Attachment 1 - Statement of Work - 70B03C26R00000030.pdf

U.S. Department of Homeland Security U.S. Customs and Border Protection

Statement of Work

For:

U.S. CUSTOMS AND BORDER PROTECTION

NON-INTRUSIVE INSPECTION SYSTEMS

Medium Energy Mobile Systems 70B03C26R00000030

PREPARED BY:

Office of Field Operations Innovation and Strategy Directorate

Non-Intrusive Inspection Program Office

Attachment 1 - Statement of Work - 70B03C26R00000030

Table of Contents

1 PURPOSE

1.1 Background

1.2 Scope

1.3 Delivery

1.3.1 Ordering Period

This IDIQ includes a five-year ordering period

1.4 Invoicing

1.5 Program Organization

1.5.1 Government Management Organization

2 APPLICABLE DOCUMENTS

2.1 Federal Regulations and Publications

2.2 National Standards

2.3 DHS/CBP Documents

3 REQUIREMENTS

3.1 General Information

3.2 Requirements Definitions

3.3 Performance Requirements

3.3.1 Performance Requirements for Large Scale Medium Energy Mobile NII Systems

3.3.2 System Configurations and Operational Specifications for Medium Energy Mobile Systems

3.3.3 Imaging System Equipment and Equipment Installation

3.3.4 Sources & Detectors

3.3.5 Computers

3.3.6 Computer Security

3.3.7 Printed Documents

3.3.8 Printer / Scanner

3.4 Systems Integration

3.4.1 Work Center

3.4.2 Workstation Integration and Interface

3.4.3 Integrated Image and Data Capture

3.4.4 Image Download

3.4.5 Integrated Data Package Download / Transfer

3.5 Reliability, Availability, and Maintainability

3.5.1 Classification of Reliability Critical Items

3.5.2 Basic Reliability Quantitative Requirements

3.5.3 Control of Reliability Critical Items

3.5.4 Availability - Operational Availability (Ao)

3.5.5 Service Calls and Work Orders

3.5.6 Preventive Maintenance during the Warranty Period

3.5.7 Corrective Maintenance during the Warranty Period

3.5.8 Remote Health Monitoring

3.5.9 Configuration Report

3.5.10 Corrosion Control

3.6 On-Demand Services (Technology Refresh, Other Maintenance, and Other Support Services)

3.6.1 Engineering Services

3.6.2 Ad Hoc Reports

3.6.3 Site Surveys

3.6.4 Provisioning Support

3.6.5 Retrofit Support

3.6.6 Relocation Services

3.6.7 Site Work

3.6.8 Disposal

3.6.9 Emergency Services

3.6.10 Special Events

3.6.11 Training Activities

3.6.12 Invoicing and Funding On-Demand Services

3.7 Hazardous Materials

3.8 Weatherproofing and Environmental Resilience of Mobile Units

3.8.1 Maintenance and Sustained Weatherproofing Services

3.9 System Support Requirements

3.9.1 System Installation

3.9.2 System Training

3.9.3 Technical Manuals

3.10 Quality Assurance and Testing

3.10.1 Quality Assurance

3.10.2 Contractor Testing

3.10.3 CBP Factory Testing

3.10.4 CBP Site Acceptance Testing

3.10.5 Material Discrimination Testing

3.11 Radiation Safety

3.11.1 Radiation Safety Design Review

3.11.2 Radiological Survey and Report

3.11.3 Radiation Survey and Report

3.12 Configuration Management

3.12.1 Technical Documentation

3.12.2 Configuration Baseline

3.12.3 Management of Technical Documentation

3.12.4 Engineering Change Proposals (ECPs)

3.12.5 Interchangeability

3.12.6 Accessibility

4 LIFE CYCLE SUSTAINMENT AND SUPPORT REQUIREMENTS

4.1 Warranty

4.2 Warranty Period Configuration Changes

5 INFORMATION TECHNOLOGY SECURITY

5.1 Warranty Period Configuration Changes

5.2 Product Assurance

5.3 Supply Chain Risk Management Terms and Conditions:

5.4 DHS Information Technology Portfolio Alignment

5.5 1Pv6

5.6 Section 508 Requirements

5.7 Interconnection Security Agreement Requirements

6 SPECIAL CONSIDERATIONS

6.1 Changes to the SOW

6.2 Travel

7 DATA ITEM DELIVERABLES (Data Item Description (DID)

8 Appendices

8.1 APPENDIX 1: Data Item Deliverables

8.2 APPENDIX 2: Acronyms

8.3 APPENDIX 3: Glossary of Terms

Table of Figures

Table 1. Revision History Table 2. Integrated Data Package Configuration Table 3. Data Item Deliverables

Table 1. Revision History

DATE HISTORY Reviewer 09/19/2024 Original NII PMO 12/16/2024 Review & Comments ILD 9/30/2025 RFI Response Review & Input NII PMO; NIID 2/3/2025 SOW Review NIID 2/7/2025 SOW Update NII PMO 2/12/2025 SOW Updates ILD; NIID Test Managers

3/19/2025 SOW Review – Privacy Threshold Analysis

Information Specialist; ISSO;

NIID

6/27/2025 Updated requirements NIID; NII PMO 9/16/2025 SOW Review OIT/TID 9/19/2025 SOW Review AMD

