Attachment B - Advanced Imaging Technology Statement of Work.pdf

RFP 70T04023R7672N001

AIT Equipment and Services

Transportation Security Administration (TSA)

Enterprise Support (ES)

Acquisition Program Management (APM)

Statement of Work (SOW) Advanced Imaging Technology (AIT)

Attachment B

1. Background

The Transportation Security Administration (TSA) is charged with the mission of protecting the nation’s transportation systems to ensure freedom of movement for people and commerce. The mission of TSA’s

Acquisition Program Management (APM) is to deliver innovative, mission-driven capabilities required by the frontline to safeguard America’s transportation system.

TSA uses security related technologies to help secure approximately 1.8 million passengers, 1.2 million checked bags on 25,000 flights at over 430 federally regulated airports every day. TSA uses AIT technology for on-person screening of passengers for undivested items.

1.1 Overview of Services

This Statement of Work (SOW) defines the requirements for the materials and support to deliver, install, perform Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT), and provide warranty and maintenance services on each system in accordance with this scope of work. Offerors shall propose a qualified system to include all Engineering Change Proposals (ECPs) that have been approved as of the date of award. If an ECP is approved after award of this contract or during deployment, the TSA will determine whether it is necessary to modify the contract to reflect the result of the ECP. Should TSA approve an ECP for any updated software after award of this contract and during the deployment of AIT units, the Contractor shall begin delivering systems from the Contractor’s warehouse with the approved software, or upgrade fielded systems with approved software during regularly scheduled maintenance under coverage of the warranty period at no additional cost to the Government.

All services requested under this SOW are non-personal in nature.

1.2 System Integrator

As a part of these installations, third parties will be responsible for certain parts of the delivery and installation.

The third parties and their responsibilities are outlined below:

The Rigger is responsible for:

Implementation of the contractor rigging specifications.

Off-loading or up-loading upon delivery or pick-up, temporary storage, and/or any other equipment movements as needed.

Providing adequate protection (above and beyond required shipping and packaging protections identified in the packaging) for the AIT and ancillary equipment and for the site infrastructure during any and all equipment movements.

Supporting all crating activities as required including crating, uncrating, or crate disposal.

1.3 SEDS Contractor (SC)

The Government will designate a Screening Equipment Deployment Services (SEDS) Contractor (SC) that will act as the Primary Logistics Coordinator for this effort. The SC will be the primary point of contact for each installation to assist in the facilitation of installation, and temporary local storage (if necessary). The SC will receive and maintain copies of all plans, reports, and any additional documentation pertaining to this effort. The

SC must be included in all communication and resolution of site installation issues. The SC will coordinate with the Government to resolve site installation matters.

The SEDS Contractor is responsible for:

Communicating with TSA, the airport authority, riggers, and the contractor regarding the schedule for installation and testing of the ancillary equipment. This will include (but is not limited to) coordinating the arrival of equipment at the facility, storage of equipment as needed, as well as verifying readiness of the airport for installation.

The SC does not have the authority to make changes to scope, price, schedule, or terms and conditions of this SOW. In addition, the SC does not have the authority to sign contractual documents, order changes, modify contract terms, or create any commitment or liability on the part of the Government.

2. Technical Requirement\Tasks\Outcomes

2.1 AIT Equipment General Information (CLIN 0001 and 0006 [OPTIONAL])

The Contractor must provide fully functional, qualified equipment including all the hardware and software required to verify compliance requirements as defined in the Checkpoint Requirements and Planning Guide

(CRPG).This can be found at https://www.tsa.gov/sites/default/files/checkpoint-requirements-and-planning-guide.docx.

In accordance with the most current TSA- approved Production Baseline (PBL), as documented in the TSA Master Configuration Item List (MCIL) in effect at the time of deployment.

The Contractor must be responsible for all labor, materials, equipment, and support services needed to deliver, assemble, power up, configure and test the equipment in the required operational condition. This includes but is not limited to any system component, software, or control consoles to meet the end-state required configuration.

The Contractor must maximize the use of COTS hardware and software to meet the Contract requirements. The use of commercial items does not exempt the Contractor from complying with the SOW requirements. The Contractor must ensure that all hardware, software, and documentation required for the operation and support of the AIT are provided as part of the supplies and services stated herein.

2.1.1 The Contractor must maintain an Installation Manual that describes the necessary instructions and requirements for the installation, setup, and configuration of the AIT. The Installation Manual must include any special instructions or requirements such as orientation, environmental requirements, power connectivity, maintenance access, and all site planning guidelines that would impact installation, operational, and/or maintenance capabilities.

CDRL: C023, Installation Manual

2.1.1.1 The Contractor must maintain an Operator Manual that describes all functions for the operation of the AIT systems. The Operator Manual must include detailed instructions on how to execute each function. The Operator Manual must include any troubleshooting guidance necessary or appropriate to resolve errors; not requiring corrective maintenance by qualified technicians. The Operator Manual must identify and provide the procedures for all Level 1 Preventive Maintenance and Level 1 Corrective Maintenance activities as defined in applicable sections of Integrated Logistics Support Contracts that meet these requirements. The Operator Manual must describe any operations of the Contractor's network management, remote monitoring and control system functions, and procedures.

