Final Statement of Work (SOW)_1 Sep 21.pdf

DISTRIBUTION STATEMENT A. Approved for public release: Distribution is unlimited.

1 SEPTEMBER 2021

Statement of Work (SOW) for

72 kW / 90 kVA GROUND POWER UNIT 144 kW / 180 kVA GROUND POWER UNIT

144 kW UNIVERSAL LOAD BANK

Prepared by

SUPPORT EQUIPMENT AND VEHICLES PROGRAM OFFICE

235 BYRON ST STE 19A

ROBINS AFB GA 31098-1813

THIS PAGE HAS BEEN INTENTIONALLY LEFT BLANK

TABLE OF CONTENTS

1. SCOPE

2. APPLICABLE DOCUMENTS

2.1 Government documents

2.1.1 Specifications, standards, and handbooks

2.1.2 Other Government documents, drawings, and publications

2.2 Non-Government publications

2.3 Order of precedence

3. REQUIREMENTS

3.1 Controlled unclassified information (CUI)

3.1.1 Common Access Card (CAC)

3.1.2 Access to Government system(s)

3.1.3 Data delivery and transfer

3.2 Program management

3.2.1 Program manager

3.2.2 Plant access

3.2.3 Access to Government facility or military installation

3.2.4 Monthly status report (MSR)

3.3 Conferences and program reviews

3.3.1 Travel

3.3.2 Postaward conference

3.3.3 Technical reviews

3.3.3.1 Design reviews

3.3.3.2 Design reviews location and schedule

3.3.3.3 Design review content

3.3.3.4 Test readiness review (TRR)

3.3.3.5 Technical review documentation

3.3.4 Program management review support

3.3.4.1 Government/contractor meetings

3.3.5 Conference room

3.3.6 Meeting agendas

3.3.7 Meeting minutes

3.4 Systems engineering

3.4.1 Environment, safety, and occupational health (ESOH)

3.4.1.1 System Safety

3.4.1.2 Hazardous materials

3.4.2 Corrosion control

3.4.3 Reliability and maintainability

3.4.3.1 Reliability

3.4.3.1.1 Basic reliability model

3.4.3.1.2 Basic reliability prediction

3.4.3.1.3 Failure modes, effects, and criticality analysis (FMECA)

3.4.3.2 Maintainability

3.4.3.2.1 Corrective maintenance prediction

3.4.4 Risk management

3.4.5 Counterfeit prevention plan (CPP)

3.4.5.1 Applicability

3.4.5.2 Definitions

3.4.5.3 Parts availability and use of parts brokers

3.4.5.4 Procurement policies

3.4.5.4.1 Risk assessment

3.4.5.5 Detection and avoidance responsibilities

3.4.5.6 Testing and verification

3.4.5.7 Configuration identification and traceability

3.4.5.8 Counterfeit notification and reporting

3.4.5.9 Counterfeit prevention training

3.4.6 Cybersecurity requirements

3.4.6.1 Cybersecurity analysis

3.4.6.2 Risk management framework (RMF)

3.4.6.3 Cyber-secure development environment

3.4.6.4 Software

3.4.6.5 Computer program identification number (CPIN)

3.4.7 Modeling and simulations………………………………………………………………….20

3.5 Logistics

3.5.1 Technical Order (TO) requirements

3.5.1.1 TO content

3.5.1.2 Group A TO requirements

3.5.1.3 Group B TO requirements

3.5.1.4 TO access

3.5.2 Provisioning

3.5.2.1 Provisioning guidance conference

3.5.3 Training

3.5.3.1 Training material

3.5.3.2 Pack Up data

3.5.3.3 Training material data rights

3.6 Testing and evaluation

3.6.1 Design analysis

3.6.2 First article

3.6.2.1 First article test plan

3.6.2.2 First article test procedures

3.6.2.3 First article testing

3.6.2.3.1 Phase one DT&E (contractor inspection)

3.6.2.3.1.1 Phase one DT&E prerequisite testing and report

3.6.2.3.1.1.1 72 kW GPU prerequisite testing and reporting

3.6.2.3.1.1.2 144 kW GPU prerequisite testing and reporting

3.6.2.3.1.1.3 144 kW ULB prerequisite testing and reporting

3.6.2.3.2 Phase two A DT&E air vehicle systems integration laboratories (SILs)

3.6.2.3.3 Phase two B DT&E equipment/aircraft compatibility test

3.6.2.3.3.1 72 kW GPU compatibility testing

3.6.2.3.3.2 144 kW GPU compatibility testing

3.6.2.3.3.3 144 kW ULB compatibility testing

3.6.2.3.4 Phase three OT&E prerequisite testing and report

3.6.2.3.4.1 72 kW GPU OT&E prerequisite testing

3.6.2.3.4.2 144 kW GPU OT&E prerequisite testing

3.6.2.3.4.3 144 kW ULB OT&E prerequisite testing

3.6.2.3.5 Phase three OT&E

3.6.2.3.5.1 72 kW GPU OT&E

3.6.2.3.5.2 144 kW GPU combined compatibility testing and OT&E

3.6.2.3.5.3 144 kW ULB combined compatibility testing and OT&E

3.6.2.3.5.3.1 144 kW ULB with 72 kW and below rated GPU OT&E

3.6.2.3.5.3.2 144 kW ULB with 250 kW and below rated GPU combined compatibility testing and OT&E

