Draft_SOW.pdf

STATEMENT OF WORK

SECTION C – DESCRIPTION/SPECIFICATION/WORK STATEMENT

C.1.0 SCOPE

C.1.1 The scope of this contract is the fabrication of carbon fabric and tape-wrapped carbon phenolic (TWCP) heatshields for production of both the existing Navy Submarine-launched Ballistic Missile (SLBM) Reentry Systems (Mk4, Mk5, & Mk7) and future programs, the development and fabrication of thermal protection system (TPS) materials and components (including heatshields, control surfaces and backpacks) for future/advanced Navy reentry systems and flight test experiments, the purchasing, installation, transport and refurbishment of equipment and tooling required for the production of these materials, and recertifying the carbon and heatshield production processes in a new facility. Some materials may also be required to support United States/United Kingdom (US/UK) Polaris Sales Agreement collaborative programs/projects.

C.1.2 These requirements shall be accomplished through engineering studies, material analysis, material fabrication, material processing, and testing. A Government/Industry Integrated Product Team (IPT) approach will be used to manage the technical activities of the Contractor. It is anticipated that the Contractor will be a key member of this team, the Government-led Reentry Materials Team (REMAT).

IPT travel requirements are defined in section C.3.2 In-Process Reviews.

C.1.3 An alternate source of rayon-fiber that can be woven and carbonized into carbon cloth has been identified as a potential future heatshield material. This material will require continued development and to be further assessed and qualified. Based on the results of engineering studies, analysis and testing of the possible replacement material, additional material candidates may also be selected, fabricated and tested in an iterative process until such time as an adequate replacement/alternative material is identified.

Additional identification, procurement, and development of potential new domestic-source rayon precursors and non-rayon carbon may occur in order to support future programs. Performance, as well as producibility, availability of materials and affordability will be significant factors in the selection of replacement/alternative materials. Most importantly will be how all of these factors compare to historical data for the heritage tactical material. Direction on specific material manufacturing tasks shall be provided by the Naval Surface Warfare Center Dahlgren Division (NSWCDD) Contracting Officer’s Representative (COR) based on REMAT discussions and consensus.

C.1.4 In addition to the fabrication of TPS materials for SLBM Reentry Systems, development efforts and studies in the areas of low-cost and advanced reentry system materials may also be defined and pursued. Material fabrication techniques and manufacturing changes, such as invoking new levels of automation, shall be investigated to see if a lower-cost heatshield material replacement can be produced.

C.1.5 The heatshield, being an integral part of a strategic system, is held to very strict and stringent requirements. The production of materials of the same performance and quality as proven heritage materials is of the utmost importance. The ability to use the same production methods, test with the same test methods, and compare against historical data are key. The standup of a new facility shall require purchasing and installation of new equipment and the transfer and install of existing equipment. The newly stood up production line shall complete a Navy SSP directed requalification effort to prove equivalence to the existing facility.

C.2.0 REQUIREMENTS

The Contractor shall perform specific tasks as set forth herein.

C.2.1 Tape-Wrapped Carbon Phenolic Heatshield Fabrication (RDT&E – FFP) In support of US Mk4/Mk5/Mk7 SLBM programs, the Contractor shall fabricate TWCP heatshield shipsets to the requirements and drawings specified, with the Mk7 drawing numbers to be determined when a design is released. Each Mk4/Mk5 shipset shall consist of one (1) forward and one (1) aft frustum fabricated on extended length tooling provided as Government Furnished Property (GFP) currently at the Contractor facility and cured to previous production methods. The Mk7 shipsets shall consist of one (1) forward, one (1) mid, and one (1) aft heatshield. The raw materials for heatshield production will be provided as Government Furnished Material (GFM) or processed under other sections of this Statement of Work (SOW).

Mk4 Shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin Drawings 6951089 for the forward and 6951090 for the aft.

Mk5 shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin Drawings 6951091 for the forward and 6951092 for the aft.

Mk7 shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin 5xxxxxx series part numbers for development. Released production shipsets shall be produced to 6xxxxxx series part numbers.

Applicable weapon specifications are WS23211, WS28251, and XWS28674. Additional WS’s or requirements may be specified, as necessary.

Heatshields shall be delivered to Lockheed Martin Space Systems Company, Kratos SRE, or other Contractor or test facilities as determined by NSWCDD. Residual Extended Length Tag End Ring(s) shall be sent to Kratos SRE.

