Attachment_1_-_Performance_Work_Statement.pdf

Solicitation HTC711-13-R-R009 Attachment 1 – Performance Work Statement

PERFORMANCE WORK STATEMENT

Thule AB Air Transportation Services

14 May 2013

1.0. Description of Services. The contractor shall receive, store, process cargo and provide air transportation services for the U.S. Government in accordance with all the provisions and specifications of this contract.

1.1. Charter Service. The contractor shall provide round trip charter flights between Copenhagen, Denmark and Thule Air Base (AB), Greenland once every four weeks with a capacity of at least 150 passengers and 25,000 kilograms (kg) of cargo. The contractor will be authorized to recommend enroute stops upon mutual agreement between the contractor and the government. The contractor shall provide round trip charter flights between Kangerlussuaq, Greenland and Thule AB, Greenland two times a month with a capacity of at least 30 passengers and 400 kg of cargo.

1.1.1. Specific dates and times of charter flights will be agreed upon by the representatives of the contractor and the Contracting Officer Representative (COR) (DET 1, 21 CONS, U.S. Embassy). The U.S.

Government, in cooperation with the contractor, will establish an annual flight schedule upon contract execution and the execution of an option, if exercised.

1.1.2. The contractor shall position for charter flights in sufficient time to allow for an on-time departure.

1.1.3. The contractor will be allowed a 20-minute window before and after departure time to meet or exceed take-off departure schedule. The contractor shall notify the COR promptly when flight changes or cancellations are pending.

1.1.4. If the requirement changes after the passenger and cargo information is given to the contractor, the COR may cancel or reschedule the flight. The COR may issue a notice of cancellation to cancel the mission within 48 hours of any scheduled charter flight prior to take-off. Rescheduling of the flight shall be by mutual agreement of the parties.

1.1.5. The COR or designated individuals will provide passenger manifest information to the contractor at least three calendar days prior to the mission departure date either verbally or in writing. Cargo information will be provided at least six calendar days prior to the mission departure date either verbally or in writing.

When information is given verbally, it will be confirmed in writing within three calendar days.

1.1.6. Passenger Processing. (Reference paragraph 3.1. for those services below which will be provided by the government at the Thule AB location only. Government-furnished services shall not be included in the trip price.)

1.1.6.1. The contractor shall accomplish ticketing and manifesting of passengers. The contractor shall provide the COR a scheduled manifest two days prior to the scheduled mission. The contractor shall provide the actual or confirmed manifest to the COR within one hour of mission departure. The actual or confirmed manifest can be provided via e-mail. The contractor shall include the passenger names on the flight as well as the names of passengers who did not board the aircraft.

1.1.6.2. The contractor shall conduct a 100% picture identification check of passengers for verification of the official manifest prior to passengers’ boarding the aircraft. The contractor shall not permit any unmanifested persons to board an aircraft unless authorized by the government and after receipt of an amended manifest.

1.1.6.3. The contractor shall provide baggage handling (weigh, tag, load and unload) services except at Gateway locations. The contractor is responsible for accurate placement on the aircraft relative to weight and balance.

1.1.6.4. Each passenger shall be allowed 50 kgs of checked luggage (2 x 25 kg bags) between Copenhagen, Denmark and Thule AB, Greenland and 20 kgs of checked luggage between Kangerlussuaq, Greenland and Thule AB, Greenland. Hand/carry-on luggage shall be allowed per carrier standard. The contractor shall inspect passenger baggage if sufficient cause is present or safety of flight is at question.

1.1.6.5. The contractor shall be responsible for all passengers after they have been manifested and accepted for boarding on the aircraft. In the event the contractor is unable to make a timely departure in accordance with the departure time agreed upon with the government, or offloads passengers short of their manifested destination, the contractor shall be responsible for the care of passengers. In the event of uncontrollable delays, the contractor will be reimbursed for the care of passengers upon presentation of valid receipts.

1.1.6.6. Meals served on charter flights shall be equal to those served aboard aircraft in regularly scheduled commercial operations.

