ATTACHMENT_1_-_PWS.pdf

HTC711-13-R-R010

Attachment 1

PERFORMANCE WORK STATEMENT FOR

UNITED STATES TRANSPORTATION COMMAND

DIRECTORATE OF ACQUISITION,

INTERMODAL TRANSPORTATION

MILITARY SURFACE DEPLOYMENT & DISTRIBUTION COMMAND (SDDC)

DEPARMENT OF DEFENSE (DOD)

CONTAINER MANAGEMENT STREAMLINING (CMS)

MASTER LEASE CONTRACT

24 June 2013

Table of Contents

1.0 DESCRIPTION OF SERVICES

1.1 Background.…………………………………………………………………………………...…4

1.2 Scope

1.3 Tasks. The contractor shall perform all tasks identified in this PWS… ……………………….4

1.3.1 Task 1 – Contract Management .………………………………………

1.3.2 Task 2 – Leasing Operations..………………………………………………..5

1.3.3 Task 3– DOD Leasing Modul (DLM)………………...…………………..…

1.4 Deliverables………………..…………………………………………………………………...10

1.4.1 Inspection…….………………………………………………………………

1.4.2 Final Acceptance.……...………………………………………………………..10

2.0 SERVICE DELIVERY SUMMARY……….,…………………………………………………11

3.0 GOVERNMENT FURNISHED PROPERTY AND SERVICES………….....………...…….11

3.1 Government-Furnished Property………...….………………………………………...…...11

3.2 Government-Furnished Information….....………………………………………………….11

3.3 References….……………………………………………………………………………... 11

4.0 GENERAL INFORMATION…………………..………………………………………………12

4.1 Place of Performance ...…………………………………..………………………………..12

4.2 Work Hours…..……...…………………………………………………………………….12

4.3 Emergency Contingency Clause…………………………………………………………..12

4.4 Cooperation with Other Contractors and Government Personnel…….…………………...12

4.5 Quality Control…….....……………………………………………………………………12

4.6 Quality Assurance.…………………………………………………………………………12

5.0 SECURITY (CYBER, PHYSICAL, PERSONNEL, INFORMATION, OPERATION,

INDUSTRIAL SECURITY, AND ANTITERRORISM / FORCE PROTECTION)

REQUIREMENTS…………………………………………………………………….………………..12

5.1 General Security Information……...……..………………………………………………..12

5.2 Common Access Card (CAC) Issuance……..…………..……………….………………...12

5.3 Visit Authorization to Scott AFB SDDC/USTRANSCOM Facilities ….…………………12

5.4 Security Compliance / Deviations………………………………………….……………...13

5.5 Security Regulation Compliance…….………………………..…………..……….13

5.6 Security Regulation Guidance…..………………………………..………………….…….13

5.7 Cyber Security …………………………………………………………………………...14

6.0 CONTRACT TRANSITION…………..………………………………………………………...16

APPENDIX A: DEFINITONS, ABBREVIATIONS AND ACRONYMS……..…………………...18

APPENDIX B: REPORT DATA REQUIREMENTS……..………………………………………...21

APPENDIX C: HISTORICAL DATA…..…………………………………………………………… 22

APPENDIX D: SECURITY CONTROLS ………………………………………………………….. 23

APPENDIX E: INSPECTION CRITERIA …………………………………………………………..25

PERFORMANCE WORK STATEMENT (PWS)

1.0 DESCRIPTION OF SERVICES.

1.1 Background. As a component of the United States Transportation Command (USTRANSCOM), the Military Surface Deployment & Distribution Command (SDDC) has a requirement for program management, intermodal equipment leasing and transportation services, information technology, and related container support functions to meet the Government missions and exercises on a global basis.

1.2 Scope. The contractor shall be responsible for performing program management and intermodal equipment-leasing services for peacetime, contingency, disaster, and humanitarian operations on a worldwide basis.

1.3 Tasks. The contractor shall perform all tasks identified in this PWS.

1.3.1 Task 1 – Program Management. The contractor shall designate an individual(s) from the contractor’s resources to be the focal point(s) for all communications. The designated focal point(s) shall be responsible for ensuring successful accomplishment of all PWS tasks. Point of contact (POC) information includes name, title, phone number, and email address. Advance written notification is required prior to any change or substitution. Contract Management duties shall include, but are not limited to, planning, scheduling, awarding and monitoring subcontracts, cost estimating preparation and documentation, establishing and maintaining records, quality control, contract administration, logistical support, responding to inquiries, answering questions, drafting written responses, and attending video teleconference meetings.

Deliverable: POC Information

1.3.1.1 Lease Tracking. The contractor shall track all task orders and task order modifications including, at a minimum, the task order number, equipment number(s), the period of performance, the current obligated funding of each task order, and the total obligated and expensed funding of all task orders combined. The contractor shall provide the information via email to the Contracting Officer in an Excel or .pdf file. The contractor shall notify the AOA via email 90, 60, and 30 calendar days prior to the expiration of a task order. Notifications shall request intentions on whether to closeout lease or change the terms of the lease. If no response is received, the contractor shall notify the PCO.

Deliverable: Lease Tracking Report , Lease Expiration Notification

1.3.1.2 Quality Control. The contractor shall establish and maintain a Quality Control Plan (QCP). The QCP shall cover as a minimum how the contractor intends to meet the requirements of all performance objectives, monitor and proactively manage contract requirements, and the means by which the Government will be notified of performance related incidents that are likely to affect quality of service.