10/27/2025 Comment Adjudication & SOW Update

NII PMO

11/5/2025 RFI Response Review ISD Management; NIID

11/19/2025 Comment Adjudication & SOW Update

NII PMO

12/1/2025 SOW Review APM; ISD

12/8/2025 Comment Adjudication & SOW Update (Final)

NII PMO

Statement of Work

1 PURPOSE

The purpose of these large scale (LS) Non-Intrusive Inspection (NII) Medium Energy Mobile (MEM) systems is to enable Department of Homeland Security (DHS) U.S. Customs and Border Protection (CBP) to perform effective and efficient nonintrusive inspection of conveyances, including trailer trucks, pallets, trailer-mounted cargo containers and other vehicles for contraband such as illicit drugs, terrorist weapons and currency. These systems may be used for inspection of smaller vehicles such as privately owned vehicles (POV), pickup trucks, buses, recreational vehicles (RV), and towed vehicles (e.g., trailers and boats), as well as commercial buses. The system shall be capable of detecting contraband and weapons of mass destruction / weapons of mass effect (WMD/WME) secreted in vehicles and containers. The systems shall be capable of operation in both stationary and mobile modes.

1.1 Background

In the course of their work, CBP officers and Border Patrol agents examine conveyances and cargo. These inspections take place at controlled ports of entry (POE) and Border Patrol checkpoints, and are aimed at detecting items prohibited from import into or export from the U.S. Each day CBP officers and Border Patrol agents use a variety of LS-NII equipment. LS-NII systems in the mobile configuration will allow CBP to quickly move the systems to different locations, based on the threat.

1.2 Scope

CBP has a need for increasing its capabilities for the inspection of cargo conveyances arriving in the United States at and between POEs. In the current threat environment, it is imperative that incoming cargo conveyances are subjected to a high level of scrutiny.

Therefore, CBP seeks to procure LS-NII MEM imaging systems for various CBP POEs located throughout the United States and other CBP locations as designated in individual delivery orders. This statement of work (SOW) defines the tasks necessary to provide these LS-NII MEM systems to include equipment, testing, delivery, verification, documentation, and logistics requirements needed to satisfy the procurement.

1.3 Delivery

CBP intends to procure approximately one hundred (100) MEM Systems over a five (5)-year period. This IDIQ will have a five-year ordering period. The minimum buy is expected to be one (1) system.

The Contractor shall provide a planned delivery schedule within 30 days of each delivery order award. Delivery of systems shall begin no later than sixty (60) days from the date of execution of a delivery order. Coordination shall be made with the CBP COR and technical POC listed in SOW Section 6 prior to delivery. On-site operational testing shall be conducted prior to acceptance of each system.

The Contractor shall provide updates to the delivery schedule on a weekly basis, as well as notify the Contracting Officer’s Representative (COR) immediately of any delays anticipated in the delivery of a system or systems.

1.3.1 Ordering Period

This IDIQ includes a five-year ordering period.

1.4 Invoicing

Payment requests must be submitted electronically through the U.S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in FAR 32.905 (b), "Payment documentation and process" and the applicable Prompt Payment clause included in this contract. The IPP website address is: https://www.ipp.gov. The Contractor shall invoice CBP per CBP invoicing clause:

“Electronic Invoicing and Payment Requirements –Invoice Processing Platform (IPP)

(AUG 2024).”

Prior to submitting invoices to IPP, the Contractor shall electronically transmit their payment request for review to the COR or the assigned Acquisition Specialist/Program Analyst (whom will be assigned post-award). Only upon positive reviewal of the payment request shall the Contractor electronically submit their payment request to IPP. The IPP website address is https://www.ipp.gov.

Please ensure the following are included in all invoices:

Contract number Order Number (e.g., Task Order, Delivery Order, Purchase Order, etc.).

Description of supplies or services provided for a specified time period.

CLIN the supplies or services are charged under.

Unit price and total amount of each item; and discount terms (if applicable).

Company name, telephone number, taxpayer’s identification number, and complete mailing address to which payment will be mailed.

Backup documentation showing the government has received the goods and/or services.

Only the Contracting Officer has the authority to represent the Government in cases where the delivery order requires a change in the terms and conditions, delivery schedule, SOW, and/or price of the products and/or services under an awarded contract.

1.5 Program Organization

This program is under the technical direction of the LS-NII COR assigned to the Office of

Field Operations (OFO) and Non- Intrusive Inspection Program in coordination with CBP OIT/Enterprise Infrastructure and Operations Directorate (EIOD) Integrated Logistics Division (ILD).

1.5.1 Government Management Organization

CBP will manage this program through the CBP NII Program Management Office (PMO) process for system acquisition, delivery, and acceptance. CBP OIT/EIOD ILD will manage the system(s) during the warranty period(s) to include any corrective maintenance and preventive maintenance coordination, and logistic support reporting.

CBP NII Division (NIID) will approve training development, operator training and presentations. CBP Human Resources Management (HRM) Radiation Safety Officer (RSO) will approve radiation safety limits.

2 APPLICABLE DOCUMENTS

Documents cited shall be referenced and used as called for in this Statement of Work Performance Specifications and attached Data Item Descriptions (DIDs). These regulations, publications and standards shall all be followed as applicable.

2.1 Federal Regulations and Publications

Code of Federal Regulations, 10 CFR 20, Standards for Protection against

Radiation, 2025, Nuclear Regulatory Commission (NRC).