1.1.6.7. Passenger and crew boarding stairs/loading bridge jet-way entrance doors are not to be opened until stairs have been positioned as close to the aircraft entrance as possible without hindering the opening of the doors.

1.1.6.8. The contractor shall provide all customs clearance (government traffic only), medical clearance (passengers only) agricultural inspections (if required), and immigration clearance.

1.1.7. Terminal Services/Cargo Processing. (Reference paragraph 3.1. for those services below which will be provided by the government at the Thule AB location only. Government-furnished services shall not be included in the trip price.)

1.1.7.1. The contractor shall receive cargo from vendors at the contractor’s storage facilities in Copenhagen, Denmark and Thule AB, Greenland for general cargo (dry cargo) and subsistence (chilled and frozen) items. Vendors will deliver cargo to the contractor’s storage facility at least five calendar days preceding the scheduled flight. Chilled and frozen subsistence items shall be packed in insulated containers at the contractor’s storage facilities. Fresh subsistence items (i.e. dairy) will arrive one day prior to flight.

1.1.7.2. The contractor shall store and ensure security for U.S. Government cargo at contractor’s storage facilities in Copenhagen, Denmark and Thule AB, Greenland. Storage facilities shall be inspected and approved by the U.S. Army Veterinary Office. Minimum storage capability shall be 25 square meters of covered dry storage and 100 square meters of cold storage space.

1.1.7.3. The contractor shall transport and protect cargo from the storage facility to the airport.

1.1.7.4. The contractor shall receive and process inbound cargo from Copenhagen, Denmark and Thule AB.

The contractor shall obtain customs clearance and notify consignees of the arrival of the inbound cargo.

1.1.7.5. The contractor shall manifest and document all cargo airlift departing Copenhagen, Denmark, Thule AB, Greenland and any other transient airports. Copies of the manifest shall be delivered to the COR within three work days after completion of each flight.

1.2. Scheduled Service. The contractor shall provide scheduled services (non-charter) for passenger and cargo movements on an ad-hoc basis. An estimated 700 passenger movements (one-way tickets) per year will be required between Copenhagen, Denmark and Kangerlussauq, Greenland. An estimated 8,000 kg of cargo per year will be required to be moved between Copenhagen, Denmark and Kangerlussuaq, Greenland.

1.2.1. Passenger Processing. Passengers shall be processed in accordance with the contractor’s commercial processes/procedures. Contractors are not required to maintain a certain number of open seats for government reservation, but rather, the government will be subject to the availability of seats within the contractor’s flight schedule.

1.2.2. Terminal Services/Cargo Processing. (Reference paragraph 3.1. for those services below which will be provided by the government at the Thule AB location only. Government-furnished services shall not be included in the trip price.)

1.2.2.1. The contractor shall receive cargo from vendors at the contractor’s storage facilities in Copenhagen, Denmark and Thule AB, Greenland for general cargo (dry cargo) and subsistence (chilled and frozen) items. Vendors will deliver cargo to the contractor’s storage facility at least five calendar days preceding the scheduled flight. Chilled and frozen subsistence items shall be packed in insulated containers at the contractor’s storage facilities. Fresh subsistence items (i.e. dairy) will arrive one day prior to flight.

1.2.2.2. The contractor shall store and ensure security for U.S. Government cargo at contractor’s storage facilities in Copenhagen, Denmark and Thule AB, Greenland. Storage facilities shall be inspected and approved by the U.S. Army Veterinary Office. Minimum storage capability shall be 25 square meters of covered dry storage and 100 square meters of cold storage space.

1.2.2.3. The contractor shall transport and protect cargo from the storage facility to the airport.

1.2.2.4. The contractor shall receive and process inbound cargo from Copenhagen, Denmark and Thule AB.

The contractor shall obtain customs clearance and notify consignees of the arrival of the inbound cargo.

1.2.2.5. The contractor shall manifest and document all cargo airlift departing Copenhagen, Denmark, Thule AB, Greenland and any other transient airports. Copies of the manifest shall be delivered to the COR within three work days after completion of each flight.