Deliverable: QCP

1.3.2 Task 2 – Leasing Operations. Contractor shall provide the following intermodal equipment types; 20’ and 40’ dry International Organization Standardization (ISO) containers, 20’ ammunition grade containers, 20’ food grade tank containers, 20’ fuel grade tank containers, 20’ and 40’ refrigerated containers, 40’ high cube refrigerated containers, 20’ and 40’ open top containers, 20’ and 40’ flat rack containers, 20’ and 40’ chassis, drop frame tank chassis, generator sets, and generator repair kits. The contractor shall accept requests to lease equipment from Authorized Ordering Agents (AOAs). Agency AOA orders shall be executed by an approved Contracting Officer who has Delegation of Procurement Authority (DPA) by USTRANSCOM. The contractor shall refer unauthorized AOAs to the Procuring Contracting Officer (PCO) to obtain agency ordering approval.

The contractor shall provide International Organization for Standardization (ISO) standard equipment. Non-ammunition use containers shall also be compliant with the latest comercial standards, such as the Institute of International Container Lessors (IICL) or the Container Owners Association (COA) Common Interchange Criteria (CIC). Ammunition use containers shall also be compliant with Title 49 of the Code of Federal Regulation (CFR 49), the International Maritime Dangerous Goods (IMDG) Code standards for hazardous explosive cargo, and the criteria set forth in Appendix E. Containers shall be International Convention for Safe Containers (CSC) approved or enrolled in the Approved Continuous Examination Program (ACEP). When delivered, equipment shall have at least one year remaining on its plate or bear an ACEP sticker. Intermodal chassis leased and delivered under this contract meet the current Federal Motor Carrier Safety Administration (FMCSA) inspection standards. The contractor shall not be reimbursed for costs associated with delivery of non-compliant equipment.

1.3.2.1 Cost Estimates. The contractor shall provide via email a cost estimate in response to lease requests. Cost estimates shall include a unique lease requirement number, cost for lease per diem, delivery, other direct costs, estimated damages at redelivery, redelivery, and lease extension options. Cost estimates are based on the current, approved rates and shall be valid for 30 calendar days from the date made available to the AOA.

Deliverable: Cost Estimate

1.3.2.2 Delivery. The contractor shall deliver leased equipment. The contractor shall confirm all task order details with the AOA. The contractor shall deliver equipment in accordance with the Required Delivery Date (RDD) specified in the task order and shall schedule all deliveries with the consignee(s) at least two (2) business days prior to actual delivery of equipment. The contractor shall not deliver equipment on the same day as notification, unless approved by the consignee, and shall deliver all equipment within the consignee's normal business hours unless the consignee agrees to other arrangements. The contractor shall monitor delivery of equipment and advise the consignee(s), respective AOA and COR of any unforeseen delays or inability to meet the RDD and shall notify the COR of all consignee approved changes to the established

RDD.

1.3.2.2.1 Expedited Delivery. Expedited delivery shall apply when the RDD is less than 7 working days from the date of Task Order award. Expedited Delivery shall not apply when the contractor arranges for an early delivery to accommodate the contractor’s schedule.

1.3.2.2.2 Long-Lead Delivery. Long-lead delivery shally apply when the RDD is more than 15 working days from the date of Task Order award.

Deliverable: Leased Equipment

1.3.2.3 FOB Destination versus FOB Origin Inspection. For “FOB Destination Delivery.” The standard time for which the consignee must perform initial inspection for damages will be seven (7) calendar days from the time of delivery or equipment is deemed acceptable. The same standard time of seven (7) calendar days will also be applied for a final inspection, if the container is not in compliance after the initial inspection. Any damage or deficiencies at time of delivery shall be noted on either the interchange paperwork or a DA Form 2404 and reported to the contractor within seven (7) business days. At a point in which notification is made beyond seven (7) business days, the equipment is accepted as is. The contractor shall arrange repair or replacement of equipment within 48 hours of notification of damage or deficiency in order to avoid impact on the unit’s mission.

For “FOB Origin Delivery.” The consignee must perform initial inspection for damages at the contractor’s depot, prior to yard departure. Once equipment has departed the contractor’s depot, initiating its lease, equipment is deemed acceptable.

1.3.2.3.1 Refrigerated Container Inspection. The contractor shall inspect prior to delivery. A pre-trip structural and operating inspection shall be done and a copy of the inspection shall be provided to the receiving location. The contractor shall provide a Ryan type recorder or equivalent that is capable of continuous measurement of internal temperature within three (3) degrees Fahrenheit of the in-transit temperature specified for controlled atmosphere and straight chill, and five (5) degrees Fahrenheit for frozen. The contractor shall deliver all refrigerated containers in a pre-chilled condition unless otherwise specified by the AOA.

Deliverable: Pre-trip Structural and Operating Inspection

1.3.2.3.2 Intermodal Chassis Inspection. The contractor shall ensure all intermodal chassis leased and delivered under this contract meet the current FMCSA inspection standards IAW FMCSA Regulations (and subsequent amendments). Intermodal chassis equipment leased (and delivered) under this contract shall not be older than 18 years from date of manufacture or remanufacture. Each chassis shall have a Federal Highway Administration (FHWA) inspection expiry date at least equal to the month and year of its task order expiration.

A copy of the most recent FHWA Annual Inspection Report shall be provided to the receiving location. This record of inspection is to be maintained in/on/with the vehicle. Contractor’s driver’s of the Intermodal Equipment (IME) assumes all components are in proper and safe operating condition. Failure to provide this inspection documentation shall result in the rejection of the chassis equipment. Reports that are illegible, incomplete or incorrectly filled out shall not be accepted and constitute failure to provide, resulting in rejection of the chassis equipment.

