Attachment 1 - Statement of Work (SOW).pdf

PDF 1 MB Posted

Attached to
Up to 60 months Lease of 18 MFDs in Bahrain
Solicitation number
SP7000-20-Q-1060
Issued by

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

REVISION ‐ As of June 25, 2020

I. OVERVIEW

A. TheDefenseLogisticsAgency(DLA)seekstoenterintoacontractforEighteen(18)Multifunctional
Devicesforupto60monthleaseofFederalSupplyClass(FSC)3610equipmentalongwithservices
associatedwiththisleasedFSC3610equipment.Thegeographicscopeofthiscontractingactionis
OUTSIDETHECONTIGUOUSUNITEDSTATES(OCONUS)–[Bahrain]andlimitedtoa50mile(81
kilometer)radiusandwithinthesamecountryofthedeliveryschedule.This contract is in support of the

[ Command ].

B. TheleasedFSC3610equipmentsoughtareA3MultifunctionalDevices(MFDs),accessoriesandoffice
documentdevices(hereaftercollectivelyreferredtoas“devices”).Specificdetailsarefoundinsections
IIandIII.
C. TheservicesassociatedwiththeleasedFSC3610equipmentsoughtaredeliveryandinstallation
(sectionIV),end‐usertraining(sectionV),fullservicemaintenance,includingallconsumablesupplies
(excludingpaper)(sectionVI),relocation(sectionVII),technicalrefresh(sectionVIII),removal(section
IX),reports(sectionX),networkfunctionality(sectionXII),andnetworksecurity(sectionXIII).

II. DEVICES AND CONFIGURATIONS

A. All devices shall meet the following requirements:

1. Simplex/duplex copying, printing, and scanning.

2. Automatic Document Feeder with a 30 page minimum capacity and duplexing.

3. Basic inline finishing functions which include stacking, collating, and multi‐position stapling.

4. Operate using at least 30% or greater recycled 20 lb. paper.

5. Free‐standingwithcasters/wheels(orcabinetsprovidedasneeded).Nodevicesshallbe
configuredfortable‐topuse.

6. Copy resolution of at least 600 x 600 DPI.

7. Print resolution of at least 1,200 x 1,200 DPI.

8. Support current desktop and server operating systems.

9. A minimum of 1 Gigabyte of document management memory.

10. PrintdriversshallbecapableofPageDescriptionLanguage(PDL)tosupportAdobePS3,PCL5E
andPCL6.
11. Deliveredwithup‐to‐datesoftware/firmwareanddrivers,with32‐bitand64‐bitarchitecture
driversupport.ProvideallsubsequentupdatesalongwithinstallationinstructionstoDLA.
12. Operateusing220volt50hertz(Hz)alternatingcurrent(AC).Intheeventthelater(20amp)is
offered,theContractorshallclearlyidentifythesemodelsinproposalsandinallpricelists.No
externaltransformersshallbeusedasanexception.Thecontractorshallalsoidentifythepower
plugpartnumberrequired.
13. Equippedwithanexternalsurgeprotectortoprotectallelectroniccomponents.Theexternalsurge
protectorshallbeprovidedinadditiontoanyinternalsurgeprotectors.Externalsurgeprotectors
shallhaveaminimumfive(5)yearmanufacturer’swarrantythatcovers:

a. Replacement of the surge protector if it fails, at no cost to the Government.

b. RepairorreplacementofanydeviceprovidedthroughthisSOWdamagedbyapowersurge
whenproperlyconnectedtotheContractor‐providedsurgeprotector.

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 1 of 34

REVISION ‐ As of June 25, 2020

14. Include a printed operator’s manual, in English, for each device.

15. Default to:

a. Automatically go into sleep mode after 20 minutes of inactivity

b. Automatically go into hibernation after an hour of inactivity.

c. Print duplex (2‐sided).

d. Print in gray scale on both monochrome and color MFDs

e. “Draft” quality printing rather than “high” quality printing

f. Display all information in English.

B. Devicesshallmeetthefollowingsecurityrequirements:
1. DeviceswithharddrivesshallhaveanencryptionoroverwriteSecurityKit.
2. OnlyCLASSIFIEDdesignateddevicesshallbeplacedonthe SecretInternetProtocolRouter
Network(SIPRNet).AllCLASSIFIEDdesignateddevicesshallincludearemovableharddrive.A
removableharddriveisaharddrivetheend‐usermayeasilyremove,andreinsertintothedevice
onarecurringbasis.Alldeviceswithremovableharddrivesshallhavealockingmechanismto
securetheharddrive.
3. AllUniversalSerialBus(USB)ports/memorycardslotsonthedevicesshallbedisabledwhen
deliveredexcept:theprinterportusedtoconnectthedevicetoasinglecomputer;CommonAccess
Card(CAC)readers;andanyUSBportsneededforservicing/maintainingequipment.Additionally,
unusedports,protocolsandservicesoneachdeviceshallbeabletobeenabled/disabledbythe
localITadministrator.
4. AlldevicesshallhaveasecurescanningfunctionalitythatcomplieswithFederalInformation
ProcessingStandard(FIPS)140‐2encryptionwithroutingandfullintegrationtostandardnetwork
infrastructuredestinations,whichinclude:Scan‐to‐Email,Scan‐to‐Folder,Scan‐to‐Network,Scan‐
to‐ServerandScan‐to‐PC.ScanneddocumentsshallbemadeavailableasaTIFF,JPEGandasaPDF
fileformat.Thedefaultscanresolutionshallbe300x300DPI.Thedefaultscanoutputfiletype
shallbePDF.DevicesshallhaveOpticalCharacterRecognition(OCR)inordertoprocessand
producetext‐searchabledocumentstothescandestination.Note:Fullintegrationdoesnotmean
scanningtoproprietaryback‐endcontent,documentorrecordsmanagementsystemstosupport
customizedindexingormetadatarequirements.
5. AllNon‐ClassifiedInternetProtocolRouter(NIPR)devices,volumebands1‐5,shallhaveanalogfax
only.Note:Theanalogfaxfunctionshallbeconfiguredtoseparate/isolatethefaxcontrollerfrom
thenetworkcontroller.SIPRdevicesshallNOThavefaxcapability.

