Attachment 1 - Test and Checkout (TACO) Cart SOW.pdf

DEPARTMENT OF THE AIR FORCE

MEDIUM ALTITUDE UNMANNED AIRCRAFT SYSTEMS DIVISION

WRIGHT-PATTERSON AIR FORCE BASE, OHIO 45433

STATEMENT OF WORK

FOR

Test And Check Out (TACO) Cart

Contract Number: FA8689-26-Q-B001 Company Name TBD

Date: 22 April 2026

Approved By: ___________________________________________

Tyler Kelley, 2d Lt, USAF Deputy Section Chief, Operations Section MQ-9 Production and Retrofit Branch, AFLCMC/WIIP Medium Altitude UAS Division

Controlled by: AFLCMC/WII CUI Categories: None

Distribution Statement: A POC: 2d Lt Tyler Kelley, tyler.kelley.10@us.af.mil

Reproduction, disclosure, or dissemination of this document in whole or part, is prohibited except with permission of AFLCMC/WII. Authority: AFR 205–1, and the MQ-9 Enterprise Security

Classification Guide.

DISTRIBUTION STATEMENT: A

Distribution authorized for public release.

mailto:tyler.kelley.10@us.af.mil

Contents

1. Scope

1.1 Background

1.2 Specific Objectives

1.2.1 Mobility

1.2.2 Data Decryption and Decoding

1.2.3 Shade Features

1.2.4 Temperature Control

1.2.5 Communication Capabilities

1.2.6 Hardware

1.2.7 Telemetry Measurement

2. Applicable Documents and Guidance

3. Requirements

3.1 Technical Requirements

3.1.1 Hardware Development

3.1.2 Engineering: System Architecture and Technical Data Package

3.1.3 Telemetry Measurement Capability

3.2 Configuration Management (CM)

3.2.1 Parts Control

3.3 Program Planning, Scheduling, and Reporting

3.4 Test Observations and Issues/Deficiencies Reports

3.5 Data Management

3.6 Quality Assurance

3.7 Commercial Manuals

4. Bills of Materials (BOM) Reporting

5. Counterfeit Parts Control Program

6. Risk Management

7. Safety Engineering

7.1 Safety Assessment Report

7.2 Test/Inspection Report

7.3 Electromagnetic Capability

8. Product Support Management

8.1 Proposed Spare Parts List

8.2 Packaging, Handling, Storage & Transportation

8.3 Training & Training Support

8.4 Government Property Regulations and Guidance

8.5 Contractor Responsibility

8.6 Government Property

9. Core Tasks

9.1 Program Management

9.1.1 Program Manager (PM)

9.1.2 Subcontractor Management

9.1.3 Associate Contractor Agreement (ACA)

9.1.4 Contract Management Plan (CMP)

9.2 Program Planning, Scheduling, and Reporting

10. Cybersecurity

10.1 RMF Artifacts

10.2 Security Assessments/Evaluations

10.3 Cybersecurity Deliverables

11. CDRL Table of Contents

12. Appendices

12.1 Appendix A: Document and Guidance References

12.1.1 Government Documents

12.1.2 Non-Government

12.1.3 Other Reference Documents

12.1.4 Definitions and Acronyms

1. Scope This Statement of Work (SOW) describes the requirements for the Test And Check Out (TACO) Cart. The Contractor shall provide execution support across all threads of work, which include mobility, data decryption and decoding, shade features, video monitoring, streamlined communication capabilities, and demonstrating integration for MQ-9 electromagnetic testing.

For each of these threads of work, the Contractor shall deliver a a transportable platform-either a cart or wagon-equipped with wheels to allow for smooth, stable movement to and from the flight line, whether pulled or carried and designed for telemetry measurement and operations within an electromagnetic interference environment. In addition to providing execution support, the Contractor shall be responsible for building the cart, implementing all applicable hardware, installing the IADS software, and adhering to the interface standards necessary to integrate with Medium Altitude UAS Division systems (e.g.AGM-114 Telemetry Kit, GBU-39 TM Kit, etc).

1.1 Background

This system is being designed, developed, produced, and deployed to provide a safer and more efficient developmental testing environment during telemetry testing.

1.2 Specific Objectives

1.2.1 Mobility

The TACO Cart shall be easily maneuverable and immobile while in operation. An operator shall be able to maneuver the cart to and around the aircraft to conduct the required tests and it will be a rugged and weatherproof designed with several entry points for convenient access.

1.2.2 Data Decryption and Decoding

The TACO Cart shall be able to receive and decode information taken from the test article (weapon, pod, etc.) and display the decoded data in a human-readable, engineering-unit format.

1.2.3 Shade Features

The cart enclosure shall have large, gas-assisted doors on its front and back sides that hinge upward and lock in place to provide shade on the flight line. A work surface not less than 15 inches deep shall be required for drawings and equipment. The work surface shall be 30 inches from the ground. The work surface shall be composed of at least three panels that can be lifted for storage underneath. The shelter cabinet front and back shall be lit with enclosed, sufficient illumination for flight line operations.