3.6.2.3.5.4 OT&E follow-on

3.6.2.3.6 Government test reports

3.6.2.3.7 Remaining Phase one DT&E

3.6.2.3.7.1 Environmental and mobility testing

3.6.2.4 First article test report

3.6.2.5 Transportation/shipping

3.6.2.6 Restoration

3.6.2.7 First article disposition

3.6.3 Production acceptance test procedure and report

3.7 Configuration management

3.7.1 Configuration requirements

3.7.1.1 Baselines

3.7.1.1.1 Functional baseline

3.7.1.1.2 Allocated baseline

3.7.1.1.3 Product baseline

3.8 Production readiness review

3.8.1 Production release

3.8.2 Engineering change proposals (ECPs)

3.8.3 Request for variance (RFV)

3.9 Warranty

3.9.1 Warranty shipping costs

3.10 Spares

1. SCOPE

This Statement of Work (SOW) defines the tasks associated with the integration, testing, and production of a 144 kilo-watt (kW)/180 kilovolt-ampere (kVA) Ground Power Unit (GPU), a 72 kW/90 kVA GPU, and a 144 kW Universal Load Bank (ULB) as described by Purchase Description (PD) numbers PD21WRWNZEA007, PD21WRWNZEA008, and PD21WRWNZEA009, respectively.

The procuring activity intends to issue one solicitation resulting in two contracts, each having a three year basic period of performance (POP). The two contracts will be issued to procure the items above: the Group A contract will include a single award consolidating for six each first article 72 kW GPUs, six each 144 kW GPUs, and eight each first article 144 kW ULBs. The Group B contract will be a small business (SB) set-aside for six each 72 kW first article GPUs.

Following testing and acceptance of the first articles by the procuring activity for both contracts, the Government intends to issue initial production orders within the basic contract period that will begin Low-Rate Initial Production (LRIP). Following the completion of the basic contract period, both contracts will transition into the ordering years—seven, 12-month ordering years in total, broken out into two overarching ordering periods. The procuring activity intends to exercise one option period prior to the expiration of ordering year two to make the second ordering period available. The procuring activity intends to issue delivery orders within each ordering year as funding becomes available.

Throughout this SOW, explicit references to terms such as “Group A” and/or “Group A contractor” shall be assumed to include the 72 kW/90 kVA GPU, the 144 kW/180 kVA GPU, and the 144 kW ULB. Similarly, explicit references to terms such as “Group B” and/or “Group B contractor” shall be assumed to include only the 72 kW/90 kVA GPU. If not otherwise specified, the term “contractor” shall be assumed to apply to both the Group A AND the Group B awardees. The terminology denoted above applies equally to tasks denoted within the SOW and any accompanying contract deliverable requirements list (CDRL) item.

Note: Unless otherwise specified herein, the term “days” denotes calendar days.

2. APPLICABLE DOCUMENTS

The following documents are applicable to the SOW to the extent specified herein.

2.1 Government documents.

2.1.1 Specifications, standards, and handbooks. The following specifications, standards, and handbooks of the exact revision listed below form a part of this SOW to the extent specified herein.

FEDERAL STANDARDS

FED-STD-313F Material Safety Data, Transportation Data, and Disposal Data for Hazardous Materials Furnished to Government Activities

DEPARTMENT OF DEFENSE STANDARDS

MIL-STD-882E System Safety MIL-STD-1568D Materials and Processes for Corrosion Prevention and

Control in Aerospace Weapons Systems

DEPARTMENT OF DEFENSE HANDBOOKS

MIL-HDBK-29612-3A Development of Interactive Multimedia Instruction (IMI)

2.1.2 Other Government documents, drawings, and publications.

NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY (NIST)

SP-800-37 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

SP-800-53 Security and Privacy Controls for Federal Information Systems and Organizations

DEPARTMENT OF DEFENSE MANUALS

5200.02 Procedures for the DOD Personnel Security Program

(PSP)

5220.22-M National Industrial Security Program Operating Manual

(NISPOM)

5205.02-M Operations Security (OPSEC) Program Manual TM-86-01R Technical Manual Contract Requirements

DEPARTMENT OF DEFENSE DIRECTIVES

5205.02E Operations Security (OPSEC) Program

DEPARTMENT OF DEFENSE INSTRUCTIONS (DODI)

8500.01 Cybersecurity

8510.01 Risk Management Framework (RMF) for DOD

Information Technology (IT)

AIR FORCE INSTRUCTIONS (AFI)

AFI 17-101 Risk Management Framework (RMF) for AF Information Technology (IT)

AFI 32-7086 Hazardous Materials Management, dated 4 February

(Copies of these documents are available online at http://www.e-publishing.af.mil/.)

DATA ITEM DESCRIPTIONS (DIDs)

DI-ADMN-81249C Conference Agenda DI-ADMN-81250C Conference Minutes DI-AVCS-80700A Computer Software Product End Items DI-ILSS-80872 NOT 1 Training Materials DI-IPSC-82249A Software Assurance Evaluation Report (SAER) DI-MFFP-81403B Corrosion Prevention and Control Plan (CPCP)

DI-MGMT-81928

NOT 1 Contractor's Progress and Status Report DI-MGMT-82001A DoD Risk Management Framework (RMF) Package

Deliverables DI-MISC-80508B Technical Report-Study Services DI-MISC-81454D Computer Program Identification Number (CPIN)

Catalog Information DI-MISC-81832 Counterfeit Protection Plan DI-NDTI-80566A Test Plan DI-NDTI-80603A/T Test Procedure

DI-NDTI-80809B

NOT 2/T Test/Inspection Report DI-SAFT-80101C System Safety Hazard Analysis Report (SSHAR) DI-SAFT-81626 System Safety Program Plan (SSPP) DI-SESS-80639E Engineering Change Proposal (ECP) DI-SESS-80640E Request for Variance (RFV) DI-SESS-80642E Notice of Revision (NOR) DI-SESS-81758 Logistics Product Data, Provisioning Parts List DI-SESS-81874 Engineering Data for Provisioning

(Copies of these documents are available online at http://quicksearch.dla.mil.)

