REQUEST FOR PROPOSAL 70T04022R7672N007.pdf

REQUEST FOR PROPOSAL

Transportation Security Administration

Acquisition Program Management

NEXT GENERATION CREDENTIAL AUTHENTICATION

TECHNOLOGY

70T04022R7672N007

RFP 70T04022R7672N007

CAT2

Table of Contents

SECTION A

SECTION B -– SCHEDULE OF SUPPLIES/SERVICES

B.1 GENERAL DESCRIPTION

B.2 TYPE OF CONTRACT

B.3 INDEFINITE QUANTITY CONTRACT - MINIMUM AND MAXIMUM AMOUNT

B.4 CONTRACT PRICING

B.4.1 PRICING SCHEDULE AND CLINS

B.4.2 FIXED UNIT PRICE CLIN

B.4.3 FIXED PRICE CLINS

B.4.4 FIXED UNIT PRICE WARRANTY CLIN

B.4.5 RMA DISINCENTIVES

B.4.6 TIME-AND-MATERIALS ORDERS

B.4.7 LABOR CATEGORIES FOR SERVICES

B.4.8 TRAVEL

B.4.9 FIXED PRICE CYBERSECURITY SUPPORT

SECTION C – STATEMENT OF WORK (SOW)

1.0 BACKGROUND

2.0 SCOPE

3.0 APPLICABLE DOCUMENTS AND STANDARDS

3.1 ORDER OF PRECEDENCE

4.0 TECHNICAL REQUIREMENTS

4.1 ELEMENTS OF THE CAT SOLUTION

4.2 ELEMENTS OF SYSTEM ENHANCEMENTS

5.0 CAT2 SYSTEM DEVELOPMENT & PRODUCTION

5.1 CAT2 PROTOTYPE SYSTEM

5.2 TEST ARTICLE CAT2 SYSTEMS

5.3 CAT2 PRODUCTION SYSTEMS

6.0 TESTING

6.1 TEST AND EVALUATION PROGRAM

6.2 INTEGRATION TESTING

6.3 QUALIFICATION TESTING

6.4 ACCEPTANCE TESTING

7.0 TECHNICAL DOCUMENTATION

7.1 TECHNICAL DATA PACKAGE

7.2 TECHNICAL MANUALS

8.0 TRAINING

8.1 OPERATOR TRAINING COURSE

8.2 INSTRUCTOR TRAINING COURSE

8.3 SUBJECT MATTER EXPERTS (SME) TRAINING COURSE

9.0 ENGINEERING SERVICES

10.0 MAINTENANCE

10.1 MAINTENANCE

10.2 MAINTENANCE

10.3 MAINTENACE SUPPORT SERVICES

10.4 MAINTENANCE SUPPORT SERVICE LEVEL AGREEMENT REQUIREMENT

11.0 BATTERY REQUIREMENTS

12.0 DATA RIGHTS

13.0 PROGRAM REQUIREMENTS

14.0 IT SECURITY REQUIREMENTS

14.1 INFORMATION ASSURANCE REQUIREMENTS FOR TSA GOVERNMENT ACQUISITION42

14.2 CAT ANTIVIRUS (AV) MAINTENANCE

14.3 OPERATING SYSTEM (OS) SECURITY TECHNICAL IMPLEMENTATION GUIDE (STIG).. 61

14.4 CAT OPERATING SYSTEM (OS) SECURITY PATCHING

14.5 CONTRACTOR INFORMATION SYSTEM SECURITY OFFICER (ISSO) DESIGNATION

14.6 PLAN OF ACTION & MILESTONES (POAM) REMEDIATION

15.0 SYSTEM LIFE CYCLE

15.1 IDENTIFICATION DOCUMENT (ID) DATABASE UPDATES

15.2 RELIABILITY, MAINTAINABILITY, AND AVAILABILITY (RMA)

15.3 RMA REQUIREMENTS

15.4 SAFETY STANDARDS AND CODE REQUIREMENTS

16.0 ACQUISITION PROGRAM MANAGEMENT (APM) CONFIGURATION MANAGEMENT (CM)64

16.1 DEVELOPMENTAL BASELINE DATA PACKAGE REQUIREMENTS

16.2 CONFIGURATION MANAGEMENT

16.3 CONFIGURATION BASELINE

16.4 CONFIGURATION IDENTIFICATION

16.5 CONFIGURATION CONTROL

16.6 CONFIGURATION STATUS ACCOUNTING

16.7 CONFIGURATION AUDITS

17.0 DATA DELIVERABLES

SECTION D - PACAKGING AND MARKING

D.1 TSA-RQMTS; PACKAGING AND MARKING REQUIREMENTS FOR TRANSPORTATION

SECURITY SCREENING EQUIPMENT UNDER PRODUCTION AND/OR EXISTING

MAINTENANCE SERVICES (SEP 2020)

D.2 TSA-RQMTS; TRANSPORTATION SECURITY EQUIPMENT PROPERTY MANAGEMENT

CONTACT (SEP 2020)

SECTION E – INSPECTION AND ACCEPTANCE

E.1 CLAUSES INCOPORATED BY REFERENCE

E.2 INSPECTION AND ACCEPTANCE

E.2.1 INSPECTION AND ACCEPTANCE OF DELIVERABLES

E.2.2 INSPECTION AND ACCEPTANCE

E.3 PERMITS AND RESPONSIBILITIES

SECTION F - DELIVERIES OR PERFORMANCE

F.1 CLAUSES INCORPORATED BY REFERENCE

F.2 ORDERING PERIOD AND DELIVERY

F.2.1 DELIVERIES OR PERFORMANCE

F.2.2 NOTICE OF DELAY

F.2.3 OEM MANAGEMENT REQUIREMENTS

F.2.4 DELIVERY AND REPORTING REQUIREMENTS

F.3 CDRLS

SECTION G - CONTRACT ADMINISTRATION DATA

G.1 CONTRACTING OFFICER

G.2 CONTRACTING OFFICER’S REPRESENTATIVE (COR) AND TECHNICAL MONITOR (TM)

G.3 CONTRACTOR REPRESENTATIVES

G.4 POST AWARD CONFERENCE

G.5 SUBMISSION OF INVOICES

G.6 TRAVEL AND PER DIEM (APPLICABLE TO COST REIMBURSEMENT AND T&M TYPE ORDERS

ONLY)

