PWS.pdf

PR: FD2060-15-00941 PWS 1

Performance-Based Work Statement (PWS) for

ALQ-161 Band 5 Traveling Wave Tube (TWT) Repair

Purchase Request: FD2060-23-00026

Date: 14 November 2022

PR: FD2060-15-00941 PWS 2

1.0 Description of Services

1.1 Objective(s): This Performance-based Work Statement (PWS) describes the services required to have the AN/ALQ-161 Electronic Countermeasures/Radio Frequency Surveillance (AN/ALQ-161 ECM/RFS) Traveling Wave Tube (TWT), NSN 5960-01-217-1479EW or 5960- 01-174-3119EW, repaired and returned to the Air Force to meet user demands and performance requirements. These services include repair, quality control, and data item submittals. The contractor shall comply with the quality levels for repair necessary to return assets in serviceable condition and deliver them on time. Additionally, the contractor shall provide timely response to Mission Impaired Capability Awaiting Parts (MICAP) and Surge requirements. Data delivery of quality products shall be on time and accurate to include data deliverables as well as free flowing communication from the contractor pertaining to any production problems, delivery schedule problems, and/or mishap notifications. Repair to either stock number will be output as NSN 5960-01-217-1479EW with a turnaround time of 180 calendar days after receipt of order or asset, whichever is later.

1.2 Benefit to United States Air Force (USAF): This acquisition will benefit the USAF by ensuring that the ALQ-161 system maintains a mission capable status allowing for increased availability and flexibility. Ultimately, the purpose of this effort is to provide a continued flow of serviceable assets to the warfighter.

1.3 Background: The AN/ALQ-161A system is an integrated RF electronic countermeasures system designed specifically for the B-1B bomber aircraft. The system is designed to detect and counter all modes of radar based weapon systems and also provides a tail warning function to detect and counter incoming missiles from the aft sector. The system is currently installed on less than 70 aircraft and has an expected retirement date of 2040.

2.0 Services Summary:

Performance Objective PWS Reference

Performance Threshold

Quality of Repair 4.10.3

There shall be no more than one Product Quality Deficiency Report (PQDR) per order to be determined the fault of the contractor.

3.0 Government Property and Services

3.1 Government Property: Government property will be provided.

3.1.1 Contractor Responsibility: The Contractor shall be responsible for Government property in their possession in accordance with the Federal Acquisition Regulation (FAR) and applicable supplements.

PR: FD2060-15-00941 PWS 3

3.1.2 Government Property to be Provided: The Government will provide the Special Tools/Special Test Equipment (ST/STE) listed in the SGFP Attachment and will make this equipment available to the contractor.

3.2 Reporting of Government Property: The Contractor shall have a system of internal controls to manage (control, use, preserve, protect, repair, and maintain) Government property in its possession in accordance with FAR 52.245-1, and its property management system shall be adequate to satisfy the requirements of this clause. The contractor shall record receipt and return of all Government Furnished Property (GFP), as well as the reporting of shipment, consumption, disposal, or transfer to another contract, in the GFP Module in Procurement Integrated Enterprise Environment (PIEE), https://piee.eb.mil, as stipulated by DFARS 252.245-7002. This reporting requirement does not change any liability provisions or other reporting requirements that may exist under the contract. GFP training and guidance is located at the DoD Procurement Toolbox at https://dodprocurementtoolbox.com/.

3.3 Loss of Government Property: The Contractor shall report loss of Government property in the GFP Module located in PIEE, https://piee.eb.mil/piee-landing/.

3.4 Return/Retention of Government Property: All property provided by the Government remains the property of the Government and shall be returned to the Government upon completion of the contract/order unless the Procuring Contracting Officer (PCO) directs the Contractor to retain the property for continued use under a successor contract. Retention of the property by the Contractor will require modification of both losing and gaining contracts in accordance with the FAR and applicable supplements and shall be in compliance with all applicable guidance and clauses listed in the contract. All Government property shall be returned to the Government in the condition provided unless approved in advance by the PCO.

3.5 Government System(s): The Government will provide Contractor personnel access to system(s) necessary to perform tasks under the contract/order. Contractor shall require access to Commercial Asset Visibility - Air Force (CAV-AF).

4.0 Technical Requirements

4.1 Period and Place of Performance:

4.1.1 Contract/Order Period of Performance: The Period of Performance is a 12 month basic period and four 12 month ordering periods totaling 5 years. The period of performance for the contract/order will extend one year beyond the date of the final order.

4.1.2 Place of Performance: These services will be performed at the contractor’s facility.

4.2 Contract Data Requirements List(s) (CDRL)

PR: FD2060-15-00941 PWS 4

Document Identifier Base Year

Option Year

Option Year

Option Year

Option Year

DID Title PWS Reference(s)