DEPARTMENT OF DEFENSE GUIDES

(no identifier) Risk Management Guide for DOD Acquisition, Sixth Edition, Version 1.0

(A copy of the Risk Management Guide can be obtained at the following internet address:

https://www.sebokwiki.org/wiki/Risk_Management_Guide_for_DOD_Acquisition.)

http://www.e-publishing.af.mil/ https://www.sebokwiki.org/wiki/Risk_Management_Guide_for_DOD_Acquisition

PURCHASE DESCRIPTIONS

PD21WRWNZEA007 144 kW/180 kVA Generator Set PD21WRWNZEA008 72 kW/90 kVA Generator Set PD21WRWNZEA009 144 kW Universal Load Bank

2.2 Non-Government publications. The following documents of the exact revision listed below form a part of this document to the extent specified herein.

SOCIETY OF AUTOMOTIVE ENGINEERS (SAE)

AS5553 Aerospace Standard, Counterfeit Electronics Parts;

Avoidance, Detection, Mitigation, and Disposition

(Application for copies should be addressed to SAE, Inc., 400 Commonwealth Drive, Warrendale, PA 15096, http://www.sae.org/.)

2.3 Order of precedence. In the event of a conflict between the text of this document and the references cited herein, the text of this document takes precedence. Nothing in this document, however, supersedes applicable laws and regulations unless a specific exemption has been obtained.

3. REQUIREMENTS

3.1 Controlled unclassified information (CUI). CUI is defined as unclassified information that laws, regulations, or Government-wide policies allow for, or require, safeguarding. Knowledge and/or generation of CUI is required for performance of the contract/order. This SOW governs work that contains the development and transfer of CUI between contractors and the United States (U.S.) Government. All CUI must be controlled until authorized for public release.

The contractor shall ensure personnel, information, system, property, and facility security requirements are met. The contractor shall comply with Government security regulations including, but not limited to, Department of Defense (DoD) 5200.2-R, Personnel Security Program; DoD 5220.22-M; DoD Directive (DoDD) 5205.02E, DoD Operations Security (OPSEC) Program; and DoD Manual 5205.02-M, DoD Operations Security (OPSEC) Program Manual to protect Government interests.

The contractor shall ensure the security of Automated Information System(s) (AIS) at the contractor’s facility to preclude potential security incidents or violations including potential unauthorized disclosure or compromise of CUI. The contractor shall report any cyber incidents to the Government in accordance with DFARS Clause 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting) as applicable. Contractors shall ensure their employees have been trained in the proper marking of CUI; authorized and approved training material will be provided to the contractor prior to contract award. The contractor shall ensure that all personnel handling CUI associated with this contract: have been properly trained, have http://www.sae.org/ been approved to handle CUI, have a valid need to handle CUI, and safeguard any CUI in their possession at all times.

The contractor shall immediately notify the Procurement Contracting officer (PCO) of any potential or actual security incident or violation including potential or actual unauthorized disclosure or compromise of CUI.

3.1.1 Common Access Card (CAC). The contractor shall ensure a CAC is obtained by all contractor/subcontractor personnel who require access to DoD computer networks/systems, for DoD facility entry control, and/or for physical access to facilities and buildings to perform tasks under the contract/order. The contractor shall provide a list of contractor/subcontractor personnel who require a CAC to the PCO. The Government will provide the contractor instructions on how to complete a Contractor Verification System (CVS) application and notify the contractor of approval/disapproval of contractor/subcontractor personnel application.

Contractor/subcontractor personnel shall obtain the CAC from the local Real Time Automated Personnel Identification Documentation System (RAPIDS) issuing facility [usually the Military Personnel Flight (MPF)]. The contractor may plan to obtain CACs while at Robins Air Force Base (AFB) during their visit for the postaward conference.

The contractor shall notify the PCO of any change to the list of contractor/subcontractor personnel who require a CAC and provide an updated list within 5 business days. The contractor shall immediately (within same day) report a lost or stolen CAC to the PCO. The contractor shall return any issued CAC to the PCO within 5 business days once contractor personnel no longer require computer network/system access. The contractor shall return any and all CACs to the PCO within 5 business days after completion/termination of the contract. The Group A contractor shall be issued a minimum of two (Primary and Alternate) and maximum of four CACs; the Group B contractor shall be issued two CACs (Primary and Alternate).

3.1.2 Access to Government system(s). The procuring activity will provide and/or arrange contractor personnel access to system(s) necessary to perform tasks under the contract/order. The contractor shall ensure contractor personnel who require access to an unclassified Government AIS have the appropriate background check or security investigation conducted. The procuring activity will provide and/or arrange system access subject to approval of the DD Form 2875, System Authorization Access Request (SAAR). Upon completion/termination of the contract/order or transfer/termination of contractor personnel, the contractor shall ensure the system account(s) are closed.

3.1.3 Data delivery and transfer. To promote effective schedule management, electronic data exchanges shall be utilized to the maximum extent possible for tasks identified in this SOW.

Contractor personnel having CACs will be granted access to Air Force Cloud Hosted Enterprise Services Teams (AF365 Teams), a collaborative workspace product of Microsoft, to send/receive/upload/download/view data for tasks identified in the SOW. Air Force OneDrive, accessible through AF365 Teams to CAC holders, shall be the Cloud hosted data storage repository. Department of Defense (DoD) Secure Access File Exchange (SAFE) shall be the secondary (backup) electronic data exchange, located at https://safe.apps.mil, and utilized when temporary circumstances do not permit use of AF365 Teams.