1.3. Contractor Responsibility. (Charter and Scheduled Service)

1.3.1. Only those personnel on official government business for the Department of Defense shall be permitted to stay at Thule AB, Greenland. Only contractor employees associated with the flight (i.e. pilots, crew members, maintenance, etc) shall be permitted to stay at Thule AB, Greenland. Unauthorized passengers (non-manifested) arriving at Thule AB, Greenland (final destination) will be returned as soon as possible with all associated costs paid by the contractor.

1.3.2. Security practices at Thule AB, Greenland, Copenhagen, Denmark and all transient locations shall be conducted prior to loading of aircraft and in accordance with all applicable Danish, Greenlandic, or host country and U.S. Air Force procedures.

1.3.3. In the event a flight is delayed or diverted because of weather or other uncontrollable factors, a minimum waiting period of four hours is required before a flight can be canceled. The final decision for flight cancellation due to weather rests with the aircraft commander. Cancelled flights shall be rescheduled and operated within 24 hours or as mutually agreed between the contractor and the government.

1.3.4. Flight delays or diversions caused by such events as maintenance and crew problems are considered contractor controllable delays and shall be at the contractor’s expense.

1.3.5. The contractor shall be responsible for the removal, from all sites, of all hazardous, unused and waste materials owned or generated by operation of contractor-owned aircraft. Examples of such materials include, but are not limited to, unserviceable aircraft components and parts, used engine fluids, and any used or unusable Petroleum, Oil, and Lubricants (POL) products.

1.3.6. The contractor is solely responsible for aircraft ground movements at all locations described herein and shall comply with all pertinent government directives at any landing station. The contractor shall be liable for any damage or injury to the plane, hangar, or support personnel caused by any contractor-provided mechanism inside Thule AB hangars.

1.4. Reimbursables.

1.4.1. Economic Price Adjustment (EPA) Based on Actual Cost of Fuel – Airlift. TRANSFAR clause 5552.216-9001 is applicable only to the fuel uplifted at Thule AB for direct charter flights from Thule AB, Greenland to Copenhagen, Denmark. Required reports for adjustments shall be sent to:

Mr. Patrick King or Mr. Jesper Nielsen Detachment 1, 21 Contracting Squadron Dag Hammarskjolds Alle 24 DK-2100 Copenhagen O, Denmark Voice (45) 33 41 74 55

A copy of the reports for adjustments shall be provided electronically to the Contracting Officer.

1.4.2. The contractor shall be reimbursed for food and lodging expenses of passengers and crew if required to remain overnight through no fault of the contractor (i.e., weather or government-caused delays) (reference paragraph 1.1.6.5). The contractor will be reimbursed per diem rates consistent with PL 99-234, Federal Civilian Employees and Contractor Travel Expenses Act of 1985, FAR 31.205-46(a)(2), and Federal Travel Regulations in effect at the time the travel is completed, during the performance period of this contract for each authorized overnight lodging. Copies of receipts are required to be furnished with invoices.

2.0. Services Delivery Summary. The Services Delivery Summary (SDS) performance objectives and their associated performance thresholds establish the baseline for the government’s surveillance program.

PERFORMANCE

OBJECTIVE

PWS

PARAGRAPH

PERFORMANCE

THRESHOLD

PO 1. Flights leave as scheduled/on time.

1.1.2 95% of the time

PO 2. Chilled and frozen subsistence items are packed in insulated containers at the contractor’s storage facilities.

1.1.7.1 No instances of non-conformance within contractor’s control

PO 3. All cargo airlift departing Copenhagen, Denmark, Thule AB, Greenland, or any other transient airports is manifested and documented timely. Copies of the manifest are delivered to the COR within three work days after completion of each flight.

1.1.7.5 No more than one late manifest submission per month

PO 4. Ticketing and manifesting of passengers is accomplished timely.

COR is provided a scheduled manifest two days prior to the scheduled mission. Actual or confirmed manifest is provided to the COR within 1 hour of mission departure.

1.1.6.1 No more than one late scheduled or confirmed manifest submission per month

PO 5. Minimum insurance coverages are procured and maintained during the entire performance period of this contract

4.7 Insurance is maintained at all times

3.0. Government Furnished Property and Services – Thule AB Only

3.1. Services and Equipment. If required and available, hangar space will be provided at Thule AB during severe weather conditions. Any services provided after normal duty hours will be charged to the contractor.