1.2.4 Temperature Control

The shelter shall protect equipment from ambient temperatures ranging from 15°F to 120°F and shall be capable of full operation when heat-soaked within this temperature range. The shelter shall be insulated on its top and sides. The Contractor shall install an Environmental Control Unit (ECU) or combination of systems (e.g., air conditioner and exhaust fans) to maintain an internal equipment temperature within all components' operational limits while operating in the external ambient environment. Unused rack mount openings shall be sealed with blank panels. The rear of the racks shall have doors to maintain cooled air around the equipment while the main enclosure door is open.

1.2.5 Communication Capabilities

The TACO Cart shall include a configurable onboard recording system. This system shall be capable of recording a minimum of two channels of Pulse Code Modulation (PCM) data, four channels of MIL-STD-1553 data, and one channel of ARINC 429 data. The cart shall be equipped with an Ultra-High Frequency (UHF) receive/transmit capability for communication with aircraft and control rooms.

1.2.6 Hardware

The TACO Cart shall be equipped with PCMCIA card readers for viewing recorded data. Inside, a shock-mounted rack system will provide secure mounting for internal components. The Contractor shall provide a steerable horn antenna and a multiband button antenna capable of receiving L, S, and C band frequencies; these antennas shall be patchable. An oscilloscope and spectrum analyzer shall be mounted for use in viewing amplitude and time data from the receiver and modulated signal from the antenna, as well as for troubleshooting. The Contractor shall install front-mounted power strips for non-mounted equipment. A video distribution amplifier shall be installed to distribute the receiver output to the oscilloscope, bit synchronizer, and patch panels. The chassis shall support the weight of the shelter with all equipment mounted and shall be fitted with a suspension system to protect the equipment from shock damage while towing.

The chassis shall roll on 4 pneumatic tires capable of supporting the shelter's weight. The cart shall be towable by standard flight line vehicles and should be no larger than approximately 72" wide x 48" high and approximately 60" long. The shelter shall have a pintle ring for towing.

Doors shall have the ability to be secured and lock through the use of a physical padlock.

1.2.7 Telemetry Measurement

The TACO Cart shall provide a system that can receive telemetry signals in the L/S/C bands.

The system's TM receiver shall support, at a minimum, Advanced Range Telemetry (ARTM) waveforms and encoding, including Continuous Phase Modulation (CPM), Space-Time Coding (STC), and Low-Density Parity-Check (LDPC). The Contractor shall integrate and test these capabilities as a primary feature of the cart.

2. Applicable Documents and Guidance The documents listed in Appendix A are applicable to this Statement of Work (SOW) only to the extent specifically cited within the body of this SOW. Unless otherwise stated, the version of each document shall be the most current as of the SOW date. Revisions to Contractor documents require Government concurrence prior to implementation. Any second-tier references within the cited documents that are not explicitly imposed by this SOW shall be for guidance only.

3. Requirements

3.1 Technical Requirements

The Contractor shall comply with its standard internal processes, except as modified by this SOW. The Contractor shall ensure the TACO Cart meets the functional, performance, and interface requirements described in this SOW. The Contractor shall provide comprehensive support to ensure successful completion and performance of the project. This support includes providing and installing necessary equipment according to specifications, delivering the technical documentation specified herein, performing logistical activities, and providing training and operational support.

3.1.1 Hardware Development

The Contractor shall procure and install a rack-mountable, multi-band telemetry receiver. The receiver shall be capable of receiving L, S, and C frequency bands and must support, at a minimum, IRIG 106 Chapter 4 and Chapter 7 Advanced Range Telemetry (ARTM) waveforms, including but not limited to CPM, STC, and LDPC. An example of a compliant product is the Quasonix QSX-RDMS-3R1D-E1-1111-00-14-CS-EQ, or a technically equivalent product. This receiver must be integrated into the system, ensuring it is correctly configured and operational as per its manufacturer’s specifications. The integration process shall include any necessary firmware updates, testing for compatibility with existing systems, and verification of functionality.

The Contractor shall acquire, configure, and integrate a ruggedized, configurable data recording system. The system shall be capable of simultaneously recording pre-existing, network-packetized data streams containing a minimum of two channels of Pulse Code Modulation (PCM) data, four channels of MIL-STD-1553 data, one channel of ARINC 429 data, and voice, as well as recording direct video feeds. An example of a compliant product is the AMPEX TuffCORD, or a technically equivalent product. Integration efforts will include ensuring data compatibility with the rest of the system, proper installation in the designated rack, and performing functional tests to confirm that the recorder operates correctly and records data as required.

The Contractor shall install and configure a multi-band, low-profile, omnidirectional button antenna capable of receiving, at a minimum, L-Band, S-Band, and C-Band frequencies. An example of a compliant product is the Haigh-Farr BN1-13110, or a technically equivalent product. This includes verifying the antenna’s placement for optimal signal reception, connecting it to the system using the appropriate RF cabling, and conducting performance tests to verify operational efficiency.

The Contractor shall integrate a Spectrum Analyzer (1GHz-6GHz) into the system. The integration process will involve mounting the analyzer in the designated rack space, connecting it via the appropriate RF cabling, and confirming functional integration through comprehensive testing.