6. All devices shall have:

a. CAC/PersonalIdentityVerification(PIV)enablementinordertosecurethedevicefrom
unauthorizeduseandshallhavea“SecurePrint”featurethatallowsend‐userstouse
authenticationcredentials(ex.ID,Login)andpasswordidentification(PIN)toreleaseprintjobs
onthedevice.
b. Printon‐demandsolution(e.g.,equivalentto“FollowMe,”“FollowYou,”“Push”or“Pull”
printing)thatshallallowend‐userstoreleaseprintoutputonanydeviceonthenetwork.

III. SPECIFICATIONS:

A. Inadditiontothefeatures/capabilities/configurationssetforthinsectionII(outlinedabove),the
Contractorshallprovidealldevicesinaccordancewiththechartbelow:

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 2 of 34

REVISION ‐ As of June 25, 2020

CLIN QUANTITY

Volume Band

NIPR

SIPR

Estimated Monthly

Impressions

Min.Speed
(PPM)PaperCapacity

Mono Color Mono/Color

00012VB‐1NMNIPR5,000N/A25
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐
Upto11"x17"
00029VB‐2NCNIPR5,0005,00035
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐
Upto11"x17"
00032VB‐3NMNIPR20,000N/A45
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Four(4)AdjustablePaperTrays[500SheetMinimum/Tray]‐
Upto11"x17"
00043VB‐3NCNIPR10,00010,00045
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Four(4)AdjustablePaperTrays[500SheetMinimum/Tray]
‐Upto11"x17"with Booklet Maker & 2/3 Hole Punch.

0005 2 VB‐4NC NIPR 20,000 15,000 50

One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]
‐Upto11"x17"One(1)HighCapacityTray[2,000Sheet
Minimum]‐8.5x11"with Booklet Maker & 2/3 Hole Punch.

IV. DELIVERY AND INSTALLATION

A. Delivery and Installation of Ordered Devices:

1. DeliveryandInstallationofordereddevicesshallbeinaccordancewith(IAW)thetimeframes
outlinedinthechartbelow:
AmountofDevices
PerContractingAction
MaximumNumberofCalendarDays
toCompleteDeliveryandInstallation

Up to 100 30 days after receipt of contract

101 ‐ 200 45 days after receipt of contract

201 – 500 60 days after receipt of contract

More than 500 90 day after receipt of contract

2. Installationshallbedefinedasdeviceisfullyoperationalasordered,toincludenetwork
connectivityandscanning,ifrequired.TheContractorshallprovideonsitetechnicalandsystem
analystsupportandappropriatedigitalcards/productstosuccessfullyconnectdevicestoDLA
customers’networks.
3. Uponcompletionofdevicedelivery,theContractorshallobtaincustomersignatureanddateon
eachbilloflading(BOL)orpackingslip,andprovidethisproofofdeliverytothedesignatedDLA
POCwithinten(10)businessdaysafterdelivery.TheContractorshallalsoprovidethe
InstallationReport(Appendix#1)oramodifieddeliveryschedulewithserialnumbersaddedtothe
designatedDLAPOCwithinten(10)businessdaysafterdeliveryandinstallationhavebeen

completed.

4. Ifadevicecannotbedeliveredandinstalledwithinthedeliverytimethatisgiven,theContractor
shallnotifytheissuingContractingOfficerassoonasthedelayisrealized,oftheexpecteddelivery
datefortheordereddevice(s).

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 3 of 34

REVISION ‐ As of June 25, 2020

5. Regardlessofinstallationdate,alldevices,includingreplacementdevices,shallmaintainaco‐
terminusPeriodofPerformance(PoP).
6. Uponinstallation,theContractorshallaffixoneachdeviceastickerwiththefollowinginformation:
manufacturer’sname,modelnumber,deviceserialnumberandtoll‐freetelephonenumber(s)to
placeservicemaintenancecallsandorderconsumablesupplies.Additionally,theContractorshall
addthePoPenddatetoDLAEMSstickerandaffixtodevice.(DLAshallprovidetheDLAEMS

stickers.)

7. The Contractor shall provide English‐speaking personnel at the toll‐free number(s) provided.

B. Options to Order Additional Quantities of Devices:

1. Asoptions,theContractorshall,atthesameunitprice,provideuptotwentypercent(20%)more
co‐terminusleaseddevicesthansetforthateachCLINofadeliveryorder;providedthatDLA
exercisesandissuesitsoptions,ifatall,priortotheendofthe24thmonthfollowingtheeffective
dateofthecontract.

V. TRAINING

A. The Contractor shall provide on‐site training, in English, as specified in the contract, to end‐users.

B. TheContractorshallcoordinatedirectlywitheachcommand’sPOClistedonthecontracttoestablish
thetrainingschedule.

C. Training shall include the following:

1. How to operate the basic function keys of the device.

2. How to operate special features including duplexing, enlargements, reductions, and multiple job queues.

3. Diagnosis and resolution of basic device malfunctions, including paper jams.

4. Location and procedures for installing consumables such as paper, toner, staples, etc.

D. TheContractorshallsubmitaSummaryofOn‐SiteTrainingReport(MicrosoftExcelformat),listing
deviceserialnumber,personneltrainedanddatetrainingwascompleted,tothedesignatedDLAPOC
withinfive(5)businessdaysoftrainingcompletion.Initialinvoicepaymentshallnotbereleaseduntil
thisreportisreceived.
E. Inadditiontoon‐sitetraining,theContractorshallprovideaquickreferencedeskguide(singlesheet,
8.5”x11”papersize,laminated,fullcolorandabletobeeasilystowedawaywiththedevice).The
contractorshallalsoprovideaCD‐ROM/DVDand/orweb‐basedtraining(URLprintedonastickerto
beplacedonthefrontofthedevice)toserveasfollow‐uptraining.

