N6134018R0056_Attachment-DRAFT_Sup_Addendum_AC_LCS_Specific_17_Apr_18.pdf

SURFACE COMS ADDENDUM A N61340-18-R-XXXX

PWS # 66410-A-0448

17 April 2018

SUPPLEMENTAL ADDENDUM AC

(LCS SPECIFIC)

SECTION 1: GENERAL DECSCRIPTION

1.1 SCOPE. The following paragraphs augment PWS Addendum A, with requirements specific to LCS training systems. For site specific requirements refer to the following appendices and their associated attachments.

Table 1 below provides an overview of LCS-related document structure developed for this PWS.

Table 1 Document Structure

SECTION 2: CONTRACTOR OPERATION AND MAINTENANCE SERVICES

2.1 SPECIFIC CUSTODIAL REQUIREMENTS. The contractor shall provide custodial services for the

LTFs as specified in this supplemental addendum and applicable appendices and attachments. The contractor shall provide the COR with a monthly schedule, not later than (NLT) five (5) working days prior to the following month, of services/planned cleaning evolutions to be accomplished. The COR may require adjustment to the schedule based on planned Command activities that may potentially be impacted by the contractor’s planned service/cleaning

ADDENDUM A

SURFACE COMS

PWS 66410-A-0448

SUPPLEMENTAL ADDENDUM AC

(LCS Specific)

APPENDIX C-1

LCS Training Facility, San Diego, CA

APPENDIX C-2

LCS Training Facility Mayport, FL

ATTACHMENT 1

LCS 1 Integrated Tactical Trainer (ITT1A)

ATTACHMENT 1

LCS 1 Integrated Tactical Trainer

ATTACHMENT 2

LCS 2 Integrated Tactical Trainer (ITT2A)

ATTACHMENT 2

Bridge Part Task Trainer (BPTT)

ATTACHMENT 3

Bridge Part Task Trainer (BPTT)

ATTACHMENT 3

Virtual Ship Training System (VSTS)

ATTACHMENT 4

Virtual Ship Training System (VSTS)

ATTACHMENT 4

Mission Bay Trainer (MBT)

ATTACHMENT 5

LCS 2 Mission Bay Trainer (MBT)

ATTACHMENT 5

Electronic Surveillance System Part Task Trainer

(ESM PTT)

ATTACHMENT 6

Mission Package Training System (MPTS)

ATTACHMENT 6

Mission Package Training System (MPTS)

ATTACHMENT TBD

LCS 2 Integrated Tactical Trainer (ITT2B/C)

TBD

schedule. The contractor shall adjust their schedule as necessary in coordination with the COR to ensure Command and user activities are not negatively impacted. The following schedule applies:

Table 3 Custodial Schedule

AREA (Note 1) CLEANING REQUIREMENT FREQUENCY

Training Systems and Equipment IAW preventive maintenance schedule (PMS), maintenance operating procedures (MOP)

As required by PMS, MOP

All Assigned Spaces (except MBT mission bay area), Offices, and

Maintenance Shops

Remove trash, debris, rubbish, and empty trashcans

As required, as a minimum daily

Assigned Training Support Areas

(except MBT mission bay) and

Storerooms to include: Contractor furnished facilities, facilities, and trainer support gear

Sweep/vacuum floors

Dusting

Wet Mop Floors

High-dusting/sweep down cobwebs

Damp sponge horizontal surfaces

Vacuum/clean under raised decking

Twice Weekly

Weekly

Weekly, or sooner when needed

Monthly

Monthly

Annually

MBT mission bay area High dusting/sweep down cobwebs Semi Annually

Note 1: COMS will not provide custodial support for MBT mission bay area floors, bulkheads, angle irons, beams, catwalks, or other equipment/support structures not maintained by COMS, except as specified in Table 3 above.

