Attachment 2 - SOW_ISOReg_2020.pdf

STATEMENT OF WORK

(SOW)

FAA’s Mike Monroney Aeronautical Center (MMAC)

ISO 9001, ISO 14001, and ISO 45001 Registrar Services

August 10, 2020

Page ii

Table of Contents

1.0 BACKGROUND

2.0 PURPOSE

3.0 SCOPE

4.0 CONTRACTOR QUALIFICATIONS

5.0 DELIVERABLES AND PERFORMANCE REQUIREMENTS

5.1 OTHER MISCELLANEOUS REQUIREMENTS

6.0 EQUIPMENT, MATERIALS, AND FACILITIES

7.0 FAA RESPONSIBILITIES

8.0 PERFORMANCE LOCATION AND HOURS

The government will provide hardware and/or software to the contractor to complete assigned tasks during the period of performance. The government must retain hardware/software media/tools provided as Government Furnished Equipment as stated herein or purchased with funds provided under this Statement of Work

9.0 TRAVEL

11.0 PERIOD OF PERFORMANCE

1.0 Background

The Mike Monroney Aeronautical Center is an ISO Certified governmental complex located in Oklahoma City, OK. The MMAC provides technical training, facility management functions, logistical support, and Federal Shared Services including financial, information security, and other technology solutions in support of the National Aerospace System.

MMAC organizations requiring ISO audits for industry certification include the MMAC Office of the Director (AMC), the FAA Academy (AMA), Facility Management (AMP), the Logistics Support Facility (AML), Aeronautical Center Acquisitions Services (AAQ-700), and the Enterprise Services Center (AMK). AMA provides technical training for the agency, other aviation organizations, including other governmental and non‐governmental employees (both domestic and international). AML provides support for aviation safety and airspace management. This support includes centralized maintenance/repair of National Airspace Systems equipment as well as; supply chain management, warehousing, distribution, and other logistics support services. AMK is a Federal Shared Services provider in Financial Services, Information Systems Security, and Technology Solutions. AMK customers include FAA and DOT organizations, and external agencies who have agreements in place with the ESC. AMP provides facility support functions including emergency operations and physical security services. AAQ‐700 provides contract award and administration support services.

Various tenant organization located on the MMAC campus are included in the scope of ISO 14001 only.

These organizations include the Office of Aerospace Medicine (AAM), the NAS Engineering Group, (AJW-14), the Office of Foundational Business (AFB) Flight Standards Division (AFS), Aeronautical Information Services (AJV-A), and the DOT Transportation Safety Institute (TSI). AAM operates the Civil Aerospace Medical Institute (CAMI) where they provide medical certification, research, education, and occupational health services. AJW-14 provides engineering support for the National Airspace System (NAS) systems. AFB is responsible for developing, maintaining, and operating national programs for the registration of United States civil aircraft and certification of airmen. AFS develops, delivers, and manages airmen standards, publications and testing as well as policy, training and oversight.

AJV-A develops, publishes, and disseminates aeronautical charts and products to support aviation and the NAS. TSI provides safety training courses for all modes of travel, covering the transport of either people or material. International Organization for Standardization (ISO), an internationally recognized business practice, was designed to provide methods for organizations to achieve and demonstrate compliance with international standards. The aviation industry has already made significant in-roads into establishing the ISO business model. Industry best practices necessitate that the Mike Monroney Aeronautical Center’s (MMAC) AMC lines of business maintain its compliance with international standards in order to effectively provide and foster continual improvement in the areas of Quality, Environmental and Occupational Safety and Health management. It is incumbent upon AMC organizations to manage the quality process and educate AMC's workforce in continual process improvement. The most effective means to achieve this goal is for AMC and its organizations to maintain the following certifications: ISO 9001, ISO 14001, and ISO 45001.

Initial certifications occurred for the following standards on the following dates: ISO 9001 on January 15, 2009 (last recertification in 2020, i.e., 9001:2015); ISO 14001 on September 17, 2008 (last recertification in 2020, i.e., 14001:2015); and OHSAS 18001 on September 29, 2010 (last recertification in 2019, i.e., 18001:2007). The MMAC will migrate certification from OHSAS 18001:2007 to ISO 45001:2018 in September 2020.

2.0 Purpose

The MMAC Environmental and Occupational Safety and Health Management and the BMx systems are fully integrated quality management systems designed to manage and track internal Center processes and standards. Registrar services are needed to sustain certification to these standards with no lapse in certification. Identifying economics of scale is a primary goal of the MMAC.