At time of delivery to location, and to the extent that both parties are available, the truck driver and the receiving unit point of contact (POC) shall perform a joint walk-around visual and audible inspection of the chassis equipment. The driver shall not unhook the chassis until the receiving unit has inspected the equipment. The driver shall verify all functions are in good working order, including but not limited to: electrical lighting systems, air pressure and brake systems, tires properly inflated to tire manufacturer’s specifications and free of flat spots and cuts, etc.

Any damages or deficiencies that affect the roadworthiness of the equipment shall be reported to the issuing office in order to request repair or replacement of the chassis equipment, thus ensuring the chassis is operating at roadworthy standards. Any damage or deficiencies at time of delivery shall be noted on either the interchange paperwork or a DA Form 2404 and reported to the contractor within seven (7) business days.

At a point in which notification is made beyond seven (7) business days, the equipment is accepted as is. Both the driver and receiving unit POC shall sign the paperwork, and in the absence of a signed inspection report, acceptance by receiving party is assumed. The contractor shall arrange repair or replacement of chassis equipment within 48 hours of notification of damage or deficiency in order to avoid impact on the unit’s mission.

At time of redelivery, the truck driver and the redelivery unit POC shall perform a walk-around visual and audible inspection of the chassis equipment. Any damage or deficiencies at time of redelivery shall be noted on either the interchange paperwork or a DA Form 2404. Any damages noted by the receiving party shall be communicated to the driver so the deficiency can be reported to and repaired by the Intermodal Equipment (IEP) upon return to the depot. Both the driver and redelivery POC shall sign the paperwork. The paperwork shall be forwarded to the issuing office as stated on the task order as evidence of the equipment condition at time of redelivery and used to validate damage claims by the IEP.

Since chassis may be delivered or redelivered with a container attached, there may be instances when a thorough visual inspection may not be possible. It is further assumed that a walk around visual and audible inspection can identify some forms of deficiencies or existing damage, but not all damage could be visible and further subject to claims by the contractor.

Deliverables: FHWA Annual Inspection Report, Interchange Paperwork or DA Form 2404

1.3.2.4 Redelivery. Contractor shall redeliver leased equipment. Redelivery may be requested at any time without penalty. For CONUS, the contractor shall pick up equipment identified for redelivery within five (5) business days following notification, or as mutually agreed, otherwise per diem charges shall cease on the next calendar day. For OCONUS, the contractor shall pick up equipment identified for redelivery within ten (10) business days following notification, or as mutually agreed, otherwise per diem charges shall cease on the next calendar day.

The contractor shall schedule all redeliveries with the consignee(s) at least two (2) business days prior to actual redelivery of equipment, unless otherwise approved by the consignee. The contractor shall pick up all equipment within the consignee's normal business hours unless the consignee agrees to other arrangements. Upon redelivery, the contractor shall provide the consignee(s) with the identification number of equipment they are picking up.

When the quantity of assets to be redelivered exceeds the installation’s maximum daily uploading capability, a redelivery window shall be established. If mutually agreed upon by the Government and the contractor, the Government may provide storage space for the contractor’s equipment within the installation at no cost to the contractor/subcontractor and no liability to the Government.

The contractor shall monitor redelivery of equipment and advise the consignee of inability to meet the redelivery date(s). The contractor shall notify and provide written documentation to the AOA and COR when equipment identified for redelivery cannot be picked up through no fault of the contractor’s. The contractor shall be compensated for attempted redelivery costs in terms associated with the redelivery via AOA approval and COR notification

1.3.2.5 Order Consolidation. The contractor shall consolidate delivery/redelivery of multiple pieces of equipment to the maximum extent practical. Since chassis may be delivered/redelivered with a container(s) attached or multiple pieces of equipment may be stacked, there may be instances when delivery/redelivery costs are reduced through shipment consolidation. In these instances, the Government will only be responsible for the cost to deliver/redeliver the highest priced asset per conveyance.

1.3.2.6 Reconcile Damages. The contractor shall submit via email damage claims to include on-hire and off-hire condition documentation to the AOA within 21 calendar days. The contractor shall document and compare equipment damage estimates from the lease-originating Contracting Officer, whom will have final approval at time of off-hire to on-hire condition of equipment. The Government will provide approval/disapproval within ten (10) business days of receipt of the damage claim. Third party off-hire survey shall be completed within ten (10) business days or a mutually agreed upon timeframe from time damaged claim is received for chassis.

Repairs made by the contractor which exceed the approved amount, prior to final claim settlement, shall be at the risk of the contractor. The Government will not reimburse the contractor for repair costs when there is no documentation identifying the condition of the equipment at the time of on-hire and off-hire. The Government will not be responsible for normal wear and tear, non-conforming repairs or preventative maintenance.

The Government will only reimburse the contractor for the portion of the damage costs that exceed $150.00 and only for damages sustained while in possession of and under lease to the Government. The Government will not reimburse the contractor for tank and refrigerated container cleaning unless approved by the Contracting Officer.

The Government may approve miscellaneous costs associated with the repair of leased assets provided appropriate documentation is supplied at the time of request. Miscellaneous costs may be allowable but must first be approved by the Contracting Officer.

