N6449818R4036_MOBI_Control_Systems_Support_PWS_SOW_Draft.pdf

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 1

Statement of Work (SOW) for

Man Overboard Indicator (MOBI) System Support

1.0 INTRODUCTION

1.0.1 The Naval Surface Warfare Center Philadelphia Division (NSWCPD) is a Department of Defense entity responsible for research and development, test and evaluation, engineering and fleet support organization for the Navy’s ships, submarines, military watercraft and unmanned vehicles. This requirement is for NSWCPD Code 431, which is responsible for the Man Overboard Indicator (MOBI) system.

1.0.2 This contract is for non-personal services. It does not create employment rights with the U.S. Government whether actual, inherent, or implied

1.0.3 Government / Contractor Relationship

(a) The services to be delivered under this Contract are non-personal services and the parties recognize and agree that no employer-employee relationship exists or will exist under the Contract between the Government and the Contractor's personnel. Therefore, it is in the best interest of the Government to provide both parties a full understanding of their respective obligations.

(b) The Contractor employees shall identify themselves as Contractor personnel by introducing themselves or being introduced as Contractor personnel and displaying distinguishable badges or other visible identification for meetings with Government personnel. In addition, Contractor personnel shall appropriately identify themselves as Contractor employees in telephone conversations and in formal and informal written correspondence

(c) Contractor personnel under this Contract shall not engage in any of the inherently Governmental functions listed at FAR Subpart 7.5 or DFARS Subpart 207.5.

(d) Employee Relationship:

1) The services to be performed under this Contract do not require the Contractor or its personnel to exercise personal judgment and discretion on behalf of the Government.

Rather the Contractor's personnel will act and exercise personal judgment and discretion on behalf of the Contractor.

2) Rules, regulations, directives, and requirements that are issued by the U. S. Navy and NSWCPD under its responsibility for good order, administration, and security are applicable to all personnel who enter a Government installation or who travel on Government transportation. This is not to be construed or interpreted to establish any degree of Government control that is inconsistent with a non-personal services contract.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 2

(e) Inapplicability of Employee Benefits: This Contract does not create an employer-employee relationship. Accordingly, entitlements and benefits applicable to such relationships do not apply.

(f) Notice. It is the Contractor's, as well as the Government's, responsibility to monitor Contract activities and notify the Contracting Officer if the Contractor believes that the intent of this Section has been or may be violated.

1) The Contractor should notify the Contracting Officer in writing within three (3) calendar days from the date of any incident that the Contractor considers to constitute a violation of this Section. The notice should include the date, nature, and circumstances of the conduct; the name, function, and activity of each Government employee or Contractor official or employee involved or knowledgeable about such conduct; identify any documents or substance of any oral communication involved in the conduct; and the estimate in time by which the Government must respond to this notice to minimize cost, delay, or disruption of performance.

2) The Contracting Officer will, within five (5) calendar days after receipt of notice, respond to the notice in writing. In responding, the Contracting Officer will either:

(i) Confirm the conduct is in violation and when necessary direct the mode of further performance,

(ii) Countermand any communication regarded as a violation,

(iii) Deny that the conduct constitutes a violation and when necessary direct the mode of further performance, or

(iv) In the event the notice is inadequate to make a decision, advise the Contractor what additional information is required, and establish the date by which it should be furnished by the Contractor.

1.1 BACKGROUND

The Aircraft and Vehicle Handling Branch (Code 431) of the Naval Surface Warfare Center, Philadelphia Division (NSWCPD) has been tasked to assess, groom, repair, install, provide training and validate Man Overboard Indicator (MOBI) systems on US Navy ships. Each Man Overboard transmitter shall be backward compatible to existing MOBI systems already in use in the Navy Fleet and shall be able to broadcast a unique code, identifying the specific transmitter that has been activated to eliminate confusion during events when multiple individuals fall overboard. The objective of this effort is to outfit each ship with a system capable of alerting the crew to a man overboard event, so that a lifesaving rescue can be affected.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 3

1.2 SCOPE OF WORK

Under this effort the contractor shall provide hardware (as required) in Paragraph 3.1 of the contract as well as all shipcheck, installation, testing and training support specified in Section 3 of this statement of work.

2.0 APPLICABLE DOCUMENTS

2.1 NAVSEA SL720-00-MAN-030 “Navy Modernization Process

Management and Operations Manual (NMP-MOM)”

2.2 NAVSEA Technical Specification 9090-310 (Series) “Alterations to Ships Accomplished by AITs”

2.3 NAVSEA S9AAO-ABGOS-010/GSO “General Specifications for

Overhaul of Surface Navy Ship”

2.4 DOD-STD-2003 “Electric Plant Installation Standard Methods for Surface Ships and Submarines”

2.5 NAVSEA Standard Items 009-FY19

2.6 NAVSEA Standard Item 009-22, Shipboard Electric Cable Test.

These documents can be referenced at: www.navsea.navy.mil

The Contractor shall reference and utilize the latest version available when performing tasks within this PWS.

