. Under a CWS schedule, an employee completes the following schedule within a two-week period of time: Eight weekdays are worked at 9.5 hours each (which includes a 30-minute lunch), one weekday is alternately worked as 8.5 hours (which includes a 30-minute lunch) and one weekday is not worked by the employee. The result is 80 hours worked every two weeks, with 44 work hours one week and 36 work hours the other. Additional information on CWS can be found on Office of Personnel Management’s (OPM) website.

Holidays The Government observes the Federal holidays identified on the Office of Personnel Management (OPM) website: https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/#url=Overview. If the Government is observing a holiday not observed by the Contractor, the Contractor will be required to identify an alternative work location for its employees because the Government facilities will not be available.

Installation Closure When Federal facilities are closed by the Government, or when Government employees are officially excused from work due to a holiday or a special event, severe weather, a security threat, or any other Government facility related problem that prevents Government personnel from working at the Government facility, contractor personnel assigned to work at that facility in support of such Government employees shall follow their parent company’s policies.

While generally contractor personnel may not perform work on-site at a Government facility without oversight from Government personnel, in very limited circumstances, work being performed by contractor personnel may be deemed mission essential and performance of such mission essential work may be authorized to continue at the Government facility despite the facility being otherwise closed for normal operations. The circumstances permitting work being performed by contractor personnel to be deemed mission essential are extremely limited and generally only apply to performance of efforts related to public health, safety, or matters related to national security. The cognizant Contracting Officer must concur with any determination that work being performed by contractor personnel is mission essential. If mission essential work is identified, the Contractor may need to coordinate base access with the COR or duly authorized Government representative.

Overtime Overtime cannot be worked without prior authorization by the COR. Justification for Overtime must be submitted from Contractor Site Supervisors / Leads using the Overtime form accessible via SharePoint. If overtime is authorized under this contract, it will be defined at the task order level, in accordance with Federal Acquisition Regulations (FAR) 52.222-2, Payment for Overtime Premiums.

Other Direct Costs (ODCs) Material (CLIN X400) Incidental material will be required in the performance of this Contact, and all incidental material purchases shall be made IAW CTXT.242-9520. This includes material authorized for “open purchase” as described in section 3.3.3.

Travel (CLIN X500) Allowable travel costs may include indirect expenses but shall not include profit or fee. Temporary travel to other locations in support of program tasking may be required. If required, temporary travel locations include FRCASE work locations or customer worksites. This list is not all inclusive as locations may change over the life of the contract.

The COR/ACOR shall approve all travel performed in support of this IDIQ and associated TO prior to the commencement of the travel.

OCONUS travel may also be required. In the event OCONUS travel is authorized to potentially dangerous environments, Contractors may be eligible for Danger Pay as a percent of their basic compensation per Department of State guidelines for Danger Pay or applicable union agreement.

the Contractor may travel outside the continental United States IAW Clauses 252.225-7040 and applicable clauses incorporated herein. The contractor is responsible for ensuring all Synchronized Pre-Deployment and Operational Tracker (SPOT) requirements are met prior to traveling. SPOT enables the validation of Contractors Authorized to Accompany the Force (CAAF), their authorization and eligibility for access to specific DoD facilities, and their eligibility for specific Government-Furnished Support (GFS). The Contractor shall initiate a Letter of Authorization (LOA) for each prospective traveler. The Contractor shall use the SPOT link https://spot.altess.army.mil to enter and maintain data with respect to traveling and deployed personnel.

The Contracting Officer will approve LOAs for official travel OCONUS, when applicable, supporting the IDIQ and the associated TO. The LOA will identify local authorizations, privileges, etc. as specified by DoD requirements. When applicable, all contractor personnel supporting this IDIQ and associated TO shall carry their approved LOA with them at all times while deployed OCONUS.

Travel requests must include a detailed estimate IAW the Joint Travel Regulations (JTR). The request must include all airfare, car rental, lodging, etc. All travel requests must be funded prior to performance and shall be performed on a reimbursable basis. The Contractor shall be responsible for making arrangements for all airfare, car rental, lodging and subsistence required. The Contractor shall ensure the workforce maintains an appropriate number of Passports to support overseas travel. The Contractor shall provide all documentation to the COR/ACOR via the Technical Point of Contact (TPOC) for authorization.

Travel location(s) will be determined and directed by the TPOC/ACOR/COR and identified within the travel request and associated work order. The contractor shall submit a travel request (with cost estimate) to the COR via e-mail, detailing the need for Contractor support at the work site destination. Travel will be funded under the travel line item identified in the Schedule and shall be performed IAW CTXT.232-9509 Travel Approval and Reimbursement Procedures.

