SOW-Imagesetter Replacement.pdf

Statement of Work for Thermal Imagesetter Dry-Imaging for Tobyhanna Army Depot

1.0 General Scope

1.1 This Statement of Work (SOW) is for the turn-key design, supply, delivery, off-loading, transporting, locating, installation, cleaning, assembly, set-up and training for one each brand name or equal Thermal Imagesetter (Dry-Imaging) at Tobyhanna Army Depot (TYAD) in Tobyhanna, PA 18466. The Contractor shall supply all materials, supplies, freight, delivery, tools, equipment, consumables, labor, and supervision for the turn-key design, supply, delivery, off-loading, transporting, locating, installation, cleaning, assembly, set-up and training for the machine. The Contractor is responsible for supplying the equipment along with ensuring that the imagesetter is ready to run after unpacking and installation. The Contractor is also responsible for ensuring the Imagesetter can be integrated together with the existing computer running Windows 10. The Contractor shall supply only new machines and new associated equipment.

Used and refurbished machines and used and refurbished equipment are unacceptable and will not be considered. All repair and replacement parts for the machine and associated equipment shall be new. All repair and replacement parts shall be available for purchase and supplied from within the continental United States.

1.2 The Contractor shall provide machine operation and machine maintenance training for Government personnel within 30 days of delivery. Training shall be conducted by the Contractor’s qualified training representative and shall be conducted on-site at the machine location at TYAD. This training shall focus on basic operations, programming, preventive maintenance, general maintenance, cleaning and housekeeping, and features familiarization.

Instruction shall also include the maintenance that needs to be done by machine operators on a daily basis. All training materials used during the training shall become the property of TYAD, 3 copies of both hardcopies and PDF format.

1.3 ACCESS TO INSTALLATION SITE: See section 13.

1.4 (Reserved)

1.5 (Reserved)

1.6 (Reserved for software requirements.)

1.7 (Reserved)

1.8 (Reserved)

1.9 The Contractor shall agree that the system being purchased is considered an Information Technology (IT) asset to be operated at a Government facility and as such must adhere to all local and Government regulations outlined in this document under section 3.0 Cyber Requirements.

1.10 TYAD currently uses full scale PDF electronic files as the primary means to transfer the drawing from electronic media to film in both positive and negative as needed. It shall be the responsibility of the Contractor to ensure that existing files are compatible with the software and the proposed imagesetter that this solicitation is for.

1.11 The Vendor, and all of their sub-contractors, shall provide additional licenses to simulate all electronic system functionality in a laboratory environment. These assets are to be used for integration testing and cyber security purposes only and will not be deployed for production use.

In order to ensure that security updates, and configurations do not interfere with IT equipment in production use, the Government requires the ability to test a representative system in a controlled, laboratory environment, as applicable.

2.0 Minimum Salient Characteristics and Features for the Machine

1. The equipment shall consist of an imagesetter to convert computer files to a film which doesn’t require any chemical post processing before being utilized to create IUID tags among other printed data.

2. Software to include latest TAA compliant RIP algorithm for use on a TYAD supplied laptop connected to the proposed imagesetter.

3. Minimum resolution of 1200dpi in both the X and Y directions.

4. Incoming data, minimum formats: PDF, JPG, TIFF, Postscript

5. Nominal print size width nominal of 2 feet x minimum 48”.

6. Minimum imaging speed 68 square feet per hour.

7. Film roll length minimum of 175 feet.

8. Voltage to power imagesetter is 120V nominal.

9. Storage Temperature less than 12°F to a minimum of 150°F on the high end.

10. Operating Temperature range at least 55°F to 80°F

11. Humidity at least 60%±8%

12. Maximum weight 225lbs.

13. Operating system Windows 10 (to work with current existing computer), or with the capability to use Windows 11 In the future.

14. Files transfer from laptop to the imagesetter via ethernet cable.

15. Maximum operating envelope 24”x42”x20” (space that the machine must fit into)

3.0 Cyber Requirements

3.1 Applicable Publications

The Vendor, and all sub-contractors, must abide by all applicable regulations, publications, manuals, and local policies and procedures. This includes, but is not limited to; AR 25-1 as well as STIGs and SRGs as published on https://public.cyber.mil.

3.2 Acronyms

AO Approving Official AR Army Regulation APMS Army Portfolio Management System ARCYBER United States Army Cyber Command ASB Automation Support Branch ATO Authority to Operate CCB Configuration Control Board CD Compact Disc CMVP Cryptographic Module Validation Program COOP Continuity of Operations COR Contracting Officer Representative COTR Contracting Officer’s Technical Representative CPLD Complex Programmable Logic Device CPOC Central Point of Contact CSR Certificate Signing Request DISA Defense Information Systems Agency DOD United States Depart of Defense ELTY Electronic Tobyhanna Army Depot Form eMASS Enterprise Mission Assurance Support Service EULA End User License Agreement FIPS Federal Information Processing Standard FPGA Field Programmable Gate Array GIG Government Information Grid HBSS Host Based Security System IAVA Information Assurance Vulnerability Alert IAVB Information Assurance Vulnerability Bulletin ICAN Internal Campus Area Network IMD Information Management Division IRB Industrial Review Board IS Information System IT Information Technology NETCOM United States Army Network Enterprise Technology Command NIST National Institute of Standards and Technology OEM Original Equipment Manufacturer PKI Public Key Infrastructure PLC Programmable Logic Controller https://public.cyber.mil/