A001 B001 C001 D001 E001 DI‐

MGMT‐

81838

Commercial Asset Visibility Air Force (CAVAF) End Item Reporting

4.7

A002 B002 C002 D002 E002 DI-

MGMT-

81803

Item Unique Identification (IUID) Marking Plan

4.3.2

A003 B003 C003 D003 E003 DI-

MGMT-

81804

`IUID Marking Activity, Validation and Verification Report

4.3.3

A004 B004 C004 D004 E004 DI-MISC-

82003/T

Maintenance Data Collection Records

4.13.1

A005 B005 C005 D005 E005 DI-MISC-

80071E

Parts Approval Request 4.13.2

A006 B006 C006 D006 E006 DI-

MGMT-

80368A

Monthly Status Report 4.13.3

A007 B007 C007 D007 E007 DI-MISC-

81832

Counterfeit Prevention Plan

4.5

A008 B008 C008 D008 E008 DI‐SESS‐

80639E

Engineering Change Proposal

4.3.4

A009 B009 C009 D009 E009 DI-

MGMT-

81941

Obsolescence Alert Notice

4.17.2

A010 B010 C010 D010 E010 DI-SAFT-

81563

Accident/Incident Report 5.5.2

A011 B011 C011 D011 E011 DI-PSSS-

81995A

Contract Depot Maintenance (CDM) Production Report

4.7

A012 B012 C012 D012 E012 DI-

MGMT-

80441D

Government Property Inventory Report

4.3.3.1

4.2.1 Quality of CDRL Deliverable: There shall be no more than one rejection of any deliverable. There shall be no more than two total rejection(s) of deliverables per Contract Year.

The Government will reject a deliverable if one or more technical errors or two or more minor errors are found within the deliverable. A technical error is defined as the format not being in accordance with the CDRL or the content not being accurate and complete in accordance with the CDRL, PWS or contract. A minor error is exemplified by a typographical error, a grammatical error, etc. The rejected deliverable shall be corrected and resubmitted within ten business days of notification of Government rejection.

4.2.2 Receipt of CDRL Deliverable: CDRL deliverables shall be submitted via Wide Area WorkFlow (WAWF) and submitted directly to the MFT member identified on the CDRL. There shall be no more than one late submission(s) of deliverables per contract year. The Contractor shall notify the Government if the delivery of any data/document will not meet the scheduled

PR: FD2060-15-00941 PWS 5

delivery date and negotiate a revised delivery date. The data/document shall be delivered by the revised delivery date acceptable to the Government.

4.3 Item Unique Identification (IUID)

4.3.1 IUID Requirements: Item Identification and Valuation, unique item identification is a method of marking items with unique item identifiers which have machine-readable data elements. Unique item identification is required for all items to be delivered to the DoD that meet the criteria established in accordance with the FAR and applicable supplements and shall be in compliance with all applicable guidance and clauses listed in the contract. All assets subject to marking must be recorded in the DoD IUID Registry.

4.3.2 IUID Marking Plan: The Contractor’s IUID Marking Plan shall fully detail and document the strategy and scope to be used to meet MIL-STD-130N, DoD Standard Practice / Identification Marking of US Military Property. The plan must be approved by the system engineer prior to implementation. This applies only to items that are not already properly marked. (CDRL A002-E002, IUID Marking Plan, DI-MGMT-81803)

4.3.3 IUID Marking Activity and Verification Report: The contractor shall provide an IUID Marking Activity and Verification Report. A key attribute for the report is the Verification column which indicates pass/fail for each item’s Data Matrix Symbol Quality. (CDRL A003- E003, IUID Verification Report, DI-MGMT 81804)

4.3.3.1 Government Property Inventory Report: The contractor shall perform an annual 100% physical inventory. The annual period of performance for the contractor to accomplish the required action shall be one year starting from the date of award. All results, findings and corrective actions of any annual physical inventories shall be provided to the Government 21 working days after the one year mark. – [CDRL A012-E0012 Government Property Inventory Report, DI-MGMT 80441D]

4.3.4 Engineering Change Proposal: In the event of an obsolescence issue or other technical problem requiring a change to the technical data package, the contractor shall submit an Engineering Change Proposal. All Class 2 ECPs shall require class concurrence from the Government prior to execution. Class 1 ECPs will be incorporated using a modification contract action. [CDRL A008-E008, DI-SESS-80639E, Engineering Change Proposal.]

4.4 Packaging:

4.4.1 The Contractor shall package and mark material in accordance with the contract (basic and/or order, as applicable) in accordance with the attached Air Force Materiel Command (AFMC) Form 158, Packaging Requirements. The Contractor shall ensure that classified material is packaged, marked and delivered in accordance with Department of Defense (DoD) 5220.22-M, National Industrial Security Program Operating Manual (NISPOM). The Contractor shall package and mark material in accordance with other applicable Government regulations including, but not limited to, those regarding security, safety and environmental concerns.

PR: FD2060-15-00941 PWS 6

4.4.2 The Contractor shall package and mark material for movement, shipment, receipt and storage in a manner that ensures the protection and preservation of the material for shipment to and storage at the destination. The Contractor shall package electronic parts susceptible to electrostatic discharge damage in accordance with MIL-STD-1686C, Department of Defense Standard Practice / Electrostatic Discharge Control Program for Protection of Electrical and Electronic Parts, Assemblies and Equipment (Excluding Electrically Initiated Explosive Devices), and MIL-HDBK-263B, Military Handbook / Electrostatic Discharge Control Handbook for Protection of Electrical and Electronic Parts, Assemblies and Equipment (Excluding Electrically Initiated Explosive Devices).

4.4.3 In accordance with MIL-STD-2073-1E, Standard Practice for Military Packaging, shipping containers received, which meet the requirements of the AFMC Form 158 and are suitable for return shipment of serviceable assets, shall be reclaimed and stored for reutilization.

