DRAFT_HSHQDC-17-R-000xx_RPM_RP_RFP-2016-10-07_Atch12_Lifecycle_Support.pdf

HSHQDN-17-R-000XX

Attachment 12

Lifecycle Support

The Radiation Portal Monitor (RPM) is used by the Government as a component of a system of systems (e.g., the gates) installed at ports of entry (POE). A given POE may have multiple gates, each with multiple lanes and RPMs including Visual Information Systems, traffic controls, and programmable logic controllers to support radiological/nuclear scanning operations at POEs.

Part A Maintenance Services The Contract calls for the Offeror to provide Maintenance Services, both preventive and emergency, as a government contractor. The key metric for the the Government to maintain the Equipment Operational Availability of each RPM. The contract will require:

• Contractor shall sustain and maintain each RPM to the contracted equipment operational availability (Aoe), which will be evaluated on a yearly basis by the Government.

𝐴𝐴𝑜𝑜𝑜𝑜 =

𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀 𝑇𝑇𝑇𝑇𝑇𝑇𝑀𝑀 𝐵𝐵𝑀𝑀𝐵𝐵𝐵𝐵𝑀𝑀𝑀𝑀𝑀𝑀 𝑀𝑀𝑀𝑀𝑇𝑇𝑀𝑀𝐵𝐵𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀

𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀 𝑇𝑇𝑇𝑇𝑇𝑇𝑀𝑀 𝐵𝐵𝑀𝑀𝐵𝐵𝐵𝐵𝑀𝑀𝑀𝑀𝑀𝑀 𝑀𝑀𝑀𝑀𝑇𝑇𝑀𝑀𝐵𝐵𝑀𝑀𝑇𝑇𝑀𝑀𝑀𝑀𝑀𝑀𝑀𝑀 + 𝐴𝐴𝐴𝐴𝑀𝑀𝐴𝐴𝑀𝑀𝐴𝐴𝑀𝑀 𝑇𝑇𝑇𝑇𝐴𝐴𝑀𝑀 𝐴𝐴𝐴𝐴𝐴𝐴𝑇𝑇𝑀𝑀𝐴𝐴 𝑇𝑇𝑇𝑇𝑇𝑇𝑀𝑀

• The Contractor shall provide all the required logistics services (e.g., transportation), repair parts, test equipment, and supplies to conduct maintain operation of the RPMs.

• The Contractor should not utilize large equipment (e.g. cherry pickers) to conduct maintence operations.

• The Contractor shall provide a schedule of planned preventive maintenance activities on a monthly basis to the Government.

• The Contractor shall provide a schedule of planned preventive maintenance actions organized by equipment to the Government five (5) business days prior to the beginning of each month.

• The Contractor shall provide a schedule of planned maintenance visits that has been coordinated with CBP Port POC to the Government within ten (10) business days in advance of port visits.

• The Contractor shall include corrosion cleaning and prevention as part of the preventive system maintenance.

• The Contractor shall not include construction work, repairs to the site, or electrical work external to the equipment unit as performance of preventative maintenance.

• If the Contractor identifies work that needs to be completed to maintain the system during preventive maintenance it shall make a request to the Government for a Work Order for the corrective action.

• The Contractor shall provide a contact for service requests for service calls and Work Orders (WO) from the Government help desk and operations center that is available from 7:00 a.m. to 11:00 p.m. Eastern Standard Time (EST) Monday through Friday and 10:00 a.m.

to 6:00 p.m. EST Saturday and Sunday.

• The Contractor shall make contact with the site requiring assistance, to troubleshoot each problem by telephone or remote maintenance, within one (1) hour of the receipt of a WO.

• The Contractor shall perform remote maintenance and diagnostic activities only in accordance with approved CBP security policies and procedures for the RPM systems.

• The Contractor shall respond to the WO by contacting the site POC provided by the Government Help Desk.

• The Contractor shall report the date/time of the contact to the Government Help Desk immediately after contacting the CBP Port POC.

• If a system issue cannot be resolved by telephone or remote maintenance, the Contractor shall respond on-site and restore down systems to conditional operational operational status within 24 hours where conditional operational status is defined as when a deficiency exists, but the system is available to safelty support the operations for which it was designed.

• The Contractor shall have ten (10) days to bring a conditional operational system to full operational status from receiving the WO.

• If unable to maintain a system at the target Ao, the Contractor shall provide the justification and a time estimate for effecting repairs to the Government.

• The Contractor shall notify the Goverment and provide the date and time of system operational status changes, estimated time of arrival (ETA) for parts, and Contractor support personnel scheduled arrival at site.

• The Contractor shall use only use maintenance personnel who have the appropriate authorizations as defined by CBP policy.

• The Contractor shall coordinate site visits with the CBP port POC for correcitive maintenance.

• The Contractor shall bring a system into conditional operation within 24

• The Contractor shall provide the goverment documentation within 48 hours of maintenance action completion including: the WO, a description of the maintenance action performed, a list of replaced parts, or LRU, by LCN, name and phone number of the Port Official that signed for completion, and completion date/time.