C.2.2 Rayon Purchasing (RDT&E, FMS – FFP) In support of Mk7 and future programs, the Contractor shall procure lots of Glantzstoff Viscord Super2 1650 denier fiber with special carbon avivage finish. Backup material options include ENKA rayon fiber or C2BNG carbonized fabric. An estimated schedule for development is three (3) lots in year one (1), two

(2) lots in year two (2), and one (1) lot in year three (3). A life of type buy shall be made in year four (4).

Program estimates require 185 lots (1,205,000 lbs.) to support all needs.

C.2.3 Rayon Carbonization (RDT&E, FMS – FFP) The Contractor shall weave purchased rayon into 8-harness satin fabric, carbonize and purify. Carbon fabric shall meet XWS 28676.

C.2.4 Equipment and Tooling Purchase, Upgrade, and/or Refurbishment (RDT&E – FFP) The Contractor shall perform tasks related to the purchase, install, upgrade, and/or refurbishment of equipment and tooling used in the production and cleaning of carbon fabrics and manufacturing of heatshields and reentry materials. This is to include, but not limited to, wrap mandrels, cure fixtures, machining lathes, furnaces and ovens, cleaning equipment, scouring facilities, and hydroclaves. The Contractor shall submit a purchase and/or refurbishment plan and schedule to NSWCDD, listing materials, purchase, and repair activities and timeline for completion prior to any work on this activity.

After purchase, upgrade, and/or refurbishment work, at the direction of the COR, the Contractor shall fabricate one (1) tool trial part to verify that produced parts still meet acceptance. The tool trial part shall be made from non-stockpile material and is not for formal acceptance. A notice of successful tool trial completion from the purchase, upgrade, and/or refurbishment activities shall be granted by NSWCDD acceptance prior to fabrication of any production quality heatshields. (CDRL A006)

C.2.5 Production Requalification as a Result of Activity Site Relocation (RDT&E – FFP) The Contractor shall perform the necessary tasks related to the requalification of the production line as a result of activity site relocation and equipment purchases and refurbishments in activity C.2.4. The Contractor shall submit a requalification plan and schedule to NSWCDD (CDRL A007). A notice of successful requalification from activity site relocation shall be granted by NSWCDD acceptance prior to fabrication of any production quality heatshields.

C.2.6 Tape-Wrapped Carbon Phenolic Heatshield Fabrication (FMS – FFP) In support of US/UK Polaris Sales Agreement collaboration programs, the Contractor shall fabricate TWCP heatshield shipsets to the requirements and drawings specified, with the Mk7 drawing numbers to be determined when a design is released. Each Mk4/Mk5 shipset shall consist of one (1) forward and one

(1) aft frustum fabricated on extended length tooling provided as GFP currently at the Contractor facility and cured to previous production methods. The Mk7 shipsets shall consist of one (1) forward, one (1) mid, and one (1) aft heatshield. The raw materials for heatshield production will be provided as GFM or the Contractor may procure required material as directed.

Mk4 Shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin Drawings 6951089 for the forward and 6951090 for the aft.

Mk5 shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin Drawings 6951091 for the forward and 6951092 for the aft.

Mk7 shipsets shall be produced to dimensions, geometric features, and tolerances given by Lockheed Martin 5xxxxxx series part numbers for development. Released production shipsets shall be produced to 6xxxxxx series part numbers.

Applicable weapon specifications are WS23211, WS28251, and XWS28674. Additional WS’s or requirements may be specified, as necessary.

Heatshields shall be delivered to Lockheed Martin Space Systems Company, Kratos SRE, or other Contractor or test facilities as determined by NSWCDD. Residual Extended Length Tag End Ring(s) shall be sent to Kratos SRE.

C.2.7 TPS Materials for Other US Programs (RDT&E – CPFF) In support of other US programs, the Contractor shall fabricate carbon phenolic backpacks, carbon-carbon flaps, hybrid material heatshields, heatshield repair kits, or other TPS materials/components under this task to specifications and requirements provided by NSWCDD in each order. The raw materials may be provided as GFM or the Contractor shall procure required material. This shall include acceptance testing, engineering studies, or analyses related to Quality Assurance of the product. The materials and components under this task may be used for laboratory characterization, ground testing, flight trials or other uses. Materials/components shall be delivered to Lockheed Martin Space Systems Company, Kratos SRE, or other Contractor or test facilities as identified in each order.

C.2.8 TPS Materials for UK Programs (FMS – CPFF) In support of US/UK Polaris Sales Agreement collaboration programs, the Contractor shall fabricate other TPS materials/components under this task to dimensions, architectures, constituents, and other requirements provided by NSWCDD in each order. The raw materials may be provided as GFM or the

Contractor shall procure required material. These activities shall include acceptance testing, engineering studies, or analyses related to Quality Assurance of the product or other additional activities. Materials and components under this task may be used for laboratory characterization, ground testing, flight trials, or other uses. Materials/components/products shall be delivered to Lockheed Martin Space Systems Company, Kratos SRE, or other Contractor or test facilities as identified in each order.