Unsuitable shipping containers shall be disposed of and replaced with new containers that meet the requirements of the AFMC Form 158.

4.5 Counterfeit Prevention Plan: The Contractor shall establish and maintain a counterfeit electronic part detection and avoidance system to mitigate the risk of counterfeit electronics parts being installed in end items or otherwise entering the USAF/DoD inventory. The system shall incorporate processes/procedures to address the requirements listed in accordance with the FAR and applicable supplements and shall be in compliance with all applicable guidance and clauses listed in the contract. The Government's review of the Contractor’s system will be accomplished as part of the evaluation of the Contractor’s purchasing system in accordance with the FAR and applicable supplements and shall be in compliance with all applicable guidance and clauses listed in the contract. (CDRL A007-E007, DI-MISC-81832, Counterfeit Prevention Plan)

4.6 Government-Industry Data Exchange Program (GIDEP): The Contractor shall participate in GIDEP in accordance with Air Force Joint Instruction (AFJI) 63-108, Government-Industry Data Exchange Program (GIDEP), and GIDEP Operations Manual S0300-BT-PRO-010, Government- Industry Data Exchange Program.

4.7 Commercial Asset Visibility-Air Force (CAV-AF): The Contractor is required to comply with all CAVAF requirements identified in the CDRLs and attachments to the contract, and shall report production in CAV-AF. Additionally, upon completion of the repair, the contractor is required to print the DD1348-1 (in triplicate) from CAVAF. One copy is to be placed inside the box with the returnable repair asset, one outside the box and one copy will be electronically uploaded to WAWF as part of the Receiving Report (DD250). The Contractor shall provide data on the actions conducted for each unit and report as actions occur. The following metrics will be monitored: GFM In-Transit, Repairable GFM Accountability and Assets Not on Contract. If CAV-AF training is required, Contractor personnel may send an email to:

406scms.cav.af.ar@us.af.mil.

(CDRL A001-E001, DI-MGMT-81838, Commercial Asset Visibility Air Force (CAVAF) / Government Furnished Material Report, CDRL A011-E011 Contract Depot Maintenance (CDM) Production Report, DI-PSSS-81995A)

PR: FD2060-15-00941 PWS 7

4.8 Surge Repairs: The Contractor shall provide the Supply Planner, within three business days of notification of Surge requirement, a proposed delivery schedule. The delivery schedule shall include constraints (such as carcass availability and funding), and any negative impact to the delivery schedule. The delivery schedule shall be provided via email.

Delivery schedule for Surge repairs shall be met in accordance with the negotiated contract schedule.

4.9 MICAP Repairs: The Contractor shall provide the Supply Planner, within five business days of notification of MICAP requirement, a proposed delivery schedule. Proposal shall include constraints (such as carcass availability and funding), and any negative impact to the delivery schedule. The delivery schedule shall be provided via email. Delivery schedule for MICAP repairs shall be met in accordance with the negotiated contract schedule

4.10 Quality:

4.10.1 The Contractor’s inspection system shall be established and maintained IAW FAR 52.246-11 and shall meet the requirements of NATO AQAP 2070 (or equivalent).

4.10.2 Corrective Action for Defects Reported: When requested, the contractor shall assist the cognizant contract administering organization in evaluating exhibits to determine the root cause for deficiencies reported from field and depot organizations.

4.10.3 Product Quality Deficiency Reports (PQDR): The contractor’s inspection system shall include the complete processing of Material Deficiency Reports (MDR) and Quality Deficiency Reports (QDR) in accordance with T.O. 00-35D-54 including evaluation of PQDR contract repair exhibits at no additional cost to the Government. There shall be no more than one Product Quality Deficiency Report (PQDR) per order to be determined the fault of the contractor.

4.11 Test Equipment Calibration: The calibration standards for calibrating the test equipment used in the repair test/sell-off phase shall be traceable to the National Institute of Standard Technology (NIST).

4.12 Production: For the purpose of resolving production problems that would prevent achievement of production targets as they occur, the Contractor shall report them to the Government Supply Planner via email.

4.12.1 The contractor may remove any parts, components, or subassemblies from any unit to aid in the repair of other units. Removing parts, components, or subassemblies to aid in the repair of other units shall not be reason for condemnation. Parts, components, or subassemblies used to aid in the repair of other units shall be replaced as they become available.

4.12.2 Workmanship shall be in accordance with T.O. 00-25-234 or Contractor’s standard repair procedures and acceptance criteria.

4.13 Data Deliverables: There shall be no more than one late submission of deliverables per order. The Contractor shall notify the Government if the delivery of any data/ document will not meet the scheduled

PR: FD2060-15-00941 PWS 8

delivery date and negotiate a revised delivery date. The data/document shall be delivered by the revised delivery date acceptable to the Government.