CDRL: C022, Operator Manual

2.1.2 AIT Equipment and Deliverables

The Contractor must provide fully functional equipment in accordance with this SOW and the most current TSA approved PBL as documented in the TSA MCIL, that can operate in an environment that is described in https://www.tsa.gov/sites/default/files/checkpoint-requirements-and-planning-guide.docx https://www.tsa.gov/sites/default/files/checkpoint-requirements-and-planning-guide.docx the CRPG. The Contractor must ensure that all hardware, software, and documentation required for the operation and support of the AIT are provided as part of the supplies and services stated herein.

All equipment is subject to Government approval for each installation site configuration.

The AIT unit consists of the components listed in the following table:

Component Name QTY

AIT 1

Operational Test Kit (to include calibration materials) 1

AIT Installation Manual (digital copy) 1

AIT Operation Manual (digital copy) 1

Original Equipment Manufacturer(OEM) Maintenance Manual 1

Uninterruptible Power Supply 1

Seismic Brackets, when required See below

2.1.2.1 Uninterruptible Power Supply

The Contractor shall provide and install an Uninterruptible Power Supply (UPS) that will function with the AIT in accordance with this SOW, as applicable to the proposed platform. The UPS shall operate utilizing the existing power distribution system to provide a high quality, reserve source of power to electronic equipment loads in cases of power failures or fluctuations to allow proper shutdown and safeguarding of the AIT. The

Contractor shall ensure that the UPS site installation guidelines are included in the AIT Installation Manual. The system shall consist of a converter, system battery, solid state inverter, automatic static bypass transfer circuit, and an integral maintenance bypass circuit.

2.1.2.2 Seismic Brackets (CLIN 0011 [OPTIONAL])

The Contractor shall provide systems with the appropriate quantity of seismic anchoring brackets and hardware needed for installation as required based on applicable federal, state, and local codes for a deployed location (e.g., west-coast).

2.1.3 Factory Acceptance Test Plan

The Contractor shall prepare and submit a Factory Acceptance Test (FAT) Plan that describes methods for testing, evaluating, and accepting the AIT at the Contractor's facility prior to shipment. The FAT Plan shall define the range of tests, system initialization requirements, input data, expected output, and the criteria for evaluating test results. The Contractor shall identify schedules and all test and evaluation resources required, including personnel, equipment, and facility. The Contractor shall identify all mitigation plans and procedures in the case of failed testing events.

The Contractor shall prepare and deliver the AIT FAT Plan in accordance with the referenced CDRL:

C004, Factory Acceptance Test Plan

2.1.4 Factory Acceptance Test Procedures and Reports

The Contractor shall conduct a FAT for each AIT in accordance with the FAT Plan and Procedures prepared by the Contractor, and approved by the Government. The Contractor shall prepare and submit FAT Procedures to TSA for approval. The Contractor shall perform the approved FAT Procedures for each FAT under the witness of the Government, or a Government Designated Representative. The Contractor shall ensure that the test procedures indicate traceable paths to the approved Contractor's Verification Requirements Traceability Matrix.

The Contractor shall prepare a FAT Report and a Quick Look Report (QLR) at the conclusion of each test. The

Contractor shall deliver the AIT FAT Procedures, Reports, and QLRs in accordance with the following referenced CDRLs:

CDRL: C005, Factory Acceptance Test Procedures

C006, Factory Acceptance Test Report

C007, Quick Look Report

2.2 Equipment Shipping (CLIN 0003 and 0008 [OPTIONAL])

The Contractor shall meet the packaging requirements of Government Property (GP) and Contractor-Acquired Property (CAP) with the guidance provided in the Standard Practice for Commercial Packaging, ASTM-D-3951, as well as with the use of best commercial practices.

The Contractor shall provide dunnage material for storage and shipping as defined by the Government or as recommended by the Manufacturer to prevent damage during shipment.

The Contractor shall ensure best commercial practice standards are implemented for all CAP or material in the performance of the contract.

After completion of FAT, the Contractor will be ship the AIT unit to a riggers warehouse that is under the control of the TSA systems integrator. It will be staged there in preparation for deployment, usually for 1 to 3 weeks, before installation. The AIT unit will be delivered to the airport by the systems integrator and rigged for installation the night of install.

Any installation kits or other material needed for the rigging and installation will not be stored or shipped by

TSA or its systems integrator. It will be the Contractor’s responsibility to manage these additional items in coordination with the systems integrator and TSA.

If the site is not prepared to the point that install will occur within 3 weeks of delivery, the Contractor will ship the AIT unit to a TSA warehouse until the site is ready for installation. After the site is ready, TSA is responsible for shipping the AIT unit from the warehouse to the airport.

Before shipping any equipment, the Contractor shall prepare and deliver the documentation required in accordance with the referenced CDRLs. The MSDS shall be submitted in accordance with Executive Order (EO) 13514, “Federal Leadership in Environmental, Energy, and Economic Performance," and Federal Standard No. 313, Material Safety Data, Transportation Data and Disposal Data for Hazardous Materials Furnished to Government Activities. A complete MSDS (CDRL P003) shall be developed and provided to the

Government stating compliance with the requirements of 29 CFR 1910.1200, OSHA Hazard Communication.

