PERFORMANCE WORK STATEMNT

Project CSC-26302 “DSCC Elevator Service and Maintenance”

1.1 Title: Project CSC-26302 “DSCC Elevator Service and Preventative Maintenance”.

2.1 Introduction: The Contractor will be tasked with providing performance-based elevator/wheelchair lift maintenance and service to ensure safety of the building elevators/wheelchair lifts and to maintain the building assets. The Contractor will provide all management, supervision, labor, materials, supplies, repair parts, tools, and shall plan, schedule, coordinate, and ensure effective and economical completion of all work and services specified. All elevator/wheelchair lift equipment shall be operated at the highest level of efficiency compatible with current energy conservation requirements, nationally recognized codes, and standards, and maintained at an acceptable level, throughout the contract period of performance. The Contractor shall be responsible for performing all work under this contract in accordance with all Federal, State, County, City laws and codes, and follow the most stringent of them. In addition to compliance with these laws, the Contractor shall follow all applicable standards and industry practices including but not limited to Occupational Safety and Health Act (OSHA).

3.1 Background: The Defense Logistics Agency is the Department of War logistics combat support agency, providing worldwide logistics support in both peacetime and wartime to the military services as well as several civilian agencies and foreign countries.

A requirement was submitted to DLA Contracting Service Office - Columbus Division 1 to contract a responsible Contractor to perform elevator and wheelchair lift service and preventative maintenance within various facilities at the Defense Supply Center Columbus (DSCC), Columbus, Ohio. DLA Installation Management Columbus does not have the capability to conduct the required services. No other Government agency has the ability to perform the requirement outlined in this performance work statement (PWS). There are 19 elevators and 2 wheelchair lifts on the DSCC that will require service and preventive maintenance. The elevators consist of both hydraulic and rope (mechanical) type elevators. The equipment varies in age and has multiple manufacturers. The wheelchair lifts and elevators require monthly inspections and random maintenance and repairs performed on them to keep them serviceable.

The Contractor shall need to have the expertise to perform these inspections and make all needed repair to equipment. The Contractor shall be available to provide on call troubleshooting services 24/7 for elevators.

4.1 Scope and Tasks:

4.1.1 The Contractor shall furnish all site labor, technicians, supervision, instruments, tools, materials and supplies required in performing all repairs, modifications, and programming services in connection with the inspection, service, preventative maintenance, testing, and repair of the elevators and wheelchair lifts located at the Defense Supply Center Columbus (DSCC). The contractor shall perform all inspection, services, preventative maintenance, and testing as required. These shall be performed in accordance with the most current version of ASME A17.1, ASME A17.2, ASME A18.1 standards, manufacturer manuals or guides, and NFPA 72 code requirements which includes an annual “no load” inspection each year as well as performing a five-year “full load” test during the first year (base year) of the contract for each elevator.

4.1.2 Within 5 days of the contract award, the Contractor shall submit, for approval by the Government, a detailed Service Plan describing all work and frequency of work to be performed on equipment serviced under this contract. The Service Plan shall be in accordance with the referenced standards and codes, in conjunction with the manufacturer’s recommended preventative maintenance, as provided in the manufacturer's operation and maintenance manuals.

4.1.2.1 The Service Plan shall be used for defining or stating policy, objectives, or requirements; assigning responsibility; controlling utilization of resources; periodically measuring performance; comparing that performance against stated objectives and requirements; showing work control; and taking appropriate action. The Contractor's day-to-day operation shall adhere to this documented method. The Service Plan shall include but not be limited to the following: Organizational Structure, Lines of Support, Subcontractor Relationships, Operational Procedures, Employee Resumes, Overall Approach to Work, Transition Plan, Quality Management Plan, Project Management Plan, Environmental & Safety Plan, and Security Plan.

4.1.3 The Contractor shall obtain operations and maintenance manuals, service manuals, service guides, and other applicable documents from the manufacturer of each piece of equipment to be serviced and maintained. At a minimum, the Contractor shall maintain one set of documents at the worksite and furnish one set of documents to the Government.

4.1.4 Preventive Maintenance.

4.1.4.1The Contractor shall provide scheduled monthly preventative maintenance services, which will include inspection and testing of elevator operator systems, cleaning of components, lubrication of mechanical components, and repair and/or replacement of minor parts. The Contractor shall provide a checklist for each elevator that identifies the areas and components to be covered for each monthly preventative maintenance visit and inspection.

4.1.4.2 The Contractor shall test the in-cab emergency call buttons quarterly to ensure that DSCC dispatch office is receiving communication from the cab of each elevator/lift. The Contractor will submit an electronic file of all written quarterly call button inspection reports within seven (7) calendar days after completion and get the Contracting Officer's Representative (COR) approval.

4.1.5 Emergency Troubleshooting / Corrective Maintenance.

4.1.5.1 The Contractor shall provide on call troubleshooting services within four (4) hour period, as needed, to troubleshoot any maintenance issues to return elevators to safe and reliable operating conditions. The Contractor shall provide services in a manner, which ensures the safe and continuous operation of the elevators in accordance with commercial and/or manufacturers specifications. There shall be no limit on the number of on-call troubleshooting service calls required of the Contractor. On-call troubleshooting service calls are considered part of the basic agreement.