Code of Federal Regulations, 10 CFR 39.35, Leak Testing of Sealed Sources, 2025, (NRC).

Code of Federal Regulations, 10 CFR 71, Packaging and Transportation of

Radioactive Materials, 2025, (NRC).

Code of Federal Regulations, 21 CFR 179, Irradiation in the Production, Processing and Handling of Food, 2012, (FDA).

Code of Federal Regulations, 29 CFR 1910, Occupational Safety and Health

Standards, 2025, (OSHA).

Code of Federal Regulations, 49 CFR 172, Hazardous Materials, Etc., 2025, (DOT)

Code of Federal Regulations, 49 CFR 1544.211 (e)3, Use of X-Ray Systems, DoD Directive (DoDD) 5135.02 and the December 20, 2019 U. S. Department of Transportation Federal Highway Administration Bridge

Formula Weights August 2006 FHWA-HOP-06-105 (http://www.ops.fhwa.dot.gov/publications/publications.htm#fa).

Note: These regulations can be accessed by going to: http://ecfr.gov.

2.2 National Standards

American National Standards Institute (ANSI) / Institute of Electrical and Electronics Engineers (IEEE) N42.41, Minimum Performance Criteria for Active Interrogation Systems Used for Homeland Security, 2022.

American National Standards Institute, ANSI/IEEE N42.46, Determination of the Imaging Performance of X-Ray and Gamma-Ray Systems for Cargo and Vehicle Security Screening, 2008.

American National Standards Institute, ANSl/HPS N43.3, General Radiation Safety - Installations Using Non-Medical X-Ray and Sealed Gamma-Ray Sources, Energies up to 10 MeV, 2008.

American National Standards Institute, ANSl/HPS N43.14, Radiation Safety for Active Interrogation Systems for Security Screening of Cargo, Energies up to 100 MeV, 2011.

National Fire Protection Association, NFPA 79, Electrical Standards for Industrial Machinery, 2024.

Federal Information Processing Standards Publication (FIPS PUB), Number 140-2, Security Requirements for Cryptographic Modules, 2001 National Fire Protection Association, NFPA 70, Recommended Practice for

Electrical Equipment Maintenance, 2026 edition.

2.3 DHS/CBP Documents

CBP Information Systems Security Policies and Procedures, HB 1400- 05D, Version 7.0.

CBP Training Development Standards, 2008.

CBP Instructor-Led Training (ILT) Style Guide, 2009.

CBP Instructor-Led Training (ILT) Process Guide, 2008 CBP Sweeper Interface Control Document v1.1.1 CBP DIRECTIVE NO. 5225-06 Rev. A EFFECTIVE DATE: October 9, 2024 DHS-CBP N.25, Standard Messaging Protocol, Version 1.5.0.6, 2010 DHS Acquisition Management Directive – MD 102-1, 2019 DHS Sensitive Systems Policy Directive 4300A, Version 13.0.

DHS Management Directive (MD) 11042.1 Safeguarding Sensitive But

Unclassified (For Official Use Only).

World Customs Organization Unified File Format (UFF) 3.0 HB 5200-14B Motor Vehicle Management Handbook

2.4 Order of Precedence

In the event of a conflict between the texts of this SOW and the references cited above, this SOW takes precedence. However, nothing in this SOW supersedes applicable federal and state safety laws.

3 REQUIREMENTS

3.1 General Information

The Contractor shall perform all tasks within this SOW. The Contractor shall abide by all applicable Federal regulations, national standards, and U.S. Department of Homeland Security (DHS) and CBP documents in performing all tasks. Requirements for this effort shall include the fabrication, integration, test, delivery, training, logistics, and on-demand support of LS-NII Mobile Systems.

These systems will be deployed at various CBP POEs (land border crossings along the Southwest/Northern borders, seaports and airports) within the United States and other CBP locations as designated.

3.2 Requirements Definitions

Threshold: The minimum level of operational performance that the Government is willing to accept is considered a threshold value. These values are stated in Sections 3.4 through 3.12.

Objective: A level of performance that significantly improves mission performance, safety, or supportability beyond that of the threshold value, and represents the desired yield for system performance is considered an objective.

Objective values are not required but can be defined to provide guidance to the Contractor with respect to areas where increased capability is of interest/value to the government. If Objectives are defined, the interval between the Objective and Threshold values for a given parameter will be shared with the Government Technical Point of Contact (POC) and the COR for their evaluation.

Single Requirement: Some requirements will have only a single parameter value and, when this is the case, these values are thresholds.

3.3 Performance Requirements

The Contractor shall perform the work necessary to manufacture, test and deliver the procured equipment. Each LS-NII system shall meet the requirements defined in this Statement of Work/Performance Specification. As required, the Contractor shall also provide warranty, logistics, maintenance, and on-demand services, including initial operator training, for support of these LS-NII inspection systems.

3.3.1 Performance Requirements for Large Scale Medium Energy Mobile NII Systems

These systems will be used primarily to scan cargo conveyances, plus privately owned vehicles, buses, and sea containers. Those items that apply to these LS mobile NII systems are as follows:

Operational Environment –The system shall be capable of operating in temperatures ranging from -30°C to 50°C (-22° F to 122° F) (Threshold), with an Objective of -40°C to 60°C (-40°F to140°F).

The system shall be capable of operating in high humidity (98%), and in winds up to 40 mph. The system shall be able to operate in rain, sleet, freezing rain, snow, and blowing sand.