3.0. REQUIREMENTS

3.1 MOBI System Material

Based on delivery order requirements, the contractor may be required to provide the following MOBI equipment: (a) MOBI Direction Finder Antenna DF-A101; (b) MOBI Direction Finder Display DF-D101; (c) MOBI Transmitter TX-104; (d) MOBI Receiver RX-103; (e) MOBI Handheld Direction Finder DFP-HH200; (f) MOBI Digital Selective Calling Transmitter TX-106. All materials shall be FOB destination.

3.2 Shipcheck Support

The contractor shall conduct shipchecks in collaboration with a Navy liaison. Liaison includes ship Port Engineers, NSWCPD On-Site Installation Coordinators (OSICs), NSWCPD Subject Matter Experts, Ship’s Force senior military (CSO, EMO, XO), etc.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 4

The contractor shall visit each ship and verify the layout of the bridge, mast, and small boat(s) to determine consistency with Ship Change Document (SCD) and Boat Alteration (BOATALT) documentation and to determine the optimal placement of the system components. The contractor shall work with the ship’s crew in verifying this determination. In addition, the contractor shall identify all requirements for the installation of the MOBI system on each ship. These requirements shall include power, antenna location, component mounting and cable layout. Specifically, the contractor shall identify required items such as mounting brackets for individual components, installing power lines and junction boxes, welding and new stuffing tubes or modifying existing stuffing tubes and ensuring sufficient space is available for the appropriate length for the cables.

The contractor shall provide system verbal in-brief and familiarization training during the initial ship visit to give the ships’ leaders an opportunity to establish a beacon distribution and accountability plan prior to receiving the equipment.

3.3 Ship Installation and Validation Support

3.3.1 The contractor shall perform the installation of the MOBI system in accordance with the SCD and BOATALT. Receivers, Direction Finders and transmitters shall be provided FOB Destination from the manufacturer to the designated points of contact and USN ship homeports (see section . Validation of the MOBI system shall be performed on each installation. The entire system will be validated to ensure that the equipment is functioning properly and causes no interferences with any ship operations. The validation will include activating a transmitter at various ranges up to maximum advertised range, recording the transmitter identification indicated on the receiver display, verifying bearing accuracy and checking the received signal strength on the installed direction finder(s).

3.3.2 Red-lined Drawings shall be developed during the installation effort; record all material and installation location/configuration changes that are not in accordance with the project drawing requirements in red ink directly on the drawings (CDRL A005).

3.4 Training Support

The contractor shall provide training for bridge watch standers, recovery boat detail, line handlers and flight deck personnel. The contractor shall coordinate with the ship to conduct training either in port or underway. Training may also be conducted at land based sites.

To provide direct support, a copy of all installation and training material will be accessible via a secure link on the contractor’s web site. The contractor shall provide a login for each ship so the documents unique to that installation can be posted as well as general technical information. Additionally, the contractor shall provide all ships access to a user forum where questions and lessons learned can be posted and shared with other

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 5 users throughout the Fleet. The contractor shall also post a contact email and phone number for live support as needed.

3.5 Engineering Support Services

The contractor shall provide the necessary technical services in support of the MOBI system installation. These shall consist and verification of SCDs and BOATALTs, preparation for and during shipboard inspections where the MOBI system will have an impact, system integration issues, shock/vibration/electromagnetic interference analysis evaluation, system testing, provisioning of MOBI hardware to the Fleet, and follow-up system checks as necessary to ensure system operation and crew familiarity. The contractor may be required for field services for existing MOBI systems. These tasks may include grooms, assessments, repairs and/or follow-on crew training. These tasks will be at the request of Type Commanders and Port Engineers.

3.4.1 The contractor shall provide input for logistics products for the MOBI system.

These logistics products may include technical manuals, maintenance requirement cards (MRCs), allowance parts lists (APLs), allowance equipage lists (AELs).

3.4.2 The contractor shall redesign hardware to meet evolving US Navy needs. The likely reasons for potential redesign are meeting shock, vibration, and electromagnetic interference environmental qualification requirements.

3.4.3 The contractor shall provide hardware for testing or training efforts. This hardware may consist of items described in section 3.1 or other redesigned versions of these components.

3.6 Other Requirements

The contractor shall comply with additional, evolving requirements imposed by the planning yards and other US NAVY officials to ensure that the installed MOBI systems can be maintained through established US NAVY life cycle management programs.

Some of the potential additional planning yard requirements will be to determine storage means for the handheld DF on DDG1000 class ships and submarines, as well as to provide technical input for LPD17 class EMI avoidance and antenna locations on DDG and LCS class ships.

4. DATA REQUIREMENTS

4.1 Contract Status Report (CDRL A001)

4.1.1 This report shall reflect both prime and Subcontractor data if applicable at the same level of detail.

4.1.2 The CDRL shall be delivered electronically, unless otherwise stated, and while Contractor’s format is acceptable, Government’s approval is required from the COR.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 6

4.2 Travel Report (CDRL A002)

4.2.1 This report shall reflect both prime and subcontractor data if applicable at the same level of detail.

4.2.2 The CDRL shall be delivered electronically, unless otherwise stated, and while Contractor’s format is acceptable, Government’s approval is required from the COR.