The Contractor shall procure, install, and configure a ruggedized 1U rackmount computer. This shall include installing necessary software, ensuring network connectivity, performing initial system setup, and conducting tests to ensure the computer’s compatibility with the integrated system.

The Contractor shall install a 1U rack mounted pull-out drawer display with a slide-out keyboard and mouse. Installation shall include mounting the display in the designated rack, ensuring proper cabling, and verifying functionality of both display and input devices.

The Contractor shall integrate a PCIe-based telemetry decommutator card. The card must be compatible with the system's rackmount computer and capable of processing the clock and data outputs from the telemetry receiver. An example of a compliant product is the Acroamatics 1632AP-2, or a technically equivalent product. This task includes ensuring that the decom card is properly seated in its slot, connecting all necessary interfaces, and running diagnostic tests to validate its operation within the system.

The Contractor shall install the 2U uninterruptible power supply (UPS) in the system rack. This includes connecting the UPS to the primary power source, configuring failover settings, and verifying its operational status to ensure continuous power supply during outages.

The Contractor shall procure and install the following RF 50-ohm, coaxial cabling:

• Antenna to splitter: NM to SMAM, 5-foot QTY 1

• Splitter to RDMS: SMAM to NM, 5-foot, QTY 1

• Splitter to SpecA: SMAM to NM, 10-foot, QTY 1

Installation shall include proper termination, routing, and securing of cables to prevent signal loss and interference. Testing of each connection shall be conducted post-installation to ensure proper signal transmission.

The Contractor shall install a rack mountable power strip with 10 outlets and surge protection.

Installation shall include securing the power strip in the designated rack location, connecting it to the power supply, and ensuring all connected devices are protected from surges.

The Contractor shall procure and, if necessary, install the following RF components:

• 3dB Splitter: Required if the Spectrum Analyzer is used

• SMA Torque Wrench: Utilized for securing SMA connections.

• N-Type Torque Wrench: Utilized for securing N-type connections

• RF Adapter Kit:

• SMAF to NF

• SMAF to NM

• SMAM to NF

• SMAM to NM

• TNCF to SMAM

• TNCF to SMAF

• TNCM to SMAM

• TNCM to SMAF

The Contractor shall ensure that all RF components are correctly installed and secured, with proper torque applied to all connections. This includes any necessary adapters required to establish correct interfaces between components.

The Contractor shall procure and terminate two 10-foot RG-59, 75-ohm clock and data cables with bayonet-style connectors. Termination shall be matched to the inputs/outputs on the RDMs and Acroamatics decom cards. Post-termination cables shall be tested for signal integrity and proper operation.

The Contractor shall supply and install all interconnect cabling and aluminum patch panels with laser-etched verbiage for connectors. All cabling and panel layouts shall be in accordance with the Interconnect Wiring Diagram developed by the Contractor and delivered under CDRL A004.

The Contractor shall furnish and install two Environmental Control Units (ECUs) mounted on the exterior of the enclosure. The Contractor shall ensure the ECUs are installed following the manufacturer’s guidelines and operational standards.

The Contractor’s integration, test, and operations support shall include the following:

• Verification of equipment installation in accordance with provided specifications

• Conducting necessary tests to ensure all components function correctly

• Providing operational support to facilitate successful deployment and use of equipment

3.1.2 Engineering: System Architecture and Technical Data Package The Contractor shall develop and deliver a complete Technical Data Package (TDP) that documents the final "as-built" configuration of the TACO Cart. The TDP shall be sufficient to support system integration, maintenance, and future modification activities. The specific content and format for this TDP shall be in accordance with the tailored requirements specified on DD- Form 1423 for CDRL A004. The TDP shall consist of, at a minimum, the following:

1. 2D Drawings: A complete set of 2D drawings including:

a. Installation/Assembly Drawings: Depicting the assembly of the integrated system.

b. Fabrication Drawings: For all custom-designed and manufactured parts.

c. Schematic and Interconnect Wiring Diagrams: Illustrating all electrical, data, and RF signal paths between components. Each cable and connector shall be clearly labeled with a unique identifier traceable to the Bill of Materials (BOM).

All TDP data shall be delivered in its native, editable source file format (e.g., SolidWorks .SLDPRT/.SLDASM) and in a neutral, viewable format (PDF for 2D drawings).

(CDRL A004, Product Engineering Design Data and Associated Lists (Product Drawing/Model Package), DI-SESS-81000F/T)

3.1.3 Telemetry Measurement Capability

The Contractor shall utilize Commercial components that are compliant with IRIG 106. The end-to-end functionality of the telemetry measurement capability, including the reception of ARTM waveforms, shall be verified during the Factory Acceptance Test (FAT) described in paragraph 7.2.

3.2 Configuration Management (CM)

The Contractor shall employ a simplified CM approach suitable for a system primarily composed of Commercial items. The Contractor shall document this in a Configuration Management Approach document,his document shall, at a minimum, identify the method for establishing and recording the initial hardware and software baseline of the TACO Cart. This includes identifying all major commercial components, their manufacturer part numbers, and any configurable software or firmware versions. The approach shall describe how the Contractor will track the "as-built" configuration and report the final "as-delivered" configuration to the Government. The Contractor shall ensure its subcontractors provide the necessary component information to support this approach. The Contractor shall submit the Configuration Management Approach document to the Government for review and approval.

