Brand Name of Equal to Empire -Statement of Work (SOW) (9.13.22).pdf

Statement of Work for an Ergo Blast Cabinet with Media Reclaim System for Tobyhanna Army Depot

1.0 General Scope

1.1 This Statement of Work (SOW) is for the turn-key design, supply, delivery, installation, assembly, set-up and training for two (2) Brand Name or Equal to, Empire 6060 with Ergo Package Blast Cabinet with media reclaim system and without a dust collector, at Tobyhanna Army Depot (TYAD), Tobyhanna, PA, 18466. The Contractor shall supply all materials, supplies, freight, delivery, tools, equipment, consumables, labor, and supervision for the turn-key design, supply, delivery, installation, assembly, set-up and training for the blast cabinet and reclaim system. The blast cabinet and reclaim system shall meet or exceed all applicable Industrial, Federal, State and Local standards and codes. A used and refurbished blast cabinet and a used and refurbished reclaim system are unacceptable and will not be considered. All repair and replacement parts for the blast cabinet and the reclaim system shall be new. All repair and replacement parts for the blast cabinet and the reclaim system shall be available for purchase and supplied from within the continental United States.

1.2 The Contractor shall provide training for Component Preparation Branch personnel. This training shall focus on basic blast cabinet and media reclaim operation and features. Training shall also include instruction in maintenance and preventive maintenance (PM) to be performed by Component Preparation Branch personnel on a daily basis. The training shall not exceed 8 hours and shall be conducted on-site.

Training shall be for up to 4 ea. (each) Component Preparation Branch personnel. All materials used during training shall become the property of TYAD.

1.3 The Contractor shall provide training for Equipment Maintenance Branch personnel. Maintenance.

This training shall include PM and general maintenance including the lock-out/tag-out procedure to take the blast cabinet and media reclaim system to zero mechanical state and restore it to full operational capability. Equipment Maintenance Branch personnel training shall not exceed 8 hours. Maintenance instruction shall be for up to 2 ea. Equipment Maintenance Branch personnel and shall be conducted on-site. All materials used during training shall become the property of TYAD.

1.4 The blast cabinet and reclaim system shall be designed, configured and supplied to use 120V/1 Phase/60 Hz for its power requirement. Compressed air will be supplied for the blast cabinet and reclaim system operation by the Government.

1.5 Contractor attendance at a site visit is recommended to enable the viewing of the delivery and the installation sites. The Contractor shall be responsible to furnish personal protective equipment (PPE) to participate in the site visit. At a minimum, PPE furnished by the Contractor for attendance shall be eye protection, protective footwear, and hearing protection. Contractors arriving without these pieces of PPE may not be permitted on the site visit.

2.0 Blast Cabinet and Reclaim System Specifications, Characteristics and Features

1. Blast cabinet interior dimensions shall be 60 inches wide by 60 inches deep by 44 inches high.

2. Blast cabinet shall be constructed of 14 gauge steel, minimum, with continuous welded seams and 4 ea. leveling bolts.

3. The blast cabinet shall have 2 ea. swing doors with Occupational Safety and Health Administration (OSHA) interlocks to prevent blasting while doors are in open position.

4. Door opening shall be 50 inches wide by 40 inches high and have at least two latches to ensure the door closes tightly and completely.

5. Doors shall be constructed of 14 gauge steel, minimum, with ¾ inch by ¾ inch open cell rubber gasket for full seal and media retention.

6. The blast cabinet shall be of ERGO design and shall include, but shall not be limited to the following features and characteristics:

a. Knee-hole indentations in the cabinet to allow for sitting operational use;

b. Elevating foot treadle;

c. Elevating arm rest that shall be padded and have the ability for pivoting operation;

d. Top entry blast hose;

e. Pilot operated pipe string with 1 inch National Pipe Thread taper (NPT);

f. Front mounted blast pressure regulator;

g. Media catch sills below the doors.

7. The cabinet shall be supplied with 2 each 8 inch diameter felt-lined rubber coated gloves installed in the cabinet at a height level of 44 inches from the ground to the glove centerline.