Subcontractors Provisions stated herein shall be clearly and effectively communicated to all subcontractors providing support under this contract. All provisions of this PWS shall flow down to subcontractors providing support under this contract.

Management of Contractor Personnel The Government will neither supervise contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances will the Government assign tasks to, or prepare work schedules for, individual contractor employees. The Contractor shall manage its employees and guard against any actions that created the appearance of personal services.

Contractor employees shall comply with clause CTXT.211-9510. All costs associated with the maintenance and laundering of uniforms will be at the Contractor’s expense.

Transition Strategy Transition In (CLIN X100) The Contractor shall submit a Phase-In Transition Plan describing the approach for transitioning work from the incumbent contractor during the mobilization period (CDRL A004).

The mobilization period for the incoming transition of the successful contractor will be from date of contract award to the beginning of the period of performance (PoP) (anticipated minimum 45 calendar days). The mobilization period shall be utilized to hire and train the Contractor personnel and obtain base access (e.g. Common Access Cards (CACs)), certifications and licenses (e.g. Contractor Quality Assurance Representatives (QARs), petroleum specialists, forklift operators). All personnel shall be hired, trained, and in place by the completion of the mobilization period. Prior to performance, the Contractor shall present documentation to the COR verifying all personnel qualifications are current and meet contract requirements. The Government will notify the Contractor if training requirements are modified to ensure that the Contractor meets current qualifications.

During the mobilization period, the Contractor shall submit all Ground Operating Procedures (GOPs) for review and approval by the Government Ground & Flight Representative (GGFR) in accordance with NAVAIRINST 3710.1H. (CDRL A005) During the mobilization period, the Contractor shall secure Joint Certification Program (JCP) authorization necessary to access Department of Defense unclassified export controlled technical data/critical technology on an equally favorable basis in accordance with DODD 5230.25, “Withholding of Unclassified Technical Data and Technology from Public Disclosure,”. For more information on the Joint Certification Program, refer to https://www.dla.mil/Logistics-Operations/Services/JCP/.

The Contractor shall be fully capable of performing all tasks described within this PWS upon completion of the mobilization period. During the mobilization period, the Contractor may observe all maintenance tasks being performed by the transitioning Contactor, provided it does not interfere with maintenance services.

Transition Out (CLIN X100) The Contractor’s overall transition strategy shall be built around maintaining the mission of FRCASE with minimal impact, not only in terms of timeliness of performance but also to ensure that critical data and knowledge transfer occurs. Upon termination or expiration of the contract, the Contractor shall ensure an orderly transition of responsibilities concurrent with the transition-in process of the successor company, while minimizing impact to the operation. (CDRL A006) Technical Direction Letters (TDLs) Technical Direction Letters are not anticipated to be required under this contract. If the need arises during performance of the contract, TDLs will be addressed at the task order level.

Program Unique Requirements Government Furnished Property (GFP)/Government Furnished Information (GFI) The Government may furnish Government Property and Information on an as needed basis at the TO level. The Contractor will be accountable for and required to manage and track GFP in accordance with applicable Government property clauses and reporting requirements.

If a TO is issued to support the Government with performance solely on-site, the Government will provide access to government-owned industrial plant equipment (e.g. metalworking machinery), government-issued computers/laptops, office desk, desk phones, fax machine, copier, scanner, and associated office supplies/materials. This property is considered “incidental” property per FAR 45.000(b)(5) and is not considered GFP.

Government assets that are removed from the Government location (e.g. laptops) are considered GFP and will be listed as accountable to the applicable TO and shall be managed by the Contractor in accordance with FAR Clause 52.245-1 and will be listed as “Scheduled Government-Furnished Property (SGFP)” as attached to the contract or applicable task order.

The Contractor shall maintain an approved property management system as required by FAR 52.245-1 and applicable DFARS clauses.

Government Information Systems Access to Government information technology systems shall be limited to those designated personnel requiring access to the Navy/Marine Corps Internet (NMCI)/FlankSpeed in order to fulfill the duties of their assignment. Additional information technology requirements will be delineated in the individual Task Order as appropriate.