(CDRL A002, Technical Report-Study/Services (Configuration Management Approach), DI-

MISC-80508B)

3.2.1 Parts Control

The Contractor shall control parts proliferation for all newly designed or modified equipment to the greatest extent possible through the use of common parts or parts in the National Stock System (NSN) when technically feasible. The order of precedence for parts selection shall be: 1) NSN parts, 2) Military-Specification parts, 3) standard off-the-shelf commercial parts, and lastly,

4) unique parts.

The Contractor shall ensure that all parts and components are stored securely prior to installation to prevent damage, loss, or theft. The storage area shall be climate-controlled and shall have restricted access to authorized personnel only.

LARSON, NATHAN S CIV USAF AFMC AFLCMC/WI/WIIE

This DID is tailored to require the delivery of a Technical Data Package (TDP) that documents the "as-built" configuration of the TACO Cart integrated system. The TDP shall be sufficient to support organic maintenance and future modifications.

The TDP shall include:�a. A complete 3D assembly model of the TACO Cart in its native, editable source format and a neutral format (e.g., STEP). The model shall depict the physical layout of all integrated components.�b. A complete set of 2D drawings in their native, editable source format and PDF. This shall include assembly drawings, fabrication drawings for all custom parts (e.g., enclosure, patch panels, brackets), and schematic/interconnect wiring diagrams.�c. All data shall conform to the requirements of DID paragraphs 4.c, 4.f, 4.g, 4.h, 4.i, and Section 5.

The following DID requirements are explicitly excluded:�a. The contractor is not required to provide proprietary or manufacturing-level design data for Commercial-Off-The-Shelf (COTS) items. COTS items shall be identified by manufacturer part number in the Bill of Materials (CDRL A009).�b. Requirements for "unique processes" (4.a), "critical manufacturing sequences" (4.d), "vendor substantiation data" (4.o), and "Source Control Documents" (7.2) are not applicable and shall not be provided.�c. Test and inspection criteria (4.j) are fulfilled by CDRL A005 (Test/Inspection Report).

3.3 Program Planning, Scheduling, and Reporting

The Contractor shall establish, maintain, and use a resource-loaded Integrated Master Schedule (IMS) to manage the performance of this contract. The IMS shall logically network all discrete program activities, planned events, accomplishments, and significant milestones from contract award to completion.

The Period of Performance (PoP), from the date of contract award, to the delivery of the TACO Cart to the user at Grey Butte shall not exceed 12 months.

The Contractor shall deliver a streamlined Monthly Status Report. This report shall be delivered no later than the 15th calendar day of the month following the reporting period and shall contain, at a minimum:

• A summary of progress made during the reporting period for all baselined activities.

• An analysis of all known program risks, their potential impacts, and the current status of mitigation activities.

• A summary of funds expended during the period and the cumulative funds expended to date.

• An updated copy of the Integrated Master Schedule (IMS).

(CDRL A001, Status Report, DI-MGMT-80368A)

3.4 Test Observations and Issues/Deficiencies Reports

The Contractor shall use an internal deficiency tracking process to document and manage all Test Observation Issues (TOIs) identified during testing. Final disposition and closure of all TOIs shall require Government Program Office concurrence. A summary of all open and closed TOIs, including their status and proposed resolution path, shall be included as a section within the Monthly Status Report (CDRL A001). The Government shall have read-access to the contractor's deficiency tracking system or its exported data upon request.

(CDRL A001, Status Report, DI-MGMT-80368A)

3.5 Data Management

The Contractor shall deliver all data items specified on the Contract Data Requirements List (CDRL), DD Form 1423, using the Government's AF-PLM instance of Teamcenter. The Contractor shall be responsible for the timely preparation, quality control, and successful submission of all CDRL items within this system. The Contractor shall provide a single point of contact responsible for data management and delivery.

The Contractor shall develop and maintain a Data Accession List (DAL) identifying all technical data generated by the Contractor or its subcontractors in the performance of this contract that is not otherwise specified for delivery on the CDRL. Upon written request from the Government for any data identified on the DAL, the Contractor shall deliver the requested data within 10 business days. Compensation for the delivery of such data shall be limited to the cost of converting the data into the prescribed form, reproduction, and delivery.

(CDRL A007, Data Accession List (DAL), DI-MGMT-81453C)

3.6 Quality Assurance

The Contractor shall maintain and utilize a quality management system that is certified to, at a minimum, AS9100 or ISO 9001. This system shall satisfy all program objectives and reduce risk in the areas of cost, schedule, and performance. Upon written request from the Government for any quality system documentation, the Contractor shall provide the requested data within 5 business days. This includes, but is not limited to, quality system procedures, production test procedures (PTP), acceptance test procedures (ATP), and quality planning documents relevant to the hardware and software provided under this contract.