G.7 ADDITIONAL INVOICE INSTRUCTIONS FOR T&M ORDERS

G.8 ORDERING PROCEDURES

G.9 ORDERS

G.10 GOVERNMENT FURNISHED INFORMATION (GFI)

SECTION H - SPECIAL CONTRACT TERMS AND CONDITIONS

H.1 SECURITY REQUIREMENTS FOR HANDLING PERSONALLY IDENTIFIABLE INFORMATION

AND PRIVACY INCIDENT REPONSE (SEP 2020)

H.2 REQUIREMENTS FOR HANDLING SENSITIVE SECURITY INFORMATION (SSI) (JUN 2021)

H.3 REQUIREMENTS FOR CONTRACTOR EMPLOYEES PERFORMING AT OR IN AIRPORT

LOCATIONS (SEP 2020)

H.4 PERFORMANCE STANDARDS (SEP2020)

H.5 CONTRACTOR PERFORMANCE ASSESSMENT REPORTING SYSTEM (CPARS) (SEP 2020)

H.6 PUBLICITY AND DISSEMINATION OF CONTRACT INFORMATION (SEP 2020)

H.7 NON-FEDERAL ACCESS TO TSA NATIONAL CAPITAL REGION FACILITIES (SEP 2020)

H.8 PERFORMANCE BY FOREIGN NATIONAL CONTRACTOR EMPLOYEES (SEP 2020)

H.9 CONTRACTOR RESPONSIBILITY, CONDUCT AND PERFORMANCE UNDER TSA SERVICE

CONTRACTS (JAN 2022)

SECTION I - CLAUSES

I.1 FEDERAL ACQUISITION REGULATION (FAR) CLAUSES

FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE

FAR 52.204-1 APPROVAL OF CONTRACT

FAR 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES

FOR EXECUTIVE ORDERS – COMMERCIAL ITEMS

FAR 52.216-18 ORDERING

FAR 52.216-19 ORDER LIMITATIONS

FAR 52.216-22 INDEFINITE QUANTITY

FAR 52.216-32 TASK-ORDER AND DELIVERY-ORDER OMBUDSMAN

FAR 52.217-8 OPTION TO EXTEND SERVICES

FAR 52.222-19 CHILD LABOR – COOPERATION WITH AUTHORITIES AND REMEDIES

(DEVIATION 20-07)

FAR 52.222-55 MINIMUM WAGES FOR CONTRACTOR WORKERS UNDER EXECUTIVE ORDER

14026

FAR 52.225-5 TRADE AGREEMENTS (DEVIATION 20-07)

I.2 HOMELAND SECURITY ACQUISITION REGULATION (HSAR) PROVISIONS AND CLAUSES 130

CLAUSES INCOPORATED BY REFERENCE

3052.204-70 SECURITY REQUIREMENTS FOR UNCLASSIFIED INFORMATION TECHNOLOGY

RESOURCES

3052.204-71 CONTRACTOR EMPLOYEE ACCESS

SECTION J - LIST OF ATTACHMENTS

SECTION K - REPRESENTATIONS, CERTIFICATIONS, AND OTHER STATEMENTS

OF OFFERORS

SECTION L - INSTRUCTIONS TO OFFERORS

L.1 TYPE OF CONTRACT

L.2 ACCESS TO PRE-AWARD SSI AND QUESTIONS

L.3 PHASED PROCUREMENT

L.4 PROPOSAL DUE DATE AND SUBMISSION

L.5 INSTRUCTIONS FOR PROPOSAL PREPARATION

L.5.1 INSTRUCTIONS - PHASE I, VOLUME I, TECHNOLOGY SOLUTION (FACTOR 1)

L.5.2 INSTRUCTIONS – PHASE 2, FACTOR II, ORAL PRESENTATION AND DEMONSTRATION

OF ID AUTHENTICATION, BIOMETRICS VERIFICATION AND STIP INTEGRATION .. 157

L.5.3 INSTRUCTIONS – PHASE 3, VOLUME III

L.6 SPECIAL SOLICITATION INSTRUCTIONS

L.6.1 OFFEROR ACCESS TO SENSITIVE SECURITY INFORMATION (SSI) NECESSARY FOR

PROPOSAL PREPARATION

L.6.2 NOTICE TO OFFERORS/CONTRACTORS CONCERNING TRADE AGREEMENTS TERMS

APPLICABILITY TO THE TRANSPORTATION SECURITY ADMINISTRATION

L.6.3 AVAILABILITY OF INTERNAL APPEAL PROCESS PER FAR 33.103

SECTION M – EVALUATION FACTORS FOR AWARD

M.1 BASIS FOR AWARD

M.2 FAR 52.212-2 EVALUATION—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES ... 172

M.3 EVALUATION CRITERIA

M.4 DESCRIPTION OF FACTORS FOR AWARD

M.5 SOLICITATION PROVISIONS

M.5.1 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE

M.5.2 FAR 52.209-5 CERTIFICATION REGARDING RESPONSIBILITY MATTERS

M.5.3 FAR 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS

M.5.4 FAR 52.211-2 AVAILABILITY OF SPECIFICATIONS, STANDARDS, AND DATA

ITEM DESCRIPTIONS LISTED IN THE ACQUISITION STREAMLINING AND

STANDARDIZATION INFORMATION SYSTEM (ASSIST)

M.5.5 FAR 52.217-5 EVALUATION OF OPTIONS

M.5.6 FAR 52.222-18 CERTIFICATION REGARDING KNOWLEDGE OF CHILD LABOR

FOR LISTED END PRODUCTS

M.5.7 FAR 52.225-18 PLACE OF MANUFACTURE

M.5.8 FAR 52.227-15 REPRESENTATION OF LIMITED RIGHTS DATA AND RESTRICTED

COMPUTER SOFTWARE

M.5.9 FAR 52.233-2 SERVICE OF PROTEST

SECTION A – Placeholder

SECTION B – SCHEDULE OF SUPPLIES/SERVICES

B.1 General Description The Contractor shall provide the supplies and services necessary to deliver and support the next generation Credential Authentication Technology (referred to as “CAT2” throughout) as described in Part C, Statement of Work, in accordance with the pricing set forth in Section 4.1 of Section B Schedule of Supplies/Services.

