Attachment J-1 PWS.pdf

ATTACHMENT J-1

PERFORMANCE WORK STATEMENT (PWS)

Appendix A - Additional Workload Data

Appendix B - IDIQ Rates

Appendix C - Acronyms & Definitions

Appendix D - Qualifications, Certifications & Training

Appendix E - System Descriptions

RFP 80SSC024R0004

Combined Operations, Services, Maintenance & Infrastructure

Contract (COSMIC)

Performance Work Statement

(PWS)

for

NASA John C. Stennis Space Center Mississippi

NASA Michoud Assembly Facility

Louisiana

April 2024

Combined Operations, Services, Maintenance, & Infrastructure Contract

(COSMIC)

SCOPE

The Combined Operations, Services, Maintenance, & Infrastructure Contract (COSMIC) is a mechanism for facility services at John C. Stennis Space Center (SSC), Mississippi and Marshall Space Flight Center’s (MSFC) Michoud Assembly Facility (MAF), Louisiana. MAF is managed by and reports to MSFC; under COSMIC, one Contractor will provide services to both locations, SSC and MAF. The Contractor shall manage and shall provide all services, equipment, and supplies, except as provided as Government Property, to implement the COSMIC Performance Work Statement (PWS).

The COSMIC PWS consists of Core service operations and Indefinite Delivery, Indefinite Quantity (IDIQ) requirements spread among the following work elements: Contract Management, Logistics, Safety, Health and Environmental Compliance, Engineering and Manufacturing Support Services, Site Services, Facility Operations & Maintenance Services, and Environmental Services and Program Management.

NASA may issue IDIQ Task Orders under the COSMIC on behalf of other Federal, State, and Commercial Tenants or non-Commercial Tenants. NASA may also issue IDIQ Task Orders under the COSMIC on behalf of SSC and/or MAF for the Contractor’s support of other NASA sites.

TABLE OF CONTENTS

1.0 CONTRACT MANAGEMENT ___________________________________________________ 5

1.1 Contract Administration __________________________________________________________________ 11

1.2 Technical Management ___________________________________________________________________ 34

1.3 Business Management ___________________________________________________________________ 36

1.4 Outreach Support (IDIQ Only) ______________________________________________________________ 49

1.5 Innovation and Continuous Improvement ____________________________________________________ 50

2.0 LOGISTICS ________________________________________________________________ 54

2.1 Logistics and Property Management: ________________________________________________________ 54

2.2 Management / Program Management ______________________________________________________ 55

2.3 Disposal Operations _____________________________________________________________________ 56

2.4 Equipment Management _________________________________________________________________ 59

2.5 Lifecycle Logistics and Supply Chain Management _____________________________________________ 63

2.6 Mail Management _______________________________________________________________________ 64

2.7 Supply and Materials Management Operations _______________________________________________ 68

2.8 Transportation and Service Vehicles ________________________________________________________ 70

2.9 Marine Transportation, Handling and Maintenance (IDIQ Only) __________________________________ 91

3.0 SAFETY, HEALTH, AND ENVIRONMENTAL COMPLIANCE ____________________________ 94

3.1 Safety and Risk Management _____________________________________________________________ 112

3.2 Quality Assurance and Reliability __________________________________________________________ 126

3.3 Environmental Health (IDIQ Only, MAF Only) ________________________________________________ 129

3.4 Contamination and Foreign Object Debris Program ___________________________________________ 134

4.0 ENGINEERING AND MANUFACTURING SUPPORT SERVICES _________________________ 137

4.1 Design Engineering _____________________________________________________________________ 141

4.2 Product Lifecycle Management (PLM) ______________________________________________________ 158

4.3 Project Support (IDIQ Only) ______________________________________________________________ 175

4.4 Manufacturing and Fabrication Support (MAF Only) __________________________________________ 186

5.0 SITE SERVICES ___________________________________________________________ 191

5.1 Special Purpose Mobile Equipment (SSC Only) _______________________________________________ 191

5.2 Custodial Services ______________________________________________________________________ 192

5.3 Grounds Maintenance and Integrated Pest Services ___________________________________________ 217

5.4 Occupational Health Services (IDIQ, MAF Only) ______________________________________________ 243

5.5 Energy Management, Controls, and Operations _____________________________________________ 248

5.6 Fire Protection _________________________________________________________________________ 253

5.7 Unmanned Aerial Systems (UAS) (SSC Only) (IDIQ Only) _______________________________________ 255

5.8 Food Services (IDIQ Only) ________________________________________________________________ 256

6.0 FACILITY OPERATIONS AND MAINTENANCE ____________________________________ 259

6.1 Facility Operations ______________________________________________________________________ 275

6.2 Maintenance Program ___________________________________________________________________ 298

6.3 Maintenance __________________________________________________________________________ 303

6.4 Real Property Management and Facility Utilization ___________________________________________ 314

7.0 ENVIRONMENTAL SERVICES AND PROGRAM MANAGEMENT (IDIQ ONLY, MAF ONLY) ____ 317

7.1 Environmental Management System and Sustainability (MAF Only, IDIQ Only) _____________________ 327

7.2 Energy Management and Water Conservation Program (MAF Only, IDIQ Only) _____________________ 335

7.3 Air Quality (MAF Only, IDIQ Only)) _________________________________________________________ 339

7.4 Water Quality (MAF Only, IDIQ Only) _______________________________________________________ 343

7.5 Spill Response and Clean-up (MAF Only, IDIQ Only) ___________________________________________ 346

7.6 Petroleum, Oil, and Lubricants (MAF Only, IDIQ Only) _________________________________________ 350

7.7 Waste Management (MAF Only, IDIQ Only) _________________________________________________ 352

7.8 Other Environmental Activities (MAF Only, IDIQ Only) _________________________________________ 362

1.0 CONTRACT MANAGEMENT

A. Scope Performance Work Statement (PWS) Section 1, Contract Management, identifies the overall management and business administrative duties that are not limited to the performance of a single PWS functional area or are applicable to performance of all of the functional areas described in the PWS. This section contains the requirements for PWS Section 1.