8. The blast cabinet floor shall be composed of 3/16 inch thick perforated steel with ½ inch diameter holes. Blast cabinet floor shall be at 34 inches from the floor work height. As part of the booth assembly, a completely seam welded inverted pyramid media collection hopper shall be located below the floor. The bottom of the hopper shall have a six-inch diameter horizontally oriented tube facing rearward for the connection of a six-inch diameter reclaim collection hose. Any other passages in the hopper that are connected to the reclaim system shall be capable of being closed.

9. The blast cabinet viewing window shall be composed of 14 inch by 22 inch safety glass; gasket and steel frame; and with quick change knobs for no-tools-required replacement.

10. The viewing window shall be angled and cover a viewing height of 51 inches through 65 inches in height.

11. Lighting shall be 100 foot candles, minimum. Lights shall be encapsulated in dust-tight fixtures.

12. A ¼”-20 tap with bolt grounding strap shall be supplied for electrical and static grounding.

13. Media storage hopper shall be 1 cubic foot capacity and composed of 14 gauge steel, minimum.

14. Contractor shall supply a 900 cubic feet per minute (CFM), minimum, externally tunable reclaim system.

15. Reclaimer shall be constructed of 12 gauge steel, minimum, with continuous welded seams.

16. Reclaimer shall have screen access media fill door, 6 inches by 12 inches in size, with adjustable latch and gasket.

17. Reclaimer shall be designed and constructed to accommodate the use of a multitude of different media size.

18. The reclaimer inlet diameter shall be 6 inches, minimum; the outlet diameter shall be 10 inches, minimum; and the major diameter shall be 20 inches, minimum. The outlet shall be equipped with a sliding damper capable of being fully opened or closed. The outlet shall be connected to the existing central dust collection system using a hose supplied by the Government.

19. The pressure system shall include a 1 cubic foot pressure vessel with 1-inch pipe string and 3/16 inch boron carbide nozzle. The nozzle shall not be threaded into its holder but rather retained by an internally threaded tube nut onto the external threads on the nozzle holder.

20. The blast hose shall be 4-ply static dissipating ½ inch inside diameter (I.D.). Blast hose shall include quick-disconnect couplings.

21. The pressure system shall use 1 inch NPT pipe.

3.0 Additional Features and Accessories for the Blast Cabinet and Reclaim System

1. A Preventive Maintenance Package shall be supplied and shall include the following:

a. 1 ea. Part #510921 (Part Number 510921), or equivalent—rubber curtains for 6060 blast cabinet walls and doors;

b. 1 ea. Part #510781, or equivalent—rubber curtains for 6060 blast cabinet cone;

c. 1 ea. Part #140638, or equivalent—front wall curtain for 6060 blast cabinet;

d. 1 ea. Part #502032, or equivalent—3/16 inch boron carbide pressure nozzle;

e. 1 ea. Part #290184, or equivalent—boron carbide exhaust valve restrictor;

f. 1 ea. Part #140339, or equivalent—heavy-duty 6 inch conveying hose upgrade;

g. 1 ea. Part #514491, or equivalent—reclaimer inlet wear plate, externally replaceable, 900-

1200 CFM;

h. 1 ea. Part #526193, or equivalent—reclaimer ultrawear internal lining—900 to 1200 CFM.

2. The following media control and conditioning accessories and pressure system option shall be supplied:

a. 1 ea. Part #511572, or equivalent—magnetic reclaim separator;

b. 1 ea. Part #140335, or equivalent—vibrating reclaimer screen for fine and light-weight media;

c. 2 ea. Part #545471, or equivalent—sight plugs for 1 cubic foot pressure vessel.

4.0 General Requirements

Delivery, Installation, and Set-Up

4.1 All site preparation work will be performed and completed by the Government prior to the delivery.

4.2 It shall be the responsibility of the Contractor to deliver, off-load, transport, place, and properly position the new blast cabinet and reclaim system at TYAD within Building 1E at a designated floor location. The Contractor shall be responsible to provide all personnel and equipment necessary to deliver, off-load, transport, place, and properly position the new blast cabinet and reclaim system at the designated work site. Only electric-powered material handling equipment shall be used by the Contractor inside all Government buildings. Delivery date and time shall be coordinated by the Contractor with the Contract Point of Contact (CPOC) a minimum 14 calendar days in advance of delivery. The Contractor shall be able to provide delivery on a Saturday. Delivery shall include all accessory and assembly pieces and materials. A partial delivery is not acceptable.