VI. MAINTENANCE

A. Service

1. TheContractorshallmaintaineachdeviceataminimum95%monthlyavailablerate.Maintaining
thedevicesincludes:

a. Preventive maintenance

b. Service calls

c. Repairs

d. Troubleshooting

e. Connectivity

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 4 of 34

REVISION ‐ As of June 25, 2020

f. All associated labor and travel

2. Ifamalfunctioncannotbecorrectedduringtheinitialservicecall,theContractorshallresolveall
issuesnolaterthanten(10)calendardaysfromdateofinitialservicecall.
3. TheContractorshallprovideEnglishspeakingservicetechniciansupportMondaythroughFriday
from8:00a.m.–4:30p.m.localtime,withtheexceptionofFederalholidays.
4. ServiceforNon‐RemoteAreas:Non‐RemoteAreasaredefinedasservicelocationsbeingwithina
fifty(50)mileradiuscommuteofametropolitanarea,whichforthepurposeofthis SOWisdefined
asastatisticalareawithapopulationof50,000personsandabove.Forserviceinnon‐remote

areas:

a. TheContractorshallrespondtoworkstoppagesituationswithintwo(2)businesshoursof
aservicecall.Workstoppageisdefinedasarequiredfunctionofthedevice(printing,
copying,scanningorfaxing)isnon‐operational.Atelephonecall(unlessitresultsinsolving
theproblem)shallnotbedeemedanacceptableserviceresponse.Theservicetechnicianshall
calltheend‐userwithinanhourtodiscusstheserviceproblemandtimeofarrival.Itis
estimatedthat10%ofservicecallsshallbeclassifiedas“workstoppage”acrossthetotal
devicepopulationonayearlybasis.
b. TheContractorshallrespondtonon‐workstoppagesituationswithinfour(4)business
hoursofaservicecall.Non‐Workstoppageisdefinedasarequiredfunctionofthedevice
(printing,copying,scanningorfaxing)isdegraded.Atelephonecall(unlessitresultsin
solvingtheproblem)shallnotbedeemedanacceptableserviceresponse.Theservice
technicianshallcalltheend‐userwithinanhourtodiscusstheserviceproblemandtimeof

arrival.

5. ServiceforRemoteAreas:RemoteAreasaredefinedasservicelocationsbeingbeyondafifty
(50) mileradiuscommuteofametropolitanarea.Forserviceinremoteareas:
a. TheContractorshallrespondtoworkstoppagesituationswithinfour(4)businesshoursof
aservicecall.Atelephonecall(unlessitresultsinsolvingtheproblem)shallnotbedeemedan
acceptableserviceresponse.Theservicetechnicianshallcalltheend‐userwithinanhourto
discusstheserviceproblemandtimeofarrival.Itisestimatedthat10%ofservicecallsshallbe
classifiedas“workstoppage”acrossthetotaldevicepopulationonayearlybasis.
b. TheContractorshallrespondtonon‐workstoppagesituationswithineight(8)business
hoursofaservicecall.Atelephonecall(unlessitresultsinsolvingtheproblem)shallnotbe
deemedanacceptableserviceresponse.Theservicetechnicianshallcalltheend‐userwithin
anhourtodiscusstheserviceproblemandtimeofarrival.
6. InthecaseofdevicesclearedforCLASSIFIEDmaterial,theContractor’srepairtechniciansshall
haveaDepartmentofDefense(DoD)securityclearanceequaltoorhigherthantheclassificationof
thedeviceandbeabletoprovideverificationwhenrequested.
7. TheContractorshallberesponsibleforalldamagesduetonormalwearandtearandlossor
damagecausedbytheContractororitsagents.
8. Ifadeviceisdeterminedtobenon‐repairable,toincludedamageddevices,theContractorshall
informthedesignatedDLAPOCwithintwo(2)businessdaysofmakingthisdetermination.The
Contractorshalldeliverandinstallacomparablereplacementdevicewithinfifteen(15)calendar
daysfromwrittennotificationfromtheContractingOfficer.

B. Consumable Supplies

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 5 of 34

REVISION ‐ As of June 25, 2020

1. TheContractorshallprovideallconsumablesupplies(includingstaples)necessaryforthe
operationofthedevices.Paperisexcludedasaconsumablesupply.
2. TheContractorshalldeliverallrequiredconsumablesuppliestothedesignatedlocationslistedon
thedeliveryscheduleidentifiedonthecontract,withinthree(3)businessdaysafterreceiptofa
requestforsupplies.

VII. DEVICE RELOCATION

A. For device relocations, the Contractor shall:

1. Providedevicerelocationservices,withina50‐mileradius,for100%ofthetotalnumberofdevices
ordered,foreachyearofthespecifiedperiodofperformance.(Forexample,ifthereare100
devicesordered,theContractorshallproviderelocationsforupto100devicesperyear.Thiscould
berelocatingthesamedevice100times,relocating100differentdevicesonetimeeachorany
othercombinationthereofeachyear.)Thedevicerelocationsshallnotrequireriggingorspecial
handling.DevicesshallnotberelocatedwithoutwrittenapprovalfromthedesignatedDLAPOC
andshallbecompletedwithinthirty(30)calendardaysafterreceiptofthewrittenrequest.
2. Includethefollowing:Breakdownandpackingofequipment,shipping,uncrating,re‐installation
andend‐usertraining.

3. Be responsible for any and all repairs that may be required following any relocation performed.

4. Uponcompletion,obtaincustomersignatureontheRemoval/RelocationReportcontainedwithin
Appendix#2andtheMFDHardDriveRemovalRecord(Appendix#3)ifapplicable.

VIII. TECHNICAL REFRESH

A. IntheeventtheContractorisnolongerabletoprovidetheproductsproposed,theContractormay,
onlyafterwrittenapprovalbytheContractingOfficer,removetheproductsfromthecontractand
providereplacementproductswhichshallmeetorexceedtheVolumeBandrequirementsaslistedin
thisSOW,atthecontractprice.
1. Replacementdevicesshallbenewertechnologythanthemodelstheyarereplacing.Ifthe
Contractorsubmitsnewmodelsfortesting,thedevicesshallbe“inproduction”andnotnear“end
oflife.”
2. Priortodelivery,ifreplacementdeviceshavenotbeenpreviouslytestedbyDLA,theyshallbe
testedasoutlinedinsectionXV.

IX. DEVICE REMOVAL

A. For device removal, the Contractor shall:

1. Removealldevicesandassociatedsupplieswithinthirty(30)calendardaysofcontractexpiration
orreceiptofamodificationsignedbytheContractingOfficer.

