Production Support Services SOW Draft.pdf

STATEMENT OF WORK

PRODUCTION SUPPORT SERVICES (PSS)

1. SCOPE:

This Statement of Work (SOW) establishes the Industrial Supply Division requirement for Production Support Services (PSS) in support of the Depot Level Maintenance (DLM) effort at Fleet Readiness Center Southeast (FRCSE) and its supported areas, activities, tenants, and customers. Production Support Services include, but are not limited to, Material and Tool Management, Production Control, Logistics, and Distribution Services required to ensure the continuous flow of mission-essential parts and components to DLM production lines.

2. APPLICABLE DOCUMENTS:

2.1 Department of War (DoW) (Formerly known as Department of Defense (DoD) specifications:

2.1.1 DoD National Industrial Security Program Operating Manual (NISPOM) codifying 32 Code of Federal Regulations Part 117, NISPOM Rule.

2.1.2 SECNAV M-5510.36B, Department of the Navy Information Security Program, 12 Jul 2019

2.1.3 DoDI 5200.48, Controlled Unclassified Information (CUI), 6 Mar 2020.

2.1.4 COMNAVAIRFORINST 4790.2, Naval Aviation Maintenance Program

2.1.5 DoD Instruction 5230.24 Distribution Statements on DoD Technical Information, 10 Jan 2023

2.1.6 SECNAV 5510.30C, Department of the Navy Personnel Security Program, 24 Jan 2020

2.1.7 OPNAVINST 3440.17A, Navy Installation Emergency Management Program, 1 Aug 2014

2.1.8 DODI 8582.01 - Security of Non-DoD Information Systems Processing Unclassified Nonpublic DoD Information, 9 Dec 2019

2.1.9 DoDI 5200.01 – DoD Information Security Program and Protection of Sensitive Compartmented Information (SCI), 21 Apr 2016

2.1.10 COMFRCINST 4855.6D Industrial Quality Operations, 30 Oct 2024

2.2 APPLICABLE FRCSE INSTRUCTIONS AND NOTICES:

2.2.1 FRCSEINST 3440.1D, Unified Disaster Preparedness and Emergency Action Plan and Fire Bill, 10 Sep 2025

2.2.2 FRCSEINST 4030.3 B, In-Process Protection, Preservation, Transportation and Material Handling of Aircraft (A/C), Engine and Component Parts During Repair Process and Storage, 5 Mar 2026

2.2.3 FRCSEINST 4035.1C, Component Repair Program, 5 Mar 2026

2.2.4 FRCSEINST 4101.1A, Energy Management Program, 6 Mar 2025

2.2.5 FRCSEINST 4408.3B, Back rob, Cannibalization, Divert and Reassignment Actions, 15 Apr 2022

2.2.6 FRCSEINST 4734.1B, Inventory Management and Control of Calibrated Equipment, 21 Jun 2024

2.2.7 FRCSEINST 4790.6A, Controlled Environment Facilities, 22 May 2018

2.2.8 FRCSEINST 4790.8B, Local Maintenance Requirements Cards (LMRCS) Procedures, 10 Sep 2025

2.2.9 FRCSEINST 4790.111C, Foreign Object Damage (FOD) and Debris Prevention, 18 Jul 2024

2.2.10 FRCSEINST 4790.112E, Tool Control Program, 11 Sep 2024

2.2.11 FRCSEINST 4855.3D, Discrepancy Work Order (DWO), 18 Mar 2025

2.2.12 FRCSEINST 4870.1B, Facilities Equipment and Industrial Plant Equipment (IPE) Management Program, 10 Sep

2.2.13 FRCSEINST 5090.1D, Environmental Management System, 19 Apr 2022

2.2.14 FRCSEINST 5090.2D Emergency Response Procedures for Oil and Hazardous Substance Release Spill Incidents, 11 May 2021

