LMIS Pre-Proposal Conference PowerPoint Slides.pdf

DEFENSE LOGISTICS AGENCY

THE NATION’S COMBAT LOGISTICS SUPPORT AGENCY

WARFIGHTER FIRST

FOR OFFICIAL USE ONLY

DLA Distribution Logistics Modernization Integration Support Contract (LMIS) Pre-Proposal Conference

SP3300-20-R-5002

December 10, 2019

WARFIGHTER FIRST

Administrative and Introductions

• Administrative Remarks

– The written information contained in the final solicitation and amendments overrules and supersedes any information presented at this conference which conflicts with the written documentation.

• The attendance roster, as well as the presentations, will be posted to the beta.SAM.gov website: https://beta.sam.gov http://www.fbo.gov/

Administrative and Introductions

• Feedback is welcome

• A Question and Answer session will be held at the conclusion of

Day 2. All questions and answers from this session will be posted to beta.SAM.gov via an amendment to the solicitation.

• Written questions and answers received before the deadline will be posted to beta.SAM.gov via an amendment to the solicitation.

• Attendees are asked to submit their questions to the Contracting Specialist:

– Jason Taylor (Jason.1.Taylor@dla.mil)

Solicitation Overview

• Key Points:

– Ensure the Documents (SF1449, SF30, proposal) are signed.

– While both pools are being solicited simultaneously, Pool 1, Enterprise Facility Modernization, and Pool 2, Material Handling Capability may not be awarded simultaneously.

– Offerors are permitted to submit a proposal for one Pool or both Pools. If an offeror proposes under both Pools, the offeror must submit separate and distinct proposals for both pools.

– Offerors are authorized to submit alternate proposals for each Pool. If the offeror submits alternate proposals, the offeror must submit a complete proposal for each alternative.

– Offerors are hereby notified the HDR Engineering, Inc. of the Carolinas and St. Onge Company, non-Government entities, participated in the development of all of the documents associated with this RFP. Offerors are not permitted to work with or contact these entities. Neither of these entities may assist with the development of any proposal.

Solicitation/Contract/Order of Commercial Items

Supplies or Services and Price

• Contract Type - Period of Performance

– Multiple Award Indefinite Delivery / Indefinite Quantity (ID/IQ) Firm-

Fixed-Price (FFP).

– This ID/IQ will be structured with two pools

• Pool 1 – Enterprise Facility Modernization/Integration

• Pool 2 – Material Handling Capability

– The Government intends to award multiple contracts resulting from the solicitation to at least two responsible offerors for both Pool 1 and Pool 2.

– These contracts are for a five (5) year ordering period.

Supplies or Services and Price

• Minimum and Maximum:

– For Pool 1, Enterprise Facility Modernization, the value of the minimum guarantee is $500,000.00 for each awardee. The contract minimum will be obligated at time of contract award. The maximum value of the supplies/services for Pool 1 is $205,000,000.00

– For Pool 2, Material Handling Capability, the value of the minimum guarantee is $250,000.00 for each awardee. The contract minimum will be obligated at time of contract award. The maximum value of the supplies/services for Pool 2 is $150,000,000.00.

Supplies or Services and Price

• Ordering:

– Any supplies and services to be furnished under this contract shall be ordered by issuance of delivery orders or task orders by the individuals or activities designated in the Schedule.

– The first delivery order for Pool 1 will be for the EDC Modernization. The award of the delivery order will be based on the instructions to offerors and evaluation criteria specified in the RFP.

– The entire EDC Modernization effort as outlined in the solicitation and any subsequent changes and modifications will be awarded to one offeror without further competition.