4.3 Other Direct Costs Report (CDRL A004)

4.3.1 The CDRL shall be delivered electronically, unless otherwise stated or data is being submitted in eCRAFT, and while Contractor’s format is acceptable, Government’s approval is required from the COR. This report shall reflect both prime and subcontractor data if applicable at the same level of detail.

4.4 Quality Assurance Workbook (CDRL A005)

4.4.1 The CDRL shall be mailed in the format of a hardcopy binder. Workbook will then be reviewed by NSWCPD QA department and, if necessary, revisions will be made to the workbook by the contractor.

4.5 Red Lined Drawings (CDRL A006)

4.5.1 The CDRL shall be delivered electronically, unless otherwise stated, and while Contractor’s format is acceptable, Government’s approval is required from the COR.

4.6 Work Completion Certification (CDRL A007)

4.6.1 The CDRL shall be delivered electronically, unless otherwise stated, and while Contractor’s format is acceptable, Government’s approval is required from the COR.

5. SECURITY REQUIREMENTS

N/A

6. PLACE OF PERFORMANCE

6.1 Requirements for shipchecks, installations, validation testing, and crew training will take place onboard US Navy ships. As stated in section 7.0, the ships will be in various ports throughout the world. The individual Task Order for the task shall dictate the location. All other tasking shall take place at the contractor’s facility. It is estimated that 30% of the work will occur on-site at the Contractor facility, and 70% of the work will occur off-site at shipboard locations.

6.2 Early Dismissal and Closure of Government Facilities

When a Government facility is closed and/or early dismissal of Federal employees is directed due to severe weather, security threat, or a facility related problem that prevents personnel from working, onsite Contractor personnel regularly assigned to work at that facility should follow the same reporting and/or departure directions given to

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 7

Government personnel. The Contractor shall not direct charge to the contract for time off, but shall follow its own company policies regarding leave. Non-essential Contractor personnel, who are not required to remain at or report to the facility, shall follow their parent company policy regarding whether they should go/stay home or report to another company facility. Subsequent to an early dismissal and during periods of inclement weather, onsite Contractors should monitor radio and television announcements before departing for work to determine if the facility is closed or operating on a delayed arrival basis.

When Federal employees are excused from work due to a holiday or a special event (that is unrelated to severe weather, a security threat, or a facility related problem), on site Contractors will continue working established work hours or take leave in accordance with parent company policy. Those Contractors who take leave shall not direct charge the non-working hours to the Contract. Contractors are responsible for predetermining and disclosing their charging practices for early dismissal, delayed openings, and closings in accordance with the FAR, applicable cost accounting standards, and company policy.

Contractors shall follow their disclosed charging practices during the Contract period of performance, and shall not follow any verbal directions to the contrary. The PCO will make the determination of cost allowability for time lost due to facility closure in accordance with FAR, applicable Cost Accounting Standards, and the Contractor's established accounting policy.

7. TRAVEL

The Contractor may be required to travel from the primary performance location when supporting this requirement. The estimated number of trips is 60.

Travel in support of this requirement is anticipated to include, but may not be limited to, the following alternate performance locations:

Norfolk, VA San Diego, CA Mayport FL Pearl Harbor HI Pascagoula, MS Marinette, WI Everett, WA Bremerton, WA Yokosuka, Japan Sasebo, Japan

The number of times the Contractor may be required to travel to each location cited above may vary as program requirements dictate, provided that the total estimated travel cost is not exceeded. The numbers of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements. All travel shall be approved by the COR and Contracting Officer before travel occurs. Approval may be via the Technical Instruction (TI). Before initiating any travel, the Contractor(s) shall submit a detailed and fully-burdened estimate that includes the number of employees traveling, SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 8 their expected travel costs for airfare, lodging, per diem, rental car, taxi/mileage and any other costs or actions requiring approval. The travel estimate shall be submitted to the Contracting Officer's Representative (COR) and Contract Specialist. Actuals cost, resulting from the performance of travel requirements, shall be reported as part of the Contractor's monthly status report. The reportable cost shall also be traceable to the Contractor's invoice

All travel shall be conducted in accordance with FAR 31.205-46, Travel Costs, and HQ B-2-0020 Travel Cost – Alt I (NAVSEA) and shall be pre-approved by the COR. The Contractor shall submit travel reports in accordance with DI-MGMT-81943 (CDRL A002).

Travel Costs

The Government shall reimburse the contractor (and its subcontractors) at a reduced reimbursement rate from the current “maximum per diem” rates for lodging, meals, and incidentals, referenced in FAR 31.205-46(a)(2), for any employees, purchased labor, consultants, etc. assigned to a temporary duty station (TDY) in excess of 30 days in one location. This applies to both CONUS and OCONUS travel. The current “maximum per diem” rates are set forth in the (i) Federal Travel Regulations for travel in the Continental United States; (ii) Joint Travel Regulations for Overseas Non-Foreign areas (e.g., Alaska, Hawaii, Guam, Puerto Rico, etc.); and (ii) Department of State (DOS) prescribed rates for foreign overseas locations.