4.3 The Contractor shall be responsible to remove all packaging, packing and crating material from the blast cabinet, reclaim system and all ancillary and assembly pieces. The Contractor shall remove all of the packaging, packing and crating materials from TYAD. It shall be the responsibility of the Contractor to completely and thoroughly clean the blast cabinet, reclaim system, and all ancillary and assembly pieces. The Contractor shall supply and install a grounding rod for the machine, per manufacturer’s specification. The Contractor shall supply all materials, tools and labor necessary for the manufacturer’s recommended grounding of the blast cabinet and reclaim system. The Contractor shall be responsible for anchoring the blast cabinet and reclaim system to the floor, per manufacturer’s specification, and supplying all items and equipment necessary for this purpose. The Contractor shall be responsible to level the blast cabinet and reclaim system, per manufacturer’s specification. The Contractor shall thoroughly clean the work site prior to daily departure and prior to weekend and holiday departures.

4.4 The Contractor shall furnish all paints, fluids, greases and lubricants required by the manufacturer for the blast cabinet and reclaim system. The Contractor shall have all paints, fluids, greases and lubricants delivered with the blast cabinet and reclaim system. The Contractor shall furnish Material Safety Data

Sheets (SDSs) for all paints, fluids, greases and lubricants to the CPOC upon delivery of the blast cabinet and reclaim system. The Contractor shall remove from TYAD all empty, fully-filled, and partially-filled paint, fluid, grease and lubricant containers upon completion of all work.

4.5 The Contractor shall be responsible to connect the blast cabinet and reclaim system to all utilities and connect the blast cabinet and reclaim system to the central dust collection system. The Contractor shall be responsible to furnish all materials, labor, and tools to connect the blast cabinet and reclaim system to all utilities and connect the blast cabinet to the reclaim system. The Contractor shall be responsible to supply all materials, labor, and tools to connect the blast cabinet and reclaim system to the central dust collection system. Utilities will be provided by TYAD to within 20 feet of the work site. The blast cabinet and reclaim system shall utilize 120V/1 Phase/60 Hz. For a blast cabinet and reclaim system that is not designed and constructed to use 120V/1 Phase/60 Hz, the Contractor shall supply, install and connect the necessary transformer that permits the blast cabinet and reclaim system to fully utilize 120V/1 Phase/60 Hz. Compressed air will be supplied by the Government. It shall be the responsibility of the Contractor to connect the supplied compressed air to the blast cabinet and reclaim system.

4.6 The Contractor shall charge the system with media that will be supplied by the Government. The Contractor shall make all adjustments necessary to ensure optimal recycling of the media. Media that will be supplied by the Government is 60 grit Zirconia Alumina. The Contractor shall be responsible to ensure the blast cabinet, the reclaim system and all ancillary pieces of equipment are operating within manufacturer’s specifications prior to beginning all personnel training.

4.7 The Contractor shall complete assembly; complete installation; complete personnel training; and present all data and documentation to the CPOC within 21 calendar days of delivery at TYAD of the blast cabinet, reclaim system and all ancillary pieces by the Contractor.

4.8 The Contractor shall have a contractual Period of Performance (PoP) of 120 calendar days after receipt of order (ARO).

5.0 Training

5.1 The Contractor shall provide training for Component Preparation Branch personnel. This training shall focus on basic blast cabinet and media reclaim operation and features. Training shall also include instruction in maintenance and preventive maintenance to be performed by Component Preparation Branch personnel on a daily basis. The training shall not exceed 8 hours and shall be conducted on-site at the blast cabinet. Training shall be for up to 4 ea. Component Preparation Branch personnel. All materials used during training shall become the property of TYAD. All training shall be conducted in English.

5.2 The Contractor shall provide training for Equipment Maintenance Branch personnel. Maintenance training shall include PM and general maintenance including the lock-out/tag-out procedure to take the blast cabinet and media reclaim system to zero mechanical state and restore it to full operational capability. Equipment Maintenance Branch personnel training shall not exceed 8 hours. Maintenance instruction shall be for up to 2 ea. Equipment Maintenance Branch personnel and shall be performed on-site at the blast cabinet. All materials used during training shall become the property of TYAD. All training shall be conducted in English.