3.2 Program management.

3.2.1 Program manager. The contractor shall identify to the procuring activity and maintain a single Program Manager (PM) point of contact for all matters under this contract. The contractor shall also ensure that all program management personnel assigned to the program shall be available, as required, to meet program objectives.

3.2.2 Plant access. The contractor shall arrange for full access to applicable contractor facilities and offices by Government representatives conducting any business, making observations, or performing inspections required by public law or by this SOW.

3.2.3 Access to Government facility or military installation. The procuring activity will facilitate access to Government facilities and military installations as required. The contractor shall ensure contractor personnel who require access to a Government facility or military installation comply with the security requirements of the facility or installation.

3.2.4 Monthly status report (MSR). The contractor shall track program progress and document such via MSRs. The contractor shall deliver an MSR that covers the engineering and technical development of the system and subsystems for each end item, as well as a projection of planned work for the remaining effort. Reports shall document tasks, issues, actions, and deliverables.

Problem areas shall be identified with proposed solutions and expected outcomes. The current risk management analysis, mitigation plan, and tracking (see 3.4.4) shall be provided as attachments to the MSR. The contractor shall deliver the initial report on the 5th day of the first month after receipt of order (ARO).

The contractor shall develop and maintain an Integrated Master Schedule (IMS) using the original baseline schedule as an unchanging reference. The contractor shall show all activity for all end items on the IMS. The IMS shall be attached to the MSR and delivered in both Microsoft Project and PDF formats. (DI-MGMT-81928, Contractor's Progress and Status Report, A001)

3.3 Conferences and program reviews. Throughout the POP, conferences, meetings, and technical or programmatic reviews may be supplemented with a virtual environment as directed by the PCO if travel restrictions, safety measures, or other program specifics prevent or limit the number of in-person attendees. Virtual meetings can utilize, but shall not be limited to, GPM AF365 Teams or Zoom. The contractor shall adhere to any Federal, State or local health and well-being regulations and guidelines for contractor-hosted in-person gatherings with Government personnel.

3.3.1 Travel. Travel requests for contractor/subcontractor personnel shall be submitted for approval to the PCO prior to costs being incurred and a minimum of 1 working day in advance of departure, with the exception of 2 working days in advance during Phase three operational test and evaluation (OT&E), exclusive of weekends and official Government holidays. Receipts must be presented with the invoice for reimbursement of actual travel costs.

https://safe.apps.mil/

3.3.2 Postaward conference. The procuring activity will convene separate postaward conferences with each contractor at Robins AFB within 45 days ARO. The PCO will coordinate the actual date, time, and location of the conference with the contractor.

3.3.3 Technical reviews.

3.3.3.1 Design reviews.

3.3.3.2 Design reviews location and schedule. The contractor shall host a preliminary design review (PDR) no later than 90 days ARO. The contractor shall also host a critical design review (CDR) no later than 180 days ARO. The Group A contractor shall schedule and conduct all design review events such that all applicable information and activity is both consolidated and combined, while still clearly and effectively delineated between each end item. Refer to 3.3.3.3, herein, for design review content. All design reviews shall be held at the contractor’s location/facilities.

3.3.3.3 Design review content. The PDR and CDR shall include formal technical reviews of the proposed design; program risks shall be reviewed on a technical and schedule basis. Each review shall include, but is not limited to: preliminary calculations; any necessary design studies or analyses including the design analysis as required in 3.6.1; preliminary drawings, including equipment layout drawings (packaging); proprietary or restricted design processes, components, and information; electrical and mechanical design; environmental control; thermal design aspects; software design; cybersecurity; training materials; lists of materials, parts, and processes; human engineering elements; corrosion control; maintainability; production capability and manufacturing; quality considerations; and modeling and simulations as required in 3.4.7.

Final drawings, final calculations, and any mockups or any assemblies shall be made available for procuring activity review as well. All applicable comments from the PDR shall be incorporated into the CDR design documentation.

The contractor shall prepare and submit formal documentation for the design reviews. An initial submission of the design review package(s) shall be submitted no later than 30 days prior to each design review. Following successful completion of each design review and adjudication of any action items, the contractor shall deliver formal documentation of the completed design reviews.

(DI-MISC-80508, Technical Report/Study Services, B001)

3.3.3.4 Test readiness review (TRR). The contractor shall host a formal test readiness review (TRR) 30 days prior to the start of Phase one developmental test and evaluation (DT&E) contractor inspection and 20 days prior to the start of Phase two DT&E equipment/aircraft compatibility inspection. The procuring activity will conduct informal TRRs for Phase three OT&E, and the contractor shall provide support for these TRRs as required. First article testing includes the following phases:

a. Phase one DT&E: contractor inspection

b. Phase two A DT&E: air vehicle systems integration laboratories (SILs) (applies only to 270 volts direct current (VDC) systems)

c. Phase two B DT&E: equipment/aircraft compatibility inspection

d. Phase three: OT&E

The contractor shall only proceed to Phase two DT&E testing (and applicable Phase three OT&E testing), to include shipment of first articles, after receiving written approval from the PCO. All TRRs shall assess test objectives, test methods and procedures, scope of tests, and determine if required test resources have been properly identified and coordinated to support planned tests. When applicable, any test simulations defined in 3.4.7 herein and/or preliminary test results not part of formal test activities shall also be presented at the TRR(s).

The contractor shall prepare and submit formal documentation for Phase one and Phase two TRRs. An initial submission of the TRR package(s) shall be submitted no later than 30 days prior to each TRR. Following successful completion of each TRR and adjudication of any action items, the contractor shall deliver formal documentation of the completed TRR.

