SOW_MEM .pdf

U.S. Department of Homeland Security U.S. Customs and Border Protection

Statement of Work

For:

U.S. CUSTOMS AND BORDER PROTECTION

NON-INTRUSIVE INSPECTION SYSTEMS

Medium Energy Mobile Systems

PREPARED BY:

NII PROGRAM MANAGEMENT OFFICE (PMO)

Version Date Comments V1 08/22/2024 Original V2 12/16/24 ILD Comments

Table of Contents

1. PURPOSE

1.1. Background

1.2. Scope

1.3. Period of Performance

1.4. Delivery

1.5. Invoicing

1.6. Program Organization

1.6.1. Government Management Organization

2. APPLICABLE DOCUMENTS

2.1. Federal Regulations and Publications

2.2. National Standards

2.3. DHS/CBP Documents

2.4. Order of Precedence

3. REQUIREMENTS

3.4. General Requirements

3.4.1. Performance Requirements for Large Scale Medium Energy Mobile NII Systems 13

3.4.2. System Configurations and Operational Specifications for Medium Energy Mobile Systems

3.4.3. Imaging System Equipment an Equipment Installation

3.4.4. Sources & Detectors

3.4.5. Computers

3.4.6. Computer Security

3.4.7. Printed Documents

3.4.8. Printer / Scanner

3.5. Systems Integration

3.5.1. Work Center

3.5.2. Workstation Integration and Interface

3.5.3. Integrated Image Capture

3.5.4. Integrated Image Storage

3.5.5. Integrated Image and Data Capture

3.5.6. Image Download

3.5.7. Integrated Data Package Download / Transfer

3.6. Safety Interlocks

3.7. Reliability, Availability and Maintainability

3.7.1. Classification of Reliability Critical Items

3.7.2. Basic Reliability Quantitative Requirements

3.7.3. Control of Reliability Critical Items

3.7.4. Availability - Operational Availability (Ao)

3.7.5. Service Calls and Work Orders

3.7.6. Preventive Maintenance

3.7.7. Corrective Maintenance

3.7.8. Remote Maintenance Monitoring

3.7.9. Configuration Report

3.8. On-Demand Services (Technology Refresh, Other Maintenance, and Other Support Services)

3.8.1. Corrosion Control

3.8.2. Engineering Services

3.8.3. Ad Hoc Reports

3.8.4. Site Surveys

3.8.5. Provisioning Support

3.8.6. Retrofit Support

3.8.7. Relocation Services

3.8.8. Site Work

3.8.9. Decommissioning and Disposal Services

3.8.10. Emergency Services

3.8.11. Special Events

3.8.12. On-Demand Training

3.9. Safety Plan

3.9.1. Hazardous Materials

3.10. System Support Requirements

3.10.1. System Installation

3.10.2. System Training

3.10.3. Technical Manuals

3.11. Quality Assurance and Testing

3.11.1. Quality Assurance

3.11.2. Contractor Testing

3.11.3. CBP Factory Testing

3.11.4. CBP Site Acceptance Testing

3.11.5. Material Discrimination Testing

3.12. Radiation Safety

3.12.1. Radiation Safety Design Review

3.12.2. Radiological Survey and Report

3.12.3. Radiation Survey and Report

3.13. Configuration Management

3.13.1. Technical Documentation

3.13.2. Configuration Baseline

3.13.3. Management of the Technical Documentation

3.13.4. Engineering Change Proposals (ECPs)

3.13.5. Interchangeability

3.13.6. Accessibility

4. LIFE CYCLE SUSTAINMENT AND SUPPORT REQUIREMENTS

4.1. Warranty

4.2. Warranty Period Configuration Changes

5. INFORMATION TECHNOLOGY SECURITY

5.1. Basic Requirements

5.2. Security Authorization

5.3. Encryption Compliance Requirement

5.4. Security Review

5.5. DHS Security Policy Requirement

5.6. Product Assurance

5.7. Continuous Monitoring

5.7.1. Patch Management

5.7.2. Specific Protections

5.8. Access to Unclassified Facilities, Information Technology (IT) Resources, and Sensitive Information

5.9. Personal Identity Verification (PIV) of Contractor Personnel

5.10. PIV Credential Compliance

5.11. CBP Contractor Handling PII Level

5.12. Security Requirements for Unclassified Information Technology Resources

5.13. Contractor Employee Access (JULY 2023)

5.14. 3052.204-72 - Safeguarding Of Controlled Unclassified Information (July 2023) 63

5.15. Information Technology Security Awareness Training (JULY 2023)

5.16. DHS-CBP Enterprise Architecture Compliance

5.17. Supply Chain Risk Management Terms and Conditions:

5.18. DHS Information Technology Portfolio Alignment

5.19. 1Pv6

5.20. Accessibility Requirements (Section 508 Compliance)

5.20.1. Section 508 Applicable EIT Accessibility

5.20.2. Section 508 Applicable Exceptions

5.20.3. Section 508 Compliance Requirements

5.21. 3052.204-73 Notification And Credit Monitoring Requirements For Personally Identifiable Information Incidents (July 2023)