3.7 Commercial Manuals

The Contractor shall deliver two (2) complete sets of all standard commercial manuals for the hardware and software components integrated into the TACO Cart. The manuals shall be delivered in a protected, physical paper format. Each manual shall be provided as a printed copy, consolidated into a durable binder or booklet suitable for flight line and maintenance environments. If an Original Component Manufacturer (OCM) provides a manual only in a digital format (e.g., PDF), the Contractor shall be responsible for printing the manual to meet this requirement. These manuals shall be physically delivered with the equipment and are not a separate CDRL deliverable.

4. Bills of Materials (BOM) Reporting The Contractor shall develop and submit an indentured Bill of Materials (BOM). For all applicable hardware and software components, this BOM shall serve as the project's Software Version Description (SVD) by documenting the manufacturer part number, nomenclature, and the exact software/firmware version number. The final version of this BOM shall represent the complete "as-delivered" configuration of the TACO Cart and shall be submitted upon successful completion of the Site Acceptance Test.

(CDRL A008, Bill of Materials (BOM) for Logistics and Supply Chain Risk Management, DI-

PSSS-81656B)

5. Counterfeit Parts Control Program The Contractor shall maintain and enforce a counterfeit parts control program in accordance with SAE Standard AS5553. This program shall document the processes used for risk mitigation, disposition, and reporting of counterfeit electronic parts. The Contractor shall ensure this requirement is flowed down to all subcontractors. Upon written request from the Government for an audit, the Contractor shall provide evidence of supply chain traceability for any electronic component within 5 business days. This evidence shall include, but is not limited to, certificates of conformance and acquisition traceability to the Original Component Manufacturer (OCM) or their franchised distributors.

6. Risk Management The Contractor shall establish and maintain a risk management program for the TACO Cart program in accordance with MIL-STD-882E. The Contractor shall ensure its suppliers perform risk management in accordance with the Contractor’s approved supplier risk management plan.

The Contractor shall identify, analyze, and track all program risks. A summary of all identified risks, their potential impacts (cost, schedule, and technical), and the current status of all mitigation activities shall be documented and delivered as a dedicated section within the Monthly Status Report (CDRL A001).

(CDRL A001, Status Report, DI-MGMT-80368A)

7. Safety Engineering The Contractor shall establish and conduct a system safety program for the TACO Cart program in accordance with MIL-STD-882E.

7.1 Safety Assessment Report

The Contractor shall prepare and deliver a Safety Assessment Report. This report shall be focused on identifying and mitigating hazards unique to the integrated TACO Cart system, not the individual commercial components. The report shall be delivered in Microsoft PowerPoint or PDF format and shall include, at a minimum:

• A summary of identified hazards introduced by the system's integration and operation (e.g., electrical shock from power distribution, RF exposure, mechanical pinch points on doors).

• Recommended safety procedures, warnings, and precautions for personnel during operation, maintenance, and transport.

• A statement regarding the presence of any hazardous materials.

(CDRL A011, Safety Assessment Report, DI-SAFT-80102D/T)

7.2 Test/Inspection Report

The Contractor shall conduct a Factory Acceptance Test (FAT) with Government essential personnel in attendance prior to delivery to verify system functionality and workmanship against the requirements of this SOW.

No less than 30 days prior to the FAT, the Contractor shall deliver a detailed Factory Acceptance Test Procedure to the Government for review and approval. The FAT shall not be conducted without an approved procedure.

The Contractor shall provide the Government with written notification and itinerary at least 15 business days prior to the start of the FAT. The Government reserves the right to witness the

FAT at the Contractor's facility. After delivery, the Government will conduct a Site Acceptance Test.

(CDRL A005, Technical Report - Study/Services (Test/Inspection Report), DI-MISC-80508B)

7.3 Electromagnetic Capability

The Contractor shall deliver an Electromagnetic Capability (EMC) Compliance Data package.

The primary approach to demonstrate compliance shall be to leverage existing data from the Original Component Manufacturers (OCMs) of the commercial items. This package shall include all available OCM compliance data for MIL-STD-461, as well as any available data pertaining to Hazardous Electromagnetic Radiation (HERP, HERF, HERO).

After reviewing the submitted data, the Government may determine that there is a system-level EMC risk that cannot be addressed by the existing analysis. In such a case, the Contractor shall be responsible for conducting limited, targeted, accredited lab testing to satisfy specific EMC requirements (e.g., MIL-STD-461 RE102) as directed by the Government.

(CDRL A006, Electromagnetic Capability Compliance Data, DI-MISC-80711A)

8. Product Support Management The Contractor shall provide logistical support to track deliveries and manage inventories. This includes:

• Tracking deliveries from the Contractor to Det 3

• Once asset is received; provide a receipt of delivery

• Managing the inventory of components and materials at the Contractor’s facility during the period of performance to support the successful build, integration, and delivery of the TACO Cart.

8.1 Proposed Spare Parts List

In lieu of formal Logistics Product Data (LPD), the Contractor shall develop and deliver a Proposed Spare Parts List (PSPL) identifying Contractor-recommended spares required for two years of Organizational-level (O-level) sustainment of the TACO Cart. This PSPL does not require a formal Product Support Analysis (PSA) or Level of Repair Analysis (LORA). For each recommended item, the list shall include, at a minimum: the manufacturer, manufacturer part number, nomenclature, and the current unit price.