B.2 Type of Contract The Transportation Security Administration (“TSA” or “Government”) contemplates the award of a single or multiple award Indefinite Delivery-Indefinite Quantity (IDIQ) contract(s) with firm fixed price (FFP) and time and materials (T&M) Contract Line Item Numbers (CLINs) for CAT2 systems and support. The Government, in its sole discretion, will issue either FFP, T&M or hybrid (i.e., FFP and T&M) Delivery Orders (DOs) or Task Orders (TOs). The order type shall be determined at the time of order.

B.3 Indefinite Quantity Contract - Minimum and Maximum Amount During the Ordering Period of this contract (specified in Section F.2 below), the Government may issue one or more orders. The maximum amount for all orders placed under each IDIQ contract is $128,000,000.00. The minimum guarantee for each IDIQ contract shall be one (1) CAT2 Prototype System (CLIN 0001). The minimum guarantee will be awarded as a delivery order upon each IDIQ contract award. There is no separate minimum or maximum quantity requirement on all other supplies or services ordered hereunder for all other CLINs.

B.4 Contract Pricing The CLINs in accordance with the CLIN numbering structure in Paragraph B.4.1 of this Section shall be used for development of invoices in accordance with G.5, Submission of Invoices.

Except where noted, all CLINS shall be based on fixed unit pricing (FUP). All other CLINs may be issued on a fixed price or time and materials basis, as determined by the Government.

B.4.1 Pricing Schedule and CLINs

CLIN Description PSC Type Quantity Unit of

Issue Unit Price Extended Price

0001 CAT2 Prototype System 6350 FFP 1 EA

0002 CAT2 Test Article Systems 6350 FFP 6 EA 0003 CAT2 Production Systems

6350 FUP TBD EA See B.4.2 See B.4.2

0004 Technical Documentation

6350 FFP 1 LO

0005 Development of CAT2 Operator Training Course

U012 FFP 1 EA

CLIN Description PSC Type Quantity Unit of

Issue Unit Price Extended Price

0006 Conduct CAT2 Operator Training Course

U012 FFP 50 EA

0007 Development of Instructor Training Course

U012 FFP 1 EA

0008 Conduct Instructor Training Course

U012 FFP 50 EA

0009 Development of Subject Matter Expert Training Course

U012 FFP 1 EA

0010 Conduct Subject Matter Expert Training Course

U012 FFP 50 EA

0011 Engineering Support Services K063 FFP 1 LO N/A TBD Order Level

0012 Engineering Support Services K063 T&M NTE $12,000,000

LO N/A TBD Order Level

0013 Maintenance (Per Year) J063 FUP TBD EA See B.4.4 See B.4.4

0014 Excepted Maintenance J063 FFP 1 LO N/A TBD Order Level

0015 Excepted Maintenance J063 T&M NTE $1,300,000

LO N/A $ TBD

Order Level

0016 Travel K063 T&M NTE $420,000

LO N/A $ TBD

Order level

0017 Cybersecurity Support (Per Year)

D310 FFP 1 EA See B.4.9 See B.4.9

[CLIN pricing for the contract will be inserted at the time of award]

B.4.2 Fixed Unit Price CLIN (CLIN 0003) Contractors shall provide a fixed unit price for CLIN 0003 (CAT2 Production Systems) to include equipment, battery(ies), shipping, and installation. However, the pricing for CLIN 0003 depends upon the number of systems ordered under a given Delivery Order. The Contractor shall complete the table below with pricing for each quantity identified. The same price applies to all systems under a given Delivery Order and all systems within the respective quantity tier.

Stepladder pricing does not guarantee ordering quantities. These unit prices shall be listed by the delivery order quantity as follows:

Step-Ladder Pricing Quantities CLIN Title Type Unit of

Issue Delivery Order Qty

Unit Price

0003 CAT Production Units FUP EA 1-100 101-200

201-300

301-500 501-700 701-900 901-1200 1201-1500 1501-2000

B.4.3 Fixed Price CLINs (CLINs 0001, 0002, 0004, 0005, 0006, 0007, 0008, 0009, 0010, 0011, 0014)

The Government intends to establish FFP for CLINs 0001, 0002, 0004, 0005, 0006, 0007, 0008, 0009, 0010, 0011 and 0014. The Contractor shall provide the labor, shipping, materials, and equipment to provide these items in accordance with the requirements set forth in Part C, Statement of Work (SOW).

B.4.4 Fixed Unit Price Maintenance CLIN (CLIN 0013) Contractors shall provide fixed unit prices for the Maintenance CLIN 0013. The quantity of the Maintenance CLIN ordered will be equal to the number of CAT units per Delivery Order, with optional CLINs for up to seven (7) years total of coverage per unit. The Contractor shall provide all preventive and corrective maintenance for the CAT units while under warranty in accordance with the requirements set forth in Part C, Section 10, Statement of Work (SOW).

Step-Ladder Pricing Quantities CLIN Title Type Unit of Issue Warranty

Year Unit Price

0013 Maintenance (Per Year)

FUP EA Year 1

Year 2 Year 3 Year 4 Year 5 Year 6 Year 7

B.4.5 RMA Disincentives (Applicable to CLIN 0003) The Reliability, Maintainability and Availability (RMA) performance of CAT systems is critical to TSA. Therefore, and in accordance with Federal Acquisition Regulation (FAR) 16.402-2, a negative performance incentive will be imposed to ensure that the Contractor meets the RMA requirements. TSA will adjust the final value of the CAT Unit CLIN (CLIN 0003) based on the information described in the table below. TSA will calculate the actual CAT average RMA data for systems in operation procured in a given Delivery Order, every month after the said Delivery Order is placed. The final adjusted CLIN value shall be affected via a contract modification executed unilaterally at the end of an established withholding period. This withholding period will be determined by Delivery Order.

Performance Requirement

Threshold Performance

Standard Disincentive for Failing to Meet Threshold

Mean Down Time (MDT)

≤15 hours The following information shows the amount (in percentage terms) of the adjustment to CLIN 0003 if the Contractor is not able to meet the required threshold.

> 15 hours, up to 18 hours = 5% reduction > 18 hours = 10% reduction

Mean Time Between Critical Failure

(MTBCF)

≥360 hours The following information shows the amount (in percentage terms) of the adjustment to CLIN 0003 if the Contractor is not able to meet the required threshold.

< 360 hours, down to 300 hours = 5% reduction < 300 hours = 10% reduction

See SOW Section 10.4.1 for additional information.