Deliverable: Damage Claim

1.3.2.7 Equipment Replacement. The contractor shall be responsible for calculating replacement costs for equipment lost, stolen, damaged beyond economical repair (dollar value of repairs exceeds depreciated value of the asset), or when impractical to return. The Government will reimburse the contractor replacement costs based on the depreciated value of the asset. The replacement price offered in Exhibit A, Leasing Operations Pricing, shall reflect the price of a new container or chassis. The replacement cost of containers shall be subject to depreciation based on a 12-year useful life, the age of the asset, and calculated using straight-line depreciation with a 40 percent residual value. The replacement cost of chassis shall be subject to depreciation based on an 18-year useful life, the age of the asset, and calculated using straight-line depreciation with a 10 percent residual value. The contractor shall provide evidence of the age of the asset or, if not available, the Government will establish an age. The contractor shall transfer the title of the asset(s) to the Government.

Deliverable: Title

1.3.3 Task 3 – DOD Leasing Module (DLM). The contractor shall provide and maintain an Internet-based DOD Leasing Module (DLM) to capture and display information generated from the program management, leasing operations, and container support-related requirements identified herein. The contractor shall use the DLM as the primary means for capturing performance information under this contract. The contractor shall be responsible for updating the information contained within the DLM.

The DLM shall contain a container database comprised of DOD leased ISO equipment and stores basic elements of containers, such as the Asset Identifier, the owner (or responsible party in the case of leased units), and basic location information. The DLM shall provide data element query and print capability for management, performance, and ad-hoc reports. The ad-hoc query engine accesses all data elements and permits tiered sorting on all data elements selected for a report. The DLM shall accommodate no less than 100 users simultaneously.

1.3.3.1 Automated Access. The DLM shall provide real-time access to data via the Internet using commercial Internet browser software. The access shall supports both Microsoft Internet Explorer version number 9 and Netscape Communicator version 4.79, or later browser software.

The DLM shall provide access to a current user manual capable of being printed with proper page breaks/pagination and designed to provide all required training to use all functions of the DLM. The contractor shall maintain current instructions for user interface for ordering procedures, report queries, data updates, etc. The manual shall display current email addresses and telephone numbers for obtaining assistance during the work hours.

Uptime does not include downtime due to scheduled maintenance of the system. The contractor shall notify the COR electronically via email no later than four (4) hours prior to a scheduled maintenance event. In the event of a need for maintenance which must occur within four (4) hour notice, the contractor will contact the COR and explain the need for immediate action. In this case, the COR can then decide whether or not to include the maintenance work hours as part of the uptime calculation.

When the contractor provides creditable evidence demonstrating that Automated Access was not available because of an event caused solely by the actions of a third party, e.g. the severing of a communication cable by a construction crew, the resulting downtime, up to a maximum of 48 hours, shall not be chargeable against the Performance Threshold.

1.3.3.2 Contractor DLM Reports. The contractor’s DLM shall be capable of providing daily, monthly, and annual reports, unless otherwise indicated, in Microsoft Excel format capable of being legibly printed in full on 8 ½ x 11” paper and downloaded in electronic format for viewing, and, where consistent with the nature and use of the report, for direct incorporation into word processing, slide presentation, spreadsheet, or database software.

1.3.3.2.1 Ad-hoc Report. The contractor shall establish an ad-hoc report generator which shall allow access to “all” data fields including any data fields required to perform the contractor’s responsibilities under this PWS and enable the saving, alteration, or deletion of report ‘templates’ designed by users. Refer to Appendix B for the list of required data elements.

1.4 Deliverables. The contractor shall deliver reports and data as set forth in the below table. All deliverables shall be submitted electronically via e-mail to the PM, COR, and any others as identified within the PWS. If a delivery is submitted via e-mail and the size or the firewall prevents its delivery, the contractor shall deliver via compact disk/digital videodisk (CD/DVD). The CD/DVD must be properly labeled to identify the content to include classification, version number, and date. The contractor shall prepare and submit all deliverables electronically in Microsoft Office (i.e., Word, Excel, PowerPoint, Project, etc.)

formats pursuant to the following schedule. Deliverables will be identified by task order number, PWS subtask, and deliverable title.

Task Deliverable Title Delivery Schedule Recipient

1.3.1 POC Information At the Post-Award Conference PCO, PM, COR

1.3.1.2 Lease Tracking Report By the 5th business day of each month.

Respective AOA

1.3.1.2 Lease Expiration

Notification

90, 60, and 30 calendar days prior to lease expiration.

Respective AOA

1.3.1.3 QCP Not later than 60 calendar days

from date of contract award.

PCO, PM, COR

1.3.2.1 Cost Estimate Not later than close of next

business day.

Respective AOA, Requestor

1.3.2.2 Leased Equipment By RDD Respective AOA, Requestor

1.3.2.3.1 Interchange Paperwork

or DA Form 2404

Not later than five business days after inspection.

Respective AOA, Requestor

1.3.2.3.1 Pre-trip Structural and

Operating Inspection

At time of delivery. Respective AOA, Requestor

1.3.2.3.2 FHWA Annual

Inspection Report

At time of delivery. Respective AOA, Requestor

1.3.2.6 Damage Claim Within 21 days of off-hire Respective AOA, Requestor

1.3.2.7 Title Upon payment of equipment

replacement.

Respective AOA, Requestor

1.4.1 Inspection. A deliverable is a specific measurable, tangible, and verifiable activity, outcome, result, item, or product that the contractor shall provide and that will require formal Government acceptance and approval. The Government will review, assess and provide comment, as required.