4.1.5.2 The Contractor shall respond to a request for the Level I emergency service within two (2) hours after receiving notification from the COR or Contracting Officer. The Contractor shall respond to a life safety emergency within one (1) hour. A life safety emergency condition exists when personnel are trapped in an elevator, or multiple units are out of service. Life safety emergency service calls are part of the basic service agreement.

4.1.5.3 The Contractor shall not commence work until notification is received from the COR for emergency service/corrective maintenance under $2,500.00; or from the KO for corrective maintenance above $2,500.00. All emergency troubleshooting and corrective maintenance work shall be in accordance with normal commercial practices using parts specified by the manufacturer of items of equal or better quality.

4.1.6 Third-Party Annual Inspection.

4.1.6.1 The Contractor shall employ a third party, independent Licensed Elevator Inspector to conduct the required certification tests. It will be the responsibility of the Contractor to arrange and submit qualifications of the Inspector's personnel to the COR. Reports for elevators shall be submitted from the Inspector directly to the COR within 24 hours.

4.1.7 Equipment replacement, equipment repair, or system and equipment modifications are not included as part of the basic agreement. All requirements for equipment replacement, repair, or modification shall be coordinated with the COR and the Contracting Officer for appropriate decisions and actions. If repairs require work over and above routine maintenance services, the Contractor shall analyze the repairs and provide a detailed scope of work for the repairs to the COR. The COR will validate the requirement, the Contracting Officer will submit a request for quote (RFQ) to the Contractor, and the equipment replacement/repair/modification work will be added to the contract via contract modification.

4.1.8 If requested by the Government, the Contractor shall procure and post a certificate in each elevator attesting to the satisfactory safety inspection and testing of the elevator. Certificates shall be current and issued at established intervals.

4.1.9 Records shall be provided to the Government for all services provided by the Contractor and be available for review by Government Personnel at all times. The Contractor shall submit a copy of the completed forms upon completion of tests and/or maintenance to the Contracting Officer or designee, in addition to maintaining the records at the designated location. The Contractor shall prepare and submit an electronic file of all written monthly inspections / preventative maintenance reports within seven (7) calendar days after completion and get the COR approval. The report shall identify elevator, location, maintenance work performed, repairs needed, date of inspection, name of the inspector, and overall condition of the elevator. All records will remain property of the Government and be turned over to the Government at the end of the contract. As built systems drawings, original acceptance test records, and device manufacturer's maintenance bulletins shall be retained to assist in the proper care of the system and its component.

4.1.9.1 The Contractor shall develop and maintain equipment logs on each major item of equipment serviced under this contract. The Contractor shall maintain service, preventative maintenance, and repair records for each equipment item on Center at the applicable equipment location.

4.2 Special Work Requirements:

4.2.1 Provide safety / life safety inspections on elevators and wheelchair lifts a minimum of once a month.

4.2.2 Maintain all equipment in fully operational condition.

4.2.3 Replace lamps as required in all buttons and indicator lights.

4.2.4 Maintain elevator service rooms in neat, clean and safe condition.

4.2.5 The Contractor shall perform all routine service, maintenance and repair during DSCC's normal duty hours.

4.2.6 All replacement parts shall be equal to or superior in quality to the part being replaced and shall be the equipment manufacturer's recommended substitute.

4.2.7 Whenever repairs are not completed by the end of the workday, the Contractor shall notify the Government COR of the work status prior to leaving DSCC. The Contractor shall safely stabilize all equipment and place out of service signs at each floor before leaving the work site.

4.3 Level 1 Emergency Service:

4.3.1 The Contractor shall respond to a request for emergency service within two (2) hours after receiving notification from the Contracting Officer or their designated representative(s). Prior to performing any work and upon completion of any work, the Contractor shall report to the COR in Building 308 and update the maintenance log. Information to be entered into the log shall include the following: date of work and time in and time out; company name and individual name(s) performing the work; a contact phone number; and the reason for the visit. The Contractor shall also notify the Emergency Services Communication Center (614-692-3875) before and after performing any work.

4.3.2 Level 1 Emergency service calls are considered part of the basic service agreement. Emergency services will be required whenever an elevator or wheelchair lift is inoperable or not operating correctly or when an unsafe condition exists. There shall be no limit on the number of emergency service calls required by the Contractor.

4.3.3 When Level 1 Emergency Service is required during non-normal duty hours, the Contractor may invoice for the overtime differential portion of their standard hourly labor rate for the hours worked. This rate will be established in the Contractor's cost proposal. The Contractor will only be reimbursed for the time his service technicians are at DSCC.

4.3.4 Level 1 Life Safety Emergency: A Level I Life Safety Emergency condition exists when personnel are trapped in an elevator, or multiple units are out of service. Under these conditions the Contractor shall respond to an emergency service call within one (1) hour.