Power Requirements

Independent Power Source – Independent power sources and shore power will be operated independently. Shore power may not always be available at a POE, therefore an independent power source is utilized more often as systems are deployed in secondary areas.

The system shall be delivered with an independent power source/generator that can run at least 24 hours without having a cool down period. The generator shall be fueled by the same fuel source as the main Medium Energy Mobile System. The generator shall automatically shut-off if the fuel gauge reaches ¼ tank. The generator shall be capable of operating at 208 or 220 VAC, 1 to 3-phase, 80 amps per phase, and 60 hertz.

The system shall be capable of operating on the following external (utility) power in stationary mode: 208 or 220 VAC, 1 to 3-phase, 80 amps per phase, and 60 hertz.

Shall have a surge protector or other device to condition the external power and prevent damage from power surges.

A 100 ft. power cable capable of transmitting the required electrical power that can be connected to an external power receptacle shall be provided.

Number of Operators The system shall have the capability to be operated in mobile mode with three (3) operators: primary operator / analyst, driver, and secondary operator/safety guide.

The systems shall have the capability to be operated in stationary mode with two

(2) operators: primary operator / analyst and secondary operator / safety guide.

The primary operator / analyst and driver shall each be able to initiate and complete a scan.

The system shall be designed to operate in a manner that is automated to the maximum extent possible, reducing the number of operators required in the field to conduct scanning operations.

A mechanism for retracting the boom shall be included when boom deployment mechanism fails.

Image Display – The system shall be capable of displaying the entire length of the scanned conveyance and its height from a maximum of 12 inches above the ground clearance

Scan Area – The MEM scan area / system boom shall deploy to the driver’s side of the vehicle.

Real-Time Imaging – The system shall provide real-time imaging so that the image is displayed during the scan with a delay of no more than three seconds.

Image Quality – X-ray images shall have the correct aspect ratio and shall be free of lines, image noise or missing data.

Shipment Identifiers License Plate Reader (LPR) System (stationary mode)- The MEM System shall include an LPR system capable of reading a single front license plate of the tractor and a single rear license plate of the trailer. The MEM System LPR, for both the front and the rear, shall provide a broad image of the front and rear areas of the vehicle such that the operator can zoom in on one or more areas to confirm the accuracy of the optical characters read or to zoom in on a different area where the LP might be located. The LPR camera capture rate for image shall be 99.5% (T) and 100% (O). Note: “Capture” is defined as detecting the license plate. The LPR shall read license plates with a 90.0

(T) 95.0 (O) percent accuracy in day and night conditions for all 50 U.S. states, 31 Mexican states, and 12 Canadian provinces/territories.

Note: Exclusions for physical obstructions or damage are not allowed.

Optical Character Recognition (OCR) System- The MEM OCR system shall read the container number in the seaport environment configuration with a 90%

(T) 95% (O) accuracy in both day and nighttime conditions. The MEM System shall provide the LPR system (or OCR for seaport configuration) in full, integrated operability with the MEM Systems. The shipment identifier(s) shall be used to identify and label each truck / container Integrated Data Package (IDP) to positively associate with each vehicle.

The license plates and container OCR shall be stored in the IDP without operator intervention. The MEM user interface shall provide the ability to correct the License plate or OCR.

Surveillance of Conveyance - The system shall include one or more, at a minimum, include one (threshold) or two (objective) Pan Tilt Zoom (PTZ) line-of-sight cameras, or an equivalent version, that enable the system operator to observe the conveyance being scanned. Cameras shall be able to have their tilt, pan and zoom remotely controlled by the system operator. Camera views shall be displayed on a display viewable by the driver and operator.

Surveillance for Safety and Security - The system shall include one or more fixed and/or PTZ line-of- sight cameras, or an equivalent version, that enables the system operator to observe areas of interest in and around the system for safety and security. At a minimum, this area shall include the system’s safety zone. PTZ cameras shall be able to have their tilt, pan, and zoom remotely controlled by the system operator. The cameras shall have sufficient resolution (minimum of 320 by 240 at 30 fps, desired of 640 by 480 at 30 fps) to detect person(s) within the surveillance area and their video display shall include time and date overlays.

Integrated Data Package (IDP) - The system shall deliver an IDP to the operator/analyst as a single or coherent case using Unified File Format 3.0 (or later) standard.

The system shall export data for each conveyance to both Tagged Image File Format (.tiff or .tif) and the international Unified File Format (UFF) version 2.0 or later current version.

The system shall export the radiographic image in native format for analysis on any computer equipped with corresponding image analysis software without loss of image analysis functionality and full dynamic gray-level range. Derived images (e.g. material discrimination) shall also be included.

The IDP shall be compiled and assigned a unique case record number.

The IDP shall be saved and protected from overwrite or auto-delete features.

MEM IDPs identified by a CBP analyst as "suspect records" shall be saved such that they cannot be deleted by any user. Any suspect record shall require user to enter a comment.

The IDP shall be configurable and contain as a minimum the data from the table below:

Table 2. Integrated Data Package Configuration

Item No Item Name

1 MEM Unit Number

2 Tractor X-Ray image(s) (note:

applies to Cab scan)

3 Trailer X-Ray image(s) (note: or shipping container)

5 Front tractor area image (scene image)

6 Front license plate read

7 Back trailer area image (scene Image)

8 Back license plate read

11 Truck average speed

12 Analyst and ADA annotations for anomalies and associated analyst ID;

primary / secondary adjudication with timestamp(s).