5.21.1. PII and SPII Notification Requirements

5.21.2. Credit Monitoring Requirements. The Contracting Officer may direct the Contractor to:

5.22. Interconnection Security Agreement Requirements

5.23. OCIO CISO Cyber-Supply Chain Risk Management (C-SCRM)

5.23.1. Original Equipment Manufacturer (OEM) End-use Information and Communications Technology (ICT) Product

5.23.2. Accounting of Components in ICT Products

5.23.3. Supply-Chain Transport

5.23.4. Changes to Ownership and Control

6. SPECIAL CONSIDERATIONS

6.1. Changes to the SOW

6.2. Travel

6.3. Points of Contact

6.3.1. Technical POC:

6.3.2. Contracting Officer:

6.3.3. Contracting Officer's Representative:

6.3.4. Budget (SAP Approver):

7. DATA ITEM DELIVERABLES (Data Item Description (DID))

8. APPENDICES

8.1. APPENDIX 1: DATA ITEM DELIVERABLES

Statement of Work

1. PURPOSE

The purpose of these LS-NII Medium Energy Mobile Systems is to enable CBP to perform effective and efficient Non-Intrusive Inspection of conveyances, including trailer trucks, pallets, trailer-mounted cargo containers and other vehicles for contraband such as illicit drugs, terrorist weapons and currency. These systems may be used for inspection of smaller vehicles such as privately owned vehicles (POV), pickup trucks, buses, Recreational Vehicles (RV), and towed vehicles (e.g., trailers and boats), as well as commercial buses. The system shall be capable of detecting contraband and Weapons of Mass Destruction/Weapons of Mass Effect (WMD/WME) secreted in vehicles and containers. The system shall be capable of operation in the stationary and mobile modes.

1.1. Background

CBP Officers and Border Patrol Agents, in the course of their work examine conveyances and cargo. These inspections take place at controlled ports of entry (POE) and Border Patrol checkpoints, and are aimed at detecting items prohibited from import into or export from the U.S. Each day CBP Officers and Border Patrol Agents use a variety of LS-NII equipment. LS-NII systems in the mobile configuration will allow CBP to quickly move the systems to different locations, based on the threat.

1.2. Scope

U.S. Customs and Border Protection (CBP) has a need for improving its inspection of cargo conveyances arriving in the United States at and between CBP Ports of Entry (POE). In the current threat environment, it is imperative for security that incoming cargo conveyances are subjected to a high level of scrutiny. Therefore, CBP seeks to procure Large Scale Non-Intrusive Inspection (LS-NII) Medium Energy Mobile imaging systems such as X-Ray systems; for various CBP POEs, located throughout the United States as designated by CBP. This Statement of Work (SOW) defines the tasks necessary to provide these LS-NII Medium Energy Mobile systems to include equipment, testing, delivery, verification, documentation, and logistics requirements needed to satisfy the procurement.

1.3. Period of Performance

The anticipated period of performance is twelve (12) months from the date of award with four (4) option years.

The effective period begins at award and ends at completion of the warranty period of the last Medium Energy Mobile Systems order during the last active order, or the last day of the ordering period, whichever is later.

CBP intends to procure six (6) Medium Energy Mobile Systems during the base year.

1.4. Delivery

The contractor shall provide a planned delivery schedule within 30 days of award.

Delivery of systems shall begin no later than Sixty (60) days from the date of execution of a Delivery Order. Coordination shall be made with the CBP technical POC listed in SOW Section 6 prior to delivery. On site operational testing shall be conducted prior to acceptance of each system.

The contractor shall provide updates to the delivery schedule on a quarterly basis or if a significant deviation of more than 10% occurs.

1.5. Invoicing

The Contractor shall submit one (1) FFP invoice for the Base Period thirty days

(30) after the contract award for the full amount of the POP outlined in this SOW.

Option(s) shall be invoiced thirty days (30) after a fully ratified modification to exercise the option for the full amount of the POP outlined in this SOW. The invoice shall be simultaneously transmitted electronically to the COR at the e-mail address provided in section 6.3, and the Contractor shall invoice CBP per CBP invoicing clause, “Electronic Invoicing and Payment Requirements – Invoice Processing Platform (IPP) (JAN 2016).”

Please ensure the following are included in all invoices:

• Contract number.

• Order Number (e.g., Task Order, Delivery Order, Purchase Order, etc.).

• Description of supplies or services provided for a specified time period.

• CLIN the supplies or services are charged under.

• Unit price and total amount of each item; and discount terms (if applicable).

• Company name, telephone number, taxpayer’s identification number, and complete

• mailing address to which payment will be mailed.

• Backup documentation showing the government has received the goods and/or services.

Payment requests shall be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in FAR 32.905(b), "Payment documentation and process." The IPP website address is: https://www.ipp.gov.

A courtesy e-mail notification upon invoice submission in IPP shall be sent by the Contractor to the COR. Only the CO has the authority to represent the Government in cases where the delivery order requires a change in the terms and conditions, delivery schedule, scope of work and/or price of the products and/or services under this task order

1.6. Program Organization

This program is under the technical direction of the LS-NII Contracting Officer Representative (COR) assigned to the Office of Field Operations (OFO) and Non- Intrusive Inspection Division in coordination with CBP OIT/Enterprise Network and Technology Support Directorate (ENTSD) Integrated Logistics Division (ILD)

1.6.1. Government Management Organization

CBP will manage this program through the CBP NII PMO process for system acquisition, delivery, and acceptance. CBP OIT/Enterprise Networks and Technology Support Directorate (ENTSD), Integrated Logistics Division (ILD) will manage the system(s) during the warranty period(s) to include any corrective maintenance actions, preventive maintenance activities, and Logistic Support.