(DI-MISC-80508, Technical Report/Study Services, B002

3.3.3.5 Technical review documentation. The contractor shall prepare all conference agendas and conference minutes for each design review and test review. (DI-ADMN-81249, Conference Agenda, A002; DI-ADMN-81250, Conference Minutes, A003)

3.3.4 Program management review support. The contractor shall host all reviews, audits, and meetings as requested by the PCO or the contractor. Similarly, the procuring activity will make every effort to participate in and support reviews, audits, and meetings requested by the contractor.

During the basic contract period, a minimum of twelve formal Program Management Reviews (PMRs) shall be conducted quarterly at a mutually agreeable location or via teleconference. The procuring activity prefers that the Group A contractor combine all end items in PMRs. PMRs shall be scheduled as directed by the PCO during the ordering periods.

3.3.4.1 Government/contractor meetings. Informal procuring activity and contractor virtual meetings or teleconferences shall be held weekly during the basic period; meeting agenda and minutes are not required.

3.3.5 Conference room. The contractor shall provide a conference room suitable for meetings of up to 15 Government representatives (25 personnel for training), plus contractor personnel, in support of scheduled meetings at the contractor’s facility (see 3.3 for teleconference requirements).

3.3.6 Meeting agendas. The contractor shall publish an agenda for all meetings, technical reviews and conferences specified herein, with the exception of the postaward conference in

3.3.2. The contractor shall request from the procuring activity any items or issues to be discussed or presented and shall include such items in the agenda. Agendas shall be delivered not less than 5 business days prior to any meeting. (DI-ADMN-81249, Conference Agenda, A002)

3.3.7 Meeting minutes. The contractor shall provide a written record of the discussions, decisions, and action items identified at each conference, technical review or meeting, with the exception of the postaward conference. Minutes shall include the relevant presentation material as applicable. The contractor shall deliver meeting minutes no later than 5 days after the meeting.

(DI-ADMN-81250, Conference Minutes, A003)

3.4 Systems engineering.

3.4.1 Environment, safety, and occupational health (ESOH).

3.4.1.1 System safety. The contractor shall establish, conduct, document, and maintain a system safety program for each end item in accordance with MIL-STD-882. The contractor shall document their approach for analyzing, eliminating, or minimizing ESOH hazards during all phases of the program for each end item. The contractor shall initiate changes in the system design based on safety analysis results, such that the associated risk is reduced to a level acceptable to the procuring activity. The Group A contractor shall present the data for each end item in its own volume within a consolidated System Safety Program Plan (SSPP). The procuring activity reserves the right to approve or disapprove any or all volumes of the Group A contractor’s deliverable. The SSPP shall be delivered no later than 30 days prior to the PDR.

Additionally, the contractor shall prepare a System Safety Hazard Analysis Report (SSHAR) for each end item. The Group A contractor shall present the data for each end item in its own volume within a consolidated SHHAR. The procuring activity reserves the right to approve or disapprove any or all volumes of the Group A contractor’s deliverable. The initial SSHAR shall be delivered no later than 30 days prior to the PDR. (DI-SAFT-81626, SSPP, C001;

DI-SAFT-80101, System Safety Hazard Analysis Report (SSHAR), C002)

3.4.1.2 Hazardous materials. The contractor shall manage hazardous materials, including those embedded in the system or used during operation or maintenance, as an element of the Systems Engineering process. This information shall be documented in the design analysis (see 3.6.1) and reviewed at the technical reviews; it shall be documented in accordance with FED-STD-313.

3.4.2 Corrosion control. The contractor shall establish, conduct, document, and maintain a corrosion prevention control program for each end item, which shall be documented in a corrosion prevention and control plan deliverable in accordance with 4.1 of MIL-STD-1568. The Group A contractor shall present the data for each end item in its own volume within a consolidated corrosion prevention and control plan. The procuring activity reserves the right to approve or disapprove any or all volumes of the Group A contractor’s deliverable. The initial Corrosion Prevention and Control Plan shall be delivered no later than 30 days prior to the PDR.

(DI-MFFP-81403, Corrosion Prevention and Control Plan, C003)

3.4.3 Reliability and maintainability. Note: For the entirety of 3.4.3, including all sub-paragraphs herein, the PD paragraph appendix references are the same. Individual PD numbers and paragraph repetitions have been omitted for clarity.

3.4.3.1 Reliability.

3.4.3.1.1 Basic reliability model. The contractor shall develop and maintain a basic reliability model for each end item in accordance with A.4.1 of the PD(s). The basic reliability model for each end item shall be documented in the consolidated design analysis (see 3.6.1) and reviewed at the technical reviews.

3.4.3.1.2 Basic reliability prediction. The contractor shall prepare and maintain a basic reliability prediction for each end item in accordance with A.4.2 of the PD(s); it shall be based upon the associated basic reliability model (see 3.4.3.1.1). The basic reliability prediction for each end item shall be documented in the consolidated design analysis (see 3.6.1) and reviewed at the technical reviews.

3.4.3.1.3 Failure modes, effects, and criticality analysis (FMECA). The contractor shall prepare and maintain a FMECA for each end item in accordance with A.4.3 of the PD(s); it shall be based upon the associated basic reliability model (see 3.4.3.1.1). The FMECA shall be documented for each end item in the consolidated design analysis (see 3.6.1) and reviewed at the technical reviews.