1.4.2 Final Acceptance. Final inspection and acceptance of all work performed, reports, or other deliverables shall be performed at the place of delivery. The Government will notify the contractor of deliverable acceptance or provide comments, in writing, and the contractor, if necessary, shall revise and resubmit the final deliverable to the Government within the number of business days (unless otherwise specified) after receipt of Government comments.

2.0 SERVICE DELIVERY SUMMARY.

The Services Delivery Summary (SDS) represents the most important task order objectives that, when met, will ensure task order performance is satisfactory. Although not all PWS requirements are listed in the SDS, the contractor is fully expected to comply with all requirements in the PWS.

Task Performance Objective Performance Threshold

1.3.2.2 RDD Met

95% delivered by RDD, Remaining Assets Delivered Within 2 Business Days

1.3.2.3 Assets are Compliant Upon Initial Government Inspection

98% compliance, Remaining Assets Are Compliant Upon Final Government Inspection

1.3.2.4 Redeliver Equipment

95% of equipment redelivered within 5 business days, or as mutually agreed.

1.3.3.1 Maintain Customer Access to the Data Leasing Module (DLM) 24 Hours Per Day

DLM Must Be Accessible No Less Than 23 Hours Per Day

3.0 GOVERNMENT-FURNISHED PROPERTY AND SERVICES.

3.1 Government-Furnished Property. N/A.

3.2 Government-Furnished Information. N/A

3.3 References. The latest edition, in effect during the life of the contract, of the following shall apply:

Institute of International Container Lessors, Ltd. (IICL) o Guide for Container Equipment Inspection.

o IICL Repair Manual for Steel Freight Containers.

o IICL Guide for Container Chassis Inspection and all supplements and technical bulletins pertaining thereto.

o IICL General Guide for Refrigerated Container Inspection and Repair.

Title 49, Code of Federal Regulations (CFR 49).

CFR 49, Parts 450-453 CFR 49, Parts 100-177, Part 176, Subpart G, Paragraph 176.172 International Maritime Dangerous Goods (IMDG) Code.

International Organization of Standardization.

4.0 GENERAL INFORMATION.

4.1 Place of Performance. Tasks shall be performed at the contractor’s facility.

4.2 Work Hours. Contractor personnel are expected to be available during agency operating hours (0730 – 1630 CST) unless otherwise agreed upon. Work will generally consist of 40-hour work weeks, Monday through Friday, excluding federal holidays. The contractor shall be responsible for adapting schedules and performance to accommodate successful completion of tasks.

4.3 Emergency Contingency Clause. In the event of an emergency, the contractor’s designated project manager or alternate point of contact shall be available for coordination and shall provide container leasing services during non-duty days (i.e., holidays; to include federal holidays and weekends) at the Government’s discretion.

4.4 Cooperation with Other Contractors and Government Personnel. The contractor shall maintain a cooperative work environment with other Government contractors, railroads, railcar shops, and all others so as not to cause interference, disagreement or delays to work to be performed. Conflicts shall be brought to the attention of the Contracting Officer.

4.5 Quality Control. The contractor shall meet quarterly with the COR and Contracting Officer via teleconference during the first year of contract performance. Thereafter, teleconference meetings will be held bi-annually unless performance warrants scheduling a meeting sooner.

4.6 Quality Assurance. The contractor shall support Government agency reviews and audits of all services and support provided under this PWS. The contractor shall support Quality Assurance reviews conducted by the Government. The Government reserves the right to authorize an independent verification and validation of the contractor’s procedures, methods, data, equipment, and other services provided during the performance of this PWS.

5.0 SECURITY (CYBER,PHYSICAL, PERSONNEL, INFORMATION,

OPERATION, INDUSTRIAL, AND ANTITERRORISM / FORCE PROTECTION)

REQUIREMENTS.

5.1 General Security Information. The overall classification of work associated with this contract is at the UNCLASSIFIED level.

5.2 Common Access Card (CAC) Issuance. Not Required.

5.3 Visit Authorization to Scott AFB SDDC/USTRANSCOM Facilities. Visit(s) by contract company personnel not permanently assigned on Scott AFB (company presidents, company security managers, etc.) will require an electronic visit request in JPAS to SMO Code:

USTC-SDDC.

5.3.1 Hard copy visit requests are accepted for companies that do not have JPAS access and will be submitted on company letterhead to the SDDC/USTRANSCOM Security Service Center (SSC). Visit requests to SAFB will not exceed a 180-day duration and will not be valid if the visit extends past the base or option years of this contract period.

5.4 Security Compliance / Deviations. If the Government notifies the contractor that the employment or the continued employment of any contractor employee is prejudicial to the interests or endangers the security of the United States of America, that person shall be removed and barred from the worksite.

5.4.1 Circumstances surrounding the removal of contract employees include security deviations/incidents and credible derogatory information received or uncovered on contract members during the course of the contractual period. The contract company shall make any changes necessary in the appointment(s).

5.4.2 Persons employed by Army contractors will report threat-related incidents, behavioral indicators, and other matters of Counter-Intelligence (CI) interest specified in AR 381-12, Chapter 3, to the Facility Security Officer, the nearest military CI Office, the Federal Bureau of Investigation, or the Defense Security Service.

5.4.3 Contractor employees will comply with base access and control procedures.

5.4.4 Operations Security (OPSEC): All information furnished to the Contractor is to be used FOR OFFICIAL USE ONLY (FOUO). The Contractor is required to be aware of OPSEC requirements from SDDC. Information determined as FOUO or included as part of the OPSEC Critical Information List (CIL) is not to be released to the public.