4.4 Level 2 Emergency Service:

4.4.1 The Contractor shall respond to a request for Level 2 Emergency Service as required by the Contracting Officer or their designated representative. These services include equipment replacement, equipment repair, or system and equipment modifications that are not included as part of the basic maintenance requirements. Examples of a Level 2 service include failed system components, modifications to the existing equipment to improve performance or satisfy new safety requirements, and repairs to equipment required because of Government negligence or misuse. No Level 2 Services will be performed unless directed by the Contracting Officer via contract modification. For each Level 2, the Government and the Contractor will have agreed upon the cost for the scope of work necessary to complete the service. A contract modification will be issued prior to any work being performed.

5.1 Excluded Work: The Contractor shall not be responsible for the following:

5.1.1 The electrical power supply and service to elevators and wheelchair lifts.

5.1.2 Cylinders, plungers, castings, and buried piping and conduit for hydraulic elevators.

5.1.3 Interior Finishes, light fixtures, and ventilation equipment in car enclosures.

5.1.4 Smoke and heat sensors and communication systems.

5.1.5 Failure of equipment, as a result, of fire, water, lightning, and other uncontrollable acts.

5.1.6 Failure of equipment caused by misuse, negligence, tampering or other unauthorized use by the Government.

6.1 Deliverables: Prior to commencing work, the Contractor shall provide the following:

6.1.1 A list of products and corresponding safety data sheets for each chemical to be used and/or stored on-site.

6.1.2 Dates for monthly scheduled preventative maintenance services.

6.1.3 Checklist to be used for quarterly maintenance services.

6.1.4 List of common stock items included in the proposal for quarterly maintenance services.

6.1.5 Sample of report to be submitted after each service call (monthly and on-call troubleshooting basis).

6.1.6 Resume, license, certificate for qualified technicians to perform services.

6.1.7 Company emergency contacts for 24 hours, 7 days a week service including company manager information assigned to the project.

6.1.8 A statement that the company provides safety training to employees as required by trade and that the company maintains a safety and health program.

6.1.9 Provide all required insurances.

7.1 Equipment Description: Elevator Service and Preventative Maintenance shall cover the following:

7.1.1 Building 20:

7.1.1.1 Passenger Elevators; Quantity 12, Type - Traction, Capacity 2,500 pounds, Speed 450 fpm, Clear Car inside 6' - 8” wide by 4' - 3” deep, Travel 91 feet, Landings 7, Openings - Front, Entrance Type - two Speed Horizontal Sliding.

7.1.1.2 Service Elevator; Quantity 2, Type - Traction, Loading ASME A17.1 Class A, Capacity 4,500 pounds, Speed 350 fpm, Clear Car inside 5' 8.5” wide by 8'0” deep, Travel 107 feet, Landings 8, Opening - Front, Entrance Type - 2 Speed Horizontal Sliding.

7.1.1.3 Freight Elevator; Quantity 1, Type - Traction, Loading - ASME 17.1 Class A, Capacity 10,000 pounds, Speed 200 fpm, Clear Car inside 8' - 0” wide by 13' - 6” deep, Travel 107 feet, landings 8, Openings - Front, Entrance Type - Vertical Bi-Parting.

7.1.1.4 Wheelchair Lift Quantity 1, Capacity 750 pounds.

7.1.2 Building 306:

7.1.2.1 Passenger Elevator; Quantity 1, Type - Hydraulic, Landings 2, Capacity 2,500 pounds.

7.1.2.2 Freight Elevator, Quantity 1, Type - Hydraulic, Landing - 2, Capacity 3,000

7.1.3 Building 43:

7.1.3.1 Passenger Elevator: Quantity 1, Type - Hydraulic, Landing 2

7.1.4 Building 11, Section 11

7.1.4.1 Wheelchair Lift: Quantity 1, Capacity 750 pounds

7.1.5 Building 2:

7.1.5.1 Passenger Elevator: Quantity 1, Type - Hydraulic, Landings 2, Capacity 3,500 pounds.

7.1.6 All equipment to be serviced and maintained under this contract is believed to be in satisfactory operating condition. After award of the contract, it is the Contractor's responsibility to confirm the condition of all equipment. Within 30 days of contract award the Contractor shall notify the Contracting Officer in writing if any equipment is not in satisfactory operating condition. Should the Government agree that certain equipment is not in satisfactory operating condition, the Government will either perform the necessary repairs to bring the equipment to a satisfactory operating condition, or an equitable adjustment will be made in the contract price to have the Contractor perform the necessary repairs. Equipment requiring minor mechanical adjustments, lubrication, cleaning, and replacement of minor components is considered to be in satisfactory operating condition.

8.1 Period of Performance (PoP): The period of performance shall be one (1) base year with one (1) additional option years. Option year may not be exercised at the time of award, and are subject to availability of funds and confirmation of the Contractor's satisfactory performance.

9.1 Work Schedule: Work shall be performed between 6:00 a.m. through 6:00 p.m. (Eastern Standard Time), Monday through Friday. No preventive maintenance or third-party inspection work shall be performed on weekends or on federal holidays. The Government will not be paying overtime to the Contractor for preventive maintenance or inspection services. Work hours are subject to change per COR / CO request.

9.2 Coordination: A COR will be assigned to coordinate the work required under this contract. The Contractor shall provide, within 5 days after award of this contract, the telephone number where the Contractor's service personnel can be reached at all times, including weekends, nights, and holidays. If any abnormal or unusual operating conditions of the equipment should occur, the Government will notify the Contractor. Contractor shall make every attempt to minimize system downtime and immediately notify the Government when system(s) are out of service.