3.4.3.2 Maintainability.

3.4.3.2.1 Corrective maintenance prediction. The contractor shall prepare and maintain a corrective maintainability prediction for mean time to repair (MTTR) for each end item in accordance with A.4.5 of the PD(s). The model and failure rate data shall be consistent with that of the basic reliability prediction (see 3.4.3.1.2). The corrective maintenance prediction shall be documented for each end item in the consolidated design analysis (see 3.6.1) and reviewed at the technical reviews.

3.4.4 Risk management. The contractor shall develop, implement, and conduct a risk management program; criteria can be found in the Risk Management Guide for DOD Acquisition.

Risk is defined as:

A measure of future uncertainties in achieving program performance goals within defined cost and schedule constraints. It has three components: a future root cause, a likelihood assessed at the present time of that future root cause occurring, and the consequence of that future occurrence.

A future root-cause is defined as, “The reason, which, if eliminated or corrected, would prevent a potential consequence from occurring. It is the most basic reason for the presence of a risk.” A consequence is defined as, “The outcome of a future occurrence expressed qualitatively or quantitatively, being a loss, injury, disadvantage, or gain.” A related term is an issue, defined as, “A problem or consequence which has occurred due to the realization of a root cause. A current issue was likely a risk in the past that was ignored or not successfully mitigated.” The risk management process deals with identifying and mitigating risks so that they do not become issues.

The risk management process model includes the following activities, performed on a continuous basis:

a. Risk Identification,

b. Risk Analysis,

c. Risk Mitigation Planning,

d. Risk Mitigation Plan Implementation, and

e. Risk Tracking.

Risk identification, risk analysis, risk mitigation planning, risk mitigation plan implementation, and risk tracking shall be included for each end item as an attachment to the MSR (see 3.2.3).

3.4.5 Counterfeit prevention plan (CPP). Contractors that supply electronic parts or systems that contain electronic parts shall establish policies and procedures to avoid, detect, mitigate, and dispose of counterfeit electronic parts to prevent such parts from entering the United States Air Force (USAF)/DoD supply chain. These policies and procedures shall be documented in a CPP for submission and approval in accordance with DID DI-MISC-81832 and accomplished for all specified contract items. DI-MISC-81832 is applicable to Parts, Material, and Processes Selection (PMPS) associated with delivery of systems and assemblies to the USAF and DoD.

The requirements established by DI-MISC-81832 also apply to electronics components procured in sustainment of such systems and assemblies. The requirements of the DoD-adopted SAE AS5553, Aerospace Standard, Counterfeit Electronics Parts; Avoidance, Detection, Mitigation, and Disposition shall also apply.

The initial CPP shall be delivered no later than 30 days prior to the PDR. The CPP shall be updated as counterfeiting methods evolve to include any new indicators, as well as new prevention processes needed (either discovered directly or provided by the Government).

(DI-MISC-81832, Counterfeit Protection Plan, C004)

3.4.5.1 Applicability. The contractor shall identify all Business locations and programs to which the CPP applies. The CPP shall address materials, hardware, electronic parts, and procured assemblies.

3.4.5.2 Definitions. The contractor shall utilize definitions in accordance with AS5553 to ensure consistency. Any contractor-derived definitions must be included in an appropriate CPP appendix or annex. (Ref. 3, 3.1, 3.2, 3.3, and Appendix H of AS5553)

3.4.5.3 Parts availability and use of parts brokers. The contractor shall not procure materials, systems, assemblies, subassemblies, or parts from parts brokers when available from Original Equipment Manufacturers (OEM) or their Authorized Distributors. In cases where materials, systems, assemblies, subassemblies, or parts are no longer available from the OEM or their

Authorized Distributors, procurement from brokers may be authorized as defined by the contractor’s policy and their CPP. (Ref. 4.1.1, 4.1.2.e., and Appendix A of AS5553)

3.4.5.4 Procurement policies. The contractor shall provide and implement policy directing development and implementation of business practices, procedures, and processes to prevent procurement of counterfeit materials and parts. The contractor shall identify the appropriate office(s), business units, functional organizations, and programs that shall have responsibility for development, maintenance, and implementation of the CPP. The CPP shall identify the specific roles and responsibility for each. (Ref. 4.1.2, 4.1.3, and Appendices B, C, and D of AS5553)

3.4.5.4.1 Risk assessment. The contractor shall address the risk of using unknown sources and/or unauthorized suppliers in the CPP. Application or technical risk assessments shall establish the effect that counterfeit parts may have on performance. Vendor or source of supply risk assessments shall establish the potential for obtaining counterfeit parts. Using any risk analysis tool acceptable to the procuring activity, the contractor shall conduct a risk assessment based upon item characteristics and how likely it is that a counterfeit part will be received. The contractor shall identify and describe in the CPP how parts are selected for assessment and what risk is acceptable based upon the parts design, construction, material, and functional requirements. As a minimum, analysis shall be completed for flagging high risk items, such as items that are obsolete, discontinued, rare, etc. The contractor shall require completion of a trade study, documented within the CPP that shall facilitate determining whether 100-percent testing of parts procured from after-market sources is more cost effective than qualification or requalification of a manufacturer. (Ref. 4.1.2, 4.1.3 and appendices B, C, and D of AS5553)

3.4.5.5 Detection and avoidance responsibilities. The contractor shall establish processes for the review and approval of contractor and applicable subcontractor systems for the detection and avoidance of counterfeit electronic parts and suspect counterfeit electronic parts, which processes shall be comparable to the processes established for contractor business systems under section 893 of the Ike Skelton National Defense Authorization Act for Fiscal Year 2011 (Public Law 111–383; 124 Stat. 4311; 10 U.S.C. 2302 note). The contractor shall flow down such requirements and processes to their subcontractors in accordance with ODASD Memo titled “Overarching DOD Counterfeit Prevention Guidance,” dated 16 March 2012. (Ref. AS5553, 4.1.4, 4.1.5, appendix E)

3.4.5.6 Testing and verification. The contractor shall establish and accomplish testing and verification processes for items not received from an OEM, original component manufacturer, or authorized distributor that are identified as having high risk for counterfeit potential. These processes apply to prime contracts, and to subcontracts or suppliers below the prime contracts.