CBP Non-Intrusive Inspection Division (NIID) will approve training development and operator training and presentations. CBP Human Resources Management (HRM) will approve radiation safety limits.

2. APPLICABLE DOCUMENTS

Documents cited shall be referenced and used as called for in this Statement of Work Performance Specifications and attached Data Item Descriptions (DIDs).

2.1. Federal Regulations and Publications

• Code of Federal Regulations, 10 CFR 20, Standards for Protection against Radiation, 2012, (NRC).

• Code of Federal Regulations, 10 CFR 39.35, Leak Testing of Sealed Sources, 2012, (NRC).

• Code of Federal Regulations, 10 CFR 71, Packaging and Transportation of Radioactive Materials, 2012, (NRC).

• Code of Federal Regulations, 21 CFR 179, Irradiation in the Production, Processing and Handling of Food, 2012, (FDA).

• Code of Federal Regulations, 29 CFR 1910, Occupational Safety and Health Standards, 2012, (OSHA).

• Code of Federal Regulations, 49 CFR 172, Hazardous Materials, Etc., 2012, (DOT)

• U. S. Department of Transportation Federal Highway Administration Bridge Formula Weights August 2006 FHWA-HOP-06-105 (http://www.ops.fhwa.dot.gov/publications/publications.htm#fa).

2.2. National Standards

• American National Standards Institute, ANSI/IEEE N42.41, Minimum Performance Criteria for Active Interrogation Systems Used for Homeland Security, 2007.

• American National Standards Institute, ANSI/IEEE N42.46, Determination of the Imaging Performance of X-Ray and Gamma-Ray Systems for Cargo and Vehicle Security Screening, 2008.

• American National Standards Institute, ANSl/HPS N43.3, General Radiation Safety - Installations Using Non-Medical X-Ray and Sealed Gamma-Ray Sources, Energies up to 10 MeV, 2008.

• American National Standards Institute, ANSl/HPS N43.14, Radiation Safety for Active Interrogation Systems for Security Screening of Cargo, Energies up to 100 MeV, 2011.

• National Fire Protection Association, NFPA 79, Electrical Standards for Industrial Machinery, 2007.

• Federal Information Processing Standards Publication (FIPS PUB),

• Number 140-2, Security Requirements for Cryptographic Modules,

• National Fire Protection Association, NFPA 70, Recommended Practice for Electrical Equipment Maintenance, 2010.

2.3. DHS/CBP Documents

• DHS Sensitive Systems Policy Directive 4300A, Version 13.0.

• CBP Information Systems Security Policies and Procedures, HB 1400-

05D, Version 7.0.

• DHS Management Directive (MD) 11042.1 Safeguarding Sensitive But

Unclassified (For Official Use Only).

• DHS-CBP N.25, Standard Messaging Protocol, Version 1.5.0.6, 2010

• CBP Interface Control Document, Version 5, Jan 2013.

• CBP Port Radiation Inspection, Detection and Evaluation (PRIDE) 2.0 Interface Control Document (ICD) version 5, 2015.

• CBP Training Development Standards, 2008.

• CBP Instructor-Led Training (ILT) Style Guide, 2009.

• CBP Instructor-Led Training (ILT) Process Guide, 2008

2.4. Order of Precedence

In the event of a conflict between the texts of this SOW and the references cited above, this SOW takes precedence. However, nothing in this SOW supersedes applicable federal and state safety laws.

3. REQUIREMENTS

3.1. The Contractor shall perform all tasks within this SOW. The Contractor shall abide by all applicable Federal regulations, national standards, and U.S.

Department of Homeland Security (DHS) and CBP documents in performing all tasks. Requirements for this effort shall include the fabrication, integration, test, delivery, training, logistics, and on-demand support of LS-NII Mobile Systems.

3.2. These systems will be deployed at various CBP POEs (land border crossings along the Southwest/Northern borders, seaports and airports) within the United States as designated by CBP. Specific sites and schedules shall be identified during contract negotiations.

3.3. Requirements Definitions

• Threshold: The minimum level of operational performance that the

Government is willing to accept is considered a threshold value.

• Objective: A level of performance that significantly improves mission performance, safety, or supportability beyond that of the threshold value, and represents the desired yield for system performance is considered an objective.

• Objective values are not required but can be defined to provide guidance to the Contractor with respect to areas where increased capability is of interest/value to the government. If Objectives are defined, the interval between the Objective and Threshold values for a given parameter is the government program manager’s (PM) trade-space.

• Single Requirement: Some requirements will have only a single parameter value and, when this is the case, these values are thresholds.

3.4. General Requirements

The Contractor shall perform the work necessary to develop, test and deliver the procured equipment. The Contractor shall also provide warranty, logistics, and on-demand services, including initial operator training, for support of these LS- NII inspection systems. Each LS-NII system shall meet the requirements defined in this Statement of Work/Performance Specification.

3.4.1. Performance Requirements for Large Scale Medium Energy Mobile NII Systems

These systems will be used primarily to scan commercial traffic. Those items that apply to these Large Scale Mobile NII Systems are as follows.

Operational Environment –The system shall be capable of operating in temperatures ranging from -30°C to 50°C (-22° F to 122° F) (Threshold), with an Objective of -40°C to 60°C (-40°F to140°F).