2.2 ADDITIONAL EQUIPMENT MAINTENANCE REQUIREMENTS.

2.2.1 PREVENTIVE MAINTENANCE. The contractor shall accomplish a regular schedule of PM including corrosion control (e.g., thorough rust removal, surface restoration, priming, painting, repair of bent/damaged panels, etc.) on ALL training systems/equipment listed in this task order to include cranes, forklifts, and MOBICON’s. The same exceptions apply for preventative maintenance of the MBT mission bay area as those listed in Table 3

Custodial Schedule, Note 1, above. PM shall be performed IAW the approved Planned Maintenance System (PMS) and Maintenance/Support Plan. The Contractor PM responsibilities shall also include, but not be limited to, spot-painting, re-stenciling, preparation for adverse weather conditions, and maintaining the internal/external cleanliness of training systems and equipment. All PM inspections and required maintenance actions shall be recorded on MAF or Government approved substitute forms or systems. Actions to clear a discrepancy shall be taken within five (5) workdays relevant to service number three (3) of the Performance Requirements Summary (PRS). The Contractor shall recommend PM changes, which based on their experience would result in improved availability and/or reduced costs. Recommendations shall be provided to the Government in writing. The Contractor shall provide a summary document of all PM activities in the Contractor’s format to be presented in the Annual Site Review at each site.

2.2.2 CORROSION CONTROL. The contractor shall be responsible for all corrosion control efforts, both internal and external, of all training devices and support equipment. The same exceptions apply for corrosion control of the MBT mission bay area as those listed in Table 3 Custodial Schedule, Note 1, above. The contractor shall:

a. Perform visual inspections of trainer/trainer facilities as per maintenance requirements or QC program.

b. Localize any problem areas and provide information and a schedule for repairs to the COR.

c. Corrosion control efforts include, rust removal, sandblasting, patching, priming and painting (if applicable) the use of best commercial standards/practices and complying with all station and local policies concerning generation and disposal of HAZMAT. Additional contractor recommended corrosion control methodologies are encouraged and require approval by the COR.

2.2.3 MAINTENANCE RESPONSE TIMES. The contractor shall respond and shall commence corrective maintenance within fifteen (15) minutes after notification by the Government that a TS/E has malfunctioned. The response time is sixty (60) minutes for equipment supported by CMS. The response time is two (2) hours for equipment supported by OCCM.

2.2.4 DEPOT LEVEL (D-LEVEL) MAINTENANCE. The contractor shall be responsible for Depot Level repair/rework of training device repairable components and equipment. Depot maintenance shall include off-site maintenance/repair that cannot be performed at the training device site due to lack of technical documentation, spare parts, special tools and test equipment, requirements for major overhaul, complete rebuild, or fabrication of parts, assemblies, subassemblies and end items. The contractor may establish a repair facility, subcontract repair/rework, return subassemblies and modules to the OEM, or purchase an identical/equivalent quality replacement. The contractor shall be responsible for all maintenance (repair/rework) of trainer equipment up to and including $25,000 per item. In the event repair costs exceed $25,000, the contractor shall be responsible for the $25,000 portion and the Government will be responsible for the portion over $25,000. Reference: Task Order Schedule H, Clause

5252.211-9501 EXCESS REPAIR/REPLACEMENT COST (NAVAIR) (OCT 1994) and Attachment 11 (OAWR) for appropriate forms and process. All D-Level discrepancies must be recorded on a MAF or Government approved substitute form for systems when discovered, and corrected within 30 days relevant to service number two (2) of the

PRS.

2.2.5 SUMMARY REPORT OF O/I/D-LEVEL MAINTENANCE. The contractor shall provide a summary document of all activities in PWS paragraphs 5.4.4 – 5.4.6 in the contractor’s format that shall be presented at the

Annual Site Review at each site. The report shall include tracking metrics for maintenance, repair and supply activities to include Mean Time To Repair (MTTR), Mean Time Between Failures (MTBF), Turn-Around-Time

(TAT), Awaiting Maintenance for Parts (AWP) and others of the contractor’s selection that present a comprehensive view of the maintenance and supply activities necessary to sustain the training devices and systems.

2.2.6 MINIATURE/MICRO MINIATURE (2M) SUPPORT. The contractor shall implement a 2M program capable of supporting both new and aging systems to forestall parts obsolescence. The contractor shall provide

Circuit Card Assembly (CCA) repair for items as a bench top maintenance capability.

2.2.7 ELECTRONIC SURVEILANCE SYSTEM (ESS). The Contractor shall be responsible for the proper operation and maintenance of the LTF ESS to include programming, testing, and training system operators on its use. The ESS consists of two primary systems, the Intrusion Detection System (IDS) and the Access Control

System (ACS). These systems include the building alarm system, camera system, and card/badge reader system.

2.2.8 UNINTERRUPTED POWER SUPPLY (UPS). The Contractor shall be responsible for maintenance of all trainer-specific UPS systems, to include maintenance, replacement, and proper disposal of batteries.