RMF Risk Management Framework SD Secure Digital SME Subject Matter Expert SOW Statement of Work SRG Security Requirements Guide STIG Security Technical Implementation Guide TRC Technical Review Cell USB Universal Serial Bus USCYBERCOM United States Cyber Command

3.3 Definitions

This section contains explanations of terms used in this document. They are taken from, and not to supersede, those definitions given in Army Regulation (AR) 25-1. All terms used in this document are in accordance with AR 25-1. This section shall be considered the authoritative source for definitions of terms not contained within AR 25-1 and/or its supporting documents.

3.3.1 Automation Support Branch

The Automation Support Branch (ASB), under the Mission Support Division, under the Directorate of Production Engineering, is the single point of contact for all mission-related IT equipment at TYAD. The ASB develops, protects, and maintains specialty IT equipment, both networked and standalone, in support of unique workloads across TYAD.

3.3.2 Configuration Control Board

The Configuration Control Board (CCB) is the local approving authority, composed of Supervisory personnel, for all actions regarding IT equipment at TYAD. Receiving an ATO for an IT equipment, from NETCOM, does not automatically guarantee that the system can be utilized at TYAD. The IT equipment must also obtain approval from the TYAD CCB, before it may be used with Army ISs at TYAD. The CCB is the local entity responsible for approving the STIGs and SRGs deemed applicable by the TRC, before the ATO accreditation package is submitted to NETCOM for approval.

3.3.3 Government

Any federal civilian, or military personnel employed by the United States Department of Defense (DOD), United States Army (Army), and/or Tobyhanna Army Depot (TYAD).

3.3.4 Industrial Review Board

Reserved.

3.3.5 Information Management Division

Part of the Directorate of Installation Services, the Information Management Division (IMD) is responsible for the development, protection, and maintenance of the TYAD SBU LAN. The IMD operates all critical infrastructure upon which TYAD’s IT equipment operate.

3.3.6 Information System

Information System (IS) is defined as the organized collection, processing, transmission, and dissemination of information in accordance with defined procedures, whether automated or manual. For the purposes of Army Portfolio Management System (APMS), the terms "application" and "information system" are both IT investments describing a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (see JP 1–02).The application of IT to solve a business or operational (tactical) problem creates an information system.

3.3.7 Information Technology

Information technology (IT) is any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency. For purposes of the preceding sentence, equipment is used by an executive agency if the equipment is used directly or is used by a contractor under a contract with the executive agency, which 1) requires the use of such equipment; or 2) requires the use, to a significant extent, of such equipment in the performance of a service or the furnishing of a product. The term "information technology" also includes computers, ancillary equipment, software, firmware, and similar procedures, services (including support services), and related resources. The term "information technology" does not include any equipment that is acquired by a Federal contractor incidental to a Federal contract. (Reference 40 USC Subtitle III (Clinger-Cohen Act of 1996).)

3.3.8 Technical Review Cell

Composed of technical experts from both the ASB, and IMD, the Technical Review Cell (TRC) conducts the preliminary review of all actions, related to IT equipment at TYAD, prior to either ATO submission, or CCB approval. The TRC is responsible for determining which security technical implementation guides (STIGs), and security requirements guides (SRGs) are applicable to a given system, based on the direction given by NETCOM, and higher headquarters.

3.3.9 Tobyhanna Army Depot

Tobyhanna Army Depot (TYAD) is responsible for the development, and protection of the TYAD Internal Campus Area Network (TYAD-ICAN). To obtain an ATO, all IT equipment Vendors will provide the resources necessary to obtain an ATO to TYAD, so that the TYAD entities, named in this sub-section, can assemble, and submit, the information to NETCOM for consideration. In addition to approval from NETCOM, local approvals must be obtained, from the entities named in this sub-section, for an IT equipment to operate both on the TYAD-ICAN, and standalone.

3.3.10 United States Army Network Enterprise Technology Command

The 9th Army Signal Command, otherwise known as United States Army Network Enterprise Technology Command (NETCOM), is responsible for all Army network development, and protection. In accordance with AR 25-1, all ISs must obtain an Authority to Operate (ATO) from NETCOM, before being permitted to communicate with any Army system. It is the responsibility of the Vendor, of any IT equipment, to provide all requested documentation, software, hardware, and licenses as needed to the Tobyhanna Army Depot (TYAD) for ATO submission.

3.3.11 Vendor

Any non-Government personnel, whether the original equipment manufacturer (OEM), reseller, or third-party personnel involved in the procurement, installation, and/or maintenance of the IT equipment.

3.4 Hardware Requirements

Without exception, all IT equipment shall comply with any, and all, applicable security technical implementation guides (STIGs) and security requirement guides (SRGs) as published by the Defense Information Systems Agency (DISA). This includes STIGs and SRGs regarding physical security. In addition, all IT equipment will comply with relevant Department of Defense (DOD) guidance, and mandates regarding hardware lifecycle upgrades. Without exception, all hardware must come from sources approved by the DOD, abide by all current restrictions, and be able to obtain and maintain an ATO throughout planned life cycle.