(CDRL A003, Proposed Spare Parts List, DI-PSSS-80134B)

8.2 Packaging, Handling, Storage & Transportation

The Contractor shall package all materiel in accordance with ASTM D3951, Standard Practice for Commercial Packaging. The packaging shall be sufficient to prevent physical damage, corrosion, and degradation during handling and shipment. The Contractor shall ensure that any items sensitive to Electro-Static Discharge (ESD) are packaged with appropriate protective materials.

8.3 Training & Training Support

The Contractor shall conduct hands-on operator training for up to six (6) Government personnel at a Government-designated facility. The training shall primarily utilize the standard commercial manuals provided with the system components. The training shall cover, at a minimum, system startup and shutdown, basic operation of integrated components (including the TM Receiver, Decom Software and network analysis plots for all installed RF cables, from the antenna input to the receiver(s)), and data recording procedures.

As the sole training deliverable, the Contractor shall provide a copy of any presentation materials used to supplement the commercial manuals during the training.

(CDRL A009, Presentation Material, DI-ADMN-81373)

8.4 Government Property Regulations and Guidance

The Contractor shall be responsible for all Government property in its custody in accordance with the terms of this contract, including all applicable Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) clauses.

The Contractor shall comply with all requirements for the management and reporting of Government property as specified in DFARS 252.245-7005.

Upon contract completion or termination, the Contractor shall retain all Government Furnished Property (GFP) and Contractor Acquired Property (CAP) at its facility until formal disposition instructions are provided in writing by the Procuring Contracting Officer (PCO).

8.5 Contractor Responsibility

The Contractor shall be responsible for Government property in there and applicable supplements and shall be in compliance with all applicable guidance and clauses listed in the contract.

The following 2 DFARS clauses compel accurate management and reporting of GFP by Contractors:

• DFARS 252.245-7003, Contractor Property Management System Administration:

Provides guidance on what is an acceptable Contractor system or systems for managing and controlling Government Property

• DFARS 252.245-7005, Management and Reporting of Government Property:

Provides reporting requirements when Contractors are in custody of government property.

8.6 Government Property

The following Government Furnished Property (GFP) will be provided for this procurement:

• TACLANE KG-175

• Removable Media - Portable HDD https://www.acquisition.gov/dfars/252.245-7003-contractor-propertymanagement-system-administration.

https://www.acquisition.gov/dfars/252.245-7005-management-and-reporting-government-property.

The Contractor shall identify, create and maintain records of all Government property in accordance with the specified individual required. The Contractor will be responsible for integrating and utilizing these items in compliance with the terms of the contract. The Contractor must ensure that the GFP is used solely for contract-related purposes and returned in an appropriate condition upon contract completion. The Government will provide access to the hardware on a schedule mutually agreed to by all parties. Definitization of this schedule will occur NLT 30 days after contract execution. GFP equipment, material, and property furnished by the Government, will be notated as Government Furnished Property (GFP). Property acquired, fabricated, or otherwise provided by the Contractor for performing a contract, and to which the Government has title will be notated as Contractor Acquired Property

(CAP).

The Contractor shall follow the intent and guidance outlined in the Federal Acquisition Regulation Part 45, Defense Federal Acquisition Regulation Supplement (DFARS) Part 245.1, DoD Instruction (DoDI) 5000.64, and DODI 4161.02 for managing GFP and Contractor Acquired Property (CAP). Upon termination of this contract, all GFP/CAP will remain at the Contractor’s facilities until disposition is provided by the Procurement Contracting Officer. The Government will retain ownership of all Government provided material and equipment upon contract completion.

The Contractor shall identify, create, and maintain records of all GFP and CAP. GFP/CAP shall be identified and managed using the current Government Furnished Property Attachment.

Government reserves the right to inventory GFP/CAP at a minimum once a year.

The consolidated GFP DFARS Clause 252.245-7005 requires reporting to only the GFP Module, extends reporting of shipment and transfer to non-serially managed items, clarified item unique identification requirements for GFP, and requires reporting of embedded serially managed items among other changes.

(CDRL A010, Government Furnished Property Inventory and Forecasting Report, DI-IPSC- 81947B)

9. Core Tasks The Contractor shall perform the core tasks identified below. Core tasks are defined as those tasks required to sufficiently manage the contracted effort.

9.1 Program Management

9.1.1 Program Manager (PM)

The Contractor shall identify a PM to act as the single POC responsible for managing and directing the Contractor’s activities and that of its subcontractor’s with respect to this contract and for interfacing with the government. Program management tasks include all those tasks required to direct and support production and program execution. The PM shall be responsible for all planning, organizing, scheduling, staffing, directing, controlling, orderly resource management and reporting required in the execution of this contract. The PM shall be responsible for the development and use of an Integrated Master Schedule (IMS) and provide the IMS to the Government throughout the contract period.

9.1.2 Subcontractor Management

The Contractor shall be responsible for all subcontractor management associated with this SOW to ensure their cost, schedule, and technical performance requirements are met. The Contractor shall be accountable for all subcontractor compliance with the requirements of this SOW. The Contractor shall ensure that all quality requirements, associated specifications, and any other contractual agreements, to include DMSMS and Counterfeit Parts, are incorporated into all sub-contracts and supplier agreements. The Government reserves the right to attend subcontractor reviews and other program meetings. The Contractor shall inform the Government program office of all such reviews and meetings no less than 10 business days prior to the event.