The system shall be capable of operating in high humidity (98%), and in winds up to 40 mph. The system shall be able to operate in rain, sleet, freezing rain, snow, and blowing sand.

Power Requirements – The system shall be capable of operating on the following external (utility) power: 220 VAC, 1 to 3-phase, 80 amps per phase, and 60 hertz. Shall have a surge protector or other device to condition the external power and prevent damage from power surges. A 100 ft. power cable capable of transmitting the required electrical power that can be connected to an external power receptacle shall be provided.

Number of Operators - The system shall have the capability to be operated in the mobile-mode with three (3) operators: Primary Operator/Analyst, Driver, and Secondary Operator/Safety Guide. The systems shall have the capability to be operated in the stationary-mode with two (2) operators: Primary Operator/Analyst and Secondary Operator/Safety Guide. The Primary Operator/Analyst and Driver shall each be able to initiate and complete a scan. The system shall be designed to operate in a manner that is automated to the maximum extent possible, reducing the number of operators required in the field to conduct scanning operations.

Image Display – The system shall be capable of displaying the entire length of the scanned conveyance and its height from 11 inches above the ground clearance established in section 3.2.2.15.

Real-Time Imaging – The system shall provide Real-Time Imaging so that the image is displayed during the scan with a delay of no more than three seconds.

Image Quality – X-ray images shall appear clear, have sharp edges, and have a true aspect ratio (uncompressed and distortion free).

Signal Processing – The system shall have image enhancement features that allow the Primary Operator/Analyst to enlarge the image, change its color, contrast and brightness, sharpen and smooth its edges, and reduce noise for the entire image and for a selectable Region of Interest.

Video Image

System Conveyance Markings The system shall be equipped with at least one Pan-Tilt-Zoom (PTZ) camera capable of automatically taking a snapshot of the license plate number or cargo container number of the conveyance being scanned and storing it with the Image Data Set (IDS) (threshold). Adjustable cameras shall be able to have their tilt, pan and zoom remotely controlled by the system operator. An Optical Character Recognition (OCR) system capable of automatically recording the license plate number or cargo container number of the conveyance being scanned and storing it with the Image Data Set (IDS) (objective).

Surveillance of Conveyance The system shall include one or more fixed and/or adjustable line-of- sight cameras that enable the system operator to observe the conveyance being screened. Adjustable cameras shall be able to have their tilt, pan and zoom remotely controlled by the system operator.

Surveillance for Safety and Security The system shall include one or more fixed and/or adjustable line-of- sight cameras that enable the system operator to observe areas of interest in and around the system for safety and security. As a minimum this area shall include the system’s safety zone. Adjustable cameras shall be able to have their tilt, pan and zoom remotely controlled by the system operator.

The cameras shall have sufficient resolution (minimum of 320 by 240 at 30 fps, desired of 640 by 480 at 12 fps) to detect person(s) within the surveillance area and their video display shall include time and date overlays

Driver video display shall be viewable on the scan side of the cab.

Notes/Annotations – The system shall provide the capability for the Operator to enter notes/annotations on completed scans at any time during operations including during continued scanning. Entries up to 256 characters shall be included as part of the IDS. The system shall have a scalable measuring tool to reference identified objects on the image relative to the conveyance dimensions (e.g. ruler tool bar).

Release/Hold Decision – The system shall have the capability to tag an image as Suspect or Non-Suspect and store that decision with the IDS.

N.25 – The system shall be in compliance with the most recent version of DHS- CBP N.25 and associated Interface Control Document (ICD) at the time of award.

Compliance shall only extend to the ability to transmit N.25 messages and be compatible with the external system interface described in the CBP ICD. The system shall have an ON/OFF switch available to the local Administrator to enable or disable this feature.

Data Sharing - The capability for data sharing across a fixed and wireless network in accordance with DHS and CBP policy is a threshold requirement. The image file in its RAW format, N25 format, or other prescribed format, and the associated file data, images, photos, and video shall be packaged and capable of transmission across a network for potential viewing and manipulation by CBP at multiple locations and/or a single “command center” location for image analysis and processing. The ability to distribute the subject system output to tablets and hand-held devices in addition to standard desktops and laptops is an objective.

Manifest Scanning – The system shall have the capability to scan a paper Manifest and store it with the IDS (Threshold). The capability to transfer an electronic manifest and store it with the IDS is an Objective.

Material Discrimination - The capability to distinguish between low-Z (organic), medium-Z (intermediate: inorganic and composite) and high-Z (metallic) materials based on their atomic number (Z) is an Objective. Material categories are to be color-coded as follows: organic (orange), intermediate (green) and metallic (blue) (Threshold) and Heavy Metals (Color not defined by CBP)

(Objective). Shades of these colors are to be used to indicate thickness.

Smart Signal Processing - Smart signal processing that automatically identifies drugs, explosives, weapons and potential casings for radioactive materials is an Objective. This can additionally include system identification and denotation of cargo areas that were not penetrable by the scan

3.4.2. System Configurations and Operational Specifications for Medium Energy Mobile Systems

The following will be required to meet the Performance Specifications listed in paragraph 3.1.1 and those listed for this configuration.

Travel Configuration – The system shall be able to travel on highways with a maximum height of 13 ft. 6 inches, width of 8 ft. 6 inches (lights, mirrors, and other required devices may extend an additional 10 inches on each side), and length of 40 ft. Total weight shall not exceed 26,001 lbs. or the vehicle's Gross Vehicle Weight Rating (GVWR) whichever is less. The system shall not require a Commercial Driver’s License.