3.4.1 Communication Interfaces

All IT equipment must utilize at least RS-232 serial, or Universal Serial Bus (USB) communication methods. USB connections are to function as a peripheral device only, such as a printer. USB Mass Storage Devices are strictly prohibited. Additional communication interfaces, such as Ethernet, or RS-485, are acceptable, but cannot be in lieu of an RS-232, or USB interface. Full system functionality must be provided via all communication methods present in the IT equipment. All communication interfaces must be enabled, and available for use by the Government, upon delivery of the IT equipment to the Government. This is to ensure continuity of operations (COOP) should a communication interface become either inoperable, or prohibited for security, or technical reasons.

3.4.2 Cryptographic Devices

Any, and all, hardware implementing cryptographic functionality must utilize a Federal Information Processing Standard (FIPS) 140-2 Level 1, or better, compliant device, certified by the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP).

3.4.3 Workstations and Servers

Only standardized, Government owned, managed, and maintained computing hardware shall be utilized.

3.4.4 Removable Storage Media

The use of removable storage media, including, but not limited to, Universal Serial Bus (USB) flash drives, CompactFlash cards, and Secure Digital (SD) cards is prohibited, except by authorized Government personnel. Neither the Vendor, nor their sub-contractors, shall utilize such devices, and will provide data via optical media, such as a compact disc (CD) or the DOD SAFE available at https://safe.apps.mil/.

3.4.5 Memory Contents

In the event of main, and backup power failure, it is preferred that the IT equipment shall not utilize volatile memory to store information including, but not limited to, parameters, configurations, or passwords. Upon restoration of power, the IT equipment must return to a state such that the Government can continue to use the IT equipment without requiring service by either the Vendor, or any of their sub-contractors. The Vendor must state which form of memory (volatile or non-volatile) they will be using for which system functionalities. Further demonstration of memory is required in section 3.8.2.

3.4.6 Smart Card Readers

DOD personnel utilize a smartcard, called a Common Access Card (CAC) to access IT equipment. All user identification, and authentication, is to be accomplished with a FIPS 201 compliant smartcard reader.

3.4.7 Testing Hardware

3.4.8 Registration and Licensing

Sensitive information shall not be provided by the Government to the Vendor, or any sub-contractors. This information includes, but is not limited to; computer hostnames, IP addresses, usernames, or passwords. All products shall be registered to:

Commander Tobyhanna Army Depot https://safe.apps.mil/

11 Hap Arnold Boulevard Tobyhanna, PA 18466

Unless approved by the TYAD CCB, physical security tokens are restricted to server use only, and prohibited in end-user IT equipment. No licensing terms between the Vendor, or any sub-contractors, may supersede any requirements from either TYAD, or higher DOD headquarters.

3.5 Software Requirements

Without exception, all IT equipment shall comply with any, and all, applicable STIGs, and SRGs developed by DISA, as well as relevant Army guidance, and mandates. Any, and all software, firmware, or operating systems intended to be used on, with, or in support of any IT equipment is required to have a current, and valid, ATO, approval from the TYAD CCB, a unique name to identify the product, and employ a version numbering system to enable tracking of outdated software. All data delivered to TYAD will be provided with FIPS 140-2 compliant cryptographic hashes to enable TYAD to verify the integrity of the received files. The provided hashes shall not reside solely on the same physical media as the associated data. Without exception, all software, firmware, and data must come from sources approved by the DOD, and abide by all current restrictions. Without exception, all software, firmware, data, and/or operating systems must come from sources approved by the DOD, abide by all current restrictions, and be able to obtain and maintain an ATO throughout planned life cycle.

3.5.1 Operating Systems

All IT equipment shall utilize only operating systems, approved by the Army, and configured according to applicable STIGs, SRGs, Army, and local TYAD guidance, and mandates. All operating system installations must be protected by the DOD’s Host Based Security System (HBSS) software suite.

3.5.2 Install Location

Unless authorized by the TYAD CCB, all software, firmware, and data provided the Vendor, and all sub-contractors, must be installed within, and provide full system functionality while running from, standard locations appropriate for the particular operating system on which it is installed (e.g., Program Files, Program Files (x86), etc.)

3.5.3 Account Credentials

The IT equipment must integrate with TYAD’s Active Directory infrastructure in order to utilize the existing public key infrastructure (PKI), operated by the Army, for user, service, and machine accounts. In addition, the Government must have the ability to change and/or disable, any, and all, built-in administrative, user, and service accounts in the system, including those in embedded sub-systems (e.g., microcontrollers, FPGAs, PLCs, CPLDs, etc.), if applicable.

3.5.4 Cryptographic Functionality

All cryptographic functions must be FIPS 140-2 Level 1 compliant, or better, and utilize an implementation certified by the NIST CMVP, if applicable.

3.5.5 Encryption Certificates

For cryptographic functionality, requiring use of a certificate, the system must be able to generate a certificate signing request (CSR) for submission to a DOD Certificate Authority. The CSR must be in a FIPS 140-2 Public Key Cryptography Standards (PKCS) #10 format of at least 2048 bits, if applicable.

3.5.6 Connections to Outside Systems

All data shall remain within the bounds of the DOD Global Information Grid (GIG).