5.3 Personnel training shall commence only after the blast cabinet, the reclaim system and all ancillary pieces of equipment are operating within manufacturer’s specifications. Personnel training shall be conducted on-site at the blast cabinet in Bldg. 1E by the Contractor or the Contractor’s qualified training instructor.

6.0 Documentation

6.1 The Contractor shall furnish in hardcopy three (3) each of the following manuals: 1) Blast Cabinet and Reclaim System Operator’s manual; 2) Blast Cabinet and Reclaim System Parts manual that shall include a full parts list for the blast cabinet and reclaim system—the parts list shall include part number, nomenclature, and quantity for each listed part; 3) Maintenance and Repair manual. The Contractor shall detail the lock-out/tag-out procedures that are required to bring the blast cabinet and reclaim system to a zero mechanical state for maintenance and servicing. Procedures for returning the blast cabinet and reclaim system to full operational capability shall also be provided. All documentation shall be written in English.

7.0 General Acceptance

7.1 General Acceptance will be granted to the Contractor upon successful demonstration of the blast cabinet and reclaim system; completion of Component Preparation Branch personnel training and Equipment Maintenance Branch personnel training; and presentation of all data and documentation to the

CPOC.

8.0 Final Acceptance

8.1 Final Acceptance will occur upon ACCEPTANCE in Wide Area Workflow (WAWF) of the Contractor’s submitted invoice by the CPOC. Final Acceptance will be granted only after General Acceptance has been given to the Contractor and all elements of the contract have been completed to the satisfaction of the CPOC.

9.0 Warranty

9.1 The Contractor shall warrant the blast cabinet, reclaim system, and all ancillary components, all installation parts and all workmanship for a period of one (1) calendar year, minimum, following Final Acceptance by the CPOC. During this warranty period all parts costs, labor costs, transportation and shipping costs, travel costs, tool costs and per diem for all Contractor personnel shall be the responsibility of the Contractor. The Contractor field repair technician shall arrive on-site within 72 hours after being contacted by TYAD personnel to make warranty repairs during the warranty period. The Contractor shall supply the CPOC with Contact Telephone Numbers and Points of Contact (POCs) for use by TYAD personnel for warranty, operations and maintenance questions and support.

10.0 Safety

10.1 The blast cabinet and reclaim system shall meet all requirements set forth in OSHA General Industry Standards, current edition. All energy control sources shall have the capability of being locked-out and tagged-out. The Contractor’s manuals shall detail the lock-out/tag-out procedures that are required to bring the blast cabinet and reclaim system to a zero mechanical state for maintenance and servicing. Procedures for returning the blast cabinet and reclaim system to full operational capability shall also be provided.

10.2 Prior to soldering, welding, torch cutting, and all forms of burning and use of open flame the Contractor shall be responsible to obtain a Burn Permit from the TYAD Fire Department. The Contractor shall use safety screens that offer the required level of protection for the type of work being performed and to provide protection for all personnel in the surrounding area.

10.3 See below, Contractor Safety Standards for TYAD, for additional information and requirements.

11.0 Environmental

11.1 The Contractor shall not use fossil-fueled vehicles and fossil-fueled equipment inside the bays and buildings. Only electric vehicles and electric equipment are permissible. If fossil-fueled vehicles or fossil-fueled equipment must be used due to the non-availability of an electric-powered alternative the Contractor shall notify the CPOC a minimum of 3 working days in advance of its use to permit notification of the appropriate personnel and time for use. Use of fossil-fueled equipment shall be used by the Contractor only during off-shifts, holidays and weekends when no Government personnel will be in the area.

11.2 See below, Standard Specifications for Projects Under the National Environmental Policy Act, for additional information and requirements.

12.0 Additional Requirements

12.1 Removal of Contractor Materials. The Contractor shall remove from the work site prior to the acceptance of work by the Government, all materials not identified to remain in place, including excess paints, building materials, and equipment purchased by the Contractor for the execution of this project.

12.2 Storage of Materials and Equipment. Government furnished storage facilities are not available to the Contractor in the vicinity of the work site. The Contractor shall provide suitable storage facilities as required, located as approved by the CPOC, if the Contractor intends to leave materials and equipment in the work area overnight or on weekends. The security of the Contractor's property or his personnel's property shall be the full responsibility of the Contractor. The Government will accept no liability in case of loss due to fire or theft.