Manage and maintain the Mike Monroney Aeronautical Center’s (MMAC) ISO quality process and registration. This effort requires Project Manager/Registered Lead Auditor (PM/RLA) and assistant lead auditor services with appropriate ISO 9001, ISO 14001, and ISO 45001 expertise, experience, and technical qualifications to successfully support AMC's effort in obtaining and maintain ISO registration.

3.0 Scope

ISO 9001 SCOPE: Vendor will conduct annual external audits of the AMC Business Management System (BMS) of AMC supported organizations and provide a written report detailing AMC’s conformity to BMS requirements and ISO 9001:2015 standards. All ISO 9001 services will be provided remotely and/or through electronic media; remote audit viability will be determined by the FAA.

ISO 9001 Scope Supported Organization [Approx.] Number of Employees

AMA 704

AMC 18

AMK 948

AMP 229

AAQ-700 69

TOTAL/APPROX. SIZE 1968

ISO 14001/ISO 45001 SCOPE: Vendor will conduct annual external audits of the Aeronautical Center physical environment and provide a written report detailing AMP’s compliance and alignment with ISO 14001:2015, and ISO 45001:2018 standards, as applicable. When feasible, services will be provided remotely and/or through electronic media; remote audit viability will be determined by the FAA.

ISO 14001 audit scope includes All organizations (exceptions listed below) occupying MMAC Oklahoma City Airport Trust (OCAT) leased property as well as FAA operations conducted within the Thomas Road warehouse. This includes contractor operations.

Exclusions from scope:

• Crude oil pumping stations located on MMAC property; pumping stations are not controlled by the MMAC

• Flight Program Operations (AJF) aircraft maintenance and engineering services at MMAC Hangar 8 and Hangar 9; Flight Program Operations (AJF) Flight Program Operations has a stand-alone Environmental Management System and maintains ISO 14001 self-certification from the

FAA.

• Oklahoma City Airport Trust (OCAT). The MMAC leases the land and some of the buildings on campus. OCAT routinely hires their own contractors to perform work on their behalf. The MMAC has minimal control or influence over OCAT contractor activities.

ISO 45001 audit scope only includes AMC-1 Direct Report organizations occupying MMAC Oklahoma City Airport Trust leased property, FAA Logistics Center, FAA operations conducted at the Thomas Road warehouse, and the Transportation Safety Institute. This includes contractor operations.

ISO 45001 Scope

AMA 671

ABP 8

AMC 18

ESC 929

AML 767

AMP 224

AAQ-700 62

DOT 44

TOTAL/APPROX. SIZE 2723

ISO 14001 Scope

AMA 671

ABP 8

AMC 18

ESC 929

AML 767

AMP 224

AAQ-700 62

ATO ( AJV-A, AJW-14, AJI) 912

AVS (AAM, AFS, AFB) 645

DOT 44

Misc. Tenant Staff (OIG) 6

TOTAL/APPROX. SIZE 4286

4.0 Contractor Qualifications

ISO 9001: All auditors must have successfully completed attendance in an Exemplar Global or International Registrar of Certified Auditors (IRCA) certified ISO 9001 LA course.

ISO 14001 & ISO 45001: All auditors must have successfully completed attendance in an Exemplar Global or International Registrar of Certified Auditors (IRCA) certified ISO 14001 & ISO 45001 Lead Auditor course, as applicable.

Individual team members do not need to be certified to all of the three standards; however, the collective team must constitute the required certifications and experience to complete the audits in accordance with this SOW. The positions and the minimum qualifications considered necessary for performance of the work are as follows; the FAA will have final approval of auditors assigned to work this contract.

Registration services include, but are not limited to, certification audits, surveillance audits, recertification audits, and other registrar services as needed. Registration services shall be coordinated and ordered as separate tasks with individual task statements of work. The Contractor must be accredited by the ANSI- ASQ National Accreditation Board ANAB (or equivalent) and authorized to provide third party certification services. The Contractor shall provide all personnel and services in order to meet the requirements and deliverables specified in individual task orders. The Contractor have the ability to provide detailed plans, tools, and timelines to facilitate concurrent audits of the management systems and their plans to maximize operations and reduce duplication of efforts where practicable. Such plans must also address actions to preclude the lapse of certification during alignment/integration activities. The Contractor must be able to provide concurrent audits of the three systems and an integrated audit of the Environmental and Occupational Safety and Health Management System. The FAA and the Contractor will negotiate an acceptable audit schedule and audit plan. The FAA anticipates that concurrent audits will be completed within one workweek (Monday – Friday). The Contractor will provide adequate staffing to provide the concurrent/integrated audits within one workweek. The Contractor will respond to all requests from the FAA within 2 calendar days from date of receipt of all communications. Due dates, travel, and tentative audit schedules will be coordinated prior to the issuance of individual task orders.