The U.S. Government will provide the following services and equipment for all landings made at Thule AB at no cost to the contractor except as otherwise provided in this paragraph:

3.1.1. Transient alert and ramp services to include:

- Landing

- Follow-me vehicle

- Towing

- Parking

- Chocking and grounding of aircraft

- Positioning, connecting, operating, and repositioning of aircraft ground power units

- Fire guard for engine starts

- Positioning, connecting, operating and repositioning of engine start carts

- Positioning, operating, and repositioning of compressor for airing struts and tires

- Ramp sweeping

- Equipment and necessary operators will be furnished for wing de-icing at no cost; the de-icing fluid will be furnished on a reimbursable basis. (In an emergency, into-plane service of hydraulic fluid, de-icing fluid and servicing of struts/tires will be provided by the government on a reimbursable basis. A technically qualified Contractor Representative will supervise emergency servicing to assure compliance with procedural requirements.)

- Maintenance stands when required for ground servicing operations

- To-plane fuel servicing

- Crew boarding stairs

3.1.2. Terminal and traffic services to include:

- Passenger processing

- Baggage handling (weight, tag, load and unload)

- Passenger boarding stairs

- Cargo receiving, processing, documentation, and positioning for loading

- Loading, tie down, and unloading. Loading will be in accordance with the load breakdown provided by the contractor.

- Cargo manifesting

- Flight line transportation for crews

- Position, operate, and deposition the ground air conditioning or heating units where available and required

- Aircraft lavatory/janitorial services

- Security inspection of passengers and their baggage (carry on as well as checked), conducted in accordance with all applicable Danish and US Air Force procedures.

3.1.3. Fire and crash rescue support.

3.1.4. Aircraft clearance facilities.

3.1.5. Emergency medical services to contractor air crews and personnel on a reimbursable basis in accordance with AFH 41-114, Table 42.

3.2. Petroleum Products.

3.2.1. The contractor may purchase petroleum products at Thule AB, Greenland at Defense Logistics Agency – Energy (DLA-E) standard price for use in performing contract services.

3.2.2. If fuel is purchased from DLA-E, the contractor shall establish a T-DoDAAC through DLA-E.

Information on obtaining a T-DoDAAC is available at: http://www.energy.dla.mil. The U.S. Government will provide an Indentaplate, DD1896, for each aircraft under contract which is to be used to purchase fuel at Thule AB, Greenland. DLA-E will invoice the contractor for the cost of the fuel.

3.2.2. The only jet fuel available at Thule AB, Greenland is JP-8.

3.3. DD Forms 2400, 2401 and 2402. DD Form 2401, Civil Aircraft Landing Permit, DD Form 2402, Hold Harmless Agreement and DD Form 2400, Certificate of Insurance, must be submitted to the Contracting Officer within seven days of notice of award. The forms may be accessed from the web addresses below:

http://www.dtic.mil/whs/directives/informgt/forms/eforms/dd2400.pdf http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2401.pdf

4.0. General Information

4.1. Post Award Conference. The contractor shall attend a post-award conference conducted by the CO/COR with functional experts in attendance. The conference may be held via teleconference or video telephone conference. The contractor shall be notified of the exact time, date and location of the conference at least two weeks prior to the scheduled conference date.

4.2. Contractor Point of Contact. Prior to contract start, the contractor shall furnish the CO/COR with the name, address, and telephone number of an agent who will serve as a liaison between the contractor and the CO/COR. The agent must have authority to schedule contract services. The agent shall be available by telephone 24 hours a day/7 days a week.

4.3. Thule AB Normal Operating Hours. Thule AB airfield normal operating hours are Monday through Friday from 0800 to 1600, Thule AB Local Time.

4.4. Prohibited Activities. Illegal drugs or weapons are not allowed on Thule AB. Alcohol may not be brought in unless authorized by the appropriate base personnel. Smoking is allowed in designated areas only.