4.13.1 Data Collection: The Contractor shall use AFTO 349 Maintenance Data Collection Record or Government approved Contractor format equivalent to report contract repair by system to person/persons listed in CDRL. (CDRL A004-E004, DI-MISC 82003/T, Maintenance Data Collection Record)

4.13.2 Parts Approval Request, DD Form 2052: Nonstandard parts as defined by non Mil Standard or noncommercial equivalent that are used in this repair must be approved by the System Engineer as detailed in CDRL. (CDRL A005-E005, DI-MISC-80071E, Parts Approval Requests)

4.13.3 Monthly Status Reports: The Contractor shall prepare and deliver monthly status reports.

All reports shall be in contractor format, but compatible with MS Office Suite products. The first monthly report shall be submitted on/by the 10th of the first full month following contract award. Subsequent monthly reports shall be submitted by the 10th of the following month. The Government will submit concerns/corrections to the MSR in writing within 10 calendar days of receipt. The contractor shall respond to Government comments in the next MSR, unless an earlier response is directed. All correspondence will be via e-mail. The report shall identify accomplishments for the month and any difficulties encountered. It should compare the status achieved to planned goals and explain resources expended. This report will be used by the Government to monitor and evaluate contractor performance. The final status report shall provide a summary of all activity covered during the period of performance as documented in the MSR. (CDRL A006-E006, Monthly Status Report, DI-MGMT-80368A).

4.14 Teardown, Test, and Evaluate (TT&E): The contractor, upon receipt of hardware and funded delivery order, will TT&E to determine if the asset needs to be condemned or is a candidate for minor repair, major repair, or total rebuild. TT&E will be completed 60 calendar days after receipt of assets at a minimum rate of six TWTs per month. Determinations for repair or condemnations found from TT&E must be reported to the Government for concurrence before being inducted for repair or condemned. Assets requiring repair that have been concurred upon by the Government will be inducted in the Contractor’s repair line and repaired within 120 calendar days after completion of TT&E. All repairs will have a minimum delivery rate of three TWTs per month. Accelerated deliveries are permissible and encouraged.

4.15 Major and Minor Repairs: Repaired assets shall be delivered in accordance with the schedule defined by the contract. There shall be no more than one late delivery per order. revised delivery date acceptable to the Government.

Minor Repair: Repair of components which are not part of the vacuum envelope, repair of external hardware, readjustment, refurbishment, and retest.

Major Repair: Repair internal to the vacuum envelope which requires repair of vacuum envelope components such as the electron gun, collector, or RF circuits.

Total Rebuild: units normally require complete replacement of the vacuum envelope, but have salvageable external mechanical parts.

PR: FD2060-15-00941 PWS 9

4.16 Condemnation (Items Beyond Economical Repair): Items received by the contractor that are deemed to be Beyond Economical Repair (BER) due to acts of God or gross negligence on the part of the Government, will be brought to the attention of the Defense Contract Management Agency (DCMA) ACO with a copy to the AFSC/PZABB PCO, for resolution. Requests for condemnation shall be submitted in writing through the ACO to the PCO within five workdays of discovering the potential need to condemn. The Government IPT will have final approval for all condemnations of items. Condemnation shall not be requested due to non-availability of replacement parts. The Government retains the right to examine any condemned items and test results for any items after the contractor submits a condemnation request. The contractor shall notify the PCO and the appropriate system’s Program Manager (in writing) if an item is awaiting examination for an excessive amount of time. Items condemned under provisions of this contract may be replaced by the Government with reparable assets of the same NSN at no additional cost to the Government. All items condemned that contain precious metals and/or all precious metals bearing scrap shall be reported to the Defense Reutilization and Marketing Service, DRMS-SM, Federal Center 74 N. Washington, Battle Creek, MI 49017-3084 for disposition instructions unless other specific instructions are furnished by the PCO. All other condemnation items will be disposed of in accordance with PCO instructions. BER scenarios considered are:

4.16.1 Physical Damage: Physical damage destroys 75% of the physical and electrical integrity of the unit (e.g. crushed, dropped, etc.).

4.16.2 Internal Component Destruction: Overheating and subsequent destruction of 80% of the internal electrical components and electrical connections.

4.16.3 Other Specified Damage: Damage due to fire, explosion, flood, aircraft crash, or enemy combat action.

4.16.4 Undefined Damage: Any item not meeting the above descriptions are required to be repaired or submitted to PCO for further consideration. Such considerations might include wear and tear, repairs to point of exhaustion, etc.

4.17 Obsolete Parts and Diminishing Manufacturing Sources and Material Shortages

4.17.1 The contractor is responsible for managing obsolescence over the entire period of the contract to ensure compliance with all performance and contract requirements. The contractor shall develop a plan for managing the loss, or impending loss, of manufacturers or suppliers of components, assemblies, or materials used in the system that prevents impact to contract performance and prevents additional costs from being incurred by the Government due to obsolescence. Changes considered necessary by the contractor to ensure the continued manufacture and/or repair of the end item shall be made in accordance with the configuration management requirements of this PWS.

4.17.2 When the contractor identifies an impending component obsolescence issue, or receives an unanticipated DMS discontinuance notice from a supplier, fulfillment of orders will continue until the stock of the obsolete component is exhausted. The contractor will notify the

PR: FD2060-15-00941 PWS 10

Government of the DMS issue and will provide the Government Contracting Officer a resolution plan for approval via email.