Definitions: Definitions for the entire PWS are located in Attachment J-1, Appendix C, Acronyms and Definitions. The latest edition of Merriam-Webster Dictionary will be used for defining words not specifically addressed.

Acronyms: Acronyms for the entire PWS are located in Attachment J-1, Appendix C, Acronyms and Definitions.

B. Limitations, Restrictions, and/or Special Conditions Authority The PWS describes several interfaces between the Contractor and the Government. Nothing in the PWS is intended to supersede official channels of communication through the Contracting Officer (CO) and the Contracting Officer’s Representative (COR). Only the CO has the authority to make any commitments or changes that affect price, quality, quantity, delivery, or in any way direct the Contractor or its subcontractors to operate in conflict with the Contract terms and conditions.

Core Service Operations Requirements listed in this PWS are Core services (“Core”), with the exception of those elements identified as Indefinite Delivery Indefinite Quantity (IDIQ) only.

Indefinite Delivery Indefinite Quantity (IDIQ) IDIQ services support NASA programs, projects, and tenants within any functional area of the PWS. Services provided in support of IDIQ-only work are not included in the Core unless specifically stated otherwise. Requirements considered IDIQ will be issued in accordance with contract Clause H.7, Task Ordering Procedure (NFS 1852.216-80.) Each PWS section delineates the services which are IDIQ only.

Support to initiate IDIQ work, which includes but is not limited to business and technical management up to the award of the task order (TO), is Core and falls within PWS Section 1.

Once the TO is awarded, all direct services shall fall under the scope of the TO (IDIQ).

Logos and NASA Communication Standards The Contractor shall use the NASA emblems (i.e., NASA seal, NASA insignia, NASA logotype, NASA Program identifiers, and the NASA flag) in all exhibits, materials, and publications in accordance with 14 CFR Section 1221.1, Use of NASA Name and Logo, and other resident agency logos and insignia in accordance with applicable policy and regulations.

The Contractor shall submit requests to use any NASA-funded internal and external communications material or NASA emblems to the appropriate SSC or MSFC/MAF Office of Communications in accordance with NPD 2521.1, Communications and Material Review.

Replacement, Modernization, and Renovation During the term of the Contract, the Government may replace, renovate, improve, update, or modernize equipment, systems, facilities, components, and fixtures at the Government’s expense. All replaced, renovated, improved (e.g., addition and removal of equipment), updated, or modernized equipment, systems, facilities, components, and fixtures shall be maintained, operated, and repaired by the Contractor within the scope of the Contract. If the Contractor believes that there are changes to contract scope, cost or complexity, the Contractor shall notify the CO prior to executing work.

Directives The Contractor shall remain cognizant of and compliant with the current versions of applicable Federal, state, and local laws and regulations, Presidential Executive Orders, NASA Policy Directives (NPD), NASA Procedural Requirements (NPR), SSC, MAF, and MSFC Policy Directives, Procedural Requirements, Work Instructions (WI), Permits, National Consensus Standards, and Attachment J of this PWS. When two or more documents apply to the same requirement, Contractor personnel shall comply with the more stringent of the documents. If there is a conflicting requirement, the Contractor shall contact the COR for clarification. Any deviations from current directives, policies, procedures, and programs shall be coordinated with and approved by NASA before execution or implementation. If separate guidance, directives, instructions, etc., are not provided for SSC and MAF, the reference will apply to both centers.

The current versions of NASA NPDs and NPRs can be found in the NASA Online Directives Information System at: http://nodis3.gsfc.nasa.gov/Rpt_current_directives.cfm

The current versions of SSC SPDs and SPRs can be found in the following Directives Management System at: https://nodis3.gsfc.nasa.gov/SSC list.cfm

The current versions of MSFC MPDs and MPRs can be found in the following Directives Management System at:

https://dml.msfc.nasa.gov/directives/component/main?__dmfClientId=1378760668236

Other related documents can be found in Attachment J-7, Reference Library.

Deliverable Data and Reports:

The Contractor shall:

1.0.1 Prepare and deliver automated completed reports and documentation required by all PWS sections and in accordance with each Data Requirement Description (DRD).

• Deliver reports in the Government-provided Contract Deliverable System (CDS) by the dates identified in each Data Requirement Description (DRD).

• Deliver data that is fully readable without additional software and in a format that meets the requirements of the DRD in Attachment J-2.

• Submit form SSC Form 168, Data Deviation Request, to the Contracting Officer (CO) for approval for any deviation to a DRD no later than two (2) business days prior to the DRD due date.

• For DRDs which provide data and reports in support of regulatory or HQ-NASA data submittal requirements, the Contractor shall ensure the DRD is submitted a minimum of thirty (30) days prior to end of the Base or Option Period.