4.5. Safety and Financial Information. As required by the Air Safety Clause at TRANSFAR 5552.247- 9000, the contractor must satisfy the requirements of 32 CFR, Part 861, Section 861.3. The DOD will conduct periodic evaluations to assess the contractor’s ability to perform safely. To complete the evaluation, the government may contact the contractor in order to obtain information bearing upon the contractor’s practices, resources, and capabilities. Upon request, the contractor shall provide data pertinent to such evaluations, including current audited financial statements, to HQ AMC/A34B, 402 Scott Drive, Unit 3A1, Scott AFB, IL 62225-5357. The contractor will also comply with all Danish and Greenlandic civil aviation requirements.

4.6. Additional Standards. All aircraft operations shall be conducted under FAA Regulation Part 121 or 135, or Civil Aviation Authority (CAA) equivalent, and with all DOD additional standards as published on the following web site: http://www.amc.af.mil/library/businesscustomers.asp

4.7. Insurance. The contractor shall carry insurance coverage with an overall limit of at least $20,000,000 U.S. Dollars for each accident. (Charter and Scheduled Service)

4.7.1. Air Carrier Insurance Requirements. Prior to performance of any services hereunder, the contractor shall, at its own expense, procure and maintain through a financially and legally responsible insurance company or companies, minimum insurance coverage for Liability for Bodily Injury to or Death of Aircraft Passengers; Liability for Bodily Injury to or Death of Persons (excluding passengers); and Liability for Loss of or Damage to Property. Insurance coverage must be maintained during the entire performance period of this contract. Minimal insurance coverage requirements are listed below. These coverage amounts are stated in U.S. Dollars.

4.7.1.1. Liability for Bodily Injury to or Death of Aircraft Passengers: A limit for each person of at least three-hundred thousand ($300,000.00), and a limit for each occurrence in any one aircraft of at least an amount equal to the sum produced by multiplying three-hundred thousand ($300,000.00) by seventy-five percent (75%) of the number of passenger seats.

4.7.1.2. Liability for Bodily Injury to or Death of Persons (excluding passengers): A limit of at least three-hundred thousand dollars ($300,000.00) for each person in any one accident, and a limit of at least twenty million dollars ($20,000,000.00) for each accident.

4.7.1.3. Liability for Loss of or Damage to Property: A limit of at least twenty million dollars ($20,000,000.00) for each accident.

4.7.1.4. If Combined Single Limit Liability is used; the amount thereof shall be at least equal to the combined minimum prescribed above for the various categories of split limits coverage.

4.7.1.5. Liability payment insurance purchased pursuant to the requirements of this paragraph shall cover payment to the U.S. Government provided medical care to the extent that said insurance would cover payment of the cost of medical care in the absence of any U.S. Government obligation to provide medical care.

4.7.1.6. Prior to contract award, the contractor will provide written verification of insurance to:

USTRANSCOM/TCAQ-CI

508 Scott Drive Scott AFB, IL 62225-5357

4.7.1.7. The contractor shall expressly verify: (1) its insurance coverage meets all the requirements of this paragraph and (2) that all policies providing coverage under this paragraph contain endorsements providing for the waiver of any right of subrogation the insurer may have against the United States by reason of any payment under the policy on account of damage or injury in connection with the insured’s use of any government aviation facility, or the insured’s purchase of services or supplies from the United States Government.

4.7.1.8. In the event of cancellation or material change in policy coverage, thirty days prior written notice shall be given to the Contracting Officer.

4.8. Liability for Personal Baggage and Passengers

4.8.1. The contractor shall be responsible for the loss and/or damage to passenger baggage and personal equipment while such items are in the custody of the contractor or on board their aircraft. Liability for these items is limited to the actual value thereof, not to exceed $9.50 (US) per pound based on the weight of the entire baggage container in which the damaged or lost item was located.

4.8.2. In the event it should be necessary to offload passengers at any location or station other than at the direction of the COR, the contractor shall be responsible for such offloading, passenger care, safeguarding of personal baggage from loss, theft and/or weather damage, reloading, and all costs incidental to such services until such time as the contractor moves or causes to be moved such passengers to their intended destination or to such other location as directed by the Contracting Officer. The Contracting Officer will be notified immediately of any offloading.