5.5 Security Regulation Compliance. The Contractor will be required to comply with all security regulations and directives as identified herein, and other security requirements located in this contract. The contractor shall not divulge any financial, planning, programming, or budgeting information without the express consent of the Government as outlined in Operational Security (OPSEC) and Information Security regulations.

5.6 Security Regulation Guidance.

Department of Defense (DOD):

5200.1-R (DOD Information Security Program)

DOD regulations found at: http://www.dtic.mil/whs/directives/corres/pub1.html

Army:

AR 380-5 (Department of the Army Information Security Program) AR 381-12 (Threat Awareness and Reporting Program) AR 530-1 (Operations Security)

Army regulations found at: http://armypubs.army.mil/

SDDC:

SDDC Regulation 380-2 (SDDC Operations Security Program) SDDC Regulation 380-5 (SDDC Information Security Program)

HQ SDDC Industrial Security Point of Contact:

Jacqueline Wheeler 1 Soldier Way

SDDC G-2

Scott AFB, IL. 62225 Commercial: 618-220-6558 Email at jacqueline.c.wheeler.civ@mail.mil

HQ SDDC G2 Approval: Jacqueline Wheeler, 4 October 2012 HQ SDDC G2 Tracking #: HQSDDCG2-050-12

5.7 CYBER SECURITY

5.7.1 Requirement for Contractor Information Assurance (IA) Report. The Contractor shall provide an Information Assurance Report to describe their environment that safeguards DOD non-public information resident on or transiting the contractor's unclassified information systems from unauthorized access and disclosure. Protection measures applied should consider the risks (i.e. consequences and their probability) of loss, misuse, unauthorized access, or modification of information. The report shall address the SANS (SysAdmin, Audit, Network, Security) Institute's Twenty Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines (http://www.sans.org/critical-security-controls) and be provided in accordance with the attached template at Appendix D to the PWS. The contractor is encouraged to provide additional information above and beyond what is outlined in the SANS guidelines to enhance the government’s understanding of their information security posture. The report will be updated 30 days prior to exercise of an option period, if applicable.

5.7.2 Cyber Security Incidents.

5.7.2.1 Reporting Requirements. The contractor shall report to the following two Government organizations as soon as possible upon discovery of any suspected cyber intrusion events that affect DOD information resident on or transiting the contractor's unclassified information systems.

USTRANSCOM Global Command, Control, Communications and Computers (C4) Coordination Center (GCCC) E-mail: ustcJ6-gccc@ustranscom.mil Commercial Phone: 618-229-4222

USTRANSCOM Deployment and Distribution Operation Center (DDOC) E-mail: ustc-ddocchief@ustranscom.mil Commercial Phone: 618-220-7700

Initial report shall be provided even if some details are not yet available, with follow-on detailed reporting within 72 hours. Reportable cyber intrusion events include the following:

1. A cyber intrusion event appearing to be an advanced persistent threat

2. A cyber intrusion event involving data exfiltration or manipulation or other loss of any DOD information resident on or transiting the contractor's, or its subcontractors', unclassified information systems

3. Intrusion activities that allow unauthorized access to an unclassified information system on which DOD information is resident or transiting

Definition of advanced persistent threat: An extremely proficient, patient, determined, and capable adversary, including two or more of such adversaries working together.

5.7.2.2 Incident Report Content. The incident report shall include, at a minimum, the following information:

1. Applicable dates (date of suspected compromise and date of discovery)

2. Threat methodology (all known resources used such as Internet Protocol (IP) addresses, domain names, copies malware, etc.)

3. An account of what actions the threat(s) may have taken on the victim system/network and what information may have been accessed

4. A description of the roles and functions of the threat-accessed system

5. An initial list of potentially impacted government programs and each program’s classification

6. What information may have been exfiltrated that may impact government programs

7. A list of all employees and subcontracted employees who work or have worked with the victim system/network

8. A point of contact to coordinate damage assessment activities

5.7.2.3 Incident Report Submission. The contractor will submit unclassified network cyber incident reports to the USTRANSCOM Technical Information Analysis Center (TIAC) and USTRANSCOM designated government personnel via encrypted email or another mutually agreed upon secure communications method. Copies of malware require special handling and pre-coordination must be accomplished prior to submission.

6.0 CONTRACT TRANSITION.

The contractor shall ensure the continuity of service while implementing its Transition Plan for all affected activities to preclude any adverse impact on the mission. The contractor shall review and correct any weaknesses identified by the Government in the contractor’s proposed Transition Plan, and submit their revised Transition Plan within five (5) business days after contract award.

(a) The contractor shall implement and complete the transition phase within 84 calendar days after contract award.

(b) Transition Plan shall include DLM database development and implementation (including testing and demonstration) timelines. The Program Management and Lease portion as pertaining to DLM database logins and ordering screens shall be completed and implemented within the Transition Phase. The remaining data portions shall be completed and implemented based on the following priority: (1) Development of proposal to include a cost estimate and timelines for accommodating requirements for the separation of the booking system and billing functions; (2) Development of the overarching tracking system to accommodate all containers moving within the DOD/SDDC operational network; (3) Development of the AD-HOC reporting system;

(4) Review of the user’s guide for completeness and accuracy; (5) Development of the web page tie-in from the SDDC web page to the contractor.

(c) The contractor’s Transition Plan shall include a detailed description of, as a minimum, the following elements. The Transition Plan shall include actions and milestones for key events.

(1) Ability to accept lease requests and execute leases.

(2) Transfer of DLM database.