2. Notify the issuing Contracting Officer as soon as any delay in device removal is realized.

3. Priortodeviceremoval,removeallharddrivesandsurrenderthemtoDLA(oritsassignee).Upon
completionoftheharddriveremoval,theContractorshallobtaintherequiredsignaturesonboth
theRemoval/RelocationReport(Appendix#2)andtheMFDHardDriveRemovalRecord(Appendix
#3).Aftertheharddrivehasbeenremoved,ALLclassificationstickersshallberemovedprior
todeviceremoval/disposal.
4. TheGovernmentreservestherighttowithholdfinalpaymentifalldevicesarenotremovedfrom
thepremiseswithinthirty(30)calendardaysofcontractexpirationortermination.
5. 5. BesubjecttopaymentofalldisposalfeesincurredbytheGovernmentforanydevicesnotremoved
withinthirty(30)calendardaysofterminationorexpiration.Afterthistimeperiod,thedevices
willbeconsideredabandoned.

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 6 of 34

REVISION ‐ As of June 25, 2020

X. REPORTS

A. The Contractor shall provide the following reports:

1. Installation Report, as referenced in section IV.A.3.

2. Summary of On‐Site Training Report, as referenced in section V.D.

3. DeviceListingReport(MicrosoftExcelformat)shallbesubmittedviaWideAreaWorkFlow
(WAWF)totheDLAPOCwiththemonthlyinvoice.Thereportshallcontainanaccuratelistingof
alldevicesundercontract(model,serialnumber,location).

4. Removal/Relocation Report, as applicable, as referenced in section VII.A.6 and IX.A.

B. Uponrequest,theContractorshallprovidethefollowingreportswithin5businessdays,atnocostto
theGovernment:

1. Usage Report (Appendix #4) shall be submitted to the DLA POC.

2. ResponseTimeReportshallbesubmittedtotheDLAPOCandtheContractingOfficer.Thisreport
shallidentifythetechnician’sresponsetime,definedasthetimebetweenwhentheservicecallis
placedandwhenthetechnicianarrivesonsitetorepairtheequipment.Iftheissueisabletobe
resolvedonthephone,theresponsetimeshallbedefinedasthetimetheservicecallwasplaced
andwhentheissuewasresolvedoverthephone.
3. DeviceDowntimeReportshallbesubmittedtotheDLAPOC.Thisreportshallidentifythetimethe
equipmentwasinoperable/non‐functional.Downtimeisdefinedasthetimetheservicecallis
placednotifyingtheContractor’srepresentativethattheequipmentisinoperable/non‐functional
orwhenthetechnicianbeginsserviceontheequipmentifthedeviceisoperable/functionalupon
arrival.Inaddition,thereportshallincludeinformationrelativetothefrequencyofservicecalls,
productionvolumebetweenservicecalls,typesofrepairs,aswellaspartsrequired.
4. DeviceUptimeReportshallbesubmittedtotheDLAPOCandtheContractingOfficer.Thisreport
shallidentifythetimetheequipmentwasoperableandavailableandwillbeusedtoverifythe
requiredminimum95%monthlyavailablerate,asoutlinedinsectionVI.A.1.

XI. INVOICING

A. AllinvoicesshallbesubmittedwiththeDeviceListingReportviaWideAreaWorkFlow(WAWF)
andshallbesubmittedinUnitedStatesDollars.Thefollowingwebsiteprovidesadditional
informationregardingWAWFincludinginformationfor“vendorsgettingstarted”withthesystem:

https://wawf.eb.mil/xhtml/unauth/help/help.xhtml.

B. Fordevicesthatarerelocatedorremoved,invoicesshallincludetheRemoval/RelocationReport
(Appendix#2)andtheHardDriveRemovalRecord(Appendix#3)andtheBOL.Invoicessubmitted
withouttheapplicablereportsshallnotbepaid.

XII. NETWORK FUNCTIONALITY

A. DoDpolicyprohibitsthepublicationofnetworkconfigurationinformation;therefore,DoD
installationsshallnotfilloutpre‐installationsitesurveys.Therequiredinformationshallbe
providedattimeofinstallation.
B. TheContractorshallprovidedevicesthatshalloperateonandcoexistonanetworksupportingallof
thefollowing:

1. Internet Protocol Version 4 (IPv4), SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 7 of 34

REVISION ‐ As of June 25, 2020

2. Internet Protocol Version 6 (IPv6),

3. A hybrid of IPv4 and IPv6.

C. Support shall be provided for network configurations based on agency hardware/software.

XIII. NETWORK SECURITY

A. TheContractorshallprovidedevicesthatcanbeconfiguredtocomplywiththecurrentDefense
InformationSystemsAgency(DISA)SecurityTechnicalImplementationGuide(STIG)titled
MultifunctionDeviceandNetworkPrinterSTIG(latestversionandrelease),availableat:

https://cyber.mil/.

B. Contractorsshallmonitorindustrystandardvulnerabilitysites(e.g.http://nvd.nist.gov/,
https://www.us‐cert.gov/ncas/alerts,http://oval.mitre.org/)andtakeappropriateactionsiftheir
equipmentissubjecttoaknownvulnerability.WhenvulnerabilitiesareidentifiedbytheContractor,
DLAoritscustomers,theContractorshallprovideremediationfordistributiontoallinstalled
equipmentinaccordancewithUSCYBERCOMTASKORDregulationsunlessadifferenttimeperiodis
directedbyUSCYBERCOMviaDLA.TheTASKORDisForOfficialUseOnly.Thefollowingisauthorized
tobequotedfromtheTASKORDforreference:
1. AssuredComplianceAssessmentSolution(ACAS)assignsseverityscoresofcritical,high,medium
andlowtoplug‐infindings.
a. Criticalfindingsreflectdiscoveryofacommonvulnerabilityandexposure(CVE)thatposes
significantrisktotheconfidentiality,integrity,andavailabilityofDODINNetworks.Actionsto
mitigateorremediatecriticalvulnerabilitiesshallbeinitiatedupondiscoverwiththegoalof
mitigation/remediationwithinseven(7)calendardays.
b. Findingswithaseverityscoreofhighshallbeaddressedinthesamemannerasvulnerabilities
addressedviaInformationAssuranceVulnerabilityAlert(IAVA)directivesandmitigatedor
remediatedwithintwenty‐one(21)calendardaysofdiscovery.
c. Findingswithseverityscoresofmediumandlowshallbeaddressedinaccordancewithlocal
ApprovingOfficial(AO),InformationSystemSecurityManager(ISSM),orInformationSystem
SecurityOfficer(ISSO)guidanceuntilfurthernotice.
d. Inallinstances,DoDcomponentsshallconsiderexposuretothreat,missionimpact,sensitivity
ofdata,andcurrentmitigatingsecuritycontrolswhenprioritizingimplementationoffix

actions.