Scan-Drive – The system shall provide governed speed control for mobile-mode operation at no greater than 3mph (threshold), 2mph (objective).

Cab Configuration – The system shall have sufficient space for operators in full duty gear. Analyst station shall be ergonomic. Seats shall be durable and fully adjustable for height and travel. The cab shall be heated or cooled to a temperature range of 65 to 75 degrees in all operating conditions. The system shall provide two-way communication between the cab personnel and the safety traffic control officer.

Fire Extinguishers – The system shall be equipped with two (2) appropriately rated fire extinguishers; one inside the cab, and one on the exterior of the vehicle.

The fire extinguishers shall be appropriately placed and readily available.

Law Enforcement Lights and Sirens – The system shall be equipped with a set of Law Enforcement lights, that when activated can be seen from all sides of the unit, 360 degrees. The lights shall be capable of being controlled from the Driver's Cab. The siren shall include at a minimum two tones, the wail and yelp (such as the Whelen PA series). The siren may be integrated with the lighting or separate.

Area Lighting – The system shall have LED lighting for system operation in dusk and nighttime that provide the following capabilities:

• Lighting conditions extending 50 feet as measured from vehicles center point, providing a 360° perimeter around the system in the deployed position. (Shadowed areas within this perimeter are not acceptable)

• Sufficient lighting to read and capture video and photographic images of truck and conveyance license plates and container shipping numbers without additional lighting

• LED Lighting shall be capable of operating in both scanning and non-scanning modes.

• Lighting shall be capable of operating off generator and engine-drive power and have an on/off switch accessible to driver.

Movement Safety Requirements

• Backup Audible Tone – The system shall have a clear audible tone that shall be activated at a discernably higher decibel than the system’s normal operating decibel when the system’s gear selection shift is placed in reverse; in both scanning and non-scanning modes.

• Back-up features: Rear View (back-up) Camera with a wide angle and monitor for use by the driver when the system’s gear selection shift is placed in reverse; in both scanning and non-scanning modes (threshold), combined with Surveillance monitor (Objective)

• Reverse Collision Sensor system with audible collision alert tone in the cabin of the vehicle to alert the driver of possible rear collisions.

• Forward Collision Sensor system with audible collision alert tone in the cabin of the vehicle to alert the driver of possible forward collisions.

Level –

• The system shall be equipped with a level indicator that is visible to the operator and displays the tilt (side to side) angle of the unit. Lighting for the level indicator shall provide for constant illumination at night.

• Auto Leveler – The system shall be equipped with an advance leveler that stabilizes the system from side to side compensating for weight displacement when boom is deployed.

Radiation Control Area. - The RCA shall be no wider than 60 ft. and no longer than 120 ft. to scan a 75 ft. vehicle. The RCA boundary will be based on 20 scans in any one hour when scanning at the slowest selectable scan speed in the mobile mode, and at a target vehicle speed between 1.5 to 5.0 mph when scanning in the stationary mode. (See ANSI N43.3-2008 and ANSI 43.14-2011 in Section 2, Applicable Documents on procedures f o r determining the RCA.).

Radiation Signage – The system shall come equipped with ten (10) self-standing bi-lingual radiation control signs (English/French for northern border, and English/Spanish for all other areas). The signs shall be contained and secured within a storage cabinet on the vehicle.

Radiation Dose Rate Limit. - The time-averaged radiation dose rate (above background) for mobile systems shall not exceed 50 µR (0.05 mR) in any one hour for system operators, other workers and members of the general public at the boundary of the RCA. (See ANSI N43.3-2008 and ANSI 43.14-2011 in Section 2, Applicable Documents on procedures for determining the RCA.)

RPM Interference - Mobile Medium Energy LS-NII systems shall not increase the background dose rate at 400 ft. by more than 1.0 µR/hr. Contractors are responsible for verifying the requirement will be met with dose-rate measurements at multiple locations which illustrate the dose rate fall-off taken at their test facility and/or with simulations supporting their conclusion that requirements will be met [data and simulation verification information shall be supplied to CBP]. Final verification of non-interference requirements may be validated with tests on RPM equipment during the system SAT.

Scan Length – The system shall be capable of scanning conveyances 120 ft. in length at the slowest operating speed.

Tunnel Clearance – The system shall have a scan tunnel that is at least 15 feet 6 inches high, (Threshold) and 16 feet high (Objective). The system shall have a tunnel width that is at least 12 feet 10 inches wide (Threshold) and 13 feet 6 inches wide (Objective).

Collision Sensors – The system shall have sensors that alert the driver that the scan target is 12 inches or less from the scan tunnel sides.

• Collision sensor alarm shall be visible and audible (with accelerating audible the closer the vehicle comes to collision). Collision sensor alarm shall be recognizable to the system driver and analyst, and to the target vehicle driver.

• The system shall have collision sensors that will alarm and stop the scan should the target vehicle come within 3 inches of striking the scan tunnel.

• Collision sensor must have visual representation to the drive for evasive action to avoid collision (i.e.: stop, go left, go right).

Ground Clearance – The system and chassis shall have minimum ground clearance of 6 inches (threshold). The system shall be adjustable for ground clearance up to 10 inches (objective).