B.4.6 Time-and-Materials Orders (Applicable to CLINs 0012, 0015, 0016) The Government intends to establish CLINs for engineering services, to include system enhancements and logistics related ancillary services that may be ordered on an as-needed basis via separate order to this contract. The Contracting Officer may use T&M pricing as appropriate for each order.

For T&M orders, the Contractor will be reimbursed for all allowable, allocable and reasonable costs for Materials and Travel in accordance with FAR 31.2, Contracts with Commercial Organizations and Section G.6. No profit or fee will be paid on costs for Materials and Travel.

B.4.7 Labor Categories for Services (CLINs 0011, 0012, 0014 and -0015) The following offsite labor rates are fully burdened with Overhead, General and Administrative Costs, Profit/Fee and any appropriate Escalation charges. These rates shall apply for the seven year ordering period commencing with the date the contract is awarded by the Government.

Descriptions for labor categories can be found in Attachment E (Labor Category Descriptions and Minimum Qualifications).

Year 1 Year 2 Year 3 Year 4 Year 5 Year 6 Year 7 Labor Category Rate Rate Rate Rate Rate Rate Rate Program Manager Engineer (Senior) Engineer (Junior) Computer Programmer (Senior) Computer Programmer (Junior) Information Assurance Consultant Trainer Maintenance/Computer Technician

The Government reserves the right to add additional labor categories as necessary and to issue FFP and/or T&M priced orders.

[Labor rates for the contract will be inserted at the time of award]

B.4.8 Travel (Applicable to CLIN 0016) Costs for transportation, lodging, meals, and incidental expenses incident to performance under this contract will be reimbursed in accordance with the version of the Federal Travel Regulations (FTR) current upon the date of order placement.

The FTR can be found online, including at the following address:

http://www.gsa.gov/portal/ext/public/site/FTR/file/FTRTOC.html/category/21865/hostUri/portal

B.4.9 Fixed Price Cybersecurity Support CLIN (CLIN 0017) Contractors shall provide fixed annual prices for the Cybersecurity Support CLIN 0017. The Contractor shall provide the labor, shipping, materials, and equipment to provide these items in accordance with the requirements set forth in Part C, Statement of Work (SOW).

CLIN Title Type Unit of Issue Year Unit Price 0017 Cybersecurity Support

(Per Year) FFP EA Year 1

Year 2 Year 3 Year 4 Year 5 Year 6 Year 7

Quality Assurance Control Specialist

Installation Support Specialist Administrative/Clerical Support Specialist http://www.gsa.gov/portal/ext/public/site/FTR/file/FTRTOC.html/category/21865/hostUri/portal

PART C –STATEMENT OF WORK (SOW)

1 Background The Transportation Security Administration (TSA) is charged with the mission of protecting the nation’s transportation systems to ensure freedom of movement for people and commerce. The mission of TSA’s Acquisition Program Management (APM) is to deliver innovative, mission-driven capabilities required by the frontline to safeguard America’s transportation system.

APM’s Checkpoint Technologies Division (CTD) ensures that the most technologically efficient and effective capabilities are available for screening passengers and carry-on baggage. To address this need, TSA requires a CAT2 system with the capability to: 1) authenticate a wide variety of identity documents (IDs); 2) validate a passenger’s identity; 3) confirm a passenger’s flight reservation and pre-screening status from Secure Flight (SF); and 4) display the authentication results to the Transportation Security Officer (TSO) or other qualified user. TSA envisions the CAT2 system as a flexible system that can be deployed in different configurations depending on the needs and constraints of each checkpoint environment.

2 Scope This SOW defines the requirements for the CAT2 system. The Contractor is required to integrate multiple interfaces and capabilities into a total CAT2 system solution that meets TSA requirements as described in this SOW. The CAT2 system includes integrated hardware and software which will provide the capability of validating passenger IDs and verifying passenger identity while allowing for network connectivity to the Security Technology Integrated Program (STIP) for confirming a passenger’s flight reservation and pre-screening status from SF. The Contractor is given the option to utilize the Department of Homeland Security Enterprise Facial Recognition Technology (DHS FRT) algorithm; this software will be provided as Government Furnished Software upon request. Contractors are not required to utilize this software and may develop or use their own solution.

The Contractor shall provide CAT2 systems in accordance with this SOW and the requirements specified in the CAT Functional Requirements Document (FRD) – Attachment 2 and STIP CAT Interface Requirements Document (IRD) – Attachment 1. The CAT2 systems shall include a Design Review (DR) phase, a Test Article Units phase, and Full Rate Production (FRP) phase.

Services performed by the Contractor shall include design, manufacture, test, test support, software development, program management, training, engineering support, delivery, and other various logistics support tasks necessary for development and continued operational readiness of the CAT2 system, such as installation and maintenance.

3 Applicable Documents and Standards The following specifications, handbooks, orders, and standards identified in Table 1 form a part of this SOW and are applicable to the extent specified herein. The latest version of these documents as of the contract date shall apply, unless a specific date for the document is specified below. The Government will provide documentation as necessary upon request.

Table 1: Applicable Documents and Standards

No. Reference Title Location

1 CAT FRD, latest version CAT Functional Requirements Document

Attachment 2*

2 CAT ORD, Version 3.0, January 12, 2022 CAT Operational Requirements Document

Attachment 3*

3 STIP CAT IRD, latest version STIP CAT Interface Requirements Document

Attachment 1*

4 49 CFR Parts 15 and 1520 Protection of Sensitive Security Information http://ecfr.gpoaccess.

gov

5 Department of Homeland Security (DHS) Management Directive (MD) 11042.1

Safeguarding Sensitive But Unclassified (For Official Use Only) Information http://www.dhs.gov/x foia/gc_12545015890 35.shtm

6 TSE IT Security Requirements, Version 2.0, September 23, 2013

TSE IT Security Requirements

Attachment 8*

7 ANSI/ISO/ASQ Q9001-2009 Quality Management Systems Requirements Standard http://www.qcss.com/

ANSI_ISO_ASQ_Q_

9001_2009_Standard _p/-ansi-iso-asq-q- 9001-2009-stan.htm

8 29 Code of Federal Regulations (CFR) 1910.7

Definition and Requirements for a Nationally Recognized Testing Laboratory http://ecfr.gpoaccess.

gov

10 29 CFR, Part 1910.1096, January 1, 2007 Occupational Safety and Health Standards: Ionizing Radiation, http://ecfr.gpoaccess.