13 Tag: Suspect or Non-Suspect

14 Date / Timestamp of IDP creation, and for both control center and secondary adjudications and final package resolution.

15 RPM alarm status (Future)

Data Integration - The MEM shall be capable of sharing data across a cellular and wi-fi network in accordance with DHS and CBP policy, (threshold). MEM data shall be exported in UFF 3.0 (or later) format. The MEM shall transmit the UFF file comprised of the image file in its RAW format, the associated file data, images, photos, and video in compliance with sweeper Interface Control Document v1.1.1. The ability to distribute the subject system output to CBP Imaged tablets and hand-held devices in addition to standard desktops and laptops is an objective.

Image Analysis The analyst shall have the ability to do the following: enhance the image(s), change the magnification, select different color palettes, optimize the image’s contrast and brightness, sharpen the image, highlight potential areas of interest, annotate the file for secondary inspection, input decisions on shipment adjudication and perform other standard and required operations to meet the objective of detecting contraband and anomalies. (T)

The system shall have a scalable measuring tool to reference identified objects on the image relative to the conveyance dimensions (e.g. ruler tool bar).

The analyst shall have the means to add graphical annotation (circles, boxes, arrows, text boxes) to the IDP file. Such annotations do not get incorporated into the radiographic images, themselves, except as they may be included as an image layer separate from a “clean” radiographic image (e.g., in a TIFF file).

The system shall have the capability to tag an image as suspect or non- suspect and store that decision with the IDP.

The analyst workstation application shall provide threshold signal processing requirements and employ smart signal processing that automatically identifies anomalies that could be drugs, explosives, weapons, and potential casings for radioactive materials. This may include system auto-generated identification of regions of interest such as anomaly cueing/annotation, identification and denotation of conveyance areas that were not penetrated and change detection of a previously scanned conveyance (image compare). (O) The smart signal processing features shall be enabled/disabled upon operator command. (O)

Material Discrimination – System shall have the capability to distinguish between low-Z (organic), medium-Z (intermediate: inorganic and composite) and high-Z (metallic) materials based on their atomic number (Z) (O). Material categories are to be color-coded as follows: organic (orange), intermediate (green) and metallic (blue) (Threshold) and Heavy Metals (Color not defined by CBP) (Objective). Shades of these colors are to be used to indicate thickness.

3.3.2 System Configurations and Operational Specifications for Medium Energy Mobile

Systems

The following will be required to meet the Performance Specifications listed in paragraph 3.1.1 and those listed for this configuration.

Travel Configuration – The system shall be able to travel on highways with a maximum height of 13 ft. 6 inches, width of 8 ft. 6 inches (lights, mirrors, and other required devices may extend an additional 10 inches on each side), and length of 40 ft. Total weight shall not exceed 26,001 lbs. or the vehicle's Gross Vehicle Weight Rating (GVWR) whichever is less. The system shall not require a Commercial Driver’s License to operate on highways.

Land Mobile Radio (LMR) - Vendor shall install a government furnished LMR installation kit for communications with ground safety guide and other government agencies.

Scan-Drive – The system shall provide governed speed control for mobile-mode operation at no greater than 3mph (threshold), 2mph (objective).

Cab Configuration – The system shall have sufficient space for operators in full duty gear. Analyst station shall be ergonomic. Seats shall be durable and fully adjustable for height and travel. The cab shall be heated or cooled to a temperature range of 65 to 75 degrees in all operating conditions. The Cab heating and cooling shall be capable of operating independently of the vehicle engine during operations (objective). (note:

intent is to reduce the requirement to idle the engine for heating and cooling). The system shall provide two-way communication between the cab personnel and the safety traffic control officer.

Safety Equipment – The system shall be equipped with two (2) appropriately rated fire extinguishers; one inside the cab, and one on the exterior of the vehicle. The fire extinguishers shall be appropriately placed and readily available. The vehicle shall include safety equipment required by the CBP vehicle management handbook.

Law Enforcement Lights and Sirens – The system shall be equipped with a set of Law Enforcement lights, that when activated can be seen from all sides of the unit, 360 degrees. The lights shall be capable of being controlled from the Driver's Cab. The siren shall include, at a minimum two tones, the wail and yelp (such as the Whelen PA series). The siren may be integrated with the lighting or separate.

CBP Branding - Each system delivered shall be delivered with CBP OFO branding.

(Per current CBP OFO branding style guidelines). This will be considered Government Furnished Information (GFI).

Area Lighting – The system shall have LED lighting for system operation in dusk and nighttime that provide the following capabilities:

Lighting conditions extending 50 feet as measured from vehicles center point, providing a 360° perimeter around the system in the deployed position.

(Shadowed areas within this perimeter are not acceptable)

Sufficient lighting to read and capture video and photographic images of truck and conveyance license plates and container shipping numbers without additional lighting.

LED Lighting shall be capable of operating in both scanning and non-scanning modes.

Lighting shall be capable of operating off generator, engine-drive power, shore power and have an on/off switch accessible to driver.

Area lighting shall not blind drivers of vehicles being scanned in stationary mode.

Movement Safety Requirements

Backup Audible Tone – The system shall have a clear audible tone that shall be activated at a discernably higher decibel than the system’s normal operating decibel when the system’s gear selection shift is placed in reverse; in both scanning and non-scanning modes.