When proposed travel is in excess of 30 consecutive days, but less than 180 consecutive days, the Government shall limit reimbursement of contractor (and subcontractor) travel costs, on a flat rate basis, to 75 percent of the per diem rate for the TDY locality at the time of travel (lodging, meals, and incidentals) for each full day, long-term TDY of 31 to 180 days. For travel lasting in excess of 180 days, the Government shall limit reimbursement of contractor (and subcontractor) travel costs, on a flat rate basis, to 55 percent of the per diem rates of the TDY locality at the time of travel for each full day.

10. PURCHASES

Only items directly used and incidental to the services for this Contract and for work within the scope of the Performance Work Statement, shall be purchased under the Other Direct Cost (ODC) line items. Individual purchases above $3,500 shall be approved by the Contracting Officer prior to purchase by the Contractor. The purchase request and supporting documentation shall submitted via email to the Contracting Officer and the Contracting Officer's Representative (COR) it shall be itemized and contain the cost or price analysis performed by the Contractor to determine the reasonableness of the pricing.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 9

11. COUNTERFEIT MATERIAL PREVENTION

N/A

12. PERSONNEL

12.1 Personnel Requirements.

Clause 52.222-2 "Payment for Overtime Premiums" will provide for the total approved dollar amount of overtime or will state “zero” if not approved. If overtime premium has not been approved under this contract in accordance with Clause 52.222-2, overtime effort to be performed shall be requested from the Contracting Officer prior to performance of premium overtime. For overtime premium costs to be allowable costs;

the Contracting Officer is required to approved the performance of overtime prior to the actual performance of overtime.

The level of effort for the performance of the resultant Contract is based on the following labor categories and hours per year:

Title eCRAFT Code

Hours

(ST)

Hours

(OT)

Program/Project Manager III MANP3 450 0

Program/Project Manager II MANP2 400 50

Program/Project Manager I MANP1 100 0

Manager, Administrative I MANA1 100 0

Manager, Administrative II MANA2 100 0

Electronics Technician

Maintenance I 23181 400 50

Electronics Technician

Maintenance II 23182 400 50

Electronics Technician

Maintenance III 23183 900 200

13.0 ENTERPRISE-WIDE CONTRACTING MANPOWER REPORTING

APPLICATION (ECMRA)

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 10

The Contractor shall report Contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for NSWC Philadelphia Division via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission (D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

The Contractor is required to completely fill in all required data fields using the following web address www.ecmra.mil.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at www.ecmra.mil.

14.0 NSWCPD ELECTRONIC COST REPORTING AND FINANCIAL

TRACKING (ECRAFT) SYSTEM

(a) The Contractor agrees to upload the Contractor's Funds and Man-hour Expenditure Reports in the Electronic Cost Reporting and Financial Tracking (eCRAFT) System. The eCRAFT Reports must use the standardized labor categories identified in Section C - Statement of Work. Compliance with this requirement is a material requirement of this contract. Failure to comply with this requirement may result in contract termination.

(b)The Contractor's Funds and Man-hour Expenditure Report reports contractor expenditures for labor, materials, travel, subcontractor usage, and other contract charges.

(c) The contractor agrees to provide supporting accounting system reports, at the Contracting Officer’s request, based on the review of the invoice documentation submitted to eCRAFT. This documentation will include reports such as the Job Summary Report (or equivalent), Labor Distribution Report (or equivalent), and General Ledger Detail Report (or equivalent). Supporting labor data provided must include unburdened direct labor rates for each employee and labor category. Cost breakdowns for ODCs, Materials, travel and other non-labor costs must be at the transactional level in sufficient detail so the Government can review allocability to the Contract. Indirect costs allocated to direct costs must be shown at the lowest level of detail sufficient to reconcile each indirect rate to the appropriate allocation base.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 11

On invoices containing subcontractor costs, the prime contractor agrees, at the Contracting Officer’s request, to attach as supporting documentation all invoices received from subcontractors, unless the subcontractor submits invoices directly to the CO and COR. This requirement applies to all subcontract types (Cost, FFP, etc.).

(d) The contractor shall submit its reports on the same day it submits an invoice in iRAPT. The costs reflected in eCRAFT shall be the same as those in iRAPT. eCRAFT acceptance/rejection will be indicated by e-mail notification from eCRAFT.

(e) The eCRAFT Periodic Report Utility (ePRU) is an Excel tool used to facilitate generating reports of expenditures-against-cost contracts. The generated XML files will then be submitted by the ePRU tool via email to NUWC_NPT_eCRAFT.FCT@navy.mil for submission into the eCRAFT Database Management System.

The ePRU spreadsheet and user manual can be obtained from the NUWC Division Newport Contracts Home Page under eCRAFT information at:

http://www.navsea.navy.mil/Home/WarfareCenters/NUWCNewport/Partnerships/Comm ercial-Contracts/Information-eCraft-/

15.0 SPECIAL REQUIREMENTS

14.1 Quality Management System

The Contractor shall:

- Maintain a Quality Management System (QMS) in accordance with ASQ/ANSI/ISO 9001:2015 standards per Naval Sea Systems Command (NAVSEA) QMS Acceptance Authority or appropriate directorate requirements. All QMS packages are required to adhere to applicable NAVSEA Technical Specification 9090-310 and NAVSEA Standard Item 009-04 requirements.