4.9. Responsibility for Government Cargo.

4.9.1. Except when loss and/or damage arises out of causes beyond control and without the fault or negligence of the contractor, the contractor shall assume full liability for any and all goods lost and/or damaged in the movement covered by this contract.

4.9.2. Unless directed differently by the COR, the contractor shall be responsible for all offloading of cargo due to an emergency. Cargo offload shall not remain at an unscheduled location in excess of 24 hours unless weather or other conditions beyond the contractor’s control make the operation of the aircraft and the movement of the cargo unsafe. The contractor shall safeguard and protect all cargo from loss, theft, or spoilage. The contractor shall notify the COR immediately of any offloading.

4.10. Task Orders. The Contracting Officer will issue all task orders. After task orders are issued, flights will be scheduled at least 24 hours in advance by the COR at Detachment 1, 21 Contracting Squadron, c/o American Embassy in Copenhagen, Dag Hammarskjolds Alle 24, DK-2100 Copenhagen O, Denmark. The contractor shall not initiate any action prior to perform any work under this contract that would exceed the amount of the task order.

4.11. Danish Aviation Ministry. Following the completion of any Civil Aviation Agency inspection, the contractor shall furnish copies of the inspection report to the U.S. DOD Air Carrier Survey and Analysis Office, HQ AMC/A3B, 402 Scott Drive, Unit 3A1, Scott Air Force Base, Illinois 62225-5357.

4.12. Holidays. Flights will not operate into Thule AB on the following United States holidays. Flights in progress at midnight preceding the foregoing holidays shall not be affected.

- New Years Day, January 1st

- Martin Luther King Day, third Monday in January

- President’s Day, third Monday in February

- Memorial Day, last Monday in May

- Independence Day, July 4th

- Labor Day, first Monday in September

- Columbus Day, second Monday in October

- Veterans Day, November 11th

- Thanksgiving Day, fourth Thursday in November

- Christmas Day, December 25th

4.13. Notice of Accidents/Incidents.

4.13.1. When a contractor’s aircraft is involved in an accident or incident in support of this contract as defined by 49 CFR, Part 830, the contractor shall transmit the following information by the most expeditious means available to the Tanker Airlift Control Center (TACC) Emergency Action Cell at Scott AFB, Illinois (618) 229-0360. On the next business day, the contractor shall notify the Contracting Officer.

The following information will be required:

4.13.1.1. Carrier and trip number.

4.13.1.2. Aircraft type and number.

4.13.1.3. Date and time of accident/incident.

4.13.1.4. Last departure point and point of intended landing of the aircraft.

4.13.1.5. Nature of the accident and the extent of known damage to the aircraft.

4.13.1.6. Total number of crewmembers and passengers on board.

4.13.1.7. Number of injured and fatalities aboard the aircraft.

4.13.1.8. Condition of baggage or government-owned material, if any, on board.

4.13.2. When a contractor’s aircraft is involved in an accident or incident not in support of a mission covered by this contract, and as defined in 49 CFR, Part 830, the contractor shall transmit the information in paragraph 4.14.1, above, by the most expeditious means available on the next business day to HQ AMC/A34B, Scott AFB, IL (618) 229-4801 or (618) 229-4343.

4.13.3. Aircraft Medical Incidents. The contractor shall report all aircraft medical incidents in flight, or while passengers are under the control of the aircraft captain, to the first available COR or Contract Administrator at the next enroute station for in flight incidents, or the station when the incident occurs.

4.13.4. DOD Casualties. In cases where a death occurs on a contractor’s aircraft, the following information shall be furnished via telephone: Name, Social Security Number (SSN) and component of service identified as Army (USA), Air Force (USAF), Navy (USN), Marine Corps (USMC), Coast Guard (USCG). The following is a list of phone numbers for the armed services casualty offices:

US Army: (800) 626-3317 US Marines: (800) 847-1597 US Navy: (800) 368-3202 US Air Force: (800) 433-0048 US Coast Guard:

Atlantic Area Op’s Center, accidents east of the Mississippi, (757) 398-6390 Pacific Area Op’s Center, accidents west of the Mississippi, (510) 437-3701

An informational copy shall be faxed to the Contracting Officer (618) 220-7909, Attn: TCAQ-CI and to TACC (618) 229-0306, Attn: EA Cell.