If the DMS or obsolescence resolution impacts delivery performance or cost material, the material lay-in will be updated and the item delivery performance will be suspended. A mutually agreed upon ramp-up period will be under taken to allow for material lay-in delivery to once again meet the required performance delivery of this PWS. [CDRL A009-E009, DI-MGMT- 81941, Obsolescence Alert Notice]

4.18 Supply Chain Risk Management:

4.18.1 The contractor shall identify, assess, plan for, and mitigate actual or potential threats, vulnerabilities, and disruptions to the Air Force's supply chain throughout the lifecycle to ensure mission effectiveness. The contractor shall inform and include the Government in any mitigations or alterations to the program. The SCRM plan shall address the broad spectrum of supply chain risks that have the potential to: jeopardize the integrity of products, services, people, and technologies; compromise intellectual property; disrupt the flow of product, materiel, information, and finances needed for continued Air Force operations; and drive materiel cost increases to the program. The contractor shall develop and execute processes for identifying supply chain risks as early as possible; the persistent and comprehensive tracking, monitoring, and re-evaluation of supply chain risks and their corresponding mitigation actions; and communicating supply chain risks to affected stakeholders and the Government. The contractor shall notify in writing the identified actual and potential supply chain risks. The contractor's SCRM program and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product and/or service. As part of the overall SCRM approach, the Contractor shall establish, document and maintain documentation about subcontractors/vendors for all parts that will be used for Government contracts. The contractor shall continuously monitor their sources of supply for unknown, unauthorized, non-certified, or unqualified sources providing parts or services from any sub-tier supplier within the contractor's supply chain. The contractor shall investigate and submit findings to include root causes, impacts and a corrective action.

4.19 Continuity of Operations (COOP)

4.19.1 Contractor shall include a SCRM plan detailing the offeror's supply chain risk management approach, providing specific emphasis on the risks associated with a.) Continuity of Operations b.) Foreign Influence and c.) Cybersecurity. The contractor shall detail the specific supply chain risk (listed below) and provide a management and mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.

4.19.2 The contractor will develop and/or update a Continuity of Operations Plan (COOP), also known as a Business Operations Plan, which outlines the processes and actions to prepare for, and respond to, unplanned natural and man-made disruptions to mission essential operations and

PR: FD2060-15-00941 PWS 11

provide that to the U.S. Government. The COOP will address disruptions caused by: a) natural causes possible in the local vicinity (winter weather, earthquakes, hurricanes, fires, flooding, wind, pandemics, etc.) and b) man-made causes (cyber attacks, electrical outages, strikes affecting workforce, civil unrest, modes of transportation, and receiving/shipping goods, etc.).

The plan will explain: a) how work will continue in the same or alternate facility(ies), b) ability to use and/or augment the current workforce, c) ability to repair/restore key infrastructure (machinery, computers, logistics etc.), d) how to communicate with, and inform the US Government and others in the supply chain.

4.19.2.1 Contractor shall provide essential records management for personnel working on U.S.

government contracts. Records will be accessible to key members of the organization.

Contractor shall ensure continuous records management support (training, etc.) despite any changes in personnel.

4.19.3 If applicable the contractor shall prepare for the continuation of essential DoD services during crisis IAW DFARS 252.237-7023, DFARS 252.237-7024, and other applicable references as necessary. In a state of emergency, if the Government deems necessary, the contractor shall provide all services necessary to ensure mission accomplishment. On occasion, services may be required to support an activation, or exercise of contingency plans outside normal duty hours.

4.20 Foreign Influence

4.20.1 The contractor shall disclose any Foreign Ownership, Control or Influence (FOCI) for the purpose of initial or continued facility clearance eligibility. A Standard Form 328 Certificate Pertaining to Foreign Interest shall be submitted to the Government cognizant security office specified in each DD254.

4.20.2 The contractor shall provide information regarding FOCI. If the contract requires access to classified information, DD254, Contract Security Classification Specification, shall be required. Contractor shall provide an update on its financial health and potential FOCI when a merger or acquisition occurs.

4.20.3 Foreign contractor participation is excluded at the prime and subcontractor level, unless authorized through a current approved National Interest Determination (NID). It is solely the responsibility of the contractor to obtain necessary certification from the U.S. Department of State and to comply with the federal laws and regulations. Question must be directed to the U. S.

Department of State’s Directive of Defense Trade Controls.

4.20.4 Subcontract Management. The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI)

PR: FD2060-15-00941 PWS 12

considerations. Contractors may add subcontractors to their team only after notification to the Procuring Contracting Officer (PCO) and Contracting Officer Representative (COR).

4.20.5 Foreign Disclosure: Include ONE of the following statements in your PWS:

"Foreign Disclosure Restrictions apply."

4.21 Cybersecurity

4.21.1 The contractor shall develop and implement a cybersecurity protection of supply chain information plan and provide a copy to the U. S. Government. The contractor shall conduct early and continuous monitoring throughout the contract to prevent or reduce impacts of cyber vulnerabilities where adversaries are able to exploit, steal, alter, manipulate, interrupt, or destroy system functionality, information, or technology. The contractor's plan shall: a) make specific reference to those aspects of the National Institute of Standards and Technology Special Publication (NIST SP) 800-161, “Supply Chain Risk Management Practices for Federal Inform ation Systems and Organizations” that represent the contractor's implemented processes and practices; b) include a description of how the contractor shall protect the supply chain from exploitation due to the insertion of counterfeits/malware, unauthorized production, tampering, theft, insertion of malicious software and hardware, functionality alteration, and any other elements that would allow adversaries to gain unauthorized access to data, alter data, interrupt communications, or otherwise disrupt operations; c) inform the U. S. Government of any instances of unauthorized access and/or compromise, such as those listed in item “b” to contractor’s digital information and parts and components and d) make specific reference to those aspects of NIST SP 800-53 that represent the processes and practices the contractor will implement. The plan and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product.