The Contractor shall submit an official letter to the Government if the shipment does not contain radioactive/hazmat materials.

The Vendor Shipping and Receiving Report” (TSA Form 251/251.1) shall be utilized for each AIT system delivered, along with any peripherals, and shall be approved by the Government after Factory Acceptance Test (FAT) (which will include an itemized listing with description, make, model, serial number, and full TSA bar code along with the acquisition cost per AIT unit). The TSA Form 251/251.1 “NOTE” portion shall be completed and submitted by the shipper once the AIT unit(s) are ready for movement and sent to the Government for approval. The TSA 251 form shall be submitted in accordance with the Equipment Move Form.

The Contractor shall prepare and deliver Equipment Move Form(s) in accordance with the referenced CDRL:

CDRL P005 – Equipment Move Form(s)

2.3 AIT Equipment Installation (CLIN 0004 and 0009 [OPTIONAL])

The Contractor shall comply with laws and regulations governing the acquisition, receipt, recordkeeping and reporting of GP. The Government shall have routine access to the GP whenever deemed necessary. The Contractor’s property management system shall implement life-cycle management of GP and CAP.

The Contractor shall coordinate all inbound and outbound shipments and moves of Government Property with the Government three to five business days in advance of movement by using Government documents (TSA Form 251 Vendor Shipping and Receiving Report) for new AIT units or DD-1149 (Requisition and Invoice Shipping Document) for movement of Government-owned AIT systems. The Government will confirm/verify Government paperwork/information is valid prior to movement. The Government will provide TSA bar codes to affix to “new” property.

The Contractor shall identify any unique storage requirements for the AIT system(s) and related equipment. All materials shall be packaged and marked in accordance with ASTM-D-3951. In addition, for each AIT system, the intermediate and exterior container shall be clearly marked to identify contents.

The Contractor shall provide a Disposal Plan and processes to analyze property serviceability and non-serviceability condition status for all GP to support program utilization, reutilization, cannibalization, and spare parts provisioning, or recommend excess for disposal or disposition to the PA. The information will include a Material Safety Data Sheet (MSDS) which describes hazmat/bio-hazard and non-hazmat/non-biohazard, etc.

The Standard Configuration Report, including make and model, shall be provided when shipping a system. The report shall state the name and configuration of the AIT system and include a photograph of the AIT system.

The Contractor shall prepare and deliver the Disposal Plan, Material Safety Data Sheet, and Standard Configuration Report in accordance with the referenced CDRLs:

CDRL P002 - Disposal Plan CDRL P003 – Material Safety Data Sheet CDRL P004 - Standard Configuration Report

2.3.1 Asset Tracking

The Contractor shall coordinate shipments and moves of Government property with the Government.

2.3.2 Site Preparation

The Contractor shall support all activities necessary to install the AIT system and perform final system checkout of the AIT systems in preparation for a SAT. The Contractor shall coordinate the installation activities with the systems integrator. Specific airport requirements must be followed. The Contractor shall provide support for site design, system integration, and system installation.

2.3.3 Site Coordination

The Contractor shall coordinate with the Government Site Manager/representative, other Government Contractors, airport and air carrier representatives, and stakeholders for specific AIT installation sites.

CDRL C008 - Site Assessment and Survey Report

2.3.4 Equipment Installation

Installation and SAT of AIT systems shall minimize, to the extent possible, disruption or interference with airline or airport operations. The Contractor shall work in conjunction with the Government and systems integrator to ensure successful installations of the AIT. The Contractor shall ensure that installation activities are coordinated prior to installation with the site to minimize the impact on day-to-day operations at the sites and their related systems. Any disruptions or interference with airline or airport operations that cannot be avoided shall be closely coordinated with and approved in advance by the affected parties prior to commencement of such activities. The Contractor shall perform work at night, weekends, or other varied airport nonoperational hours when required. The Contractor shall remove all debris from the site following site preparation and installation activities. The Contractor shall discard all debris in an appropriate off-site facility.

2.3.5 Government Site Manager/Representative

The Government will designate a site manager for each equipment installation. The site manager, as the primary point of contact for each installation, will assist in the facilitation of installation. The site manager will be included in all communication and resolution of site installation issues. The site manager will mitigate site installation matters.

2.3.6 Inventory Reporting

The Contractor shall provide an Inventory Status Report that provides the Government with real-time visibility for assets within the supply chain. The Contractor shall prepare and deliver the Inventory Status Report in accordance with the referenced CDRL.

CDRL P006 – Inventory Status Report

2.3.7 Site Acceptance Test Plan

The Contractor shall prepare a SAT Plan that describes methods for testing, evaluating, and accepting the AIT at each site. The Contractor's SAT Plan shall define the range of tests, system initialization requirements, input data, expected output, and the criteria for evaluating test results. The Contractor shall identify all Test and Evaluation (T&E) resources required, including personnel and equipment. The Contractor shall identify all mitigation plans and procedures in the case of failed testing events.