Continuous Scan Capability – The system shall be capable of scanning up to 5 targets without stopping (Threshold) and up to 10 (Objective), with each target being treated as a single I D S . Target spacing will not exceed 10 feet.

Stationary Scan – The system shall have a stationary scan capability to scan the cargo container with and without external (utility) power. The system shall be able to scan vehicles passing through the scan tunnel at speeds from 2.0 to 10.0 mph. The system shall provide an average vehicle speed to the Operator during stationary scans. Objective for drive-through full-scan capability to scan the tractor/cab at a dose safe for the driver of the target vehicle, and the cargo container at a dose in compliance with this statement of work specifications.

Throughput – The system shall have a throughput of at least 20 conveyances per hour in the mobile mode. Throughput determination will include the time it takes to conduct the scan at the slowest selectable speed, analyze the image, make data entries or scan a manifest, and make a Suspect or Non-suspect decision. The system shall have the capability to analyze previous images while the system is scanning other targets.

Penetration – The system shall provide penetration through greater than 8 inches of Steel (Threshold) with up to 10 inches or more as an Objective; as measured in accordance with ANSI N42.46-2008. The speed used to d e t e r m i n e Penetration shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Contrast Sensitivity – The system shall provide a Contrast Sensitivity of 5% at 50% of maximum Penetration (Threshold) and up to 5% at 80% of maximum Penetration (Objective), as measured in accordance with ANSI N42.46-2008.

The speed used to determine Contrast Sensitivity shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Spatial Resolution. - The system shall provide a Spatial Resolution of 0.5 inches (Threshold) and up to 0.125 inches (Objective), as measured in accordance with ANSI N42.46-2008. The speed used to determine Spatial Resolution shall be the same speed that was used to determine the RCA, i.e., the slowest selectable speed in the mobile mode.

Docking Station and Laptop. System shall be equipped with a key lockable Docking Station for an OIT-approved laptop computer that allows for easy access by the Primary Operator. The docking station shall be installed on each system, and a laptop procured for each system by the Contractor. Laptop specifications will be coordinated through CBP-OIT.

3.4.3. Imaging System Equipment an Equipment Installation

In accordance with this Statement of Work/Performance Specification, the Contractor shall deliver LS-NII Systems incorporating radiographic measurement technology designed to highest industry standards.

3.4.4. Sources & Detectors

The Contractor shall deliver an imaging source or sources, which shall incorporate standard transmission x-ray with or without reflective measurement technology.

As part of the LS-NII system, the Contractor shall deliver an array of detectors that are capable of meeting the Performance Specifications as described in this Statement of Work (SOW).

3.4.5. Computers

As part of the LS-NII system, the Contractor shall provide computers and server(s) with enough memory and speed to meet all the requirements of this SOW. Desktop computers shall be equipped with Operating Systems of Windows 7 32bit or greater; capable of Win8 64bit upgrade. Laptop operating systems shall be Windows 7 64bit or greater; capable of upgrade to Windows 8 64bit. The system shall be capable of upgrade to Windows 10. The system shall have a wireless technology that can be encrypted in accordance with DHS 4300A policy.

The wireless capability shall have the ability to be disabled when not in use.

3.4.6. Computer Security

All LS-NII System computers and software programs that allow a User to analyze, enhance and store an IDS, and the Data Base computers and programs that store the IDS, shall have the following security features incorporated.

3.4.6.1. Identification and Authentication

• User Accounts - Three levels of CBP User access (Operator Level 1, Operator Level 2, and Administrator) shall be provided. Operator Level

1 shall be able to perform all system functions except copying and deleting images or Data Sets. Operator Level 1 shall not have access to User Accounts. Operator Level 2 shall be able to perform all Operator functions plus be able to copy and delete IDS files. Operator Level 2 shall not have access to User Accounts. The Administrator shall be able to perform all Operator Level 2 functions plus have access to User Accounts. The Administrator shall be able to create, edit and/or delete User Accounts. The Contractor shall be required to create a simplified procedure for the Administrator to use in order to create, edit and delete User Accounts. Operator Level 1 & 2 shall not have access to Windows except for those hard drives that have IDS stored on them or the external drives from which an image may be imported or an image or IDS may be exported or copied. The Administrator shall have access to Windows if required for system operation.

• Passwords – All user account passwords shall be required to be strong passwords. Passwords shall meet the requirements of Password Management of the DHS 4300A Sensitive Systems Handbook Version

9.0 dated 2011, or the latest version at the time of award. Strong password requirements are:

o Be at least 8 characters in length o Contain a combination of alphabetic, numeric, and special characters o Not be the same as any of the user’s previous 8 passwords o Should not contain a dictionary word o Should not contain any simple pattern of letters or numbers o Should not be any word, noun, or name spelled backwards or with a single digit appended, or with a two digit “year” string o Should not be the same as the user Id.

Passwords – Automatic password change frequency. The system shall prompt the user to change their password every 90 days.

Password Storage – They system shall store all user account passwords in encrypted form.

3.4.6.2. Access Control

• Unique User Accounts – All users shall have unique account identifiers, including separate operator accounts and administrator accounts for users that have both responsibilities.

• Automatic Account Lockout – The system shall lock a user account for twenty (20) minutes after three consecutive failed logon attempts.