10.1 Quality Control (QC) and Assurance: The Contractor shall adhere to all Federal, State, county, City laws and code, as applicable. The Contractor shall develop and maintain an effective QC program to ensure services are performed in accordance with PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor's QC program is the means by which it assures itself that its work complies with the requirements of the contract.

The Contractor management team shall meet quarterly with the COR. Meetings shall be conducted with the COR where the Contractor presents their analysis of the prior quarter's workload, quality of work performed, and overall performance with defined actions for improved performance. The Contractor shall provide management representatives, above the level of local management, at the COR's request to resolve performance issues. The Contractor will provide written meeting minutes to the COR within one (1) day following the meeting.

10.2 Acceptable Performance: The Contractor shall satisfy a minimally acceptable performance level.

On a monthly basis, if the Contractor is required to respond to more than five (5) requests for emergency services on the same piece of equipment, the Contractor's performance will be considered unsatisfactory and the Government may take appropriate action.

10.3 Contractor Qualifications:

10.3.1 Only contractors with a minimum of five (5) years of experience in providing services for contracts of similar size and scope are qualified to submit an offer. Failure to submit sufficient supporting documentation, in the Contractor provided bid package, is grounds for not accepting an offer.

10.3.2 The Contractor shall always have in their employment a sufficient number of qualified employees to enable them to properly, safely, and economically manage, operate, and maintain the buildings and systems identified in this contract. The personnel employed by the Contractor shall be journeymen, certified or licensed in their respective trades for the state of Ohio. A copy of each employee's certificate or license shall be made available to the COR upon request.

10.3.3 Only mechanics certified by the manufacturer of the equipment to be serviced under this contract may be assigned to perform work at DSCC.

10.3.4 An apprentice may perform work on this project only if directly supervised by an experienced, certified service technician.

10.3.5 Contractor personnel shall present a neat, clean appearance. Employees must wear similar contractor issued clothing bearing a distinguishing emblem or patch. All contractor service vehicles must be clearly identified with the company name.

10.3.6 The Contracting Officer may require the dismissal of any Contractor employee and/or subcontractor employee from the work site who is identified as a potential threat to the health, safety, security, general well-being or operational mission of the building and its population. The Contracting Officer may require the Contractor to remove any employee from the job site who is found to violate the Disciplinary Rules or Standards of Conduct applicable to Federal employees. The removal from the job site of such person(s) shall not relieve the Contractor of the requirement to provide sufficient personnel to perform adequate and timely services.

10.4 Environmental, Safety, and Occupational Health Office: The Contractor shall participate in all requested reporting, auditing, and environmental/safety compliance programs issued from this office. In coordination with the requests from this office, the Contractor shall submit a plan, including all reports and activities, to the Government representative within 14 days of contract award. All reports and documentation to be used in the Contractor provided plan shall be approved. The Contractor shall update and modify the plan as required to address contract changes and job site concerns.

11.1 Recognized Holidays: The following are recognized U.S. federal holidays. The Contractor shall not perform services on these days:

Holidays:

• New Year's Day

• Birthday of Martin Luther King Jr.

• Washington's Birthday

• Memorial Day

• Juneteenth

• Independence Day

• Labor Day

• Columbus Day

• Veteran's Day

• Thanksgiving Day

• Christmas Day

12.1 Place and Performance of Services: The Contractor shall provide services during their normal business hours except on recognized US holidays or when Government facility/installation is closed due to local and national emergencies, administrative closings, or similar Government-directed facility/installation closings. Performance shall be at the Government facility. The Contractor shall, always, maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS.

Place of performance address:

Defense Supply Center Columbus 3990 E. Broad Street Columbus, Ohio 43218

13.1 Security Requirements: Contractor and all associated Sub-Contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures. The Contractor shall provide all information required for background checks to meet installation access policy by the Security Office. Contractor workforce shall comply with all personal identity requirements as directed by the DoD, HQDLA and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in Contractor security matters or processes.

14.1 Physical Security: The Contractor shall safeguard all Government property provided for contractor use. At the close of each period, Government facilities, equipment, and material shall be secured.

15.1 Warranty: The Contractor shall furnish a 12-month warranty or industry standard OEM Commercial Warranty; whichever is greater on all parts, labor, and services of each component with regards to calibration to each item.

16.1 Invoicing: The Contractor may invoice a maximum of once per month. Invoices are required to be submitted in Wide Area Workflow (WAWF) for payment in accordance with DFARS 252.232-7006 WAWF payment instructions no later than 7 workdays at the end of each month. Invoices shall contain sufficient information to determine the extent of work performed and shall be submitted as an attachment to WAWF.

Each invoice shall contain an invoice number and the contract number.

17.1 Common Access Card: Common access Card (CAC) is required.

Performance under this contract may require the contractor to obtain a Common Access Card (CAC). If CACs are issued under this contract, the contractor will complete and comply with the following steps to obtain, control, and turn-in Government-issued CACs, as well as establish procedures to always control and account for contractor CACs. This process is only for the issuance and accountability of CACs.