Hours of Operation The Contractor shall:

1.0.2 Provide Contract services during hours of operations to meet facility and mission requirements.

• NASA’s core business hours for SSC and MAF are 6:30 AM to 5:30 PM, Monday through Friday, except Federal holidays.

• Contractor shall manage shifts to provide adequate coverage to meet PWS requirements during these hours and minimize overtime as much as practicable. Overtime shall be approved by the Government. Overtime for emergencies shall be coordinated with the Government as soon as practicable.

• The Contractor shall meet the requirements of the PWS and be flexible to meet NASA mission requirements.

• Workhours outside core business hours may be required to meet requirements delineated in the PWS or by NASA or Tenant missions.

• Telework is permissible, as long as mission and PWS requirements are met. The Contractor shall inform the Government of the Contractor’s telework policies and applications. The Government, at its discretion, may mandate on-site presence (e.g., for any operation, task, function, meeting) to meet mission needs and PWS requirements.

1.0.3 Schedule work to cause least interference with NASA and Tenant business and missions.

• The Contractor shall stay informed of NASA and Tenant operations, production, manufacturing, and propulsion testing.

• Where interference is unavoidable, minimize the impact.

• Minimize impacts associated with planned outages.

• The Contractor shall participate in meetings/teleconferences regarding ongoing activities.

1.0.4 Reschedule any work the CO/COR deems necessary to avoid unacceptable disruption to Government and/or tenant business operations.

1.0.5 Maintain documentation of approval of work rescheduling from the customer and provide to CO and/or COR upon request.

Access The Contractor shall:

1.0.6 Complete all training necessary for access to restricted areas at SSC per SOI-8080-0040 Test Area Access Control, SOI-8080-0029 Contractor Interface/Access, and at MAF per AS50- OWI-006 NAMS Physical Access Request for requirements due to additional restrictions for access control in the SSC Test Complex Area and certain areas of the MAF Manufacturing Facility.

Daily access to perform work may be restricted during testing or manufacturing operations;

therefore, the Contractor shall keep abreast of test and special manufacturing schedules and shall reassign workers to alternate work tasks when access is denied. At MAF, the Contractor shall obtain permission for access in manufacturing areas from the supervisor responsible for the particular area.

At both sites, various Tenant- and Program-related facilities/areas require approval before initiating work. The Contractor shall schedule and receive approval from the Tenant/Program representative prior to initiating such work.

Corrective Actions:

The Contractor shall:

1.0.7 Develop and implement corrective action(s) for identified deficiencies.

Coordinate with NASA to ensure written corrective action response and tracking of identified deficiencies through closure.

C. General Requirements The Contractor shall:

1.0.8 Establish and maintain its contract management program, meet the requirements of this PWS, and innovatively and effectively respond to dynamic institutional and direct mission support requirements, in a cost-effective and customer-oriented manner.

1.0.9 Comply with Public Laws, Executive Orders, NPD, NPR, PWS, Federal Acquisition Regulations, (FAR), NASA FAR Supplement (NFS), Center policy directives, Center procedural requirements, work instructions, permits or other authorizing documents, Contract clauses, applicable National Consensus Standards, and approved plans.

1.0.10 Comply with NASA security policy, NPR 1600.1 NASA Security Program Procedural Requirements, NPR 1620.3 Physical Security Requirements for NASA Facilities and Property (i.e., NASA’s lock and key procedures) and SPR 1600.1 Stennis Space Center Security Directives.

D. Performance Requirements Summary Section Reference

Requirement Standard Acceptable Quality Level (s) Workload Indicator

1.0.1 Complete/meets DRD

requirements, delivered by due date and free of errors.

Per approved deviation request.

All requirements met with little to no re-work/re-performance required and with < 5 minor or no significant problems.

Contains no critical errors or missing information. Any minor issues successfully addressed by the date requested.

~300 DRD

deliveries

1.0.2 No instance of services not

provided during core business hours, pre-arranged / determined hours outside of core business hours (NASA and tenant requirements) and for emergencies.

Within 24 hours (next business day) for services.

As negotiated for outside core business hours.

Shall meet emergencies.

1.0.3 No impact to NASA or tenant

operations by scheduled work.

Interface with NASA/Tenants to schedule work.

Minimal impact/interference to operations by scheduled work without prior coordination.

Coordination with NASA/Tenant Customers.

1.0.4 No impact to NASA or Tenant

operations by scheduled work.

Interface with NASA/Tenants to schedule work as needed.

Minimal impact/interference to operations by scheduled work without prior coordination.

1.0.5 No impact to NASA or tenant

operations by scheduled work.

Document rescheduled work by email, briefings, etc.

Minimal impact/interference to operations by scheduled work without prior coordination.

Documented via email, briefing etc.

1.0.6 All Contractor personnel have

restricted access badge necessary to perform duties.

Within 2 weeks of employment required access.

Assign workers to alternate tasks until granted restricted access.

1.0.7 No outstanding corrective

actions without interim mitigations.

Complete/thorough assessment of deficiency and responsive corrective actions.

Appropriate corrective action is implemented in accordance with approved schedule.

1.0.8 Engaged and effective contract

management by Contractor leadership.

No more than 3 non-recurring and no recurring validated complaints per quarter.

1.0.9 No violations or non-

compliances.

Meets the standard. --

1.0.10 Comply with NASA security

policy.

Develop and initiate corrective actions for any issues/non-compliances within 24 hours.

-- is used to indicate those items for which workload indicators are either undetermined, unavailable, or not applicable.