• Automatic Session Termination – The system shall lock the user login session after twenty (20) minutes of inactivity. The system shall require the user to authenticate with the user account password to regain system access after the system lock. After 60 minutes of inactivity, the user account shall be logged off of the system.

• Warning Banner – The DHS Chief Information Security Officer (CISO) stipulates that a warning banner statement be displayed on all DHS systems during user account logon. The system shall prompt the user to accept the current language before they can authenticate with the user id and user password to access the system. The current language required follows:

o You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S.

Government-authorized use only.

o Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties.

o By using this information system, you understand and consent to the following:

You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.

The government may disclose or use any communications or data transiting, stored on, originated from or directed to or from this information system for any lawful government purpose.

You are NOT authorized to process classified information on this information system.

3.4.6.3. Auditing

• Audit Records – System will retain audit records sufficient in detail to facilitate the reconstruction of events if compromise or malfunction occurs. Audit records shall contain at least the following information:

o Identity of each user and device accessing or attempting to access the system o Time and date of the access and the logoff o Activities that might modify, bypass, or negate information security safeguards o Security – relevant actions associated with processing o All activities performed using an administrator account/identity

• Audit Record Access – Audit records and audit logs should be protected from unauthorized access, modification, or destruction.

• Audit Record Retention – Audit records should be maintained on the system for a minimum of ninety (90) days. Audit records shall be preserved for a period of 7 years as part of managing records for each system to allow audit information to be placed online for analysis with reasonable ease.

• Audit Reduction / Report Generation – The system will provide an audit reduction and report generation capability that:

o Supports on-demand audit review, analysis, and reporting requirements and after-the-fact investigations of security incidents o Without altering the original content or time ordering of audit records

• The system will have the capability to tag each scan with the username who conducted it. The username and time shall be displayed with the image and the IDS.

3.4.7. Printed Documents

All LS-NII Systems shall have the capability of printing all the items of an IDS.

This is to include the radiographic image, video capture "snapshots", notes and the Data Sheet and/or Manifest if included as part of the IDS. All printed documents shall have "LAW ENFORCEMENT SENSITIVE" in the header or footer.

3.4.8. Printer / Scanner

Printer shall be capable of quality printing while retaining a limited physical footprint. Scan/print devices may be combined or separate units.

3.5. Systems Integration

Integration of NII inspection system equipment and its supporting Subsystems shall be the responsibility of the NII systems Contractor.

3.5.1. Work Center

The Contractor shall deliver a Work Center ergonomically designed for housing the system's Workstation. The system's Workstation for mobile systems shall be housed inside the mobile unit.

3.5.2. Workstation Integration and Interface

The Contractor shall configure and integrate Workstations and Interface Operating systems to include an Operator Console, computers and computer software, cameras and the controls and displays to scan a conveyance, analyze the image, make a Suspect or Non-suspect decision and store all the items that make up that IDS.

3.5.3. Integrated Image Capture

All LS-NII Systems shall be capable of capturing and displaying all of the items that make up an IDS. The IDS shall include the radiographic image, one or more video capture snapshot images, a Data Sheet or Manifest, Notes, the Suspect or Non-suspect decision and the User's name. This Metadata shall be the sole property of CBP.

3.5.4. Integrated Image Storage

All LS-NII Systems shall be capable of storing a complete IDS for a period of 90 Days, or one (1) Terabyte of storage, whichever is greater. A warning shall be provided when the hard drive used to store the IDS files reaches 70% of its maximum storage capacity and again when it reaches 90% of its maximum storage capacity. The warnings shall alert the Operator for the need to copy and delete IDS files. If the hard drive reaches 99% of its maximum storage capacity, a warning shall be provided and the system will not be allowed to scan until IDS files have been copied and deleted. The system shall provide an option at the Administrator level for auto delete of Non-Suspect files that are over 90 days old.

3.5.5. Integrated Image and Data Capture

All NII Systems will be capable of capturing and displaying all of the items that are contained in an IDP (See FRD Appendix A). The IDP shall include, as applicable, the radiographic image(s), a video capture snapshot image from each system CCTV camera, system metadata, conveyance identification (e.g., container ID, LPR, RFID and QR code reads), a Data Sheet or Manifest, operator notes, the operator’s Suspect or Non-suspect decision and the User's name. Additional IDP element requirements, if applicable, are specified in the FRD. All NII image data and metadata shall be the sole property of CBP.

LPR and Container ID (if applicable) read capability shall be installed as a means to identify a particular vehicle and cargo shipment, and to associate it with its NII image package as the vehicle proceeds through the POE scanning and inspection process. This metadata shall be collected as the vehicle queues to be scanned by the NII sensor system.

3.5.6. Image Download

The image will be configured in a format known as Unified File Format (UFF), where CBP may easily transfer the image from one computer containing the image analysis software to another computer containing the image analysis software without the loss of the image analysis functionality. For traditional NII scanning operations in secondary, this transfer will be conducted manually via secure thumb drive or other OIT-approved media. In future NII-IP integrated system applications, all NII image and metadata shall be collected by CBP and securely transferred to the CBP Cloud.