(3) Milestone schedules.

(4) Contractor contact information.

(5) Instructions for user interface for conducting lease transactions, data search, and ad-hoc report generation and performance monitoring capability using the described DLM.

(6) Ability to conduct DLM training whether it is via teleconference or on-site.

(7) Administration and management of security measures for the DLM.

(8) End of Contract Transition to include: training successor contractor, transition of the DLM database to successor contractor and reconciliation of outstanding debts to the Government.

The contractor shall maintain a cooperative work environment with other Government contractors and personnel so as not to cause interference, disagreement or delays to work to be performed. The contractor shall be responsible for adapting schedules and performance to accommodate additional support work. Conflicts shall be brought to the attention of the Contracting Officer.

APPENDIX A: DEFINITIONS, ABBREVIATIONS AND ACRONYMS

PART 1: DEFINITIONS

1. Authorized Ordering Agent (AOA). The Government person or agency who initiated the lease.

2. Ammunition Grade Container. A container constructed and maintained to comply with serviceability requirements prescribed by international treaty and mandated by United States transportation law for the shipment of United Nations Class 1 explosive materials

3. Approved Continuous Examination Program (ACEP). An alternative to scheduling periodic examinations of containers. This program complies with CSC requirements and is used by many commercial owners. An ACEP marking on the container indicates date that this method of examination was initially approved, not date of next required re-inspection.

4. Business Days. Days on which normal business is conducted (Monday through Friday, excluding Federal holidays). Federal holidays are: New Year’s Day, Martin Luther King Day, Presidents’ Day, Memorial Day, Independence Day, Labor Day, Columbus Day, Veterans’ Day, Thanksgiving Day, Christmas Day.

5. Business Hours. The hours of 7:30 a.m. to 4:30 p.m., Central Time.

6. Calendar Days. Consecutive days, without regard to weekends or holidays.

7. Chassis. A vehicle built specifically for the purpose of transporting containers, so that when the chassis and container are assembled, the unit produced serves the same function as a road trailer.

8. Consignee. The location where the assets are being delivered.

9. Container. A reusable cargo conveyance which confines and protects the cargo from loss or damage, can be handled in transit as a unit and can be mounted and secured in or on marine, rail or highway equipment.

10. Continental United States (CONUS). The 48 contiguous states and the District of Columbia.

11. Contracting Officer. A person with authority to enter into, administer, and/or terminate contracts and make related determinations and findings. The Procuring Contracting Officer (PCO) is responsible for the IDIQ contract and all actions. The AOA Contracting Officer (CO) is responsible for agency individual Task Orders.

12. Contracting Officers Representative (COR). An individual designated in accordance with subsection 201.602-2(2) of the Defense Federal Acquisition Regulation Supplement and authorized in writing by the Contracting Officer to perform specific technical or administrative functions.

13. Task order (TO). An order for services placed against the established contract that identifies customer requested and funded lease requirements.

14. Dry Container. A completely enclosed weatherproof container.

15. Flat rack. Open-sided and open-topped ISO containers with two removable/adjustable ends.

16. Institute of International Container Lessors, Ltd. (IICL). A trade organization of container lessors. It sponsors a technical committee of container owners, operators and manufacturers that prepare the Repair Manual for Steel Freight Containers. Also called IICL.

17. Intermodal. Type of cargo shipment system that permits transshipping among sea, highway, rail, and air modes of transportation through use of ISO standard containers, line-haul assets, and handling equipment.

18. International Convention for Safe Containers (CSC). An international treaty which entered into force on September 6, 1977, requiring safety approval of all containers and periodic inspections of containers at specified intervals to ensure maintenance of safe condition.

Individual Governments with the advice of the International Maritime Organization (IMO), a branch of the United Nations, administer the CSC.

19. International Maritime Dangerous Goods (IMDG) Code. Official Code that regulates transport of dangerous goods by sea to prevent injury to persons or damage to ship.

20. International Organization of Standardization (ISO). An international standards-writing body composed of national standards associations. Headquarters are in Geneva, Switzerland.

Technical committees such as ISO/TC104 (freight container committee) carry out technical work.

21. Non-Conforming Repair. A condition resulting from improper repair not in accordance with IICL standards.

22. On-Hire. The calendar date on which the customer accepts the equipment.

23. Off-Hire. The calendar date on which the equipment is picked up for redelivery by the contractor, subject to provisions of paragraph 1.3.2.3 of the PWS.

24. Ordering Officer (OO). An individual of an ordering activity authorized to issue Task orders under a specified contract. The individual may be the Contracting Officer of a using activity or a duly appointed ordering officer so authorized.

25. Outside Continental United States (OCONUS). Any country or place beyond the limits of the 48 contiguous states and the District of Columbia.

26. Performance Measure. The critical characteristics of the objective that will be monitored by the Government.

27. Performance Monitor. Government representatives designated to monitor contractor performance.

28. Performance Objective. A statement of the outcome or results expected to be achieved by the contractor.

29. Performance Standard. The target level or range of levels of performance for each measure.

30. Project Manager. An individual having full authority to act for the contractor on all matters and is responsible for the overall management and coordination of the work to be performed under the contract.

31. Program Manager. A Government representative who is responsible for the program and organizes resources and personnel to achieve program goals. When the contract is awarded, the program manager may be designated as the COR to assist in administering the contract.

32. Refrigerated (Reefer) Container. A weatherproof container for the movement of temperature controlled cargo insulated against external temperatures and equipped with mechanical refrigeration.