9.1.3 Associate Contractor Agreement (ACA)

The Contractor shall establish Associate Contractor Agreements (ACAs) and/or Non-disclosure Agreements (NDAs) as required to exchange technical information with third-party organizations to fulfill the requirements of this SOW. Any data shared shall be in accordance with the terms of the applicable ACA and/or NDA, including the provisions for data rights specified in the agreement. Sharing of information may include attendance at meetings and teleconferences with third-party Contractors or other Government activities. Once a requirement for an ACA is identified by the Government or the Contractor, the Contractor shall enter into the required ACA within 45 calendar days. All executed ACAs shall be submitted to the MQ-9 PCO within 30 calendar days of execution.

9.1.4 Contract Management Plan (CMP)

The Contractor (1 representative) shall participate in monthly joint IPT meetings with the Government. These meetings shall be conducted via telephone or video conference. The purpose of these meetings is to review current financial status (actual and projected spend plan), development and test status, deliverables metrics, schedule (upcoming events, critical path, interdependencies), risks, issues, and paths forward. Upon delivery of the TACO Cart, recurring meetings will cease and any future meetings can be coordinated as needed.

9.2 Program Planning, Scheduling, and Reporting

The Contractor shall conduct all program planning and scheduling in accordance with the Integrated Master Schedule (IMS) requirements defined in Section 3.3 of this SOW. Upon customer request between the required monthly deliveries, a working copy of the IMS may be submitted informally via email.

The Contractor shall deliver the integrated system in accordance with the IMS. Final system delivery shall be considered complete upon successful completion of the Site Acceptance Test (SAT) by Government representatives. The Contractor shall coordinate with Government representatives to schedule the delivery and the SAT.

10. Cybersecurity The contractor shall develop documentation, to include system architecture documentation and artifacts, to support the assessment and authorization of TACO CART. This includes, but is not limited to, supporting the development of artifacts (AAR, SAR, RAR, etc.) for obtaining a cyber authorization.

10.1 RMF Artifacts

The Contractor shall develop and deliver the following RMF artifacts, scoped specifically to the TACO CART system. All deliverables shall be provided in government-approved formats as specified.

System Security Plan (SSP): A comprehensive plan describing the implementation of all applicable security controls, developed in accordance with NIST SP 800-18.

Security Control Traceability Matrix (SCTM): A matrix that traces every security control back to its implementation within the TACO CART system architecture and supporting documentation (e.g., SSP, AAR).

(CDRL A012, DOD Risk Management Framework (RMF) Package Deliverables, DI-MGMT- 82001A)

10.2 Security Assessments/Evaluations

The Contractor shall conduct comprehensive security assessments of all software, hardware, and firmware components that comprise the TACO Cart system. The objective is to identify and document vulnerabilities and misconfigurations prior to integration with the MQ-9A. These assessments shall cover all custom-developed, Government Off-the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) components. At a minimum, the Contractor's security assessment activities shall include:

• Static Application Security Testing (SAST): All custom-developed source code shall be scanned with a SAST tool to identify coding flaws and security vulnerabilities.

• Vulnerability and Compliance Scanning: The Contractor shall scan all applicable system components for vulnerabilities and compliance with DISA Security Technical Implementation Guides (STIGs). This includes operating systems, applications, and network devices. Vulnerability scans may be conducted using tools such as Nessus, or equivalent.

• Handling of "Un-scannable" Components: For any component where direct scanning is not technically feasible (e.g., proprietary "black box" COTS appliances, sealed firmware), the Contractor shall provide a formal written justification in the Software Assurance Evaluation Report (SAER).

In addition to raw scan data, the Contractor shall prepare and deliver a Software Assurance Evaluation Report (SAER). This report shall provide a consolidated summary of all security assessments conducted on TACO Cart hardware, software, and firmware.

The SAER must provide clear traceability to the Hardware, Software, and Bill of Materials and, for each assessment performed, must contain:

• Method of assessment and severity scoring.

• Total number of findings, categorized by severity.

• Adjudication status for each finding (e.g., Remediated, Open, False Positive).

• Any mitigation plans that exist for open findings.

(CDRL A013, Software Assurance Evaluation Report (SAER), DI-IPSC-82249A)

10.3 Cybersecurity Deliverables

The Contractor shall maintain a Cyber Change Log to document all security-relevant modifications made to the TACO Cart system's hardware, software, and firmware configuration baseline. This log shall include, at a minimum, details of operating system patches applied, firmware updates, and any changes made to security settings.

This Cyber Change Log shall be delivered as a dedicated section within the Monthly Status Report, providing the Government with routine visibility into the system's evolving security posture.