2.2.15 FRCSEINST 5090.3D, Hazardous Waste Management, 23 Jul 2014

2.2.16 FRCSEINST 5090.14E, Hazardous Material Control and Management (HMC&M), 26 Jan 2026

2.2.17 FRCSEINST 5103.2D, Safety Management System, 10 Sept 2025

2.2.18 FRCSEINST 5103.8C, Mishap Investigation, Reporting, and Record Keeping, 21 Jun 2024

2.2.19 FRCSEINST 5103.9D, Personal Protective Equipment (PPE) Program, 10 Sep 2020

2.2.20 FRCSEINST 5103.12C, Hearing Conservation and Noise Abatement Program, 19 Sep 2022

2.2.21 FRCSEINST 5103.15C, Heavy Metals Control Program, 22 May 2018

2.2.22 FRCSEINST 5103.28B, Reports of Unsafe or Unhealthful Working Conditions, 16 Jun 2021

2.2.23 FRCSEINST 5110.1D, Official Mail Services, 21 Jun 2024

2.2.24 FRCSEINST 5330.1A, Working Hours, Breaks, and Lunch Periods, 27 Sep 2017

2.2.25 FRCSEINST 5340.1B, Solicitation and the Conduct of Personal Commercial Affairs, 17 Apr 2025

2.2.26 FRCSEINST 5355.1A, Drug Free Workplace Program, 15 Sep 2023

2.2.27 FRCSEINST 5500.5B, Physical Security Plan, 5 Sep 2017

2.2.28 FRCSEINST 5510.14A, Information, Personnel and Industrial Security Procedures, 19 Nov 2018

2.2.29 FRCSEINST 5510.15B, Electronic Keying Material System Documentation and Storage, 8 Apr 2016

2.2.30 FRCSEINST 5605.2C, Bulletin Boards, 19 Dec 2024

2.2.31 FRCSEINST 11014.2A, Preventative, Corrective, and Predictive Maintenance (PDM) Program, 27 Jun 2024

2.2.32 FRCSEINST 11200.1A, Motorized Transportation Equipment and Vehicles, 1 Nov 2011

2.2.33 FRCSEINST 13000.2C, Aircraft Kitting Process, 1 April 2026

2.2.34 FRCSEINST 13090.1B, Maintenance of Aircraft, Engine, Component, and Seat Logbooks, 9 Apr 2018

2.2.35 FRCSEINST 4790.121, Depot Level Maintenance Electrostatic Discharge Protection, 19 Jun 2018

2.2.36 FRCSEINST 13400.3C, Identification and Traceability of Components and Parts Through the Production Process, 18 Jul 2024

2.3 OTHER APPLICABLE DOCUMENTS:

2.3.1 AS9100D, Aerospace Quality Management Systems (QMS) – Requirement for Aviation, Space, and Defense Organizations, September 2016.

2.3.2 ISO 9001 Quality Management System (QMS) Requirements for Aviation, Space, and Defense Organizations, September 2015.

2.3.3 ISO 14001 Environmental Management System (EMS) Requirements for Aviation, Space, and Defense Organizations, Date published: April 2026.

2.3.4 Occupational Safety and Health Administration (OSHA) Standards in accordance with 29 CFR 1910

Note:

1. All work performed must be in strict compliance with the government referenced instructions and data provided within the SOW.

2. These applicable documents may be revised during performance of the contract. The contractor must comply with the latest version. The most current versions of these documents are available on FRCSE Intra1. If unable to access these files, please contact Technical Point of Contact (TPOC).

3. Specific individual instructions, standard operating procedures (SOPs) or other engineering data will be referenced and provided with each work order.

4. In the event of a contradiction between regulations, OSHA Regulations supersede all other safety requirements.

5. Applicable documents can be accessed electronically at the following websites:

1. Directives and Forms at: https://flankspeed.sharepoint-mil.us/sites/NAVAIR_FRC_SE/SitePages/Directives_and_Forms.aspx

2. COMNAVAIRFORINST 4790.2D at: https://www.navair.navy.mil/Naval-Aviation-Maintenance-Program

3. OSHA Laws and Regulations at: https://www.osha.gov/laws-regs/regulations/standardnumber/1910

3. REQUIREMENTS

3.1 General Requirements:

The contractor must provide Production Support Services (PSS) in support of the Depot Level Maintenance (DLM) effort at FRCSE and its supported areas, activities, tenants, and customers. The contractor, working alongside government and military personnel, is tasked with providing PSS.

3.1.1 Compatibility - The contractor must maintain the capability to prepare documents and software packages compatible with the Government IT environment. The current operating environment required for this contract includes, but is not limited to:

Microsoft Windows 11 Microsoft Project 2010 Microsoft Office Professional Plus 2010 Adobe Acrobat XI (reader) Internet access

The contractor must maintain the ability to interface with and transfer data to and from the above office software applications and their upgraded versions. The contractor must ensure that all media are virus free when delivered. The contractor must be capable of Internet and LAN communications with FRCSE. Contractor personnel must be capable of maintaining real-time communications, both voice and data transfer capabilities, with FRCSE during working hours whether at contractor work site or on travel.

3.1.2 Work Locations and Facilities – The contractor must provide PSS for the following locations:

https://flankspeed.sharepoint-mil.us/sites/NAVAIR_FRC_SE/SitePages/Directives_and_Forms.aspx https://flankspeed.sharepoint-mil.us/sites/NAVAIR_FRC_SE/SitePages/Directives_and_Forms.aspx https://www.navair.navy.mil/Naval-Aviation-Maintenance-Program https://www.osha.gov/laws-regs/regulations/standardnumber/1910

a. FRCSE JAX – to include Naval Air Station (NAS) Jacksonville (JAX), FL; Cecil Commerce Center, FL;

Naval Station (NS) Mayport, FL

b. Fleet Readiness Center Mid-Atlantic (FRCMA) – to include (NS) Norfolk, VA and NAS Oceana, VA

c. FRCMA Voyage Repair Team (VRT) – to include NS Mayport, FL and NS Norfolk, VA

d. Consolidated Automated Support System (CASS) Portable Electronic Maintenance Aide (PEMA), Program Management Aviation (PMA) 260 – Cecil Commerce Center, FL

e. Airborne Expendable Counter Measures (AECM), PMA-272 – NAS JAX, FL

Hereafter, FRCSE refers to all the locations listed above.