Systems Necessary for Performance The Contractor shall utilize the following Information Management Systems in performance of this contract:

· NAVAIR Depot Maintenance System (NDMS) Maximo

· Support Equipment Management System (SEMS) to access Auto SERD and SERMIS applications

· Joint Deficiency Reporting System (JDRS)

· Naval Aviation Logistics Command Management Information System (NALCOMIS)

· Naval Logistics Library (NLL) NAVSUP

· One Touch Support (OTS)

· Joint Engineering Data Management Information and Control System (JEDMICS)

· Naval Aviation Technical Data and Engineering Center (NATEC)

· DECKPLATE

· Environmental Management System (EMSWEB)

· Acquisition Management System (AMS)

· Federal Mall (FEDMALL)

· Joint Technical Data Integration (JTDI)

· Navy Enterprise Resource Planning (NERP)

· Autonomic Logistics Information System (ALIS)

· Marine Corps Platform Integration Center (MCPIC)

· Optimized Organizational Maintenance Activity System (OOMA) Technical Publications Library Maintenance The Contractor shall maintain all technical data provided by the Government within the individual FRCASE site Quality Assurance (QA) Technical Publications Libraries. All technical data shall be maintained IAW the procedures outlined in NAVAIR 00-25-100, Naval Air Systems Command Technical Manual Program and CNAFINST 4790.2 (series) for the maintenance and upkeep of Technical Publications Libraries. The Contractor shall maintain the Technical Publication Libraries to complete the assigned functions of the activity. This includes ensuring technical publications are available for all equipment planned or assigned to FRCASE Designated Repair Points and maintaining master copies of publications within the library.

SE Work Records The Contractor shall maintain completed workbooks electronically in the FRCASE SharePoint Workbook folder. Access and instructions will be provided by the Government upon contract award.

Standard Operating Procedures The contractor shall create and maintain a set of Standard Operating Procedures (SOPs) and/or desk guides that comprehensively outline the processes involved in material processing, material scheduling, maintenance execution management, and planning across all sites managed by FRCASE. These guides will provide a detailed roadmap, specifying steps and delineating the roles and responsibilities of supply personnel. These desk guides shall be maintained with the most current version uploaded to an electronic library (e.g. ASE SharePoint). At a minimum, the desk guides shall be reviewed and validated as current by the Government and Contractor on an annual basis. (CDRL A007) Supply Assistance The contractor shall assist the Government Supply Lead with responding to all Supply-related data calls, validations, and audits requested by various DOD agencies, including NAVAIR, COMFRC HQ, Comptrollers, and NAVSUP, in alignment with their duties and obligations.

SECURITY

Citizenship Requirements Only U.S. citizens may perform under this contract, unless waived by the Government. If the Contractor cannot find qualified U.S. citizens to perform the work, the Contractor shall submit a citizenship waiver request with justification to the Government Security Office. The waiver request should include:

· The individual's name, date and place of birth, position title, and current citizenship.

· A statement that a qualified U.S. citizen cannot be hired in sufficient time to meet the contractual requirements.

· A statement of the unusual expertise possessed by the applicant.

· A statement that access will be limited to a specific government contract (specify contract number).

· A statement that the Contractor has obtained an export license for the information required to perform the contract.

Investigative Requirements Unclassified: All contractor personnel must be eligible to perform Non-Critical Sensitive work as defined by SECNAV M-5510.30C. All contractor personnel executing unclassified tasking under this contract are required to have a favorably adjudicated Tier-3 investigation from the OPM. The Contractor shall submit a request for personnel security investigation to the Government Security Office. The Government Security Office will initiate the contractor employee's Electronic Questionnaire for Investigations Processing (eQIP) and perform a preliminary screening of the contractor employee's eQIP for suitability and derogatory information. The contractor employee shall provide all requested information pursuant to the Privacy Act of 1974. The Government Security Office may deny the contractor employee access to Government facilities and information and may prohibit the contractor employee from performance of duties for failure to provide requested information or when derogatory or adverse information is present on the contractor employee's eQIP. In such cases, the contractor employee may not perform on the Contract.

The Contractor is responsible for ensuring that all personnel receive the requisite investigation and are favorably adjudicated in accordance with DoDM 5220.22, National Industrial Security Program Operating Manual. Contractor employees who fail to meet security clearance requirements may not access classified information or perform sensitive duties. In such cases, the Contractor employee may not perform on the contract.

The Contractor shall obtain access to Defense Information System for Security through its Facility Security Officer in order to pre-screen all potential employees for the contract. The Contractor shall not submit to the Government for processing documents concerning an individual with a past unfavorable determination or denied/revoked eligibility. Furthermore, the Contractor shall understand that if it submits documents concerning an individual with “No Determination Made” recorded in DISS, the individual, if employed by the Contractor, will not be granted a CAC but instead will be issued a 30 day pass for access to the base. The pass will need to be renewed until final adjudication by Department of Navy Central Adjudication Facility. In the event a prospective Contractor employee has an incident report on record in DISS, the Contractor shall exercise due diligence and investigate the underlying basis for the incident report (within 60 days to accommodate two consecutive 30-day passes), and the Contractor shall use sound judgment to determine whether the individual is trustworthy and suitable to provide support under the contract, thereby warranting submission of the required documents to the Government for processing.