Contractors may be required to provide additional forms and follow additional procedures for other forms of access and/or background/security checks depending on local site/installation requirements.

Common Access Card (CAC) Procedures

1. The contractor has each contractor employee requiring a CAC complete DLAH Form 1728 in accordance with Enclosure 3; 2a. Note: Contractors do not complete blocks 11, 14, 15.a. or 15.b.; these are completed by the COR.

2. The contractor hand carries the DLAH 1728 form(s) or sends via secure mail, or encrypted email to (NOTE: The contractor may forward these forms individually or as a group to):

a. The Contracting Officer’s Representative (COR) for the contract if a COR was designated.

b. The Contracting Officer (KO) for the contract if no COR was designated.

3. Each contractor employee must verify their account information upon receipt of an email from the Government containing a username and password for the Trusted Associate Sponsorship System (TASS).

The web link for TASS is included in the email.

4. Each contractor employee will receive an email via TASS when their account has been approved. The email will notify the employee to obtain a Government-issued CAC from the nearest Real-Time Automated Personnel Identification System (RAPIDS) office. The email will also provide a link that identifies the locations of RAPIDS offices.

5. Each contractor employee will obtain their issued CAC from the RAPIDS office.

6. The contractor, within one business day of issuance, provides written notice via email to the COR (or the KO, if no COR was designated) for each contractor CAC issued identifying the contractor employee’s name, the date of issuance, and the date of expiration of the CAC. This notification may be made individually for each contractor employee or together for a group of contractor employees. Note: This requirement is not applicable when the same is person is performing both COR and TA roles.

7. The contractor always establishes procedures to control and account for Government-issued contractor CACs – to include the following:

a. Ensure contractor CACs issued for this contract are only used for the purpose of performing under this contract.

b. Ensure contractor CACs are secured in a manner that precludes unauthorized use and that recognizes the CAC is the property of the U.S. Government.

c. Ensure contractor employees do not abuse or place holes in their CACs.

d. Ensure contractor employees do not display their CACs in public.

8. If a contractor CAC is lost or stolen:

a. The contractor employee will immediately notify the contractor that the contractor CAC has been lost or stolen.

b. The contractor will immediately notify the COR (or the KO, if no COR was designated), detailing the circumstances regarding the lost or stolen contractor CAC, as follows:

(1) Face-to-face, followed within one business day by a written notice via email, or

(2) In writing, via email, or

(3) By telephone, followed within one business day by a written notice via email.

c. The contractor will report the lost or stolen CAC card to the local DLA Police/host installation police, who will provide the contractor a police report. If there are no local DLA Police/host installation police, or no police report is provided, the contractor will provide information to the COR/KO, as applicable, detailing the circumstances of how the CAC was lost or stolen. The COR/KO will provide a memorandum for the contractor employee to support issuance of new CAC.

d. The contractor has the contractor employee bring the report/memorandum to the nearest RAPIDS office. If the CAC can be reissued within 24 hours, bring the report/memorandum to the nearest CAC office for reissue. If the CAC cannot be reissued in 24 hours, follow the steps for a new CAC, beginning at Step 1.

9. If the expiration date for a contractor CAC is before the completion of the contract and the contractor employee is to continue working under the contract and still requires a CAC, the contractor:

a. Notifies the COR as follows:

(1) Face-to-face, followed within one business day by a written notice via email, or

(2) In writing, via email, or

(3) By telephone, followed within one business day by a written notice via email.

b. No less than 10 business days before the current CAC’s expiration date, completes and complies with the steps above beginning with Step 2 for issuance of a new contractor CAC for the employee.

c. Brings the expiring CAC to the RAPIDS office for turn-in and receives new CAC.

d. Notifies the COR once a new CAC has been issued.

10. The contractor/contractor employee turns in any found CACs immediately, via hand carry, to the nearest Federal law enforcement office.

11. The contractor immediately collects all contractor CAC(s) from the contractor employee(s) at:

a. Contract completion or termination

b. Termination/Reassignment of an employee (this includes any reason the employee is no longer working for the contractor under the contract or otherwise no longer requires a CAC)

12. For contract completion or termination – within one business day after collecting the contractor CAC(s), arranges for turn-in via one of the below methods:

a. If the COR/KO is co-located or near enough that in-person transfer of CACs can be arranged, the contractor:

(1) Arranges to meet the COR (or the KO, if no COR was designated) to turn-in the collected contractor CAC(s).

(2) Hand-carries all collected contractor CACs for turn-in to meet the COR (or the KO, if no COR was designated).

(3) Completes and signs the Government-Issued Contractor CAC Turn-In Receipt with the COR (or the KO if no COR was designated). The contractor is provided a copy of the receipt.

b. If in-person transfer of CAC cannot be arranged, the contractor:

(1) Sends, via certified mail, the CACs to the COR/KO. The contractor includes in the package the Government-Issued Contractor CAC Turn-In Receipt, with signed acknowledgement of contractor turn-in.

(2) Notifies COR/KO that CACs have been sent via certified mail.

(3) Receives a completed copy of the receipt from the COR/KO once the COR/KO has received the CACs.