The contractor shall provide a list of acceptable test facilities if the subcontractor or supplier does not have the capability to in accordance with form required testing. Submittal of Certificates of Compliance indicating the parts are not counterfeit shall be acceptable for verification of testing. (Ref. 4.1.4 and Appendix E of AS5553)

3.4.5.7 Configuration identification and traceability. The contractor shall identify and control the configurations of all systems, assemblies, subassemblies, and parts, and enable mechanisms to provide traceability of parts. The contractor shall report to the procuring activity when control of the configurations of all systems, assemblies, subassemblies, and parts, and mechanisms to provide traceability of parts are not possible. The contractor shall identify the specific systems, assemblies, subassemblies, and parts beyond the contractors’ control. The contractor shall be responsible for detecting and avoiding the use or inclusion of counterfeit materials and parts, to include procured assemblies and subassemblies, in such products and shall be responsible for the rework or corrective action that may be required to resolve the use or inclusion of counterfeit materials and parts. The cost of counterfeit electronic parts and suspect counterfeit electronic parts and the cost of rework or corrective action that may be required to remedy the use or inclusion of such parts are not allowable costs under Department contracts, unless:

a. the contractor has established a counterfeit avoidance/detection system approved by the DoD,

b. the counterfeit parts were procured from a DoD-accredited trusted supplier or provided as Government property, and

c. the contractor has provided timely notification to the Government. (Ref. 4.1.6 and

Appendix F of AS5553)

3.4.5.8 Counterfeit notification and reporting. The contractor shall report in writing to the PCO within 30 days of determining any end item, component, part, or material contained in supplies purchased by the DoD or purchased by a contractor or subcontractor for delivery to, or on behalf of, the Department, contains counterfeit electronic parts or suspect counterfeit electronic parts for the purpose of investigation and notification of the Air Force Office of Special Investigations (AFOSI). The PCO will coordinate reporting to the appropriate Program Management/Item Management, System Engineering Management, the Air Force Material Command (AFMC) Discrepant Materiel Reporting Program (DMRP) Office in 406 SCMS/GULAB, and the AFOSI.

Additionally, the contractor shall, within the same 30-day period, ensure all suspected or confirmed counterfeit items are entered into the Government-Industry Data Exchange Program (GIDEP) system, which will serve as the DoD central reporting repository. (Ref. 4.1.7 and Appendix G of AS5553)

3.4.5.9 Counterfeit prevention training. The contractor shall provide appropriate training to all personnel working procurement within their company, to include, at a minimum, their supply chain management specialists, receiving inspectors, and engineers, and shall require all such personnel to complete said training. The contractor shall determine the appropriate training required. Training may be developed in-house or may be other Industry-accepted training. The CPP shall describe and list the training provided by the contractor to their personnel.

3.4.6 Cybersecurity requirements. The contractor shall implement cybersecurity in accordance with Department of Defense Instruction (DODI) 8500.01, DODI 8510.01, and AFI 17-101. The contractor shall provide cybersecurity support to include, but not limited to, engineering and technical analysis and assessment of system cybersecurity, development and delivery of Risk Management Framework (RMF) artifacts, and design, integration, testing, and documentation of implemented cybersecurity controls. The contractor shall include cybersecurity activities and events on the IMS. The contractor shall address technical details of cybersecurity requirements as part of the PDR and CDR.

3.4.6.1 Cybersecurity analysis. The contractor shall perform an engineering analysis and risk and technical assessment of system cybersecurity for each end item. The engineering analysis shall include, but not be limited to, system hardware and software architecture, I/O data flow, supply chain integrity, and operational conditions as it relates to system cybersecurity. The contractor shall perform a comprehensive risk assessment based on the system cyber vulnerabilities and threats. The contractor shall also conduct analysis for any commercial-off-the-shelf and/or non-developmental items to ensure that they are appropriately configured, software, hardware and firmware is controlled, and any unique risks they pose are mitigated. The initial report shall be delivered no later than 15 days prior to PDR. (DI-MISC-80508, Technical Report – Study/Services, Cybersecurity Analysis, C005)

3.4.6.2 Risk management framework (RMF). The contractor shall develop and deliver the required artifacts for the Platform Information Technology (PIT) Assessment and Authorization (A&A) package to meet the intent and requirements of DODI 8510.01 and AFI 17-101 for RMF implementation. The contractor shall utilize National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37, NIST SP 800-53, and applicable overlays in addressing the security controls associated with the various artifacts. The contractor shall include cybersecurity RMF activities and events on the IMS. The contractor shall deliver the initial RMF for each end item (Group A contractor shall consolidate the report) no later than 20 business days prior to phase one TRR. (DI-MGMT-82001, DoD RMF Package Deliverables, C006)

3.4.6.3 Cyber-secure development environment. The contractor shall take necessary precautions and actions to ensure that the information technology environment for any software/firmware development is secure and free of malware and malicious code. The contractor shall maintain a cyber-secure development environment that reduces and manages risk by meeting the intent of the controls as defined in NIST SP 800-53: CM-1, SA-3, and AT-2. The contractor shall report any cyber incidents to the Government, in accordance with DFARS Clause 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting) as applicable.