Common Access Card (CAC)/Public Key Infrastructure (PKI), System Authorization Access Request (SAAR)

SAAR

All contractor personnel requiring access to Government Information Technology (IT) systems shall have an approved System Authorization Access Request (SAAR) DD Form 2875 on file by the TPOC/ACOR, with required Department of Navy Cyber Awareness Challenge Training Certificate. New employees must submit their SAAR forms within thirty (30) days of their first day of work. Instructions for processing the SAAR forms are available at: DD Form 2875, "SYSTEM AUTHORIZATION ACCESS REQUEST (SAAR)" (whs.mil) SAAR forms shall be submitted to the Government Technical Point of Contact (TPOC) or to the assigned government Trusted Associate Sponsorship System (TASS) Trusted Associate.

Common Access Cards (CAC) / Local Badges Contractor CACs and facility specific identification badges will be issued by the Government to access Government IT systems and for on-site Contractor personnel that require access to Government facilities, as required, for performance of tasks under this contract. Badges shall be visible and above the waist at all times while personnel are at the Government site. The Contractor shall furnish all requested information required to facilitate issuance of identification badges and shall conform to specific site security instructions and facility guidance. All CACs and identification badges issued to Contractor employees shall be returned to the TPOC/ACOR at the Government site in accordance with instructions and facility guidance following completion of the contract; relocation or termination of an employee; or upon request from the Procuring Contracting Officer, Contracting Officer’s Representative, or TPOC.

Information Security If the work is performed at the Contractor’s facility, the Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of controlled unclassified information (CUI) and to control distribution of CUI in accordance with NISPOM rule, 32 CFR Part 117 and SECNAV M-5510.36B and DoD CUI Instruction 5200.48. If the work is performed at the Government’s facility, the Contractor shall comply with task order instructions and facility guidance. Contractor shall not store or transmit Controlled Unclassified Information (CUI) on personal information technology systems or via personal e-mail. E-mail containing any DoD CUI shall be encrypted. Prior to sending CUI to any non-Navy Marine Corps Internet (NMCI) addressees, the sender must first positively verify all recipients are authorized access to CUI and have need-to-know. Non-NMCI recipients must have a DoD compliant Private Key Infrastructure certificate that enables electronic transmission via unclassified networks while protecting the CUI with a digital signature and encryption.

Marking All information generated by the Contractor shall be properly marked.

Any product containing Covered Defense Information shall be assigned a distribution statement (distribution statements B through F) using the criteria set forth in DoDI 5230.24, Distribution Statements on Technical Documents and have this statement displayed per DoDI 5230.24, Enclosures 3 and 4. Distribution is authorized to the Requiring Office's Organization and supported Activity only. Other requests for deliverables under this Contract shall be referred to the TPOC/ACOR/COR of this Contract for approval.

The Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of controlled unclassified information and to control distribution of controlled unclassified information in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), and SECNAV M-5510.36. The Contractor shall use an appropriate means of storing controlled unclassified information and materials. All controlled unclassified information shall be appropriately identified and marked as Controlled Unclassified Information (CUI) in accordance with DoD Instruction 5200.48, Controlled Unclassified Information (CUI).

CUI, including Legacy FOUO information generated and/or provided under this Contract shall be marked IAW DoDI 5200.48. Technical information shall also be marked with appropriate Distribution Statements and Export Control warnings IAW DoDI 5230.24 and program Security Classification Guidance.

Public Release Any CUI pertaining to this Contract shall not be released for public dissemination, including posting to any social media sites, unless it has been approved for public release by appropriate Government authority. Proposed public releases shall be submitted for approval prior to release through the below office, via the COR:

Loss, Compromise and/or Electronic Spillage of Classified or Controlled Unclassified Information All instances of loss, compromise and electronic spillage of classified or controlled unclassified information shall be reported to the COR, TPOC and Government Security Office within 72 hours of the incident occurring.

Compliance to NIST 800-171 The Contractor shall fully implement the CUI Security Requirements (Requirements) and associated Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 1) (NIST SP 800-171), or establish System Security Plan(s) (SSP) and Plan of Action & Milestones (POA&M) that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered contractor information systems affecting this contract.