gov

12 Title 21 CFR 1003.10

Discovery of defect or failure of compliance by manufacturer; notice requirements.

http://ecfr.gpoaccess.

gov

13 APM Configuration Management Plan (Rev E), August 31, 2018

Transportation Security Administration Acquisition Program Management Configuration Management Plan

Attachment 9**

14 DD-1149 Requisition And Invoice/Shipping Document, for DD 1149 http://www.dtic.mil/w hs/directives/infomgt/ forms/eforms/dd1149.

pdf

15 TSA RMA Metrics Terms and Definitions TSA RMA Metrics Terms and Definitions

Attachment 6 http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ http://www.dhs.gov/xfoia/gc_1254501589035.shtm http://www.dhs.gov/xfoia/gc_1254501589035.shtm http://www.dhs.gov/xfoia/gc_1254501589035.shtm http://www.qcss.com/ANSI_ISO_ASQ_Q_9001_2009_Standard_p/-ansi-iso-asq-q-9001-2009-stan.htm http://www.qcss.com/ANSI_ISO_ASQ_Q_9001_2009_Standard_p/-ansi-iso-asq-q-9001-2009-stan.htm http://www.qcss.com/ANSI_ISO_ASQ_Q_9001_2009_Standard_p/-ansi-iso-asq-q-9001-2009-stan.htm http://www.qcss.com/ANSI_ISO_ASQ_Q_9001_2009_Standard_p/-ansi-iso-asq-q-9001-2009-stan.htm http://www.qcss.com/ANSI_ISO_ASQ_Q_9001_2009_Standard_p/-ansi-iso-asq-q-9001-2009-stan.htm http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ http://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfcfr/CFRSearch.cfm?fr=1002.20 http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd1149.pdf http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd1149.pdf http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd1149.pdf http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd1149.pdf

16 TSA ILS SLA Performance Metrics SLA Performance Metrics Attachment 6a

17 Training Standards Operational and Technical Training OTT Training Standards, Version 1, 28 Sept 2006

Available upon request

18 MIL-STD-973, Military Standard:

Configuration Management

Configuration Management https://acc.dau.mil/Co mmunityBrowser.asp x?id=54663

19 MIL-STD-31000C Department Of Defense Standard Practice: Technical Data Packages (TDP) (05 Nov 2009)

Technical Data Packages Detail Specification https://acc.dau.mil/Co mmunityBrowser.asp x?id=54663

20 29 CFR 1910.1200 Hazard Communication Standard http://ecfr.gpoaccess.

gov

21 Federal Aviation Administration (FAA)-D- 2494/B

14 March 1984

Commercial Instruction Books https://faaco.faa.gov/a ttachments/FAA-D- 2494.pdf

22 ASTM-D-3951 Standard Practice for Commercial Packaging http://www.astm.org/ Standards/D3951.htm

23 Federal Standard No. 313 Material Safety Data, Transportation Data and Disposal Data for Hazardous Materials Furnished to Government Activities

General Services Administration Specifications Unit

(3FBP-W)

7th & D Sts. SW Washington, DC 20407

24 TSA Form 251 Contractor Shipping and Receiving Report

Attachment 10

25 TSA Form 251-1 Contractor Shipping and Receiving Report Extension

Attachment 11

26 PIPE IRD PIPE IRD Attachment 12*

27 Government Property Management (GPM) Internal Standard Operating Procedures

GPM ISOP VS 2 Attachment 13

28 Public Law 109-13, 119 Stat. 231, 302 (May 11, 2005)

The Real ID Act of 2005, Pulp, 109-13, 119 Stat.

302, enacted May 11, 2005

Attachment 14

29 Federal Register/ Vol. 73, No. 19/Tuesday, January 29, 2008, pp. 5272-5340

DHS, Minimum Standards for Drivers Licenses and Identification Cards acceptable by federal

Attachment 15 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 https://acc.dau.mil/CommunityBrowser.aspx?id=54663 http://ecfr.gpoaccess.gov/ http://ecfr.gpoaccess.gov/ https://faaco.faa.gov/attachments/FAA-D-2494.pdf https://faaco.faa.gov/attachments/FAA-D-2494.pdf https://faaco.faa.gov/attachments/FAA-D-2494.pdf http://www.astm.org/Standards/D3951.htm http://www.astm.org/Standards/D3951.htm

Agencies for Official Purposes

30 The AAMVA DL/ID Card Design Standard, 2016

AAMVA DL/ID Standards Attachment 16

31 TSA ILS SLA Performance Metrics SLA Performance Metrics Attachment 6a

32 Airport Operational Hours Airport Operational Hours Attachment 7

33 Test Readiness Notification TRN Attachment 5

34 ISO/IEC 18013-5 Personal Identification – ISO compliant driving license – Part 5: Mobile Drivers License (mDL) application https://www.iso.org/o bp/ui/#iso:std:iso-iec:18013:-5:dis:ed- 1:v1:en

* SSI Attachments- vetting is required to receive these documents. See Section L.

** Attachment available upon request.

3.1 Order of Precedence

In the event of conflict between the text in this SOW and the references cited, the text of this SOW takes precedence. Nothing in this SOW, however, supersedes applicable laws and regulations unless there is a specific written exemption.

4 Technical Requirements

4.1 Elements of the CAT solution

4.1.1 Credential Authentication Capability

In compliance with the CAT-2 FRD, CAT-2 ORD, and CAT IRD, and TSA Cybersecurity Requirements, the CAT system will:

a) Be used by a qualified operator, or other user, in accordance with human factors engineering best practices, to verify the authenticity of an ID and display the authentication results to the operator;

b) Obtain and display the passenger flight reservation and pre-screening status assigned by TSA’s SF Program to ensure that passengers are authorized to enter the sterile area of the passenger checkpoint;

c) Automate matching between the person and the ID photo using 1:1 facial biometrics;

d) Reduce physical contact between TSOs and passengers attempting to enter the checkpoint to prevent the spread of disease;

e) In cases where passengers are not immediately cleared for access by the CAT system, provide users with discrete and easy-to-see visual images https://www.iso.org/obp/ui/#iso:std:iso-iec:18013:-5:dis:ed-1:v1:en https://www.iso.org/obp/ui/#iso:std:iso-iec:18013:-5:dis:ed-1:v1:en https://www.iso.org/obp/ui/#iso:std:iso-iec:18013:-5:dis:ed-1:v1:en https://www.iso.org/obp/ui/#iso:std:iso-iec:18013:-5:dis:ed-1:v1:en demonstrating a scanned anomaly as compared to a genuine reference (alert descriptions, etc.) to enable effective resolution;

f) Include hardware that will integrate the ID scanner(s), the Contractor developed IT solution to authenticate ID, the graphical user interface (GUI), the STIP application programming interface (API), and Government Furnished Software (GFS) that supports cyber-security of the system; and

g) Meet cyber security requirements for machine and user authentication to TSA’s IT Enterprise.