3.4.6.4 Software. The contractor shall develop and deliver a Software Assurance Evaluation Report (SAER) to demonstrate that all delivered software functions as intended and is pending free of vulnerabilities (i.e. defects, bugs, malware, etc.) either intentionally or unintentionally inserted as part of the software throughout the development lifecycle. The contractor shall deliver the initial report no later than 20 days prior to the Phase one TRR. (DI-IPSC-82249, Software Assurance Evaluation Report (SAER), C007)

3.4.6.5 Computer program identification number (CPIN). The contractor shall submit a request for CPIN assignment of all custom and/or commercial software to include, but not limited to, any diagnostic software, any utility software for firmware updates, the firmware itself, and any other support software to be delivered to the procuring activity. CPIN assignment requests shall be accomplished by direct on-line data entry into Enhanced Technical Information Management System (ETIMS) in accordance with TO 00-5-16 guidelines. The contractor shall deliver the final Computer Software Configuration Items (CSCIs) on CD/DVD-ROM and shall contain all files, drivers, and other data necessary for installation and operation of the software. The CPIN media label information shall match the information in ETIMS. All computer software configuration items (CSCIs) shall be identified at CDR. The contractor shall submit CPIN catalog information no later than 20 business days prior to first article testing for each end item.

(DI-MISC-81454, Computer Program Identification Number Catalog Information, C008) Note: The Group A contractor shall provide one consolidated CPIN catalog submission that presents the data for each end item in its own volume. The contractor shall also provide source, object, and executable code for the software via CD/DVD-ROM as well as only executable code for the software via separate CD/DVD-ROM no later than 10 days after procuring activity approval of first article testing. Note: The Group A contractor may make one combined software submission or up to three separate software submissions, depending upon first article test progression. (DI-AVCS-80700, Computer Software Product End Items, C009)

3.4.7 Modeling and simulation. The contractor shall provide any physical models, interactive physics based models, and simulations used in the design, test, and construction of the end items to the procuring activity. Equipment layout drawings shall be provided as Computer-aided Design/Computer Aided Manufacturing (CAD/CAM) native files at the overall assembly and major subassembly level, as well as interactive 3-dimensional (3D) .pdf files of the overall assembly and subassemblies. Further, the contractor shall provide exploded views of all assemblies and subassemblies comprising the end items to show how components fit together when assembled. Potential models and simulation include items such as, but not limited to: heat rejection models, calculations, simulations; control system(s) simulations; structural, lifting/loading, and suspension/running gear finite element analysis and finite element models;

reliability simulations; and test simulations. These models and simulations shall be provided as part of the PDR defined herein, updated and delivered as part of the CDR defined herein, updated (as required) for any TRR defined herein, and updated to correlate real world developmental test results and operational test results with final end item configuration and delivered as part of the first article approval package defined herein. To protect the contractor’s intellectual property, any models and simulations shall be provided to the procuring activity with limited use data rights and are intended to be used solely for sustainment purposes within the Government.

3.5 Logistics.

3.5.1 Technical Order (TO) requirements. The contractor shall participate in an Initial Guidance Conference (IGC) within 30 days ARO to ensure mutual understanding of TO contract requirements, schedules, points of contact, etc. The IGC shall be held in conjunction with the postaward conference at Robins AFB and/or via virtual environment as required. Note:

excluding the first article GPUs and ULB, no GPUs or ULB delivery acceptance shall occur without completed and Government-accepted technical manuals. (DI-ADMN-81249, Conference Agenda, A002; DI-ADMN-81250, Conference Minutes, A003)

3.5.1.1 TO content. In addition to the TO content required in accordance with the TM-86-01, the following special data shall also be included:

a. The information as it is presented on the data plates in the following PD paragraphs:

3.12.12.1, Identification plate; 3.12.12.2, Unique Identification (UID); 3.12.12.3, Transportation data plate; 3.12.12.4, Operating procedures plate; and 3.12.12.5, Corrosion treatment data plate.

b. A list of all non-standard torque values for fastening hardware used throughout the end item, to include items such as generator to coupling to engine hardware, vibration isolation hardware, suspension mounting hardware, etc.

c. Complete wiring information, such as wire running lists (size, type, designation, to/from, each end’s connectors, etc.), wiring diagram, wiring schematic for the GPUs and ULB.

d. Complete description of the warranty process.

e. For the GPUs, remove and replace procedures for only the engine, only the generator, and both at the same time. These procedures shall include directions and illustrations regarding how to build temporary supports required for the engine or the generator when the other item is removed.

f. Complete software identification information, to include the Government-assigned CPIN(s) and the OEM’s identification code(s) for any unique software for the end item(s), such as the engine control module.

3.5.1.2 Group A TO requirements. The contractor shall develop and deliver a series of Air Force technical manuals for the 72 kW GPU, the 144 kW GPU, and the 144 kW ULB. Each end item shall have its own distinct series of technical manuals in accordance with TM-86-01. (TM-86-01, Air Force TMCR, D001, D002, and D003)

3.5.1.3 Group B TO requirements. The contractor shall develop and deliver a series of Air Force technical manuals for the 72 kW GPU. The end item shall have its own distinct series of technical manuals in accordance with TM-86-01. (TM-86-01, Air Force TMCR, D004)

3.5.1.4 TO access. The contractor shall contact the TO Management Agency (TOMA) office located at Robins AFB (406/SCMS/GULAC) to be placed on “Initial Distribution” for TO(s) listed in the Technical Manual Contract Requirements (TMCR) (TM-86-01). This process will allow the contractor to obtain the most recent copy and any updates to these TO(s) for the duration of the contract.

3.5.2 Provisioning. The contractor shall identify all parts in a top-down break down format to…