3.1.2.1 Work location: 100 percent of work will be performed at Government site and 0 percent of work to be performed at contractor site. Government site(s) include:

a. Government Property: The government will provide all required special tooling, hand tools and ground support equipment (SE) in the performance of this contract; however, the contractor must exercise reasonable safeguards and care for the government furnished tooling and ground SE. This onsite equipment will be dual use between the government workforce and the contractor.

b. Contractor Workspaces: Contractor administrative facilities and equipment will not reside aboard FRCSE;

moreover, the contractor must use government facilities only for performance of the contract. Contractor management must ensure government facilities and equipment are not used for the personal gain of contractor employees. Within the production areas of the FRCSE, as space permits, the government will provide the contractor with a dedicated workspace to be utilized by the Operations Manager. This government furnished workspace will include access to a telephone line, a computer with current applications installed, and a printer.

All government shared property (GSP) must be for official government use only. The government will not furnish office equipment or supplies. The contractor must provide standard office supplies and any other resources necessary for the management and operation of the required PSS services. All equipment and supplies provided by the contractor must remain the property of the contractor.

3.1.2.2 Meeting support: In support of the tasking outlined in this SOW, the contractor must have the capability to host and conduct meetings at unclassified level, utilizing contractor furnished telephone and Video Teleconferencing (VTC) capability as well as sufficient equipment to conduct meetings with presentations including compatible software as required in Paragraph 3.1.1. This support must be provided virtually via Microsoft Teams.

3.1.2.3 The contractor and its employees are not eligible for telework or remote work due to the nature of the services requested in this SOW.

3.1.3 Contract Status reporting: The contractor must provide the following documentation.

3.1.3.1 Contractor’s Organizational Chart (CDRL A001): The contractor must provide, upon request from the Contract Officer Representative (COR), an organizational chart as outlined in CDRL A001. The chart must be compatible with the latest version of MICROSOFT© EXCEL.

3.1.3.2 Electronic Cost Reporting and Financial Tracking (eCRAFT) Report (CDRL A002): This vendor report electronic deliverable must be prepared and submitted in accordance with SOW sections 3.1.5.1 and 3.1.5.2. The report will be generated using the Electronic Cost Reporting and Financial Tracking (eCRAFT) system and will provide a detailed breakdown of all contractor expenditures for the reporting period, including labor, materials, travel, and other charges. Submission must be made concurrently with the invoice in WAWF, ensuring the reported amounts in eCRAFT match the invoice amounts.

3.1.3.3 Contractor Quality Control Plan (QCP) (CDRL A003): The contractor’s QCP must address the contractor’s overall approach to quality and internal controls and procedures for meeting the requirements of the SOW and COMFRCINST 4855.6D Industrial Quality Operations. The QCP must describe:

a. The process for the resolution of deficiencies,

b. The process for identifying potential improvements,

c. The process for the delivery of necessary documentation to the government,

d. How all personnel qualifications and certifications will be obtained,

e. How the currency of the personnel certifications and qualifications will be maintained,

f. How the contractor plans to prevent damage to facilities, equipment, and materials to include GSP and ground

SE,

g. Which quality control records are to be kept, where they are to be kept and by whom,

h. Provide a description of how the quality control records will be stored, retrieved and dispositioned.

i. Confidentiality requirements and the methods to be used to implement them,

j. Identify the nature and extent of the internal quality audits to be performed, how the results will be used in the corrective and preventative action system and to what extent the customer will be involved in internal audits.

The first submission of the contractor’s quality control plan must be included in the response to the solicitation.

Subsequent submissions must be due as requested by the COR or due within 7 days after any change to the plan.

3.1.3.4 Contractor Personnel Timesheets: The contractor must be responsible for maintaining timesheets on individual contractor personnel. The timesheets must document the number of hours each employee worked; hours must be labeled as “regular hours” or “overtime hours”, dates each employee worked, as well as the employee’s name and Identification Number. Timesheets must be submitted to the Technical Point of Contact (TPOC), government shop supervisor. The contractor must use the timesheet format shown in Technical Exhibit 2 (TE 2) of this SOW.

3.1.4 Work Schedule

3.1.4.1 Work schedule: The contractor must provide the required services and staffing coverage during normal working hours. Normal working hours are usually 8.5 hours (including a 30-minute lunch break). Normal working hours for "A" Shift are 0600 to 1430 hours, and normal working hours for "B" Shift are 1430 to 2300 hours, unless otherwise conducted in accordance with federal holidays as specified in paragraph 3.1.4.1.1. Normal shifts start and stop times for contractor personnel will coincide with the production shop shifts, with a maximum workday of 12 hours. Work hours are subject to change due to weather conditions, construction, etc.; the contractor must respond accordingly. Contractors may be required to work alternate shifts (Tuesday through Saturday) as required. Some supported Government offices have flexibility to start as early as 0500 and end as late as 1800. When directed by the TPOC, the contractor must adjust their respective work schedule to coincide with the FRC production shop work schedule; this includes the contractor adjusting working hours plus or minus 2 hours from normal work hours.

3.1.4.1.1 Holidays: The Government observes the Federal holidays identified on the Office of Personnel Management (OPM) website: https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/

3.1.4.1.2 Installation closure: When Federal facilities are closed by the Government, or when Federal employees are officially excused from work due to a holiday or a special event, severe weather, a security threat, or any other Government facility related problem that prevents Federal personnel from working at the Government facility, the contractor’s key personnel must coordinate with the COR for reporting guidance.