- Notify NSWCPD’s Quality Department in writing when any changes are made to the QMS that may affect work defined in accordance with NAVSEA Technical Specification 9090-310.

- Submit its QMS Level 3 specific work procedures relevant to the requirements of the Solicitation, including the SOW at the Task Order level (i.e. welding, etc.).

http://www.navsea.navy.mil/Home/WarfareCenters/NUWCNewport/Partnerships/Commercial-Contracts/Information-eCraft-/ http://www.navsea.navy.mil/Home/WarfareCenters/NUWCNewport/Partnerships/Commercial-Contracts/Information-eCraft-/

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 12

Enclosure 1

NSWCPD Cybersecurity Rev -02/02/2018 Code 104

CSWF Tasks Outline

Ref: SECNAV M-5239.2, DON Cyberspace IT and Cybersecurity Workforce Management and Qualification of June 2016

Personnel performing the following duties and tasks should be considered in the CSWF:

Those who require Privileged Access Accounts, including Zone A (network connected) and Zone D (standalone) enclaves, for both ashore and afloat platforms.

Secure, defend, preserve data, and monitor any/all systems control on Navy networks Design, build, configure, operate and maintain Navy’s information technology, networks and capabilities Those who occupy similar billets to: 0332, 0335, 0390, 0391, 0392, 0394, 1550, 2210, 2299, 2502, and 2504 per Memo: Identifying and Coding Department of Defense Civilian Cyber Workforce Positions.

Those who:

o Resolve network security issues by installing, configuring, and troubleshooting:

software, hardware, and network security systems (Specialty Code 41) Install and administer user identification or authentication mechanism to includes creating user accounts, modify users permissions, roles for users, and delete user accounts

Permissions and capability to install software/hardware/peripherals and modify configuration setting of Government-owned IT application, server, workstations or network devices to includes system upgrades or modification on Government computer systems o Conducts data integration, modeling, mining and analytics modeling (Specialty Code 42) o Manages, administers, and enables the organization to identify, capture catalog, classify, retrieve and share intellectual capital and informational content between IT systems (Specialty Code 43) http://www.doncio.navy.mil/FileHandler.ashx?id=8769

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 13 o Installs, configures, tests, operates, maintains and manages network devices including hardware, software, and operating systems to allow information sharing across the full spectrum of transmissions (Specialty Code 44) Create, initiate, or otherwise enact system, database, or application backup or restoration activities on Government-owned application, workstations, servers and networks o Ensure server and systems configurations (hardware and software) confidentiality, integrity, and availability. Administers server-based systems, security devices, distributed applications, network storage, messaging, and performs systems monitoring (Specialty Code 45) Maintain system audit functions and periodically review audit information for detection of system abuse Permissions to access and/or modify a database for a Government-owned IT systems Responsible for maintenance, repair, or related upkeep of Government-owned computer or IT-related hardware o Conducts and documents the systems integration, testing, operations, maintenance, and security of an information environment. Coordinates threat and mitigation strategies across the enterprise (Specialty Code 46) Assess and implement identified corrections (e.g., system patches and fixes associated with technical vulnerabilities as part of the information Assurance Vulnerability Management (IAVM) Program and other DOD configuration security requirement (i.e., Security Technical Implementation Guides (STIG) and Security Requirements Guides (SRG) to includes performing network scans on Government computer systems o Oversees, evaluates, and supports the documentation, validation, and accreditation processes necessary to ensure new and existing IT systems meet information assurance (IA) and security requirements. Ensures appropriate treatment of risk, compliance, and monitoring assurance from internal and external perspectives (Specialty Code 61) o Develops, modifies, enhances, and sustains new or existing computer applications, software, or utility throughout the software lifecycle (Specialty Code 62) o Conducts technology and/or feasibility assessments. Provides, builds, and supports a prototype capability and/or evaluates its security and utility.

Facilitates innovation (Specialty Code 66) o Develops and conducts processes and procedures (e.g., testing) to evaluate compliance with security requirements (Specialty Code 67) o Manages strategy, personnel, infrastructure, policy enforcement, emergency planning, and security awareness to support information technology (IT) security goals, and reduce overall organizational risk (Specialty Code 72)

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 14

Ensure rigorous application of cybersecurity policies, principles and practices in the delivery of all information technology (IT services)

Control and monitor privilege access to DoD systems. Allow only minimum Privilege Access (Principle of Least Privilege) required to perform specific tasks/duties on specific DOD systems o Applies technical and organizational knowledge to define an entity’s strategic direction, determine resource allocations, establishes priorities and policies Develops that will support new initiatives, new programs, or advocates for policy change required for IT infrastructure enhancements (Specialty Code 75) Identify cybersecurity requirement and actively participate as subject matter expert in the IT acquisition development process.