Connections to outside entities for purposes including, but not limited to, performance metric reporting, or remote support are prohibited, if applicable.

3.5.7 Registration and Licensing

Sensitive information shall not be provided by the Government to the Vendor, or any sub-contractors. This information includes, but is not limited to; computer hostnames, IP addresses, usernames, or passwords. All products shall be registered to:

Commander Tobyhanna Army Depot 11 Hap Arnold Boulevard Tobyhanna, PA 18466

Unless approved by the TYAD CCB, physical security tokens are restricted to server use only, and prohibited in end-user IT equipment. No licensing terms between the Vendor, or any sub-contractors, may supersede any requirements from either TYAD, or higher DOD headquarters.

3.6 Support Requirements

All IT equipment are required to have a valid support warranty for at least the software, and firmware. While a support warranty is in effect, the following requirements, and all those listed in applicable STIGs, and SRGs from DISA, as well as relevant DOD guidance, and mandates shall apply in order for the system to maintain the ATO. The information contained within the Acceptance section 3.8 of this document shall also apply for the duration of the support contract.

In addition an upgrade path for the system for its planned life cycle must be outlined by the vendor. The upgrade path must be able to address all potential issues discussed under heading

3.6 and its subheadings.

3.6.1 Response Time

The Government will receive a response from either the Vendor, or one of their sub-contractors, no later than 24 hours after the Government initiated a request under the service warranty with either the Vendor, or one of their sub-contractors.

3.6.2 Replacement Hardware

Any, and all, replacement hardware shall be new, or functionally, and aesthetically, equivalent to new, in performance, and appearance.

3.6.3 Software Updates

Software support will include software updates and enhancements on covered software products.

Covered software products is defined as any software, or firmware provided, by the Vendor and/or any subcontractors, to the Government, as needed for full functionality.

3.6.4 Operating System Compatibility

The IT equipment must remain compatible with future updated operating systems in accordance with DOD migration schedules during the entirety of the system’s planned lifecycle. Delivery, to the Government, of all materials required to perform upgrades for compatibility must be completed within the timelines set by DISA, NETCOM, U.S. Army Cyber Command (ARCYBER), U.S. Cyber Command (USCYBERCOM), and any additional DOD organizations tasked with the security of the GIG.

3.6.5 Security Updates

The Vendor, and all of their sub-contractors, shall address all security-related issues for the duration of the support contract. Delivery, to the Government, of all materials required to perform mitigation, and/or remediation of Information Assurance Vulnerability Alerts and Bulletins (IAVAs and IAVBs) must be completed within the timelines set by DISA, NETCOM, ARCYBER, USCYBERCOM, and any additional DOD organizations tasked with the security of the GIG.

3.6.6 Safety Issues

The Vendor, and all of their sub-contractors, shall address all safety-related issues, as identified by the TYAD Safety Office, for the duration of the support contract. Delivery of all materials required to perform mitigation and/or remediation of safety hazards must be completed within the timelines set by the TYAD Safety Office.

3.7 Cyber Documentation

The Vendor, and all sub-contractors, shall provide at least a digital copy of the following information, in a file format to be approved by the TYAD CCB. All the following information must be delivered with a valid cryptographic hash using an approved method. The cryptographic hashes of any products built using the information provided by the Vendor, and all sub-contractors, must match the cryptographic hashes of the compiled data provided to the Government, as applicable.

3.7.1 Manuals

The Vendor, and all sub-contractors, shall provide quantity 3 complete set of instruction manuals containing all information necessary to operate, maintain, administer, and reinstall software and hardware contained within the system in hardcopy and PDF format.

3.7.2 Disaster Recovery

The vendor shall also provide step-by-step instructions to facilitate a complete restoration of the system, to the state in which it was initially accepted by TYAD, in the event of a fatal system error.

3.7.3 System Backups

The Vendor, and all sub-contractors, shall also provide a backup copy of all configuration settings in effect at the time of successful demonstration of system functionality.

3.7.4 Source Code

If any software, firmware, or data has been customized for use by the Government, the Vendor, and all sub-contractors shall provide the associated source code, firmware, build environment, and build instructions to the Government. If any software, firmware, or data, governed by an open source license has been provided for use by the Government, the Vendor, and all sub-contractors shall provide the associated source code, firmware, build environment, and build instructions to the Government.

3.7.5 Calibrations and Certifications

The vendor and all sub-contractors must provide a digital copy of any documentation related to certifications received by the system or information of calibrations performed on the system.

3.7.6 Implementation Plan

The Vendor will submit a written implementation plan for review and acceptance by the TYAD CCB. This plan will include, but is not limited to, detailed information of all IT equipment, components, software, firmware, and data to be delivered to TYAD. All IT IT equipment, components, software, and firmware must have an associated version number, as applicable.

3.7.7 Digital Copies of Paper Deliverables

In addition all documentation requested in section 7.0 Documentation must be provided digitally in PDF and hard copy format.