While generally contractor personnel may not perform work on-site at a government facility without oversight from Federal personnel, in very limited circumstances, work being performed by contractor personnel may be deemed mission essential and performance of such mission essential work may be authorized to continue at the Government facility despite the facility being otherwise closed for normal operations. The circumstances permitting work being performed by contractor personnel to be deemed mission essential are extremely limited and generally only apply to performance of efforts related to public health, safety, or matters related to national security. The Contracting https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/

Officer Representative (COR) must concur with any determination that work being performed by contractor personnel is mission essential. Contractors can find official guidance regarding base reopening, operational updates, and instructions via the FRCSE social media pages, operational status phone number (904-718-8920), and subsequent all-hands emails. FRCSE's social media sites:

Facebook: http://www.facebook.com/frcsejax

X: http://www.twitter.com/frcsejax

Instagram: http://www.instagram.com/frcsoutheast

3.1.4.1.3 Government Furlough Periods: Not withstanding any other provision of this contract, in the event that the government reduces operations pursuant to a furlough of civilian employees of the DoW the level of effort for this contract or task order (TO) established in BTXT.211-9503, Level of Effort (Cost Reimbursement) (NAVAIR) (Dec 2012) must be reduced for the tenure of the civilian furlough. The level of effort during the civilian furlough period must be expended at an average rate to be determined at the TO level.

3.1.4.1.4 Overtime: The contractor’s response to all work requests must be continual, excluding lunch and scheduled breaks. The contractor must provide PSS after regular working hours, evenings, and weekends, based on the specific needs of the FRCSE. Overtime, if and when required, will be requested and monitored by the TPOC will be reimbursed in accordance with the terms of this contract. Overtime will be determined by mandatory completion dates or when workload exceeds present manpower staffing levels.

3.1.5 Electronic Cost Reporting and Financial Tracking (eCRAFT) system reporting.

3.1.5.1 The contractor must utilize the government provided crosswalk of NAVAIR standard labor categories to the corresponding Government standard eCRAFT labor categories listed in Attachment TBD to complete the eCRAFT Vendor Report requirement in SOW sections 3.1.5.2. Further, the labor category crosswalk aligns to eCRAFT labor categories in accordance with (IAW) the descriptions listed at: http://www.navsea.navy.mil/Home/Warfare- Centers/NUWC-Newport/Partnerships/Commercial-Contracts/Labor-Categories/. Note: For labor categories that provide for various levels (I, II, III, IV), the mapped level is based on the best match with the proposed NAVAIR standard labor category.

3.1.5.2 The contractor must upload the Contractor's Funds and Man-hour Expenditure Report (commonly referred to as “eCRAFT Vendor Report”) in the Electronic Cost Reporting and Financial Tracking (eCRAFT) System and submit the report on the same day and for the same timeframe as the invoice submission into the Wide Area Workflow (WAWF) module within the Procurement Integrated Enterprise Environment (PIEE) system. Compliance with this requirement is a material requirement of this contract and is documented IAW CDRL-A003

3.1.5.2.1 The Contractor’s Fund and Man-hour Expenditure Report must detail contractor expenditures for labor, materials, travel, subcontractor usage, and other contract charges.

3.1.5.2.2 Access: The Contractor's Funds and Man-hour Expenditure Report is generated using the eCRAFT System Periodic Report Utility (ePRU). The ePRU utility and user manual can be downloaded from: https://www.navsea.navy.mil/Home/Warfare-Centers/NUWC-Newport/Partnerships/Commercial- Contracts/Information-ECRAFT-/ under ECRAFT information.

The link for ECRAFT report submission is: https://www.pdrep.csd.disa.mil/pdrepweb/ecraft. Refer to the Frequently Asked Questions at the site address above for troubleshooting report uploading issues.

3.1.5.2.3 Submission and Acceptance/Rejection: The contractor must submit reports on the same day and for the same timeframe as the invoice submission in WAWF, IAW with section G of the executed contract.

The ePRU reported amounts must match the WAWF invoice amounts. eCRAFT acceptance/rejection will be communicated via e-mail notification from the eCRAFT system.

http://www.facebook.com/frcsejax http://www.twitter.com/frcsejax http://www.instagram.com/frcsoutheast http://www.navsea.navy.mil/Home/Warfare-Centers/NUWC-Newport/Partnerships/Commercial-Contracts/Labor-Categories/ http://www.navsea.navy.mil/Home/Warfare-Centers/NUWC-Newport/Partnerships/Commercial-Contracts/Labor-Categories/ https://www.navsea.navy.mil/Home/Warfare-Centers/NUWC-Newport/Partnerships/Commercial-Contracts/Information-ECRAFT-/ https://www.navsea.navy.mil/Home/Warfare-Centers/NUWC-Newport/Partnerships/Commercial-Contracts/Information-ECRAFT-/

3.1.6 Subcontractors: The prime contractor must ensure that the provisions stated herein must be clearly and effectively communicated to all subcontractors providing support under this contract. All provisions of this SOW must flow down to subcontractors providing support under this contract.