4.1.2 Counterfeit Document Detection Capability

The Contractor shall provide a CAT2 system with the capability to detect counterfeit documents simulated by both traditional and digital print processes across the portfolio of ID types. This will include multiple simulated card substrates (e.g. PVC and/or Teslin, or adhered PVC and Teslin plastics). The Contractor shall provide a CAT2 system with the capability to identify printed anomalies from the genuine template without having to rely exclusively on data encoding errors or fraud mistakes in Machine Readable Zones (MRZ). See the Attachment 02 FRD for requirements.

4.1.3 Graphical User Interface (GUI)

The Contractor shall develop a GUI to display CAT screening results. The GUI shall be made of a primary screen showing high level results information including the passenger’s ID authentication results, SF pre-screening status, flight information, and other system status information listed in the CAT FRD. The GUI will also display any name mismatches with the most likely match at the top of the list so that the TSO can make the most informed decision. The secondary screen is intended to provide end users with an easy to see comparison of scanned anomalies against the genuine reference. The secondary screen will also provide sufficient text-based details of any alerts that are encountered during the primary screening process, for resolution purposes.

4.1.4 Fixed Location

The CAT system shall not be a handheld solution or an affixed immobilized solution. It must be a standalone system (such as a kiosk) that resides in a fixed location. “Fixed Location” does not mean that the system is bolted to the floor or wall. For instance, the system can be mounted on wheels but the general usage of the system should be that of a fixed location (i.e., at the end of the passenger queue operated by a TSO). Refer to the CAT FRD (Attachment 2) for additional details regarding fixed location.

4.1.5 STIP Interface

TSA has developed an Application Programming Interface (API) that enables TSA to provide an interface with Secure Flight via TSA’s STIP system. The API manages the data transfer of passenger information. STIP is an existing enterprise-wide system connecting Transportation Security Equipment (TSE) across the nation's airports to improve and enable information sharing. STIP allows the CAT system to receive passenger biographic, flight, and pre-screening status information in near real-time from the Secure Flight system. This biographic information is compared against the biographic information on the passenger’s ID to determine if there is a match and, if so, to provide the most up-to-date pre-screening status. The output of this pre-screening is displayed to the operator via the GUI. Refer to STIP CAT IRD (Attachment 1) for further information regarding interface requirements.

4.1.6 Shipping and Installation

The Contractor shall provide a Site Installation Task List to the Government in accordance with Deliverable D004. The Site Installation Task List describes each task (in a stepwise fashion) that is required to have a successful deployment and system connectivity to the STIP Platform and TSA Network.

The Contractor shall coordinate shipping and installation activities with an authorized Government representative. Specific airport requirements must be followed.

The Government may designate a site manager for each equipment installation.

The site manager, as the primary point of contact for each installation, will assist in the facilitation of installation. The site manager will be included in all communication and resolution of site installation issues. The site manager will mitigate site installation matters.

The Contractor shall coordinate with Government Site Manager or Representative, other Government contractors, airport and air carrier representatives, and stakeholders for specific CAT installation sites as specified in individual task orders.

The Contractor shall uncrate and install the TSE, and remove and dispose of all dunnage and packaging materials.

4.1.7 Operational Test Kit (OTK)

The Contractor shall provide an OTK with each CAT2 system that consists of four (4) sample documents specifically designed to verify proper operation of the two document scanners, proper authentication results (pass and fail), and proper display of both ID and Secure Flight information for flight itinerary and pre-screening.

• Passport Sample 1: E-Passport document that passes all authentication tests, including expiration, smart chip data crosscheck, B900 (IR) test, Visible and UV pattern tests, and ID / Secure Flight data match. For this operational test document, a non-valid country name and a non-actual traveler name are acceptable.

• Passport Sample 2: E-Passport that should generate multiple alert conditions, including expired, smart chip data crosscheck, and failed Visible and UV pattern tests.

• Driver License Sample 1: Document passes all authentication tests, including REAL ID compliance status, expiration, Visible, IR and UV pattern tests, and ID/Secure Flight data match. For this operational test document, a non-actual traveler name is acceptable.

• Driver License Sample 2: Document that should generate multiple alert conditions, including REAL ID compliance status and one or more of the additional test such as expired, and failed Visible, IR and UV pattern tests.

4.1.8 Supplemental System Requirements

• The system shall enforce the use of Personal Identity Verification (PIV) card credentials for authentication through the STIP client. If a “Z user” is authenticating to the machine, after the authentication has occurred via PIV there is no modification to the Z account configuration or ability to modify the CAT system to log in to the CAT system.

• The Contractor shall be required to make their TSE compatible with TSA-issued PIV cards. TSE shall use PIV authentication (NIST SP 800-63-2, Level 4 authentication) for STIP regular and privileged access into the TSE. The Contractor shall enable this through:

o The integration of the latest version of the STIP agent per the latest version of the STIP/CAT Interface Requirements Document (IRD).

This will be provided as GFS.

o The STIP Agent contains two parts: the STIP Client Core and the STIP Client Library.

The STIP Client Core is a standard C++ application (.exe or .so) that can be run on any system (Windows or Linux), as long as the standard C++ libraries are included on the system.

The STIP Client Library has been developed in .NET, Java, and C++. The Contractor may choose which STIP client library to install based on their system environment and their software programming language. The Contractor’s choice will dictate what needs installed on their system (the .NET Framework, Java, or C++ system libraries).

• The Contractor shall attach a TSA-specified PIV card reader to a USB port;

the PIV card reader drivers will be integrated into the STIP agent that will be provided as GFS.

4.2 Elements of System Enhancements

The Contractor shall support multiple software development cycles involving Contractor software, firmware, GFS, GUI updates, hardware, and Government Furnished Information (GFI).

TSA anticipates system enhancements to include a digital ID authentication capability (such as mobile driver’s license), the ability to biometrically authenticate passenger’s identity against a database, the ability to allow the passenger to insert their own ID into the readers, and the ability to read boarding passes.