C. Intheeventremediationcannotbeachievedwithinthemandatedtimeline,theContractorshall
provideaPlanofActionandMilestonesandreceiveapprovalthereofbytheCustomer’sagency
AuthorizingOfficialordesigneeforriskacceptance.
D. AlldevicesshallbeInternationalOrganizationforStandardization(ISO)/InternationalElectrotechnical
Commission(IEC)15408(CommonCriteria)certifiedIAWCNSSP‐11usingtheNationalInformation
AssurancePartnership(NIAP)approvedcriteriaorequivalent.
1. AdeviceshallbeacceptableifitisincludedoneithertheNIAPCCEVSProductCompliantList
(https://www.niap‐ccevs.org/Product/)orCommonCriteriaPortalCertifiedProductslist

(http://www.commoncriteriaportal.org/products/).

2. AlldevicesshallhavecurrentISO/IEC15408certificationandrecertification,ifapplicable,before
theContractorcanschedulelabtime.SeesectionXIV.GuidanceforCommonCriteriaMaintenance
andReevaluationisavailableat:https://www.niap‐

ccevs.org/documents_and_guidance/ccevs/scheme‐pub‐6.pdf

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 8 of 34

REVISION ‐ As of June 25, 2020

E. AlldevicesshallbecapableofobtainingaccreditationthroughtheRiskManagementFramework(RMF)
forDoDInformationTechnology(IT).Aspartofthis,theContractoragreestoprovideallrequested
informationandworkingoodfaithwithDLAsotheDLAcustomerscanexpeditiouslyobtainRMF
accreditationpriortodevicedeliveryandinstallation.TheContractorshallalsoprovidedevicesfor
vulnerabilityandSTIGtestingtoDLAorcustomer’ssite.TheContractorfurtheragreesthatifthe
proposeddevice(s)doesnotobtainRMFaccreditation,thecontractorshallremovethedevice(s).
InformationregardingRMFisfoundinRiskManagementFramework(RMF)forDoDInformation
Technology(IT)Instruction8510.1dated12March2014:
http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf.InordertomaintainRMFand
STIGcompliance,devicesarerequiredtohavethemostup‐to‐datefirmware,outoutlinedinsection

II.A.10.

F. TheContractorshallsupplyaSMARTCARDPublicKeyInfrastructure(PKI)Solutionwhichiscompliant
withDODI8520.03andNISTFIPS201(PIV)standards.Thecontractorshallprovidecardreadersthat
shallreadandprocessallapprovedCACandPIVcards.TheContractorshallmaintaincompliancewith
DoD‐wideSMARTCARDandDoDPKIstandards,andsupportallapprovedphysicalcardsduringthefull
leaseperiod.
G. ThecontractorshallprovideaSMARTCARDPKISolutionwithSIPRNettokencapability,whichis
compliantwithDoDrequirementsforPK‐enablingandinteroperabilityassetforthinDODI8520.02.
TheContractorshallprovidecardreadersthatshallreadandprocessallapprovedSIPRNettoken
cards.TheContractorshallprovidedevicesupportsystemsthatincorporatetheuseofPKIfor
encryptionofinformationintransitoratrest.TheContractorshallprovidedevicesthatarecompatible
with3.3voltSafeNetSC650tokenandthatarecompatiblewiththe90MeterMiddlewaresolutionfor
CAC,knownasCACSmartCardManager‐90.TheContractorshallmaintaincompliancewithDoDwide
SIPRandDoDPKIstandards,andsupportallapprovedphysicalcardsandfirmwareduringthefull
leaseperiod.ForcurrentDODIinstructionsgoto:

http://www.dtic.mil/whs/directives/corres/ins1.html.

H. TheContractorshallensurethatCAC/SIPRtokenauthenticationisavailableforscanning,printingand
copyingandshallbe:

1. Capable of digitally signing emails using the senders DoD PKI Certificate(s).

2. Capable of encrypting emails using the receivers DoD PKI Certificate(s).

3. Capable of scan to file on networked devices.

4. In compliance with Homeland Security Presidential Directive‐12 (HSOP‐12).

I. The Contractor shall produce certificates of compliance, if requested.

XIV. TESTING

A. UnlesspreviouslytestedandapprovedbyDLA,alldevicesproposedinresponsetothecontractshallbe
testedforcompliancewithNetworkSecurityasdefinedinsectionXIIIafteraward.
B. Theestimatedtimefortestingistwenty(20)businessdays.Testingandapprovalshallbeperformed
bytheDLAInformationOperationsEMSDivisioninconjunctionwiththeContractor’sassistance.The
Contractorshallprovideonsiteengineeringassistanceandothersupportnecessarytoconfigure,setup,
andtesttheequipmentasneeded.
1. DLAhasagreementswithourDoDcustomerstotestdevicestomeetDoDRMFandSTIG
Compliance.Ifalldevicespassthepreliminarytestingprocess,DLAshallsubmitacompliance
memorandumtotheContractorinformingthemthatthedeviceshavepassedthepreliminary
testingprocess.Insomecases,priortobeingaddedtotheDLAcustomer’snetwork,additional

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 9 of 34

REVISION ‐ As of June 25, 2020

certificationproceduresandtestingshallberequiredpriortoriskacceptance.IfrequiredbyDLA,
theContractorshalldelivertestdevicestotheDLAcustomerpriortoproceedingwithinstallation.
DLAshallexerciseduediligencetoassistwithtechnicalmitigationandresolveanyquestions
and/orconcernsraisedbythatagencyduringthetestingreviewprocess.
2. FordevicesorderedtobeinstalledonOCONUSNavynetworks,theContractorshallprovide
networkedequipmentthatshallbetestedtooperateOutsidetheContiguousUnitedStates
(OCONUS)NavyEnterpriseNetwork(ONE‐Net)forthe"printer,scannerandfax"functions.This
equipmentshallbeaccreditedtooperateandaddedtotheONE‐NetApprovedProductsList(APL)
priortothedeliveryofdevices.
3. Ifthedevicesdonotpassanyofthetestingproceduresforanyreason,DLAshallnotproceedwith
installationofsaiddevicesatthecustomerlocationsandDLAshallterminatethecontract.