3.1.7 Management of Contractor Personnel: The Government will neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances will the Government assign tasks to, or prepare work schedules for, individual contractor employees. The contractor must manage its employees and guard against any actions that are of the nature of personal services or give the perception of personal services. The contractor must be responsible for the successful completion of work assignments.

a. Contractor personnel must identify themselves as a contractor in all verbal and written communications means while performing work for the Navy. When attending meetings in support of the Navy, contractor personnel must introduce themselves as a contractor employee working for the Navy.

b. The Government reserves the right to refuse access to its facility to any contractor employee who endangers persons or property, fails to maintain and obtain certification(s), and whose behavior is inconsistent with the requirements of this contract. In such cases, the Contracting Officer, or Security Director will advise the contractor of the reason for refusing the employee. The refusal of such an employee must not relieve the contractor of the requirement to provide sufficient qualified personnel to adequately perform the services as set forth herein.

c. ISO 9001, ISO 14001 & AS 9100: The contractor must comply with FRCSE management policies and procedures in accordance with the latest version of FRCSEINST 5340.1B, 5355.1A. These FRC management instructions are required to maintain FRC compliance with ISO 9001, AS 9100, AS 9110, IS0 14001, and Occupational Health and Safety Assessment Series (OHSAS) 18001 quality standards.

d. Restricted Area Access: Performance of work in restricted areas may require additional access badge procedures in accordance with respective FRC instructions (current version). FRCSEINST 5500.5B.

e. Work Attire: The contractor must ensure all personnel assigned to the FRCSE maintain a standard of grooming and personal appearance in accordance with the latest version of FRCSEINST 12700.1 and FRCSEINST 5103.9.

The contractor employees must wear suitable attire for services being performed. The prime contractor's company name must be identified on the outer garment and must be distinguishable from FRCSE employees. The shirt must have sleeves and must be clean, neat, and fit properly. Subcontractor employees must wear the uniform of the prime contractor, and may, under the prime contractor's company name, list the Subcontractor's name as a Subcontractor. Company identification must be adhered to and visibly displayed on the outer garment in a permanent method (e.g., sewed, embroidered, or inked). All costs associated with the purchase, maintenance, and laundering of uniforms will be at the contractor's expense. Contractor personnel must always display either their Common Access Card (CAC) or FRC badge in accordance with local site procedures when entering and departing an installation gate, and while inside any FRCSE spaces. Contractor personnel must wear the badge in the front and above the waist of outer clothing.

f. Standards of Conduct: The contractor must not employ any person whose employment under this contract could in any way result in a conflict of interest with the mission of the FRCSE. All personnel employed by the contractor in the performance of this contract, or any agent of the contractor entering the government installation must obey all regulations of the installation and FRCSE. The contractor must be responsible for employee competency and conduct and for taking disciplinary actions with respect to its employees. The removal from the job site of contractor personnel must not relieve the contractor of the requirement to provide personnel to perform the specified tasks outlined in this SOW.

g. Drugs and Alcohol: The contractor must comply with the Drug Free Workplace Program in accordance with

FRCSEINST 5355.1A and guidelines and applicable clauses within the contract.

h. Interactions with other Support Contractors: The FRCSE workforce is a mixture of government and contractor entities. Contractor personnel must be required to work, coordinate, or interface with government personnel and other contractor personnel in performance of duties. In no case will the government supervise or direct contract personnel. The contractor is solely responsible for supervising and managing its employees in the performance of contract requirements

3.1.8 Performance Transition:

3.1.8.1 Mobilization: The mobilization period is for a period not-to-exceed 60 days. This period must be utilized to allow the contractor to attain logistical competence. The mobilization period must be utilized to hire and train the contractor personnel, obtain appropriate security clearances and obtain base auto passes from the incumbent to the new contractor at all sites. All personnel must be hired, trained, and in place by the completion of the mobilization period.

In cases where the contractor has hired the incumbent’s personnel, the contractor must present documentation to the COR that verifies existing personnel’s qualifications are current and valid. Said documentation must be provided to the COR 15 days prior to the period of performance start date. The contractor must assume full responsibility for all PSS, in accordance with the SOW at the Service Start date which coincides with completion of the Mobilization period.

During Mobilization period, the contractor may observe all maintenance tasks performed by the transitioning contactor as an On-The-Job Training function, provided such observation does not interfere with performance of maintenance services.

3.1.8.2 Transition In: The contractor must facilitate the accomplishment of a seamless transition of requirements to maintain the mission of the program/division with minimal impact. Transition-In services must begin on the effective date of the award and must be complete 60 calendar days after the effective date, at which time the contractor must assume full responsibility for tasking. The contractor must identify Points of Contact (POCs) for liaisons between the Government, the prime contractor (if applicable), and other contracted industry partners to ensure a proper and orderly transition and transfer of services and assets between the parties cited. The contractor must ensure minimum disruption to vital Government business and must ensure that there is no service degradation during or after transition. The contractor must establish an overview of the transition efforts and describe the activities to transition from incumbent to incoming contractor (if applicable) to include a schedule with milestones by activity. The contractor must support the transition of all Government property and information including Commercial Off-The-Shelf (COTS) software and associated documentation in the contractor’s possession (if applicable). The contractor must be 100% staffed within the 60-days.