3.8 Acceptance

The following criteria must be met before any IT equipment can be accepted, and put into use, by TYAD. Upon acceptance, all assets provided to TYAD by the Vendor, and all sub-contractors, shall become the sole property of the Government. All data delivered to TYAD shall be provided with FIPS 140-2 compliant cryptographic hashes to enable TYAD to verify the integrity of the received files. The provided hashes shall not reside solely on the same physical media as the associated data, and must not be initially provided after receipt of the data by TYAD. Data received by TYAD which does not match the associated cryptographic hashes shall not be considered valid, and will not be accepted.

3.8.1 Proof of Implementation

Upon solicitation, the Vendor will submit a written implementation plan for review and acceptance by the TYAD CCB. This plan will include, but is not limited to, detailed information of all IT equipment, components, software, firmware, and data to be delivered to TYAD. This plan, and the associated list of components will be verified by TYAD personnel to ensure the promised assets have not been tampered with prior to system delivery at TYAD. The same component list will be used to verify that no assets are tampered with during the install phase, after delivery, but prior to acceptance by TYAD. The component list will continue to be used to verify system integrity, and track changes made, after acceptance by TYAD, as applicable.

3.8.2 Proof of COOP

A successful demonstration of disaster recovery is required. The demonstration must include removing any power or backup power, battery or otherwise, from the system followed by the return of a state such that the Government can continue to use the IT equipment without requiring service by either the Vendor, or any of their sub-contractors. Example: if there is a loss of power, TYAD needs to be able to restart the equipment without initiating a service call. Any files and/or passwords used in the disaster recovery demonstration must be provided to TYAD by the vendor. This demonstration must be carried out in accordance with demonstration guidelines defined in section 3.6.3.

3.8.3 Proof of Functionality

The IS must obtain written confirmation, from the Contracting Office Representative (COR), of successful demonstration of full system functionality, a demonstration of COOP (section 3.8.2), and any demonstrations agreed to by the vendor during the solicitation or performance periods.

The demonstration must occur at TYAD, in the presence of either the COR, or the Contracting Office Technical Representative (COTR) and at least one TYAD subject matter expert (SME).

The COTR cannot serve as the only SME, at least one SME shall be from the Cost Center where the asset is to be utilized. Full system functionality demonstrations shall only be performed on the fully installed IT equipment. The written confirmation, from the COR, will contain an itemized list of checks performed during the demonstration. Each check will detail the steps taken, inputs/commands given, and results received. The TYAD COR/COTR and TYAD SMEs shall sign and date the verified component list, previously provided as Proof of Implementation, as well as the completed system functionality demonstration checklist. End-user license agreements (EULA) and similar documents will be signed by the TYAD COR/COTR and TYAD SMEs, after signing both the verified component list, and completed system functionality demonstration checklist. If the COTR is present for the full system functionality demonstration test, and signs on behalf of the COR, then the COR must sign and date the same documents, upon receipt from the COTR, as applicable.

3.8.4 Proof of Documentation

The COR will provide a signed and dated memo once all documentation outlined in Section 3.7 has been delivered to and verified by TYAD, as applicable.

3.8.5 Proof of Authority to Operate

IT products, such as software to be installed on Army computing resources, must undergo the Risk Management Framework (RMF) Assess Only process. Systems fitting the description of an IS, such as those provided by a Vendor with software, firmware, or operating system not controlled by the Army, are required to undergo the RMF Assess and Authorize process. Both an IT product, and an IS must be registered in the Enterprise Mission Assurance Support Service (eMASS). Proof of an Authority to Operate (ATO) is only valid once the relevant entry in eMASS receives a signature from the Approving Official (AO). Without an AO signature, no ATO exists, and the IT/IS cannot be accepted.

3.8.6 Proof of TYAD TRC Approval

3.8.7 Proof of TYAD CCB Approval

The IS must obtain an ELTY 6353 Change Request form, digitally signed by all approving authorities listed on the form. TYAD TRC approval is required before consideration by the

TYAD CCB.

4.0 (Reserved)

4.1 (Reserved)

4.2 (Reserved)

4.3 (Reserved)

4.4 (Reserved)

4.5 (Reserved)

4.6 (Reserved)

4.7 The Contractor shall be responsible to supply all necessary PPE for all Contractor personnel.

5.0 Delivery, Assembly, and Installation

5.1 (Reserved)

5.2 Delivery date and time shall be coordinated by the Contractor with the COR a minimum 14 calendar days in advance of the anticipated delivery at TYAD. Delivery shall include all accessory and assembly pieces and materials. A partial delivery is not acceptable.

5.3 Within 7 calendar days after delivery of the machine the Contractor shall arrive on-site to begin machine assemblies and installations

5.4 The Contractor shall be responsible to remove all packaging, packing and crating material from the machine, the accessory pieces and the assembly pieces and remove all of the packaging, packing and crating materials from TYAD. It shall be the responsibility of the Contractor to completely and thoroughly clean the machine, accessory pieces and assembly pieces.

5.5 (Reserved)

5.6 For machines that have manufacturer’s specifications for machine grounding, it shall be the full responsibility of the Contractor to ground the machine per manufacturer’s specifications.

Notify TYAD Garrison Engineering prior to drilling for anchors, cutting concrete or installing ground rods. The contractor shall use a HEPA Vacuum with a dust/Silica capture device when drilling or cutting concrete. The Contractor shall furnish all materials, tools and labor to ground the machine per manufacturer’s specifications.