Back-up features: Rear View (back-up) Camera with a wide angle and monitor for use by the driver when the system’s gear selection shift is placed in reverse; in both scanning and non-scanning modes (threshold), combined with Surveillance monitor (Objective)

Reverse Collision Sensor system for the vehicle with audible collision alert tone in the cabin of the vehicle to alert the driver of possible rear collisions. (O)

Forward Collision Sensor system for the vehicle with audible collision alert tone in the cabin of the vehicle to alert the driver of possible forward collisions. (O)

Level The system shall be equipped with a level indicator that is visible to the operator and displays the tilt (side to side) angle of the unit. Lighting for the level indicator shall provide for constant illumination at night.

Boom Stability – The MEM vehicle shall be stable when the boom is deployed.

Radiation Control Area (RCA) - The RCA shall be no wider than 60 ft. and no longer than 120 ft. to scan a 75 ft. vehicle. The RCA boundary will be based on 20 scans in any one hour when scanning at the slowest selectable scan speed in the mobile mode, and at a target vehicle speed between 1.5 to 5.0 mph when scanning in the stationary mode. (See ANSI N43.3and ANSI 43.14in Section 2, Applicable Documents on procedures for determining the RCA.).

Radiation Signage – The system shall come equipped with ten (10) self- standing bi-lingual radiation control area signs (English/French for northern border, and English/Spanish for all other areas). The signs shall be contained and secured within a storage cabinet on the vehicle.

Opt-out Signage - Each system shall be equipped with signage attached to a freestanding stand for placing at the entrance to the scan tunnel informing the occupants they will be scanned with low dose X- rays, in both English and one additional language. Verbiage and specification will be provided by the government.

Radiation Dose Rate Limit (RCA Boundary) - The time-averaged radiation dose rate (above background) for mobile systems shall not exceed 50 μR (0.05 mR) in any one hour for system operators, other workers and members of the general public at the boundary of the RCA. (See ANSI N43.3-2008 and ANSI 43.14-2011 in Section 2, Applicable Documents on procedures for determining the RCA.)

Radiation Dose Rate Limit (for Cab scan) - The system shall perform X-ray transmission scan of the tractor / cab of the truck at low energy / flux allowing a safe exposure rate. Per ANSI 43.17, the System, shall limit radiological dose equivalent to each truck driver or passenger being scanned to no more than 25 uR/scan (T) 10 uR/scan (O).

Radiation Safety X-ray Shut Down - X-rays shall cease radiating if scanned vehicle’s speed (stationary mode) is less than 2mph to ensure dose remains below the radiation dose limit for cab scan.

RPM Interference - Mobile Medium Energy LS-NII systems shall not increase the background dose rate at 400 ft. by more than 1.0 μR/hr. Contractors are responsible for verifying the requirement will be met with dose-rate measurements at multiple locations which illustrate the dose rate fall-off taken at their test facility and/or with simulations supporting their conclusion that requirements will be met [data and simulation verification information shall be supplied to CBP]. Final verification of non-interference requirements may be validated with tests on RPM equipment during the system SAT.

Scan Length – The system shall be capable of scanning conveyances 120 ft. in length at the slowest operating speed.

Tunnel Clearance – The system shall have a scan tunnel that is at least 15 feet 6 inches high (Threshold) and 16 feet high (Objective). The system shall have a tunnel width that is at least 12 feet 10 inches wide (Threshold) and 13 feet 6 inches wide (Objective).

Boom Collision Sensors – The system shall have sensors that alert the driver that the scan target is 12 inches or less from the scan tunnel sides.

Collision sensor alarm shall be visible and audible (with accelerating audible the closer the vehicle comes to collision). Collision sensor alarm shall be recognizable to the system driver and analyst, and to the target vehicle driver.

The system shall have collision sensors that will alarm should the target vehicle come within 3 inches of striking the scan tunnel.

Collision sensor must have visual representation to the driver for evasive action to avoid collision (i.e.: stop, go left, go right).

Ground Clearance – The system and chassis shall have minimum ground clearance of 6 inches (threshold). The system shall be adjustable for ground clearance up to 10 inches (objective).

Continuous Scan Capability – The system shall be capable of scanning up to 5 targets without stopping (Threshold) and up to 10 (Objective), with each target being treated as a single IDP. Target spacing will not exceed 5 feet.

Stationary Scan – The system shall have a stationary scan capability to scan the cargo container with and without external (utility) power. The system shall be able to scan vehicles passing through the scan tunnel at speeds from 2.0 to 10.0 mph. The system shall provide an average vehicle speed to the Operator during stationary scans.

Objective for drive-through full-scan capability to scan the tractor/cab at a dose safe for the driver of the target vehicle, and the cargo container at a dose in compliance with this statement of work specifications.

Throughput – The system shall have a throughput of at least 20 conveyances per hour in the mobile mode. Throughput determination will include the time it takes to conduct the scan at the slowest selectable speed, analyze the image, make data entries or scan a manifest, and make a suspect or non-suspect decision. The system shall have the capability to analyze previous images while the system is scanning other targets.

Penetration

High Energy Penetration: For unoccupied cargo, the system shall provide

Objective.

Low Energy Penetration: The MEP Unit low energy scanning of the cab shall penetrate at least 1.5 inches (T) or 2 inches (O) of steel.