The Contractor shall deliver the AIT SAT Plans in accordance with the following referenced CDRL:

CDRL: C010, Site Acceptance Test Plan

2.3.8 Site Acceptance Test Procedures and Reports

The Contractor shall prepare SAT Procedures that detail the step-by-step test process to be conducted during each SAT. At a minimum, a separate SAT Procedure shall be prepared and submitted for each AIT. The Contractor shall ensure that the test procedures indicate traceable paths to the approved Contractor Verification Requirements Traceability Matrix. The Contractor shall prepare a SAT Report and Quick Look Report (QLR) at the conclusion of each test.

CDRL: C011, Site Acceptance Test Procedures C012, Site Acceptance Test Report C007, Quick Look Report

All equipment is subject to Government approval for each installation site configuration.

2.3.9 Advanced Imaging Technology Set-Up

The Contractor shall install and test the required software and hardware to allow implementation of AIT operations into the existing modset in accordance with the CRPG.

2.4 Training (CLIN 0003 and 0010 [OPTIONAL])

The Contractor shall provide various training services that will include all labor, material, and Other Direct

Costs (ODC). These tasks may include, but not limited to, provision of training materials, course development, delivery of training at designated sites, or training evaluation activities for any AIT or system component under configuration management.

The Contractor shall conduct training classes following AIT SAT for no more than five (5) business days with up to ten (10) TSA personnel/operators in each class for each Government selected airport in accordance with a Government-approved training program for each AIT. These operators will be selected from the current screener population, if possible. The Contractor shall ensure that this training is targeted to match the skill level, qualifications, and capacity of current AIT operators and supervisors. The Government will witness the initial training classes. Training location will be provided by the COR after award. The contractor has 10 business days to prepare for the training.

The Contractor shall provide and utilize the AIT Training Materials referenced in the below CDRLs when conducting training:

CDRL: C017, Participant Guide C018, Classroom Presentation

2.5 Equipment Warranty, including Maintenance and Logistics Support Services (CLIN 0002 and 0007

[OPTIONAL])

2.5.1 Equipment Under Warranty

The Contractor shall provide a two (2) year on-site, parts and labor included, warranty beginning upon successful completion of the SAT of the AIT, as approved by the TSA. This warranty shall include Corrective Maintenance and Preventative Maintenance for the AIT and for all associated ancillary equipment connected to

it. The Contractor shall perform all Preventive and Corrective Maintenance as detailed in sections below for all covered equipment throughout the duration of the warranty period.

2.5.2 Warranty Implementation Plan

Coverage will be for all preventive and corrective maintenance, and responsiveness shall be sufficient to meet the minimum maintenance requirements specified in this SOW. The Contractor shall prepare and deliver a

Warranty Implementation Plan (WIP) in accordance with the following referenced CDRL:

CDRL: L016, Warranty Implementation Plan

2.5.3 Parts Obsolescence Management Program

The Contractor shall establish and implement a parts obsolescence program. The Contractor shall be responsible for the identification, resolution, and implementation for all Diminishing Manufacturing Sources (DMS), obsolescence, and sustainment issues associated with the repair of Contractor-provided AIT units and related equipment (also referred to as Transportation Security Equipment (TSE)). The Contractor shall document procedures for identifying and controlling DMS and obsolescent technologies in a Parts Obsolescence Management Plan. The Contractor shall submit a monthly Parts Obsolescence Report that includes identification of obsolete parts, problem resolution, and a recommended approach for mitigating risks associated with obsolete parts over the life of the systems. Changes considered necessary by the Contractor to ensure the continued repair of the TSE shall be made in accordance with the Configuration Management procedures (RFD, RFW, and ECP).

The Contractor shall prepare and deliver a Parts Obsolescence Management Plan and a Parts Obsolescence Report in accordance with the referenced CDRL:

CDRL: L017, Parts Obsolescence Management Plan

L018, Parts Obsolescence Report

2.5.4 Warranty Period Logistics Support Services

The Contractor shall provide logistics support services (maintenance and repair) for in-warranty equipment necessary to meet the logistics support service level requirements. Logistics support service shall include:

Preventive Maintenance (PM), in accordance with TSA-approved Original Equipment Manufacturer (OEM) Preventive Maintenance manuals, schedules approved by the COR, as outlined in this SOW, and state and federal environmental and safety regulations. Tests required at scheduled intervals, such as radiation surveys, are to be considered PM. The Contractor shall coordinate all maintenance scheduling with local TSA staff as appropriate. The Contractor shall ensure that PMs are performed within 30 days (and no greater than 38 days) of the previous PM; and the Contractor shall ensure a minimum of 12 PMs are performed during the calendar year (unless subject to waiver). The Contractor shall not perform PM during the calendar month in which a unit is installed. In a month when a unit is being decommissioned, the Contractor shall request COR approval to waive the requirements for performing monthly PM.

Otherwise PM shall be performed on all required units.

Corrective Maintenance (CM), in accordance with TSA approved OEM maintenance manuals and as outlined in this SOW, whether performed on site or at a repair depot. The Contractor shall record and maintain Failure Mode Identifiers (FMI) for all CM actions performed. If Field Service Technicians

(FSTs) are not located on site but are needed to correct a failure, they shall be scheduled within 15 minutes of receipt of a service request to travel to the site to correct the failure at the earliest reasonable time.

The Contractor shall be responsible for any repairs resulting from ineffective preventive or corrective maintenance.

