EN-B-UDY - A1- PWS - TippingPoint.pdf

Performance Work Statement (PWS)

Tipping Point Software Foreign Military Sales (FMS) Case

EN-B-UDY

Amendment 1

08 Dec 2023

19 July 2023

Performance Work Statement (PWS)

1 SCOPE

This document describes work to be performed to deliver TippingPoint Software and support under Foreign Military Sales (FMS) case EN-B-UDY A1 for the country of Italy. The word Government in this document refers to the United States Government. The word country in this document refers to the FMS Customer(s).

2 APPLICABLE DOCUMENTS

2.1 Military Standards (MIL-STD)

MIL-STD-130N with Change 1 Identification Marking of U.S. Military Property MIL-STD-129R Military Marking for Shipment and Storage MIL-STD-882E System Safety U.S Army Communications- Electronics Command (CECOM) Regulation 380-16

Industrial Security Program Requirements

Directive Type Memorandum

(DTM) 09-019

Policy Guidance for Foreign Ownership, Control, or Influence

(FOCI)

Department of Defense (DoD) Directive 5230.11

Disclosure of Classified Military Information to Foreign Governments and International Organizations

DoD 8570.01-M Information Assurance Workforce Improvement Program Army Regulation (AR) 525-13 Antiterrorism AR 530-1 Operations Security

2.2 Commercial Standards

International Society of Phylolactic Materials (ISPM)

Guidelines for Regulating Wood Packaging Material in International Trade

Association of Standards for Technology in Manufacturing

(ASTM) D 3951-15

Standard Practice for Commercial Packaging

3 REQUIREMENTS

3.1 Requirements for Hardware. The contractor shall provide equipment described. Equipment shall be provided in accordance with (IAW), and shall meet the specifications and performance criteria stated in this PWS.

3.1.1 TippingPoint 5500TX HW + HW

QTY ITEM # MFG # Description 7 41156809 TPNN0322 TippingPoint 5500TX HW + HW

3.1.2 TippingPoint 5Gbps TPS Inspection

QTY ITEM # MFG # Description 7 TPNN0276 TippingPoint 5Gbps TPS Inspection

3.1.3 TippingPoint 5Gbps TPS ThreatDV

QTY ITEM # MFG # Description 7 TPNN0286 TippingPoint 5Gbps TPS ThreatDV

3.1.4 TippingPoint IO Module: 6-segment

QTY ITEM # MFG # Description 7 TPNN0196 TippingPoint IO Module: 6-segment

3.1.5 TippingPoint vSMS Enterprise

QTY ITEM # MFG # Description 1 TPNN0304 TippingPoint vSMS Enterprise

3.2 Requirements for Services. The contractor shall provide services described below.

Services shall be performed on site in or near Romania. All services shall be provided in accordance with, and shall meet performance criteria specified in this PWS.

3.2.1 TippingPoint 5500TX HW + HW

Support and Licensing Trend Micro Licensing for 5 yrs from delivery

3.2.2 TippingPoint 5Gbps TPS Inspection

Support and Licensing Trend Micro Licensing for 5 yrs from delivery

3.2.3 TippingPoint 5Gbps TPS ThreatDV

Support and Licensing Trend Micro Licensing for 5 yrs from delivery

3.2.4 TippingPoint IO Module: 6-segment

Support and Licensing Trend Micro Licensing for 5 yrs from delivery

3.2.5 TippingPoint vSMS Enterprise

Support and Licensing Trend Micro Licensing for 5 yrs from delivery

3.3 Item Unique Identification (IUID).

The Contractor shall mark all contract deliverables in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.211-7003 in Section F of this contract and the following requirements:

3.3.1 IUID Marking.

a. New items: The Contractor shall provide IUID, or DoD recognized equivalent, for all items delivered with an acquisition cost of $5,000.00 or more and Government serial numbered items. For long term contracts, the Contractor shall implement IUID markings IAW MIL-STD-130N w/Ch1, dated 16 Nov 12 for any item that will exceed the $5,000.00 unit price for any range quantity or contract year. This requirement is effective throughout the life of this contract.

b. Repair items: The Contractor shall mark those items as identified by the Government. Items received for repair shall be inspected for IUID markings. Those items where the marking is damaged or missing the Contractor shall mark the equipment. When marking requirements are not clearly specified then the Contractor shall advise the PCO. For previously acquired items where the IUID markings were not required the Contractor shall follow the procedures as if the item was a new item.

c. Commercial Markings. All other items shall have acceptable commercial markings that meet the guidelines in DoD Guide to Uniquely Identifying Items https://www.acq.osd.mil/asda/dcp/ce/ds/indes.html

d. Permanency and Legibility. The IUID marking and identification plates, tags, etching, or labels when used on equipment, parts, assemblies, subassemblies, units, sets, groups, or kits shall be as permanent as the normal life expectancy of the item and be capable of withstanding the environment, test, cleaning, repair, and rebuild procedures specified for the item. Legibility shall be as required and verified for ready readability per MIL-STD-130N w/Ch1, dated 16 Nov 12.