• The Contractor shall track security flaws and flaw resolution within the system software and report findings to the Government.

• The Contractor shall identify, report, and correct software flaws identified during system operation.

• The Contractor shall receive information security alarts, advisories, and directives from the Government on an ongoing basis.

• The Contractor shall generate internal security alerts, advisories and directives as deemed nessicary

• The Contractor shall disseminate RPM system security alerts, advisories, and directives to CBP

• The Contractor shall notify the government of non-compliance to security directives.

• The Contractor shall document proposed changes to the system, component, or service and the potential security impacts of such changes.

• The Contractor shall propose configuration changes to the Government for approval.

• The Contractor shall only implement approved changes to the system.

• The Contractor shall maintain a configuration data base for all deployed RPMs by serial number.

Part B Engineering Services

The Government will require the Engineering Services of the Offeror during the lifecycle of the system in the field. These services will need to be provided to integrate the systems into the Government’s existing architecture at Ports of Entry, deploy systems at given Ports of Entry, and support the fielded systems. The expected tasks for the Offeror under Engineering Services includes:

• Providing assistance in completing site surveys with the deployment contractor.

• Providing assistance in completing site drawings with the deployment contractor.

• Providing system saftey analyses for permiting

• Providing assistance in environmental analyses for permiting

• Provide technical assistance for regression testing

• Provide technical assistance for integration testing

• Provide technical assistance for Operational Assessments

• Provide support for the Government in preparing brefing materials to stakeholders to effects of change to the Offeror’s system.

• Providing assistance by informing the Government of requirements, risks, and issues for site installation activities such as laying trenches, installing supports, running electrical conduit, installation of traffic controls, installation of communication systems, installation of vehichle information systems, and installation of Radio-frequency Identification (RFID) antenna.

• Transport, assembly, and installation of system components at a site.

• Provide minor mechanical work external to the system during installation.

• Familiarize Law Enforcement and other Government Operators with proper use of a system at a deployed site.

• Develop system check-out proceedures to ensure proper system installation

• Assist in completing as-built drawings and configuration information for a site installation after completion.

• Provide software engineering services to update system software to meet Government requirements.

• Conduct vulnerability scanning of system software/firmware and components and mitigate known vulnerabilities before releasing new software/firmware or components to CBP.

• Apply information system security engineering principles in the specification, design, development, implementation, and modification of the system software.

• Providing system retrofits and retrofit kits when required.

• Providing Ad hoc reports to enable the Government to perform analysis, economic trade-off studies, budget impact analysis, etc including:

o Providing failure analysis of failed system components o Providing root cause analysis for system issues o Providing system operational anomaly analysis when requested o Providing evaluation of potential or perceived saftey hazards to personnel.

• Provide support during emergencies to rectify system issues caused by accidents, acts of God, etc.

Part C Training

As part of the Radiation Portal Monitor (RPM) RFP, the Offeror is required to provide a training plans to support the deployment of the system in the field. This training plan is expected to support the Government’s training activities. These activities are:

• To develop in-depth operational training for law enforcement personnel.

• To develop review level operational training for law enforcement personnel.

• To develop technical training for Government technical personnel.

• To supply OEM training on system repair and maintenance for third parties.

All training materials, for each of the above listed activities, should cover:

• Basic system controls such as:

o System power up and power down o System Referal Acknowledgements o System Alarm Acknowledgements o System Operational Modes o System Status Indicators o System Emergency Condition Indicators o System Critical Condition Indicators

• System variable functionality

In-depth operational training activity should include the basic device operations listed above as well as:

• System Calibration Functionality

• Locating sources using system consoles

• Reviewing system occupancy files

• Reviewing device notifications;

• User Level 1 parameter settings o Location of each o Effect of each

• User levels

• Unlocking locked user accounts

• Hardware controls of the RPM

Technical Training is for developing skilled system users that will be responsible for system configuration and problem solving in the field. As such the technical training should include the operational training activity as well as:

• Recognition algorthim parameter settings o Location of each o Effect of each on detection

• Recognition library settings (if applicable) o Location of each on the system software o Configuration Management of the library o Process for updating the library

• General Software parameter settings o Location of each o Effect of each

• Hardware Controls and Parameter Settings o Location of each o Effect of each

• System Calibration o System calibration process o Sources for system calibration (if applicable) o Process for validating system calibration

• System Access o System Security levels o User level authentication o User level set-up o User account set-up o User level modification o Removing user accounts

• System Security o Security Processes in RPM design o Security access levels

The OEM training activity should include the basic device operations listed above, as well as the following:

• How to access repairable components;

• How to access troubleshooting functionality built into the RPM (if applicable);

• How to repair sub-components/subsystems;

• How to test the success of the repair;

• Equipment required for repairs;

• Understanding Line Configuration Numbers of components;

Part A Maintenance Services