4.14. Performance of Services During Crisis Declared by the President of the United States or the United States Secretary of Defense. In the event of a declared crisis the contractor is not relieved from the requirements of this contract.

4.15. Customs Clearance.

4.15.1. The contractor shall provide duty-free customs clearance for all shipments.

4.15.2. Customs clearance procedures and updates can be reviewed in the Defense Transportation Regulation (DTR) Part V, Department of Defense Customs/Border Clearance Policies and Procedures, which is available on the public web page at:

http://www.transcom.mil/j5/pt/dtr_part_v.cfm.

4.15.3. In the event that a shipment is not duty free, the contractor shall process in the same manner provided for its commercial customers and shall properly itemize on all invoices for reimbursement.

4.15.4. The contractor shall serve as agent and appoint sub-agents, as may be necessary, to act directly or through such re-delegation, appointment, or designation to other customs brokers, persons or business concerns as it deems necessary for performance of customs clearance and shall provide all customs forms necessary for customs clearance.

4.16. Quality Control Program. The contractor shall employ quality control activities in accordance with their commercial quality control program to ensure acceptable contract services are provided.

4.16.1. The contractor’s inspection instructions, auditing, and testing shall be kept current with contract requirements and shall encompass all aspects of the contract. The inspection instructions shall include the specific criteria for approval and rejection of services that will be used in each inspection or audit;

checklists may be used for this purpose.

4.16.2. The contractor’s inspection instructions shall be submitted to the Contracting Officer within 30 calendar days after contract award. An updated copy shall be provided to the Contracting Officer on the contract start date and thereafter as changes occur.

4.16.3. The contractor shall maintain records of all audits and inspections and make available to the government upon request. The quality assurance records shall indicate the nature and number of observations made, the number and type of deficiencies found, and the nature of corrective action taken as appropriate.

4.17. Common Access Card. Foreign national contractor personnel will not be issued a Common Access Card (CAC) for this requirement.

4.18. Reserved

5.0. Performance Schedule. As noted in paragraph 1.1.1, specific dates and times of charter flights will be agreed upon by the representatives of the contractor and the COR (DET 1, 21 CONS, U.S. Embassy). The U.S. Government in cooperation with the contractor will establish an annual flight schedule upon contract execution and the execution of an option, if exercised. The contractor shall submit recommended/preferred performance schedules in the format below:

PERFORMANCE SCHEDULE

CLIN FREQUENCY PREFERRED DAYS

X001 Monthly Wednesday

X002 Two times a month Thursday

6.0. Information Assurance

6.1. Requirement for Contractor Information Assurance (IA) Report. The Contractor shall provide an Information Assurance Report to describe their environment that safeguards DOD non-public information resident on or transiting the contractor's unclassified information systems from unauthorized access and disclosure. Protection measures applied should consider the risks (i.e. consequences and their probability) of loss, misuse, unauthorized access, or modification of information. The report shall address the SANS (SysAdmin, Audit, Network, Security) Institute's Twenty Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines (http://www.sans.org/critical-security-controls) and be provided in accordance with the template at Appendix 7.1. The contractor is encouraged to provide additional information above and beyond what is outlined in the SANS guidelines to enhance the government’s understanding of their information security posture. The report will be updated 30 days prior to exercise of an option period, if applicable.

6.2. Cyber Security Incidents

6.2.1. Reporting Requirements. The contractor shall report to the following two Government organizations as soon as possible upon discovery of any suspected cyber intrusion events that affect DOD information resident on or transiting the contractor's unclassified information systems.