NOTE: The workload indicator data is provided for information purposes only to gauge the volume of services that may occur in various areas of the PWS during Contract performance.

However, this information is not to be construed as a limit or guarantee of future work or the actual volume of services required, nor is it representative of an obligation or commitment of the Government. The information provided herein is not intended to be a comprehensive representation of all work performed by the Contractor.

NOTE: All workload indicator data in the PWS tables are a combination of SSC and MAF.

They represent annual historical workload unless otherwise identified. Unless specifically identified as a workload requirement (Reqt), all workload indicators are historical indicators of past workload.

NOTE: PWS sections/paragraphs which are not specifically referenced in the Performance Requirements Summary table throughout the PWS shall meet the requirements as stated. The Acceptable Quality Level shall be the requirement standard/stated requirement. Historical Workload Indicators are provided as applicable or available.

NOTE: The following definitions apply when used in reference to the Performance Requirements Summary tables throughout the PWS

Minor: does not impact usability or understandability of the content (ex.

Typographical error).

Significant: impacts usability or understandability of the content (ex. Incorrect or misrepresentation of data).

Critical: renders the content unfit for use (ex. Systematic or technical errors).

1.1 Contract Administration

Section 1.1, Contract Administration identifies the overall contract administration duties that are applicable to performance of all functional areas described in the PWS.

B. Limitations, Restrictions, and Special Conditions None for this section.

C. General Requirements The Contractor shall:

1.1.0.1 Provide all Contract administration functions necessary to ensure all PWS requirements are accomplished. In addition to the requirements in the rest of PWS 1.0, general administration requirements also include, but are not limited to, the following 1.1.0.2 through 1.1.0.5.

1.1.0.2 Perform all Contract, business, and technical management functions to plan, organize, implement, control, track, report, and deliver all requirements as described in this PWS for NASA, tenants, resident agencies, and commercial customers.

Technical and Business Management (Sections 1.2 and 1.3) functions necessary for IDIQ requirements are Core service operations.

1.1.0.3 Complete requirements of this Contract so the work performed satisfies the following:

• Fully meet the performance objective of the Contract.

• Perform within the schedule.

• Accomplish work within the cost estimate.

• Accomplish work in a safe, professional, and high-quality manner.

• Develop and execute an effective management approach to ensure a strong technical foundation and an organizational structure that stresses the flexibility and adaptability necessary to respond to changing requirements.

• Develop and execute a management approach that results in employees’ work areas being safe, clean, and orderly.

1.1.0.4 Contractor roadworthy vehicles shall be insured, state registered, and licensed.

1.1.0.5 All Contractor and subcontractor employees shall hold a valid state driver’s license when operating vehicles on site. Contractor and subcontractor employees operating special equipment and/or transporting hazardous materials shall have the proper licenses and/or certifications required for these operations.

Reference

Requirement Standard Acceptable Quality Level (s) Workload Indicator

1.1.0.1 Perform Contract

Administration to meet all PWS sections

No more than 1 reoccurring validated complaint or minor non-compliance with Contract requirements per quarter; no major compliance issues.

1.1.0.2 Perform Contract

Administration to meet all PWS sections.

No more than 1 reoccurring validated complaint or minor non-compliance with Contract requirements per quarter.

No major compliance issues.

1.1.0.3 Meets the requirements as

stated.

No more than 1 reoccurring validated complaint or minor non-compliance with contract requirements per quarter.

No major compliance issues.

1.1.0.4 All Contractor roadworthy

vehicles insured, state registered and licensed.

Meets the standard. --

1.1.0.5 All vehicles and equipment

operated (to include hazardous material transportation) with required licenses and/or certification.

Meets the standard. --

Management

Contractor management includes all contract, business, and technical management functions to plan, organize, implement, control, track, report, and deliver all requirements as described in this PWS for NASA, tenants, resident agencies, and commercial customers. Technical and Business Management (Sections 1.2 and 1.3) functions necessary for IDIQ requirements are Core service operations.

B. Limitations, Restrictions, and/or Special Conditions None for this section.

C. General Requirements

1.1.1.1 Designate a single point of contact for all Contract operations.

• This individual must have the autonomy needed to bind the Contractor and act as primary interface between the Contractor and the CO/COR. The Contractor is responsible for seamless comprehensive subcontract management.

1.1.1.2 Apprise the CO and COR immediately of any issues that may have an adverse impact on successful performance of the Contract requirements.

1.1.1.3 Provide financial data and other related business information only to the CO, COR, or Government-designated representative as requested, in support of planning, formulation, execution, reporting, budget calls, incremental funding actions, and other contract financial information.

• Other requests may entail, but are not limited to, cost estimates and analysis, basis of estimate (BOE) detail, and cost breakdowns per project, task, PWS, and building location or site.

• Information must be accurately presented in a format understandable by the requester and submitted by the requested date.

1.1.1.4 Assure the proper handling of sensitive and proprietary data to include but not be limited to Government- and third-party data access, use, disclosure, reproduction, transmission, storage, and disposal activities.

1.1.1.5 Establish and sustain effective relations with labor unions while using prudent business practices to ensure best value to NASA.

1.1.1.6 Develop and implement a Safety and Health Program at SSC and MAF that incorporates the OSHA Voluntary Protection Program (VPP) elements within six (6) months after Contract start.