2.2.9 ENVIRONMENTAL CONTROL UNITS (ECU) AND COMPUTER ROOM AIR CONDITIONING

(CRAC) UNITS. The contractor shall be responsible for maintenance of all ECUs and CRAC units which explicitly provide cooling, and ventilation solely for training device enclosures and trainer equipment spaces. This shall include preventive and corrective maintenance as well as replacement if required during the duration of contract.

2.2.10 SOFTWARE LICENSE RENEWALS. As an OAWR, the contractor shall control, maintain, and validate the expiration dates of all non-perpetual software licenses as part of their CM process. The contractor shall initiate the acquisition process of such software licenses’ renewals no later than 90 days before the expiration date.

The duration for the software license subscription renewal period should be no less than three years.

2.2.10.1 UNAUTHORIZED OBLIGATIONS. When any supply or service acquired under this contract is subject to any EULA, Terms of Service (TOS), or similar legal instrument or agreement, that includes any clause requiring the Government to indemnify the contractor or any person or entity for damages, costs, fees, or any other loss or liability that would create an Anti-Deficiency Act Violation (31 U.S.C 1341), the following shall govern:

a. Any such clause is unenforceable against the Government.

b. Neither the Government nor any Government authorized end user shall be deemed to have agreed to such clause by virtue of it appearing in the EULA, TOS, or similar legal instrument or agreement. If the EULA, TOS, or similar legal instrument or agreement is invoked through an “I agree” click box or other comparable mechanism, execution does not bind the Government or any Government authorized end user to such clause.

c. Any such clause is deemed to be stricken from EULA, TOS, or similar legal instrument or agreement.

1. The above clause does not apply to indemnification by the Government that is expressly authorized by statute and specifically authorized under applicable Government regulations and procedures.

2.2.11 INFORMATION ASSURANCE TECHNICIAN (IAT) LEVEL II. In order to successfully troubleshoot and repair many aspects of the LCS trainers, to include the ITTs and the CMPTs, access to the root directories is required. In order for a technician to be granted access to root directories the technician must be IAT

Level II qualified as determined by the site IAM.

2.3 CYBERSECURITY. The contractor shall provide Cybersecurity technical system administration support at each site on all training devices identified by this PWS. All contractor personnel who require System

Administrator Level Network Access in the performance of their work shall, at a minimum, be qualified at IAT

Level II. The window of opportunity to install patches and perform vulnerability scans is normally during scheduled maintenance service hours and is subject to change to allow for additional hours for Cybersecurity maintenance.

Cybersecurity tasks include sub paragraphs (a) through (t).

a. Maintain trainer Cybersecurity programs identified through Cybersecurity architecture requirements, objectives, and policies; Cybersecurity personnel; and Cybersecurity processes and procedures. This includes the maintenance and performance of the tasks identified by the Cybersecurity controls listed in

Department of Defense Instruction (DoDI) 8500.2 series, the DoDIA Risk Management Framework

(DIARMF) package or the Platform Information Technology Risk Approval Package, and the Designated

Approving Authority (DAA) Accreditation memorandum for the corresponding Mission Assurance

Category III (MAC III), Sensitive or Classified training device.

b. Provide certified IA Technical Level II personnel to perform Cybersecurity duties as required in DoD

8570.01-M.

c. Assist and support the site Information Assurance Manager (IAM) with the implementation of the

Information Assurance Vulnerability Management Program (IAVMP). Implement/install applicable government-directed patches including: Information Assurance Vulnerability Alerts (IAVA), Information

Assurance Vulnerability Bulletins (IAVB), and Information Assurance Technical Advisories (IATA) for the trainer operating system(s) and software applications. Assist and support the respective IAM in vulnerability management updates.

d. Ensure information ownership responsibilities are followed to include accountability, access approvals, and special handling requirements.

e. Ensure site Cybersecurity and security procedures are followed IAW configuration management and with applicable STIG policies and command directives.

f. Support Security Test & Evaluations or Validation Tests (Part of Certification and Accreditation Process).

g. Implement Government directed technical vulnerability corrections.

h. Perform and record the periodic vulnerability scanning and tasking specified by the site IAM

i. Implement and enforce Department of the Navy (DON) systems account access and password policy IAW

Secretary of the Navy (SECNAV) Manual M-5239.1 series.