C.2.9 Engineering Studies and Development (RDT&E, FMS – CPFF) The Contractor shall perform engineering studies and development work related to task C.2.1-C.2.8 of this document or in other areas as defined in each order. These studies may involve the identification and/or procurement of alternate constituent materials and other engineering tasks related to the development and production of replacement or advanced TPS materials. Additional studies may focus on, but not be limited to, the development, production, process improvement, cost reduction, analysis, and testing of reentry materials technology as suggested by the Contractor or as otherwise identified in each order.

C.3.0 PROGRESS REPORTING, DELIVERABLES, AND OTHER CONTRACT

MANAGEMENT

In support of the technical and business management of this contract, the Contractor shall comply with the following requirements.

C.3.1 Monthly Progress Report (CDRL A001)

The Contractor shall submit a Monthly Progress Report.

C.3.2 In-Progress Reviews (IPRs) (CDRL A002)

The Contractor shall participate in IPRs. There will nominally be two (2) IPRs per year under this contract. One IPR will be conducted during the regular US Reentry Materials Team (REMAT) meetings that are held once a year. The other shall be at the Contractor facility. These REMAT meetings also serve as the access point for the Heatshield Integrated Product Team (IPT) to review current and future planned activities at Tex-Tech Engineered Composites, LLC (TTEC) in relation to Navy heatshield material requirements/needs.

In addition, Contractor shall support regular REMAT teleconferences and bi-weekly and/or monthly progress teleconferences.

It is estimated that potential off-site IPR’s will be conducted at:

Birmingham, AL Colorado Springs, CO Denver, CO Biddeford, ME Washington, DC Valley Forge, PA

During these IPRs, TTEC shall present details/schedules of heatshields completed, planned, and in-process. Plans/recommendations of future heatshield fabrications shall also be presented for IPT review and discussion. Results, progress, and plans of any Engineering Studies shall also be presented for discussion.

C.3.3 Acceptance Test Plan – (CDRL A003)

The Contractor shall submit an acceptance test plan.

C.3.4 Data Report on Delivered Materials – (CDRL A004)

Upon shipment of any delivered materials under tasks C2.1-2.3, the Contractor shall provide a data report on delivered materials. Report shall include: inspection reports, physical characteristics – weight, CMM inspection reports, density, process summaries, acceptance test results, Certificate of Conformance (CofC) for all constituent inputs, as well as CofCs to the XWS or WS’s applicable.

C.4 USE OF INFORMATION SYSTEM (IS) RESOURCES

C.4.1 Contractor Provision of IS Resources

Except in special circumstances explicitly detailed elsewhere in this document, the Contractor shall provide all IS resources needed in the performance of this contract. This includes computers, software, networks, certificates, and network addresses.

C.4.2 Contractor Use of NSWCDD IS Resources

In the event that the Contractor is required to have access to NSWCDD IS resources, the login name used for access shall conform to the NMCI login naming convention. If the Contractor requires access to applications/systems that utilize client certificates for authentication, the Contractor is responsible for obtaining requisite certificates from a DOD or External Certificate Authority.

If this contract requires that the Contractor be granted access and use of NSWCDD IS resources (at any site), the IS shall be accredited for Contractor use in accordance with procedures specified by the Information Assurance Office.

C.4.3 Connections Between NSWCDD and Contractor Facilities

If there is a requirement (specifically delineated elsewhere in this contract) for interconnection (e.g., link level or Virtual Private Network (VPN)) between any facilities and/or ISs owned or operated by the Contractor and ISs owned or operated by NSWCDD, such interconnection shall take place only after approval from the NSWCDD Information Assurance Office. All such connections as well as the ISs connected thereto will be accredited in accordance with DOD policy (DODI 8510.01) by the cognizant Designated Approving authority (DAA) and comply with the requirements of CJCSI 6211.02D regarding Memorandums of Agreement. All such connections will be made outside the appropriate NSWCDD firewall.

C.4.4 Information Security and Computer System Usage

In accordance with U.S. Navy policy, any personnel, including the Contractor, who utilizes DOD owned systems, shall assume responsibility for adherence to restrictions regarding internet and email usage.