1.1.1.7 Obtain certification in ANSI/ISO/ASQ Q9001 within 18 months of Contract start.

1.1.1.8 Develop and execute a management approach that ensures Contractor personnel conduct themselves in a proper, courteous, safe, and business-like manner.

• Ensure Contractor personnel who interact with personnel concerning safety or emergency activities communicate verbally in the English language.

1.1.1.9 Contractor personnel shall wear appropriate attire which is suited to the work or situation being performed, including but not limited to proper Personal Protective Equipment (PPE).

1.1.1.10 Participate in internal/external audits and investigations performed by Government agencies and other authorized entities.

• Provide requested data/documentation in a timely manner.

• Support field inspections.

• Identify and implement corrective actions for issues/discrepancies/deficiencies.

1.1.1.11 Provide web-based instructions for customers to request services and direct buy items, and to provide customer service feedback to the Contractor.

1.1.1.12 (SSC Only): Administer the Facility Manager Program (FMP) in accordance with SCWI-8830-0001, Facility Manager Program Handbook.

1.1.1.13 Develop overarching Associate Contractor Agreements (ACA’s) in accordance with Section H.12, to facilitate integrated working relationships with other NASA contractors to ensure execution of requirements.

1.1.1.14 Work cooperatively with onsite users/tenants to ensure support of their requirements.

1.1.1.15 Hold a weekly status meeting with NASA management to address accomplishments, challenges/issues, opportunities, and a look ahead for each PWS section.

1.1.1.15.1 Contractor attendance includes senior leadership and management for the PWS sections.

1.1.1.15.2 In addition to the weekly status meeting, there are various meetings identified throughout the PWS requiring Contractor support and participation to include such meetings as:

• Design Reviews

• Outage Meetings

• Monthly/Quarterly Performance Reviews (e.g., task order status, Safety Management

Reviews, VPP Executive steering committee, etc.,)

1.1.1.16 Promote, encourage, and allow employees to participate in NASA sponsored events, committees, and surveys without interruption to services.

1.1.1.17 The Contractor shall develop, maintain, and ensure the following deliverables are accurate and timely as defined in the specific DRDs listed below:

DRD PC01-1.1 Liability and/or Litigation Report DRD PC02-1.1 Certificate of Insurance Report DRD PC03-1.1 Advance Notification of Workforce Reductions DRD PC04-1.1 Management Plan and Labor Relations Plan DRD PC05-1.1 Staffing Plan DRD PC06-1.1 Organizational Conflict of Interest Mitigation Plan DRD PC07-1.1 Monthly Management Status Review DRD PC08-1.1 Diversity, Equity, Inclusion, and Accessibility (DEIA) Plan DRD PC09-1.1 Patent Application Notice DRD PC10-1.1 Patent, Copyright, and Infringement Report DRD PC11-1.3 Advance Subcontract Notification DRD PC17-1.1 Reportable Metrics DRD PC18-1.1 Strike Plan DRD PC19-1.1 IDIQ Task Order Status

DRD FA04-1.1 Facility Manager Program (FMP) Plan (SSC Only) DRD MA03-1.1 COSMIC Contractor Space Utilization

D. Performance Requirements Summary Section Reference

Requirement Standard Acceptable Quality Level (s) Workload Indicator

1.1.1.1 Assignment of a Contractor

Contracting Officer (and alternate)

Meets the standard. --

1.1.1.2 No adverse impacts to contract

performance from identified issues without NASA CO or COR being notified.

Within 24 hours of identification Potential adverse impacts to contract performance are addressed expeditiously.

1.1.1.3 Provide data or business

information to CO/COR/designated representative.

Accurate, timely, complete.

All requirements met with little to no re-work/re-performance required and with < 5 minor or no significant problems.

Contains no critical errors or missing information. Errors corrected within 3 business days.

1.1.1.4 No breach of sensitive or

proprietary data/information.

Responsive remedy and corrective actions.

Meets the standard. --

1.1.1.5 Resolve issues/complaints in a

timely manner.

Negotiate to ensure best value to NASA.

Resolve issues/complaints/labor relations in a timely manner and within budget.

1.1.1.6 Develop and implement a

Safety & Health Program at SSC and MAF that incorporates the elements of the OSHA Voluntary Protection Program (VPP) within six (6) months after contract start.

Meets the standard. --

1.1.1.7 Certification in ANSI/ISO/ASQ

Q9001 within eighteen (18) months of contract start.

Fully certified within eighteen

(18) months.

1.1.1.8 Contractor

establishes/documents “professional conduct of performance” policy.

No more than 1 validated customer complaint per quarter.

1.1.1.9 Appropriate attire suited for

the work and situation. Supply and enforce PPE for work within Safety Program.

Meets all safety standards. --

1.1.1.10 Proactive Contractor support

and participation in audits/inspection Provide requested data/documentation.

Support field inspections Identify and implement corrective actions for issues/ discrepancies

Responsive, active Contractor follow-up support after audits/inspections

Covered in other PWS sections

1.1.1.11 Customer service web-based

instructions etc.

Readily accessible Easy to use/understand.

Offers a means for customer feedback

Meets the standard.

1 web-based instruction

1.1.1.12

(SSC

Only)

Assign a Site-wide Facility Manager Program specialist.

Comply with SCWI-8830- 0001.

FMP Handbook

Meets the standard.

IAW DRD FA04-1.1 and SCWI- 8830-0001.

Updates are made within 15 calendar days of any changes.

