HC101925R0007-0003.pdf

PDF 817 KB Posted

Attached to
DISA-PAC VIDEO WALL Federal contract opportunity
Solicitation number
HC101925R0007
Issued by
Defense Information Systems Agency

About this file

This is Amendment 0003 to a fixed-price contract (HC101925R0007) issued by DISA/DITCO-Pacific for the Defense Network Center Pacific (DNC PAC) Video Wall Tech Refresh project. The amendment, effective May 8, 2026, updates the Performance Work Statement (PWS) Attachment-Product List and Price Quote Worksheet due to a manufacturer part number change (as answered in Question 54, posted May 5, 2026), modifies PWS Paragraphs 6.1.1 and 6.2, removes FAR 52.222-18 (Place of Manufacture), and adds FAR 52.246-2 (Inspection of Supplies–Fixed Price). The proposal due date remains unchanged.

The contract requires procurement and installation of two new video walls, two new video processors, and miscellaneous A/V equipment at DISA PAC, Ford Island, Building 77, Room 228/229. Key tasks include disassembly and disposal of existing video walls using Defense Logistics Agency Disposition Services, installation of new LED video walls (6' 7.72" H x 23' 7.46" W, 2160x7680 pixels, minimum 1,000 nits brightness, supporting up to 18 HDMI inputs at 4K), installation of two video processors, labeling of all cabling, and assistance with control system programming and testing. The contractor must provide a 12-month installation warranty including 8x5 telephone helpdesk support and remote engineering support during standard federal business hours (7:00 a.m. to 3:30 p.m. HST), with on-site response capability within 8 business hours. All contractor personnel performing on-site work must possess interim or final SECRET clearance. The required installation completion date is 12 months from contract award, with warranty valid for one year after Government acceptance. Section 508 Accessibility Standards and Supply Chain Risk Management requirements apply to this contract.

View the file

Other files for this federal contract opportunity

Other files attached to DISA-PAC VIDEO WALL, newest first.
File Type Posted
RFQ HC101925R0007 Q-A 62-63_5.27.26.pdf PDF
HC101925R0007-0007.pdf PDF
HC101925R0007-0006.pdf PDF
HC101925R0007-0005.pdf PDF
HC101925R0007-0004.pdf PDF
PWS Attachment-Product List_5.8.26.xlsx XLSX spreadsheet
HC101925R0007 Price Quote Worksheet_5.8.26.xlsx XLSX spreadsheet
RFQ HC101925R0007 Q-A 55-61 5.8.26.pdf PDF
RFQ HC101925R0007 Q-A 47-54_5.5.26.pdf PDF
HC101925R0007-0002.pdf PDF
RFQ HC101925R0007 Q-A 17-46_elevation_5.01.26.pdf PDF
RFQ HC101925R0007 Q-A 9-16_4.29.26.pdf PDF
HC101925R0007-0001.pdf PDF
RFQ HC101925R0007 Q-A 9-17_dtd 4.29.26.pdf PDF
RFQ HC101925R0007 Q-A 1-8 _wall_4.24.26.pdf PDF
HC101925R0007 Brand Name Justification.pdf PDF
HC101925R0007 QASP.pdf PDF
HC101925R0007 Price Quote Worksheet.xlsx XLSX spreadsheet
HC101925R0007 PWS Attachment-Product List.xlsx XLSX spreadsheet
HC101925R0007 FINAL.pdf PDF
Show all 20

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

This amendment is to provide the updated PWS Attachment-Product List and Price Quote Worksheet (due to part number change by the manufacturer, as answ ered in Question 54, posted on 5.5.2026), to update PWS Paragraphs 6.1.1 and 6.2, to remove FAR 52.222-18, and to add FAR 52.246-2.

The proposal due date remains unchanged.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 17

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 08-May-2026

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street , County, State and Zip Code) X HC101925R0007

X 9B. DATED (SEE ITEM 11)

20-Apr-2026

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

08-May-2026

CODE

DISA/DITCO-PACIFIC

477 ESSEX STREET

BUILDING 77, ROOM 129

PEARL HARBOR HI 96860-5815

HC1019 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

HC101925R0007

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been added by reference:

52.246-2 Inspection Of Supplies--Fixed Price AUG 1996

The following have been modified:

PWS

PERFORMANCE WORK STATEMENT (PWS)

Award/Mod Effective Version Date

Award To Be Announced (TBA)