3.1.8.3 Transition Out: If the incumbent contractor is an unsuccessful Offeror in any subsequent government solicitation for PSS, or the contract is terminated for any reason, the contractor must, during the successor contractor’s mobilization period, provide all reasonable support to the government and the successor contractor to ensure an orderly transition and minimize any impact on operational readiness. The contractor must leave all technical documentation and publications and all government property to the successor contractor. The contractor must provide the successor contractor with access to the site and to all technical documentation and publications on a not-to-interfere basis during the transition phase-out period. Additionally, the successor contractor must also be permitted to observe the contractor performing PSS on a not-to-interfere basis during the transition phase-out period. The contractor must retain full responsibility for all PSS in accordance with the SOW until completion of the transition period.

The contractor’s overall transition-out strategy must be built around maintaining the mission of MRO-Logistics with minimal impact, not only in terms of timeliness of performance but also to ensure that critical data and knowledge transfer occurs. Prior to the termination or expiration of the contract, the contractor must ensure an orderly transition of performance and associated responsibilities, while minimizing impact to the operation.

- Work Turnover. The contractor must provide a plan of action to effectively transfer tasked work that is in process at the expiration or termination of the contract to the successor company. Establish and maintain effective communication with the incoming contractor or Government personnel for the period of transition via weekly status meetings.

- Quality Assurance. The contractor must provide a plan of action to ensure continuation of quality review processes during the transition period to the successor company.

- Risk Mitigation Strategies. The contractor must provide a plan of action to mitigate contract performance risks (quality and schedule) encountered during the transition period.

- Data/Information Transfer. The contractor must provide a plan of action for the efficient inventory and transfer of program data to the successor company.

3.1.8.4 Post Award Conference (PAC): The contractor must participate in a post award conference. This conference will be held within 15 days after contract award during mobilization period and must be coordinated between the contractor and the PCO. The contractor must be prepared to discuss its proposed mobilization approach with the government team. The purpose of the conference is to introduce contractors and government personnel, discuss details of the upcoming effort, and resolve any concerns that may arise as a result of the discussion. The conference will be held at the government’s facility in JAX, FL.

3.1.9 Government Furnished Property (GFP)/Government Furnished Information (GFI):

The Government reserves the right to furnish Government Property and Information on an as needed basis at the TO level. The contractor must be accountable for and required to manage and track GFP in accordance with applicable Government property clauses and reporting requirements.

The Government will provide a government network computer, desk, phone, fax machine, copier, scanner, and associated materials when required. This property is considered “incidental” property per Federal Acquisition Regulation (FAR) Part 45 and must not be tracked as accountable to the contract.

Government assets that are removed from the Government location are considered GFP and will be listed as accountable to the applicable TO and must be managed by the contractor in accordance with FAR Clause 52.245-1 and will be listed as “Scheduled Government-Furnished Property (SGFP)” as attached to the contract or applicable TO.

The contractor must not utilize any GFP and GFI for purposes other than those authorized for the performance of this contract. All GFP and GFI is the property of the U.S. Government and is not to be transferred by any individual or agency, public or private, without the express written approval of the Contracting Officer, except as required for the specific performance of the TOs. The contractor must maintain formal records of GFP. The contractor must exercise reasonable safeguards and care for the GFP. The contractor must comply with FAR 52.245-1.

This GSP will be dual use by both the government workforce and the contractor. The contractor must not have sub-custody of the government property and is strictly prohibited from removing it from any government installation.

Additionally, the contractor must not introduce any of their own components or parts for use in performance of PSS. The contractor must perform Pre- and Post-operation inspections on all motorized or rolling stock GSP utilizing the appropriate checklists. The contractor must turn all unserviceable GSP into the maintenance department and report these instances to the TPOC.

3.2 Security

3.2.1 Citizenship Requirements: Only U.S. citizens may perform under this contract.

3.2.2 Investigative Requirements:

Unclassified: All contractor personnel must be eligible to perform Non-Critical Sensitive work as defined by SECNAV M-5510.30C. All contractor personnel executing unclassified tasking under this contract are required to have a favorably adjudicated Tier-3 investigation. The contractor must submit a request for personnel security investigation to the Government Security Office (GSO). The GSO will initiate the contractor employee's Questionnaire for National Security Standard Form 86 (SF86) in the current system of recording and perform a preliminary screening of the contractor employee for suitability and derogatory information. The contractor employee must provide all requested information including SF86 and fingerprint results pursuant to the Privacy Act of 1974. The GSO may deny the contractor employee access to Government facilities and information and may prohibit the contractor employee from performance of duties for failure to provide requested information or when derogatory or adverse information is present on the contractor employee's SF86 and fingerprints. In such cases, the contractor employee may not perform on the Contract. If an “Eyes Only” package for the contractor is received by the GSO from the Defense Counterintelligence and Security Agency (DCSA), the contractor must divulge the information to the GSO. The GSO may deny access until the adjudication process is completed by DCSA.

The contractor must implement and maintain security procedures and controls to prevent unauthorized disclosure of controlled unclassified information and to control distribution of controlled unclassified information in accordance with the NISPOM rule, 32 CFR Part 117 and SECNAV M-5510.36B. All contractor facilities must provide an appropriate means of storage for controlled unclassified information and materials. All controlled unclassified information must be appropriately identified and marked as Controlled Unclassified Information (CUI) Only in accordance with DoD Instruction 5200.48, CUI. CUI including Covered Defense Information (meeting the definition of 48 CFR 252.204– 7012(a)) generated and/or provided under this contract must be marked and safeguarded as specified in DoD Instruction 5200.48, Controlled Unclassified Information (CUI). Available at https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/520048p.PDF. Any product containing Covered Defense Information must be assigned a distribution statement (distribution statements B through F) using the criteria set forth in DoDI 5230.24 (Distribution Statements on Technical Documents); and have this statement displayed per DoDI 5230.24, Enclosure 3.