Performance shall be measured in accordance with ANSI N42.46- 2008. The speed used to determine penetration shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Contrast Sensitivity – The system shall provide a contrast sensitivity of 5% at 50% of maximum penetration (Threshold) and up to 5% at 80% of maximum penetration (Objective), as measured in accordance with ANSI N42.46-2008. The speed used to determine contrast sensitivity shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Spatial Resolution - The system shall provide horizontal and vertical spatial resolution of 0.5 inches (Threshold) and up to 0.125 inches (Objective), as measured in accordance with ANSI N42.46-2008. The speed used to determine spatial resolution shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Docking Station and Laptop - System shall be equipped with a key lockable docking station for an OIT imaged-approved laptop computer that allows for easy access by the primary operator. The docking station shall be installed on each system, and a laptop procured for each system by the Contractor. Laptop specifications will be coordinated through CBP-OIT. The MEM system computer shall be lockable.

Set-up/Time to Deploy - The system shall be capable of set-up/deployment in at most thirty (30) minutes (Threshold) with the objective of reaching a set- up/deployment time of fifteen (15) minutes (Objective).

Safety Interlocks - The Contractor shall provide safety interlocks such as operator proximity/presence sensors and/or "dead man switches" for all systems for the protection of pedestrian traffic and untrained personnel.

The Contractor shall provide Emergency Stop Switches for all systems which will allow an operator to manually interrupt the scanning process disabling the transmission of X-rays in an emergency or when there is an unauthorized entry inside the system's Radiation Control Area. Emergency Stops shall be strategically located in the driver's cab, in the Work Center, and on left and right side of the vehicle. A remote emergency stop switch for the traffic control secondary operator is an objective. See ANSI N43.3- 2008 and ANSI N43.14- 2011 for more details on safety interlocks. When actively radiating the LS-NII system shall provide audible and visible (flashing lights) alarms.

3.3.3 Imaging System Equipment and Equipment Installation

In accordance with this Statement of Work/Performance Specification, the Contractor shall deliver LS-NII Systems incorporating radiographic measurement technology designed to highest industry standards.

3.3.4 Sources & Detectors

The Contractor shall deliver an imaging source or sources, which shall incorporate standard transmission x-ray with or without reflective measurement technology.

The system shall use active X-Ray technology – will not rely on radioactive isotopes.

The system will support display of radiographic images at 4096 (T) or 65,536 (O) gray levels or greater.

As part of the LS-NII system, the Contractor shall deliver an array of detectors that are capable of meeting the Performance Specifications as described in this SOW.

3.3.5 Computers

As part of the LS-NII system, the Contractor shall provide a laptop computer that shall be equipped with operating systems that are current, supported, and secure. All software must adhere to federal cybersecurity guidelines and ensure compatibility with CBP’s existing infrastructure.

3.3.6 Computer Security

All LS-NII System computers and software programs that allow a User to analyze, enhance and store an IDP, and the Data Base computers and programs that store the IDP, shall have the following security features incorporated:

3.3.6.1 Identification and Authentication

User Accounts - Three levels of CBP User access (Operator Level 1, Operator Level 2, and Administrator) shall be provided. Operator Level 1 shall be able to perform all system functions except copying and deleting images or Data Sets. Operator Level 1 shall not have access to User

Accounts. Operator Level 2 shall be able to perform all Operator functions plus be able to copy and delete IDP files. Operator Level 2 shall not have access to User Accounts. The Administrator shall be able to perform all Operator Level 2 functions plus have access to User Accounts. The Administrator shall be able to create, edit and/or delete User Accounts. The Contractor shall be required to create a simplified procedure for the Administrator to use in order to create, edit and delete User Accounts.

Operator Level 1 & 2 shall not have access to Windows except for those hard drives that have IDP stored on them or the external drives from which an image may be imported or an image or IDP may be exported or copied.

The Administrator shall have access to Windows if required for system operation.

Passwords – All user account passwords shall be required to be strong passwords. Passwords shall meet the requirements of Password Management of the DHS 4300A Sensitive Systems Handbook Version

9.0 dated 2011, or the latest version at the time of award. Strong password requirements are:

o Be at least 8 characters in length o Contain a combination of alphabetic, numeric, and special characters o Not be the same as any of the user’s previous 12 passwords o Should not contain a dictionary word o Should not contain any simple pattern of letters or numbers o Should not be any word, noun, or name spelled backwards or with a single digit appended, or with a two digit “year” string o Should not be the same as the user Id.

o Password cannot be set to null.

Passwords – Automatic password change frequency. The system shall prompt the user to change their password every 90 days.

Password Storage – They system shall store all user account passwords in encrypted form.

3.3.6.2 Access Control

Unique User Accounts – All users shall have unique account identifiers, including separate operator accounts and administrator accounts for users that have both responsibilities.

Automatic Account Lockout – The system shall lock a user account for twenty (20) minutes after three consecutive failed logon attempts.

Automatic Session Termination – The system shall lock the user login session after twenty (20) minutes of inactivity. The system shall require the user to authenticate with the user account password to regain system access after the system lock. After 60 minutes of inactivity, the user account shall be logged off of the system.

Warning Banner – The DHS Chief Information Security Officer (CISO) stipulates that a warning banner statement be displayed on all DHS systems during user account logon. The system shall prompt the user to accept the current language before they can authenticate with the user id and user password to access the system. The current language required follows:

o You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S.

Government-authorized use only.

o Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties.

o By using this information system, you understand and consent to the following:

You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.