Navy policy prohibits racist, sexist, threatening, pornographic, personal business, subversive or politically partisan communications. All personnel, including the Contractor, are accountable and must act accordingly. DOD computer systems are monitored to ensure that the use is authorized, to facilitate protection against unauthorized access, and to verify security procedures, survivability and operational security. During monitoring, information may be examined, recorded, copied, and used for authorized purposes. All information, including personal information, placed on or sent over a DOD system may be monitored. Use of a DOD system constitutes consent to monitoring. Unauthorized use may result in criminal prosecution. Evidence of unauthorized use collected during monitoring may be used as a basis for recommended administrative, criminal or adverse action.

C.5. Direct Charge of Materials and Equipment

C.5.1 Materials and Equipment Costs - During the performance of this Contract it may be necessary for the Contractor to procure materials or equipment (hereafter referred to as “materials”) to respond to the mission requirements listed in the SOW. The procurement of materials of any kind that are not directly related to and necessary for contract performance may be determined to be unallowable costs pursuant to FAR Part 31. The term “material” includes supplies, parts, equipment, hardware, and Information Technology (IT) resources including hardware, services, and software. Any material provided by the Contractor is subject to the requirements of the FAR, DFARS, and the applicable Department of Navy regulations and instructions. Charges related to materials costs may include general and administrative (G&A) expenses but shall not include fee or profit.

C.5.1.1 Allowable List of Materials

C.5.1.1.1 Consumable Other Direct Costs (ODCs)

Consumable ODCs include material and supplies that are utilized in the execution of SOW tasking and are not transferrable to the Government at the end of the Contract. Examples of consumable ODCs are:

Items intended to cover expenses directly associated with producing contract deliverables including copying costs and consumables (binders, tabs, CD-ROM blank disks, etc.), non-permanent hardware used in thermal and mechanical lab testing (thermocouples, strain gages, extensometer parts, tooling and testing aids, expendable machining supplies such as carbide and diamond drill bits and blades, project stores, replacement parts, machining jigs, inert gases, calibration equipment rental, metal hardware, etc.), and non-permanent hardware used in ground testing (thermocouples, gardon gages, machining jigs, replacement parts, quartz lamp bulbs, graphite pieces, copper pieces, metallic and non-metallic support hardware materials, tooling aids, inert gases for testing in inert environments, expendable machining supplies such as carbide and diamond drill bits and blades, etc.). Shipping costs, to include all shipping/packing charges of reentry system components (e.g. heatshields, nosetips, control surfaces, etc), lab test/ground test specimens and hardware (e.g. copper to shops and facilities), and documentations and presentations from the Contractor to the user. Import/export related fees will also be included.

NWRM shipping requirements may apply to select items. In addition to shipping supplies, supplies will include mundane lab items such as paper towels, fiberfrax, tubing, etc.

C.5.1.1.2 Asset ODCs

Asset ODCs include equipment and property procured in support of the execution of the SOW tasking and are transferrable to the Government at the end of the Contract. COR concurrence is required prior to Contractor procurement of asset ODCs. In the case of Information Technology assets, all Government approval processes must be completed prior to Contractor procurement. Assets procured during the execution of this Contract shall be accounted for and reported in accordance with the Contractor property management tracking and accountability.

Examples of asset ODCs are:

The Contractor may be required to procure equipment and property such as environmental chambers for conditioning of sub-scale and full-scale TPS components, Government Furnished Equipment (GFE) replacement parts, Government Furnished Equipment (GFE) repairs, unique machine tooling for flight hardware fabrication, and specialized equipment for TPS material assessments and post-processing of tested materials.

C.5.2 Required Approvals

All purchases of materials, exceeding $3,500 per individual purchase, and all Personal Protective Equipment, require COR approval prior to purchase. As well as approval by the COR, prior written approval from the Contracting Officer shall be required for all purchases of materials under the following circumstances:

C.5.2.1 If the Contractor possesses an approved purchasing system, the following applies:

C.5.2.1.1 A purchase of materials in accordance with what is stated in Section C.5.2 above, that is greater than $3,500 and less than or equal to $10,000 per individual purchase may be executed with COR review and written approval. Contracting Officer approval is not required.

C.5.2.1.2 A purchase of materials in accordance with what is stated in Section C.5.2 above that exceeds $10,000 per individual purchase may NOT be executed unless the COR reviews the proposed purchase and the Contract Specialist issues an electronic written Contracting Officer approval.

C.5.2.2 If the Contractor does not possess an approved purchasing system, the following applies:

C.5.2.2.1 A purchase of materials in accordance with what is stated in Section C.5.2 above that equals $3,500 or less per individual purchase may be executed with COR review and written approval.

Contracting Officer approval is not required.