5.7 (Reserved)

5.8 The Contractor shall be responsible to level the machine, per the manufacturer’s specification. The Contractor shall furnish all equipment, tools, materials and personnel to level the machine per manufacturer’s specifications.

5.9 The Contractor shall thoroughly clean the work site prior to daily departure and prior to weekend and holiday departures.

5.10 The Contractor may perform assembly and installation work during normal 1st-shift duty hours, Monday—Thursday from 7:30 AM to 4:00 PM.

5.11 The Contractor shall furnish all paints, fluids, greases and lubricants required by the manufacturer for the machine. The Contractor shall have all paints, fluids, greases and lubricants delivered with the machine. The Contractor shall fill the machine to the manufacturer’s recommended fluid levels and use all paints, greases and lubricants in accordance with the manufacturers’ instructions. The Contractor shall furnish Safety Data Sheets (SDSs) for all paints, fluids, greases and lubricants to the COR 30 days, minimum, in advance of the delivery of the machine. The Contractor shall remove from TYAD all empty, fully-filled, and partially-filled paint, fluid, grease and lubricant containers.

5.12 The Contractor shall be responsible to connect the machine and auxiliary pieces to all utilities. Utilities will be provided by TYAD to within 30 feet of the machine. The machine shall utilize nominal 120V/Single Phase/60Hz. The Contractor shall ensure a minimum of 3 feet of clearance around the installed equipment, electrical assemblies, subassemblies, and wiring.

The Contractor shall ensure all wiring is in accordance with NEC and OSHA standards. The Contractor shall ensure the installed machine and equipment are in accordance with NEC and OSHA standards.

Note: Equipment bearing only a Certified European (CE) or other similar non Underwriters Laboratories (UL) certification label is not by itself an acceptable indication that the equipment meets OSHA standards. The equipment must also have the specific mark of one of the OSHA’s Nationally Recognized Testing Laboratories (NRTL) recognized to test and certify the type of equipment or meet OSHA standards by alternate means that are acceptable as defined by the OSHA standard. Provide details of the specific OSHA and industry standards the equipment meets, including any marks from an OSHA accepted NRTL that will accompany the equipment.

5.13 The Contractor shall note the installation site is located in an industrial area populated by industrial equipment and personnel.

5.14 The Contractor shall be responsible to supply all PPE for all Contractor and sub-contractor personnel.

5.15 The Contractor shall be responsible to ensure the machine is operating within manufacturer’s specifications prior to beginning the machine operator personnel training and the machine maintenance personnel training.

5.16 Following receipt of the machine and ancillary pieces at TYAD, the Contractor shall complete assembly; complete installation; complete operator and maintenance personnel training; and present all manuals, data and documentation to the COR within 30 calendar days, as applicable.

5.17 Reserved.

6.0 Training

6.1 The Contractor shall provide training for machine operator personnel. This training shall focus on basic machine operation and features familiarization. Instruction shall also include maintenance that needs to be done by machine operators on a daily basis. Machine operator personnel training shall be a minimum of 2 hours, but shall not exceed 8 hours and shall be conducted on-site at the machine at TYAD. Machine operator instruction shall be for up to 5 ea.

machine operator personnel. All materials used during training shall become the property of

TYAD.

6.2 The Contractor shall provide training for machine maintenance personnel. Machine maintenance training shall include preventive maintenance (PM) and general machine maintenance including the lock-out/tag-out procedures to take the machine to zero energy state and restore it to full operational capability. Machine maintenance personnel training shall be a minimum of 1 hours, but shall not exceed 8 hours and shall be conducted on-site, coordinate with point of contact after award has been made. Machine maintenance instruction shall be for up to 3 ea. machine maintenance personnel. All materials used during training shall become the property of TYAD.

6.3 Machine operator personnel training and machine maintenance personnel training shall commence only after the machine and all auxiliary pieces of equipment are operating within manufacturer’s specifications and shall be conducted on-site at TYAD at the machine by the Contractor or the Contractor’s qualified training instructor.

6.4 All Contractor-furnished training shall be conducted in American standard English and all training materials shall be written in American standard English.

7.0 Documentation

7.1 The Contractor shall furnish in searchable digital format PDF and three each hardcopies of the following manuals: 1) Machine Operation and Maintenance (O&M) manuals; and 2) Machine Parts manuals that shall include full parts list for the machine—the parts list shall include part number, nomenclature, and quantity for each listed part. The Contractor shall supply a comprehensive preventive maintenance (PM) schedule that also indicates work that is to be performed as part of the scheduled PM and shall detail the lock-out/tag-out procedures that are required to bring the machine to a zero energy state for maintenance and servicing.

Procedures for returning the machine to full operational capability shall also be provided.

7.2 The Contractor-furnished O&M manuals shall contain a complete set of mechanical drawings and diagrams; a complete set of electrical drawings and diagrams including electrical schematics; logic circuitry descriptions; spare parts list; and operator and maintenance instructions for operating and maintaining the machine. The O&M manuals shall contain complete detailed instructions and schedules for machine PM.

7.3 (Reserved)

7.4 All Contractor-furnished manuals, data and documentation shall be written in American standard English.

8.0 General Acceptance

8.1 Upon successful demonstration of the machine; completion of machine operator personnel training and machine maintenance personnel training; and presentation of all manuals, data and documentation to the COR, General Acceptance will be granted to the Contractor. Full system demonstration of the machine shall only be considered successful once all requirements in section 3.8 are met for the provided machine.