C. A device shall not be tested if it cannot be assigned to one of the Volume Bands as outlined in section V.

D. Thedevicesshallbedeliveredwithallrequiredaccessories,software,firmware,etc.Outputpaper
handlingaccessoriesarenottestedandshallnotbedeliveredtothelab.

E. Approved devices previously submitted to DLA for testing are not required to be re‐tested.

F. TheContractorshalldeliverthedevicesforeachVolumeBandseries,undereachFunctionalArea,to
DLAInformationOperationsJ67Elocatedat430MifflinAvenue,Building430,NewCumberland,PA
17071,fortesting,atnocosttothegovernment.Deliverycoordinationshalltakeplacewithinfive(5)
businessdaysofcontractaward.
G. TheContractorshallresolvenon‐complianceissuesasquicklyaspossible.Iftheissuescannotbe
resolvedwithinfourteen(14)calendardays,thetestshallbesuspended.Afterthenon‐compliance
issuesareresolvedbytheContractor,thesuspendedsessionshallbescheduledwhenlabtimeisnext
available.IfrequestedbyDLA,theContractorshallremovetheirdevicesfromthelabtoavoiddelaying
thenextscheduledtest.
H. ForalldevicestestedandplacedontheDLAcontract,theContractorshallcollaboratewiththeDLA
POCtodevelopthetestingresultspackage.TheContractorshalldevelopthedeviceImplementation
Guide.TheImplementationGuideshallprovidestep‐by‐stepinstructionsandscreenshotstoconfigure
thedevicesinaccordancewiththetestingresults.GovernmentacceptanceoftheImplementationGuide
isatthediscretionoftheDLAEMSDivision.
I. ThesecurityrequirementssetforthinthisSOWareminimumdevicespecificationsandhavebeen
identifiedasthebasicrequirementscommonacrossGovernmentagencies.Thesearetheminimum
securityrequirementsapplicabletoalldevicesawardedunderthiscontract.Eachorderingactivitymay
haveitsownhardware/softwareacceptanceprocesses.Alldevicesshallbesubjecttoorderingactivity
hardware/softwareevaluationprocesses.Ifthedevicefailsasecurityevaluation,theContractormay
selectadifferenttechnologyormitigatethefailedcontrolstofulfillthisrequirement.TheContractor
shallbeavailabletomeetwiththeinformationtechnology(IT)andsecuritypersonnelatamutually
convenienttimeduringtheevaluationprocess,andshallidentifyamutuallyacceptablesolution.The
Contractorshallprovidethenecessaryequipmentorexpertisetocompletesecuritytestingand
integrationintotheexistingenvironment.ThecustomeragencymayrequiretheContractortoship
devicestoaspecificlocationfortestingattimeofaward.
J. If,duringthelifeofthecontract,arequirementinsectionXIIandXIIIischanged,updatedorrevised,
theContractorshallcomplywiththemostcurrentversionoftherequirement.
K. TheContractorshallremoveallhardwarefromtheDLAtestlabwithinfourteen(14)calendardays
uponnotificationoftestcompletion.

XV. SUPPLY CHAIN RISK MANAGEMENT

A. Aspartofitsquote,theContractorshallprovidewrittendocumentationdemonstratinghowthe
integrityandsecurityofallequipment,componentsthereof,repairpartsandconsumablesitwill
provideand/oruseinperformingthiscontractwillmeetthestandardssetforthinNationalInstituteof

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 10 of 34

REVISION ‐ As of June 25, 2020

StandardsandTechnology(NIST)SpecialPublication800‐61.Thisdocumentationshallclearly
demonstratehowtheContractoristakingeffectivemeasurestomitigatetherisksofforeign
intelligenceservices,terroristgroups,orothersfrominsertingunwantedfunctionalityintothesupplies
and/orservicesDLAreceivesthroughthiscontract.Additionally,thisdocumentationshallprovide
specificdetailsofwhat—
1. PoliciestheContractorhasinplacetopreventboth(a)theuseofcounterfeitoralteredequipment,
componentsthereof,consumablesandpartsand(b)theirintroductionintotheContractor’ssupply

chain;

2. SecurityprocedurestheContractorusestotrackthechainofcustodyofequipment,components
thereof,consumablesandparts,toincludewhilethismaterialisinstorageandintransit;and
3. StepstheContractortakestoensuretheintegrityandauthenticityofnew,refurbishedor
remanufacturedequipment,componentsthereof,repairpartsandconsumablestoprevent
tamperingsotheywillperformaccordingtospecificationswithoutadditionalunwanted

functionality.

B. TheContractorshallcontinuouslymeetthestandardsofNISTSpecialPublication800‐61whiletaking
effectivemeasurestomitigatetherisksofforeignintelligenceservices,terroristgroups,orothersfrom
insertingunwantedfunctionalityintothesuppliesand/orservicesprovidedthroughthiscontract.
Uponrequest,theContractorshallprovidewrittendocumentationmeetingallrequirementssetforth
inpartA,above.

XVI. ENTERPRISE MANAGEMENT TOOL

A. TheContractorshallprovideanEnterpriseManagementToolthatmanagesdevices.The
management/monitoringsoftwaretoolshallresidewithinthecustomers’networkinordertomonitor,
manageandgenerateusagetofacilitatecontinuedfleetoptimizationreports.
B. TheEnterpriseManagementToolshalluseSNMPV3.Themanagementtoolshallmonitormeterreads,
volume,usage,supplylevels,andissuenotifications/alertsaboutdevicestatus.Thenotifications/alerts
shallnotifydesignatedpersonnelwhentoorderconsumablesandrequestmaintenance/repair

services.

XVII. INSTALLATION SECURITY REQUIREMENTS

A. TheContractorshallcomplywithallrulesandregulationstoobtainGovernmentinstallationaccessin
ordertomeetallresponsetimesidentifiedwithintheSOW.
B. TheContractorshallcomplywithGovernmentbaseaccessrequirementsassetforthinthebase/
commandregulations.
C. TheContractorshallberesponsibleforanyandallfeesassociatedwiththeapplicationprocessand/or
enrollmenttoaccessanyinstallationorfacility..
D. FordevicesclearedforCLASSIFIEDmaterial,theContractor’srepairtechniciansshallhaveaDoD
securityclearanceequaltoorhigherthantheclassificationofthedeviceandshallprovideverification
whenrequested.