C.5.2.2.2 A purchase of materials in accordance with what is stated in Section C.5.2 above that exceeds $3,500 per individual purchase may NOT be executed unless the COR reviews the proposed purchase and the Contract Specialist issues an electronic written Contracting Officer approval.

C.5.2.3 Separate multiple purchases of amounts valued below those thresholds stated in this section shall not be submitted to circumvent the COR and Contracting Officer review and approval procedure.

Splitting purchase requirements to defeat purchasing thresholds shall not be approved.

C.5.2.4 Procedure for Obtaining COR and Contracting Officer Approval

To obtain COR and/or Contracting Officer approval, the Contractor shall do the following:

C.5.2.4.1 Submit a written request for purchase of materials to the COR through e-mail. The COR shall review the request.

If it is in accordance with C.5.2 above and requires Contracting Officer approval, the COR shall submit the request to the Contract Specialist for Contracting Officer review and approval.

C.5.2.5 Minimum requirements for a written request for purchase are as follows:

1) Complete description of the material to be purchased

2) Quantity

3) Unit and Total Cost

4) Delivery/Freight charges

5) Any associated service charges such as assembly, configuration, packing, etc.

6) An explanation of the need for the material

7) List the competitive quotes received from potential suppliers

8) Explanation of the determination of price reasonableness regarding the selected supplier costs

9) If the procurement is sole sourced to a particular supplier or manufacturer, include the rationale for limiting the procurement to that supplier or manufacturer.

10) You may seek the assistance of the Contract Specialist for guidance on item 9.

C.5.2.6 Once the COR and/or Contracting Officer have reviewed the request, the Government shall notify the Contractor of the outcome.

Issues or details may be discussed with the Contract Specialist acting on behalf of the Contracting Officer until a final Government determination is made as to whether to approve, modify, or reject the purchase.

C.5.2.7 Information Technology (IT) Resources

IT Resources shall not be purchased unless DoD and Navy purchasing procedures have been satisfied and approvals obtained. IT resources include personal computers (PC’s), laptops, printers, software, servers, hubs, routers, phones, fax machines, and any related maintenance, telecommunications, training, or other support services.

C.5.2.8 Disposition of Materials

Upon completion of the period of performance, all material associated with this contract that is purchased by the Contractor and not depleted during the performance of the contract shall become the property of the Federal Government. The Contractor shall transfer all materials not depleted to the COR by way of a Requisition and Invoice Shipping Document (DD250).

C.6 GOVERNMENT FURNISHED PROPERTY, INFORMATION, AND MATERIALS

C.6.1 Government Furnished Equipment (GFE)

C.6.1.1 The Government will provide certain GFE to the Contractor for use during performance of this Contract. The Government will make available the Government Property identified in the GFP attachment J.4 on a rent-free basis in performance of the contract. The Contractor is responsible for all costs related to making the property available for use, such as payment of all transportation, installation, or rehabilitation costs.

C.6.1.2 The Contractor shall maintain and report the inventory of GFE (CDRL A005). This requirement is in addition to anything required by regulation, statute, or the assigned Government Property Administrator.

C.6.2 Government Furnished Materials (GFM)

C.6.2.1 The Government will provide certain GFM to the Contractor for use during performance of this Contract. A list of all known GFM is provided as Attachment J.4. The Contractor shall maintain a GFM Inventory/Usage Log (CDRL A005).

C.7 SECURITY SPECIFICATION (DD254)

The Department of Defense Contract Security Classification Specification (DD254) provides the security classification requirements for this effort. The Contractor shall obtain facility and personnel security clearances as required by the Department Industrial Security Program prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the National Industrial Security Program Operating Manual (NISPOM) and the NSWCDD Command Security Manual.

C.8 SENSITIVE, PROPRIETARY, AND PERSONAL INFORMATION

C.8.1 Controlled Information DD254

Work under this program will require access to TOP SECRET information. The Contractor will have access to classified material at other cleared Government or Contractor facilities. The Contractor will be required to have access to classified information, to include Restricted Data, Critical Nuclear Weapon Design Information, and Formerly Restricted Data. Controlled Unclassified Information (CUI), to include For Official Use Only (FOUO) and Personally Identifiable Information (PII) generated and/or provided under this contract shall be safeguarded and marked as specified in DoDI 5200.48. The Contractor will require access to Foreign Government Information (United Kingdom). All above accesses are required to provide the Reentry Materials Fabrication and Engineering Services of this contract supporting NSWCDD. Access to and preparation of sensitive information subject to Privacy Act and Business Sensitive safeguarding and destruction may be required in the execution of tasking associated with this contract. Administratively sensitive information/data must not be shared outside of the specific work areas.