Solicitation Attachments

LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

(a) This solicitation/award consists of the following documents, exhibits, and other attachments:

The following attachments apply to Pool 1 and Pool 2:

Attachment 1 – Basic ID/IQ PWS Attachment 2 – Past Performance Questionnaire Attachment 3 – Subcontracting Plan Template Attachment 4 – TE 1.1 Contractor Personnel Security Attachment 5 – TE 1.2 CAC Procedure Attachment 6 – CDRLS

Solicitation Attachments

The following attachments apply to Pool 1:

Attachment 7 – Pool 1 Schedule Tab 1 – Pool 1 Schedule Tab 2 – Pool 1 CLIN 0002 Labor Tab 3 – EDC Schedule Page

Attachment 8 – Pool 1 Continuation of Supplies Services Instructions Attachment 9 – EDC Modernization PWS Attachment 10 – EDC Modernization Compliance Checklist Attachment 11 – Part 3 – Equip Req – Attachments Attachment 12 - Part 5 – Facility Req - Attachments Attachment 13 – Implementation Project Schedule Attachment 14 thru 30 – Reserved (DIDs and CDRLs)

Solicitation Attachments

• The following Pool 1 Attachments for this Request for Proposal are available through the Safe Access File Exchange (SAFE):

– Attachment (9) – EDC Modernization PWS

– Attachment (11) – Part 3 – Equip Req – Attachments

– Attachment (12) – Part 5 – Facility Req – Attachments

• To request these attachments please provide the following information to Jason Taylor by e-mail at Jason.1.Taylor@dla.mil:

– Legal Name

– Email Address

– Company Name

– Cage Code

• Access to the RFP Attachments will only be considered for vendors who are registered in System Award Management (SAM) and are contemplating submitting a proposal in response to this solicitation.

• In order to limit control of the RFP Attachments, documents must be handled as “For Official Use Only.”

• All offerors, other than the awardee, are required to destroy the Attachments once contract award is announced.

• If it is determined you are eligible to receive the Attachments, you will be receive a separate email with a link and a password to access the Request For Proposal Attachments on the DoD SAFE website.

Solicitation Attachments

The following attachments apply to Pool 2:

Attachment 31 – Pool 2 Schedule Tab 1 – Pool 2 Schedule Tab 2 – Pool 2 CLIN 0002 Labor Tab 3 – AMHE Schedule Page

Attachment 32 – Pool 2 Continuation of Supplies Services Instructions Attachment 33 – AMHE SOW Attachment 34 – AMHE Drawings Attachment 35 – AMHE CDRLS Attachment 36 – AMHE DIDs

Conclusion

• Keep the questions relevant to the issues in the solicitation

• Reading and understanding the solicitation reduces questions

• Monitor beta.SAM.gov for Amendments issued against the solicitation

• Don’t expect extensions from the due date and time

• Make the initial proposal your best offer as the Government intends to award without discussions

• Communicate through the proper channels (Contracting Officer and Acquisition Specialist)

THANK YOU FOR YOUR INTEREST

IN THIS PROCUREMENT

WARFIGHTER FIRST

Base PWS for Logistics Modernization Integration

Support 10 December 2019

WARFIGHTER FIRST 16

2.2 Operating Conditions

• Place of Performance - Base contract Administered out of New Cumberland, Pa and the Delivery Order (DO) will designate the Place of Performance.

• Period of Performance- Period of Performance for the basic IDIQ is not to exceed five

(5) years from the date of contract award.

WARFIGHTER FIRST 17

2.4 Personnel

• Base IDIQ Contractor Contractor Oversight

• Program Manager (PgM)

• Quality Assurance/Quality Control (QA/QC) Manager

• Delivery Order Contractor Oversight

• Project Manager(s) (PM)

• Personnel Recruitment and Qualifications

• Continuing Recruiting Program

• Qualifications or Competence

WARFIGHTER FIRST 18

2.6 Safety and Occupational Health

(SOH)

• SOH Plan

• Upon DO awards, the Contractor will be required to provide a SOH Plan and meet OSHA requirements.

