HSTS04-12-R-CT2011 AIT 2 RFP - Amendment 0002.pdf

HSTS04-12-R-CT2011

Office of Acquisition

Advanced Imaging Technology – Second Generation (AIT-2) Request for Proposal

SECTION B – SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 IDENTIFICATION OF SUPPLIES/SERVICES; PROCUREMENT TRACKS

The contractor shall provide supplies and services necessary to design, manufacture, test, and deliver second-generation Advanced Imaging Technology, hereinafter referred to as the AIT-2 system. The AIT- 2 system includes Automatic Target Recognition (ATR) capability that eliminates the need for images of individuals from being presented and reviewed or interpreted by an Image Operator (IO).

There are two specific procurement tracks for AIT-2: Reduced Size Systems and Full Size Systems.

B.2 TYPE OF CONTRACT

The Transportation Security Administration (“TSA” or “Government”) contemplates the award of a single Indefinite Delivery/Indefinite Quantity (IDIQ) contract(s) with firm fixed price (FFP) and time and materials (T&M) Contract Line Item Numbers (CLINs) for AIT-2 Reduced Sized Systems and/or AIT-2 Full Sized Systems. However, the TSA reserves the right to make multiple awards if multiple awards are in the best interest of the government. Also, the Government, in its sole discretion, will issue either firm fixed price (FFP), time and materials (T&M) or hybrid (i.e., FFP and T&M) delivery orders (DOs). The order type shall be determined at the time of order.

Except as stated in the Statement of Work (SOW), the contractor shall furnish all equipment, management, supervision, personnel, material, supplies and services necessary for performance of this contract.

B.3 INDEFINITE QUANTITY CONTRACT – MINIMUM AND MAXIMUM AMOUNT

During the period of performance of this contract (specified in Section F.2 below), the Government may issue one or more orders. The maximum contract value for all orders shall not exceed $245,000,000 (inclusive of all equipment and service CLINs), unless the contract is modified by the Contracting Officer. The Government is not obligated to order more than the minimum stated amount under this contract.

The minimum guarantee for the IDIQ contract shall be two (2) AIT-2 Low Rate Initial Production (LRIP) Systems (subCLIN 0001A). The minimum guarantee will be awarded as a separate delivery order upon contract award.

B.4 CONTRACT LINE ITEM NUMBERS (CLINS)

CLIN TITLE TYPE UNIT

UNIT

PRICE

0001 AIT-2 Systems NSP NSP NSP

0001A AIT LRIP System (QT&E) FFP EA

0001B AIT LRIP System (OT&E) FFP EA

0001C* AIT Full Production FFP EA

0002 Recurring Support NSP NSP NSP

0002A AIT LRIP system, 6 months FFP Lot

0002B AIT LRIP system, 6 months FFP Lot

0002C AIT Full Production, Year 2 FFP Lot

0002D AIT Full Production, Year 3 FFP Lot

0002E AIT Full Production, Year 4 FFP Lot

0002F AIT Full Production, Year 5 FFP Lot

0003 Corrective and Preventative Maintenance NSP NSP NSP

0003A Maintenance, Year 1 FFP EA

0003B Maintenance, Year 2 FFP EA

0003C Maintenance, Year 3 FFP EA

0003D Maintenance, Year 4 FFP EA

0003E Maintenance, Year 5 FFP EA

0004 Excepted Maintenance FFP/T&M Lot

0005 Engineering Services FFP/T&M Lot

0006 Training NSP NSP NSP

0006A Operator Training FFP EA

0006B Instructor Training FFP EA

0006C Maintenance Training FFP EA

0007 Technical Documentation NSP NSP NSP

0007A Technical Data Package FFP EA

* The same price applies to all units within a given delivery order, depending on the quantity tier.

B.4.1 TIME AND MATERIAL (T&M) CONTRACT LINE ITEM NUMBERS (CLINS 0004

AND 0005)

The contractor shall, when so ordered by the Government under CLINs 0004 and 0005 provide the necessary management, labor, facilities, materials and supplies to perform tasks as stated in individual delivery orders (DOs) within the scope of the Section C, Statement of Work, in accordance with the fixed, fully burdened labor rates, as well as the minimum labor qualifications described in Attachment J.7. These labor rates shall be fully-burdened to include all direct and indirect costs and profit.

Labor Category Labor Rate-

Year 1 Labor Rate- Year 2

Labor Rate- Year 3

Labor Rate- Year 4

Labor Rate- Year 5

Program Manager

Systems Engineer

Engineering Support

Application Programmer

Manufacturing

0007B Operator Manual FFP EA

0007C Installation/Integration Manual FFP EA

0007D Maintenance Manual FFP EA

0008 Installation NSP NSP NSP

0008A Zone A FFP EA

0008B Zone B FFP EA

0008C Zone C FFP EA

0008D Zone D FFP EA

0008E Zone E FFP EA

0008F Zone F FFP EA

0008G Zone G FFP EA

0008H Zone H FFP EA

0008I Zone I FFP EA

0008J Zone J FFP EA

0008K Zone K FFP EA

0008L Zone L FFP EA

0008M Zone M FFP EA

0008N Zone N FFP EA

0008O Zone O FFP EA

Engineer Manufacturing Technician

System Test Engineer

Quality Assurance Engineer

Quality Assurance Analyst

IT Test Engineer

Training Specialist

Maintenance and Support Technician

Deployment Technician

Customer Service Tech Support

B.4.2 INSTALLATION (CLIN 0008)

The price for CLIN 0008 includes installation of systems under CLIN 0001 and all incidental expenses (e.g., transportation, lodging, meals and incidentals, etc.) by zone:

CLIN0008A – Zone A Maine, New Hampshire, Vermont, Rhode Island, Connecticut, Massachusetts CLIN0008B – Zone B Pennsylvania, New York, New Jersey, Delaware, Maryland CLIN0008C – Zone C District of Columbia, Virginia, North Carolina, South Carolina, Georgia CLIN 0008D – Zone D Florida CLIN 0008E – Zone E Indiana, Ohio, West Virginia, Michigan CLIN 0008F- Zone F North Dakota, South Dakota, Nebraska, Minnesota, Iowa, Illinois, Wisconsin CLIN 0008G – Zone G Kentucky, Tennessee, Kansas, Missouri, Arkansas, Mississippi, Alabama CLIN 0008H – Zone H Texas, Louisiana, Oklahoma CLIN 0008J – Zone I Washington, Oregon, Nevada CLIN 0008K – Zone J Idaho, Montana, Wyoming, Utah, Colorado CLIN 0008L – Zone K California CLIN 0008M – Zone L New Mexico, Arizona CLIN 0008N- Zone M Puerto Rico, Virgin Islands, Caribbean CLIN 0008O- Zone N

Samoa, Guam, Saipan CLIN 0008P- Zone O Hawaii, Alaska

B.4.3 TRAVEL (CLIN 0005)

Costs for transportation, lodging, meals, and incidental expenses incident to performance of services under CLINs 0004 and 0005 will be reimbursed under CLIN 0005 in accordance with the version of the Federal Travel Regulations (FTR) current at date of order placement. In case of conflict with the below terms, the FTR shall take precedence. The reimbursement for those costs shall be as follows:

Travel subsistence reimbursements will be authorized under the rates and conditions under the

FTR.

Per Diem will be reimbursed, at actual costs, not to exceed the per diem rates set forth in the FTR.

Per Diem shall be one-half of the Meals and Incidental Expenses (M&IE) rate for the first and last day of travel as well as locations of temporary duty assignment when travel is more than 10 hours, but less than 24 hours, and when no lodging is required. If more than one temporary duty point is involved, the allowance of one-half of the M&IE rate is prescribed for the location where the majority of the time is spent performing official business. The per diem allowance shall not be allowed when the period of official travel is 10 hours or less during the same calendar day.

Airfare costs in excess of the lowest rate available offered during normal business hours are not reimbursable.

All reimbursable contractor travel shall be authorized through the issuance of a task order executed by the Contracting Officer.

Local Travel Costs will not be reimbursed under the following circumstances:

Travel at Government installations where Government transportation is available;

Travel performed for personal convenience/errands, including commuting to and from work; and Travel costs incurred in the replacement of personnel when such replacement is accomplished for the contractor’s or employee’s convenience.

The FTR can be found online, including at the following address:

http://www.gsa.gov/portal/ext/public/site/FTR/file/FTRTOC.html/category/21865/hostUri/portal.

Except for CLINs 0004 and 0005, all other CLINs shall include travel and no separate reimbursement will be made.

B.5.1 RMA DISINCENTIVES (APPLICABLE TO CLIN 0003)

The RMA performance of AIT-2 systems is critical to TSA. Therefore, and in accordance with FAR 16.402-2, a negative performance incentive will be imposed to ensure that the Contractor meets the RMA requirements. TSA will adjust the final value of the Corrective and Preventive Maintenance CLIN (CLIN 0003) based on the information described in the table below. Two years after a said Delivery Order (DO) is placed, and based on the population of AIT-2 systems in operation (i.e., operating in an airport environment) limited to said delivery order, TSA will calculate the AIT-2 average RMA data for each AIT-2 system, weighted based on the number of unit-months each AIT-2 system is in operation over the two year period. The final adjusted

CLIN value shall be effected via a contract modification executed unilaterally at the end of said two-year period.

B.5.2 Disincentive for Failing to Meet Threshold

Mean Down Time (MDT) ≤15 hours: The following shows the amount (in percentage terms) of the downward adjustment of the CLIN 0003 price if the contractor is not able to meet the threshold.

>15 hours to ≤17 hours: 5% >17 hours: 10%

Mean Time Between Critical Failure (MTBCF) ≥1000 hours: The following shows the amount (in percentage terms) of the downward adjustment of the CLIN 0003 price if the contractor is not able to meet the threshold.

<1,000 to ≥900 hours: 5% <900 hours: 10%

Operational Availability (AO) ≥98.5%: The following shows the amount (in percentage terms) of the downward adjustment of the CLIN 0003 price if the contractor is not able to meet the threshold.

<98.5% to ≥97%: 5% <97% : 10%

The total maximum downward adjustment is 30% of the CLIN 0003 price.

SECTION C – STATEMENT OF WORK

1.0 AIT-2 SYSTEMS (CLIN 0001)

1.1 Background

1.2 Applicable Documents

1.3 Government Documents

1.4 Order of Precedence

1.5 Requirements

1.6 DD-254

1.7 Security Practices

1.8 Security Breach/Incident Report

1.9 Advanced Imaging Technology LRIP Systems for QT&E (CLIN 0001A)

1.10 Advanced Imaging Technology LRIP Systems for OT&E (CLIN 0001B)

1.11 Qualification Data Package

1.12 Post-Award Conference

1.13 Requirements Management

1.14 Integrated Support Plan

1.15 Continuity of Operations Plan

1.16 Risk Management

1.17 Quality Assurance

1.18 Safety Standards and Code Requirements

1.19 Special/Custom Tooling for Maintenance

1.20 Test And Evaluation Program

1.20.1 General Test Program Requirements

1.20.2 Testing Process

1.20.3 Test Readiness Notification/Review

1.21 First Article Test Plan, Procedures, and Reports

1.22 Factory Acceptance Test Procedures, and Reports

1.23 Site Acceptance Test Procedures, and Reports

1.24 Configuration Audits

1.24.1 Functional Configuration Audit

1.24.2 Physical Configuration Audit

1.25 Decommissioning Equipment

2.0 RECURRING SUPPORT (CLIN 0002)

2.1 Program Management Organization

2.2 Program Management Reviews

2.3 Technical Interchange Meetings

2.4 Security Equipment Database

2.5 Configuration Management

2.5.1 Configuration Baselines

2.5.2 Configuration Identification

2.5.3 Configuration Control

2.5.4 Developmental Engineering Proposal (DEP), Engineering Change Proposal (ECP), Request for Deviation (RFD), Request for Waiver (RFW)