Historically, 355 facilities

1.1.1.13 Develop overarching Associate

Contractor Agreements (ACA’s) in accordance with Section H.12

Meets the standard. 3-5

1.1.1.14 Ensure support of users/tenants

to meet their operational and mission requirements.

No more than 1 valid complaint per quarter.

Actively resolved.

1.1.1.15 Active support, participation

and presentation for meetings supporting the PWS sections.

Meets the standard. ~48 weekly status reviews, ~24-36 monthly performance reviews (various topics)

1.1.1.16 Active Contractor employee

participation in NASA sponsored events, committees, and surveys.

Meets the standard. ~6 to 12 activities per year

1.1.1.17 Meet DRD requirements.

Timely, Error Free.

Content Omissions and errors corrected/address within five (5) business days.

No instances of late submittal without prior approval by the Contracting Officer.

1.1.2 Documentation and Records Management

A comprehensive records and files management program which provides for appropriate filing, storage, retrieval, retention, and disposition of all records is necessary in support of the Contract.

B. Limitations, Restrictions, and Special Conditions None for this section.

C. General Requirements The Contractor shall:

1.1.2.1 Provide a comprehensive records and files management program for creating, maintaining, filing, storage, retrieval, retention, and disposition of all records in accordance with NPR 1440.1, NASA Directives and Charters Procedural Requirements, and Center requirements (SPR 1400.1, Document Preparation, Numbering, and Management Guidelines and Standards and MPR 1440.2, MSFC Records Management Program. A documentation plan for operation of the program shall be developed by the Contractor and submitted to the Government as specified in DRD DM01-1.1, Records Management Program Plan. The Contractor shall create, maintain, and preserve NASA records in accordance with NPD 1440.6, NASA Records Management, and NPR 1441.1, NASA Records Management Program Requirements, as well as NPR 8553.1, regulatory requirements, and site-specific records retention plans.

• Repositories will include the appropriate NASA electronic documentation systems, including but not limited to: NASA Technical Documentation System (TechDoc), MSFC

Integrated Document Library (MIDL), Design and Data Management System (DDMS), SSC Records Archive, and the Contract Deliverable System (CDS).

• Documents containing detailed facilities and facilities maintenance and operations related information (i.e., engineering drawings, schematics, specifications, reports, and cost estimates) shall be stored in the respective Center’s repository system.

1.1.2.2 The Contractor shall develop operating plans and procedures, maintenance and operating instructions, and other types of work instructions.

1.1.2.3 The Contractor shall maintain logs, records, files, databases, and workload data identified in the PWS throughout the life of the Contract and as otherwise required by law, regulatory authority, or policy. This includes legal and regulatory environmental records and documentation (e.g., lab analysis, assessments, regulatory approval letters) either required per this PWS or necessary to demonstrate compliance with the operating permit(s).

• All records and documentation shall be maintained such that they are directly accessible by the Government.

1.1.2.4 Archive, and store documentation, including but not limited to, plans, manuals, reports, drawings, and procedures conforming to NASA standards, in the repository appropriate to the type of documentation. Use existing documentation to the maximum extent possible.

1.1.2.5 Make official records available for Government direct-access at all times by the CO, designated technical representative, and auditors. All records shall contain supporting documentation to provide a complete audit trail. The Government reserves the right to inspect, audit and copy all records.

1.1.2.6 Utilize the Government-provided systems and databases to manage the Government records.

1.1.2.7 Manage and maintain records created for Government use or falling under the legal control of the Government, as well as new operational records, and provide the Government or authorized representative direct access.

1.1.2.8 Satisfy reporting requirements to allow reporting to the Government by:

• Maintaining documentation with respect to all operations and

• Developing and maintaining a comprehensive records and files management program.

• Providing all documentation (e.g., DRDs, financial information) in accordance with requirements.

1.1.2.9 The Contractor shall manage all records in accordance with the following:

NPD 1440.6, NASA Records Management NPR 1440.1, NASA Directives and Charters Procedural Requirements NPR 1441.1, NASA Records Management Program Requirements NRRS 1441.1, NASA Records Retention Schedules MPR 1440.2, MSFC Records Management Program SPR 1440.1, SSC Records Management Program

SPR 1400.1, Document Preparation, Numbering, and Management Guidelines and Standards

Title 36 of the Code of Federal Regulations, Chapter XII, National Archives and Records Management

NASA-STD-2822, Still and Motion Imagery Metadata Standard

1.1.2.10 Upon termination of the Contract, the Contractor shall turn over all NASA-owned, Contractor-held records to the Government in a format to be determined by the CO.

D. Performance Requirements Summary Section Reference

Requirement Standard Acceptable Quality Level (s) Workload Indicator

1.1.2.1 In compliance with Agency and

Center requirements: NPR

1440.1 and Center requirements (SPR 1400.1 and MPR 1440.2).

Use of Center data management systems Readily accessible Accurate, readily traceable, readily auditable file system.

Meets the standard. --

1.1.2.2 Meets the requirements as

stated.

Meets the standard. See specific

PWS

sections

1.1.2.3 Meets the requirements as

stated.

Meets the standard. --

1.1.2.4 Records are maintained as

required

Meets the standard. --

1.1.2.5 All records available for

Government direct-access at all times.

Meets the standard. --

1.1.2.6 Utilize the Government-

provided systems to manage the Government records.

Meets the standard. --

1.1.2.7 Manage and maintain records. Meets the standard. --

1.1.2.8 No instance of late and/or

inaccurate reports; or documentation not in accordance with requirements.