• Enterprise Safety Application Management System

(ESAMS)

WARFIGHTER FIRST 19

2.7 Documentation and Records

• Government will have unlimited rights to all documents/material produced under this contract unless explicitly protected by copyright

• All documentation, records, and schedules produced by the Contractor in performance of this contract are the property of the Government and will remain so upon termination or completion of the contract.

• All documentation, records, and schedules are subject to 5 U.S.C. § 552 Freedom of Information Act and 5 U.S.C. § 552a Privacy Act of 1974.

• These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer.

WARFIGHTER FIRST 20

Sections C-4 and C-5

• C-4 GOVERNMENT PROPERTY (GP), EQUIPMENT

(GE), SYSTEMS, TRAINING, and SUPPORT SERVICES.

• C-5: CONTRACTOR FURNISHED MATERIAL,

SUPPLIES, EQUIPMENT, TRAINING, SUPPORT

SERVICES and RESPONSIBILITIES.

WARFIGHTER FIRST 21

SECTION C-6: SPECIFIC DELIVERABLES &

TASKS

• Enterprise Facility Modernization Pool

– Conducting and spearheading massively complex projects to perform DLA enterprise wide / entire DLA Distribution Center full solution upgrade/retrofit

– Integrating DLA enterprise wide /entire Distribution Center solutions with DLA business processes

– Ensuring DOD cybersecurity compliance for entire Distribution Center solutions DLA enterprise wide.

– Sustaining entire Dist. Center solutions for DLA enterprise

• Material Handling Capability Pool:

– Spearheading complex projects to identify, design, purchase, install, and integrate proven and reliable technologies to fulfill specific MHE capability gaps / requirements at DLA Distribution Centers

– Integrating MHE solutions with DLA business processes and verifying compatibility

– Ensuring DOD cybersecurity compliance for specific MHE solutions

– Sustaining and maintaining individual MHE solutions

WARFIGHTER FIRST 22

SECTION C-6: SPECIFIC DELIVERABLES &

TASKS CONTINUED

• LMIS Task Requirements for DOs

• Program Integration and Management

• Project Management

• Concept Development

• Requirements Analysis

• Design

• Development

• Integration and Testing

• Installation and Implementation

• Change Management and Training

• Operational, Sustainment, Maintenance, and Lifecycle Support

• Disposition

Selected Task requirements are going to vary for each delivery order

WARFIGHTER FIRST 23

6.2 Quality Control Plan (QCP)

• The Contractor must provide a QCP compliant with FAR 52.246-4(b), for Each DO.

• Contractor QCP’s will be developed which address methods for meeting performance standards and delivery order requirements.

• Government personnel will create a Quality Assurance Surveillance Plan (QASP) to ensure DO requirements are achieved and provide a systematic method to ensure QCP effectiveness.

WARFIGHTER FIRST 24

Contract Data Requirements List (CDRL) Technical Exhibits (TE)

• CDRL’s and Technical Exhibits (TE) Samples provided with the base PWS are anticipated to be part of each DO released for either Pool. The number of CDRLs and TEs will be contingent upon the duration and complexity of specific DO’s.

– CDRL A001 - Monthly Contractor Employee Common Access Card (CAC) Report

– TE 1.1 Contractor Personnel Security

– TE 1.2 CAC Procedures

Thank you for your interest in the LMIS

Requirement.

WARFIGHTER FIRST

Materials Handling Capability – LMIS Pool 2

AWOS Sample SOW Technical Specifications

Corey Lake

WARFIGHTER FIRST 27

LMIS Pool 2: AWOS Agenda

• Definitions

• Existing AWOS

• Layout of AWOS within EDC

• Project Scope

• Technical Requirements

• Challenges / Issues

• Pool 2 Admin Notes

WARFIGHTER FIRST 28

LMIS Pool 2: AWOS Definitions

• AWOS 1 – this is an existing system that will remain in operation within the EDC; it will become the back up once AWOS 3 is fully-mission capable

• AWOS 2 – this was an existing system that has been de-commissioned when AWOS 3 was installed

• AWOS 3 – this is the new AWOS / DAWS system that has been installed and will be used as the primary AWOS system in the EDC

WARFIGHTER FIRST 29

LMIS Pool 2: Existing AWOS

• Process between 5,000 and 15,000 packages per day.