2.5.5 Configuration Status Accounting

3.0 CORRECTIVE AND PREVENTIVE MAINTENANCE (CLIN 0003)

3.1 Maintenance Implementation Plan

3.2 Corrective Maintenance

3.3 Preventive Maintenance

3.4 Reliability, Maintainability, and Availability (RMA)

3.4.1 Reliability

3.4.2 Maintainability

3.4.3 Availability

3.5 Field Data Reporting System Data

4.0 EXCEPTED MAINTENANCE (CLIN 0004)

4.1 Failure Mode Identifiers

4.2 Maintenance Cost Reporting

5.0 ENGINEERING SUPPORT SERVICES (CLIN 0005)

5.1 Equipment Movements

6.0 TRAINING (CLIN 0006)

6.1 Operator Training (CLIN 0006A)

6.2 Instructor Training (CLIN 0006B)

6.3 Maintenance Training (CLIN 0006C)

7.0 TECHNICAL DOCUMENTATION (CLIN 0007)

7.1 Technical Data Package (CLIN 0007A)

7.2 Technical Manuals

7.2.1 Operations Manual (CLIN 0007B)

7.2.2 Installation/Integration Manual (CLIN 0007C)

7.2.3 Maintenance Manual(CLIN 0007D)

8.0 TRAVEL, SHIPPING, AND INSTALLATION (CLIN 0008)

8.1 Equipment Shipping

8.1.1 Asset Tracking………………………………………………………………………….31

8.2 Site Preparation

8.3 Site Coordination

8.4 Equipment Installation

8.5 Government Site Manager/Representative

8.6 Inventory Reporting

ACRONYM LIST

1.0 AIT-2 SYSTEMS (CLIN 0001)

This Statement of Work (SOW) defines the requirements for the design, manufacture, test, test support and delivery of the second-generation Advanced Imaging Technology, hereinafter referred to as the AIT- 2 system. The AIT-2 system includes Automated Target Recognition (ATR) capability that eliminates the need for images of individuals to be reviewed by an Image Operator (IO). AIT-2 will have enhanced threat detection capabilities and increased passenger throughput. This SOW will reflect two configuration options for development, either a full size system or a reduced size system. Reduced-sized systems will be offered as an alternative to full-size systems to help reduce the AIT-2s overall footprint for smaller checkpoint configurations. Tier II is the minimum requirement for AIT-2 systems.

The Contractor shall provide AIT-2 systems in accordance with this SOW and the requirements specified in the AIT-2 Functional Requirements Document (FRD).

The AIT-2 systems shall include two Low Rate Initial Production (LRIP) phases, and Full Rate Production (FRP). The first full rate production system shall be used for first article testing. This system shall be maintained under strict Configuration Management (CM) and will be designated as the “Gold Standard” for the FRP.

1.1 Background

The Transportation Security Administration (TSA) is charged with the mission of protecting the nation’s transportation systems to ensure freedom of movement for people and commerce. The mission of TSA’s Office of Security Capabilities (OSC) is to develop and implement the best procedures and technologies that deter, prevent, and/or render ineffective any attempt to sabotage commerce and transportation.

AIT-2 provides Transportation Security Officers (TSOs) additional threat detection capabilities to locate potential threats concealed from view on a passenger. The system displays metallic and non-metallic anomalies such as weapons, Improvised Explosive Device (IED) components and plastic threats.

1.2 Applicable Documents

The following specifications, handbooks, orders, standards, and drawings form a part of this SOW and are applicable to the extent specified herein. The latest version of these documents as of the contract date shall apply, unless a specific date for the document is specified below.

1.3 Government Documents

Reference Document Location Section

TSA/Office of Security Capabilities

(OSC)

Functional Requirements Document for a Second Generation Advanced Imaging

AIT-2 Functional Requirements Document

Available upon request 1.0, 1.5, 1.9, 1.10, 1.11, 1.13, 1.20.1, 3.5

Technology System for Checkpoint Operations March 08, 2012 Version 2.1

DD Form 254 Contract Security Classification Specification http://www.dtic.mil/whs/directives

1.6, 1.7

49 CFR Parts 15 and 1520

Protection of Sensitive Security Information http://ecfr.gpoaccess.gov 1.7

Department of Homeland Security

(DHS)

Management Directive

(MD) 11042.1

Safeguarding Sensitive But Unclassified (For Official Use Only) Information http://www.dhs.gov/xfoia/gc_12545015890 35.shtm

1.7

DHS MD

11044

Protection of Classified National Security Information Classification Management http://www.dhs.gov/xfoia/gc_12545015890 35.shtm

1.7

Department of Homeland Security, Explosives Detection Systems Information and Data, Security Classification Guide, February 17, Security Classification Guide Available upon request 1.7

QMP Qualification Management Plan Available upon request 1.11

ANSI/ISO/AS

Q Q9001-2009

Quality management Systems Requirements Standard http://www.qcss.com/ANSI-ISO-ASQ- 9000-Standards/c12/p46/ANSI-ISO-ASQ- Q-9001-2009-Standard/product_info.html

1.17

29 Code of Federal Regulations

(CFR) 1910.7

Definition and Requirements for a Nationally Recognized Testing Laboratory http://ecfr.gpoaccess.gov 1.18

29 CFR, Part 1910.1096

January 1, Occupational Safety and Health Standards: Ionizing Radiation, http://ecfr.gpoaccess.gov