9.0 Final Acceptance

9.1 Final Acceptance will occur upon ACCEPTANCE in Wide Area Workflow (WAWF) of the Contractor’s submitted invoice by the COR. Final Acceptance will be granted only after General Acceptance has been given to the Contractor and all terms and conditions of the contract have been completed by the Contractor to the satisfaction of the COR. Should the Vendor be unable to provide a solution, acceptable to TYAD and within the period of performance, the Vendor is responsible for removing all assets installed as part of this SOW at the Vendor’s expense.

9.2 WAWF CPOC is Michael Kulick, (570) 615-9036, michael.kulick2.civ@mail.mil.

10.0 Warranty

10.1 The Contractor shall warrant the machine, all ancillary components, all installation parts and all workmanship for a period of one (1) calendar year following Final Acceptance by the COR. During this warranty period all parts costs, labor costs, transportation and shipping costs, travel costs, tool costs and per diem for all Contractor personnel shall be the responsibility of the Contractor. The Contractor field repair technician shall arrive on-site within 72 hours after being contacted by TYAD personnel to make warranty repairs during the warranty period. The Contractor shall supply to the COR Contact Telephone Numbers and Points of Contact (POCs) for use by TYAD personnel for warranty, operations and maintenance questions and support.

10.2 The Contractor shall provide and perform an annual contractual Preventive Maintenance (PM) for the machine to be included as part of the warranty provided and without additional cost to the Government during the warranty period. The Contractor shall perform the contractual PM within 12 months, but no sooner than 10 months after Final Acceptance. As a part of this contractual PM the Contractor shall provide to the COR a complete itemized listing of what was performed as part of the PM and the Contractor shall provide an itemized parts list with names, part numbers and quantities of the parts that have been replaced. Date for the contractual PM shall be coordinated by the Contractor with the COR. All replacement parts needed for the contractual PM shall be provided by the Contractor at no charge to the Government and installed by the Contractor at no charge to the Government.

11.0 Safety

11.1 The machine shall meet all requirements set forth in OSHA General Industry Standards, current edition. All energy control sources shall have the capability of being locked-out and tagged-out. The Contractor’s manuals shall detail the lock-out/tag-out procedures that are required to bring the machine to a zero mechanical state for maintenance and servicing.

Procedures for returning the machine to full operational capability shall also be provided.

11.2 Prior to soldering, welding, torch cutting, and all forms of burning and use of open flame the Contractor shall be responsible to obtain a Hot Work Permit from the TYAD Fire Department. The Contractor shall use safety screens that offer the required level of protection for the type of work being performed and to provide protection for all personnel in the surrounding area. Soldering, welding, torch cutting, and all forms of burning require the removal of paint prior to operations. Paint must be removed at a minimum of two inches from where soldering, welding, torch cutting, all forms form of burning are performed. Paint may be sanding or ground.

All sanding/grinding/drilling equipment is required to have dust/fume capture equipment with HEPA vacuum connected controls.

11.3 See below the Contractor Safety Standards for TYAD for additional information and requirements.

12.0 Environmental

12.1 The Contractor shall use only electric-powered vehicles and electric-powered equipment inside all Government buildings.

12.2 The Contractor shall furnish SDSs to the COR for all hazardous consumables furnished by the Contractor and used by the Contractor. All SDSs for hazardous consumables shall be furnished to the COR 30 calendar days prior to the hazardous consumables being brought on-post.

12.3 See below the Standard Specifications for Projects Under the National Environmental Policy Act for additional information and requirements.

13.0 TOBYHANNA ARMY DEPOT ON-SITE CONTRACTOR WORKFORCE AND

VISITOR RESTRICTIONS

1. NON-RESIDENT/NON-IMMIGRANT ALIENS

a. All non-resident/non-immigrant aliens must have approval prior to being permitted access to Tobyhanna Army Depot (TYAD). Such approval must be obtained by requesting access through the following: apply at the alien-resident's embassy; proceed to the U.S. Embassy; proceed to the Department of the Army; proceed to Army Materiel Command; proceed to U.S.

Communications-Electronics Command; proceed to TYAD.

b. All non-resident/non-immigrant aliens granted access to TYAD are required to be escorted by Government personnel. One Government escort can accommodate a maximum of two non-resident/non-immigrant aliens.

c. Due to limited availability of Government personnel, contractors shall not be permitted to employ non-resident/non-immigrant aliens as part of the contractor's on-site workforce. Limited exceptions to this restriction may be considered on a case-by-case basis. Such exceptions shall only be considered where a specialized skill or trade is not otherwise available, and even under such circumstances would only be considered for very limited duration, e.g., a few hours/days.

However, even if limited exception is considered, access may still be denied. Contractors whose personnel are either denied entry to TYAD or permitted limited entry to TYAD due to the security requirements pertaining to non-resident aliens/non-immigrants are not relieved of their obligation to provide the required contract performance and must do so at no additional cost to the Government. Any contractor failing to perform or that fails to perform in a timely manner under such circumstances may be terminated for default or other contractual remedies as appropriate.

d. Due to limited availability of Government personnel, visitors requiring escort may not be permitted access, or access may be limited to a certain time and duration.