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 15

Enclosure 2

Sample Statement of Work Language (Appendix D: COUNTERFEIT MATERIEL PROCESS GUIDEBOOK, Office of the Assistant Secretary of the Navy (Research, Development & Acquisition) Acquisition and Business Management June 2017.)

The following provides information that should be considered for inclusion into the Statements of Work (SOW) for solicitations or contracts where counterfeit materiel is identified as a risk.

These are only examples and can be used together or separately, and should be modified or otherwise tailored to meet program requirements:

11.1.1 Counterfeit Parts and Materials Planning

The contractor planning shall document procedures and processes to minimize the risk of procuring and/or using counterfeit parts and materials, and their process for detecting counterfeit materiel in the event it is procured. This requirement applies to both new/modified and existing mission and safety critical hardware. SAE AS5553 contains information regarding the detection, avoidance, and mitigation of counterfeit electronic components, and may be used as a reference document for the development of the plan.

11.1.2 Counterfeit Parts and Materials System

System criteria. A counterfeit electronic part detection and avoidance system shall include risk-based policies and procedures that address, at a minimum, the following areas:

• The training of personnel.

• The inspection and testing of electronic parts, including criteria for acceptance and rejection. Tests and inspections shall be performed in accordance with accepted Government- and industry-recognized techniques. Selection of tests and inspections shall be based on minimizing risk to the Government. Determination of risk shall be based on the assessed probability of receiving a counterfeit electronic part; the probability that the inspection or test selected will detect a counterfeit electronic part;

and the potential negative consequences of a counterfeit electronic part being installed (e.g., human safety, mission success) where such consequences are made known to the Contractor.

• Processes to abolish counterfeit parts proliferation.

• Risk-based processes that enable tracking of electronic parts from the original manufacturer to product acceptance by the Government, whether the electronic parts are supplied as discrete electronic parts or are contained in assemblies, in accordance with paragraph (c) of the clause at 252.246-7008, Sources of Electronic Parts (also see paragraph (c)(2) of this clause).

• Use of suppliers in accordance with the clause at 252.246-7008.

• Reporting and quarantining of counterfeit electronic parts and suspect counterfeit electronic parts. Reporting is required to the Contracting Officer and to the http://www.secnav.navy.mil/rda/Policy/2017%20Policy%20Memoranda/DON%20Counterfeit%20Materiel%20Process%20Guidebook.pdf http://www.secnav.navy.mil/rda/Policy/2017%20Policy%20Memoranda/DON%20Counterfeit%20Materiel%20Process%20Guidebook.pdf http://www.secnav.navy.mil/rda/Policy/2017%20Policy%20Memoranda/DON%20Counterfeit%20Materiel%20Process%20Guidebook.pdf http://www.acq.osd.mil/dpap/dars/dfars/html/current/252246.htm#252.246-7008 http://www.acq.osd.mil/dpap/dars/dfars/html/current/252246.htm#252.246-7008

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 16

Government-Industry Data Exchange Program (GIDEP) when the Contractor becomes aware of, or has reason to suspect that, any electronic part or end item, component, part, or assembly containing electronic parts purchased by the DoD, or purchased by a Contractor for delivery to, or on behalf of, the DoD, contains counterfeit electronic parts or suspect counterfeit electronic parts. Counterfeit electronic parts and suspect counterfeit electronic parts shall not be returned to the seller or otherwise returned to the supply chain until such time that the parts are determined to be authentic.

• Methodologies to identify suspect counterfeit parts and to rapidly determine if a suspect counterfeit part is, in fact, counterfeit.

• Design, operation, and maintenance of systems to detect and avoid counterfeit electronic parts and suspect counterfeit electronic parts. The Contractor may elect to use current Government- or industry-recognized standards to meet this requirement.

• Flow down of counterfeit detection and avoidance requirements, including applicable system criteria provided herein, to subcontractors at all levels in the supply chain that are responsible for buying or selling electronic parts or assemblies containing electronic parts, or for performing authentication testing.

• Process for keeping continually informed of current counterfeiting information and trends, including detection and avoidance techniques contained in appropriate industry standards, and using such information and techniques for continuously upgrading internal processes.

• Process for screening GIDEP reports and other credible sources of counterfeiting information to avoid the purchase or use of counterfeit electronic parts.

• Control of obsolete electronic parts in order to maximize the availability and use of authentic, originally designed, and qualified electronic parts throughout the product’s life cycle.

11.1.3 Preventing Counterfeit Parts and Materials

The Contractor shall take steps as defined in DFARS 252.246-7007 and herein to minimize the risk of receiving counterfeit parts and materials. The Contractor shall:

• Maximize availability of authentic, originally designed and/or qualified parts throughout the product’s life cycle, including management of parts obsolescence

• Assess potential suppliers to minimize the risk of receiving counterfeit parts or materials

• Maintain a listing of approved suppliers with documented criteria for approval and removal of suppliers from the list

• Have purchasing procedures which require the selection of parts and materials from OM or authorized suppliers whenever possible

• Require a certificate of compliance and supply chain traceability for all electronic part purchases, and provide to the Government upon request

• Use Government or industry services such as GIDEP and other commercially available services to identify part or supplier quality or authenticity problems

• Define minimum inspection and test requirements for parts being procured from unauthorized suppliers, and shall ensure that in-house, third-party, and/or distributor inspection and test procedures and facilities comply with these requirements

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 17

• Incorporate procurement clauses which plainly identify quality requirements and liability to all approved suppliers

• Flow the requirements above to affected Subcontractors

SAE AS6174 contains information regarding the detection, avoidance, and mitigation of counterfeit materiel, and may be used as a reference document for meeting the above steps.