• Packages sizes vary from small “Jiffy” bags envelopes 11“ x 7.5“(LxW) to boxes 25” x 18 ” x 15” (LxWxH) and the products may weigh 1oz. to 40 pounds.

• Products are supplied to this system via belt and tote conveyor.

• An operator empties the transport totes filled with parcels and manually places them on the induct belt or spaces the belt supplied parcels with a minimum of a 4’ spacing gap, to feed into the AWOS1 dimensioning and scanning unit.

• After scanning, the item is rate‐shopped at various small parcel carriers while being transported to a downstream sortation conveyor.

• Approximately 100’ downstream, a second scanner re‐reads the bar code, inducts the parcel onto a single sided shoe sorter, and diverts the parcel to the assigned small parcel carrier labeling line.

• At the end of each of these lines, a worker will scan the product which triggers the generation of the appropriate shipping labels.

• The labels are manually applied to the parcels and the product is placed into the carrier’s dedicated tri‐wall container (corrugated Gaylord box on a pallet).

• When each container is full, they are moved to the dock and queued for outbound shipment.

• The tri-wall is replaced by fitting an empty tri‐wall with the appropriate carrier information signage and staging it at the labeling area.

WARFIGHTER FIRST 30

FOR OFFICIAL USE ONLY

DAWS (Dim & Weigh System) -Increased accuracy -360* Scanning with Auto-Label -Less Touchpoints = accuracy

New AWOS within future AMHE EDC

LMIS Pool 2: AWOS Layout within future EDC

WARFIGHTER FIRST 31

New AWOS within future AMHE EDC

LMIS Pool 2: AWOS Layout within future EDC

New Requirements:

1. Automatic induction into the new Walk & Pick Conveyor/tote conveyors from high back pick area

2. 360 degree Scan Tunnel

3. Automatic tote emptying, parcel singulation, orientation, and spacing

4. Automatic shipping label printing and application based on bar codes on parcels

5. Parcels sorted to discrete carrier lanes or manual process lanes

6. Parcels in discrete carrier lanes waterfall into tri-walls

7. Balance of functionality the same as AWOS 1

WARFIGHTER FIRST 32

LMIS Pool 2: AWOS -- AUTO LABEL

FOR SMALL PARCEL

Fully automated small parcel handling & labeling system

– goal = 6 Sigma label accuracy.

360 degree scan tunnel and fully automatic print and apply machines.

LMIS Pool 2: AWOS Project Scope

1. Decommission and remove existing backup AWOS 2 system

a. Contractor responsible for disposal of items not designated for reuse

b. Items for reuse: AWOS 2 Cube-Scan-Weigh Subsystem, Tote Transport Incline and Decline Belt Conveyors, Ceiling Hung Tote Transport Roller Conveyor, and 24 Volt Conveyors from Center Divert of 3:1

2. Upgrade existing merge and sort systems that feed AWOS 1 & 2 systems

a. Three new infeed conveyors will release boxes, envelops, and red empty totes in an indexing manner to provide sufficient product gapping for scanning sortation

b. Parcels will transfer onto a second roller conveyer, are then top scanned and subsequently sorted

c. Straight-through divert transport AWOS 1 destined products, no-reads, and empty red totes