1.1.2.9 Records managed in accordance

with applicable standards.

No more than 3 non-compliances per quarter.

1.1.2.10 Turns over all Government-

owned documentation

100% of documentation is turned over.

1.1.3 Information Technology (IT)

Contractor Systems:

NOTE: NASA reserves the right to modify or replace components of these systems.

A. Scope Manage, administer, and secure the Information Technology applications, software, and systems in use across the Contract in accordance with all Agency and Center IT policies and procedures.

This includes but is not limited to cybersecurity/information security, application/software support, and hosting/system administration.

B. Limitations, Restrictions, and Special Conditions The Government will provide the Contractor computers, telecommunications, and network connectivity required in the performance of services covered by this Contract. The Contractor will submit IT requests through the Agency Enterprise Service Desk (ESD) system. At SSC, the Contractor shall use SPD 2800.1, Provision of Institutionally Funded IT Resources and Services for guidance. At MAF the Contractor shall use MPD2800.1 Management of Information Technology and Service at MSFC for guidance.

The Government will not provide computer services required for the Contractor’s internal operations such as corporate accounting or other contract accounting. The Contractor is not permitted to operate systems on a NASA network that are not required to execute the scope of the Contract. The Contractor is responsible for ensuring corporate systems residing on a NASA network comply with all NASA IT security policies and are covered under an IT System Security Plan. The Contractor is responsible for the administration and management of corporate systems. The Contractor will furnish all hardware and software necessary to meet Contract requirements that are not provided by the Government including but not limited to: human resources, corporate purchasing, corporate accounting, or other contract accounting functions necessary to execute the scope of the contract.

Communications Systems On an as needed basis, communication capabilities such as land mobile radios (UHF), desktop telephones and mobile telephones will be provided to the Contractor by the Government to support Contract tasks. The type and quantity of equipment is determined by the Office of the Chief Information Officer (OCIO). The Government will provide encrypted radios for required functions. Any new systems requiring use of radio frequencies must be authorized by the SSC or MSFC Spectrum Manager depending on the Center where the equipment will be used.

Desktop and Mobile Computer Hardware/Software

The Government will provide appropriate desktop and mobile hardware and software as specified in NASA’s Basic Interoperability Standards: NASA-STD-2805 and NASA-STD-2804.

The Contractor shall provide access to Government provided IT resources as needed for repair, inventory control, and/or configuration management.

Cybersecurity / Information Security

• NASA IT security personnel have the authority to conduct security reviews at all Contractor locations that possess or use NASA data, or that operate, use, or have access to NASA information systems.

• NASA data is defined as any data which is collected, modified, generated, maintained, or controlled on behalf of NASA in performance of this Contract, regardless of the methods used in the generation of said data.

• There should be no expectation of privacy when utilizing the Centers’ networks.

• These limitations and conditions extend to equipment acquired by the Contractor in support of the performance of the Contract.

• The Contractor will assist the Government in maintaining security to minimize the threat of unauthorized access to IT resources and the destruction of NASA data and systems.

• The following services are either provided by NASA or have mandatory sources that must be used to acquire these services. These services may not be procured under this contract:

o Cloud Services o Data Center Services o Artificial Intelligence (AI) and Machine Learning Services o Communications and Networking Services

1.1.3.1 Comply with NASA and Center Information Technology (IT) policies and requirements for the development, implementation, maintenance, and use of equipment, supplies, hardware, and software systems. Agency and Center IT policies and procedures include but are not limited to:

• NPD 1382.17, NASA Privacy Policy

• NPR 1382.1, NASA Privacy Procedural Requirements

• NPR 1600.1 NASA Security Program Procedural Requirements

• NPD 2540.1, Acceptable Use of Government Furnished Information Technology

Equipment, Services, and Resources

• NPD 2800.1, Managing Information Technology

• MPD 2800.1, Management of Information Technology and Services at MSFC

• SPD 2800.1, Provision of Institutionally Funded IT Resources and Services

• NPR 2800.2, Information and Communication Technology Accessibility

• SPD 2800.4, Information Technology Project Management

• NASA-STD-2804, Minimum Interoperability Software Suite

• NASA-STD-2805, Minimum Hardware Configurations

• NPD 2810.1, NASA Information Security Policy

• NPR 2810.1, Security of Information and Information Systems

• NPR 2810.2, Possession and Use of NASA Information and Information Systems Outside of the United States and United States Territories

• NPR 2810.7, Controlled Unclassified Information

• SPD 2810.1, Information Technology (IT) Network Security

• NPR 2841.1, Identity, Credential, and Access Management

• NPD 7120.7 NASA Information Technology Program and Project Management

Requirements

• NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements

• NPR 7150.2, NASA Software Engineering Requirements

Cybersecurity / Information Security:

1.1.3.2 Ensure Contractor employees adhere to NASA IT Security policies, procedures, computer ethics, and best practices.

1.1.3.3 Ensure all Contractor employees, in performance of the Contract, complete annual NASA IT security training by the designated due date using the System for Administration, Training, and Educational Resources for NASA (SATERN) or the current NASA training system to meet this requirement.

1.1.3.4 Ensure the security of Contract IT resources (including personnel) are in adherence to NASA Agency and the respective Center’s IT Security standards as outlined in NPR 2810.1, SPD 2810.1 and MPD 2800.1. NASA has the inherent right to access NASA data regardless of where stored and how generated.