The Contractor shall support periodic system enhancements, and, maintenance on the detection algorithm(s)/capability; the schedule will be determined by the Government. TSA will furnish the Contractor with counterfeit document samples to enable the Contractor to evaluate their counterfeit document detection capability and identify detection deficiencies in their algorithm(s). The Contractor will furnish test environment hardware/software to perform the maintenance. TSA will store the scanned data on an encrypted hard drive and the Contractor will ensure that any scanned biographic data are not stored on their test environment equipment at the end of the maintenance event.

The Contractor should support multiple demonstrations of system enhancements to TSA and incorporate the Government’s feedback into the final design.

The Contractor should develop documentation for Preliminary Design Review (PDR) and Critical Design Review (CDR) packages and reports.

The Contractor shall manufacture, deliver, and install the hardware and software necessary to upgrade CAT2 units as identified by the Government.

The Contractor shall deliver updated Technical Documentation, including but not limited to updated versions of the Operator Manual, the Maintenance Manual, the Installation Manual, the Technical Data Package, Engineering or Change Proposals, and the Factory Acceptance Test (FAT) and Site Acceptance Test (SAT) procedures and reports.

5 CAT2 System Development and Production

5.1 CAT2 Prototype System (Applicable to CLIN 0001)

The Contractor shall deliver one (1) Prototype CAT2 system to TSA to support Government informal integration testing with TSA’s API and related interface design activities at Government facilities within 83 days or less from contract award. The Government will assess and validate the functionality and effectiveness of the prototype against requirements in the STIP IRD. Any necessary system modifications will be applied to the initial production systems prior to Test Article Units testing and comply with all configuration management requirements and procedures stated in the MIL STD 973 so that a developmental product baseline is identified, established and controlled by TSA prior to formal testing in Initial Testing & Evaluation (IT&E), Qualification Test & Evaluation (QT&E) and Operational Test & Evaluation (OT&E).

Prototype approval will be provided via transmittal letter from the Contracting Officer (CO)/ Program Manager (PM)/ Contracting Officer’s Representative (COR).

5.1.1 Software Integration

The Contractor shall do the following when integrating the software on the prototype unit: integrate the Government Furnished Software; integrate and configure the system to support TSA Security Operations Center (SOC) monitoring of the computer; integrate and configure the STIP API; coordinate and connect to TSA’s ITE; document GFS configuration/installation steps for the system; accommodate integration testing to verify that all required log files are sent via GFS; test configuration and function of GFS; harden the Operating System (OS); perform a Nessus scan; perform a Quality Assurance Regression Test; mitigate any quality assurance findings; support TSA’s internal testing;

support TSA’s Nessus scan; provide technical coordination and oversight;

coordinate schedules to support testing; and support the Technical Interchange Meetings (TIM). The Contractor shall also conduct a Preliminary Design Review (PDR) and Critical Design Review (CDR). All design reviews will be conducted at the Contractor’s facility, TSA Headquarters, or an alternative site specified by the Government. The TSA will designate Government conference attendees and will identify any unique conference support requirements. The Contractor shall provide the minutes for the conference. The Government will participate in the PDR and CDR as advisors. The Contractor shall prepare the PDR Report in accordance with Deliverable L012. The Contractor shall prepare and deliver the Requirements Traceability Report (RTR) in accordance with Deliverable E005.

The RTR should provide a list of all requirements and how they are being fulfilled by the system. The Contractor shall prepare the CDR Report in accordance with Deliverable L012.

5.1.2 Hardware Integration

The Contractor shall do the following when integrating the hardware on the prototype unit: provide requirements analysis; perform market research and purchase Commercial Off-The-Shelf (COTS) products; integrate all hardware;

perform testing and troubleshooting; and coordinate with the CAT program office on the schedule.

5.2 Test Article CAT2 Systems (CLIN 0002)

The Contractor shall provide up to six (6) Test Article CAT2 systems, including delivery and support, in addition to the prototype system for IT&E, QT&E, and OT&E.

A minimum of four (4) Test Article systems shall be delivered 30 days after award of the Test Article Systems Delivery Order. The other two (2) units shall be delivered within 60 days after award of the Test Article Systems Delivery Order. See section 6.0 (Testing) for details.

In addition to the Test Article Systems noted above, TSA will require four (4) bailed test article systems at no cost to the Government. Bailment Agreements will be executed after contract award.

5.2.1 CAT2 “Gold Standard”

Pending successful completion of the QT&E and OT&E under the Test Article system effort, one system will be chosen as the “Gold Standard System” and shall receive a First Article Test and Evaluation (FAT&E). The Government performs and provides oversight for the FAT&E. The Contractor shall ensure that the test procedures indicate traceable paths to the approved requirements traceability report. The FAT&E will be witnessed by Government and/or Government-designated representatives. The CAT FRP Product Baseline (PBL) shall be established after successful completion of the associated FAT&E, Functional Configuration Audit (FCA), and Physical Configuration Audit (PCA).

The Contractor shall prepare and deliver the CAT First Article Test and Evaluation Test Plan, Procedures, and Reports in accordance with referenced Deliverable E007 – First Article Test Plan, Procedure, and Reports. The FAT&E Test Plan must ensure that all TSA requirements specified in the contract will be adequately tested and evaluated. TSA shall review and approve the FAT&E Test Plan and Procedure for adequacy prior to the start of any Contractor testing and evaluation activities.

FAR part 52.209-4 First Article Government Testing (SEP 1989) shall be applicable to this testing as well as the requirements of this section.

5.3 CAT2 Production Systems (Applicable to CLIN 0003)

The Contractor shall provide a fully functional CAT2 system in accordance with all the requirements documentation identified in this contract and delivery orders (DO). The CAT2 system shall include shipping, installation, battery(ies), and the tools and consumables required for maintenance on the unit for six (6) months of continuous operation.

A delivery schedule shall be established by the Government in each DO, and delivery of the first system(s) in each order shall occur no later than 90 days after DO award with thirty-five (35) systems deployed per month thereafter.

6 Testing

6.1 Test and Evaluation Program

The Contractor shall plan and conduct Contractor tests and support Government conducted testing and continuous assessment throughout the life of this Contract. During each test phase (IT&E, QT&E, OT&E), the Government will provide the Contractor with results and instructions regarding the next test phase/iteration. In the event of a test phase failure due to the inability to meet requirements, additional testing cycles may be conducted at the Contractor’s expense.