C.8.2 Facility Clearance

The contractor will be required to maintain a facility clearance at the TOP SECRET level.

C.8.3 Physical Security

The Contractor shall be responsible for safeguarding all Government information or property provided for Contractor use. At the end of each work period, Government information, facilities, equipment and materials shall be secured as specified by the NISPOM and the NSWCDD Command Security Manual.

C.9 PORTABLE ELECTRONIC DEVICES (PEDs)

Non-Government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker.

PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch.

This approval will be granted using the TARIS form and action tracker process.

Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.

C.10 ELECTRONIC SPILLAGES

(a) Electronic spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc.). The Contractor's performance as it relates to ES will be evaluated by the Government.

ES reflects on the overall security posture of the Government and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor.

(b) NSWCDD Command Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254. Command Security will identify the Contractor facility and contract number associated with all electronic spillages during the investigation that involve Contractor support. Command Security will notify the Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean-up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

C.11 OPERATIONS SECURITY (OPSEC)

Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect critical information, personnel, facilities, equipment, and operations from compromise. All Contractors (including Sub-contractors) shall supplement their current security practices by requiring any personnel involved in executing this contract to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all Contractors should be aware of the Critical Information and Indicators List (CIIL) for the organization they are supporting as well as the OPSEC plan for NSWCDD. These OPSEC requirements will be in effect throughout the life of the procurement from award through the conclusion of services at the end of the period of performance (PoP) or other procurement termination. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

C.12 NON-DISCLOSURE AGREEMENTS (NDAs)

NDAs may be utilized to allow for access to company sensitive/proprietary data. For tasks requiring NDAs the Contractor shall obtain appropriate agreements for all of their employees that are associated with the task requiring such an agreement.

Contractor personnel may be required, from time to time, to sign NDAs as applicable to specific tasking.

The Contracting Officer's Representative (COR) will notify the Contractor of the number and type of personnel that will need to sign the Non-Disclosure agreements. The signed Non-Disclosure Agreements shall be executed prior to accessing data or providing support for information that must be safeguarded.

Copies of all executed NDAs shall be provided to the COR for endorsement and retention.

C.13 NON-PERSONAL SERVICES/ INHERENTLY GOVERNMENTAL FUNCTIONS

(a) The Government will neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. The Government will not direct the hiring, dismissal or reassignment of Contractor personnel. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual Contractor employees. It shall be the responsibility of the Contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception that personal services are being provided. If the Contractor feels that any actions constitute, or are perceived to constitute personal services, it shall be the Contractor's responsibility to notify the Contracting Officer immediately in accordance with FAR52.243-7 Notification of Changes.

(b) Inherently-Governmental functions are not within the scope of this Contract. Decisions relative to programs supported by the Contractor shall be the sole responsibility of the Government. The Contractor may be required to attend technical meetings for the Government; however, they are not, under any circumstances, authorized to represent the Government or give the appearance that they are doing so.

C.14 DIGITAL DELIVERY OF DATA

(a) Delivery by the Contractor to the Government of certain technical data and other information is now frequently required to be made in digital form rather than in hardcopy form. The method of delivery of such data and/or other information (i.e., in electronic, digital, paper hardcopy, or other form) shall not be deemed to affect in any way either the identity of the information (i.e., as “technical data” or “computer software”) or the Government’s and the Contractor’s respective rights therein.

(b) Whenever technical data and/or computer software deliverables required by this contract are to be delivered in digital form, any authorized, required, or permitted markings relating to the Government’s rights in and to such technical data and/or computer software must also be digitally included as part of the deliverable and on or in the same medium used to deliver the technical data and/or software. Such markings must be clearly associated with the corresponding technical data and/or computer software to which the markings relate and must be included in such a way that the marking(s) appear in human-readable form when the technical data and/or software is accessed and/or used. Such markings must also be applied in conspicuous human-readable form on a visible portion of any physical medium used to effect delivery of the technical data and/or computer software. Nothing in this paragraph shall replace or relieve the Contractor’s obligations with respect to the requirements for marking technical data and/or computer software that are imposed by other applicable clauses, such as, where applicable and without limitation, DFARS 252.227-7013 Rights in Technical Data and/or DFARS 252.227-7014 Rights in Other Than Commercial Computer Software Documentation.

(c) Digital delivery means (such as but not limited to Internet tools, websites, shared networks, and the like) sometimes require, as a condition for access to and/or use of the means, an agreement by a user to certain terms, agreements, or other restrictions such as but not limited to “Terms of Use” licenses, or other restrictions intended to be applicable to the information being delivered via the digital delivery means.