The Contractor shall be responsible for providing trained and certified FST who have successfully passed training by the OEM on the fundamentals of safety, functional operation, maintenance and repair on specific TSE and associated peripheral equipment.

All labor for TSE preventive maintenance, corrective maintenance, and associated logistics support resources shall include repair parts, training, tools, test equipment, and travel. The Contractor shall inform the TSA PBL COR when refurbished parts are initiated into the Contractor's supply chain for corrective maintenance repairs.

The Contractor shall ensure that parts obsolescence during the Contract period of performance does not affect the Contractor's ability to meet service level requirements.

Repair part shipment from the Contractor part location to the AIT unit shall include all associated transportation costs including logistics transportation to the unit.

The Contractor shall ensure documentation of all maintenance actions (including preventive, corrective, and excepted) in the TSE database.

The Contractor shall capture the FMI codes in the TSE Database. One or more FMIs will be assigned for each CM action. The FMI shall identify: the failure cause; sub-system part(s) consumed in the repair; and detailed resolution or action code(s) that will restore the TSE to operational condition. The Contractor shall submit the proposed FMI codes to the Government for approval prior to implementation. The Contractor shall ensure only the approved FMI codes are used in maintenance reporting. The Contractor shall supply TSRC with a list of standardized problem codes, definitions, and priority ratings for trouble ticket generation and apply the codes in a consistent manner.

In the event a scheduled maintenance activity (preventative maintenance) cannot be completed due to factors outside of the Contractor's control or the performance of CM prevents the Contractor from completing PM, the Contractor shall reschedule PM on the impacted machines during the same month. If unable to reschedule, the

Contractor will ask for relief from the PM task from the COR. It is at the Government's discretion whether relief is granted or not. If relief is not granted, then the PM action must be completed within 48 hours of notice of TSA's disapproval of the request for relief.

The Contractor shall establish and maintain a TSE Database which:

Includes the entire inventory of fielded TSE maintained under this Contract and which will be the basis for computation of performance metrics;

Uniquely identifies each TSE by model, serial number, and bar code number;

Includes information on all accumulating PM and CM actions (including warranty if applicable) and

Radiation Surveys;

Includes PM start time (at the machine) and stop time (when the FST is finished) for every unit so TSA can monitor the average PM duration time;

Includes Reliability, Maintainability, Availability (RMA) metrics data (high and low level) and provides the full maintenance and performance history;

Reflects all time values reported in local airport location time;

Provides Government access and data rights to all data collected;

Provides designated Government personnel real-time 'read-only' access to a database enabling them to query maintenance actions on work order tickets;

Ensures FMI codes are in a standard format and used in a consistent manner;

Allows the Government to download data in an excel spreadsheet; and

Includes parts replaced data.

The Contractor shall establish and maintain a TSE Database in accordance with the following referenced

CDRL:

E004, TSE Database

2.5.5 Logistics Support Service Level Requirements

The Contractor shall provide Logistics Support services for fielded TSE to meet the following Operational Availability (Ao) Service Level Agreement (SLA) requirements:

Performance Disincentive Operational Availability:

The Contractor shall calculate the monthly Ao for each AIT technology at each airport and evaluate each against the SLA specified in the above chart. In any month when Ao of the AIT unit(s) at an individual airport falls below the contract SLA requirement, the Contractor shall reduce the monthly invoice for the subject AIT (CLINs 0001 and 0006 [OPTIONAL]) unit(s) price as follows:

Values

Operational Availability

During Airport Operating Hours

Service Level Agreement

Required Ao

Airport Level SLA1 98%

Operational Availability

Performance Level Disincentive

Below SLA Requirement Airport Level (Ao < 98%)

-5% for each AIT unit by airport

Example: At the airport level, if Ao for all the AITs located at PHL for the month of November 2019 is 97% Ao, the Contractor shall apply a 5% reduction to the daily unit maintenance price for all AITs located at PHL in November 2019 (and the single AIT with 85% Ao is only reduced by 20% (i.e., airport level and machine level reduction are not additive)). Examples on invoice deduction provided below:

9 AIT $100/day for November: 9 x $100 x 30 x 1 = $27,000

Penalty for Ao < 98% for AIT for November: $27,000 x .05 = $1,350 Invoiced number for AIT for November: $27,000 - $1,350 = $25,650 invoiced

The Contractor shall include only installed units that are expected to be operational in its calculations of Ao.

2.5.6 Reliability, Maintainability, Availability Metrics

The Contractor shall submit TSE RMA Metrics Reports in accordance with the CDRL definitions and standards. All reported metrics shall be reported for the month in which they are incurred. In those cases, when a low level metric spans a period longer than the reporting period, only that portion of the metric actually taking place during the reporting period shall be calculated and included in the calculations of higher level metrics for the reporting period.

The Contractor shall submit the TSE RMA Metrics Reports in accordance with the following referenced CDRL:

E011, TSE RMA Metrics

2.5.7 Preventative Maintenance

PM is scheduled during nonoperational hours or during nonpeak operational hours with approval of local TSA officials. Nonoperational hours must coincide with Airport Operational Hours. If local TSA officials have approved PM during nonpeak hours, then the Contractor shall submit a list to the COR that identifies the location and the TSA official. There are two discrete levels of PM:

Level I PM – This is primarily performed every shift (1–3 times a day), daily, and weekly. Level I PM is performed without the need to open the machine. These activities are currently performed by TSA personnel and are not a part of this Contract.