XVIII. GENERAL CONDITIONS

A. TheContractorshallassignasinglepointofcontact(POC)tocoordinatewiththeContractingOfficerin
allaspectsofthiscontractwithin3businessdaysofreceiptoftheaward.TheContractorshallprovide
itsassignedPOC’sname,title,businessaddress,phonenumberandemailaddresstotheContracting

Officer.

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 11 of 34

REVISION ‐ As of June 25, 2020

B. TheContractorshallcomplywiththeHealthInsurancePortabilityandAccountabilityAct(HIPAA)
wheninstallingdevicesatGovernmentmedicalsites.
C. TheContractorshallcomplywiththeSection508accessibilityrequirements.Bysubmissionofitsoffer,
theContractoraffirmsthatitsElectronicInformationTechnology(EIT)suppliesandservicesare
accessibleasoutlinedinthelaw,thestandard,andFARSubpart39.2.TheContractorshallcompletethe
VoluntaryProductAccessibleTemplate(VPAT®)document(Appendix#5).Ifapplicable,Contractors
shallindicatewheretheirSection508EITcomplianceinformationisavailableforreview(e.g.,
Contractor’swebsiteorotherlocationtheContractingOfficercanaccess).TheContractingOfficermay
requireademonstrationofSection508compliancepriortoaward.

XIX. APPENDICES

A. Appendix #1: Installation Report

B. Appendix #2: Removal/Relocation Report

C. Appendix #3: Hard Drive Removal Record

D. Appendix #4: Usage Report

E. Appendix #5: VPAT® Template

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 12 of 34

REVISION ‐ As of June 25, 2020

Appendix #1 INSTALLATION REPORT

Activity Name Customer Address

Customer POC Phone # Customer POC Email

Contract #

CLIN# Manufacturer Model # Serial # Install

Date

Building

Number

Floor Number/ Room Number

Continue on the back, if needed. Note: A Delivery Schedule or Spreadsheet can be used as an attachment to this install report.

Customer Accepting Receipt of Device (Print): Customer Signature

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 13 of 34

REVISION ‐ As of June 25, 2020

CLIN# Manufacturer Model # Serial # Install

Date Building Number

Floor Number/ Room Number

(Page 2 – Appendix #1)

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 14 of 34

REVISION ‐ As of June 25, 2020

Appendix #2 REMOVAL/RELOCATION REPORT

Activity Name Customer Address

Customer POC Phone # Customer POC Email

Contract #

CLIN# Manufacturer Model # Serial # Date Building# / Floor # / Room #

Continue on the back, if needed. Note: A Delivery Schedule or Spreadsheet can be used as an attachment to this install report.

*HARD DRIVE REMOVAL (SIGNATURES REQUIRED)*

Customer Approving Removal of Device (Print Name):

Must be the EMS DLA Information Operations POC, or designated representative.

Customer Signature

Information Assurance Manager (IT) Receipt of HD (Print

Name):

Information Assurance Manager (IT)

Signature

Contractor Technician (Print Name): Technician Signature

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 15 of 34

REVISION ‐ As of June 25, 2020

CLIN# Manufacturer Model # Serial # Date Building# / Floor # / Room #

(Page 2 ‐ Appendix #2)

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 16 of 34

REVISION ‐ As of June 25, 2020

Appendix #3 Equipment Management Solutions Hard Drive Removal Record

Form log number

FY ‐ SEQ#

DLADCSVC ‐ ‐

Contract number

Customer (Agency/Command)

Drive manufacturer and model

Hard drive serial number

MFD serial number

Date removed

Printed name of technician removing hard drive

Signature of technician removing hard drive

Drive classification ☐ Classified (up to Secret) ☐ Unclassified (CUI)

Hard drive disposition

☐ Retained by customer ☐ Shipped to DLA Information Operations

☐ Shipped to NSA

Printed name of EMS Division representative accepting drive for DLA Information Operations or customer accepting drive

Signature of EMS Division representative accepting drive for DLA information Operations or customer accepting drive

Printed name/title of person sanitizing hard drive

Signature of person sanitizing hard drive

Date destroyed

Printed name/title verification after Degaussing and Crushing

Signature for verification after degaussing and crushing

Degausser/crusher location ☐ DSI HD‐1T (Phil) ☐ EM/Garner Model TS‐1 (NOR)

☐ SEM Model 0101(Phil) ☐ SEM Model 0101(NOR)

Post‐Sanitization destination (recycling center)

Contact phone number to degausser operator and verification personnel

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 17 of 34

REVISION ‐ As of June 25, 2020

Appendix #4 USAGE REPORT

Monochrome Color

Contract

Model Serial # Install Date

(MM/DD/YYYY)

Beginning

Meter

Ending

Meter Usage

Beginning

Meter

Ending

Meter Usage

Was Meter

Read

Estimated?

(Yes/No)

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 18 of 34

REVISION ‐ As of June 25, 2020

Appendix #5

[Company] Accessibility Conformance Report

(Based on VPAT® Version 2.4)

Name of Product/Version:

Report Date:

Product Description:

Contact Information:

Notes:

Evaluation Methods Used:

Applicable Standards/Guidelines

This report covers the degree of conformance for the following accessibility standard/guidelines:

Standard/GuidelineIncludedInReport
WebContentAccessibilityGuidelines2.0LevelA(Yes/No)
LevelAA(Yes/No)
LevelAAA(Yes/No)
WebContentAccessibilityGuidelines2.1LevelA(Yes/No)
LevelAA(Yes/No)
LevelAAA(Yes/No)
RevisedSection508standardspublishedJanuary18,2017andcorrected
January22,2018

(Yes / No )

EN301549AccessibilityrequirementssuitableforpublicprocurementofICT
productsandservicesinEurope,‐V3.1.1(2019‐11)

(Yes / No )

Terms

The terms used in the Conformance Level information are defined as follows:

Supports:Thefunctionalityoftheproducthasatleastonemethodthatmeetsthecriterionwithoutknown
defectsormeetswithequivalentfacilitation.
PartiallySupports:Somefunctionalityoftheproductdoesnotmeetthecriterion.
DoesNotSupport:Themajorityofproductfunctionalitydoesnotmeetthecriterion.
NotApplicable:Thecriterionisnotrelevanttotheproduct.
NotEvaluated:Theproducthasnotbeenevaluatedagainstthecriterion.ThiscanbeusedonlyinWCAG