13. For termination/reassignment of an employee:

a. Immediately notifies the COR (or the KO, if no COR was designated) that the employee is no longer working for the contractor under the contract or otherwise no longer requires a CAC, as follows:

(1) Face-to-face, followed within one business day by a written notice via email, or

(2) In writing, via email, or

(3) By telephone, followed within one business day by a written notice via email.

b. Follows the turn-in procedures above for contract completion or termination, as applicable.

14. Contractor Reporting Requirements: Every month, validate the contractor CAC log with the COR for accuracy.

15. The above procedures have been established as a DLA security measure. Contractors are advised that failure to comply with any of the above requirements will be considered a violation of the terms and conditions of the contract and the Contracting Officer may take action to remedy such violations.

Specifically, failure to safeguard, follow these procedures, including reporting requirements, or turn-in CACs within the established timeframes may result in the following actions, which are in addition to other actions the Contracting Officer may take under governing law and regulation and the terms and conditions of the contract:

a. Immediate work stoppage (issuance of a stop work order), not to be lifted until resolution of CAC issue

b. Disapproval of invoices and delay of payment

c. Withholding of final payment (in accordance with FAR 52.204-9)

d. Documentation of CAC Non-Compliance in the Contractor Performance Assessment Reporting System

(CPARS)

18.1 Changes to Key Personnel: Certain skilled, experienced, professional and/or technical personnel are essential for successful accomplishment of the work to be performed under this contract. These are defined as “key personnel” and are those persons whose resumes are submitted as part of the technical and business proposal for evaluation. The Contractor shall use key personnel as identified in its proposal during the performance of this contract and will request Contracting Officer approval prior to any changes.

Requests for approval of any changes shall be in writing with a detailed explanation of the circumstances necessitating the change. The request must contain a complete resume for the new key personnel and any other pertinent information such as degrees, certifications, and work history. The new key personnel must have qualifications equal to or higher than those being replaced. The Contracting Officer will evaluate the request and notify the Contractor whether the requested change is acceptable.

19.1 Protection of Government Buildings, Equipment, and Vegetation (FAR 52.237-2): The Contractor shall take reasonable care to avoid damaging existing buildings, equipment, and vegetation on the Government installation. If the Contractor's failure to use reasonable care causes damage to any of this property, the Contractor shall replace or repair the damage at no extra expense to the Government as the Contracting Officer directs. If the Contractor fails to refuse to make such repair or replacement, the Contractor shall be liable for the cost, which may be deducted from the contract price.

20.0 CYBERSECURITY REQUIREMENTS

20.1 Reference Documents

The Contractor shall provide cybersecurity (CS) in accordance with all current policies, procedures, and statutes, to include, but not restricted to, the following subparagraphs:

20.1.1 System Identification Reference Documents:

a. Committee on National Security Systems Instruction 1253, Security Categorization and Control Selection for National Security Systems, December 15, 2022

b. Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004

c. Federal Information Processing Standards Publication 200, Minimum Security Requirements for Federal Information and Information Systems, March 2006

d. Federal Information Security Modernization Act December 18, 2014, Department of War Instruction 5000.02, Operation of the Defense Acquisition System, January 23, 2020

e. Department of War Instruction 5200.39, Critical Program Information (CPI) Identification and Protection within the Research, Development, Test, and Evaluation (RDT&E) Incorporating Change 3, Effective October 1, 2020

20.1.2 System Compliance, Instructions and Guidelines Reference Documents:

a. 44 U.S.C. § 3542, December 2014

b. Department of War Instruction 8510.01, Risk Management Framework (RMF) for DoW Information Technology, December 2022

c. Department of War Instruction 5200.44, Protection of Mission Critical Functions to Achieve Trusted Systems & Networks, February 16, 2024

d. DoW Program Manager’s Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle

e. Defense Acquisition Guidebook (DAG)

f. Department of War Instruction 8330.01, Interoperability of Information Technology (IT), Including National Security Systems (NSS), September 27, 2022

20.1.3 System Cybersecurity Implementation Reference Documents:

a. Department of War Instruction 8580.1, Cybersecurity in the Defense Acquisition System, July 9,

b. National Institute of Standards and Technology Special Publication 800-82 Revision 3, Guide to Industrial Control Systems (ICS) Security, September 2023

c. Unified Facilities Guide Specifications (UFGS)-25 50 00.00 20 Cybersecurity of Facility-Related Control Systems

d. United Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facilities-Related Control Systems

e. 44 U.S.C. § 3554, Executive Order (E.O.) 14028, Improving the Nation’s Cybersecurity

f. OMB Memorandum M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices.

20.1.4 Personnel Requirements Reference Documents:

20.1.4.1 FRCS, ICS, Facilities iOt Guidelines Reference Documents:

a. Defense Logistics Agency Risk Management Framework Standard Operating Procedures, November 2025

b. Office of the Assistant Secretary of Defense Facility Related Control Systems (FRCS) Master List Memo, October 2020

20.2 Personnel Requirements

20.2.1 Personnel Security Requirements

Information given to the Contractor during the life of this contract shall only be used for the purpose of carrying out the provisions of this contract. Agency marked “Controlled Unclassified (CUI)” or bearing other sensitivity markings shall be handled in accordance with (IAW) Agency information security program regulations and shall not be divulged or disclosed without Agency permission in writing. Requests for disclosure shall be addressed to the Contracting Officer (KO).