Parts and materials shall not be purchased from unauthorized sources (e.g. independent distributor or broker) unless there is no other means for procurement. In isolated cases when an unauthorized supplier is the only possible choice for procurement, an Unauthorized Supplier Purchase Report (CDRL XXXX) shall be provided to the Contracting Officer and program office.

The report shall contain the following information:

• Reason why an authorized supplier or original component manufacturer (OM) could not provide the part or material

• Product certificate of conformance with traceability to the OM, if available

• Verification and authenticity data results (e.g., visual inspection, marking/surface finish permanency, DPA, Scanning Acoustic Microscopy, Energy Dispersive X-Ray Spectroscopy, Fourier Transform Infrared (FTIR) Spectroscopy, Rockwell Hardness Test, etc.) SAE AS5553 contains information regarding the detection, avoidance, and mitigation of counterfeit electronic components, and may be used as a reference document for meeting the above steps.

11.1.4 Counterfeit Parts and Materials

The Contractor shall provide a Counterfeit Prevention Plan (CDRL XXXX) that documents procedures to minimize the risk of procuring and/or using counterfeit parts and materials. This plan shall be in accordance with DFARS 252.246-7007 Contractor Counterfeit Electronic Part Detention and Avoidance. Solicitations and subcontracts for all suppliers shall contain a requirement for procedures to minimize the risk of procuring and/or using counterfeit parts and materials.

11.1.4.1 Preventing Counterfeit Parts and Materials

The Contractor shall implement steps as defined in DFARS 252.246-7007 to minimize the risk of receiving counterfeit parts and materials. Parts and materials shall not be purchased from unauthorized suppliers (e.g. independent distributor or broker) unless there is no other means for procurement. In isolated cases when an unauthorized supplier is the only possible choice for procurement, a Technical Report – Study/Services, Unauthorized Supplier Purchase Report (CDRL XXXX) shall be provided to the contracting officer and the program office. The report shall contain the following information:

• Reason why an authorized supplier or OM could not provide the part or material

• Product certificate of conformance with traceability to the OM, if available

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 18

• Verification and authenticity data results (e.g., visual inspection, marking/surface finish permanency, Differential Power Analysis (DPA), Scanning Acoustic Microscopy, Energy Dispersive X-Ray Spectroscopy, Fourier Transform Infrared (FTIR) Spectroscopy, Rockwell Hardness Test, etc.)

SAE AS5553 contains information regarding the detection, avoidance, and mitigation of counterfeit electronic components, and may be used as a reference document for meeting the above steps.

11.1.5 Counterfeit Parts and Materials

The following minimum processes shall be implemented and flowed down by the Contractor to all subcontractors. In order to minimize the risk of use of counterfeit parts in (NAME OF PROGRAM/EQUIPMENT), spare parts and associated equipment.

The contractor shall establish processes to minimize the risk of procuring and using counterfeit parts and materials. The contractor shall document these processes and provide those documented processes to Government representatives upon request.

At a minimum, these processes shall ensure that:

• All components for (NAME OF PROGRAM/EQUIPMENT) electronic assemblies and subassemblies are purchased from Original Manufacturer (OM), authorized suppliers, or franchised distributors; At a minimum, the contractor shall ensure that procurement practices and processes to purchase and install components from OM, authorized suppliers, or franchised distributors are flowed down to subcontractors and suppliers at all tiers

• A counterfeit Prevention Plan shall be generated in accordance with DI-MISC-81832 Counterfeit Prevention Plan, and that the requirements of this DID and AS5553 are flowed down to all subcontractors and suppliers in this effort;

• The Contractor shall maximize the use of authentic, originally designed and/or qualified parts

• The contractor shall assess potential suppliers to minimize the risk of receiving counterfeit parts or materials

• The contractor shall have purchasing procedures which confirm whether a selected supplier is authorized (as defined in SAE AS5553) for each purchase

• The contractor shall define minimum inspection and test requirements for parts being procured and shall ensure that in-house, third-party, and/or supplier inspection and test procedures and facilities comply with the requirements of this section. These minimum inspection and test requirements shall specify appropriate test methods to detect potential counterfeit parts and materials

• The contractor shall require a certificate of conformance (as defined in SAE AS5553) and supply chain traceability for all electronic part purchases

• The contractor shall use government or industry services such as GIDEP and other commercially available services to identify part or supplier quality or authenticity problems. The Contractor shall notify (NAME OF PROGRAM OFFICE) of the occurrence of a confirmed counterfeit part or material and the actions taken to identify, contain, and impound all product from the lot, within 7 working days of confirmation of the counterfeit status. The Contractor shall flow down a requirement for similar notification from Subcontractors or suppliers at any tier to the Contractor. The contractor