Contract Number: (completed by the KO at time of contract award)

Task Order Number: Not Applicable (N/A)

Contractor Name (completed by the KO at time of contract award)

Tracking Number: HC1085448152

Follow-on to Previous Contract and Task Order Number: N/A

1. Mission Partner Point of Contact (MP POC).

a. Primary MP POC. See DITCO Additional Text G1 - Points of Contact

b. Alternate MP POC. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator. See DITCO Additional Text G1 - Points of Contact

2. Contract Title. Defense Network Center Pacific (DNC PAC) Video Wall Tech Refresh

3. Background. The video walls in the DNC at Defense Information Systems Agency Pacific (DISA PAC) allows the Watch Officers to share valuable information with the engineers/technicians on the video walls. However, the video walls have reached end of life/end of service (EOL/EOS). Therefore, this contract will tech refresh both video walls in the DNC to ensure the audio/video (A/V) system in the DNC remains fully operational.

4. Objectives. Procure two new video walls and two new video processors and provide incidental installation of the commercial information technology (IT) products in DISA PAC, Ford Island, Building 77, Room 228/229.

5. Scope. Procure equipment for two video walls, two video processors, and miscellaneous A/V equipment/materials. Remove and dispose of existing video walls in the DNC. Install two new video walls, two video processors, and all associated cabling. Label all new cabling. Assist with programming of the control system and test and checkout of the video walls and A/V system in the DNC. Provide product and incidental installation warranty.

6. Performance Requirements.

6.1 Task 1 - Tech Refresh DNC PAC Video Walls. All on-site work requires the Contractor to have an interim or final SECRET clearance due to the workspace access requirements.

6.1.1 Subtask 1 - Disassembly/disposal. Disassemble and remove the two existing video walls from the DNC.

Contractor shall dispose of existing video walls using the Defense Logistics Agency Disposition Services (DLA-

DS).

6.1.2 Subtask 2 - Installation. Install two new video walls, two video processors, and all associated A/V equipment and cabling meeting all salient characteristics and brand name specifications in the attached Product List. Video walls shall be mounted on the same walls as the existing video walls. The existing video walls are on slightly concaved walls. Each new video wall shall be 6' 7.72" H X 23' 7.46" W X 0.95" D (approximate dimensions), 2160x7680 pixels LED. Required brightness: min 1,000 nits each cabinet (cd/sm). Each video wall shall support up to 18 inputs in HDMI format supporting up to 4K. The Contractor shall provide remote power modules and remote video modules for video walls. Existing equipment cabinets are installed in a comm room behind each wall, and all cabinets are supplied with building (Government) uninterruptible power supply (UPS) circuits. The Contractor shall label all new cabling.

6.1.3 Subtask 3 - Programming/Testing. Assist with programming of the control system and test and checkout of the video walls and A/V system in the DNC. Existing control system in place is Extron Electronics. The controller is an Extron IPCP Pro 555Q xi. The video matrix switch is an Extron XTP II Crosspoint 6400. The contractor shall connect to both Government-owned devices, not replace them.

6.1.4 Subtask 4 – Reporting. Provide an equipment installation project plan with proposed schedule. A final updated plan is due no later than two (2) weeks after contract award. Provide weekly updates to the MP POC and additional updates, as necessary, upon request of the Contracting Officer until installation completion.

Deliverables:

PWS

Task#

Deliverable Title

Format Due Date Distribution/Copies Frequency and Remarks

6.1.4 Equip Install

Project Plan

Written Contractor- Determined Format with Contracting Officer approval

Draft – with proposal Final – 2 weeks after award

1 copy to the Contracting Officer; 1 copy to the MP POC

Draft – with proposal Final – 2 weeks after award

6.1.4 Weekly

Status Update

Written Contractor- Determined Format with Contracting Officer approval

Weekly after Government approval of Equip Install Project Plan

1 copy to the Contracting Officer; 1 copy to the MP POC

Weekly

6.2 Task 2 - Installation Warranty. The Contractor shall provide a 12-month warranty on the system and associated installation. Warranty shall include 8 x 5 telephone helpdesk support and remote engineering support for critical system troubleshooting during standard federal government business hours between 7:00 a.m. to 3:30 p.m. HST.