20.2.2 Citizenship

Each Contractor employee shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence, or who presents evidence from the Immigration and Naturalization Service that employment will not affect his immigration status.

20.2.3 Identification Badges

Contractor employees (including those of subcontracts) requiring physical access to the contractual place of performance and/or access to the DLA network/system for successful contract performance will be required to obtain a Common Access Card (CAC) prior to starting work. Lost or stolen CACs must be promptly reported by the Contractor to the KO or their authorized representative and to the appropriate Government security personnel. The Government will retain sole decisional authority on issuance of a replacement CAC.

20.3 Cybersecurity Strength Requirements

The Contractor shall satisfy the Risk Management Framework (RMF) requirements of subchapter III of chapter 35 of Title 44, United States Code (U.S.C.), also known as the “Federal Information Security Management Act (FISMA) of 2002 (Modernization 2014)”.

The Contractor shall enable DLA to meet the standards required by the Office of Management and Budget (OMB) and the Secretary of Commerce, pursuant to FISMA and section 11331 of Title 40, U.S.C.

FIPS 199 / CNSSI 1253 Security Categorization: The Contractor shall participate in categorization discussions with the DLA J6 PM, functional lead, and the Information System Security Manager (ISSM) and provide all required FIPS 199 documentation as requested to support security categorization.

The Contractor shall collaborate with the Government Program Manager on system categorization based on sound technical expertise in accordance with FIPS 199 then work in coordination with the prescribed DLA System Owner (SO) and ISSM to support the categorization IAW FIPS 199, CNSSI 1253 and Office of the Secretary of War (OSW) Facility Related Control Systems (FRCS) Master List including DLA specific systems, then document the results of the security categorization in the System DLA FIPS 199 document and the Concept of Operations (CONOPs).

Assigned DLA J6 PM will coordinate with the Contractor to identify and document Confidentiality, Availability, Integrity (CIA) of the system in a DLA FIPS 199 document for approval by DLA ISSM personnel.

20.4 Cybersecurity Assurance Requirements

20.4.1 RMF Compliance and Risk Mitigation

This will be achieved through abiding by all applicable cybersecurity policies, regulations, and directives to ensure a favorable assessment and incorporate (A&I). The contractor shall mitigate risk identified through the RMF authorization process down to a level acceptable to the DLA authorizing official (AO)

20.4.2 System Isolation and Maintenance Procedures

Based on the operational requirements of the facility and the technical capabilities of the equipment, the elevator control system shall operate as a standalone system To maintain the cybersecurity and integrity of this system, the Contractor shall adhere to the following mandatory constraints:

20.4.2.1 Prohibition of Network Connectivity

The Contractor is strictly prohibited from enabling, connecting, or installing any external data network connections to the elevator control system. This includes, but is not limited to, physical Ethernet (LAN/WAN), Wi-Fi, Bluetooth, Near Field Communication (NFC), cellular modems, or any other remote telemetry and communication devices. The system must remain physically isolated ("air-gapped") from all internal and external data networks for the life of the contract.

Exception: Mandatory life-safety emergency voice communication lines (e.g., analog POTS line for entrapment) are permitted but must be physically and logically segregated from the elevator's digital control and management planes

20.4.3 Prohibition of Transient Cyber Assets and External Devices

20.4.3.1 Strict Prohibition: The Contractor, including its employees, subcontractors, and agents, is strictly prohibited from connecting any external electronic device or Transient Cyber Asset (TCA) to any port on the elevator control system for any routine reason.

20.4.3.2 Definition of External Devices: An "External Device" or TCA includes, but is not limited to, contractor-owned laptops, mobile phones (including for charging purposes), tablets, USB flash drives, external hard drives, proprietary handheld diagnostic dongles, and any other portable data storage or processing device that has not been explicitly approved in writing by the DLA authorized cybersecurity representative.

20.4.3.3 Exception Process and Media Control: In the event an emergency or critical update is required that necessitates physical media:

20.4.3.3.1 Government-furnished removable flash media shall be requested for system operation and must be reviewed and accepted by the DLA Flash Media Approval Program.

20.4.3.3.2 Contractor-furnished removable flash media shall be provided in advance and will be reviewed for use on a case-by-case basis.

20.4.3.3.3 Required software, firmware, or documentation (such as SBOMs) may be transmitted to the Government for review via DoD SAFE.

20.4.4 Authorized Maintenance Method & Supply Chain Risk Management (SCRM) All routine diagnostic, configuration, and maintenance activities performed by the Contractor on-site shall be executed exclusively using the controller’s integrated, built-in physical interface (LCD display and keypad). In the event of a hardware failure requiring the replacement of a controller board or module, the Contractor must ensure that all pre-configured replacement parts brought on-site comply fully with DoW SCRM requirements. Specifically, any full replacement module or hardware component must be scanned for malware and unauthorized modifications prior to being installed and activated on the system. Furthermore, the Contractor shall provide a Software/Hardware Bill of Materials (SBOM/HBOM) for the replacement components to verify their integrity prior to installation on the Government installation.