The Contractor expressly acknowledges that, with respect to deliverables made according to this contract, no such terms, agreements, or other restrictions shall be applicable to or enforceable with respect to such deliverables unless such terms, agreements, or other restrictions expressly have been accepted in writing by the Contracting Officer; otherwise, the Government’s rights in and to such deliverables shall be governed exclusively by the terms of this contract.

C.15 PRIVACY PROGRAM TRAINING

Privacy training is mandatory for all NSWCDD personnel (Military, Civilian, and Contractor) and must be completed annually. The Total Workforce Management System (TWMS) is the official database for workforce training and is the preferred tool for taking and recording privacy act training. All NSWCDD personnel are responsible for ensuring individual annual privacy training requirements are met.

C.16 SUPPLEMENT INSTRUCTIONS

The Supplement Instructions Regarding Electronic Invoicing Clause in Section G of the Solicitation shall also show progress towards delivery (of SLINs) under the contract.

C.17 TRAVEL

The Contractor shall be required to travel in performance of this contract. The numbers of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be requested of and authorized in advance by the COR by email. All requests shall show the appropriate Task/Delivery Order number, the number of people traveling, the number of days for the trip, the reason for the travel, an estimated cost (with G&A separate), and any high cost or unusual costs expected. For local travel, also shown as day travel, the travel itinerary will include “reasonable cost” wherever possible based on the start time of the scheduled event being supported. The Contractor is not authorized to perform any travel that is not in conjunction with this effort. All travel shall be conducted in accordance with Federal Acquisition Regulation (FAR) 31.205-46 Travel Costs. Locations will be determined by the Government and are subject to change.

Representative travel locations may include: Birmingham, AL; Colorado Springs, CO; Denver, CO;

Biddeford, ME; Washington, DC; and Valley Forge, PA.

SECTION C CLAUSES INCORPORATED BY FULL TEXT

C-202-H001 ADDITIONAL DEFINITIONS—BASIC (NAVSEA) (OCT 2018)

(a) Department - means the Department of the Navy.

(b) Commander, Naval Sea Systems Command - means the Commander of the Naval Sea Systems Command of the Department of the Navy or his duly appointed successor.

(c) References to The Federal Acquisition Regulation (FAR) - All references to the FAR in this contract shall be deemed to also reference the appropriate sections of the Defense FAR Supplement (DFARS), unless clearly indicated otherwise.

(d) National Stock Numbers - Whenever the term Federal Item Identification Number and its acronym FIIN or the term Federal Stock Number and its acronym FSN appear in the contract, order or their cited specifications and standards, the terms and acronyms shall be interpreted as National Item Identification Number (NIIN) and National Stock Number (NSN) respectively which shall be defined as follows:

(1) National Item Identification Number (NIIN). The number assigned to each approved Item Identification under the Federal Cataloging Program. It consists of nine numeric characters, the first two of which are the National Codification Bureau (NCB) Code. The remaining positions consist of a seven digit non-significant number.

(2) National Stock Number (NSN). The National Stock Number (NSN) for an item of supply consists of the applicable four-position Federal Supply Class (FSC) plus the applicable nine-position NIIN assigned to the item of supply.

(End of Text)

C-204-H001 USE OF NAVY SUPPORT CONTRACTORS FOR OFFICIAL CONTRACT FILES

(NAVSEA) (OCT 2018)

(a) NAVSEA may use a file room management support contractor, hereinafter referred to as "the support contractor", to manage its file room, in which all official contract files, including the official file supporting this procurement, are retained. These official files may contain information that is considered a trade secret, proprietary, business sensitive or otherwise protected pursuant to law or regulation, hereinafter referred to as “protected information”. File room management services consist of any of the following: secretarial or clerical support; data entry; document reproduction, scanning, imaging, or destruction; operation, management, or maintenance of paper-based or electronic mail rooms, file rooms, or libraries; and supervision in connection with functions listed herein.

(b) The cognizant Contracting Officer will ensure that any NAVSEA contract under which these file room management services are acquired will contain a requirement that:

(1) The support contractor not disclose any information;

(2) Individual employees are to be instructed by the support contractor regarding the sensitivity of the official contract files;

(3) The support contractor performing these services be barred from providing any other supplies and/or services, or competing to do so, to NAVSEA for the period of performance of its contract and for an additional three years thereafter unless otherwise provided by law or regulation; and,

(4) In addition to any other rights the contractor may have, it is a third party beneficiary who has the right of direct action against the support contractor, or any person to whom the support contractor has released or disclosed protected information, for the unauthorized duplication, release, or disclosure of such protected information.