1.18

(ANSI)

N43.17-2009

August 2009

American National Standard Radiation Safety for Personnel Security Screening Systems Using X-Ray or Gamma Radiation http://hps.org/hpssc/index.html

Title 21 CFR 1002.20

Reporting of accidental radiation occurrences http://ecfr.gpoaccess.gov

IEEE C95.1-

Safety Levels with Respect to Human Exposure to Radio Frequency Electromagnetic Fields, 3 KHz to 300 GHz, revision of C95.1-1991 (Active) http://standards.ieee.org/getieee/C95/downl oad/C95.1-2005.pdf

ICNIRP

Guideline

April 1998

Guidelines for Limiting Exposure to Time-Varying Electric, Magnetic, and Electromagnetic Fields (Up to 300 GHz) Health Physics 74 (4): 494-522 http://www.icnirp.de/documents/emfgdl.pdf

Title 21 CFR 1003.10

Discovery of defect or failure of compliance by manufacturer;

notice requirements.

http://ecfr.gpoaccess.gov 1.18

OST-

Configuration Management Plan (Rev C)

Transportation Security Administration Office of Security Technology Configuration Management Plan, 14 June 2011

Available upon request 1.24, 1.24.1, 2.4.2, 2.5.3, 2.5.5

TSA Configuration Management Requirements, 22 Oct 2008

Available upon request 1.24, 1.24.1, 2.4.2, 2.5.3, 2.5.5

DD-1149 Requisition And Invoice/Shipping Document, for

DD 1149

http://www.dtic.mil/whs/directives/infomgt/ forms/eforms/dd1149.pdf

1.25, 8.0

TSA Reliability, Maintainability, Availability (RMA) Guide for the Office of Security Technology (Version 1.0)

Section J of Request for Proposal 3.4

Operational and Technical Training OTT Training Standards, Version 1, 28 Sept

Available upon request 6.0

MIL-STD-

31000C Department Of Defense Standard Practice:

Technical Data Packages (TDP) (05 Nov 2009)

Technical Data Packages Detail Specification http://dodssp.daps.dla.mil/

7.1

29 CFR

1910.1200

Hazard Communication Standard http://ecfr.gpoaccess.gov 7.2, 8.2

Federal Aviation Administration

(FAA)-D-

2494/B

14 March 1984

Commercial Instruction Books https://faaco.faa.gov/attachments/FAA-D- 2494.pdf

7.2

ASTM-D-3951 Standard Practice for Commercial Packaging http://www.astm.org/Standards/D3951.htm

8.0, 8.1

Federal Standard No.

Material Safety Data, Transportation Data and Disposal Data for Hazardous Materials Furnished to Government Activities

General Services Administration Specifications Unit (3FBP-W) 7th & D Sts. SW Washington, DC 20407

8.2

TSA Form 251 Vendor Shipping and Receiving Report, Available upon request 8.2

TSA Form 251-1

Vendor Shipping and Receiving Report Extension, Available upon request 8.2

1.4 Order of Precedence

In the event of conflict between the text in this SOW and the references cited, the text of this SOW takes precedence. Nothing in this SOW, however, supersedes applicable laws and regulations unless there is a specific written exemption.

1.5 Requirements

The Contractor shall provide program management, systems engineering management, quality assurance, configuration management, test and evaluation, training, preventive maintenance, corrective maintenance, and integrated logistics support in accordance with this SOW and all requirements in the FRD. In addition, the Contractor shall provide any materials and support required to test, deliver, and install AIT-2 systems.

Data Items Descriptions (DIDs) referenced by their Contract Data Requirements List (CDRL) titles are to be developed in accordance with the CDRL of the same name. All data deliverables shall be prepared or updated and delivered in accordance with the corresponding CDRL items specified under the SOW requirement.

The Contractor shall perform in accordance with deliverables that pertain to this SOW and as approved by the Government. All reference to the “Government” in this SOW shall mean “by authority of the Contracting Officer or designee.” All digital media submitted to the Government in response to this SOW shall be compatible with the Microsoft Office suite of products. Acceptable digital media are electronic mail, Compact Disc-Read Only Memory (CD-ROM) or Digital Versatile Disc (DVD).

1.6 DD-254

The Contractor requires access to information, which would be considered sensitive and/or classified in nature in order to support the TSA. The Contractor must also have access to classified Detection Standards in order to develop detection algorithms for the AIT-2 system.

Contractors must have a facility clearance (FCL) at the Secret level and a DD Form 254 from the Government. When applicable, contractors must provide any information requested by the Government to prepare its DD Form 254 and must follow any instructions contained therein after issuance. The DD- 254 Form must be completed, signed, and approved within 30 days after Contract award, unless requested sooner by the CO.

1.7 Security Practices

The Contractor shall develop, apply, and maintain effective security practices in accordance with the requirements contained in the following documents:

• Protection of Sensitive Security Information, 49 CFR Parts 15 and 1520

• Contract Security Classification Specification, DD Form 254

• Safeguarding Sensitive But Unclassified (For Official Use Only) Information, DHS

MD11042.1

• Protection of Classified National Security Information Classification Management, DHSMD

11044

• Department of Homeland Security, Explosives Detection Systems Information and Data, Security Classification Guide, February 17, 2005

The Contractor shall prepare and deliver the Facility Security Certificate in accordance with the referenced CDRLs.

CDRL C001 – Facility Security Certificate

1.8 Security Breach/Incident Report

The Contractor shall document, through the Physical and Communications Security Breach/Incident Report, incidents, which include, but are not limited to:

1. Actual or suspected unauthorized attempts to penetrate an Imaging Technology through remote functions

2. Actual or suspected unauthorized attempts to penetrate the upgraded Imaging Technology through the Contractor’s Remote Maintenance Monitoring Facility or Contractor’s support facility

3. Actual or suspected unauthorized penetration of the Contractor’s upgraded Imaging Technology support facility or Remote Maintenance Monitoring facility(ies)

4. Actual or suspected attempt to subvert the Imaging Technology

The Contractor shall prepare and deliver the Physical and Communications Security Breach/Incident Report in accordance with the referenced CDRL.