1.1.3.5 Implement and provide an Information Security Management Plan as specified in DRD MA01-1.1 for all personnel and Contractor owned, maintained, or operated IT components.

1.1.3.6 Ensure all computer systems operated by the Contractor in the performance of this Contract have virus protection.

1.1.3.7 Ensure vulnerability scanning utilizing the Agency or Center identified tools is completed per Agency policy. IT security vulnerabilities must be appropriately identified and remediated.

1.1.3.8 Report all IT security incidents in accordance with NPR 2810.1 and all applicable Center policies and procedures.

1.1.3.9 Ensure Commercial Off-The-Shelf (COTS) and open-source software components acquired or used in fulfillment of this Contract satisfies the following conditions:

• The requirements that are to be met by the software component are identified.

• The software component includes documentation to fulfill its intended purpose (e.g., usage instructions).

• Proprietary, usage, ownership, warranty, licensing rights, and transfer rights have been addressed.

• Future support for the software product is planned.

• The software component is verified and validated to the same level of confidence as would be required of the developed software component.

1.1.3.10 Configure, operate, and secure COSMIC systems, applications, and components in accordance with all NASA and applicable Federal IT policies and procedures including but not limited to: NIST Special Publication (SP) 800-series, NPR 2810.1, NPR 1600.1, NPR 2800.1, and items specified in section 1.1.3.1. This includes:

• Establishment and maintenance of system security plans (SSP) and implementation of all required security controls.

• Operating, maintaining, refreshing, securing and modifying the configuration of existing and new COSMIC systems to ensure the availability and protection of applications and services.

• Coordination with Information System Owners

• Existing SSPs include:

o Energy Management Control System (SSC) o Facilities Information System (SSC) o SSC Fire Systems (SSC) o Production Support (including NCAM) Systems (MAF) o Facility Systems (MAF) o Fire Protection System (MAF) o Medical Systems (MAF)

1.1.3.11 Section 508 Conformance: The Contractor shall ensure that all products, platforms, services, and communications delivered as part of this work statement that are Information and Communication Technology (ICT) or contain ICT conform to the Revised Section 508 of the Rehabilitation Act Standards, 36 C.F.R. § 1194.1 & Apps. A, C & D. The Standards may be found at https://www.access-board.gov/ict/

1.1.3.12 Contractor shall provide certification of compliance with minimum Cybersecurity controls required for protection of CUI information (NIST SP 800-171) at contract start and annually. Examples of acceptable certification include but are not limited to: evidence of a 3rd party audit of the non-federal system; compliance with an accepted standard such as Cybersecurity Maturity Model Certification (CMMC) Level 2; or current certifications for other government agencies, DoD, or recognized international standards such as ISO 27001.

1.1.3.13 The Contractor shall create and maintain IT Security Plans in accordance with DRD IT01 Information Security Management Plan. The Federal Information Security (FIS) Modernization Act (FISMA) requires an IT security plan for every FIS, including when a contractor uses or operates an information system or maintains or collects information for the purpose of processing, storing, or transmitting Federal information, and those activities are not incidental to providing a service or product to the Government. FIS security plans will be accomplished in accordance with NIST Special Publication (SP) 800-53 Security and Privacy Controls for Information Systems and Organizations at the revision number required at the issuance of the contract. This plan and supporting documents shall be entered into the NASA cybersecurity system of record pursuant to Authorization to Operate (ATO) requirements set forth in NASA Policy Directive 2810.1 NASA Information Security Policy. Security plan and ATO must be in place before any system may operate in the NASA environment.

Applications/ Software Support:

The Contractor shall:

1.1.3.14 Utilize software identified as “mandatory” in the J-9 attachment. For software in J-9 identified as “non-mandatory”, the Contractor has the option to:

• Use existing software

• Propose alternate solution(s)

• Discontinue use of this software

NASA reserves the right to modify, add or replace any applications designated as "use mandated by NASA.” The Contractor shall use the modified or new application.

1.1.3.15 Ensure all applications and software managed under the Contract are implemented and maintained in accordance with Agency and Center policies and procedures.

1.1.3.16 Acquire applications/software and modifications to existing capabilities through the Agency OCIO Commercial Information Technology Request (CITR) process and approved by the NASA functional area monitor and system owner prior to implementation.

1.1.3.17 Ensure all applications, software and IT components used in the performance of the Contract are appropriately managed and licensed for use.

1.1.3.18 Submit software listing updates in accordance with DRD MA02-1.1.

The Contractor shall:

1.1.3.19 (MAF Only) Maintain, implement, execute and manage all machine controlled, tooling, engineering specific, and machine operated software.

• This includes documentation, execution, and maintenance of software processes.

• Ensure software acquisitions or developments meet NASA’s criteria per NPR 7150.2.

• This includes, but is not limited to, being capitalized per policy as well as safety-critical software having a software safety plan.

Hosting/ System Administration:

1.1.3.20 Ensure all IT systems and capabilities managed under the Contract are implemented and maintained in accordance with Agency and Center policies and procedures. Specific systems and system requirements are identified in further sections of this PWS. A list of systems is provided in attachment J-9.

1.1.3.21 Ensure any system, database, spreadsheet, or other file that contains NASA data resides in a NASA data center or other authorized NASA system. The Government may define additional systems in the future as required.

1.1.3.22 Ensure the Government shall have at any time access to Contract managed systems containing NASA data and review any information contained therein.

• NASA data, including all changes made under this contract, is Government property and is for the exclusive use of the Government.

• This…