Level II PM – This is primarily performed every month, quarter, and/or year. These activities are defined in the OEM preventive maintenance manuals and are included under this PBL service level agreement. The Contractor shall ensure that PMs are performed within 30 days (and no greater than 38 days) of the previous

PM; and the Contractor shall ensure 12 PMs are performed during the calendar year (unless subject to waiver).

The Contractor shall ensure that technicians notify the local POC or local Coordination Center that the PM is complete and that the system is in service. The Contractor shall recommend adjustments to PM schedules, with supporting rationale, that have the potential to improve TSE reliability or reduce costs without degrading TSE reliability. Cost reductions will be shared between the Contractor and the Government.

Level II PM shall be performed in accordance with the most recent OEM maintenance manual, as well as state and federal environmental and safety regulations. The Contractor shall obtain and utilize OEM PM checklists.

The Government reserves the right for consideration if Level II PM is not completed as defined in the Level II PM requirements above.

In the event a scheduled maintenance activity cannot be completed due to factors outside of the Contractor's control or the performance of CM prevents the Contractor from completing PM, the Contractor shall reschedule PM on the impacted machines during the same month. If unable to reschedule due to outside factors, the PM shall notify the COR.

In providing Level II PM, the Government requires the Contractor to:

Coordinate scheduling with local TSA staff.

Provide the next month's PM notifications to each location no later than 7 calendar days prior to the end of the current month. Notifications shall specify airport code, airport name, manufacturer, model, SN, TSA bar code, PM due date, and the week PM is scheduled to be performed.

o The Contractor may contact local TSA to conduct the PM on an earlier date than scheduled;

however, if the earlier date is not convenient for local TSA this shall not be reflected as a lack of access to the facility and the Contractor shall adhere to the original schedule to perform the PM.

Coordinate with local TSA staff the week prior to the week PM is scheduled.

Notify local TSA staff if the scheduled week slips and coordinate a new date within the required periodicity.

Send a summary level file (airport code, airport name, manufacturer, model, SN, TSA bar code, PM due date, and the intended week for PM) of all PMs scheduled for the month to the TSA COR on the first day of that month.

Make every effort to schedule PM actions during non-operational hours or non-peak operational hours with approval of local TSA officials. PM shall be scheduled during nonpeak operational hours or during hours that both the Contractor and local TSA officials agree upon. If local TSA officials have approved

PM during times other than nonpeak hours, then the Contractor shall submit a list to the COR that identifies the location and the TSA official.

Provide all required consumables (cleaning supplies, filters, etc.).

Collect from each individual AIT all raw Field Data Reporting System (FDRS) data and all predefined FDRS reports which include the Operator Summary Report and the Threat Alarm Summary Report as required in the AIT FRD. These data shall be collected as part of the monthly Level II PM or in conjunction with a maintenance activity to minimize cost. All data collected and all data rights are the property of the Government. The Contractor shall track and document each system data output to ensure accuracy of data submission. The Contractor shall notify the COR and the Contracting Officer prior to delivery date if there are any issues in which data cannot be delivered by the delivery date with a risk mitigation plan to deliver data by other methods. The Contractor shall collect from each AIT all raw field data and all predefined FDRS reports in accordance with the following CDRL: L012 Field Data Reporting System (FDRS).

Record PM actions in local maintenance logbooks provided by local TSA and in the Contractor's database.

If there is no logbook available at the location, the Field Service Technician (FST) shall notify local TSA at the location. If a logbook is not provided by TSA, the FSTs are not required to wait for the logbook. If the logbooks are not available and local TSA is not present, then the FST will continue with his or her scheduled work. In both cases, the FST will note the non-availability of the logbook in the remarks section of the PM ticket.

If there is no local maintenance logbook available, the Contractor shall record this in the database along with date the PM was conducted. Entering the date conducted indicates that the FST completed the PM in full on that date according to the applicable OEM checklist. Completion of PMs shall be provided weekly to the local TSA officials at the relevant airports.

CDRL: L012, FDRS Monthly

2.5.8 Corrective Maintenance

The definition of CM and the associated levels are as follows:

CM consists of unscheduled maintenance activities performed to repair or otherwise restore failed TSE to operational condition. These actions usually expend consumable and repair parts. There are three discrete levels of CM:

Level I CM – This is CM that is performed as needed to effect repairs that do not require trained FSTs (e.g., bag jams, fault resets etc.). These activities are currently performed by TSA personnel or their designees and are not part of this SOW.

Level II CM – This is CM that is performed as needed to effect repairs that always require trained FSTs. These activities are performed on site with the TSE in Level II CM status in accordance with Attachment D (TSE Metrics). These services are included under this warranty service agreement. The Contractor shall apply high priority to returning all TSE experiencing critical failures (non-operational) to operational status, whether the failure is relevant or non-relevant, to ensure the expeditious return of TSE not able to perform its assigned mission. These services are included under the Logistics Support service level agreement.