CDRL C002 – Physical and Communications Security Breach/Incident Report

1.9 Advanced Imaging Technology LRIP Systems for QT&E (CLIN 0001A)

The Contractor shall provide LRIP AIT-2 systems, software, and an AIT-2 emulator for qualification testing. This testing will be performed to determine the extent to which the Contractor’s system meets the requirements of the AIT-2 FRD.

Qualification testing will take place at the Transportation Security Laboratory (TSL) and/or the Transportation Security Integration Facility (TSIF)

All LRIP systems shall conform to the developmental baseline that will be established after the FCA and PCA are conducted on the first LRIP system.

An emulator is a hardware and/or software deliverable that allows TSA to test the AIT-2 executable algorithm using previously collected image data vice live mock passengers. The AIT-2 emulator will be used to test the baseline, and any future upgrades of the executable algorithms for AIT-2.

Software shall include both executable and test mode versions.

Further explanation of the AIT-2 emulator and software requirements can be found in the Government Qualification Management Plan (QMP) which is further referenced in Section 1.11 below.

1.10 Advanced Imaging Technology LRIP Systems for OT&E (CLIN 0001B)

The Contractor shall provide LRIP AIT-2 systems for operational testing. This testing will be performed to determine the extent to which the Contractor’s system meets the requirements of the AIT-2 FRD within the operational environment.

Operational testing will take place at TSA selected airports for approximately forty-five days.

All LRIP systems shall conform to the developmental Product Baseline (PBL) that will be established after the FCA and PCA are conducted on the first LRIP system.

1.11 Qualification Data Package

The Contractor shall develop and submit a Qualification Data Package (QDP) based on the Government Qualification Management Plan (QMP). The information contained in the QDP shall mirror and further substantiate the information submitted by the Contractor in the AIT-2 Certification Checklist (Attachment J.6). All material must be submitted in English and in a manner that is clear, concise, and unambiguous.

This includes identification of the specific AIT-2 tested by the Contractor, a test plan detailing the approach to be used during the Contractor and independent third party data collection, test data, and analysis results. The QDP must include all information and material necessary for the TSA to confirm that the AIT-2 meets the requirements of the FRD.

The Contractor shall prepare and deliver a Qualification Data Package for each candidate AIT-2 system in accordance with the referenced CDRL:

CDRL E001 – Qualification Data Package

1.12 Post-Award Conference

A post-award conference will be conducted at a site specified by the Government, within thirty (30) calendar days after contract award. The TSA will designate Government conference attendees and will identify any unique conference support requirements. The Government will develop an agenda and the Contractor shall provide the minutes for the conference. The Contractor shall brief proposed Failure Mode Indicators (FMI) codes at the Post-Award Conference and shall document them in the Maintenance Implementation Plan (CDRL L012)

The Contractor shall prepare and deliver Meeting Minutes in accordance with the referenced CDRL:

CDRL E015 – Meeting Minutes

1.13 Requirements Management

The Contractor shall document and manage all AIT-2 requirements specified in the FRD. The Contractor shall include requirements traceability in all design and test documents. The requirements traceability report shall be updated as necessary throughout the life of the contract. The requirements traceability report shall include, but is not limited to, a list of each requirement to be verified in each test with a reference to the appropriate requirement paragraph. The Contractor requirements traceability report shall include all requirements and system performance characteristics, including those explicitly stated in the

AIT-2 FRD.

The Contractor shall prepare and deliver the Requirements Traceability Report in accordance with the referenced CDRL.

CDRL E002 – Requirements Traceability Report

1.14 Integrated Support Plan

The Contractor shall document and describe the established logistical elements in the Integrated Support Plan (ISP). The ISP shall address maintenance philosophy, maintenance structure, lifecycle management (including plans for leveraging the Security Technology Integrated Program (STIP) to implement remote maintenance), metrics management, cost control, interface with functional groups for communicating maintenance requirements, feedback for improvement and input for lessons learned. The ISP shall document the logistics support plan for AIT-2 during the LRIP process, qualification and operational testing, through warranty of FRP systems, and include discussion of transitioning support to a maintenance service provider after warranty.

The Contractor shall prepare and deliver the ISP in accordance with the referenced CDRL.

CDRL L001 – Integrated Support Plan

1.15 Continuity of Operations Plan

The Contractor shall establish, document, implement and maintain a Continuity of Operations Plan (COOP) for all activities performed under this contract. The COOP shall describe the backup and recovery capabilities for maintenance communications and stored maintenance data, and describe the interruption/disaster notification procedures to TSA. An interruption of the Contractor’s ability to communicate maintenance notifications and/or actions, etc., will add significantly to the total risk of the SE. The Contractor shall consider its impact on the overall risk assessment of the SE when developing and producing the COOP.

The Contractor shall prepare and deliver the COOP in accordance with the referenced CDRL.

CDRL L002 – Continuity of Operation Plan

1.16 Risk Management

The Contractor shall identify cost, schedule, and technical risks, and describe how it will effectively manage these risks throughout the performance of this Contract. The Contractor shall describe its risk management program in the Program Management Plan (CDRL E013).

The Contractor shall quantify risks with respect to the impact on integration, installation, performance, technical parameters, schedule, and cost. The Contractor shall identify risks and assign a priority for developing a recommended course of action for resolution. The Contractor shall develop and maintain a list identifying, analyzing, and classifying program risks. Program risks shall be classified as low, medium, or high priority. The Contractor shall conduct risk mitigation planning for risks considered medium or high priority. The Contractor shall provide the status of mitigation actions for identified program risks at PMRs in the PSR (CDRL E016).