The Contractor shall be capable of on-site response time within 8 business hours (7:00 a.m. to 3:30 p.m. HST) of a trouble call if needed. On-site support requires the responder to have an interim or final SECRET clearance due to the workspace access requirements. The Contractor shall acquire and maintain an inventory of spare parts meeting the video wall manufacturer's recommended on-hand replacement parts (15% Video Modules and 10% for Other Parts). The spare parts shall be readily available to support the on-site response within 8 business hours. The Contractor shall store spare parts off-site of the Government’s facility. The Government will not provide storage space for the spare parts during the 12-month warranty. Upon warranty expiration, the Contractor shall deliver remaining spare parts to the Government.

7. Performance Standards.

Performance Standard Acceptable Quality Level (AQL) Methods of Calculation

6.1 Task 1 – DNC PAC

Video Wall Tech Refresh

Performance occurs with no required re-performance or re-work at least 80% of the time. Problems that occur are minor and are resolved in a satisfactory manner.

Routine/periodic inspection.

6.1 Task 1 – DNC PAC

Video Wall Tech Refresh (upon completion of all Subtasks)

All video wall components function 100% in the system.

100% inspection of all delivered products/equipment and testing upon completion of Task 1.

6.2 Task 2 – Installation

Warranty

8x5 telephone support provided between 7:00 a.m. to 3:30 p.m.

HST and on-site support with proper replacement parts within 8 business hours is provided at least 95% of the time.

Routine/periodic inspection.

8. Incentives. This contract will be evaluated in the Contractor Performance Assessment Reporting System

(CPARS).

9. Place of Performance.

Mission Location: DISA PAC, 477 Essex Street, JBPHH, Building 77, Ford Island Place of Performance: All installation and removal work will be completed on-site at mission location. Installation warranty place of performance shall be in accordance with Task 2: off-site unless on-site response within 8 business hours (7:00 a.m. to 3:30 p.m. HST) of a trouble call is deemed necessary.

10. Period of Performance. The required installation completion date is 12 months from Date of Contract Award. The installation warranty shall be valid for one (1) year after Government acceptance of the newly installed video walls, video processors, and all associated A/V equipment and cabling.

Recognized Federal Holidays: The contractor is not required to perform services on Federal Holidays (as specified on the U.S. Office of Personnel Management website), unless otherwise specified by the Contracting Officer.

Unplanned Federal Government Closure: In the event an authorized official, by either executive or legislative order, declares Federal offices closed (treated as a holiday for pay and leave purposes), the order only applies to Federal employees (unless otherwise stated in the order).

11. Security Requirements.

The work will be UNCLASSIFIED. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel performing any task under this PWS must have interim or final SECRET clearance.

References:

a. DISA End User Access Agreement, 11 February 2021

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoD Manual 5200.01, Vol 1-2 Information Security Program, 24 February 2012

i. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

k. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24 February 2021

l. Security Executive Agent Directive 4, National Security Adjudicative Guidelines, 8 June 2017

m. DoDM 5400.07, Freedom of Information Act Program

n. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

o. DoD Instruction 8510.01, “Risk Management Framework for DoD Systems,” July 19, 2022

11.1 Background Investigation. All personnel performing on or supporting a DISA contract in any way shall be U.S. citizens. The personnel security requirements for this contract cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final background investigation eligibility delineated in the table below at the time of offer/proposal.

PWS Task / Subtask

Clearance Level

Access Justification for Access

PWS 6.1,

Subtasks 1-3

SECRET Work site clearance requirements

Contractor will not require access to classified information; however, the workspace requires someone to have at a minimum a SECRET clearance.

PWS 6.2 SECRET Work site clearance requirements

Contractor will not require access to classified information; however, the workspace requires someone to have at a minimum a SECRET clearance.

11.2 Investigation Requirements. All personnel requiring access to SECRET workspace under this contract shall undergo a favorably adjudicated Tier 3 (T3) investigation as a minimum requirement. Enrollment into Continuous Evaluation current within 5 years and reflected in Defense Information System for Security (DISS), would meet the requirement for a current Periodic Reinvestigation (PR).

11.2.1 The contractor is required to have personnel with an interim or final SECRET clearance (as specified in the table located in section 11.1) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel shall also have interim or final SECRET clearance.

11.3 Visit Authorization. Visit requests shall be processed and verified through the DISS to Security Management Office (SMO) DKASAA. DISS visits for contracts are identified as “Other” or “TAD/TDY” and will include the contract number in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the MP POC specified in PWS Section 1.0.

*Prior coordination with the MP POC should be made via e-mail to ensure the Visit Authorization Letter (VAL)/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

11.3.1 VAR Package. VARs must be received via e-mail and require pre-approval from the assigned MP POC five business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate MP POC. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed-up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

2. DISS verification of Visit Authorization by Security Manager (if available)

3. Contractor VAL signed by the Contractor Facility Security Officer (FSO) or Program Manager.

NOTE: If DISS is not available, the VAL must contain the following information on company letterhead:

Company name, address, telephone number, facility security clearance CAGE CODE (if available) Contract Number Name, SSN, date and place of birth, and citizenship of the employee intending to visit, email address, and phone number Certification of personnel background investigation authorizations required for the visit (type of investigation & date and adjudication date & agency) Name of MP POC Dates or period the VAL is to be valid (i.e., Start date / End date)

11.3.2 VTN Package. The Contractor FSO or PM will forward a VTN letter to the DISA MP POC identified in the PWS for all employees leaving the contract.

11.3.2.1 In addition, the DISA MP POCs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology

Other actions:

• Incidents involving violence in the workplace or harassment.

• Misuse of time.

• Inspector General or General Counsel related inquiries.

• Failure to comply with security policies and procedures.

• Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead:

Company name, address, telephone number, facility security clearance CAGE CODE (if available) Contract Number Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number Date contractor CAC was collected Name of MP POC Termination Date Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied.*

11.4 Security Contacts. DISA PAC Security Personnel can be contacted for Industrial or Personnel Security related issues at: Timothy Boulay, 808-786-9393, timothy.p.boulay.civ@mail.mil or disa.jbphh.pac.mbx.security-managers@mail.mil

11.5 Information Security and other miscellaneous requirements.

11.5.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.5.2 Contractor employees shall be required to comply with all Government security regulations and requirements.

Initial and periodic safety and security training and briefings will be provided by Government security personnel.

Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract.

11.5.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract.

11.5.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.5.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.5.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.5.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.5.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility.

Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.5.6 Contractor personnel may generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government facility. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 1, DoD Information Security Program: Overview, Classification, and Declassification; DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDI 5200.48, Controlled Unclassified Information (CUI) and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government.

The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.5.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI). None. This section is N/A.

13. Other Pertinent Information or Special Considerations.

a. Identification of Possible Follow-on Work. N/A

b. Identification of Potential Conflicts of Interest (COI). N/A

c. Identification of Non-Disclosure Requirements. N/A

d. Packaging, Packing and Shipping Instructions. N/A

e. Inspection and Acceptance Criteria. N/A

f. Property Accountability. The contractor shall submit the Consolidated Product Listing for IGCE/RFQ/EPL/MI&RR (see below) in addition to complying with all requirements of DFARS 252.211-7003. See DITCO Additional Text H2, Requirement to Submit an Electronic Product List for additional information.

g. Transitioning. N/A

h. Supply Chain Risk Management (SCRM).

This contract is subject to the Federal SCRM policies and regulations including the Defense Federal Acquisition Regulation Supplement (DFARS) 252.239-7017 Notice of Supply Chain Risk, DFARS 252.239-7018 Supply Chain Risk, DoD Instruction 5200.44 Protection of Mission Critical Functions to Achieve Trusted Systems and Networks, Section 806 of the FY2011 NDAA Requirements for Information Relating to Supply Chain Risk, and internal DISA SCRM Processes and Procedures.

The contractor shall submit a SCRM plan as part of its technical proposal that describes how the contract will reduce and mitigate Supply Chain Risk using the security controls outlined below (further described in CNSSI 1253, Appendix D and NIST SP 800-53), as applicable to your contract.

Control Number

Control Name Control Enhancement Name

CM-4 Impact Analysis IR-4(10) Incident Handling/Supply Chain Coordination IR-6(3) Incident Reporting/Supply Chain Coordination MA-6 Timely Maintenance PE-3(5) Physical Access Control/Tamper Protection PL-8(2) Security and Privacy Architectures/Supplier Diversity PM-16 Threat Awareness Program RA-9 Criticality Analysis RA-3(1) Risk Assessment/Supply Chain Risk Assessment RA-3(2) Risk Assessment/Use of All-source Intelligence SA-11 Developer Testing and Evaluation SA-5 System Documentation SA-9(3) External System Services/Establish and Maintain Trust Relationship with Providers SI-7 Software, Firmware, and Information Integrity SR-11(2) Component Authenticity/Configuration Control for Component Service and Repair SR-11(3) Component Authenticity/Anti-Counterfeit Scanning

Control Number

Control Name Control Enhancement Name

SR-12 Component Disposal SR-2(1) Supply Chain Risk Management Plan/Establish SCRM team SR-3(1) Supply Chain Controls and Processes/Diverse Supply Base SR-3(2) Supply Chain Controls and Processes/Limitation of harm SR-3(3) Supply Chain Controls and Processes/Sub-Tier Flow Down SR-4(1) Provenance/Identity SR-4(2) Provenance/Track and Trace SR-4(3) Provenance/Validate as Genuine and not Altered SR-4(4) Provenance/Supply Chain Integrity — Pedigree SR-5 Acquisition Strategies, Tools, and Methods SR-5(1) Acquisition Strategies, Tools, and Methods/Adequate Supply

SR-5(2)

Acquisition Strategies, Tools, and Methods/Assessments prior to Selection, Acceptance, Modification, or Update

SR-6 Supplier Assessments and Reviews SR-6(1) Supplier Assessments and Reviews/Testing and Analysis SR-7 Supply Chain Operations Security SR-8 Notification Agreements SR-9(1) Tamper Resistance and Detection/Multiple Stages of System Development Life Cycle

DELIVERABLES:

PWS

Task#

Deliverable Title

Format Due Date Distribution/Copies Frequency and Remarks

13.h. SCRM Plan Written Contractor- Determined Format

With proposal

1 copy to the Contracting Officer with the proposal

Once with proposal;

updates within 5 business days of a change, if applicable

SUPPLY CHAIN RISK MANAGEMENT PLAN UPDATE: The contractor shall provide an updated SCRM Plan to the Contracting Officer and MP POC within five (5) business days whenever there is a change that affects one or more security controls as described in the Committee on National Security Systems Instructions (CNSSI) 1253 Appendix D (companion publication to National Institute of Standards and Technology (NIST) Special Publication (SP)). At a minimum, the following events will require a SCRM Update: changes in company ownership, changes in senior company leadership, supplier changes, subcontractor changes, and Information and Communications Technology (ICT) supply chain compromises.

i. Training. N/A

14. Section 508 Accessibility Standards.

E201 Application E201.1 Scope. ICT that is procured, developed, maintained, or used by agencies shall conform to the Revised 508 Standards.

E202 General Exceptions

E202.5 ICT Functions Located in Maintenance or Monitoring Spaces. Where status indicators and operable parts for ICT functions are located in spaces that are frequented only by service personnel for maintenance, repair, or occasional monitoring of equipment, such status indicators and operable parts shall not be required to conform to the Revised 508 Standards.

E206 Hardware

E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E207 Software

E207.1 General. Where components of ICT are software and transmit information or have a user interface, such components shall conform to E207 and the requirements in Chapter 5.

Exception from E207.1 General: Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to the requirements in Chapter 5.

E207.2 WCAG Conformance. User interface components, as well as the content of platforms and applications, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

Exceptions from E207.2 WCAG Conformance:

Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to E207.2.

Non-web software shall not be required to conform to the following four Success Criteria in WCAG 2.0:

2.4.1 Bypass Blocks; 2.4.5 Multiple Ways; 3.2.3 Consistent Navigation; and 3.2.4 Consistent Identification.

Non-Web software shall not be required to conform to Conformance Requirement 3 Complete Processes in

WCAG 2.0.

E208 Support Documentation and Services

E208.1 General. Where an agency provides support documentation or services for ICT, such documentation and services shall conform to the requirements in Chapter 6.

E301 General

E301.1 Scope. The requirements of Chapter 3 shall apply to ICT where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

401 General

401.1 Scope. The requirements of Chapter 4 shall apply to ICT that is hardware where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

Exception from E401.1 Scope: Hardware that is assistive technology shall not be required to conform to the requirements of this chapter.

402 Closed Functionality

402.1 General. ICT with closed functionality shall be operable without requiring the user to attach or install assistive technology other than personal headsets or other audio couplers, and shall conform to 402.

402.2 Speech-Output Enabled. ICT with a display screen shall be speech-output enabled for full and independent use by individuals with vision impairments.

Exceptions from E402.2:

1. Variable message signs conforming to 402.5 shall not be required to be speech-output enabled.

2. Speech output shall not be required where ICT display screens only provide status indicators and those indicators conform to 409.

3. Where speech output cannot be supported due to constraints in available memory or processor capability, ICT shall be permitted to conform to 409 in lieu of 402.2.

4. Audible tones shall be permitted instead of speech output where the content of user input is not displayed as entered for security purposes, including, but not limited to, asterisks representing personal identification numbers.

5. Speech output shall not be required for: the machine location; date and time of transaction; customer account number; and the machine identifier or label.

6. Speech output shall not be required for advertisements and other similar information unless they convey information that can be used for the transaction being conducted.

402.2.1 Information Displayed On-Screen. Speech output shall be provided for all information displayed on-screen.

402.2.2 Transactional Outputs. Where transactional outputs are provided, the speech output shall audibly provide all information necessary to verify a transaction.

402.2.3 Speech Delivery Type and Coordination. Speech output shall be delivered through a mechanism that is readily available to all users, including, but not limited to, an industry standard connector or a telephone handset.

Speech shall be recorded or digitized human, or synthesized. Speech output shall be coordinated with information displayed on the screen.

402.2.4 User Control. Speech output for any single function shall be automatically interrupted when a transaction is selected. Speech output shall be capable of being repeated and paused.

402.2.5 Braille Instructions. Where speech output is required by 402.2, braille instructions for initiating the speech mode of operation shall be provided. Braille shall be contracted and shall conform to 36 CFR part 1191, Appendix D, Section 703.3.1.

Exception from E402.2.5 Braille Instructions: Devices for personal use shall not be required to conform to 402.2.5.

402.3 Volume. ICT that delivers sound, including speech output required by 402.2, shall provide volume control and output amplification conforming to 402.3.

402.3.1 Private Listening. Where ICT provides private listening, it shall provide a mode of operation for controlling the volume. Where ICT delivers output by an audio transducer typically held up to the ear, a means for effective magnetic wireless coupling to hearing technologies shall be provided.

402.3.2 Non-private Listening. Where ICT provides non-private listening, incremental volume control shall be provided with output amplification up to a level of at least 65 dB. A function shall be provided to automatically reset the volume to the default level after every use.

402.4 Characters on Display Screens. At least one mode of characters displayed on the screen shall be in a sans serif font. Where ICT does not provide a screen enlargement feature, characters shall be 3/16 inch (4.8 mm) high minimum based on the uppercase letter “I”. Characters shall contrast with their background with either light characters on a dark background or dark characters on a light background.

402.5 Characters on Variable Message Signs. Characters on variable message signs shall conform to section 703.7 Variable Message Signs of ICC A117.1-2009 (incorporated by reference, see 702.6.1).

403 Biometrics

403.1 General. Where provided, biometrics shall not be the only means for user identification or control.

Exception from E403.1 General: Where at least two biometric options that use different biological characteristics are provided, ICT shall be permitted to use biometrics as the only means for user identification or control.

404 Preservation of Information Provided for Accessibility

404.1 General. ICT that transmits or converts information or communication shall not remove non-proprietary information provided for accessibility or shall restore it upon delivery.

405 Privacy

405.1 General. The same degree of privacy of input and output shall be provided to all individuals. When speech output required by 402.2 is enabled, the screen shall not blank automatically.

406 Standard Connections

406.1 General. Where data connections used for input and output are provided, at least one of each type of connection shall conform to industry standard non-proprietary formats.

407 Operable Parts

407.1 General. Where provided, operable parts used in the normal operation of ICT shall conform to 407.

407.2 Contrast. Where provided, keys and controls shall contrast visually from background surfaces. Characters and symbols shall contrast visually from background surfaces with either light characters or symbols on a dark background or dark characters or symbols on a light background.

407.3 Input Controls. At least one input control conforming to 407.3 shall be provided for each function.

Exception from E407.3 Input Controls: Devices for personal use with input controls that are audibly discernable without activation and operable by touch shall not be required to conform to 407.3.

407.3.1 Tactilely Discernible. Input controls shall be operable by touch and tactilely discernible without activation.

407.3.2 Alphabetic Keys. Where provided, individual alphabetic keys shall be arranged in a QWERTY-based keyboard layout and the “F” and “J” keys shall be tactilely distinct from the other keys.

407.3.3 Numeric Keys. Where provided, numeric keys shall be arranged in a 12-key ascending or descending keypad layout. The number five key shall be tactilely distinct from the other keys. Where the ICT provides an alphabetic overlay on numeric keys, the relationships between letters and digits shall conform to ITU-T Recommendation E.161 (incorporated by reference, see 702.7.1).

407.4 Key Repeat. Where a keyboard with key repeat is provided, the delay before the key repeat feature is activated shall be fixed at, or adjustable to, 2 seconds minimum.

407.5 Timed Response. Where a timed response is required, the user shall be alerted visually, as well as by touch or sound, and shall be given the opportunity to indicate that more time is needed.

407.6 Operation. At least one mode of operation shall be operable with one hand and shall not require tight grasping, pinching, or twisting of the wrist. The force required to activate operable parts shall be 5 pounds (22.2 N) maximum.

407.7 Tickets, Fare Cards, and Keycards. Where tickets, fare cards, or keycards are provided, they shall have an orientation that is tactilely discernible if orientation is important to further use of the ticket, fare card, or keycard.

407.8 Reach Height and Depth. At least one of each type of operable part of stationary ICT shall be at a height conforming to 407.8.2 or 407.8.3 according to its position established by the vertical reference plane specified in

407.8.1 for a side reach or a forward reach. Operable parts used with speech output required by 402.2 shall not be the only type of operable part complying with 407.8 unless that part is the only operable part of its type.

407.8.1 Vertical Reference Plane. Operable parts shall be positioned for a side reach or a forward reach determined with respect to a vertical reference plane. The vertical reference plane shall be located in conformance to 407.8.2 or 407.8.3.

407.8.1.1 Vertical Plane for Side Reach. Where a side reach is provided, the vertical reference plane shall be 48 inches (1220 mm) long minimum.

407.8.1.2 Vertical Plane for Forward Reach. Where a forward reach is provided, the vertical reference plane shall be 30 inches (760 mm) long minimum.

407.8.2 Side Reach. Operable parts of ICT providing a side reach shall conform to 407.8.2.1 or 407.8.2.2. The vertical reference plane shall be centered on the operable part and placed at the leading edge of the maximum protrusion of the ICT within the length of the vertical reference plane. Where a side reach requires a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

407.8.2.1 Unobstructed Side Reach. Where the operable part is located 10 inches (255 mm) or less beyond the vertical reference plane, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

407.8.2.2 Obstructed Side Reach. Where the operable part is located more than 10 inches (255 mm), but not more than 24 inches (610 mm), beyond the vertical reference plane, the height of the operable part shall be 46 inches (1170 mm) high maximum and 15 inches (380 mm) high minimum above the floor. The operable part shall not be located more than 24 inches (610 mm) beyond the vertical reference plane.

407.8.3 Forward Reach. Operable parts of ICT providing a forward reach shall conform to 407.8.3.1 or 407.8.3.2.

The vertical reference plane shall be centered, and intersect with, the operable part. Where a forward reach allows a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

407.8.3.1 Unobstructed Forward Reach. Where the operable part is located at the leading edge of the maximum protrusion within the length of the vertical reference plane of the ICT, the operable part shall be 48 inches (1220

mm) high maximum and 15 inches (380 mm) high minimum above the floor.

407.8.3.2 Obstructed Forward Reach. Where the operable part is located beyond the leading edge of the maximum protrusion within the length of the vertical reference plane, the operable part shall conform to 407.8.3.2. The maximum allowable forward reach to an operable part shall be 25 inches (635 mm).

407.8.3.2.1 Operable Part Height for ICT with Obstructed Forward Reach. The height of the operable part shall conform to Table 407.8.3.2.1.

407.8.3.2.2 Knee and Toe Space under ICT with Obstructed Forward Reach. Knee and toe space under ICT shall be 27 inches (685 mm) high minimum, 25 inches (635 mm) deep maximum, and 30 inches (760 mm) wide minimum and shall be clear of obstructions.

408 Display Screens

408.1 General. Where provided, display screens shall conform to 408.

408.2 Visibility. Where stationary ICT provides one or more display screens, at least one of each type of display screen shall be visible from a point located 40 inches (1015 mm) above the floor space where the display screen is viewed.

408.3 Flashing. Where ICT emits lights in flashes, there shall be no more than three flashes in any one-second period.

Exception from E408.3 Flashing: Flashes that do not exceed the general flash and red flash thresholds defined in WCAG 2.0 (incorporated by reference, see 702.10.1) are not required to conform to 408.3.

409 Status Indicators

409.1 General. Where provided, status indicators shall be discernible visually and by touch or sound.

410 Color Coding

410.1 General. Where provided, color coding shall not be used as the only means of conveying information, indicating an action, prompting a response, or distinguishing a visual element.

411 Audible Signals

411.1 General. Where provided, audible signals or cues shall not be used as the only means of conveying information, indicating an action, or prompting a response

412 ICT with Two-Way Voice Communication

412.1 General. ICT that provides two-way voice communication shall conform to 412.

412.2 Volume Gain. ICT that provides two-way voice communication shall conform to 412.2.1 or 412.2.2.

Exception from E412.2 Volume Gain: ICT conforming to 412.2 shall not be required to conform to 402.3.

412.2.1 Volume Gain for Wireline Telephones. Volume gain conforming to 47 CFR 68.317 shall be provided on analog and digital wireline telephones.

412.2.2 Volume Gain for Non-Wireline ICT. A method for increasing volume shall be provided for non-wireline

ICT.

412.3 Interference Reduction and Magnetic Coupling. Where ICT delivers output by a handset or other type of audio transducer that is typically held up to the ear, ICT shall reduce interference with hearing technologies and provide a means for effective magnetic wireless coupling in conformance with 412.3.1 or 412.3.2.

412.3.1 Wireless Handsets. ICT in the form of wireless handsets shall conform to ANSI/IEEE C63.19-2011 (incorporated by reference, see 702.5.1).

412.3.2 Wireline Handsets. ICT in the form of wireline handsets, including cordless handsets, shall conform to TIA-1083-B (incorporated by reference, see702.9.1).

412.4 Digital Encoding of Speech. ICT in IP-based networks shall transmit and receive speech that is digitally encoded in the manner specified by ITU-T Recommendation G.722.2 (incorporated by reference, see 702.7.2) or IETF RFC 6716 (incorporated by reference, see 702.8.1).

412.5 Real-Time Text Functionality. [Reserved].

412.6 Caller ID. Where provided, caller identification and similar telecommunications functions shall be visible and audible.

412.7 Video Communication. Where ICT provides real-time video functionality, the quality of the video shall be sufficient to support communication using sign language.

413 Closed Caption Processing Technologies

413.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide closed caption processing technology that conforms to 413.1.1 or 413.1.2.

413.1.1 Decoding and Display of Closed Captions. Players and displays shall decode closed caption data and support display of captions.

413.1.2 Pass-Through of Closed Caption Data. Cabling and ancillary equipment shall pass through caption data.

414 Audio Description Processing Technologies

414.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide audio description processing technology conforming to 414.1.1 or 414.1.2.

414.1.1 Digital Television Tuners. Digital television tuners shall provide audio description processing that conforms to ATSC A/53 Digital Television Standard, Part 5 (2014) (incorporated by reference, see 702.2.1). Digital television tuners shall provide processing of audio description when encoded as a Visually Impaired (VI) associated audio service that is provided as a complete program mix containing audio description according to the ATSC A/53 standard.

414.1.2 Other ICT. ICT other than digital television tuners shall provide audio description processing.

415 User Controls for Captions and Audio Descriptions

415.1 General. Where ICT displays video with synchronized audio, ICT shall provide user controls for closed captions and audio descriptions conforming to 415.1.

Exception from E415.1 General: Devices for personal use shall not be required to conform to 415.1 provided that captions and audio descriptions can be enabled through system-wide platform settings.

415.1.1 Caption Controls. Where ICT provides operable parts for volume control, ICT shall also provide operable parts for caption selection.

415.1.2 Audio Description Controls. Where ICT provides operable parts for program selection, ICT shall also provide operable parts for the selection of audio description.

501 General

501.1 Scope. The requirements of Chapter 5 shall apply to software where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

Exception from E501.1 Scope: Where Web applications do not have access to platform accessibility services and do not include components that have access to platform accessibility services, they shall not be required to conform to 502 or 503 provided that they conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

602 Support Documentation

602.1 General. Documentation that supports the use of ICT shall conform to 602.

603 Support Services

603.1 General. ICT support services including, but not limited to, help desks, call centers, training services, and automated self-service technical support, shall conform to 603.

The following have been deleted:

52.225-18 Place of Manufacture AUG 2018

(End of Summary of Changes)

File details come from the government source that posted it. Updated .