4.21.2 The Contractor and any subcontractors shall provide to the government a system security plan (or extract thereof) and any associated plans of action developed to satisfy the adequate security requirements of DFARS 252.204-7012, and in accordance with NIST Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations” in effect at the time the solicitation is issued or as authorized by the contracting officer, to describe the contractor’s unclassified information system(s)/network(s) where covered defense information associated with the execution and performance of this contract is processed, is stored, or transmits. The contractor shall {develop, update} an incident-handling capability plan that utilizes guidance provided in NIST SP 800-61 revision 2, Computer Security Incident Handling Guide, consisting of 1) incident response policy and plan, 2) procedures for performing incident handling and reporting, 3) guidelines for communicating with outside parties regarding incidents, 4) incident team structure and staffing model, 5) relationships and lines of communication between the incident response team and other groups, both internal

PR: FD2060-15-00941 PWS 13

and external, 6) services the incident response team should provide, and 7) staffing and training the incident response team. Any incident reported to Defense Industrial Base Cybersecurity Program (https:\\dibnet.dod.mil) shall also be reported to the responsible contracting officer within 8 hours.

4.22 Cybersecurity (electronic components - FSG 59, with the exception of those that do NOT contain any programmable components)

4.22.1 The contractor shall provide information to obtain a Defense Intelligence Agency – Threat Assessment Center (DIA-TAC) Report when Critical Components are known based on the Functional Thread Analysis. The contractor shall trace the Bill of Materials to the lowest critical components. The contractor shall update design via system engineering processes to ensure above-medium risk components are not in the system. The contractor shall ensure all hardware, with special emphasis on lowest critical components (CCs) and components containing Critical Program Information (CPI), are from trusted sources and are manufactured by approved personnel as documented in the contractor Security Plan. The contractor shall develop a SCRM plan documented in the contractor Security Plan, in accordance with (IAW) the current version of Committee on National Security Systems Directive (CNSSD) No. 505 and NIST SP 800-161, to mitigate supply chain risk. The contractor shall ensure that no critical components procured are on the Section 806 (National Defense Authorization Act for FY 2011 (Public Law 111-383)) and Section 2339a (Title 10, United States Code) Lists in the Supplier Performance Risk System (SPRS) (CDRL 25, 27, 29). The contractor shall develop and implement a Counterfeit Parts Prevention Program in compliance with Defense Federal Regulation (DFAR) 252.246–7007 Contractor Counterfeit Electronic Part Detection and Avoidance System, using SAE AS5553, SAE AS6171, SAE AS6081, and Independent Distributors of Electronics Association (IDEA) Standard [IDEA-STD-1010B] or similar practices to prevent the inclusion of counterfeit parts or parts with malicious logic. The contractor shall perform acceptance testing on lowest CCs and components containing CPI in accordance with the Counterfeit Parts Prevention Program.

4.22.2 The contractor shall implement Department of Defense (DoD) Trusted Systems and Networks (TSN) strategies that integrates robust systems engineering, SCRM, security, counterintelligence, intelligence, cybersecurity, hardware and software assurance, and information systems security engineering disciplines to manage risks to system integrity and trust IAW DODI 5200.44 Protection of Mission Critical Functions to Achieve TSN.

4.23 Counterfeit Prevention (all electronic components - FSG 59)

4.23.1 Counterfeit prevention required for electronics is mandatory and covered under (448 SCMW/CL Interim Guidance Memorandum, Establishment of Requirements for Standard Statement of Work Language for Counterfeit Prevention, Updated from 26 Sep 13) The language provided below is specific to electronic components copied from the 448 SCMW/CL interim

PR: FD2060-15-00941 PWS 14

Memo cited above, but teams can tailor the language to include parts, material, software, and/or systems as appropriate. The PWS/SOW for every 448 SCMW buy, repair, and sustaining engineering service contracts involving electronic items shall include items 1 through 2.9 that follow.

4.23.2 Counterfeit Prevention Plan (CPP). Contractors that supply electronic parts or systems that contain electronic parts shall establish policies and procedures to avoid, detect, mitigate and disposition counterfeit electronic parts to prevent such parts from entering the USAF/DoD supply chain. These policies and procedures shall be documented in a CPP for submission and approval in accordance with Data Item Description (DID) DI-MISC-81832 and accomplished for all specified contract items. DI-MISC-81832 is applicable to Parts, Material and Processes Selection (PMPS) associated with delivery of systems and assemblies to the USAF and DoD.

The requirements established by DI-MISC-81832 also apply to electronics components procured in sustainment of such systems and assemblies. The requirements of the recently DoD-adopted SAE 5553, Aerospace Standard, Counterfeit Electronics Parts; Avoidance, Detection, Mitigation, and Disposition shall also apply.

4.23.2.1. At a minimum, the CPP shall address: 2

4.23.2.2. Applicability. The Contractor shall identify all Business locations and programs to which the CPP applies. The CPP shall address materials, hardware, electronic parts, and procured assemblies.