33. Repair Worthy. Damage or wear defects that require repair to maintain serviceability.

34. Required Delivery Date (RDD). A specific calendar date on which the contractor agrees to deliver all equipment identified in the TO.

35. Required Delivery Date (RDD) Window. A specific range of calendar dates on which the contractor agrees to begin and complete delivery of equipment identified in the lease.

36. Surface Deployment and Distribution Command (SDDC). A major Army command and USTRANSCOM component that provides cargo, passenger, and personal property traffic management services to all DOD Components.

37. Tank Container. Specialized containers that meet ISO and IMO requirements for transportation of hazardous and non-hazardous bulk liquids.

38. Wear and Tear. One or more physical defects caused by continuous deterioration in the condition of the equipment occurring under normal use conditions.

APPENDIX A: DEFINITIONS, ABBREVIATIONS AND ACRONYMS

PART 2: ABBREVIATIONS AND ACRONYMS

Acronym Definition ACEP Approved Continuous Examination Program AOA Authorized Ordering Agent AQL Acceptable Quality Level CFR Code of Federal Regulations CONUS Continental United States COR Contracting Officer’s Representative CSC International Convention for Safe Containers TO Task order DoD Department of Defense DLM DoD Leasing Module DPA Delegation of Procurement Authority GFM Government-Furnished Material IICL Institute of International Container Lessors, Ltd.

IMDG International Maritime Dangerous Goods Code IMS Information Management System ISO International Organization of Standardization SDDC Surface Deployment and Distribution Command OCONUS Outside the Continental United States PM Program Manager PWS Performance Work Statement QASP Quality Assurance Surveillance Plan RDD Required Delivery Date

APPENDIX B: REPORT DATA REQUIREMENTS

1.0 ADMINISTRATIVE DATA

Report Title Searchable Elements

Accounts Receivable Payments Date range, task order code Open Accounts Receivable Task order, payment center, branch, by

AOA

Task orders Pending: Approval, Acceptance, Estimate Completion, Expiration, Pending and Expiration

Lease code, branch, expiration days, by

AOA

Military On/Off Hire Equipment Report:

Historical data or Current Inventory

Date range, booking type, lease code, equipment type, branch

Container Purchase History Date range, branch, lease code, equipment type

Historical Data Task order, length of lease Equipment Damage Payments Date range, branch, task order Leased Equipment Inquiry Branch, task order Container Manufacture Date Container number(s)

2.0 PERFORMANCE DATA

Report Title Searchable Elements

Inspection vs. Acceptance Performance Summary

Equipment type, delivery location, date range, lease code

Required Delivery Date Performance Detail

Task order, equipment type, delivery location, branch, UIC, date range, lease code

Required Delivery Date Performance Summary

Task order, equipment type, delivery location, branch, UIC, date range, lease code

Required Redelivery Date Performance Detail

Task order, equipment type, delivery location, branch, UIC, date range, lease code

Required Redelivery Date Performance Summary

Task order, equipment type, delivery location, branch, UIC, date range, lease code

Required Redelivery By Agreement Performance Detail

Date range, pickup location, lease code

Required Redelivery By Agreement Performance Summary

Date range, pickup location, lease code

APPENDIX C: HISTORICAL DATA

1. HISTORICAL DATA.

1.1 The following chart depicts the amount and types of containers leased within the past three calendar years.

EQUIPMENT TYPE 2010 2011 2012

20 FT DRY ISO 4,993 1,299 1,958

20 FT AMMO GRADE 5,914 5,153 3,533

20 FT TANK-FUEL GRADE 39 19 33

20 FT REFRIGERATED 35 10 25

20 FT FLATRACK 26 5 0

20 FT STRAIGHT CHASSIS 246 285 154

40 FT DRY ISO 49 67 52

40 FT REFRIGERATED 7 7 4

40 FT FLATRACK 35 55 42

40 FT STRAIGHT CHASSIS 76 112 43

DROP FRAME CHASSIS 23 14 21

GENSET CLIPON 35 10 25

GENSET UNDERSL 7 7 4

TOTAL EQUIPMENT LEASED 11,485 7,043 5,894

TOTAL TASK ORDERS ISSUED 184 189 119

APPENDIX D: SECURITY CONTROLS

Vendor Assessment Guidelines for Twenty Critical Security Controls for Effective Cyber

Defense: Consensus Audit Guidelines (CAG)

General. Organizations should compare all 20 control areas against their current status.

The 20 Critical Controls are:

1. Inventory of Authorized and Unauthorized Devices

2. Inventory of Authorized and Unauthorized Software

3. Secure Configurations for Hardware and Software on Laptops, Workstations, and Servers

4. Secure Configurations for Network Devices such as Firewalls, Routers, and Switches

5. Boundary Defense

6. Maintenance, Monitoring, and Analysis of Security Audit Logs

7. Application Software Security

8. Controlled Use of Administrative Privileges

9. Controlled Access Based on the Need to Know

10. Continuous Vulnerability Assessment and Remediation

11. Account Monitoring and Control

12. Malware Defenses

13. Limitation and Control of Network Ports, Protocols, and Services

14. Wireless Device Control

15. Data Loss Prevention

16. Secure Network Engineering

17. Penetration Tests and Red Team Exercises

18. Incident Response Capability

19. Data Recovery Capability

20. Security Skills Assessment and Appropriate Training to Fill Gaps

The entire text of the 20 Critical Security Controls is available for reference at:

http://www.sans.org/critical-security-controls/

Procedures:

1. Review each control.

2. Determine what…