3. Install all new AWOS 3 parcel collection, singulation, conveyor, transfer, and scanning systems

a. AWOS 3 will work independently from AWOS 1; however, both AWOS 3 and 1 shall be able to operate simultaneously

b. Single stream of parcels will be conveyed on to Parcel Orientation Confirmation Subsystem

c. Singulated parcels will be optimally gapped during transport to the Cube-Scan-Weigh Subsystem and rate shopped for optimal parcel carrier

d. MIL and Shipper labels applied and rescanned for quality/correctness

e. Parcels diverted to assigned carrier lanes, divert for mislabeled parcels or print and apply re-induct conveyor purging, divert for manual process of international carriers, or divert for collection of al miscellaneous manual processing and exceptions

f. Parcels diverted to dedicated lines go through automatic tri-wall filling; system will signal when tri-walls are filled

g. International parcels diverted to a discrete area for manual labeling/consolidation

LMIS Pool 2: AWOS: Project Scope (continued)

4. Install full automatic labeling systems on new AWOS 3 conveyor system

a. Apply MSL and Carrier Shipping labels

b. 100 ft of transport conveyor between Cube-Scan-Weigh Substation and Automatic Print and Apply

System to ensure 99.9% rate-shopping process success level

c. 2 pair of printer machines used (one set for back up); top applied, tamp or blow applicator

d. Labels scanned after application to ensure correctness

5. Install AWOS 3 sortation system that automatically fills dedicated parcel carrier containers

a. Divert sorting accuracy of 99.9%

b. Process flat poly and paper Jiffy Pack envelopes and corrugated boxes (flat sided or bulging)

c. Ten diverts required: International, Label Jackpot, No Read (labels manually applied), 7 dedicated carrier lines

d. Parcels waterfall from conveyor into awaiting tri-wall container

6. Install new PLC programming and controls, and power control panels

a. ControlLogix must be provided with standard Allen-Bradley specifications

7. Modify and install new pre-induction transport conveyor to AWOS 1

8. Modify existing conveyor systems interfaces and controls to provide an integrated system

LMIS Pool 2: AWOS Technical Requirements

Key Technical Requirements/Specifications for System/Subsystems can be found in the SOW:

3.2 System Components and Performance Parameter

3.3 Materials to be Handled

3.4 Government Design

3.5 System Requirements (General)

3.6 Operational Technology Cybersecurity Requirements

3.7 Control Equipment Specifications

3.8 Conveyor Systems

3.9 Conveyor Safety Measures

3.10 Work Station Requirements

LMIS Pool 2: AWOS Challenges / Issues

1. Packaging

a. Jiffy Bags (labeling)

b. Light Packages (tote dumping and labeling) – twists after first stamp

2. Labeling

a. Ease of replacing labels in the printers

LMIS Pool 2 Admin Notes

1. Documents found at beta.SAM.gov (https://beta.sam.gov/opp/febc40b8ca8b4b39b78e9754f43ee16d/view?index=opp&sort=-relevance&page=1&keywords=lmis&opp_inactive_date_filter_model=%7B%22dateRange%22:%7B%22startDate%22:%22%22,%22endDate%22:%22%22 %7D%7D&opp_publish_date_filter_model=%7B%22dateRange%22:%7B%22startDate%22:%22%22,%22endDate%22:%22%22%7D%7D&opp_modified_ date_filter_model=%7B%22dateRange%22:%7B%22startDate%22:%22%22,%22endDate%22:%22%22%7D%7D&opp_response_date_filter_model=%7B %22dateRange%22:%7B%22startDate%22:%22%22,%22endDate%22:%22%22%7D%7D&date_filter_index=0&inactive_filter_values=false )

2. Specific Documents for Pool 2 AMHE:

a. RFP SP3300-20-R-5002

b. RFP SP3300-20-R-5002 Amendment 0001

c. Attachment 1 – Basic IDIQ PWS

d. Attachment 31 – Pool 2 Schedule

e. Attachment 32 – Pool 2 Continuation of Supplies Services Instruction

f. Attachment 33 – AMHE SOW

g. Attachment 34 – AMHE Drawings (consists of 5 separate files for download)

h. Attachment 35 – LMIS IDIQ AMHE and Systems Sample TO CDRL DD Form 1423

i. Attachment 36 – AMHE DIDs (consists of 19 separate files for download)