4.23.2.3 Definitions. The Contractor shall utilize definitions per AS 5553 to ensure consistency.

Any contractor-derived definitions must be included in an appropriate CPP appendix or annex.

(Ref. AS5553, paragraph 3, 3.1, 3.2, 3.3, appendix H)

4.23.2.4 Parts Availability and Use of Parts Brokers. The Contractor shall not procure materials, systems, assemblies, subassemblies or parts from parts Brokers when available from Original Manufacturers (OM) or their Authorized Distributors. In cases where materials, systems, assemblies, subassemblies or parts are no longer available from the OM or their Authorized Distributors, procurement from Brokers may be authorized as defined by the Contractor’s policy and their CPP. (Ref. AS5553, paragraph 4.1.1, 4.1.2.e., appendix A)

4.23.2.5 Procurement Policies. The Contractor shall provide and implement policy directing development and implementation of business practices and procedures, and processes to prevent procurement of Counterfeit materials and parts. The Contractor shall identify the appropriate office(s), business units, functional organizations, and programs, who shall have responsibility for development, maintenance and implementation of the CPP. The CPP shall identify the specific roles and responsibility for each. (Ref. AS5553, paragraph 4.1.2, 4.1.3, appendix B, C, D)

PR: FD2060-15-00941 PWS 15

4.23.2.5.1 Risk Assessment. The contract shall address the risk of using unknown sources and or unauthorized suppliers in the CPP. Application or technical risk assessments shall establish the effect that counterfeit parts may have on performance. Vendor or source of supply risk assessments shall establish the potential for obtaining counterfeit parts. Using any risk analysis tool acceptable to the Government, the Contractor shall conduct a risk assessment based upon item characteristics and how likely it is that a counterfeit part will be received. The contractor shall identify and describe in the CPP how parts are selected for assessment and what risk is acceptable based upon the parts design, construction, material and functional requirements. As a minimum, analysis shall be completed for flagging high risk items, such as items that are obsolete, discontinued, rare, etc. The contractor shall require completion of a trade study, documented within the CPP, that shall facilitate determining whether 100% testing of parts procured from after-market sources is more cost effective than qualification or requalification of a manufacturer. (Ref. AS5553, paragraph 4.1.2, 4.1.3, appendix B, C, D)

4.23.2.5.2 Detection and Avoidance Responsibilities. The Contractor shall establish processes for the review and approval of contractor and applicable subcontractor systems for the detection and avoidance of counterfeit electronic parts and suspect counterfeit electronic parts, which processes shall be comparable to the processes established for contractor business systems under section 893 of the Ike Skelton National Defense Authorization Act for Fiscal Year 2011 (Public Law 111–383; 124 Stat. 4311; 10 U.S.C. 2302 note). The Contractor shall flow down such requirements and processes to their subcontractors per Office of the Deputy Assistant Secretary of Defense (ODASD) Memo titled “Overarching DoD Counterfeit Prevention Guidance”, dated 16 March 2012. (Ref. AS5553, paragraph 4.1.4, 4.1.5, appendix E)

4.23.2.5.3 Testing and Verification. The Contractor shall establish and accomplish testing and verification processes for items not received from an original equipment manufacturer, original component manufacturer, or authorized distributor that are identified as having high risk for counterfeit potential. These processes apply to prime contracts, and to subcontracts or suppliers below the prime contracts. The Contractor shall provide a list of acceptable test facilities if the subcontractor or supplier does not have the capability to perform required testing. Submittal of Certificates of Compliance indicating the parts are not counterfeit shall be acceptable for verification of testing. (Ref. AS5553, paragraph 4.1.4, appendix E)

4.23.2.5.4 Configuration Identification and Traceability. The Contractor shall identify and control the configurations of all systems, assemblies, subassemblies and parts, and enable mechanisms to provide traceability of parts. The Contractor shall report to the Government when control of the configurations of all systems, assemblies, subassemblies and parts, and mechanisms to provide traceability of parts are not possible. The Contractor shall identify the specific systems, assemblies, subassemblies and parts beyond the Contractors’ control. The Contractor shall be responsible for detecting and avoiding the use or inclusion of counterfeit materials and parts, to include procured assemblies and subassemblies, in such products and shall be responsible for the rework or corrective action that may be required to resolve the use or inclusion of counterfeit materials and parts. The cost of counterfeit electronic parts and suspect counterfeit electronic parts and the cost of rework or corrective action that may be required to

PR: FD2060-15-00941 PWS 16

remedy the use or inclusion of such parts are not allowable costs under Department contracts , unless: a) the contractor has established a counterfeit avoidance/detection system approved by the DoD, b) the counterfeit parts were procured from a DoD-accredited trusted supplier or provided as government property, and c) the contractor has provide timely notification to the government. (Ref. AS5553, paragraph 4.1.6, appendix F)

4.23.2.5.5 Counterfeit Notification and Reporting. The Contractor shall report in writing to the Procuring Activity within 30 days of determining any end item, component, part, or material contained in supplies purchased by the Department of Defense, or purchased by a contractor or subcontractor for delivery to, or on behalf of the Department, contains counterfeit electronic parts or suspect counterfeit electronic parts for the purpose of investigation and notification of the Air Force Office of Special Investigations (AFOSI). The PCO shall coordinate reporting to the appropriate Program Management/Item Management, System Engineering Management, the AFMC Discrepant Material Reporting Program (DMRP) Office in 406 SCMS/GULAB, and the AFOSI. Additionally, the Contractor shall within the same 30 day period, or as directed by AFOSI, ensure all suspected or confirmed counterfeit items are entered into the Government- Industry Data Exchange Program (GIDEP) system, which will serve as the DoD central reporting repository. (Ref AS5553, paragraph 4.1.7, appendix G).