2.0 Level AAA.

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 19 of 34

REVISION ‐ As of June 25, 2020

Revised Section 508 Report Notes:

Chapter 3: Functional Performance Criteria (FPC) Notes:

Criteria Conformance Level Remarks and Explanations

302.1WithoutVision.
Whereavisualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatdoesnotrequireuservision.
302.2WithLimitedVision.
Whereavisualmodeofoperationisprovided,ICTshallprovideatleast
onemodeofoperationthatenablesuserstomakeuseoflimitedvision.
302.3WithoutPerceptionofColor.Whereavisualmodeofoperationis
provided,ICTshallprovideatleastonevisualmodeofoperationthat
doesnotrequireuserperceptionofcolor.
302.4WithoutHearing.
Whereanaudiblemodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatdoesnotrequireuserhearing.
302.5WithLimitedHearing.
Whereanaudiblemodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatenablesuserstomakeuseoflimited

hearing.

302.6WithoutSpeech.
Wherespeechisusedforinput,control,oroperation,ICTshall
provideatleastonemodeofoperationthatdoesnotrequireuser

speech.

302.7WithLimitedManipulation.Whereamanualmodeofoperation
isprovided,ICTshallprovideatleastonemodeofoperationthatdoes
notrequirefinemotorcontrolorsimultaneousmanualoperations.
302.8WithLimitedReachandStrength.
Whereamanualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatisoperablewithlimitedreachand
limitedstrength.
302.8WithLimitedReachandStrength.
Whereamanualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatisoperablewithlimitedreachand
limitedstrength.
302.9WithLimitedLanguage,Cognitive,andLearningAbilities.ICT
shallprovidefeaturesmakingitsusebyindividualswithlimited
cognitive,language,andlearningabilitiessimplerandeasier.

Chapter 4: Hardware Notes:

Criteria Conformance Level Remarks and Explanations

402.1General.(ClosedFunctionality)
ICTwithclosedfunctionalityshallbeoperablewithoutrequiringthe
usertoattachorinstallassistivetechnologyotherthanpersonal
headsetsorotheraudiocouplers,andshallconformto402.

Heading cell – no response required Heading cell – no response required

402.2.1InformationDisplayedOn‐Screen.
Speechoutputshallbeprovidedforallinformationdisplayedon‐

screen.

402.2.2TransactionalOutputs.
Wheretransactionaloutputsareprovided,thespeechoutputshall
audiblyprovideallinformationnecessarytoverifyatransaction.
402.2.3SpeechDeliveryTypeandCoordination.
Speechoutputshallbedeliveredthroughamechanismthatisreadily
availabletoallusers,including,butnotlimitedto,anindustrystandard
connectororatelephonehandset.Speechshallberecordedordigitized
human,orsynthesized.Speechoutputshallbecoordinatedwith

SP7000-20-Q-1060 Attachment 1 - Statement of Work (SOW) Page 20 of 34

REVISION ‐ As of June 25, 2020

Criteria Conformance Level Remarks and Explanations

informationdisplayedonthescreen.
402.2.4UserControl.
Speechoutputforanysinglefunctionshallbeautomatically
interruptedwhenatransactionisselected.Speechoutputshallbe
capableofbeingrepeatedandpaused.
402.2.5BrailleInstructions.
Wherespeechoutputisrequiredby402.2,brailleinstructionsfor
initiatingthespeechmodeofoperationshallbeprovided.Brailleshall
becontractedandshallconformto36CFRpart1191,AppendixD,
Section703.3.1.
402.3.1PrivateListening.
WhereICTprovidesprivatelistening,itshallprovideamodeof
operationforcontrollingthevolume.WhereICTdeliversoutputbyan
audiotransducertypicallyhelduptotheear,ameansforeffective
magneticwirelesscouplingtohearingtechnologiesshallbeprovided.
402.3.2Non‐privateListening.
WhereICTprovidesnon‐privatelistening,incrementalvolumecontrol
shallbeprovidedwithoutputamplificationuptoalevelofatleast65
dB.Afunctionshallbeprovidedtoautomaticallyresetthevolumeto
thedefaultlevelaftereveryuse.
402.4CharactersonDisplayScreens.
Atleastonemodeofcharactersdisplayedonthescreenshallbeina
sansseriffont.WhereICTdoesnotprovideascreenenlargement
feature,charactersshallbe3/16inch(4.8mm)highminimumbased
ontheuppercaseletter“I”.Charactersshallcontrastwiththeir
backgroundwitheitherlightcharactersonadarkbackgroundordark
charactersonalightbackground.
402.5CharactersonVariableMessageSigns.
Charactersonvariablemessagesignsshallconformtosection703.7
VariableMessageSignsofICCA117.1:2009.
403.1Biometrics
Whereprovided,biometricsshallnotbetheonlymeansforuser
identificationorcontrol.
404.1PreservationofInformationProvidedforAccessibility
ICTthattransmitsorconvertsinformationorcommunicationshallnot
removenon‐proprietaryinformationprovidedforaccessibilityorshall
restoreitupondelivery.
405.1Privacy.
Thesamedegreeofprivacyofinputandoutputshallbeprovidedtoall
individuals.Whenspeechoutputrequiredby402.2isenabled,the
screenshallnotblankautomatically.
406.1StandardConnections
Wheredataconnectionsusedforinputandoutputareprovided,at
leastoneofeachtypeofconnectionshallconformtoindustry
standardnon‐proprietaryformats.
407.2Contrast.
Whereprovided,keysandcontrolsshallcontrastvisuallyfrom
backgroundsurfaces.Charactersandsymbolsshallcontrastvisually
frombackgroundsurfaceswitheitherlightcharactersorsymbolsona
darkbackgroundordarkcharactersorsymbolsonalightbackground.
407.3.1TactilelyDiscernible.
Inputcontrolsshallbeoperablebytouchandtactilelydiscernible
withoutactivation.
407.3.2AlphabeticKeys.
Whereprovided,individualalphabetickeysshallbearrangedina
QWERTY‐basedkeyboardlayoutandthe‘‘F’’and‘‘J’’keysshallbe
tactilelydistinctfromtheotherkeys.
407.3.3NumericKeys.

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .