RFP_Attachment_A_(SOW).pdf

STATEMENT OF WORK/PERFORMANCE SPECIFICATION

LARGE SCALE NON-INTRUSIVE INSPECTION SYSTEMS PROGRAM

MOBILE REFLECTIVE IMAGING SYSTEMS (MRIS)

Request for Proposals HSBP1016R0026 - Attachment A

HSBP1016R0026 Statement of Work Attachment A ii

THIS PAGE INTENTIONALLY LEFT BLANK

iii

Table of Contents

STATEMENT OF WORK

1. SCOPE

1.1. Program Organization

1.1.1. Government Management Organization

1.2. Purpose

1.3. Background

2. APPLICABLE DOCUMENTS

2.1. Federal Regulations and Publications·

2.2. National Standards

2.3. DHS/CBP Documents

3. SYSTEM REQUIREMENTS

3.1. Requirement Definitions:

3.2. General Requirements

3.3. Performance Requirements for Large Scale NII Systems

3.3.1. Sources and Detectors

3.3.2. Computers

3.3.3. Computer Security

3.3.3.1. Identification and Authentication

3.3.3.2. Access Control

3.3.3.3. Auditing

3.3.4. Printed Documents

3.3.5. Printer / Scanner

3.4. Systems Integration

3.4.1. System Installation

3.4.2. Work Center

3.4.3. Workstation Integration and Interface

3.4.4. Integrated Image Capture

3.4.5. Integrated Image Storage

3.4.6. Integrated Data Set Download

3.4.7. Radio Equipment

iv

3.4.8. Electrical System (110/120 VAC and 12 VDC)

3.4.8.1. 110/120-Voltage AC (VAC) System

3.4.8.2. Battery Isolator and Battery Boost/Paralleling Circuit

3.4.8.3. 12 Volt DC System Power Supply/Charger

3.4.8.4. 110/120 VAC Exterior Outlets

3.4.8.5. 110/120 VAC Interior Outlets

3.4.8.6. Generator

3.4.8.7. Generator Compartment

3.4.8.8. Wiring and Circuit Breaker Size

3.5. Safety Interlocks

3.6. Reliability, Availability and Maintainability Design Requirements

3.6.1. Basic System Reliability Requirements – Inherent Availability (Ai)

3.6.1.1. Mean Time Between Failures (MTBF)

3.6.1.2. Mean Time to Repair (MTTR)

3.6.1.3. Life Cycle Expectation

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

3.6.3. Classification of Reliability Critical Items

3.6.4. Corrosion Control

3.7. Quality Assurance/Quality Control Plan

3.8. Testing

3.8.1. Factory Testing

3.8.2. Site Acceptance Testing

3.8.3. Discrimination Testing

3.9. System Safety Program

3.9.1. Radiation Safety

3.9.1.1. Radiation Safety Design Review

3.9.1.2. Radiological Survey and Report

3.9.1.3. Annual Radiation Survey and Report

3.9.2. Safety Plan

3.9.3. Hazardous Materials

3.10. Information Technology Security

3.10.1. Basic Requirements

v

3.10.2. Security Authorization

3.10.3. DHS Security Policy Requirement

3.10.4. Encryption Compliance Requirement

3.10.5. Security Review

3.10.6. Access to Unclassified Facilities, Information Technology (IT) Resources, and Sensitive Information

3.10.7. Personal Identity Verification of Contractor Personnel

3.10.8. Security Requirements for Unclassified Information Technology Resources

3.10.9. Contractor Employee Access

3.10.10. Enterprise Architecture (EA) Compliance

3.10.11. Supply Chain Risk Management Terms and Conditions:

3.10.12. IPv6

3.10.13. CBP Contractor Handling PII Level

3.10.14. Personal Identification Verification (PIV) Credential Compliance

3.10.15. DHS Information Technology Portfolio Alignment

3.11. Accessibility Requirements (Section 508 Compliance)

3.11.1. Section 508 Applicable EIT Accessibility Standards

3.11.2. Section 508 Applicable Exceptions

3.11.3. Section 508 Compliance Requirements

4. LIFE CYCLE SUSTAINMENT AND SUPPORT REQUIREMENTS

4.1. Warranty

4.2. System Training

4.2.1. Operator Training

4.2.2. Secondary Operating Training

4.2.3. Train-the-Trainer

4.2.4. Ownership

4.3. Technical Manuals

4.4. System User's Manual

4.5. Operational/Storage Checklist

4.6. Operator Service Manual

4.7. Technical Reviews

4.8. Other Reviews

vi

4.9. Sustainment and Maintenance

4.9.1. Service Support Availability Requirements - Operational Availability (Ao) 47

4.9.2. Service Calls and Work Orders

4.9.2.1. Work Completion Form (WCF)

4.9.2.2. Work Site Cleanliness

4.9.3. Preventative Maintenance

4.9.3.1. NII Monthly Preventative Maintenance Schedule

4.9.3.2. Preventative Maintenance Visit Schedule

4.9.4. Corrective Maintenance

4.9.5. Conditional but Operational Status

4.9.6. Corrosion Control under Preventative and Corrective Maintenance

4.9.7. Annual Configuration Report

4.10. On-Demand Services (Technology Refresh, Other Maintenance, and Other Support Services)

4.10.1. Engineering Services

4.10.2. Ad Hoc Reports

4.10.3. Site Surveys

4.10.4. Provisioning Support

4.10.5. Retrofit Support

4.10.6. System Integration Support and Services

4.10.7. Relocation Services

4.10.8. Site Work

4.10.9. Disposal Services

4.10.10. Emergency Services

4.10.11. Corrective and Replacement Services

4.10.12. Special Events

4.10.13. On-Demand Training

5. CONFIGURATION MANAGEMENT

5.1. Configuration Baseline

5.2. Technical Documentation

5.3. Management of the Technical Documentation

5.4. Engineering Change Proposals (ECPs)

vii

5.5. Configuration Changes

5.6. Configuration Control Reports

5.7. Interchangeability

5.8. Accessibility

6. DOCUMENTATION DELIVERABLES (Data Item Description (DID))

7. APPENDICES

Appendix A Requirements Matrix

Appendix B Deliverables

Appendix C: Acronyms

Appendix D: Glossary of Terms viii

Version Date Comments

V1 V2 V3

04/14/16 05/13/2016 07/06/2016

1st Draft Post- Draft Request For Proposal Post- Legal Review

STATEMENT OF WORK

1. SCOPE

U.S. Customs and Border Protection (CBP) has a need for improving its inspection of cargo conveyances arriving in the United States, including at and between CBP Ports of Entry (POE). In the current threat environment it is imperative for security that incoming cargo conveyances be subjected to a high level of scrutiny. Therefore, CBP seeks to procure Large Scale Non-Intrusive Inspection (LS-NII) imaging systems such as the Mobile Reflective Imaging Systems (MRIS) for various CBP POEs and other locations throughout the United States, as designated by CBP. This Statement of Work (SOW) defines the tasks necessary to provide these LS-NII systems; to include equipment, testing, delivery, verification, documentation, life cycle sustainment and support, and configuration management requirements needed to satisfy the procurement.

1.1. Program Organization

This program is under the technical direction of the LS-NII Contracting Officer Representative (COR) assigned to the CBP Laboratories and Scientific Services Directorate (LSSD), Interdiction Technology Branch (ITB) in coordination with CBP Enterprise Network and Technology Support (ENTS) Integrated Logistics Branch

(ILB).

1.1.1. Government Management Organization

CBP will manage this program through the CBP LSSD/ITB process for system acquisition, delivery, and acceptance. CBP ENTS/ILB will manage Warranty, Operations and Maintenance (O&M), and On-Demand Services. CBP will coordinate with the Contractor to ensure successful system integration. CBP Office of Training Development (OTD) will approve training development. CBP OTD and ENTS Technology Training Support Branch (TTSB) will coordinate operator training presentations. CBP Human Resources Management (HRM) will approve radiation safety.

1.2. Purpose

The purpose of these LS-NII Systems is to enable CBP to perform effective and efficient Non-Intrusive Inspection of conveyances, including trailer trucks, pallets, trailer-mounted cargo containers and other vehicles for contraband such as illicit drugs, terrorist weapons and currency. These systems may be used for inspection of vehicles such as privately owned vehicles (POV), pickup trucks, buses, Recreational Vehicles (RV),and towed vehicles (e.g., trailers and boats), as well as commercial buses, truck tractors and trailers, and shipping containers.

Each system shall be capable of providing an image with the quality identified within the performance requirements Section 3.3 (see Appendix A) of this SOW to aid CBP personnel in identifying anomalies (potential contraband) within the image. The system shall be capable of operation in the scanning mode(s) identified in the performance requirements Section 3.3 (see Appendix A) of this

SOW.

1.3. Background

Each day CBP Officers and US Border Patrol Agents use a variety of LS-NII equipment in the course of their work to examine conveyances and cargo to ensure the efficient flow of legitimate trade and travel across U.S. borders. These inspections take place at controlled POEs and Border Patrol checkpoints, and are aimed at detecting items prohibited from import into or export from the U.S.

The MRIS is required to inspect conveyances without requiring a boom or other device located on an opposite side of the conveyance for enhanced maneuverability and to conduct inspections in situations where a boom would not be practical.

2. APPLICABLE DOCUMENTS

Documents cited shall be referenced and used as called for in this Statement of Work/Performance Specification and the Data Item Descriptions.

2.1. Applicable Federal Regulations and Publications·

a. Code of Federal Regulations, 29 CFR Part 1910, Occupational Safety and Health Standards (OSHA)

b. Code of Federal Regulations, 49 CFR Part 172, Subpart B, Table of

Hazardous Materials and Special Provisions

c. Code of Federal Regulations, 21 CFR 1020.31, Radiographic

Equipment

d. United States Code, (44 USC Chapter 35), Federal Information

Security Modernization Act (FISMA) of 2014

e. Office of Management and Budget (OMB) Circular A-130, Management of Federal Information Resources, Appendix III, Security of Federal Automated Information Resources.

f. Office of Management and Budget (OMB) guidance M-05-24, August 5, 2005)

g. United States Code (5 USC 552a), The Privacy Act, 2010

h. United States Code (6 USC 133), Critical Infrastructure Information Act of 2002 (Title II, Subtitle B, of the Homeland Security Act)

i. Code of Federal Regulations, 6 CFR Part 29, Protected Critical

Infrastructure Information

j. Code of Federal Regulations (49 CFR Part 1520), Protection of

Sensitive Security Information

k. OMB Memorandum M-05-22, August 2, 2005

l. United States Code (29 USC 701 et seq.) Rehabilitation Act of 1973, as amended, Title V, Section 508

m. Code of Federal Regulations (36 CFR Part 1194) Electronic and

Information Technology Accessibility Standards, including 36 CFR 1194.21, Software Applications and Operating Systems

n. Federal Acquisition Regulation (FAR Subpart 39.2), Electronic and Information Technology

Note: The regulations can be accessed by going to: http://ecfr.gpoaccess.gov.

2.2. Applicable National Standards

a. Human Engineering Design Criteria Standards Part 1: Project

Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889)

b. American National Standards Institute, ANSl/HPS N43.3, General Radiation Safety - Installations Using Non-Medical X-Ray and Sealed Gamma-Ray Sources, Energies up to 10 MeV, 2008

c. American National Standards Institute, ANSl/HPS N43.14, Radiation Safety for Active Interrogation Systems for Security Screening of Cargo, Energies up to 100 MeV, 2011

d. American National Standards Institute, ANSI/HPS N43.17, Radiation Safety for Personnel Security Screening Systems Using X-Rays, 2009

e. American National Standards Institute, ANSI/IEEE N42.46, Determination of the Imaging Performance of X-Ray and Gamma-Ray Systems for Cargo and Vehicle Security Screening, 2008

f. Federal Information Processing Standards Publication (FIPS PUB), Number 140-2, Security Requirements for Cryptographic Modules,

g. Federal Information Processing Standards (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems

h. Federal Information Processing Standards (FIPS) 197, Advanced Encryption Standard

i. Federal Information Processing Standards Publication (FIPS PUB) Number 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors, August 2013

j. International Standards Organization (ISO) 9000 series, Quality Management

k. SAE International Standard EIA649B, Configuration Management Standard

l. SAE International Standard J1292, Automobile and Motor Coach Wiring http://ecfr.gpoaccess.gov/

m. SAE International Standard J163, Low Tension Wiring and Cable Terminals and Space Clips

n. SAE International Standard J561, Electrical Terminals

o. SAE International Standard J858, Electrical Terminals Blade Type

p. SAE International Standard J928, Electrical Terminals—Pin and

Receptacle Type

2.3. Applicable DHS/CBP Documents, as may be amended*

a. DHS Sensitive Systems Policy Directive 4300A, Version 12.01, February 12, 2016

b. DHS 4300A Sensitive Systems Handbook v12.0 November 15, 2015

c. DHS Management Directive (MD) 11042.1 Safeguarding Sensitive But

Unclassified (For Official Use Only) Information

d. Homeland Security Presidential Directive-12 (HSPD-12), Policy for a

Common Identification Standard for Federal Employees and Contractors, August 2004

e. DHS Enterprise Data Management Policy Directive 103-01, 8/25/2014

f. DHS Section 508 Program Management Office and Electronic and

Information Technology Accessibility MD 4010.2, 10/26/2005

g. CBP OTD Curriculum Outlines, OTD-15-02, 12/01/2015

*Current DHS documents may be accessed at https://www.dhs.gov/dhs-security-and-training-requirements-contractors.

3. SYSTEM REQUIREMENTS

The Contractor shall perform all tasks within this SOW. The Contractor shall abide by all applicable Federal regulations, national standards, and U.S.

Department of Homeland Security (DHS) and CBP documents in performing all tasks. Requirements for this effort shall include the fabrication, integration, testing, delivery, training, logistics, and on-demand support of LS-NII Systems.

CBP will deploy these systems at various locations, including CBP POEs (land border crossings along the Southwest/Northern borders, seaports and airports) within the United States, as designated by CBP. CBP may identify specific deployment sites and schedules within the Request for Proposal (RFP).

3.1. Requirement Definitions:

1. Threshold: The minimum level of operational performance that the

Government is willing to accept is considered a threshold value. A system that does not meet one or more threshold requirement will not be accepted.

2. Objective: A level of performance that significantly improves mission https://www.dhs.gov/dhs-security-and-training-requirements-contractors https://www.dhs.gov/dhs-security-and-training-requirements-contractors performance, safety, or supportability beyond that of the threshold value, and represents the desired yield for system performance is considered an objective.

3. Objective values are not required, but can be defined to provide guidance to the Contractor with respect to areas where increased capability is of interest to the government. If Objectives are defined, the interval between the Objective and Threshold values for a given parameter is the government program manager's (PM) space for making trade-off decisions.

4. Single Requirement: Some requirements will have only a single parameter value and, when this is the case, these values are thresholds.

3.2. General Requirements

Each LS-NII MRIS system shall meet all of the requirements defined in this Statement of Work. The Contractor shall perform the work necessary to develop, test and deliver the procured equipment. The Contractor shall also provide warranty, training, logistics, and on-demand services in support of these LS-NII systems as identified in the Performance Requirements Section 3.3 (see Appendix A). The Contractor shall prepare Monthly Progress Reports in accordance with the attached DID A006 while performing tasks within this SOW.

3.3. Performance Requirements for Large Scale NII Systems

Appendix A contains the requirements matrix.

3.3.1. Sources and Detectors

As part of the LS-NII system, the Contractor shall deliver an imaging source or sources and detectors, which shall incorporate reflective imaging X-ray technology that does not rely on radioactive sources (e.g. Gamma) that are capable of meeting the Performance Specifications as described in Section 3.3 (see Appendix A).

3.3.2. Computers

As part of the LS-NII system, the Contractor shall provide computers and server(s) to meet all the requirements of this SOW and its appendices (see Appendix A).

The system shall have a wireless technology that can be encrypted in accordance with DHS Sensitive Systems Policy Directive 4300A, Section 4.6, Wireless Network Communications, or its replacement. The wireless capability shall have the ability to be disabled when not in use.

3.3.3. Computer Security

All LS-NII System computers and software programs that enable a User to analyze/enhance images and store an Image Data Set (IDS), and the Data Base computers and programs that store an IDS, shall have the following features incorporated: computers and server(s) with enough memory and speed to meet all the requirements of this SOW; desktop computers shall be equipped with Operating Systems of Windows 7 32bit or greater, capable of Win8 64bit upgrade;

laptop operating systems shall be Windows 7 64bit or greater, capable of upgrade to Windows 8 64bit; the system shall be capable of upgrade to Windows 10; the system shall have a wireless technology that can be encrypted in accordance with DHS 4300A policy; and the wireless capability shall have the ability to be disabled when not in use.

See Appendix A for contents of an IDS which shall be created for each system scan.

3.3.3.1. Identification and Authentication

A. User Accounts – The Contractor shall provide three levels of CBP User access (Operator Level 1, Operator Level 2, and Administrator). Operator Level 1 shall be able to perform all system functions except copying and deleting images or Data Sets. Operator Level 1 shall not have access to User Accounts. Operator Level 2 shall be able to perform all Operator functions plus be able to copy and delete IDS files, and reset Level 1 and Level 2 passwords. Operator Level 2 shall not have access to User Accounts, except to reset passwords. The Administrator shall be able to perform all Operator Level 2 functions plus have access to User Accounts.

The Administrator shall be able to create, edit or delete User Accounts. The system shall include the capability for a local CBP System Administrator to create, edit and delete User Accounts. Operator Level 1 & 2 shall not have access to Windows except for those hard drives that have IDS stored on them or the external drives from which an image may be imported or an image or IDS may be exported or copied. The CBP Administrator Account shall have access to Windows Operating System.

B. Passwords – All passwords used to access the NII system for operation are required to be Strong Passwords. Strong passwords have the following requirements:

1. Are at least 12 characters in length.

2. Comply with the DHS hardening guides for operating systems and the configuration guides for applications. In the absence of guidance, the ISSO will determine the appropriate password complexity based on the level of risk.

3. Are not the same as any of the user’s previous 8 passwords.

4. Strong passwords do not contain any dictionary word.

5. Strong passwords do not contain any proper noun or the name of any person, pet, child, or fictional character.

6. Passwords do not contain any employee serial number, Social

Security number, birth date, phone number, or any information that could be readily guessed about the creator of the password.

7. Strong passwords do not contain any simple pattern of letters or numbers, such as “qwerty” or “xyz123”.

8. Strong passwords do not contain any word, noun, or name spelled backwards or with a single digit appended, or with a two-digit “year” string, such as 98xyz123.

9. Strong pass phrases, if used in addition to or instead of passwords, follow the same guidelines.

10. Strong passwords are not the same as the User identification (ID).

C. The NII system must have the ability to:

1. Deactivate unused accounts automatically if they have not been used in 45 days.

2. Passwords should not be set to the null string.

3. Automatic password change frequency. The system shall require the user to change their password every 90 days.

4. Password Storage – The system shall store all user account passwords in encrypted form.

3.3.3.2. Access Control

A. Unique User Accounts – The system shall enable all users to have unique account identifiers, including separate identifiers for operator accounts and administrator accounts.

B. Automatic Account Lockout – The system shall lock a user account for twenty (20) minutes after three consecutive failed logon attempts.

C. Automatic Session Termination – The system shall lock the user login session after twenty (20) minutes of inactivity. The system shall require the user to authenticate with the user account password to regain system access after the system lock. After 60 minutes of inactivity, the system shall log the user account out of the system.

D. Warning Banner – The DHS Chief Information Security Officer (CISO) mandates that a warning banner statement be displayed on all DHS systems during user account logon. The system shall prompt the user to accept the current language before the user can authenticate with the user ID and user password to access the system. The current language required follows:

1. You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S. Government-authorized use only.

2. Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties.

3. By using this information system, you understand and consent to the following:

a. You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.

b. The government may disclose or use any communications or data transiting, stored on, originated from or directed to or from this information system for any lawful government purpose.

c. You are NOT authorized to process classified information on this information system.

3.3.3.3. Auditing

A. Audit Records – System will retain audit records sufficient in detail to facilitate the reconstruction of events if compromise or malfunction occurs.

Audit records shall contain at least the following information:

1. Identity of each user and device accessing or attempting to access the system

2. Time and date of the access and the logoff

3. Activities that might modify, bypass, or negate information security safeguards

4. Security – relevant actions associated with processing

5. All activities performed using an administrator account/identity

B. Audit Record Access – Audit records and audit logs should be protected from unauthorized access, modification, or destruction.

C. Audit Record Retention – Audit records should be maintained on the system for a minimum of ninety (90) days. Audit records shall be preserved for a period of 7 years as part of managing records for each system to allow audit information to be placed online for analysis with reasonable ease.

D. Audit Reduction / Report Generation – The system will provide an audit reduction and report generation capability that:

1. Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents

2. Without altering the original content or time ordering of audit records E. The system will have the capability to tag each scan with the user name who conducted it. The user name and time shall be displayed with the image and the IDS.

3.3.4. Printed Documents

All LS-NII Systems shall have the capability of printing all the items of an IDS. All printed documents shall have "FOR OFFICIAL USE ONLY - LAW ENFORCEMENT SENSITIVE" in the header or footer.

3.3.5. Printer / Scanner

Printers shall be capable of quality printing, including color, while retaining a limited physical footprint. Scan/print devices may be combined or separate units as defined in Section 3.3 (see Appendix A).

3.4. Systems Integration

Integration of NII inspection system equipment and its supporting Subsystems shall be the responsibility of the NII systems Contractor.

3.4.1. System Installation

In order to verify that the LS-NII system can be deployed to the designated CBP POE, the contractor, upon written request, shall support a Site Survey at each of the POEs. The Contractor shall support the Site Survey at least 60 days prior to the CBP Site Acceptance Test at that POE. Upon completion of the Site Survey, the contractor shall submit a Site Survey Report in the Contractor’s format within 15 days to the CBP ITB Facilities Coordinator. The report is to be in a CBP approved contractor's format. The Site Survey Report shall, at a minimum, address the items listed in DID A005 Equipment Installation Data. Additional system installation information, if required, may be identified in the Performance Requirements Section of this SOW.

3.4.2. Work Center

The Contractor shall deliver a Work Center ergonomically designed for housing the system's Workstation in accordance with DHS standards found in Human Engineering Design Criteria Standards Part 1: Project Introduction and Existing Standards, DHS S&T TSD Standards project, (NISTIR 7889), Section 5.2.9, at http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7889.pdf . The system's Workstation for mobile systems shall be housed inside the mobile unit.

http://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7889.pdf

3.4.3. Workstation Integration and Interface

The Contractor shall configure and integrate all workstations/servers and computer software/operating systems to include a system Operator Console, the system’s controls and displays into a system that enables a conveyance to be scanned, the conveyance image(s) to be analyzed, a system operator to make a Suspect or Non-suspect decision and store all the items associated with the scan into an IDS and then store/retrieve the IDS. The Contractor shall meet additional integration requirements such as computer hardware/software technology refresh requirements, if applicable, as specified within Section 3.3 (see Appendix A).

3.4.4. Integrated Image Capture

All LS-NII Systems shall be capable of capturing and displaying all of the items that are contained in an IDS. The IDS shall include, as a minimum, the radiographic image, a Data Sheet or Manifest, operator notes, the operator’s Suspect or Non-suspect decision and the User's name. The Contractor shall meet additional IDS element requirements, specified in Section 3.3 (see Appendix A). All Metadata shall be the sole property of CBP and shall not be released or distributed without explicit consent of the Contracting Officer.

3.4.5. Integrated Image Storage

All LS-NII Systems shall be capable of storing all IDS created for a period of 90 Days with up to two (2) Terabyte of storage. A warning shall be provided when the hard drive used to store the IDS files reaches 70% of its maximum storage capacity and again when it reaches 90% of its maximum storage capacity. The warnings shall alert the Operator for the need to copy and delete IDS files. If the hard drive reaches 99% of its maximum storage capacity, a warning shall be provided and the system will not be allowed to scan until IDS files have been copied and deleted. The system shall provide an option at the Administrator level for auto delete of Non-Suspect files that are over 90 days old.

3.4.6. Integrated Data Set Download

All LS-NII Systems shall be capable of exporting an IDS in its native language to external media via encrypted USB flash drive and encrypted external hard drive.

The IDS shall consist of the data specified within Section 3.3 (see Appendix A).

The consolidated IDS shall encompass all of the data required to perform an offsite scan review and analysis as though the reviewer were stationed at the original data site. The system shall also be capable of creating and exporting a summary scan report for each conveyance scanned – the format of this report shall be PDF. The image data shall be configured in a format that allows the Government to easily transfer the image from one computer containing the image analysis software to another computer containing the image analysis software without the loss of the image analysis functionality.

3.4.7. Radio Equipment

The Contractor shall install Government furnished radio equipment, including wiring harness, mounting bracket, and antenna.

3.4.8. Electrical System (110/120 VAC and 12 VDC)

A. The Government shall approve the wiring diagrams for the 110/120 VAC and 12 VDC systems. Chassis Original Equipment Manufacturer (OEM) furnished electrical system interfaces shall be utilized to the maximum extent possible.

B. All wire routing shall allow for potential configuration changes and additions subsequent to placement of the vehicle in service. (i.e., wire shall be accessible, not hidden inside inaccessible body cavities.)

C. Wire shall be stranded copper, minimum AWG 14 gauge for 15 amp circuits, 12-gauge for 20 amp circuits. All wiring shall be stranded copper with SXL insulation.

D. Cable splices shall only be permitted in junction boxes.

E. All wiring shall be supported with rubber insulated cable clamps at a minimum interval of 18 inches.

F. Wire termination at the breaker box or any junction block shall have a minimum of 6 inches of extra wire to provide for any future terminal or splice replacements.

G. All wiring shall be in accordance with the applicable requirements of SAE J1292.

H. All in-line wiring connections shall utilize locking lip seal type connectors.

I. Wiring shall be routed in a flexible, high temperature (350°- 400° Fahrenheit) loom or conduit.

J. All wiring that is installed in exposed areas and susceptible to contact with personnel shall be encased in the correct type of conduit to prevent shock or electrocution hazards.

K. All fasteners, conduit, and conduit fitting shall not exhibit electrolysis with adjacent materials.

L. All wires and looms shall be routed to assure that they will not become abraded or become damaged by any part of the chassis, engine, or body.

M. Grommet or electrical bulkhead fittings shall be furnished when wires or harnesses pass through walls or structural members.

N. All conduits, looms and wires shall be secured to the body or frame using insulated metal cable straps.

O. Wiring terminals shall be crimpled to assure that they grip both the wire insulation as well as the conductor. Terminal attachment shall comply with SAE J163, and the terminations themselves must comply with SAE J561 (eyelet and spade types), SAE J858a (blade type), or SAE J928 (pin and receptacle type).

P. Circuit protection shall be accomplished by the use of circuit breakers, fuses, or fusible links conforming to SAE specifications.

Q. All switches, relays, connectors, and all other electrical components shall be rated for a minimum of 125% of the maximum current for which the circuit is protected. Environment sealed switches shall control 12- volt lighting systems.

3.4.8.1. 110/120-Voltage AC (VAC) System

The 110/120 VAC electrical system shall include one (1) generator that’s adequately powered to meet or exceed the electrical requirements. The 110/120 VAC system shall include a 110VAC to 12VDC converter to supply 12VDC power for all 12V body systems and lights and charge the vehicle and system battery.

3.4.8.2. Battery Isolator and Battery Boost/Paralleling Circuit

If the system contains two (2) separate 12VDC battery systems (i.e. O.E.M.

vehicle chassis battery and Vendor coachwork battery), then batteries shall be isolated from each other with a battery isolator system. The vehicle alternator and the 12DVC Power Supply/Charger shall charge both sets of batteries through the isolator(s). There shall be momentary battery paralleling circuit that will allow the operator to start the vehicle engine utilizing the Vendor coach battery from the driver’s seat and will allow the operator to start the generator utilizing the vehicle’s battery from the generator control panel.

3.4.8.3. 12 Volt DC System Power Supply/Charger

The 12VDC system shall include a 12VDC power supply and battery charger. The power supply/charger shall be capable of running through the 120VAC generator and shore power. The battery charger shall maintain all batteries without over charging. The power supply shall be capable to continuously run all the 12VDC circuits of the system without power loss.

3.4.8.4. 110/120 VAC Exterior Outlets

Two (2) exterior duplex 110/120 VAC outlets, Certification of Electromechanical Equipment (CEE) 7/7 (CEE 7 standards sheet VII), shall be furnished on the outside of the equipment compartment(s), one on each side. Exterior outlets shall meet minimal US specification grade, flush mounted in exterior rated enclosures rated for wet locations when closed and damp locations when open or closed, with spring-loaded covers.

3.4.8.5. 110/120 VAC Interior Outlets

Two (2) duplex VAC, specification-grade interior outlets shall be provided, two each along the walls of the service body. All outlets shall be duplex 15-amp, 2-pole, three wire, and grounding receptacles. Final location shall be reviewed and approved by the Government at the vehicle design review.

3.4.8.6. Generator

One (1) adequately powered generator (which meets or exceeds electrical requirements) shall be furnished to provide 110/120 VAC power. The generator shall be mounted behind the cab forward of the rear wheels in an exterior compartment or in a location fully accessible for service and maintenance. If the generator is located in an exterior compartment, then the generator control panel shall be located with the generator and a start switch mounted so the generator tray does not need to be extended on the slide to start the generator. The generator controls shall be generator OEM designed to interface with the generator, and contain (at a minimum) an hour meter, voltmeter, and an engine remote start/stop switch. The generator shall be capable of being started with either chassis or deep cycle batteries. Water tight, flexible conduit shall be used at the generator to allow the generator to be fueled with the same fuel type as the vehicle either from a separate fuel tank or from the chassis’ fuel tank through a dedicated fuel pick-up supplied by the vehicle manufacturer that includes check valves to prevent fuel drain-back and is set up to prevent completely draining the main fuel tank.

The generator exhaust shall be routed to the body perimeter. The exhaust piping shall be stainless and shall be designed and installed according to the generator’s manufacturer’s installation requirements. The generator shall be tested to demonstrate its capability to deliver its full rated load at its regulated voltage and frequency.

The generator shall be noise suppressed so it does not exceed noise level requirements of 70dB (decibels), measured from inside the cab running at rated full load.

The generator provides power to the service battery charger, X-ray scanning and imaging equipment, cabin electronics, secondary cabin HVAC, exterior and interior lighting, and to the utility outlets located around the truck.

3.4.8.7. Generator Compartment

If the generator is mounted in an exterior, genset compartment, then the design and installation of the genset shall adhere strictly to the requirements of the genset manufacturer. Exhaust air from the cooling system shall be ducted directly out of the compartment to a location where recirculation to the intake area is minimized The compartment shall be sized and ventilated as necessary to provide the genset manufacturer’s recommended engine and generator cooling air circulation. Mounting of the generator tray shall be from the chassis frame rails. The compartment and door shall be dimensioned to provide adequate access to the genset compartment for servicing and ventilation. One paddle latch lockable mounted flush with the exterior surface shall be provided to secure the generator compartment. The lock shall be keyed alike with those for other exterior doors. The doors shall be hinged from the side with stainless steel piano hinge. A stainless steel Government approved retainer shall be furnished to hold the door open and prevent it from closing. The service body shall be modified by the Contractor as required.

3.4.8.8. Wiring and Circuit Breaker Size

Wire and circuit breaker size shall be as follows:

Minimum Wire Size Maximum Circuit Breaker

#18 AWG 5 AMP Max #16 AWG 10 AMP Max #14 AWG 15 AMP Max #12 AWG 20 AMP Max #10 AWG 30 AMP Max #8 AWG 50 AMP Max

Wiring terminal used in all body 12 V. wiring shall grip the wire insulation as well the conductor. Flexible loom or conduit shall be used in routing all 12 V. wiring.

3.5. Safety Interlocks

The Contractor shall provide safety interlocks such as operator proximity/presence sensors or "dead man switches" for all systems for the protection of pedestrian traffic and untrained personnel.

The Contractor shall provide Emergency Stop Switches for all systems that will enable an operator to manually interrupt the scanning process by disabling the emission of X-rays in an emergency or when there is an unauthorized entry inside the system's Radiation Control Area. The number and locations of the emergency stops shall be as specified in the performance requirements Section

3.3 (see Appendix A). See ANSI N43.3-2008, paragraph 7.5.2, and ANSI N43.14-2011, chapter 6.1, for more details on safety interlocks. The LS-NII systems shall also provide audible and visible (flashing lights) alarms when actively radiating.

3.6. Reliability, Availability and Maintainability Design Requirements

The Contractor shall design the NII system to meet the Reliability, Availability and Maintainability requirements for Inherent Availability (Ai) and Operational Availability (Ao) (see section 4.6). The following are minimum requirements for these systems.

3.6.1. Basic System Reliability Requirements – Inherent Availability (Ai)

The System and all its components shall be designed to operate satisfactorily at a given point in time when used under the stated conditions in the environment described in this statement of work. It excludes logistics time, waiting or administrative downtime, and preventative maintenance downtime. It includes corrective maintenance downtime. Inherent availability is generally derived from analysis of an engineering design and is calculated as the mean time between failure (MTBF) divided by the MTBF plus the mean time to repair (MTTR).

The Inherent System Availability for each serialized system shall be calculated annually using a yearly 365-day for the 10-year lifecycle period with a minimum of 0.9900 by using the following:

Ai = Mean Time Between Failures (MTBF) Mean Time Between Failures (MTBF) + Mean Time to Repair (MTTR)

3.6.1.1. Mean Time Between Failures (MTBF)

The time between failure (TBF) is the time duration from the start of when the system is placed into an ‘operational’ status until suffering a failure. A failure is defined as a malfunction that degrades performance or operational capability, which cannot be tolerated for even a brief period before correction. The total time between failure (TTBF) is the sum of all TBFs for the reporting period. The mean time between failures (MTBF) is calculated as the TTBF divided by the total number of failures for that reporting period. The overall system shall be designed to possess a MTBF of no less than 1000 hours. The Government will calculate the MTBF on an annual basis.

The MTBF for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTBF = Total Time Between Failures (TTBF) Total Number of Failure Incidents

3.6.1.2. Mean Time to Repair (MTTR)

The time to repair (TTR) is the time duration from the start of a repair activity to correct a failure until the system is returned to full performance and capability.

The total time to repair (TTTR) is the sum of all TTRs for the reporting period.

The mean time to repair (MTTR) is calculated as the TTTR divided by the total number of repair activities for that reporting period. The overall system shall be designed to possess a MTTR to achieve the Ai requirement. The Government will calculate the MTTR on an annual basis.

The MTTR for each serialized system shall be calculated annually using a 365-day (8760 hours) reporting period by using the following:

MTTR = Total Time to Repair (TTTR) Total Number of Repair Activities

3.6.1.3. Life Cycle Expectation

The designed operating life of the system shall be no less than 10 years. The system shall be capable of exceeding a normal operating period of 16 hours a day, 6 days a week, 52 weeks a year during an operating life of 10 years and be capable of surge operations consisting of 24 hours a day, 7 days a week for 2 weeks (336 hours).

3.6.2. Predictive Reliability, Availability, and Maintainability Analysis

The Contractor shall provide predictive Obsolescence Analysis of system components and a Component Replacement Analysis in the Contractor’s format at time of proposal, see DID A002. The Component Replacement Analysis shall include:

A. Procedures for the procurement of critical items, to include availability and procurement lead times.

B. Criteria and procedures for the design and redesign of critical items C. Procedures for controlling and monitoring of critical items after manufacture to meet the Ai and Ao requirements (e.g., date coding, traceability, assembly techniques, test requirements, acceptance test requirements, control of sub-Contractors’ and manufacturers’ controls, in-process controls, special handling, and storage requirements).

3.6.3. Classification of Reliability Critical Items

A Critical Item is an identified weak link in a system, has an adverse impact on, or contributes to failures of the system performing its mission, creates potential safety problems, significantly degrades the scanned image quality, or contributes to other areas of high risk to overall system reliability. The Contractor shall classify all LS-NII items as critical if one or more of the following conditions are satisfied, see DID A002:

1. Item represents a significant new development or application.

2. Item has critical failure modes.

3. Item has history indicating need for improvement. A Preplanned

Product Improvement Plan (PPIP) shall be developed and provided by the Contractor for any item with a history of needing improvement in the Contractor’s format.

4. Item has known operating life, limited shelf life, or environmental sensitivity (e.g., vibration, thermal, etc.) that warrants controlled surveillance.

5. Item whose failure can result in the failure of the system and which is not compensated by redundancy or alternate operational procedures.

3.6.4. Corrosion Control

The Contractor shall apply industry best practices, techniques, and measures to prevent and mitigate corrosion of the MRIS NII equipment, such as using corrosion resistant material, properly treating and preparing surfaces, and watertight design and construction.

3.7. Quality Assurance/Quality Control Plan

The Contractor shall provide a Quality Assurance/Quality Control (QA/QC) plan based on the most current and applicable certified ISO processes and procedures. The Contractor’s QA/QC plan shall define key performance measures to include traceable metrics, verifiable performance standards, and address risk identification and mitigation processes used to meet the performance requirements in this Statement of Work.

The Contractor shall provide a QA/QC Plan in accordance with DID A012.

3.8. Testing

The Contractor shall prepare and submit an Acceptance Test Plan (ATP) in accordance with the attached DID A013. The Contractor shall perform inspections and tests necessary to ensure that LS- NII Inspection Systems conforms to CBP approved technical documentation and configuration, to include operational testing of the first article delivery. Using the approved ATP, the Contractor shall conduct verification and validation tests to ensure the system meets all performance requirements and to verify it can be operated as specified in the system’s User Manual (DID A008). Additional contractor testing requirements, if applicable, are identified in the performance Section 3.3 (see Appendix A) of this SOW. The Contractor shall provide the test articles as defined in ANSI N42.46, Chapter 4, to affect this level of testing.

3.8.1. Factory Testing

A CBP team shall conduct a CBP Factory Test (FT) of all mobile units at the Contractor’s facility to verify that the unit is suitable for shipment to its intended POE. The CBP team shall conduct the FT in accordance with a CBP FT Plan for each system. The Contractor shall provide the appropriate test articles for the CBP team to test the technical performance in accordance with the ANSI N42.46- 2008 standards, Chapter 4.

3.8.2. Site Acceptance Testing

A CBP team shall conduct a CBP Site Acceptance Test (SAT) for each unit at its designated location. The CBP team shall conduct the CBP SAT in accordance with a CBP SAT Plan (SATP) for that system. The CBP SAT shall consist of a review of the Contractor’s pre-SAT documentation and Radiation Survey/Leak Test Report (DID A015), plus an inventory and physical inspection of the system, system component operations and tests of the total integrated system against actual targets. The Contractor may be required to provide a portion of the test articles for the SAT as determined by the SAT Plan or the Test Director. This allows for CBP to verify that the system performance has not deviated during transit. The CBP SAT will not occur until the Contractor has trained the SAT team members, no later than 7 days before the SAT.

3.8.3. Discrimination Testing

The CBP team will test the system’s ability to differentiate between organic (low Z) materials and metallic (high Z) materials from each other as a function of shades of gray (black vs. white) when the materials are placed in close proximity to one another. The materials suggested are HDPE and Steel. Twelve scans will be required and 90% of the plates must display the proper shades of gray.

3.9. System Safety Program

The Contractor shall maintain a system safety program that continually identifies all hazards and provides a methodology to either eliminate or control these identified hazards.

3.9.1. Radiation Safety

The contractor shall provide a radiation dose map in the Contractor’s format for the system that shows the personnel safety zone and radiation portal monitor (RPM) interference zone. All products, designs, and specifications provided and all construction and installation activities conducted shall comply with all OSHA regulations, as well as any other appropriate laws, regulations, standards, codes and health and safety guidelines.

3.9.1.1. Radiation Safety Design Review

The Contractor is required to demonstrate, during factory testing, the construction techniques, practices and design of the protective shielding/cabinet interfaces (corner joints, collimator joints, imaging source housing, etc.) and shall be in compliance with ANSI N43.3- 2008, Chapter 7, and N43.14-2011 Chapter 6.0, standards for their system.

The Contractor shall ensure that any movement or shifting that may be associated with a mobile system will not produce or lead to emission leaks from cracks, stress or misalignment of the structures and shielding devices that are either associated with the primary beam containment or scatter containment scheme.

3.9.1.2. Radiological Survey and Report

The Contractor shall be required to conduct a radiological survey prior to system delivery to ensure that radiation emissions are within specified limits. Each system delivered shall be accompanied with a report of the radiological survey performed on the LS-NII unit, signed by the Radiation Safety Officer of the company. This survey will address both the radiation levels that LS-NII Inspection System operators will be exposed to while at their workstations and the level of radiation that is transmitted to the environment as a result of system leakage. The report shall show that by means of an outline drawing the levels of emission/scatter radiation measured, the ‘worst case’ operating conditions (i.e. highest energy level, slowest scan speed, greatest scatter range) and the measurement equipment used. The Contractor shall provide a radiological survey report and a Radiation Survey Report or Leak Test Report as applicable in accordance with the attached DID A015 for each system delivered.

3.9.1.3. Annual Radiation Survey and Report

The Contractor shall perform Radiation Surveys at the time of delivery site prior to site acceptance and annually thereafter for the systems that contain radiation emitting devices (X-Ray systems). The X-ray systems shall be in compliance with 21 CFR 1020.31, Radiographic Equipment, (a) Control and indication of technique factors (energy, time, and amperage) and (b) Reproducibility (ability of device to produce consistent radiation doses). The Contractor shall provide a radiation survey report to the NII Operations Center within 48 hours of completion. A representative/sample Radiation Survey Report shall be submitted with the proposal and each Site Acceptance Test in accordance with DID A015.

3.9.2. Safety Plan

In accordance with 29 CFR 1910.120, Occupational Safety and Health Standards (OSHA), Appendix D, paragraph 8, the Contractor shall develop and implement a safety plan. The contractor’s safety plan in the Contractor’s format shall also continually identify all safety hazards and provide a methodology to mitigate or eliminate each of the identified hazards, see DID A023.

All products, designs and specifications provided and all construction and installation activities conducted shall comply with all OSHA, General Services Administration (GSA) and Nuclear Regulatory Commission (NRC) regulations, as well…