j. Ensure the administration of privileged user accounts IAW system role-based access schemes as per site operating procedures and IAM authorization. Assist the IAM in maintaining accounts currency to ensure that individual accounts designated as inactive, suspended, or terminated are promptly deactivated and associated passwords are disabled and removed.

k. Report any suspected/potential security violation(s), take appropriate action IAW SECNAVINST 5239.19 series and applicable local directives to mitigate any adverse impact and preserve any evidence, if able.

l. Ensure system audit logs are reviewed IAW local site policies and procedures and any security violations are reported to the IAM. Ensure audit log records are backed up and maintained IAW DoDI 8500.2 series controls.

m. Perform data backup as required by the MRC.

n. Perform antivirus software updates and virus scanning IAW DoDI 8500.2, the C&A package, and/or as required by the MRC.

o. Maintain and update IA POA&M tasking IAW DoDI 8500.2 the C&A package, and/or as required by the

MRC.

p. Ensure all media and data storage is properly marked and labeled per policy and guidance documents (i.e., SECNAV M-5510.36 series).

q. Ensure that network device program activities are carried out for the network control devices (e.g., firewalls, routers, switches), IAW DOD policy and organization specific guidelines, including maintaining configuration of network control devices IAW Defense Information Systems Agency (DISA), Security

Technical Implementation Guides (STIGs) and National Security Agency (NSA) security guidelines to protect the network control devices from unauthorized access.

r. Conduct quarterly tests on network(s) for changes and updates made to the network control devices to ensure integrity IAW the systems Configuration Management Plan and C&A package.

s. Ensure COMS contract personnel receive initial and annual Cybersecurity training. All Cybersecurity training shall be documented and available for IAM/COR review at any time.

t. Applying approved media patches, updates, and overlays to existing programs.

2.4 NETWORK AND COMPUTER SYSTEMS ADMINISTRATION. The contractor shall be responsible for performing system administration and maintenance functions for the trainer system software and associated documentation. Examples of work to be performed include:

a. account management

b. configuration management

c. maintaining trainer system software media (and backup copies) in operable condition

d. installing approved patches, updates, and overlays to trainer system software and updating associated documentation

e. generating backups of all trainer system software on trainer backup media and retaining copies at the site

f. troubleshoot and isolate malfunctions and operational discrepancies caused by software programs to the lowest definable level and make corrections as required (excluding corrections requiring source code changes)

g. building and maintaining scenario database

h. assisting in reassembly of trainer programs from source programs

i. maintaining a permanent backup and record of temporary and permanent software media patches/updates/overlays

j. configuration, setup, and CM of all network switches and routers

k. configuration of Domain services such as TCP/IP addressing, HTTP, SNMP, FTP, DNS, and IPSEC

2.5 UTILIZATION ACTIVITIES REPORT. The contractor shall document all trainer utilization activities and provide a summary report, in the Contractor’s format, that shall be presented at the Annual Site Review at each site. The intent of the utilization activities report is for the Government to have an annual compiled representation of typical utilization, surges, premium time use, and all other such activity in order to facilitate long-range planning.

The Utilization Activities Report content differs from the basic cumulative data in the Monthly COMS Report

CDRL A005.

2.6 CONTRACTOR MAINTENANCE SERVICES (CMS). The contractor shall provide to the

Government CMS for assigned training devices and associated equipment. Such services are those required to maintain and logistically support the training devices to achieve the required operational availability specified for that system. The contractor is responsible for spares replenishment and all levels of maintenance. Contractor personnel shall respond to CMS requests from the Government within sixty (60) minutes. CMS response time is inclusive in hours-to-repair used for CPF calculations.

2.7 ON-CALL CORRECTIVE MAINTENANCE (OCCM). The contractor shall be responsible for returning OCCM TS/E to an FOC, unless otherwise specified herein. The COR or designated representative will notify the Site Manager or Shift Supervisor that the TS/E has malfunctioned. Once notified of the malfunction, the contractor shall respond within two (2) hours to perform required corrective maintenance. OCCM shall include, but is not limited to, fault isolation, trouble-shooting, adjusting, testing, aligning, calibrating, repairing, reverse engineering for such things as replacing obsolete parts, fabricating components, and generating and revising maintenance documentation. The contractor shall trouble-shoot and isolate hardware and equipment fault to the

LRU and complete repair within 48 hours from the time they arrive on-site, unless an exception is approved by the

COR.

Table 4 Equipment to be Supported by OCCM

Type of Equipment Device/Trainer Supported Site