4.23.2.5.6 Counterfeit Prevention Training. The Contractor shall provide appropriate training and shall require all personnel working procurement within their company, to include at a minimum their supply chain management specialists, receiving inspectors, and engineers, to complete said training. The Contractor shall determine the appropriate training required.

Training may be developed in-house or may be other Industry accepted training. The CPP shall describe and list the training provided by the contractor to their personnel.

5.0 General Information

5.1 Continuation of Mission-Essential Services During a Crisis: The Functional Commander (FC) or civilian equivalent has determined these services are not mission-essential and services will not continue in the event of a crisis.

5.2 Security Requirements

5.2.1 Knowledge and/or generation of classified information and/or Controlled Unclassified Information (CUI) are required for performance of the contract/order. The Contractor shall ensure applicable Contractor personnel have security clearances at the appropriate level.

5.2.2 Security Regulations: The Contractor shall ensure personnel, information, systems, property, and facility security requirements are met. The Contractor shall comply with all applicable security regulations and clauses listed in the contract.

5.2.3 Operations Security (OPSEC The purpose of OPSEC is to reduce the vulnerability of USAF missions to adversary collection and exploitation of critical information. DoDD 5205.02E

PR: FD2060-15-00941 PWS 17

and DoD Manual 5205.02-M require contractors supporting DoD activities use OPSEC to protect critical information for specified contracts, sub contracts, and information used in the performance of duties in support of Air Force requirements/missions. The Contractor shall ensure Contractor personnel who perform work on (or in) a Government facility comply with the OPSEC procedures and training requirements of the facility as specified in AFI 10-701.

5.2.4 Communications Security (COMSEC): The Contractor shall use only secure communications methods and/or equipment to transmit or otherwise transfer classified information and/or Controlled Unclassified Information (CUI) in accordance with 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), § 117.7(a).

Applicable equipment shall be safeguarded, maintained and operated in accordance with 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), § 117.7(a).

5.2.5 Security Clearance: The Contractor shall ensure applicable Contractor personnel have security clearances at the Secret level for proper accomplishment of contract/order requirements.

The security clearance shall be obtained in accordance with the DD Form 254, Department of Defense Contract Security Classification Specification. Contractor personnel whose clearances have been suspended or revoked shall immediately be denied access to classified information and/or CUI and classified items.

5.2.6 Security Incident or Violation: The Contractor shall immediately notify the Government Security Office of any potential or actual security incident or violation including potential or actual unauthorized disclosure or compromise of classified information and/or CUI.

5.2.7 Security of Contractor System(s): The Contractor shall ensure the security of Automated Information System(s) (AIS) at the Contractor’s facility to preclude potential security incidents or violations including potential unauthorized disclosure or compromise of classified information and/or CUI.

5.3 Environmental Management System (EMS): Services will be performed at the Contractor’s facility; therefore, the EMS requirements do not apply to this effort, but this statement does not exempt the Contractor from any other Federal, State or local statute or requirement.

5.4 Agency Affirmative Procurement Programs: This acquisition does not require the purchase of Environmental Protection Agency (EPA)-designated products or United States Department of Agriculture (USDA)-designated products; therefore, the requirement does not apply.

5.5 Safety Requirements:

5.5.1 Contractor Environmental, Safety, and Occupational Health Compliance: The Contractor shall comply with Government Safety and Health regulations including, but not limited to, Public Law 91-596, Occupational Safety and Health Act (OSHA), and DoD Directive 4715.1E, Environmental, Safety, and Occupational Health (ESOH). The Contractor shall establish and maintain a safety and health program detailed in a written Contractor’s Safety and Health Plan.

PR: FD2060-15-00941 PWS 18

The Contractor shall require all subcontractors to comply with required safety, health and fire standards.

5.5.2. Mishap Notification/Investigation: In accordance with AFI 91-204, Safety Investigations and Reports, the Contractor shall report mishaps involving damage or injury to USAF assets/interests. The Contractor shall ensure the USAF is notified of mishaps. The Contractor shall contact the Program Manager if available, or another MFT member by telephone within two hours. The Contractor shall immediately secure the mishap scene (and damaged property) and impound pertinent maintenance and training records until released by the Government’s Safety Office (78 ABW/SE). Such release shall be accomplished through the Contracting Officer. The Contractor shall cooperate and assist Government personnel in the investigation of the mishap and submit an Accident/Incident Report within 24 hours of the mishap [CDRL A010-E010, Reference in paragraph 4.2, DI-SAFT-81563, Accident/Incident Report].

5.5.3 Voluntary Protection Programs (VPP): Contractor personnel performing work on a USAF installation shall participate in the local VPP.

5.5.4 VPP Description: In 1982, OSHA created the Voluntary Protection Programs (VPP) to recognize and partner with worksites that implement exemplary systems to manage worker’s safety…