2. FOR THE PURPOSE OF FORMAL ESCORTED SITE VISITS

Resident aliens (immigrants) in possession of a valid Form I-551, Alien Registration Receipt Card ("Green Card"), are not required to obtain approval as set forth in paragraph 1.a. above (but see paragraph 5, below). Such individuals must have proper identification in addition to a valid form I-551 in their physical possession at all times while at TYAD. Individuals lacking proper identification and valid form I-555 will be denied access to TYAD.

3. SECURITY SEARCHES, IN-PROCESSING, AND SECURITY SCREENING

All persons seeking entrance to TYAD must submit to and comply with all security standards and requirements in force at the time such persons are seeking entry. All visitors and contractors, regardless of resident status or citizenship, will be subject to vehicle search and intense in-processing by TYAD Security personnel prior to being granted access to TYAD. This security screening process may be time consuming and access may be delayed or denied.

Any Contractors who will be working on site, company representatives who will be visiting periodically, and any companies or contractors requesting or requiring TYAD badges for other business reasons must submit a completed TYAD form 648-C to their contract or depot point of contact. The completed form must be submitted at least five (5) workdays in advance of on-site performance for each employee intended for onsite performance or five (5) workdays in advance of visits or other business at the depot. Any contractor employee (s) already on site who have not been screened, will be subject to security screening. This requirement is inclusive of on-site supervisory or managerial personnel and sub-contractor personnel that the Contractor anticipates will be performing work or visiting on-site. This security screening does not relieve the contractor of any responsibilities to conduct thorough pre-employment background checks and drug screening. Contractor workers will not be granted access to the work site until security screening is completed and access is approved.

Any contractor personnel on site who fail screening will not be permitted further access to TYAD. In addition, a ELTY 908 Visitor Request form must also be filled out for all personnel visiting TYAD alone or arriving as a group.

4. SUBMISSION OF BIDS OR PROPOSALS

All offer packages must be emailed electronically to purchasing agent, kaila.e.black.civ@army.mil

5. CONTRACTOR ON-SITE WORKFORCE - ADDITIONAL SECURITY REQUIREMENTS

A. This section is in addition to the requirements above regarding non-resident aliens (non-immigrants) for on-site performance. Prior to the commencement of performance under the contract and within seven (7) workdays of contract award, the Contractor shall submit to the Chief, Security Division, Tobyhanna Army Depot, a roster of all contractor personnel, inclusive of on-site supervisory or managerial personnel and sub-contractor personnel, that the Contractor anticipates will be performing work on-site. The roster shall indicate which individuals are U.S. citizens and which are resident aliens (immigrants). The following documentation shall accompany the roster for each individual named on the roster as a resident alien (immigrant):

a) A copy of a verifiable form of identification, such as a driver's license (Real ID) or a passport; and

b) A copy of a valid Department of Justice Immigration and Naturalization Service Form I- 551, Alien Registration Receipt Card ("Green Card").

Contractors who fail to identify any and all resident aliens (immigrants) who will be used for on-site performance and who will seek access to Tobyhanna Army Depot as a worker for or through the contractor, inclusive of managerial and subcontractor personnel, may be subject to civil and criminal penalties and sanctions as well as contract remedies

B. Within five (5) workdays of the submission of the roster, documentation, and TYAD form 648-C, the Government will have completed the security check and the Contractor shall be notified whether all listed personnel will be permitted to work on-site. However, actual access to Tobyhanna Army Depot by the roster personnel will remain contingent upon such resident alien (immigrant) individuals presenting two (2) forms of identification as they process into the Depot through the Security building: a valid Form I-551, Alien Registration Receipt Card ("Green Card") in addition to at least one other verifiable form of identification

C. The roster that the Contractor submits is amendable. However, up to five (5) workdays will be required to perform a security check on any personnel added to the roster. The Contractor is urged to include contingency or "back-up" personnel in the original roster in order to avoid delays due to roster amendment D. Contractors whose personnel are denied entry to TYAD due to the security requirements are not relieved of their obligation to provide the required contract performance and must do so at no additional cost to the Government.

Any contractor failing to perform or that fails to perform in a timely manner under such circumstances may be terminated for default or be subject to other contractual remedies as appropriate.

CONTRACTOR VEHICLES, TRAILERS AND EQUIPMENT

All contractor owned, rented or leased vehicles, trailers and/or equipment for use on site, shall be identified with the contractor's company name, job site description, point of contact and phone number where the contractor can be reached 24 hours a day. The contractor shall ensure all referenced items are to be checked for proper operation, leaks, etc. prior to delivery to Tobyhanna Army Depot.

The contractor shall coordinate with the Contracting Officer's Representative or assigned Government point of contact prior to leaving any of the referenced items unattended at the site.

INSURANCE REQUIREMENTS - CONTRACTING OFFICER'S NOTICE

The contractor shall procure and maintain during the entire period of his performance under this contract the following minimum insurance:

(a) WORKER'S COMPENSATION AND EMPLOYER'S LIABILITY. Contractors are required to comply with applicable Federal and State Worker's Compensation and Occupational Disease Statutes.