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 19 shall initiate and submit an ALERT to the Government- Industry Data Exchange Program (GIDEP) within 60 days of knowledge of the counterfeit part or material. Counterfeit parts are defined in SAE Aerospace Standard 5553. Counterfeit parts may be electronic or mechanical in nature. Counterfeit electronic parts may typically be used parts which have been refurbished and represented as new. Commonly counterfeited electronic parts include parts such as microcontrollers or specially screened devices, or common parts, which have several pin-compatible versions from multiple manufacturers, such as memory devices and operational amplifiers. Counterfeit mechanical parts are typically improperly made, marked, or treated products. Examples are improper anodization or heat treatments (or falsified data), mismarked parts sold as higher grade steel, or used/fake parts such as valves or circuit breakers.

11.1.6 Data Item Description

Data Item Description (DID) DI-MISC-81832, Counterfeit Prevention Plan: This DID describes the format and content of a contractors “Counterfeit Prevention Plan,” and should be used by the procurement activity when requesting delivery of a counterfeit prevention plan.

11.1.7 Grey Market Statement (For CISCO Equipment)

Reseller and Equipment Qualification: Reseller shall certify that it is a CISCO Authorized Channel Partner as of the date of the submission of their offer, and that it has the certification/specialization level required by the Manufacturer to support both the product sale and product pricing, in accordance with the applicable Manufacturer certification/specialization requirements: Please provide proof of certification level with your quote submission. If proof of certification level is not provided with your quote submission, your quote may be considered non‐responsive. Vendor shall warrant that the products are NEW and in their original UNOPENED box. Only CISCO installed and configured components are acceptable. Installation and / or configuration of third party components, or installation and / or configuration of OM components by any other than CISCO are NOT acceptable. The Vendor confirms to have sourced all Manufacturer products submitted in this offer from Manufacturer or through Manufacturer Authorized Channels only. Vendor shall provide Buyer with a copy of the End User license agreement pre‐award, and shall certify that all Manufacturer software is licensed originally to Buyer as the original licensee authorized to use the Manufacturer Software. Only authentic OM equipment and support services sourced from authorized OM channels are acceptable. Equipment, materials, and services not meeting the above stated qualifications are not acceptable and will be returned to the reseller.

11.1.8 Containing Counterfeit Parts and Materials

Suspect counterfeit parts and materials shall be impounded with all other items from the same lot. The contractor shall identify and locate all potential users or hardware items with the suspect part or material, and contain product which has this suspect product, pending confirmation of the part or material’s authenticity. The OM may be involved at this point in order to verify authenticity. Confirmed counterfeit material shall be contained and provided to investigative agencies for ongoing investigation or prosecution. The counterfeit product shall not be scrapped or otherwise disposed of

SOW-PWS N64498-18-R-4036 MOBI CONTROL SYSTEMS SUPPORT Page 20 without approval from investigative authorities or the program office. Confirmed counterfeit product shall not be returned or handled in a way which would allow its resale or reuse. Suspect counterfeit parts or materials whose authenticity (or lack of) cannot be definitively determined, shall be dispositioned via Material Review Board (MRB).

11.1.9 Reporting Counterfeit Parts and Materials

The prime contractor and program office shall be notified of the occurrence of a suspect or confirmed counterfeit part or material, and the actions taken to identify, contain, and impound all product from the lot. The contractor shall also contact the OM, and supplier if applicable. The contractor shall initiate and submit an ALERT to the Government- Industry Data Exchange Program (GIDEP) within 60 days of knowledge of the counterfeit part or material. The contractor shall notify the appropriate parties to document the case for legal action if required (e.g., contracting officer, DOD Office of Inspector General).

11.1.10 Nonconforming Material and Parts

Electrical components which fail during production or acceptance testing shall be assessed to determine if the supplier of the part was an authorized supplier for the manufacturer. Analysis of these failures shall include assessment of part authenticity (potential of being counterfeit or fraudulent).

11.1.11 Warranty “Counterfeit”

11.1.11.1 Seller warrants the goods delivered pursuant to this Contract, unless specifically stated otherwise in this Contract, shall (i) be new (ii) be free from defects in workmanship, materials, and design and (iii) be in accordance with all the requirements of this Contract. Seller further warrants that the performance of work and services shall conform with the requirements of this Contract and to high professional standards. All warranties in this Contract shall survive inspection, test, final acceptance and payment of goods and services.

11.1.12.1 Unless Buyer expressly identifies the goods that are procured under this Contract as nontechnical and for Buyer’s internal use only, Seller warrants without limitation as to time that the goods delivered pursuant to this Contract shall (i) be and only contain materials obtained directly from the OM or an authorized OM reseller or distributor (collectively, an Authorized Distributor); (ii) not be or contain Counterfeit Items or Suspect Counterfeit Items, as defined below; and (iii) contain only authentic, unaltered OM labels and other markings.

Seller shall obtain and retain all documentation required to fully trace the distribution and sale of the goods delivered hereunder back to the relevant OM, and, on request of Buyer, shall provide such authenticating documentation.