20.4.5 Documentation and Risk Assessment (RA)

20.5 Tasks and Deliverables

The Contractor shall provide required implementation and design documentation to the DLA J6 PM and security engineering teams to conduct a cybersecurity risk assessment (RA) of proposal. Results from accepted RAs will be incorporated into the Systems concepts of operations (CONOPs).

20.6 Deliverables

The table below provides a summary of the deliverables required of the Contractor based on identified cybersecurity requirements for Assess and Incorporate (A&I) and Lean Cybersecurity Risk Assessment (LCRA). DLA Artifacts are documents or evidence provided to document the information system and support test results for RMF assessment procedures. Artifacts provided as supporting evidence to test results must be associated with relevant Assessment Procedure(s). Other deliverables may be added or updated at the task order level.

The documents below are required for an A&I/LRCA, but will be provided by the Government:

• Configuration Control Working Group Charter

• Supplemental Implementation Guide Contingency Plan

• MOU/MOA/SLA

• Incident Response Plan

• Maintenance SOP

• Privacy Documentation

• System Development Life Cycle (SDLC) Documentation

• DLA Access Control Policy

• Disaster Recovery Plan

Note on Deliverables and Government-Provided Templates:

The Contractor shall utilize Government-provided templates to complete and submit all deliverables listed in the table below, as required by Department of War (DoW) guidance. The Contractor must fully complete all required templates, ensuring that the technical documentation and responses accurately reflect the standalone, non-networked ("air-gapped") architecture of the elevator control system.

Deliverable Name

Reference (these sections w/be adjusted based on

PWS/SOW)

Submission Due

A&I/LCRA

RMF Documentation:

System Diagrams (Architecture, Para 20, Section

Days After

Required

Name

Reference (these sections w/be adjusted based on

PWS/SOW)

Submission Due

A&I/LCRA

Authorization Boundary, Data Flow and Purdue)

Contract Award

Comprehensive Hardware/ Software List (DLA provided template)

Para 20, Section

Days After Contract Award

Required

System CONOPs

Para 20, Section

Days After Contract Award

Required

Ports, Protocols and Services Management

(PPSM)

Para 20, Section

Days After Contract Award

Required

FIPS 199

Categorization

Para 20, Section

Days After Contract Award

Required

Cybersecurity Scan Results

(ACAS, SCAP,

WebInspect)

Para 20, Section 4.2.3

Days After Contract Award

Conditionally Required where AB includes components at Purdue 2/3

Security Technical

Implementation Guides (STIGs) and Security

Para 20, Section

Days After Contract Award

Name

Reference (these sections w/be adjusted based on

PWS/SOW)

Submission Due

A&I/LCRA

Requirement Guides (SRGs) Checklists

Documentation supporting RMF security control implementation

Para 20, Section

Days After Contract Award

Required

Control assessment procedure test results

Para 20, Section

Days After Contract Award

Required

Plan of Actions and Milestones (POA&Ms) for all associated vulnerabilities

Para 20, Section

Days After Contract Award, then Monthl y

Required

Privacy Risk Impact Level Analysis (PRiLA)Categori zation Worksheet

Privacy Impact Assessment

Para 20, Section

Days After Contract Award

Required

System Administrator Installation/ Configuration Documentation

Para 20, Section 4.2.2.3

Days After Contract Award

20.7 DLA Purdue Model

21.0 SERVICE CONTRACTOR REPORT (SCR) FAR 52.204-14

(b) Requirement. The Contractor shall report, according to paragraphs (c) and (d) of this clause, annually by October 31, for services performed under this contract during the preceding Government fiscal year (October 1-September 30).

(c) Report elements. The Contractor shall report the following information:

(1) Contract number and, as applicable, order number.

(2) The total dollar amount invoiced for services performed during the previous Government fiscal year under the contract.

(3) The number of Contractor direct labor hours expended on the services performed during the previous Government fiscal year.

(4) Data reported by subcontractors under paragraph (f) of this clause.

(d) Remedies. The Contractor shall submit the information required in paragraph (c) of this clause in the System for Award Management (SAM) at https://www.sam.gov (see SAM User Guide). If the Contractor https://www.sam.gov/ fails to submit the report in a timely manner, the Contracting Officer will exercise appropriate contractual remedies. In addition, the Contracting Officer will make the Contractor's failure to comply with the reporting requirements a part of the Contractor's performance information under the Federal Acquisition Regulation part 42.

(e) Review. Agencies will review Contractor-reported information for reasonableness and consistency with available contract information. If the agency believes that revisions to the Contractor’s reported information are warranted, the agency will notify the Contractor no later than November 15. By November 30, the Contractor shall revise the report, or put its reason in writing for the agency.

(f) First-tier subcontracts.

(1) The Contractor shall require each first-tier subcontractor providing services under this contract, with subcontract(s) each valued at or above the thresholds set forth in 4.303(b), to provide the following detailed information to the Contractor in sufficient time to submit the report:

(i) Subcontract number (including subcontractor name and unique entity identifier); and

(ii) The number of first-tier subcontractor direct-labor hours expended on the services performed during the previous Government fiscal year.

(2) The Contractor shall tell the subcontractor that the…