Attachment_2_--_Supplemental_SOW.docx

SOURCE SELECTION INFORMATION - SEE FAR 2.101 AND 3.104

Supplemental F/A-18 A/B/C/D Statement of Work (SOW)

SOURCE SELECTION INFORMATION - SEE FAR 2.101 AND 3.104

Supplemental F/A-18 A/B/C/D Statement of Work (SOW)

Supplemental F/A-18 A/B/C/D Statement of Work

SCOPE

This supplemental F/A-18 A/B/C/D Statement of Work (SOW) (herein referred to as supplemental SOW) shall apply if the performance of the Depot Level Maintenance is performed by Canadian companies located within Canada or the U.S. This supplemental SOW encompasses the requirements that must be performed solely by a U.S. company in order to perform the scope of work as detailed in Attachment (1).

APPLICABLE DOCUMENTS

Applicable documents are listed in Attachment (1), F/A-18 A/B/C/D Contractor Depot Level Maintenance SOW (herein referred to as Attachment (1)), Paragraph 2.

REQUIREMENTS:

Program Security:

Program Protection Implementation Plan (PPIP), Public Release, Security Classification Guides (SCGs), and Information Assurance (IA) shall be maintained IAW Attachment (1), Paragraph 3.3.12.

The U.S. Contractor shall be responsible for all documentation required for security certification and visit request authorizations to its site (if different from the Canadian Contractor).

The U.S. Contractor shall facilitate annual PMA265 site visits, not to exceed three (3) working days, to verify compliance of this supplemental SOW.

Personnel Clearances:

The U.S. Contractor shall be composed of U.S. citizens only – dual citizenship is not authorized. The U.S. Contractor shall ensure that all Contractor employees requiring a security clearance in the performance of their duties obtain an Interim Secret Clearance, at a minimum, before being assigned to support these requirements contained herein.

Communications Security /Cryptologic Controlled Items (COMSEC / CCI): As set forth in Attachment (1), Paragraph 2, References (l) and (hh), U.S. Contractor personnel (Local Element (LE) Issuing / Using, and Electronic Key Management System (EKMS) Witnessing) who are granted access to COMSEC material shall be a natural born or naturalized U.S. citizen.

The U.S. Government will provide an EKMS Manager.

The U.S. Contractor shall establish and maintain an EKMS account and perform all associated responsibilities as set forth in Attachment (1), Paragraph 2, Reference (m).

All U.S. Contractor employees that will be required to handle COMSEC, CCI assets, and / or require a COMSEC / CCI “need to know” shall complete and comply with all associated COMSEC Material System (CMS) Education, Training, and Inspections delineated in Attachment (1), Paragraph 2, References (m) and (ll).

Sanitization / Safeguarding:

Upon F/A-18 A/B/C/D aircraft arrival at the Canadian Contractor facility, the U.S Contractor shall perform: Program protection in accordance with Attachment (1), Paragraph 3.3.12; Full-systems functional tests / checks; Functional Check Flight (FCF) support (if required); Verification that the Weapons Replaceable Assemblies (WRA) identified in Appendix 1 have been removed by the Reporting Custodian; and Sanitization of WRAs identified in Appendix 2.

If any of the equipment listed in Appendix 1 is found to be still installed on the aircraft, the U.S. Contractor shall remove the equipment in accordance with the applicable technical manuals referenced Attachment (1), Paragraph 2. All requirements contained in this supplemental SOW shall apply to those WRAs listed in Appendix 1 found to be still installed on the aircraft.

The U.S. Contractor shall conduct Part Number and Serial Number inventory of all classified equipment and CCI, to include all items in Appendices 1 and 2, and report per Supplemental SOW Paragraph 3.6.2.

The U.S. Contractor shall maintain positive control at all times (security, sanitization, re-installation, safe-guarding, handling, transportation, functional testing, and shipping) over all sensitive, classified and COMSEC materials. The U.S. Contractor shall perform continuous aircraft security / safeguarding at all times when WRAs identified in Appendices 1 or 2 are installed.

The U.S. Contractor shall prevent unauthorized access to COMSEC / CCI and ensure that Foreign Nationals are not granted access to, or provided information about, COMSEC keying material without written permission from the material’s Controlling Authority.

The U.S. Contractor shall maintain positive control of software and data loads, control access to software loading devices and shall perform loading of any required software. Only U.S. Contractor personnel will use software loading devices for items listed in Appendices 1 and 2.