The government may disclose or use any communications or data transiting, stored on, originated from or directed to or from this information system for any lawful government purpose.

You are NOT authorized to process classified information on this information system.

3.3.6.3 Auditing

Audit Records – System will retain audit records sufficient in detail to facilitate the reconstruction of events if compromise or malfunction occurs. Audit records shall contain at least the following information:

o Identity of each user and device accessing or attempting to access the system o Time and date of the access and the logoff o Activities that might modify, bypass, or negate information security safeguards o Security – relevant actions associated with processing o All activities performed using an administrator account/identity

Audit Record Access – Audit records and audit logs should be protected from unauthorized access, modification, or destruction.

Audit Record Retention – Audit records should be maintained on the system for a minimum of thirty (30) days for non-suspect images. Suspect Images shall be stored indefinitely.

Audit Reduction / Report Generation – The system will provide an audit reduction and report generation capability that:

o Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents o Without altering the original content or time ordering of audit records

The system will have the capability to tag each scan with the username who conducted it. The username and time shall be displayed with the image and the IDP.

3.3.7 Printed Documents

All LS-NII Systems shall have the capability of printing all the items of an IDP. This is to include the radiographic image, video capture "snapshots", notes and the Data Sheet and/or Manifest if included as part of the IDP. All printed documents shall have "LAW ENFORCEMENT SENSITIVE" in the header or footer.

3.3.8 Printer / Scanner

Printer shall be capable of quality printing (i.e. at least 300 DPI for text and 600 DPI for graphics/photos) while retaining a limited physical footprint. Scan/print devices may be combined or separate units.

3.4 Systems Integration

Integration of NII inspection system equipment and its supporting subsystems shall be the responsibility of the NII systems Contractor in coordination with the common integration platform (CIP) provider and CBP OIT.

3.4.1 Work Center

The Contractor shall deliver a Work Center ergonomically designed for housing the system's Workstation. The system's Workstation for mobile systems shall be housed inside the mobile unit.

3.4.2 Workstation Integration and Interface

The Contractor shall configure and integrate Workstations and Interface Operating systems to include an Operator Console, computers and computer software, cameras and the controls and displays to scan a conveyance, analyze the image, make a Suspect or Non-suspect decision and store all the items that make up that IDP.

3.4.3 Integrated Image and Data Capture

All NII Systems will be capable of capturing and displaying all of the items that are contained in an IDP (see section 3.3.1 above). The IDP shall include, as applicable, the radiographic image(s), a video capture snapshot image from each system CCTV camera, system metadata, conveyance identification (e.g., container ID, LPR, land code reads), a data sheet or manifest, operator notes, the operator’s suspect or non-suspect decision and the user's name. All NII image data and metadata shall be the sole property of CBP.

LPR and container ID (if applicable) read capability shall be installed as a means to identify a particular vehicle and cargo shipment, and to associate it with its NII image package as the vehicle proceeds through the POE scanning and inspection process. This metadata shall be collected as the vehicle queues to be scanned by the NII sensor system.

Data Storage

The system shall be capable of storing a complete IDP for a period of 30 days or one (1) Terabyte of storage, whichever is greater.

The system DS shall store IDP’s for a rolling first-in first-out period of thirty

(30) days.

The system shall provide an option at the Administrator level for auto delete of non-suspect files that are over 30 days old.

The system DS shall have a full capacity backup system that is configured to automatically backup files at designated intervals.

The system DS shall create a warning when storage reaches 70% of its maximum storage capacity.

The system DS shall create a warning when storage reaches 90% of its maximum storage capacity.

The system DS shall create an alarm when storage reaches 99% of its maximum storage capacity.

The system DS shall delete oldest data packages to restore room for new packages when storage reaches 99% of its maximum storage capacity.

The system DS shall store IDP images in an uncompressed data format.

The system shall provide raw X-Ray image data for high and low energies for each IDP in addition to any proprietary / processed X-Ray image format. The raw images are for off-line, CBP analytic / research purposes and are not intended for system workstation display.

The system DS stored images shall retain the full dynamic gray-level range of the x-ray image.

Locally stored files, records, and scan images shall be accessible to operators who are able to copy to removable media storage devices: encrypted, FIPS 1402 Level 2 and FIPS 197 compliant flash and hard drives.

The system DS shall support operator-defined queries, including standard reports for scans performed, scans per day / per analyst and other Government defined metrics.

The system DS shall store data in encrypted form.

3.4.4 Image Download

The image will be configured in a format known as Unified File Format (UFF), where CBP may easily transfer the image from one computer containing the image analysis software to another computer containing the image analysis software without the loss of the image analysis functionality. For traditional NII scanning operations in secondary, this transfer will be conducted manually via secure thumb drive or other OIT-approved media. In future NII-IP integrated system applications, all NII image and metadata shall be collected by CBP and securely transferred to the CBP Cloud.

3.4.5 Integrated Data Package Download / Transfer

The IDP shall consist of the data specified within section 3.3.1 above. The consolidated IDP shall encompass all the data required to perform an offsite scan review and analysis as though the reviewer was stationed at the original data site. The system shall also be capable of creating and exporting a summary scan report for each conveyance scanned – the format of this report shall be PDF.

3.5 Reliability, Availability, and Maintainability

Each NII system is expected to have the highest Reliability, Availability, and Maintainability achievable for this type of technology.