1.17 Quality Assurance

The Contractor shall establish, implement, and maintain a Quality Assurance Management system in accordance with ANSI/ISO/ASQ Q9001-2009 and shall document this management system as part of the Program Management Plan (CDRL E013), as a means of ensuring compliance with all requirements of the Contract. The Contractor shall flow down all applicable requirements to sub-contractors and suppliers.

The Contractor shall require that sub-contractors and suppliers have an appropriate documented quality system that controls the quality of the services and supplies provided.

1.18 Safety Standards and Code Requirements

The Contractor shall ensure that all work performed is in compliance with all applicable local, state and federal standards, codes and regulations. The Contractor shall be responsible for obtaining any required licenses, permits, approvals and/or authorizations for all work performed. This includes the handling, storage, and disposal of hazardous materials.

The Contractor shall certify that all work performed is in compliance with the Operational Safety and Health Administration (OSHA) 29 CFR 1910.1096 and 29 CFR-1910.7 to ensure safety of personnel during installation, operation, maintenance, and repair or interchanging of a complete equipment assembly or component parts. If the AIT-2 emits ionizing radiation, the contractor shall comply with the General Use System requirements defined in ANSI/HPS N43.17-2009. This includes, but is not limited to:

Radiation surveys shall be performed in conjunction with ANSI N43.17.2009 procedures; except that all surveys shall be performed and submitted to the TSA at least once every six months for the first two years of warranty coverage, as opposed to the ANSI requirement of once every 12 months. The “final” radiation survey performed for the two year warranty period shall be conducted within one month of the end of said warranty period for each individual system.

The survey form shall include all requirements specified in ANSI N43.17.2009 and be approved by the TSA COTR.

The Contractor shall apply an approved radiation sticker to the AIT-2 system certifying successful completion of the survey.

Any errors in reports shall be corrected by the RSO and must be provided to the AIT-2 COTR accompanied by signed letter explaining errors and corrective actions.

The contractor shall provide its technicians adequate training and certification to conduct radiation surveys. All training certifications shall be provided to the AIT-2 COTR o TSA reserves the right to audit radiation survey training classes.

Surveys shall be conducted in accordance with the electronic product radiation control provisions of the Federal Food Drug and Cosmetic Act (Act) and related regulations require electronic product manufacturers to investigate and report any Accidental Radiation Occurrence in accordance with Title 21 CFR 1002.20 to TSA and the FDA and to immediately notify TSA and the FDA in the event that a system defect is identified in accordance with Title 21 CFR 1003.10.

Upon unsuccessful radiation survey, notification must be provided to the AIT-2 COTR, Project Lead and CO within 1 hour of survey completion.

The Contractor shall provide the AIT-2 COTR a list of radiation certified systems.

If applicable, the Contractor shall prepare and deliver the Radiation Survey Submittal, Radiation Survey Corrections, Radiation Training Certification List, and the List of Radiation Certified Systems in accordance with the referenced CDRLs:

CDRL E003 – Radiation Survey Submittal CDRL E004 – Radiation Survey Corrections CDRL E005 – Radiation Training Certification List CDRL E006 – List of Radiation Certified Units

1.19 Special/Custom Tooling for Maintenance

If special tools, custom tools, or otherwise not commercially available tools and test equipment are required, they shall be provided as part of a maintenance tool kit. This maintenance tool kit shall be provided with each AIT-2 system to the Government in working order at no additional cost at the end of the two-year warranty period.

1.20 Test And Evaluation Program

The Contractor Shall:

1. Plan and conduct Contractor tests

2. Support Government conducted testing, audits, and continuous assessment

1.20.1 General Test Program Requirements

The Contractor’s responsibilities for the test program shall include the following activities:

1. Conduct and/or support those acceptance test program activities described within this SOW, the Contract (Section E),and the AIT-2 FRD.

2. Develop a Master Test Plan (MTP), for Government Approval, to describe the test programs for the AIT-2 system. The MTP shall describe the Contractor’s tests and include detailed schedules for conduct of each test. The MTP shall identify requirements to be verified by each test, with general descriptions of methods to be used for verification. This information shall be included in the Requirements Traceability Report (CDRL E002).

3. Conduct, or support the Government in conducting, a Test Readiness Review (TRR) prior to performing any formal test.

4. Notify the Government at least seven (7) business days prior to commencement of all Contractor-conducted acceptance tests, and permit the Government to witness the tests.

5. Conduct tests according to Government-approved test plans, test cases, and test procedures.

Authorized Government representatives may witness tests.

6. If requested by the Government, provide copies of all original data collected during a Contractor-conducted test within fifteen (15) days after the completion of the test.

7. In addition, the Contractor must provide the test team access to data logging capabilities of the AIT-2 system and simulators, and must provide a means for purging the data logger records after the testing has been completed.

8. Develop FAT&E Plans and Procedures for the AIT-2 system (Section 1.21). The FAT&E Plans and Procedures shall identify by serial number, production run number, or equal, the system designated for FAT&E. The FAT&E Plans and Procedures shall be provided for Government approval prior to conduction the FAT&E (CDRL E009).

9. Conduct FAT&E on the first full rate production AIT-2 system according to the Government approved plans and procedures.

10. Develop Factory Acceptance Test (FAT) Procedures for the AIT-2 system (Section 1.22). The FAT Procedures (CDRL E011) shall be provided for Government approval prior to conducting a

FAT.

11. Conduct FAT on each AIT-2 system prior to delivery, and submit reports to the Government COTR with copy to the CO.

12. Develop Site Acceptance Test (SAT) Procedures for the AIT-2 system (Section 1.23). The SAT Procedures (CDRL E012) shall be provided for Government approval at the same time the FAT Procedures are submitted.