The U.S. Contractor shall zeroize / erase selected items as directed by the Technical Point of Contact (TPOC).

COMSEC / CCI:

The U.S. Contractor shall turn in all classified and CCI items removed from the aircraft (or received from the U.S. Government) to the U.S. Contractor EKMS LE, to be secured in a Contractor furnished fixed COMSEC facility in General Services Administration (GSA) approved security vaults and safes, per Attachment (1), Paragraph 2, References (m) and (ll). U.S. owned Weapons Replaceable Assemblies (WRA) shall not be secured, safe-guarded, transported or shipped with Non-U.S. owned WRAs.

The U.S. Contractor shall ship and receive classified and CCI items via Defense Courier Services per Attachment (1), Paragraph 2, References (m) and (ll).

Re-Installation, Functional Tests, and FCFs:

Upon return of the aircraft from the Canadian Contractor, with Defense Contract Management Agency (DCMA) authorization in writing, the U.S. Contractor shall re-install sanitized items and / or install new components as required by Technical Directives (TD) applicable to the aircraft.

The U.S. Contractor shall perform all systems functional tests / checks in support of Attachment (1), Sections 3.4 and 3.5, and report completion of the full systems functional tests/ checks in writing to DCMA.

The U.S. Contractor shall allow no Foreign National access to classified and CCI assets and Critical Program Information (CPI) during full-systems functional checks, FCFs or when installed on the aircraft prior to successful launch of the aircraft to the Reporting Custodian.

When power is applied to the aircraft, the U.S. Contractor shall ensure no Canadian personnel are within visual proximity to the cockpit displays.

The U.S. Contractor shall notify DCMA of any discrepancies found during full-systems functional checks or FCFs performed by a U.S. Government Flight Representative (GFR) per the O&A processes as defined in Attachment 1, Paragraph 3.5.13.

The U.S. Contractor shall participate in pre FCF briefs and post FCF debriefs in support Attachment (1), Sections 3.4 and 3.5.

The U.S. Contractor shall re-sanitize the aircraft as directed by DCMA and report re-sanitization completion per Supplement SOW Paragraph 3.6.1.

Reporting:

The U.S. Contractor shall report completion of Supplemental SOW Paragraphs 3.3.1 (Sanitization) and 3.5.3.2 (Re-Sanitization) in writing to DCMA.

The U.S. Contractor shall obtain written confirmation of its compliance of Supplemental SOW Paragraphs 3.3.1 and 3.5.3.2 from DCMA.

Upon DCMA written authorization, the U.S. Contractor shall provide aircraft availability notification in writing to the Canadian Contractor.

The U.S. Contractor shall provide DCMA a monthly inventory report on all classified and CCI assets removed, safeguarded, and re-installed or during any change in status (i.e. shipped / received from U.S. Navy Supply).

The U.S. Contractor EKMS LE shall record and maintain the applicable identifying information in a site Classified Information Management System (inventory that resides inside the GSA approved vaults and safes) for any classified non-COMSEC items removed from an aircraft.

The U.S. Contractor EKMS LE shall coordinate with the COMSEC account manager of the Reporting Custodian for the received materials / items per Attachment (1), Paragraph 2, References (m).

Access to Government IT Systems:

Upon contract award, the U.S. Contactor shall have resident capability for PKI certification established IAW Attachment 3.

The U.S. Contractor shall access: NMCI; CMPro; FAME; OOMA; DECKPLATE; and CAD/PAD, Government IT Systems in the performance of the requirements outlined in Attachment 1, Paragraphs 3.5.9 thru 3.5.11, 3.5.19, 3.5.21, 3.6.5, 3.6.7 thru 3.6.11, and 3.7.5.

Access to the NATEC Government IT System will only be provided to a U.S. Citizen in the performance of the requirements outlined in Attachment 1, Paragraphs 2 and 3.5.19.

ACRONYMS

Applicable acronyms are listed in Attachment (1), Section 4.

DEFINITIONS

Applicable definitions are listed in Attachment (1), Section 5.

Appendix 1: WRAs to be removed by the Reporting Custodian prior to F/A-18 A/B/C/D ferry flight to a Canadian Contractor facility is located in the Technical Library.

Appendix 2: WRAs to be removed by the U.S. Contractor upon F/A-18 A/B/C/D aircraft arrival at a Canadian Contractor facility is located in the Technical Library.