(CDRL A001, Status Report, DI-MGMT-80368A)

11. CDRL Table of Contents

Data Item Requiring Office Authority Title SOW

Paragraph Schedule

A001 AFLCMC/WIIP

DI-

MGMT-

80368A/T

Status Report 3.3, 3.4, 6, & 10.3 MTHLY

A002 AFLCMC/WIIE DI-SESS-

80858D

Technical Report-

Study/Services (Configuration Management Approach)

3.2 30 DAC

A003 AFLCMC/WIIL DI-PSSS-

80134B

Proposed Spare Parts List 8.1 W/EQUIP

A004 AFLCMC/WIIE DI-SESS-

81000F/T

Product Engineering Design Data and Associated Lists (Product

Drawing/Model Package)

3.1.2 90 DAC

A005 AFLCMC/WIIE DI-MISC-

80508B

Technical Report -

Study/Services (Test/Inspection

Report)

7.2 W/EQUIP

A006 AFLCMC/WIIE DI-MISC-

80711A

Electromagnetic Capability

Compliance Data

7.3 90 DAC

A007 AFLCMC/WIIP

DI-

MGMT-

81453C

Data Accession List (DAL)

3.5

QRTLY

A008 AFLCMC/WIIL DI-PSSS-

81656B

Bill of Materials

(BOM) for Logistics and Supply Chain

Risk Management

4 10

DACSAT

A009 AFLCMC/WIIL

DI-

ADMN-

81373

Presentation Material 8.3 5 DAC/T

A010 AFLCMC/WIIL

DI-

MGMT-

81947B

Government Furnished Property

Inventory and Forecasting

Report

8.6 ANNLY

A011 AFLCMC/WIIE DI-SAFT-

80102D/T

Safety Assessment

Report (SAR)

7.1 90 DAC

A012 AFLCMC/WIIV

DI-

MGMT-

82001A/T

DOD Risk Management Framework

10.1 ONE/R

(RMF) Package Deliverables

A013 AFLCMC/WIIV DI-IPSC-

82249A

Software Assurance Evaluation

Report (SAER)

10.2 ONE/R

12. Appendices

12.1 Appendix A: Document and Guidance References

12.1.1 Government Documents

AFR 205-1 Safeguarding Classified Information DODI 8510.01 Risk Management Framework (RMF) for DOD Information Technology

(IT)

DODI 5000.64 Accountability and Management of DOD Equipment and Other

Accountable Property DODI 4161-02 Accountability and Management of Government Contract Property DFARS 252.245-7003 Contractor property management System Administration DFARS 252.245-7005 Management and reporting of Government Property AFI 63-101/20-101 Acquisition/Logistics Integrated Life Cycle Management AFI 63-131 Modification Management AFPAM 63-128 Acquisition Integrated Life Cycle Management AFMAN 21-106 Joint Regulation Governing the Use and Application of Uniform Source, Maintenance and Recoverability Codes AFMAN 24-204 Transportation of Hazardous Materials AETCI 36-2601 Special Contractor Training FAR Part 45 Government Property IRIG 106 Telemetry Standards MIL-STD-882 Standard Practice for System Safety MIL-HDBK-1812 Type Designation, Assignment and Method for Obtaining MIL-STD-130 Identification Marking of U.S. Military Property MIL-STD-461 Requirements for the Control of Electromagnetic Interference

Characteristics of Subsystems and Equipment MIL-STD-1366 Interface Standard for Transportability Criteria MIL-STD 2073-1 Standard practice for Military Packaging MIL-HDBK-502 Logistics Product Data MIL-HDBK-61B Configuration Management Guidance SAE-EIA-649C Configuration Management Standard SAE-STD-AS5553 Counterfeit Electronic Parts; Avoidance, Detection, Mitigation, and

Disposition (applies to hardware efforts only) MIL-HDBK-516 Department of Defense Handbook Airworthiness Certification Criteria

MIL-HDBK-29612 Instructional System Development MQ-1/MQ-9 MQ-9 Program Protection Plan MQ-9 IUID Plan T.O. 00-5-3 Technical Manual Methods/Procedures TM-86-01 Technical Manual Contractual Requirements (TMCR)

12.1.2 Non-Government

AS9100 Quality Management Systems Requirements for Aviation, Space and

Defense Organizations AS9120 Requirements for a Quality Management System SD-22 Diminishing Manufacturing Sources and Material Shortages: A

Guidebook of Best Practices for implementing a robust DMSMS management program (applies to hardware efforts only)

GEIA-STD-0005-1-A Performance Standard for Aerospace and High Performance Electronic Systems Containing Lead-free Solder (applies to hardware efforts only)

GEIA-STD-0007B Logistics Product Data TA-HB-0007-1 Handbook and Guide for Logistics Product Data Reports GEIA-HB-0007-B Logistics Product Data Handbook TA-HB-0007-1 Logistics Product Data Reports

12.1.3 Other Reference Documents

12.1.4 Definitions and Acronyms

ARTM Advanced Range Telemetry CDRL Contract Data Requirements List CPM Continuous Phase Modulation CUI Controlled Unclassified Information HERF Hazardous Electromagnetic Radiation Fuels HERO Hazardous Electromagnetic Radiation Ordinance HERP Hazardous Electromagnetic Radiation Personnel IADS Interactive Analysis and Display System LDPC Low-Density Parity Check STC Space-Time Coding

9.2 Program Planning, Scheduling, and Reporting