3.5.7. Integrated Data Package Download / Transfer

The IDP shall consist of the data specified within the FRD. The consolidated IDP shall encompass all of the data required to perform an offsite scan review and analysis as though the reviewer was stationed at the original data site. The system shall also be capable of creating and exporting a summary scan report for each conveyance scanned – the format of this report shall be PDF. For the NII-IP, the complete IDP will be securely transferred via the CBP network to the CBP Cloud and no longer needs to be retained for any extended length of time on the NII sensor system itself. DACTER will associate manifest and/or other more sensitive data with the NII IDP within the XARDIS Cloud database. The contractor shall support the development of an Interface Control Specification (ICD) and physical/data connections to CBP IT systems, to facilitate the connection to CBP network and IDP transfer capabilities.

3.6. Safety Interlocks

The Contractor shall provide safety interlocks such as operator proximity/presence sensors and/or "dead man switches" for all systems for the protection of pedestrian traffic and untrained personnel.

The Contractor shall provide Emergency Stop Switches for all systems which will allow an operator to manually interrupt the scanning process disabling the transmission of X-rays in an emergency or when there is an unauthorized entry inside the system's Radiation Control Area. Emergency Stops shall be strategically located in the driver's cab, in the Work Center, and on the side and rear of the system where applicable. A remote emergency stop switch for the traffic control secondary operator is be an objective. See ANSI N43.3-2008 and ANSI N43.14- 2011 for more details on safety interlocks. When actively radiating the LS-NII system shall provide audible and visible (flashing lights) alarms.

3.7. Reliability, Availability and Maintainability

Each NII system is expected to have the highest Reliability, Availability and Maintainability achievable for this type of technology. The following are minimum requirements for these systems.

3.7.1. Classification of Reliability Critical Items

A Critical Item is an identified weak link in a system, has an adverse impact on, or contributes to failures of the system performing its mission, creates potential safety problems, or contributes to other areas of high risk to overall system reliability. The Contractor shall classify all LS-NII items as critical if one or more of the following conditions are satisfied:

• Item represents a significant new development or application.

• Item has critical failure modes.

• Item has history indicating need for improvement. A Preplanned Product

Improvement Plan (PPIP) shall be developed and provided by the Contractor for any item with a history of needing improvement.

• Item has known operating life, limited shelf life, or environmental sensitivity (e.g., vibration, thermal, etc.) that warrants controlled surveillance.

• Item whose failure can result in the failure of the system, and which is not compensated by redundancy or alternate operational procedures

3.7.2. Basic Reliability Quantitative Requirements

The system shall possess a mean time between failure (MTBF) of no less than 1000 hours or 8000 scans. The operating life of the NII system shall be no less than 10 years. The NII system shall normally operate 16 hours a day, 6 days a week, 52 weeks a year during an operating life of 10 years but it shall be capable of surge operating 24 hours a day, 7 days a week for 2 weeks (336 hours).

3.7.3. Control of Reliability Critical Items

The Contractor shall be responsible for the Quality Control of critical items, which shall include as a minimum:

• Procedures for the procurement of, and availability of, spares of critical items.

• Criteria and procedures for the design and redesign of critical items

• Procedures for controlling and monitoring of critical items after manufacture

(e.g., date coding, traceability, assembly techniques, test requirements, acceptance test requirements, control of sub-Contractors' and manufacturers' controls, in-process controls, special handling and storage requirements).

The contractor shall address the quality control of critical items in Data Item Description number A012 Quality Assurance Plan.

3.7.4. Availability - Operational Availability (Ao)

An average Ao by unit shall be calculated using data for Work Orders (WOs) completed during the reporting period:

AO = Total Hours by Unit – Down Time Hours by Unit

Total Hours by Unit

Operational Availability is defined as the percentage of time during the reporting period that a specific unit type listed in individual task orders is available to support the operations for which it was designed. Systems undergoing Preventive Maintenance actions are considered to be available to support operations under this definition. The following lists the standard Ao targets for equipment types by location category:

95% - Large Scale Equipment in Continental United States (CONUS) locations

90% - Large Scale Equipment in Outside Continental United States (OCONUS) locations

Customer Wait Time (CWT) – The Contractor shall restore systems reported in a non-operational status to a satisfactory operational status within the CWT corresponding to the Ao’s above, based on a 720-hour month.

WOs for work performed under on-demand (other maintenance support services) and WOs with customer delays are excluded from all the formulas above.

The Contractor shall meet or exceed these performance standards while complying with all applicable State and Federal regulations. In addition, the quality of deliverables, operational availability levels achieved, coordination, and reporting requirements represent the measurements considered appropriate to the performance of this work statement.

3.7.5. Service Calls and Work Orders

Work Completion Form - The WCF is a unique form to a specific maintenance event. The WCF shall include the WO number assigned by the Government, a description of the maintenance action performed, identify the failure cause or part if any, a list of replaced parts, usage data or scan count since last maintenance activity, name and email address of the Port Official that witnessed completion, and completion date/time. The Contractor shall forward both the Corrective Maintenance WCF within 24 hours and the Preventative Maintenance WCF within 48 hours to the ILD Maintenance Dispatch Center upon completion of each maintenance action, E-mail: MDC@cbp.dhs.gov. Call the Technology Service Desk (TSD) at 1-800-927-8729, choose the option “NII and RPM” to reach the Maintenance Dispatch Center.

The Contractor shall provide one (1) copy of the completed WCF to the Government Site Representative.

Work Site Cleanliness – The Contractor shall properly dispose of all damaged parts; components; assemblies; subassemblies; consumables; and Petroleum, Oil, and Lubricants (POL), unless otherwise directed to retain for failure item analysis or other reasons.