12.3 Availability of Utility Services. The Government will furnish water and power in the quantity not to exceed the amount necessary for the normal execution of the work, at the nearest available outlet. The Contractor shall make all piping and wiring connections thereto and shall extend the services to the site of the work. On completion of the work, the Contractor shall remove all such temporary connections and any removed or damaged portions of the Government services at the points of connection shall be repaired or replaced.

A. Other Utilities: The Contractor shall make arrangements to obtain all utilities not furnished by the Government, at the Contractor’s expense.

B. The Government will not provide refuse facilities. The Contractor will be required to dispose of all garbage and other waste materials generated by his work at a licensed off-site landfill.

12.4 A TYAD Local 648-C form for all personnel to include sub-contractors working under this contract shall be completed and submitted within 7 workings days prior to requiring access to TYAD in order to allow sufficient time to process security information. No Contractor personnel or Contractor’s subcontractor personnel will be permitted access to TYAD unless prior written approval is received from the TYAD Security Office.

13.0 SECURITY REQUIREMENTS FOR THE CONTRACTOR

All TYAD contracts and other acquisition-related documents must ensure privacy and security controls follow the information, and that contractors and service providers protect Privacy Act information in the same way the organization adhering to the Federal Acquisition Regulations (FAR) Privacy Act provisions (Subparts 24.1 and 24.2) and include the specified contract clauses (Parts 52.224-1 and 52.224-2), as appropriate, to ensure that personal information is protected as mandated.

In addition to the changes authorized by the clause of this contract; should Force Protection Condition (FPCON) at the installation change, the Government may require changes in contractor security matters and/or processes.

FPCON impact on work levels. (Please annotate with an X which may apply):

_____ During FPCONs Charlie and Delta, [XXX] services are discontinued. [XXX] services will resume when the FPCON level is reduced to level Bravo or lower.

_____This contract and its employees are considered mission essential. Therefore, all contractor employees are required to report for duty and remain on duty during declared emergencies and/or elevated FPCON levels unless otherwise directed by the contacting officer via the appropriate COR.

Contingency Operations Plan

The Contractor shall prepare and submit a Contingency Operations Plan to the Government. The Contingency Operations Plan shall document Contractor plans and procedures to maintain support during an emergency. The Contingency Operations Plan shall include the following:

A description of the Contractor’s emergency management procedures and policy A description of how the Contractor will account for their employees during an emergency Planned temporary work locations or alternate facilities How the Contractor will communicate with Government during emergencies A list of primary and alternate Contractor POCs, each with primary and alternate telephone numbers Procedures for protecting Government Furnished Equipment (GFE)/Government furnished property (if any) Procedures for safeguarding sensitive and/or classified Government information (if applicable)

Unscheduled gate closures by the Security Police may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

The contractor’s employees shall become familiar with and obey the regulations of the installation;

including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance.

Antiterrorism (AT) Level I Training. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level I awareness training prior to contract report date. This training is required for any additional or new contractor employees, who start after that period. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR/POC within 10 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html for their training. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record, or contractor equivalent. As applicable, contractor employees must complete annual AT awareness training as it pertains the length of the contract.

iWATCH Army Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH Army Program. This will consist of utilizing the tools and media products on the informational iWATCH Army website to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR/POC. The iWATCH training is available at the following website: https://myarmyonesource.com select Family Programs and Services, in the drop down boxes select: Go To, iWATCH Army –“See Something, Say Something”. The contractor shall notify the COR/POC within 10 calendar days of review of the information on the website for any new employees or subcontractor personnel to assure the ELTY form 583 or contractor equivalent is properly documented. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record or contractor equivalent.

Access and General Protection/Security Policy and Procedures. Contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by TYAD Law Enforcement. Contractor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA, and/or local policy.

Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by the government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

A background check and approval from Tobyhanna Army Depot (TYAD) Law Enforcement is required for all contractor and subcontractor personnel prior to on-site access at TYAD. All persons seeking entrance to TYAD shall submit to and comply with all security standards and requirements in force at the time such persons are seeking entry. All contractors, regardless of resident status or citizenship, will be subject to vehicle search and intense in-processing by TYAD security personnel prior to being granted access to TYAD. This security screening process may be time consuming and access may be delayed or denied. The contractor shall ensure ELTY Form 648-C is completed for all contractor and subcontractor personnel requiring depot access to include warranty services. The TYAD point of contact (POC) will provide ELTY Form 648-C, “Request Access to Tobyhanna Army Depot” to the contractor/vendor at least ten days prior to the expected visit date for completion. The contractor/vendor shall return the completed ELTY Form 648-C to the TYAD POC in a timely manner so the same may be submitted to Security for processing no later than seven days prior to the visit. All of the required fields on the form shall be complete and accurate by the contractor/vendor for timely processing. This requirement is inclusive of on-site supervisory or managerial personnel and sub-contractor personnel that the Contractor anticipates will be performing work or visiting on-site. This security screening does not relieve the contractor of any responsibilities to conduct thorough pre-employment background checks and drug screening. Contractor workers will not be granted access to the work site until security screening is completed and access is approved. Any contractor personnel on-site who fail screening will not be permitted further access to TYAD. See “Access and General Protection/Security Policy and Procedures”.

Submit the completed ELTY Forms 648-C form(s) to the COR or POC. Ensure contracts include the provisions that check for the possibility of and prevent undocumented workers for inclusion in contracted work related to Army missions.

The company will ensure that its employees entering Army-controlled installations or facilities have obtained access badges and passes in accordance with facility regulations and that these badges and passes are obtained in advance so as not to delay the accomplishment of contracted services.

Common Access Card (CAC) and Information Systems/Network Access by Contractor Workers.

[If applicable.] Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more.

At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

For contractors that do not require CAC, but require access to a DoD facility or installation. Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/AR 190-13); applicable installation, facility and area commander installation and facility access and local security policies and procedures (provided by Government representative); or, at OCONUS locations, in accordance with status-of-forces agreements and other theater regulations.

Collection of Badges: The Contractor shall account for all forms of Government-provided identification issued to the Contractor employees in connection with performance under this contract. The Contractor shall return such identification to the issuing agency at the earliest of any of the following, unless otherwise determined by the Government:

(1) When no longer needed for contract performance.

(2) Upon completion of the Contractor employee’s employment.

(3) Upon contract completion or termination.

The Contracting Officer may delay final payment under a contract if the Contractor fails to comply with these requirements. The Contractor shall insert the substance of this clause, including this paragraph, in all subcontracts when the subcontractor’s employees are required to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system. It shall be the responsibility of the prime Contractor to return such identification to the issuing agency in accordance with the terms set forth in of this section, unless otherwise approved in writing by the Contracting Officer. The company will return all issued U.S. Government Common Access Cards, installation badges, and/or access passes to the COR when the contract is completed or when a contractor employee no longer requires access to the installation or facility. Contractor personnel will obtain a vehicle pass for access to the military installation and Common Access Cards (CAC) for computer access, if applicable.

Security and privacy requirements for all Department of Defense-Tobyhanna (TYAD) information technology (IT) procurements.

Applicability: The requirements established in this document apply to all employees, contractors, and users authorized to participate in the TYAD IT procurement process. Further, the requirements established herein apply as the entire contract or order (hereafter referred to as a “contract”), or any portion thereof, includes either or both of the following:

a. Access (Physical or Logical) to Government Information: Physical and Logical Access refers to when contractor personnel (and/or any subcontractor) are expected to have (1) routine physical access to an TYAD-controlled facility; (2) logical access to an TYAD-controlled information system; (3) access to government information, whether in an TYAD-controlled information system or in hard copy; or (4) any combination of circumstances (1) through (3) as per OMB M-05-24, Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors.

b. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) employee will operate a federal system and information technology containing data that supports the TYAD mission. In addition to the Federal Acquisition Regulation (FAR) Subpart 2.1 definition of “information technology” (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources.

Requirements: Safeguarding Information and Information Systems In accordance with the Federal Information Processing Standards Publication (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems, the Contractor (and/or any subcontractor) shall:

a. Protect Government information and information systems in order to ensure:

Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information.

Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity.