e. Deleterious Effect. Marking of items shall be accomplished in a manner that shall not adversely affect the life and utility of the item. Marking materials creating hazardous conditions shall not be used. Placement and choice of the marking shall not create hazardous conditions.

f. Mandatory Information Reporting for all items requiring IUID marking. The Contractor shall include the National Stock Number (NSN), if the item has a NSN, the Serial Number marked on the item, if a Serial Number is marked on the item, the original part number, the current part number (only if not the same as the original part number), the current part number effective date (only if the current part number is used) and the USARMY as the SERVICE /AGENCY/COMMAND data element in the information reported to the Aberdeen Proving Ground Army Acquisition Command (APG ACC), in addition to the information required to be reported to the APG ACC by DFARS clause 252.211-7003.

g. Wide Area Workflow (WAWF) users shall report this mandatory information to the APG

ACC by Direct submission via an X12 Ship Notice/Shipment and Billing Notice (856/857) transaction, an IUID XML transaction, an IUID flat file transaction or a WAWF IUID Material Inspection and Receiving Report/Combo UDF through the Global Exchange (GEX) Service, or manually, via the IUID Web Entry Site at http://www.bpn.gov/iuid. For WAWF users, these methods do not replace the current WAWF interaction, but are performed in addition to it after the shipment has been accepted to provide IUID data that cannot be provided via WAWF.

3.3.2 IUID Coding. IUID markings and readability requirements shall comply with MIL-STD-130N w/Ch1, dated 16 Nov 12.

https://www.acq.osd.mil/asda/dcp/ce/ds/indes.html http://www.bpn.gov/iuid

a. Symbology markings and the order of priority for marking the hardware shall be in accordance with MIL-STD-130N w/Ch1, dated 16 Nov 12. First priority is the 2D data matrix symbol (machine readable) IUID is the minimum requirement when there are severe space limitations. The second priority is the human readable characters. The third priority is the Linear Bar Code.

b. If the technical data has not specified the marking location, markings shall be located such that they are visible during item use, provided that sufficient space is available, and does not interfere with equipment operations.

c. If items are not described by Government Product Technical Data (i.e. Commercial Items), the Contractor shall maintain diagrams showing placement and description of the IUID marking and applicable installation and processing instructions for government review.

d. The Contractor shall maintain an accurate, current list of IUIDs for all manufactured items on this contract. Dates of manufacture, substitutions, shop changes, etc. shall be included on this list.

The list shall be available for inspection by the PCO or other Government representative at any time during the life of this contract. The Contractor shall provide this list to the government at the end of the contract.

3.4 Packaging. Packaging/packing shall be in accordance with ASTM D 3951-15, Standard Practice for Commercial Packaging, Level of Protection (LOP): Commercial, Level of Pack (LPK):

Commercial, Quantity Unit Pack (QUP): 001. Marking shall be in accordance with MIL-STD-129R.

3.4.1 Wood Packaging Material (WPM) includes but is not limited to pallets, skids, load boards, pallet collars, wooden boxes, reels, dunnage, crates, frame and cleats. This requirement excludes materials that have undergone a manufacturing process, such as corrugated fiberboard, plywood, particleboard, veneer, and oriented strand board (OSD).

3.4.2 All WPM shall meet the requirements of IISPM Number 15, “Regulations in Wood Packaging Material in International Trade (2009)”. DoD shipments inside and outside of the United States shall meet the requirements of ISPM 15 whenever WPM is used to ship DoD cargo.

3.4.3 All WPM shall comply with the official quality control program for heat treatment (HT) or kiln dried heat treatment (KD HT) IAW American Lumber Standard Committee (ALSC), Incorporated, Wood Packaging Material Program and WPM Enforcement Regulations (see www.alsc.org/WPM_summary_mod.htm).

3.4.4 All WPM shall include certification/quality markings IAW the ALSC standard. Markings shall be placed in an unobstructed area that shall be readily visible to inspectors. Pallet markings shall be applied to the stringer or block on diagonally opposite sides of the pallet and be contrasting and clearly visible. All containers shall be marked on a side other than the top or bottom, contrasting and clearly visible. All dunnage used in configuring and/or securing the load shall also comply with ISPM 15 and be marked with an ASLC approved DUNNAGE stamp.

3.4.5 Failure to comply with these requirements may result in refusal, destruction, or treatment of materials at the point of entry. The Government reserves the right to recoup from the Contractor any remediation costs incurred by the Government.

3.4.6 The Contractor shall establish, maintain, control and be responsible for the handling, storage, preservation, packing and shipping to protect the quality of the materials and to prevent damage from loss, deterioration, degradation, or substitution of products.

3.6 Perform Safety Engineering. The Contractor shall identify all real and potential hazards associated with the equipment ordered on this contract. This shall include any toxic substance exposure concerns to personnel during operation or maintenance to include transportation or resulting from damage to the equipment. The Contractor shall also identify any special disposal procedures.