The offeror must be accredited by the ANAB National Accreditation Board (or equivalent) and authorized to provide third party certification services; the offeror must provide current certification(s) to demonstrate board accreditation. One PM/RLA (certified by RAB or IRCA) will need to work directly with AMC to perform the services required by this contract with at least a second part time auditor to assist with audit and technical activities. The part time auditor(s) will be required to have successfully completed an accredited lead auditor course, have at least 3 years of experience implementing ISO series standards in an organization, and at least 3 years of filed experience. Auditors should be recognized as a RAB or IRCA provisional auditor or lead auditor.

The PM/RLA will serve in a full-time capacity on this contract and will be considered Key Personnel.

The program Point of Contact at the FAA MMAC will be the FAA Program Manager or the COR.

LABOR CATEGORY

QUALIFICATION REQUIREMENTS

Lead Auditor

Lead Auditors must be registered with the Registrar Accreditation Board (RAB) or another similar body; be certified in any or all of the ISO 9001, ISO 14001, and ISO 45001 standards; and have at least six years of experience performing audits to the ISO 9001, ISO 14001, and OHSAS 18001 / ISO 45001 standards. Lead auditors must have experience and ability to audit large multi-site organizations. Lead auditors must have at least two years of experience performing audits for government agencies. Lead Auditors must have, at a minimum, a bachelor’s degree in the field of work governed by the position they are assigned to (if applicable to the position) or certification of formal training in the field of work governed by the position.

Support Auditor Support Auditors must be registered with the Registration Accreditation Board (RAB) or another similar body for the standard for which they audit. Each proposed Support Auditor must have a minimum of four years of audit experience for their respective standard as well as two years of auditing government agencies.

ISO 14001 auditors must have at least four years of experience with environmental compliance. ISO 45001 auditors must have at least four years of experience with Occupational Safety and Health compliance. ISO 9001

LABOR CATEGORY

QUALIFICATION REQUIREMENTS

auditors must have at least four years of experience with quality management system compliance.

Project Manager/Registered Lead Auditor (RLA)

The PM/RLA must have a minimum required experience within the stated functional discipline. Experience must include a practical and theoretical understanding of surveillance and recertification audits with a minimum of 6 years’ experience in creating ISO 9001, ISO 14001, and ISO 45001 based systems, or similar comparable experience. The PM/RLA will also need to have held national/international certifications as Lead Auditor for a minimum of 3 years.

5.0 Deliverables and Performance Requirements

All deliverables must be in a form that complies with the applicable ISO requirements and industry standards.

• MISCELLANEOUS TASKS: PROVIDE MASTER SCHEDULE/OPENING MEETING

o Provide a detailed audit schedule (i.e., dates, events, times, locations, team members) no later than 60 calendar days prior to each scheduled audit Actual schedule dates are dependent on the availability of funds and other requirements of the Federal Aviation Administration; Audit schedule is determined by current certification date requirements, i.e., triennial recertifications and annual surveillance audits, as applicable

The contractor must maintain a single project schedule from which various project reports must be produced o Hold opening and closing meetings to outline audit expectations.

• CONDUCT SURVEILLANCE AUDITS

o Scope: ISO 9001, ISO 14001, ISO 45001 o Conduct current ISO standard surveillance audit to maintain existing certification IAW current ISO standards o Provide professional advice and participate in external audit activities with qualified personnel to perform the audit activities o Review and advise on all documents prepared by Divisions in support of their implementation, to include corrective actions and reporting o Quality Control: The contractor must conduct evaluations of performance to assure that task outcomes are met, and to evaluate contract compliance o Review and verify the effectiveness of process measures o Certain tasks may require the contractor to attend internal meetings to achieve an understanding of an assignment and make report of progress towards certification

• CONDUCT INTERNAL RECERTIFICATION AUDITS

o Scope: ISO 9001, ISO 14001, ISO 45001 and Migration o Conduct triennial ISO recertification audit IAW current ISO standards o Document Review

Review and advise on all documents prepared by Divisions in support of their implementation, to include corrective actions and reporting

Formally evaluate all documents submitted for review to determine, document, and formally report:

• Compliance against the applicable ISO requirements and/or current standard

• Consistency with other organizational documents

• Other issues that may impact registration o Quality Control: The contractor must conduct evaluations of performance to assure that task outcomes are met, and to evaluate contract compliance

• MISCELLANEOUS TASKS: REPORTS AND PRESENTATIONS

Provide professional recommendations to organizations in regards to internal corrective actions, i.e., identification, resolution of issues and concerns or conflicts associated with the ISO certification process An annual Report will be submitted to the FAA Program Manager and COR, due at the end of each audit, summarizing the overall project performance with respect to:

Problems and/or issues Deliverable performance Contract compliance

The report will be transmitted to the FAA Program Manager with a copy to the COR and to the organization originally submitting the document, when applicable, or as directed by the Program Manager

• MISCELLANEOUS TASKS: CLOSE-OUT

o Debrief management of the area audited at the end of each audit day or as agreed to o Hold a closing meeting at the conclusion of each audit to recap the debriefings and to advise on the overall audit output

5.1 Other Miscellaneous Requirements

Performance on hold because of the unavailability of funds and other FAA requirements will begin within 5 calendar days of written notice to proceed from the Contracting Officer.