13. Conduct SAT at the site location for each AIT-2 system.

The Contractor shall prepare and deliver the Master Test Plan in accordance with the referenced CDRLs.

CDRL E007 – Master Test Plan

1.20.2 Testing Process

The Contractor shall be available to be called upon for technical and maintenance support during all Government-led tests, as required.

1.20.3 Test Readiness Notification/Review

The Contractor shall provide the Government a Test Readiness Notification (TRN) at least seven (7) calendar days prior to conduct of each formal test.

The Contractor shall prepare and deliver Test Readiness Notice in accordance with the referenced CDRL:

CDRL E008 – Test Readiness Notice

1.21 First Article Test Plan, Procedures, and Reports

The first AIT-2 FRP system, or the system designated as the “Gold Standard” shall receive a First Article Test and Evaluation (FAT&E). The Contractor shall ensure that the test procedures indicate traceable paths to the approved requirements traceability report. The FAT&E will be witnessed by Government and/or Government-designated representatives. The AIT-2 FRP Product Baseline (PBL) shall be established after successful completion of the associated First Article Test and Evaluation (FAT&E), Functional Configuration Audit (FCA), and Physical Configuration Audit (PCA).

The Contractor shall prepare and deliver the AIT-2 First Article Test and Evaluation Test Plan, Procedures, and Reports in accordance with referenced CDRLs:

CDRL E009 – First Article Test and Evaluation Plan, Procedures, and Reports CDRL E010 – Quick Look Report

1.22 Factory Acceptance Test Procedures, and Reports

All AIT-2 systems shall each receive Factory Acceptance Tests (FAT). The FAT will be witnessed by Government and/or Government-designated representatives.

The Contractor shall prepare and deliver AIT-2 Factory Acceptance Test Procedures and Reports in accordance with the referenced CDRL:

CDRL E011 – Factory Acceptance Procedures and Reports

1.23 Site Acceptance Test Procedures, and Reports

All AIT-2 systems shall each receive Site Acceptance Tests (SAT).

The SAT will confirm that the AIT-2 is properly set up, operationally configured, and remains in compliance with contractual requirements, including performing a radiation survey on installed systems, if applicable. The SAT will be witnessed by Government and/or Government-designated representatives.

The Contractor shall prepare and deliver the AIT-2 Site Acceptance Test Procedures and Reports in accordance with the referenced CDRL:

CDRL E012 – Site Acceptance Procedures and Reports

1.24 Configuration Audits

The Contractor shall support Government configuration audits in accordance with the TSA Office of Security Technology Configuration Management Plan and the TSA Configuration Management Requirements. The Government will participate in all configuration audits.

The Contractor shall prepare and submit a Configuration Audit Plan (CAP) that describes procedures for conducting system audits. Upon successful completion of the FCA, a PCA will be performed. Successful completion of the PCA shall include, but not be limited to, the completed FCA and Government approval of the Contractor’s final submission of the associated FCA CDRL items.

All Full Rate Production (FRP) systems shall conform to the Product Baseline (PBL) that will be established after the FCA and PCA are conducted on the first FRP system.

When proposed and approved in the CAP, the Contractor may invite subcontractors, vendors, and suppliers to participate in the configuration audits, as proposed in the CAP. The Contractor shall prepare and submit a Configuration Audit Summary Report (CASR) documenting the results of each audit and the resolution for each finding.

The Contractor shall prepare and deliver the AIT-2 CAP and CASR in accordance with the referenced CDRLs.

CDRL L003 – Configuration Audit Plan CDRL L004 – Configuration Audit Summary Report

1.24.1 Functional Configuration Audit

The Contractor shall support a Government conducted FCA on the first delivered LRIP and FRP AIT-2 systems in accordance with the TSA Office of Security Technology Configuration Management Plan and the TSA Configuration Management Requirements. The FCA is the formal examination of the functional characteristics of CIs, prior to acceptance to verify that the item has achieved the requirements specified in its functional configuration documentation. FCA’s are conducted on both hardware and software configuration items to ensure that the technical documentation accurately reflects the functional characteristics of each AIT-2 system.

a. The Software FCA is an examination of CIs, test procedures and test results used to perform testing of the system, against the AIT-2 system software version documents.

b. The Hardware FCA is an examination of the test procedures and test results used to perform testing of the system against its design documentation.

1.24.2 Physical Configuration Audit

The Contractor shall support a Government conducted PCA on the first delivered LRIP and FRP AIT-2 system in accordance with the TSA Office of Security Technology Configuration Management Plan and the TSA Configuration Management Requirements. The purpose of a PCA is to confirm that the “as delivered” system is compliant with its design documentation.

The PCA is the formal examination of the "as-built" configuration of a configuration item against its technical documentation. The PCA includes a detailed inspection of configuration related deliverables.

The following procedures for conducting a PCA will be agreed upon during a pre-PCA meeting between TSA and Contractor.

The PCA will be conducted using a drawing index starting from Sheet 1, Level 1 assembly working to a lower level to determine physical existence of installed parts.

Separating the machine into different modules is the most efficient way to conduct the audit.

Therefore, following Level 1 component inspection and identification, Level 2 modules will be audited in sequential order.

All Level 2 and Level 3 part numbers will require Bill of Material (BOM) access prior to the selection of audit assemblies.

Government determined random selection of CIs will be based on major components/critical items list.

CI items will be selected. Part numbers will be compared to production drawings and drawing revisions will be examined against change notices for accuracy.

Actual machine components will be located on the machine. Part numbers, nameplates, and serial numbers will be physically verified against production reference identification.

Part numbers, which are verified, validated, and physically identified, will be recorded and comments annotated under discrepancies and recommendations.

The configuration audit plan (CDRL L003) will contain a list of Contractor/TSA agreed to PCA documentation & references.

1.25 Decommissioning Equipment

The Contractor shall develop a decommissioning checklist for AIT-2.