AND

Classified: All contractor personnel executing tasking requiring access to classified information under this contract must maintain security clearance eligibility and access commensurate with the level of classification of the work performed as annotated in the Contract's DD-254, Contract Security Classification Specification Form. Contractor personnel may require access to classified information in performance of this Contract up to and including Secret, with a safeguarding level of Secret. The contractor is responsible for ensuring that all personnel receive the requisite investigation and are favorably adjudicated in accordance with National Industrial Security Program Operating Manual (NISPOM) codifying 32 Code of Federal Regulation Part 117, “NISPOM Rule”. Contractor employees who fail to meet security clearance requirements may not access classified information or perform sensitive duties under this contract. In such cases, the contractor employee may not perform on the Contract.

The contractor must comply with security requirements specified in the DD-254 attached to this contract. Information or data that the contractor accesses must be handled at the appropriate classification level. Unclassified information must be handled in accordance with the appropriate designation (Controlled Unclassified Information; Covered Defense Information). Distribution is authorized by the Requiring Office's Organization and supported Activity only. Other requests for deliverables under this contract must be referred to the TPOC/COR of this contract for approval.

3.2.3 Common Access Card (CAC)/Public Key Infrastructure (PKI), System Authorization Access Request (SAAR).

3.2.3.1 SAAR: All contractor personnel requiring access to Government Information Technology (IT) systems must have an approved System Authorization Access Request (SAAR) DD Form 2875 on file by the TPOC, with required Department of Navy Cyber Awareness Challenge Training Certificate and the DoW User Acknowledgement. New employees must submit their SAAR forms within thirty (30) days of their first day of work. Instructions for processing the SAAR forms are available at: DD Form 2875, "SYSTEM AUTHORIZATION ACCESS REQUEST (SAAR)" (whs.mil). SAAR forms must be submitted to the Government Technical Point of Contact (TPOC) or to the assigned government Mission Partner Affiliation Sponsor (MPAS).

3.2.3.2 Command Access Cards (CAC) / Local Badges: Contractor CACs and facility specific identification badges will be issued by the Government to access Government IT systems and for on-site contractor personnel that require access to Government facilities, as required, for performance of tasks under this contract. Badges must always be visible above the waist while personnel are at the Government site. The contractor must furnish all requested information required to facilitate issuance of identification badges and must conform to specific site security https://www.esd.whs.mil/Portals/54/Documents/DD/forms/dd/dd2875.pdf https://www.esd.whs.mil/Portals/54/Documents/DD/forms/dd/dd2875.pdf instructions and facility guidance. All CACs and identification badges issued to contractor employees must be returned to the GSO at the Government site in accordance with instructions and facility guidance following completion of the contract; relocation or termination of an employee; or upon request from the Procuring Contracting Officer, COR, or

TPOC.

3.2.3.3 A Tier 3 Background Investigation is required for issuance of the CAC with full access. The CAC may be issued granting facility access only upon favorable return of the Federal Bureau of Investigation (FBI) fingerprint check, confirmation of no existing adverse information in the current system of record, confirmation of no existing adverse information, that has not been previously adjudicated favorably by DCSA and submission of a completed application for identification card / Defense Enrollment Eligibility Reporting System (DEERS) Enrollment (DD Form 1172)

3.2.3.4 Upon receipt of the DD Form 1172, the government will initiate the request for the contractor to complete an SF86. An SF86 must not be required for an individual holding a valid national security clearance. The CAC will be updated with full access (facility and IT systems) upon return of a favorable determination on the SF86 from DCSA.

3.2.3.5 The contractor must not submit to the government for processing documents concerning an individual with a past unfavorable determination or denied/revoked eligibility. Furthermore, the contractor must understand that if it submits documents concerning an individual with “No Determination Made” recorded in the current system of record, the individual, if employed by the contractor, will not be granted a CAC but instead will be issued a thirty (30) day pass for access to the base and an FRCSE badge. The pass will be renewed at the discretion of GSO or until final adjudication by DCSA.

3.2.4 Information Security

3.2.4.1 The contractor must comply with security requirements specified in the DD-254 attached to this contract.

Information or data that the contractor accesses must be marked and safeguarded at the appropriate classification level and control/handling caveats as prescribed, including the aggregation of information per current Security Classification Guidance (SCG) at the correct classification level.

3.2.4.2 Marking. All information generated by the contractor must be properly marked.

Any product containing CDI must be assigned a distribution statement (distribution statements B through F) using the criteria set forth in DoDI 5230.24, Distribution Statements on Technical Documents and have this statement displayed per DoDI 5230.24, Enclosures 3 and 4. Distribution is authorized to the Requiring Office's Organization and supported Activity only. Other requests for deliverables under this Contract must be referred to the TPOC/COR of this Contract for approval.