The identified hazards and special disposal procedures shall be described either in the applicable Technical Manual shipped with each hardware item, or alternatively as a separate insert (in English) included with each hardware item if no Technical Manual is available for the item. All hazards that cannot be eliminated shall be reduced to lowest risk possible. Those hazards that cannot be eliminated must be presented to the contracting officer, providing as a minimum the post and pre-fix hazard severity and hazard probability levels, corrective action and status, prior to government acceptance of the equipment. MIL-STD-882E shall be used in assessing system safety. The Contractor shall affix applicable safety/hazardous precautionary warnings on hardware in English.

4 SECURITY AND Operational Security (OPSEC)

4.1. Antiterrorism (AT) / iWATCH

a. AT Level I training. This standard language is for contractor employees with an area of performance within a controlled installation, facility or area: All contractor employees, to include subcontractor employees, requiring access to installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to to the contracting officerwithin 60 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website:

https://jkodirect.jten.mil/ for CAC holders (Course number “-US007”). Non-CAC-holders may go to:https://jko.jten.mil/courses/atl1/launch.html. (Contract Data Requirements List (CDRL) A002, AT Level I Awareness Training.)

b. AT Awareness Training - AT Awareness Training for Official and Unofficial Contractor Personnel Traveling Overseas: US based contractor employees and associated subcontractor employees shall receive government provided area of responsibility(AOR) specific AT awareness submit training as directed by AR 525-13, or other specific requirements, as necessary. Specific AOR training content is directed by the combatant commander with the unit ATO being the local point of contact. US based contractor employees and associated subcontractor employees will update their PRO-File survey prior to their official or unofficial travel, in accordance with AR 525- 28, Personnel Recovery. The PRO-File survey is available at the following link:https://prmsglobal.prms.af.mil/prmsconv/Login/Banner.

https://prmsglobal.prms.af.mil/prmsconv/Login/Banner.

c. iWATCH Training. This standard language is for contractor employees with an area of performance within a facility or area. The Contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity Approved Training Organization (ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the Contracting Officer. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the Contracting Officer IAW CDRL A003, iWATCH Training, NLT 60 calendar days after contract award.

4.2 OPSEC

a. For contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan IAW CDRL A004, Operations Security (OPSEC) Plan, within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The Contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1. Details on obtaining Level II certification can be furnished by the Government OPSEC Officer.

b. For contracts that require OPSEC Training: Per AR 530-1 Operations Security, the CECOM OPSEC Plan, and AR 350-1 Army Training and Leader Development contractor employees must complete Level I OPSEC Awareness training within 30 calendar days of reporting for duty and annually thereafter. Level I OPSEC training is available via the Army Learning Management System (ALMS) application at the following link: https://www.lms.army.mil/ and by searching “Army OPSEC Level I (Duration: 2 hours). An Enterprise Access Management Service Army (EAMS) account is required to access the ALMS application. Contractors shall also participate in any command directed OPSEC stand downs, e.g., ad-hoc refresher trainings. If Computer Based Training (CBT) via ALMS cannot be completed, the organization's OPSEC Officer can provide the training to meet the Initial and Refresher training requirements. Submit training certificates IAW CDRL A005, Operations Security (OPSEC) Training.

4.3 Personnel Security (PERSEC).

a. Security training for contractors: Several training requirements exist for contractor personnel per DoD and Army regulation/directives. On-site contractors may receive training briefs from the government appointed Security Manager; however, contracting companies will be required to provide training to off-site contractor employees. Training is tailored to the organization’s requirements as well as local policy. Some examples of Security training provided to integrated/embedded contractors may include, but is not limited to, the following:

• Initial Security Orientation: Online training available on the Army Learning Management System (ALMS) site, reference ALARACT207-2103 - Initial training

• Annual Security Orientation: Online training available on the Army Learning Management https://www.lms.army.mil/

System (ALMS) site, reference ALARACT 207-2103 - Annual training requirement

b. For Contract Requiring Performance or Delivery in a Foreign Country. DFARS Clause 252.225-7043, Antiterrorism/Force Protection for Defense Contractors outside the US.

The clause shall be used in solicitations and contracts that require performance or delivery in a foreign country. This clause applies to both contingencies and non-contingency support. The key AT requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor’s compliance with combatant commander and subordinate task force commander policies and directives.

APPENDIX A

Certificate of Completion Template

To be placed on Company letterhead.

Date:______________________ Subject:______________________________ Customer:________________________________ Contract Number:_____________________________ Delivery Order Number:___________________________ FMS Case Designator:_______________________ Contract CLIN:________________________________________________ Period and service invoiced:____________________________________________________ Include Class Roster:_____

Customer Comments:

Contractor Representative Customer Representative Printed Name:________________________ Printed Name:________________________ Title:________________________________ Title:________________________________ Date:________________________________ Date:________________________________

Signature Signature