USTRANSCOM Global Command, Control, Communications and Computers (C4) Coordination Center (GCCC) E-mail: ustcJ6-gccc@ustranscom.mil Commercial Phone: 618-229-4222

USTRANSCOM Deployment and Distribution Operation Center (DDOC) E-mail: ustc-ddocchief@ustranscom.mil Commercial Phone: 618-220-7700

Initial report shall be provided even if some details are not yet available, with follow-on detailed reporting within 72 hours. Reportable cyber intrusion events include the following:

1. A cyber intrusion event appearing to be an advanced persistent threat

2. A cyber intrusion event involving data exfiltration or manipulation or other loss of any DOD information resident on or transiting the contractor's, or its subcontractors', unclassified information systems

3. Intrusion activities that allow unauthorized access to an unclassified information system on which DOD information is resident or transiting

Definition of advanced persistent threat: An extremely proficient, patient, determined, and capable adversary, including two or more of such adversaries working together.

6.2.2. Incident Report Content. The incident report shall include, at a minimum, the following information:

1. Applicable dates (date of suspected compromise and date of discovery)

2. Threat methodology (all known resources used such as Internet Protocol (IP) addresses, domain names, copies malware, etc.)

3. An account of what actions the threat(s) may have taken on the victim system/network and what information may have been accessed

4. A description of the roles and functions of the threat-accessed system

5. An initial list of potentially impacted government programs and each program’s classification

6. What information may have been exfiltrated that may impact government programs

7. A list of all employees and subcontracted employees who work or have worked with the victim system/network

8. A point of contact to coordinate damage assessment activities

6.2.3. Incident Report Submission. The contractor will submit unclassified network cyber incident reports to the USTRANSCOM Technical Information Analysis Center (TIAC) and USTRANSCOM designated government personnel via encrypted email or another mutually agreed upon secure communications method. Copies of malware require special handling and pre-coordination must be accomplished prior to submission.

7.0. Appendices

Appendix 7.1 – Vendor Assessment Guidelines for Twenty Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines (CAG)

Appendix 7.1

VENDOR ASSESSMENT GUIDELINES FOR TWENTY CRITICAL SECURITY CONTROLS

FOR EFFECTIVE CYBER DEFENSE: CONSENSUS AUDIT GUIDELINES (CAG)

General: Organizations should compare all 20 control areas against their current status.

The 20 Critical Controls are:

1. Inventory of Authorized and Unauthorized Devices

2. Inventory of Authorized and Unauthorized Software

3. Secure Configurations for Hardware and Software on Laptops, Workstations, and Servers

4. Secure Configurations for Network Devices such as Firewalls, Routers, and Switches

5. Boundary Defense

6. Maintenance, Monitoring, and Analysis of Security Audit Logs

7. Application Software Security

8. Controlled Use of Administrative Privileges

9. Controlled Access Based on the Need to Know

10. Continuous Vulnerability Assessment and Remediation

11. Account Monitoring and Control

12. Malware Defenses

13. Limitation and Control of Network Ports, Protocols, and Services

14. Wireless Device Control

15. Data Loss Prevention

16. Secure Network Engineering

17. Penetration Tests and Red Team Exercises

18. Incident Response Capability

19. Data Recovery Capability

20. Security Skills Assessment and Appropriate Training to Fill Gaps

The entire text of the 20 Critical Security Controls is available for reference at:

http://www.sans.org/critical-security-controls/

Procedures:

1. Review each control.

2. Determine what procedures and tools exist within your organization to meet this control.

3. Document the result of 1-2 using the suggested template provided.

4. Provide any additional information about your company’s cyber security posture.

Company (Name): Information Assurance Report

Executive Summary: (descriptive self-assessment of the company’s overall information security posture)

A. Assessment of Twenty Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines (CAG)

1. Control 1. Inventory of Authorized and Unauthorized Devices

a. Procedures and Tools supporting this control:

(List the procedures and tools used in your organization for this control)

b. Method to achieve control metric:

2. (Continue for remaining 19 controls).

If a particular control does not exist or is not used within your organization, please state this.

B. Assessment of Additional Security Measures for Effective Cyber Defense

1. Measure. (Title of additional measure/control)

a. Procedures and Tools supporting this measure/control:

(List the procedures and tools used in your organization)

b. Method to achieve measure/control metric:

2. (Continue for remaining measures/controls)