Level III Depot Maintenance (DM) – This consists of unscheduled corrective maintenance activities performed by trained technicians to repair failed TSE by shipping the TSE end item (vs. component of TSE) back to a Depot. These services would be very rare under this contract and would include major repairs on AITs located in airport locations where it would be difficult to perform repairs. These situations shall be approved by the COR and are included under this service level agreement.

2.5.9 Waste Disposal

The Contractor shall be responsible for the proper disposal of any and all equipment and components removed during preventive and corrective maintenance plus all dunnage. Only accountable assets should be shipped to the TSA Logistics Center (TSALC). These items should be packaged securely and include a DD1149- Requisition and Invoice/Shipping Document. The DD1149 should state that it includes pallets and the number of pallets. The DD1149 and any necessary supplemental file (e.g., a spreadsheet) must be 100% accurate with the full TSA bar code, manufacturer, model, serial number, and Condition Code for each item in the shipment.

Any shipments sent to TSALC with non-accountable items, inaccurate documentation, or incorrect inventory will be refused and returned to the Contractor's location for remediation. All remediation tasks and associated shipping costs will be at the expense of the Contractor. Accountable items include but are not limited to: TSA bar -coded equipment, switches, servers, etc. With the exception of accountable property with a TSA property bar code, all replaced parts that have been removed from the equipment shall become property of the Contractor and the Contractor shall be responsible for removing said parts from the site prior to site closeout. The Contractor shall be responsible for all labor, materials, equipment, and coordination of logistics activities to load, transport, and off- load waste materials. The waste materials shall be properly packaged, crated, and prepared for shipment. The Contractor shall, when practicable, take full advantage of reuse, reutilize, and recycle options as the first method of disposition or disposal. The Contractor shall be responsible for proper disposal of any and all hazardous waste in accordance with and as defined by 40 CFR Parts 260, 261, and 263.

The Government reserves the right to direct the Contractor to an alternate disposition of removed equipment and components. The Contractor shall request disposition of accountable property from the Government Property Manager.

2.5.10 Hard Drive Sanitation

The Contractor shall sanitize all hard drives when a maintenance action requires the hard drive or the computer to be removed from its current location. The hard drives shall be shipped back to the Contractor’s TSA authorized depot facility for repair or refurbishment, but shall be shipped via any traceable means (i.e., tracking number) through a mail or parcel carrier (e.g., U.S. Postal Service, Federal Express) and packaged in a way that does not disclose its contents or the fact that it contains sensitive information (double-wrapped in a non-opaque wrapper) in accordance with TSA MD 1400.3, TSAIT Security Handbook. The Contractor shall comply with all data disposition requirements stated in the TSA IT Security Policy Handbook, applicable Technical Standards and TSA MD 3700.4, Handling Sensitive Personally Identifiable Information.

The Contractor shall prepare and deliver the Hard Drive Sanitization in accordance with the following referenced CDRL:

CDRL: L020, Hard Drive Sanitization

Hard drives that are determined to be beyond repair capability or refurbishment (on-site or at the Contractor’s depot facility) shall be sanitized of Sensitive Security Information (SSI) data by TSA at the TSA Logistics Center. The Contractor shall first complete a TSA Media Sanitization Certificate TSA Form 1412 for every hard drive and ensure the form is signed by the local Accountable Property Officer or a Federal Security

Director's Staff Official. A completed and signed copy of the form shall be emailed to the APM APO at CtoPropertyManagement@dhs.gov. Additional copies of TSA Media Sanitization Certificates shall be distributed to the local APO and COR. The Contractor shall ship the inoperable hard drives, with a copy of the completed and signed TSA Media Sanitization Certificate TSA Form 1412, via any traceable means (i.e., tracking number) through a mail or parcel carrier (e.g., U.S. Postal Service, Federal Express) packaged in a way that does not disclose its contents or the fact that it contains sensitive information (double-wrapped in a non-opaque wrapper) to the Transportation Logistics Center at the address below:

TSA Springfield Warehouse ATTN: Jason Lockley / David Funk 6810 Loisdale Rd Building A, Door 19 Springfield, VA 22150

(703-313-7868) Jason.Lockley@tsa.dhs.gov

2.5.11 TSE Sustainment Maintenance

TSA utilizes a third party maintenance model to maintain out-of-warranty TSE deployed to airports nationwide.

The Contractor shall, prior to the cessation of the warranty services period of this contract, negotiate in good faith and enter into any necessary agreements with TSA's then existing third-party service providers to provide any OEM-certified repair parts, consumables, tools and test equipment, technical documentation, technician training and certification, and labor as required to requesting Maintenance Service Providers to ensure effective and affordable maintenance services for TSA-owned AIT systems. The Contractor shall provide documentation to TSA, no later than 30 days prior to the expiration of the warranty period for the first AIT system installed pursuant to this contract, to confirm that an agreement has been executed with the third-party service provider(s).

2.5.12 DD-254

The Contractor may require access to information, which would be considered sensitive and/or classified in nature in order to support the TSA. This classified information may include the classified Detection Standards in order to develop detection algorithms for the security technology system(s).

mailto:Jason.Lockley@tsa.dhs.gov

Contractors must have a facility clearance (FCL) at the Secret level and a DD Form 254

“Department of Defense Contract Security Classification Specification” from the Government. When applicable, contractors must provide any information requested by the Government to prepare its DD Form 254 and must follow any instructions contained therein after issuance. The DD-254 Form must be completed, signed, and approved within 30 days after Contract award, unless requested sooner by the CO.