Notwithstanding the allowance for such variation, the contractor shall identify their plans in the SSP and POA&M to implement the following, at a minimum:

a. Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as Computer Numerical Control (CNC) equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted;

b. Implement Control 3.1.5 (least privilege) and associated Controls, and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

c. Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

d. Audit user privileges on at least an annual basis;

e. Implement:

i. Control 3.13.11 (FIPS 140-2 validated cryptology or implementation of NSA or NIST approved algorithms (i.e. FIPS 140-2 Annex A: AES or Triple DES) or compensating controls as documented in a SSP and POAM); and,

ii. NIST Cryptographic Algorithm Validation Program (CAVP) (see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

f. Implement Control 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which shall be evaluated by the Navy for risk acceptance.

g. Implement Control 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program.

Operations Security (OPSEC) The Contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the Contractor and any subcontractor during performance of the contract. The Contractor shall be responsible for the subcontractor implementation of the OPSEC requirements. This program may include Information Assurance and Communications Security (COMSEC). The OPSEC program shall be in accordance with National Security Decision Directive (NSDD) 298, and at a minimum shall include:

· Assignment of responsibility for OPSEC direction and implementation.

· Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures.

· Establishment of OPSEC education and awareness training.

· Provisions for management, annual review, and evaluation of OPSEC programs.

· Flow down of OPSEC requirements to subcontractors when applicable.

While performing aboard NAVAIR or NAVAIR sites, the Contractor shall comply with facility OPSEC program instructions and contribute to organization-level OPSEC efforts. Include OPSEC as part of its ongoing security awareness program and take all required Agency training. Be responsive to the Supporting OPSEC Manager on a non-interference basis. Protect sensitive unclassified information and activities, which could compromise classified information or operations, or degrade the planning and execution of operations performed by the requirement office and Contractor in support of the mission.

Anti-Terrorism Force Protection and Emergency Management The work performed on this contract is not Emergency Essential in accordance with OPNAVINST 3440.17A and Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans. Contractor personnel shall comply with all Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans and directives. Contractor personnel shall not report for work at Government facilities upon declaration of Force Protection Condition CHARLIE or in any event or emergency where Government officials direct curtailment of operations to “Mission Essential Only”. All Contractor personnel assigned to a Government facility shall complete annual Antiterrorism (Level One) and Active Shooter training.

Cyber Incident Response The Contractor shall respond to cyber incidents IAW DFARS 252.204-7012 of this contract.

NCIS / Industry Monitoring The Contractor shall monitor network traffic and access IAW DFARS 252.204-7012 of this contract.

Cybersecurity The Contractor shall meet the cybersecurity requirements of DFARS 252.204-7008 of this contract.

Communications Security (COMSEC) The Contractor shall be required to access COMSEC material. The Contractor shall follow the guidance for handling COMSEC material as identified in EKMS-1b - Electronic Key Management System (EKMS) Policy and Procedures for Navy EKMS Tiers 2 & 3 and applicable local instructions.

Program Unique Requirements

RESERVED

DETAILED SUPPORT REQUIREMENTS

PERFORMANCE-BASED TOUCH LABOR (CORE) (CLIN X100)

Funding will be identified at the TO level and will be funded with Operations & Maintenance (O&M) funds. The following requirements are defined in a performance-based manner and are therefore NOT subject to the requirements of BTXT.211-9503 LEVEL OF EFFORT. This will be subject to FAR 16.306(d)(1) for completion.

Workload Standards (WLS) Contractor execution to the Workload Standard is the primary method identified in the QASP to measure successful performance of work defined in this section. SE inducted WITH an established WLS shall be repaired in accordance with this section of the PWS and is allocable to CLIN X100.

The Contractor shall use SEMS to ascertain the scope of work and the associated Workload Standard (WLS) hours for SE inducted for Overhaul or Depot Level Repair. Any necessary work outside of the scope of repair specified in the workbooks shall be identified at the time of discovery, whether at the A&I or in-process, and will be documented in the workbook. The change of scope of repair will be submitted to the Government prior to work continuing. Signatures affixed to the workbook acknowledge the change in scope of repair. Upon acknowledgement, the WLS associated with the scope of repair shall define the total number of hours for associated repair, either after A&I or in-process. Any additional hours required above the WLS will be submitted by the contractor within one (1) business day of identification of the additional need. Requests to exceed WLS will be reviewed by the Commodity Manager/Government Site Lead and forwarded to the Government Production Scheduler before execution. The Government Production Scheduler will annotate the additional hours in SEMS under the applicable CNUM. The additional hours will be made available in SEMS at the time of CNUM completion.

Control Number (CNUM) Status Reporting CNUMs will be established by the Government and provided to the Contractor as required.