Classified information must be marked in accordance with DoDI 5200.01.

CUI, including Legacy FOUO information generated and/or provided under this Contract must be marked in accordance with DoDI 5200.48. Technical information must also be marked with appropriate Distribution Statements and Export Control warnings in accordance with DoDI 5230.24 and Security Classification Guidance program.

3.2.4.3 Public Release: No information pertaining to this Contract must be released for public dissemination, including posting to any social media sites, unless it has been approved for public release by appropriate United States of America Government authority. Proposed public releases must be submitted for approval prior to release through the office below, via the COR:

NAS JAX FRCSE Security Office 101 Wasp St.

Building 229 Jacksonville, FL 32212

3.2.4.4 Loss, Compromise and/or Electronic Spillage of Classified or Controlled Unclassified Information: All instances of loss, compromise and electronic spillage of classified or controlled unclassified information must be reported to the COR, TPOC and Government Security Office immediately.

3.2.4.5 Compliance to National Institute of Standards and Technology (NIST) 800-171

3.2.4.5.1 The contractor must fully implement the CUI Security Requirements (Requirements) and associated Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 1) (NIST SP 800-171), or establish System Security Plan(s) (SSP) and Plan of Action & Milestones (POA&M) that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered contractor information systems affecting this contract.

3.2.4.5.2 Notwithstanding the allowance for such variation, the contractor must identify their plans in the SSP and POA&M to implement the following, at a minimum:

a. Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as Computer Numerical Control (CNC) equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted.

b. Implement Control 3.1.5 (least privilege) and associated Controls and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles.

c. Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

d. Implement Control 3.13.11 (Federal Information Processing Standards (FIPS) 140-2 validated cryptology or implementation of National Security Agency (NSA) or NIST approved algorithms (i.e. FIPS 140-2 Annex A: Advanced Encryption Standard (AES) or Triple Data Encryption Standard (DES)) or compensating controls as documented in a SSP and POAM); and NIST Cryptographic Algorithm Validation Program (CAVP) (see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

e. Implement Control 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which must be evaluated by the Navy for risk acceptance.

f. Implement Control 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program.

g. Audit user privileges on at least an annual basis.

3.2.5 Operations Security (OPSEC):

The contractor must develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the contractor and any subcontractor during performance of the contract. The contractor must be responsible for the subcontractor’s implementation of the OPSEC requirements. This program may include Information Assurance and Communications Security (COMSEC). The OPSEC program must be in accordance with National Security Decision Directive (NSDD) 298, and at a minimum must include:

a. Assignment of responsibility for OPSEC direction and implementation.

https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program

b. Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures.

c. Establishment of OPSEC education and awareness training.

d. Provisions for management, annual review, and evaluation of OPSEC programs.

e. Flow down of the OPSEC requirements to subcontractors when applicable.

While performing aboard NAVAIR or NAVAIR sites, the contractor must comply with facility OPSEC program instructions and contribute to organization-level OPSEC efforts. Include OPSEC as part of its ongoing security awareness program and take all required Agency training. Be responsive to the Supporting OPSEC Manager on a non-interference basis. Protect sensitive unclassified information and activities, which could compromise classified information or operations, or degrade the planning and execution of operations performed by the requirement office and contractor in support of the mission.

3.2.6 Anti-Terrorism Force Protection and Emergency Management:

The work performed on this contract is not Emergency Essential in accordance with OPNAVINST 3440.17A and Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans. Contractor personnel must comply with all Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans and directives. Contractor personnel must not report for work at Government facilities upon declaration of Force Protection Condition CHARLIE or in any event or emergency where Government officials’ direct curtailment of operations to “Mission Essential Only”. All contractor personnel assigned to a government facility must complete annual Antiterrorism (Level One) and Active Shooter training.

3.2.7 Cybersecurity:

Cybersecurity Maturity Model Certification (CMMC) Program: Federal contracts (including defense contracts) involving the transfer of FCI to a non-Government organization follow the requirements specified in 48 CFR 52.204-21 (FAR clause 52.204-21). Contractor shall obtain and maintain a CMMC Level 2 Self-Assessment in performance of this contract.

3.2.7.1 Cybersecurity Plan: Basic Safeguarding of Covered Contractor Information Systems. FAR clause 52.204-21 requires compliance with 15 security requirements, FAR clause 52.204-21 (b)(1), items (i) through (xv). These requirements are the minimum necessary for any entity wishing to receive FCI from the US Government (USG).

Defense contracts involving the development or transfer of CUI to a non-Government organization require applicable requirements of DFARS clause 252.204-7012.

This clause requires defense contractors to provide adequate security on all covered contractor information systems by implementing the 110 security requirements specified in NIST SP 800-171. This clause includes additional requirements; for example, defense contractors must confirm that any Cloud Service Providers (CSPs) used by the contractor to handle CUI meet Federal Risk and Authorization Management Program (FedRAMP) Moderate Baseline or the equivalent requirements. It also requires defense contractors to flow down all the requirements to their subcontractors who process, store, or transmit CUI. The CMMC Program currently does not include any requirements for contractors operating systems on behalf of the DoD.

3.2.8 Data Monitoring: In the event of a cyber-incident or at any time the Government has indication of a vulnerability or potential vulnerability, the contractor must cooperate with the…