The contractor must comply with existing and evolving FAA guidance, policies, and procedures.

Session Materials and Advisory Services: Any materials developed under this contract are the property of the government. In addition the government may use and retain all materials developed.

Session materials developed during the period of this contract on behalf of the MMAC are the property of the Federal Aviation Administration.

6.0 Equipment, Materials, and Facilities

The FAA will provide the contractors with workspace within offices located at the MMAC for the duration of this contract. The government will provide the following equipment to all contractor personnel while ON-SITE at customer locations: desk space, meeting rooms, local telephone service, and access to the internet. The contractor will not have access to FAA internal network systems. The contractor will return all Government Furnished Equipment and Materials at the end of the contract performance period.

A government escort will accompany the contract employee(s) at all times while they are in performance of their duties. The contract employee will be issued a Daily Escort required visitor pass. Contractor personnel visiting any Government facility in conjunction with this contract shall be subject to the Standards of Conduct applicable to Government employees. Site-specific regulations regarding access to classified or sensitive materials, computer facility access, issue of security badges, etc. shall be provided as required. The Contractor shall coordinate all visiting activities with the appointed COR and the FAA Program Manager(s).

The FAA will reproduce any materials needed for this project that do not involve copyright materials that have not been approved for reproduction.

7.0 FAA Responsibilities

This statement of work was not formed as nor is it to be administered or performed as personal services.

Accordingly, the Contractor shall designate appropriate and sufficient supervisory personnel to meet task outcomes. Contractors supervisors will provide day-to-day supervision of all contract personnel including, but not limited to, work assignments and performance monitoring, payroll records, leave approval and monitoring, etc. At no time will Contractor personnel be supervised by FAA managers or other FAA personnel. The FAA will provide, as needed by the Contractor and its employees, limited assistance in the form of technical and policy guidance through the assigned COR.

Formal communication channels exist and will be utilized at all times between the auditor, the MMAC, and any MMAC employees or MMAC contract personnel. If the auditor requires information from MMAC contractor personnel, the auditor must initiate the request through the Contracting Officer’s Representative (COR), depending on the information requested. The specific tasks and assignments, as well as the dates of travel, are to be determined by and coordinated with the FAA Program Manager(s) with travel preauthorization facilitated by the COR.

8.0 Performance Location and Hours

The government will provide hardware and/or software to the contractor to complete assigned tasks during the period of performance. The government must retain hardware/software media/tools provided as Government Furnished Equipment as stated herein or purchased with funds provided under this Statement of Work.

The contractor services shall be maintained and be consistent with Government personnel working hours Monday through Friday (excluding Federal holidays) unless otherwise specified. Primary hours of performance for contractor personnel, unless otherwise specified, are from 8:00 am to 4:30 pm CST. Any services that qualify as remote services should be provided remotely or through electronic media and must be confirmed with the FAA Program Manager and COR to determine eligibility. All deliverables that are provided electronically must be compatible with existing FAA software/hardware. Standard Center operating hours are Monday through Friday from 6 am to 6 pm CST, excluding holidays unless otherwise specified.

The Registrar services desired by MMAC will be performed at the following government sites.

Federal Aviation Administration Mike Monroney Aeronautical Center 6500 S. MacArthur Blvd.

Oklahoma City, OK, 73169

9.0 Travel

Dates and location of travel are to be determined by the FAA Program Manager and the contractor auditing team and coordinated with the COR. Travel requires final approval by the Contracting Officer.

Travel will be required to each location being audited and will be defined and approved, in advance of actual travel performance by the CO or COR. Applicable receipts must be submitted with the invoice prior to cost reimbursement for travel expenses. Travel expenses will be reimbursed in accordance with the Federal Travel Regulations (www.gsa.gov), AMS contract cost principles for travel costs, the terms and conditions of the contract and AMS Clause 3.3.2-2 Reimbursement for Travel and Subsistence.

11.0 Period of Performance

The period of performance is 12/15/2020 through 12/14/2025. The period of performance for the resultant contract will be effective for one (base) year from the date of award with four additional one-year option periods. Options may be exercised when it is determined to be in the best interest of the Government to continue this service.