Both integration and qualification testing will take place at the TSA Systems Integration Facility (TSIF) or other designated Government facility. A Developmental Product Baseline will be formally established by the Physical Configuration Audit (PCA) conducted by the Government, commencing post Test Readiness Notification (TRN) from the Original Equipment Manufacturer (OEM). Every subsequent Test Article Unit shall conform to that established baseline. The Test Article Units shall include, at a minimum, the tools and consumables (i.e., screen wipes, card cleaners, etc.) required for maintenance on the unit for six (6) months. OT&E systems testing will be performed to determine the extent to which the Contractor’s system meets the requirements of the CAT ORD within the operational environment. Operational testing will take place at three (3) to six (6) TSA selected airports for a duration of 30 to 90 days. All Test Article systems shall conform to the TSA authorized developmental Product Baseline (DPBL) as verified through the Site Acceptance Test (SAT).

6.2 Integration Testing

The Contractor shall support the Government with the full integration of Secure Flight (SF), STIP, and GFS to the CAT system. The purpose of IT&E is to validate the end-to-end solution where data will flow from SF to STIP to the CAT2 system and connect with the TSA Network.

6.3 Qualification Testing

The Contractor shall develop and submit a Test Compliance Report (deliverable C002) that validates that the system has required certifications and is compliant with required standards as specified in the FRD. The Contractor shall submit this deliverable for each candidate CAT2 system submitted for qualification testing. The Test Compliance Report must include all information and material necessary for the TSA to confirm that the CAT2 meets the requirements of the FRD.

The Contractor shall prepare and deliver the Test Compliance Report for each candidate CAT2 system in accordance with Deliverable C002.

6.3.1 Test Readiness Review and Test Readiness Notification

Prior to QT&E and OT&E, a Test Readiness Review (TRR) is conducted to ensure that the Contractor is ready to proceed into formal test. The Contractor shall provide the Government a TRN at least seven (7) business days prior to conduct of each formal test. The Contractor shall be provided a TRN letter template (Attachment 5) which shall be utilized in the development and delivery of the TRN in accordance with Deliverable E006.

6.3.2 Test and Evaluation Planning

a. First Article Test Procedures and Reports The first CAT2 FRP system shall be designated as the “Gold Standard” and shall receive a FAT&E. The Contractor shall ensure that the test procedures indicate clearly and adequately traceable paths to the approved TSA requirements traceability report. The FAT&E will be witnessed by Government and/or Government-designated representatives. The PBL shall be established after successful completion of the associated FAT&E, FCA, and PCA.

The Contractor shall prepare and deliver the FAT&E Test Plan, Procedures, and Reports in accordance with Deliverable E007.

6.4 Acceptance Testing

The Contractor shall provide the Government a TRN at least seven (7) business days prior to conduct acceptance testing. The TRN shall include dates and so that the Government designated representative can allocate resources and coordinate with the respective stakeholders.

6.4.1 Factory Acceptance Test Procedures and Reports

All CAT2 systems shall each receive a Factory Acceptance Test (FAT) in accordance with the FAT Procedures prepared by the Contractor and approved by the Government. The Contractor shall implement changes recommended by the Government to the document before final approval. The FAT will be witnessed by the Government and/or Government-designated representative(s). The Contractor shall provide all test and evaluation resources required, including personnel, equipment, tools, and facilities.

The Contractor shall prepare and deliver FAT Procedures and FAT Reports in accordance with Deliverable E008.

6.4.2 Site Acceptance Test Procedures and Reports

All CAT2 systems shall receive Site Acceptance Test at every installation site location for each installed CAT2, in accordance with the SAT Procedures prepared by the Contractor and approved by the Government. The Contractor shall implement changes recommended by the Government to the document before final approval

The SAT will confirm that the CAT2 is properly set up, operationally configured, and remains in compliance with all TSA contractual requirements.

The SAT will be witnessed by Government and/or Government-designated representative(s). Specific locations to perform SAT at the installation site shall be coordinated with Government and/or Government-designated representative(s) prior to SAT performance.

The Contractor shall maximize efficiencies and ensure systems are ready for testing during commissioning activities. When multiple systems are installed in a checkpoint and/or terminal, the Contractor shall obtain efficiencies by planning the testing of as many units as possible on tests days. Planning for a serialized approach (install/test) for multiple CAT2 units leads to a waste of field time and additional expenditure.

The Contractor shall prepare and deliver the SAT Procedures and SAT

Reports in accordance with Deliverable E009.

6.4.3 Operational Readiness Test Procedures and Reports

If equipment is moved after initial installation as directed by the Government, the Contractor shall conduct an Operational Readiness Tests (ORT) upon installation at the new location. This testing and report for the ORT may follow the same procedure and format as the SAT (Deliverable E009).

7 Technical Documentation (CLIN 0004)

7.1 Technical Data Package

The Contractor shall deliver a Type 2D Technical Data Package (TDP) in accordance with the requirements established in Detail Specification MIL-DTL-31000C, Technical Data Packages for Commercial Drawings. The TDP shall provide engineering and technical information on all assemblies and subassemblies identified as lowest replaceable units (LRU) in the associated maintenance manual in accordance with Deliverable D002 as required to support preventive and corrective maintenance actions. The TDP shall include all applicable models, engineering drawings, lists, specifications, standards, process descriptions, performance requirements, quality assurance requirements, software documentation, and packaging details. As part of this TDP, the Contractor shall provide the engineering drawings and a drawing tree. Specific details can be found in EIA/ANSI-649.

The TDP shall incorporate all versions of the equipment, all embedded software, all conversion ‘kits,’ and all defined options that affect the configuration of the equipment. The Contractor shall deliver both hard copy and electronic (as available) versions of the TDP, consistent with the equipment designated for FAT&E and subsequent, approved changes.

Note: Technical data does not include computer software or financial, administrative, cost or pricing, or management data or other information incidental to contract administration.

The Contractor shall prepare and deliver the TDP in accordance with Deliverable L010.

7.2 Technical Manuals

The Contractor shall use FAA-D-2494/B Appendix I, Commercial Instruction Books, as a guide in developing the below listed manuals, including any supplemental data required to augment any commercial manuals. Updates to manuals shall be provided for all approved configuration changes. The Government will participate in and witness the conduct of the validation and verification of manuals.