The Contractor shall prepare and deliver the Decommissioning Checklist in accordance with the referenced CDRL.

CDRL P001– Decommissioning Checklist

2.0 RECURRING SUPPORT (CLIN 0002)

The Contractor shall implement Program Management activities in accordance with this SOW and shall include all organizational functions required for Program Management, including preparation and delivery of referenced CDRLs.

2.1 Program Management Plan

The Contractor shall identify a Program Manager who shall be the Contractor’s focal point for all required program tasks. The Contractor’s Program Manager shall be prepared at all times to present and discuss the status of contract activities, risk management, quality, ILS maintenance activities, requirements, and issues. The Program Manager shall notify the AIT-2 COTR of all performance cost, financial, personnel, and security problems that, if unresolved, may adversely affect the Contractor’s performance, schedule, or costs. The Contractor shall take appropriate measures to mitigate any adverse impact(s) to the Contract.

The Contractor shall prepare and deliver the Program Management Plan (PMP) in accordance with the referenced CDRL:

CDRL E013 – Program Management Plan

2.2 Program Management Reviews

The Contractor shall conduct and support monthly Program Management Reviews (PMRs) at a site specified by the COTR. The Contractor’s PMRs shall be targeted for no more than one (1) day in length, unless otherwise specified by the COTR for special activities. The Government reserves the right to replace a formal monthly review with a less formal update completed by teleconference. The agenda for the PMR shall be provided to the COTR for distribution. The results of the PMR shall be documented as outlined in the meeting minutes. During the PMR, the Contractor will present the Program Status Report.

The Contractor shall prepare and deliver the Meeting Agenda, Program Status Report, and Meeting Minutes in accordance with the referenced CDRLs.

CDRL E014 – Meeting Agenda CDRL E015 – Meeting Minutes CDRL E016 – Program Status Report

2.3 Technical Interchange Meetings

The Contractor shall conduct and support Technical Interchange Meetings (TIM) as required by the AIT- 2 COTR. During the TIMs, the Contractor and the Government will discuss specific technical activities, including those associated with the ILS, studies, design issues, technical decisions, test plans, test results, and implementation concerns to ensure continuing Government visibility into the technical progress of the Contract.

The Contractor shall prepare and deliver the Meeting Agenda and Meeting Minutes in accordance with the referenced CDRLs.

CDRL E014 – Meeting Agenda CDRL E015 – Meeting Minutes

2.4 Security Equipment Database

The Contractor shall establish and maintain a Security Equipment (SE) database. This database shall include the entire inventory of fielded and warehoused AIT-2’s.

The Contractor shall prepare and deliver the Security Equipment Database in accordance with the

CDRL E017 – Security Equipment (SE) Database

2.5 Configuration Management

The AIT-2 systems shall be maintained under strict configuration management. All system Configuration Items (CIs) and hardware and software CIs shall be uniquely identified and map back to the Contractor’s configuration baseline. The Contractor shall not alter these systems in any way without the express approval of the Government.

The Contractor shall establish, implement, and maintain a Configuration Management (CM) Program based on TSA Configuration Management Requirements. The CM program shall provide an organizational structure with configuration identification and control methods, configuration audits, and

Configuration Status Accounting (CSA) procedures for system hardware, software, firmware and deliverables. The CM requirements are applicable to all deliverables under this contract.

The Contractor shall prepare and deliver the Configuration Management Plan in accordance with the

CDRL L005 – Configuration Management Plan

2.5.1 Configuration Baselines

The Contractor shall establish and maintain the configuration baseline for AIT-2 systems. This shall include Government approved developmental and product baselines for LRIP and FRP AIT-2’s. The Contractor shall establish and maintain the required contract deliverables, drawings, and list of materials to support this configuration, referred to as the Product Baseline (PBL).

2.5.2 Configuration Identification

The Contractor’s PBL shall retain all hardware and software part numbers for identification, control, and status accounting of any CI from initial acquisition to contract close-out.

CIs are selected based on major components/critical items on a consensus basis by TSA and the Contractor, considering the categories of function, performance, safety, and serviceability. In the event that consensus cannot be reached, TSA will have the final authority.

CIs shall be defined in a Master Configuration Item List (MCIL). All CIs shall be uniquely identified and mapped back to the configuration baseline and established following successful FAT&E and as part of the AIT-2 FCA and PCA process.

The Contractor shall prepare and deliver the AIT-2 MCIL in accordance with the referenced CDRL.

CDRL L006 – Master Configuration Item List

2.5.3 Configuration Control

The Contractor shall apply configuration change management measures to each baseline CI and associated configuration documentation in accordance with the TSA Office Of Security Technology Configuration Management Plan and the TSA Configuration Management Requirements. The Contractor’s configuration change management system shall provide an effective means for proposing changes to CIs and ensuring implementation of approved changes. The Contractor shall maintain configuration change management of hardware, software, firmware, and all deliverables from contract award to contract closeout. The Contractor shall maintain configuration change management hardware to the Lowest Replaceable Unit (LRU) level, as defined in the Contractor delivered maintenance manual, and software to the lowest sub-version or indenture level. The configuration baseline shall not be changed or modified during Test & Evaluation (T&E) without approval from the Government.

Changes represent opportunities for improvement or correction of deficiencies. Desired changes are documented in the form of Developmental Engineering Proposals (DEPs), which shall be submitted prior to the first article test, Engineering Change Proposals (ECPs), Requests for Deviation (RFDs), and Requests for Waiver (RFWs), which are utilized after a production baseline is established. The Contractor shall document all change requests.

DEPs describe a proposed (prior to product baseline being established) departure from configuration documentation for a specific number of systems or for a specified period of time. ECPs are requests to incorporate a permanent change to product configuration, which produces a new baseline. RFDs are requests to temporarily incorporate a known departure from current product baseline.