(c) Execution of this contract by the contractor is considered consent to NAVSEA's permitting access to any information, irrespective of restrictive markings or the nature of the information submitted, by its file room management support contractor for the limited purpose of executing its file room support contract responsibilities.

(d) NAVSEA may, without further notice, enter into contracts with other contractors for these services.

Contractors should enter into separate non-disclosure agreements with the file room contractor. Contact the Procuring Contracting Officer for contractor specifics. However, any such agreement will not be considered a prerequisite before information submitted is stored in the file room or otherwise encumber the government.

(End of Text)

C-204-H002 IMPLEMENTATION OF ENHANCED SECURITY CONTROLS ON SELECT

DEFENSE INDUSTRIAL BASE PARTNER NETWORKS (NAVSEA) (JAN 2020)

1. System Security Plan and Plans of Action and Milestones (SSP/POAM) Reviews

a) Within thirty (30) days of contract award, the Contractor shall make its System Security Plan(s) (SSP(s)) for its covered contractor information system(s) available for review by the Government at the contractor’s facility. The SSP(s) shall implement the security requirements in Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which is included in this contract.

The Contractor shall fully cooperate in the Government’s review of the SSPs at the Contractor’s facility.

b) If the Government determines that the SSP(s) does not adequately implement the requirements of DFARS clause 252.204-7012 then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government. The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a plan of action and milestones (POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

c) Upon the conclusion of the correction period, the Government may conduct a follow-on review of the SSP(s) at the Contractor’s facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

d) The Government may, in its sole discretion, conduct subsequent reviews at the Contractor’s site to verify the information in the SSP(s). The Government will conduct such reviews at least every three (3) years (measured from the date of contract award) and may conduct such reviews at any time upon thirty

(30) days’ notice to the Contractor.

2. Compliance to NIST 800-171

a) The Contractor shall fully implement the CUI Security Requirements (Requirements) and associated Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 1) (NIST SP 800-171), or establish a SSP(s) and POA&Ms that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered contractor information systems affecting this contract.

b) Notwithstanding the allowance for such variation, the contractor shall identify in any SSP and POA&M their plans to implement the following, at a minimum:

(1) Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network.

In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as CNC equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted;

(2) Implement Control 3.1.5 (least privilege) and associated Controls, and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

(3) Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

(4) Audit user privileges on at least an annual basis;

(5) Implement:

i. Control 3.13.11 (FIPS 140-2 validated cryptology or implementation of NSA or NIST approved algorithms (i.e. FIPS 140-2 Annex A: AES or Triple DES) or compensating controls as documented in a SSP and POAM); and,

ii. NIST Cryptographic Algorithm Validation Program (CAVP) (see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

(6) Implement Control 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which shall be evaluated by the Navy for risk acceptance.

(7) Implement Control 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program.

3. Cyber Incident Response

a) The Contractor shall, within fifteen (15) days of discovering the cyber incident (inclusive of the 72-hour reporting period), deliver all data used in performance of the contract that the Contractor determines is impacted by the incident and begin assessment of potential warfighter/program impact.

b) Incident data shall be delivered in accordance with the Department of Defense Cyber Crimes Center (DC3) Instructions for Submitting Media available at http://www.acq.osd.mil/dpap/dars/pgi/docs/Instructions_for_Submitting_Media.docx. In delivery of the incident data, the Contractor shall, to the extent practical, remove contractor-owned information from Government covered defense information.

c) If the Contractor subsequently identifies any such data not previously delivered to DC3, then the Contractor shall immediately notify the contracting officer in writing and shall deliver the incident data within ten (10) days of identification. In such a case, the Contractor may request a delivery date later than ten (10) days after identification. The contracting officer will approve or disapprove the request after coordination with DC3.

4. Naval Criminal Investigative Service (NCIS) Outreach

The Contractor shall engage with NCIS industry outreach efforts and consider recommendations for hardening of covered contractor information systems affecting DON programs and technologies.

5. NCIS/Industry Monitoring

a) In the event of a cyber incident or at any time the Government has indication of a vulnerability or potential vulnerability, the Contractor shall cooperate with the Naval Criminal Investigative Service (NCIS), which may include cooperation related to: threat indicators; pre-determined incident information derived from the Contractor's infrastructure systems; and the continuous provision of all Contractor, subcontractor or vendor logs that show network activity, including any additional logs the contractor, subcontractor or vendor agrees to initiate as a result of the cyber incident or notice of actual or potential vulnerability.

b) If the Government determines that the collection of all logs does not adequately protect its interests, the Contractor and NCIS will work together…