Availability, which means ensuring timely and reliable access to and use of information.

b. Provide security for any Contractor systems, and information contained therein, connected to a TYAD network or operated by the Contractor on behalf of TYAD regardless of location. In addition, if new or unanticipated threats or hazards are discovered by either the agency or contractor, or if existing safeguards have ceased to function, the discoverer shall immediately, within sixty (60) minutes or less, bring the situation to the attention of the other party.

c. Adopt and implement policies, procedures, controls, and standards that are in effect at the time of contract solicitation and required by the TYAD Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain the TYAD Information Security Program security requirements based on the National Institute of Standards and Technology (NIST) “Framework for Improving Critical Infrastructure Cybersecurity.” The framework contains the five (5) core functions to “Identify,” “Protect,” “Detect,” “Respond (to),” and “Recover (from)” any cybersecurity event.

d. Comply with the Privacy Act requirements and with the Federal Information Security Modernization Act (FISMA) and with the OMB memo M-17-12, Preparing for and Responding to a Breach of Personally Identifiable Information, Contractor Employee Personnel Security Screenings documents, and FAR clauses as applicable and incorporated into this solicitation/contract. Personally Identifiable Information is defined as below.

Per Office of Management and Budget (OMB) Circular A-130, Personally Identifiable Information (PII) is “information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual.” Examples of PII include, but are Security and Privacy Requirements for Information Technology Procurements not limited to the following: social security number, date and place of birth, mother’s maiden name, biometric records, etc.

Per TYAD, sensitive PII is PII that if released improperly could result in harm, embarrassment, inconvenience, or unfairness to the individual whose name or identity is linked to the information.

Context must be accounted for in order to determine whether PII is sensitive. Some PII is always sensitive, and some is only sensitive when it is used in a particular context. For example, a list of people subscribing to a government newsletter is generally not sensitive PII; a list of people receiving treatment for substance abuse would always be considered sensitive PII.

The list below is not exhaustive. Context must be accounted for in order to determine whether PII is sensitive. The following types of information are always considered sensitive:

Social Security Numbers (including using just the last 4 digits of the SSN) Date of birth Mother’s maiden name Biometric identifiers (e.g., fingerprint, iris scan, voice print) Personal financial information, credit card and purchase card account numbers Citizenship and immigration status Criminal history • Computer access passwords and security questions Medical records

a. Mandatory Training for All Contractor Staff - All contractor (and/or any subcontractor) employees assigned to work on this contract shall complete the applicable TYAD Cybersecurity and Privacy Awareness training (provided upon contract award) before performing any work under this contract (this training is available to new contractors, even if they do not have a PIV card). Thereafter, the employees shall complete the TYAD Cybersecurity and Privacy Awareness training at least annually, during the life of this contract. All provided training shall be compliant with TYAD training policies. Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government information system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services and must successfully complete the DOD Information Assurance (IA) Awareness prior to access to the information system and then annually thereafter.

b. Training Records - The contractor (and/or any subcontractor) shall maintain training records for all its employees working under this contract in accordance with TYAD policy. A copy of the training records shall be provided to the COR within 30 days after contract award and annually thereafter, or upon request.

Information assurance (IA)/information technology (IT) training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

Information assurance (IA)/information technology (IT) certification. Per DoD 8570.01-M , DFARS

252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

Acceptable Use Policy: Users who require TYAD Network access are required annually to digitally sign an Acceptable Use Policy. (AUP) The Acceptable Use Policy is intended to outline expected behavior in regards to the use of Government information technology (IT) resources and to delineate between authorized and unauthorized operating practices. The Acceptable Use Policy also provides an overview of IT system security policies mandated by TYAD. All Government IT resources, including but not limited to, hardware, software, storage media, and computer and network accounts, provided by TYAD are the property of TYAD. They are to be used for business purposes in serving the interests of the Government and TYAD customers in the course of normal operations. Use of Government IT resources for purposes other than those identified within this policy are strictly prohibited and could negate the security of TYAD IT systems. Effective security is a team effort involving the participation and support of everyone who deals with information and/or information systems. It is the responsibility of everyone to know these guidelines, and to conduct their activities accordingly.

The policy represents the commitment of TYAD to ensure that system and information integrity policy is appropriately defined and implemented, in order to protect TYAD systems from intentional or unintentional acts that may negatively impact system security. The policy applies to the use of information, electronic and computing devices, and network resources to conduct TYAD business. All TYAD employees, contractors, and vendors are responsible for exercising good judgment regarding appropriate use of information, electronic devices, and network resources in accordance with TYAD policies and standards, and local laws and regulation.