An FCL is comprised of: Status, Access-level, and Safeguarding-level.

1. Status shows whether the FCL is active, in-process, or terminated.

1. Access denotes approval for CNSI access at a specified level.

2. Safeguarding list whether a specified level of CNSI may be stored at the CAGE CODE location.

The Contractor will access classified material at TSA HQ at 701 S. 12th Street, Arlington, VA, 20598 or the new location in Springfield; TSA Systems Integration Facility (TSIF) at 3701 Post Office Rd Washington, DC 20528-6032; and the Contractor’s Facility at L-3 Communications, Inc., 10E Commerce Way, Woburn, MA 01801-1028.” If required, the contractor will safeguard classified material in accordance with Executive Order 13526, Classified National Security Information and DHS

Instruction 121-01-011, DHS Administrative Security Program, at the Secret level in support of program office requirements. Additionally, in accordance with the Department of Defense (DOD) Manual 5220.22-M, “National Industrial Security Program Operating Manual (NISPOM) for Safeguarding Classified Information,” Chapter 5, Section 5-502, the contractor is authorized to disclose TSA classified information to cleared subcontractors when access is necessary to perform tasks or services for fulfillment of a prime or subcontract. However, prior written approval by the contracting officer or his/her designee is required. Additionally, pursuant to NISPOM, Chapter 5, Section 5-506, the contractor shall not disclose classified information received or generated under this TSA contract to any other

Federal agencies unless specifically authorized in writing by the TSA Program Office that has classification management jurisdiction over the information and the TSA Contracting Officer’s Representative (COR). In accordance with the NISPOM, Chapter 5, Section 5-509, the contractor shall not disclose classified information to another contractor except to support a contract, subcontract or other TSA purpose. The contractor must first obtain written approval from the responsible contracting officer or his/her designee before it exercises any actions authorized by NISPOM Chapter 5, Sections 5- 502, 5-506, and 5-509.

2.5.13 Security Breach/Incident Report

In addition to the requirement in H.5200.204.001 Major Breach of Safety or Security, the Contractor shall document, through the Physical and Communications Security Breach/Incident Report, incidents, which include, but are not limited to:

1. Actual or suspected unauthorized attempts to penetrate a Transportation Security Equipment type through remote functions

2. Actual or suspected unauthorized attempts to penetrate the upgraded Transportation Security Equipment type through the Contractor’s Remote Maintenance Monitoring Facility or Contractor’s support facility

3. Actual or suspected unauthorized penetration of the Contractor’s upgraded Transportation Security Equipment type support facility or Remote Maintenance Monitoring facility(ies)

4. Actual or suspected attempt to subvert the Transportation Security Equipment type. The Contractor shall prepare and deliver the Physical and Communications Security Breach/Incident Report in accordance with the referenced CDRL.

CDRL: C020 - Physical and Communications Security Breach/ Incident Report

CDRL: C021 - Security Program Plan (SPP)

3. ITAR Terms and Conditions

The following DHS and TSA Enterprise Architecture Compliance Clauses Apply to Sections:

Please note, at this time, the subsequent DHS and TSA Enterprise Architecture clauses do not apply to AIT Equipment General Information. IT Network connection is not a requirement in this SOW. Should the Government request that existing, and/or future AIT systems be connected to the TSA Network, and be in compliance with the terms and conditions below, the Government will present this request in the form of a request for proposal under the STSS (or other fleet management contract).

3.1 DHS and TSA Enterprise Architecture:

The Contractor shall ensure that all architectural artifacts including but not limited to solutions, business, Data, IT elements for legacy Transportation Security Equipment (TSE), Information Systems Security Agreements

(ISSAs), System Design documents (SDDs), deliverables, and services are aligned and compliant with the current DHS and TSA Enterprise Architecture, and the (The Common Approach to Federal Enterprise Architecture), the Technology Business Management (TBM) Taxonomy, and Federal Information Technology Acquisition Reform Act (FITARA).

All solutions and services shall meet DHS and TSA Enterprise Architecture policies, standards, and procedures. Specifically:

o DHS and TSA Enterprise Architecture policies, standards, and procedures.

o Homeland Security Enterprise Architecture (HLS EA) and TSA EA requirements.

o TSA and DHS IT Security, Cloud, Infrastructure (including Network), Application/Systems, Information/Data, Performance, and Business Architecture policies, directives, guidelines, standards, segment architectures and reference architectures.

o TSA functional capabilities o TSA operational capabilities o TSA lines of business o TSA business processes o TSA funding sources o TBM Taxonomy for IT cost transparency

All software and tools that are used to build, develop, or deploy IT solutions for TSA, shall leverage the TSA NextGen Architecture (NGA) Technology Stack known as “The Kit”. In accordance with TSA CIO Priority 2.1 “Modernize, Simplify, Reduce and Enforce TSA IT and Data Toolkit”, use of “the Kit” will achieve modernization and simplification, with the ultimate goal of reducing the current TSA Technology…