This policy applies to employees, contractors, and vendors. This policy applies to all equipment that is owned or leased by TYAD. This policy covers TYAD entire operational environment, including telework locations/sites.

Employees do not have a right, nor should they have any reasonable expectation, of privacy while using any Government IT resources at any time, including accessing the Internet or using e-mail. To the extent that employees wish that their private activities remain private, they should avoid using Government IT resources such as their TYAD-issued computer, the Internet access, or e-mail for such activities. By using Government IT resources, employees give their consent to disclosing the contents of any files or information maintained using this equipment.

Security Clearances. [If applicable.] Performance of work will require access to classified information or equipment IAW the DD Form 254, Contract Security Classification Specification, provided as an attachment. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); (2) any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

The Contractor agrees to insert terms that conform substantially to the language of this clause, but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil.

Threat Awareness and Reporting Program (TARP). [If applicable.] For all contractors with security clearances, per AR 381-12, TARP contractor employees must receive initial and annual TARP training by a CI Agent or other trainer as specified in 2-4b.

Contracts that Require an OPSEC Standing Operating Procedure/Plan. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty.

All contractor employees must complete annual OPSEC awareness training. The training is available at the following website: http://cdsetrain.dtic.mil/opsec/index.htm The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR/POC within 10 calendar days after completion of training. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record or contractor equivalent.

a. Contractor personnel shall not discuss government operations in public or over unprotected or unencrypted communications. Official Business, controlled unclassified information may only be transmitted as directed in the SOW/PWS.

b. Contractor personnel shall not discuss government operations in public or over unprotected or unencrypted communications. Official Business, controlled unclassified information may only be transmitted as directed in the SOW/PWS.

c. The Contractor shall not post to company websites, publications, newsletters or other media any images, data or information that reveal sensitive government operations, personnel, equipment, and/or classified or controlled unclassified information. When in doubt, company press releases related to this contract should be coordinated through the Contracting Officer Representative (COR) or Technical Point of Contact, as applicable.

d. Because observation of events, operations, physical changes, etc. may reveal National Security information, specific restrictions are needed to preclude unintentional release of this information to unauthorized parties. (Unauthorized disclosure and transfer of National Security Information is punishable under 18 USC § 793.) Therefore, contractor personnel shall not disclose to unauthorized third parties, post to unofficial sites (including Social Networking sites) any images, data or information, or observed events that reveal sensitive government operations, personnel, equipment, including, but not limited to:

e. Tactics, techniques and procedures, production or work schedules, any visible or concealed modifications, upgrades, additions to vessels, aircraft, or weapons or equipment; increases, change, or decreases in work/deployment frequency or government personnel, vehicle, vessel or aircraft movements; specialized equipment orders, deliveries, shipments, etc., Unauthorized disclosures and attempts to solicit this type of information by unauthorized third parties or others not affiliated with this contract shall be reported to the installation Security Office, contract point of contact, and your company Facility Security Officer and/or the Defense Security Service. Non-Disclosure requirements remain in effect during the duration of this contract and indefinitely thereafter.

f. Government issued badges, identification shall be removed and/or concealed from plain sight when off station and shall not be left in vehicles or unprotected. Badges and passes may not be duplicated or copied or loaned to others. Lost or stolen identification badges, vehicle passes etc. will be immediately reported to the installation Security Office.

g. Practice OPSEC and implement countermeasures to protect CI and other sensitive unclassified information and execution of military operations performed or supported by the contractor in support of the mission. Protection of CI will include the adherence to and execution of countermeasures which the contractor initiates or as provided by TYAD, for CI on or related to the SOW/PWS.

h. It is strongly recommended the contractor mark and protect related internal production schedules, deliverables, inventories and shortages and identified vulnerabilities related to production of government material. Internal company markings e.g., Business Sensitive, etc., are appropriate for identifying the aforementioned as sensitive information. Specific Government-provided information, drawings etc., will be protected in accordance with guidance in applicable paragraphs of the SOW.

i. All government information must be destroyed at contract termination or returned to the government at the government’s discretion.

Information Security (INFOSEC)

Contractor personnel must comply with local security requirements for entry and exit control for personnel and property at the Government leased facility or…