WARFIGHTER FIRST

Materials Handling Capability – LMIS Pool 2

Preproposal Conference

DLA Information Operations Technical Specifications

WARFIGHTER FIRST 39

• Key Terms / Definitions

• AWOS Project Background & Lessons Learned

• Integration of Software/Firmware

• Cybersecurity

LMIS Pool 2 – AMHE and Systems DLA Info Ops Agenda

LMIS Pool 2 – AMHE and Systems DLA Info Ops Key Terms / Definitions

• Operational Technology (OT)

– Per RFP: “The hardware and software dedicated to identifying, detecting, altering/changing, or manipulating of real-world processes through monitoring and/or controlling of physical or virtual devices”

– Virtually all of AMHE falls within this definition

• Industrial Control Systems (ICS) comprises systems that are used to monitor and control industrial processes

• Monitoring and processing is managed via programmable logic controllers (PLC)

• Distributed Process Control (DPC) systems

• Supervisory Control and Data Acquisition (SCADA) systems that provides a graphical user interface

LMIS Pool 2 – AMHE and Systems DLA Info Ops Key Terms / Definitions

• Privileged Access

– Per RFP: “An authorized user who has access to the Government network and/or OT system/subsystem with the capability of control, monitoring, and/or administration functions”

• Includes users who configure or update the control functions beyond normal user level (both key and non-key personnel)

– Users requiring privileged access must comply with DoDM 8570.01-M “Information Assurance Workforce Improvement Program”

• Requirement is for each user to possess certifications in baseline and computing environment (CE)

• Must also posses clearance eligibility for IT-II or IT-I as applicable

• Details provided in Cybersecurity requirements section of briefing

WARFIGHTER FIRST 42

DAWS (Dim & Weigh System) -Increased accuracy -360* Scanning with Auto-Label -Less Touchpoints = accuracy

New AWOS within future AMHE EDC

Background - AWOS Layout within future EDC

WARFIGHTER FIRST 43

LMIS Pool 2 – AMHE and Systems Background - AWOS Auto Label for Small Parcel

2018 awarded project - fully automated small parcel handling

& labeling system – 6 Sigma label accuracy.

DLA’s first 360 degree scan tunnel and fully automatic print and apply machines.

LMIS Pool 2 – AMHE and Systems Background - AWOS Lessons Learned

Challenges:

• Consistent responses from WMS

– Inconsistent timing for the printers

– Inconsistent response time to WCS

– AWOS requires the most communication from WMS

• All MAC addresses must be visible on the DLA host network

– Cybersecurity requirement from J6

LMIS Pool 2 – AMHE and Systems Integration of Software/Firmware Background

• Any proposed AWOS software must be capable of integration with the existing DLA Warehouse Control System (WCS)

– AKA: Equipment Control System (ECS)

• Existing DLA WCS is pass-through / Mid tier, governed by legacy Warehouse Management System (WMS)

– AKA: Distribution Standard System (DSS)

– Will be replaced in coming years with SAP based software using iDoc communication format

• WMS is system of record for all material handling business processes

– Utilizes a Standard Movement Message (SMM) to communicate instructions down to the WCS

• 124 alphanumeric character message in Flat File Format (FFF)

– Utilizes a Standard Up Message (M02) to receive communications from the WCS

• 80 alphanumeric character message in FFF

Integration of Software/Firmware Background

Integration of Software/Firmware Background

Technical Requirements:

• WCS mentioned in the following SOW sections:

– Section 3.1.3

– Section 3.1.4

– Section 3.1.6

– Section 3.2.2

– Section 3.2.3

– Section 3.2.6

– Section 3.7.1

– Section 3.7.11

– Section 3.7.12

• Communications facilitated by User Defined Tags (UDTs)

– UDTs defined post award.

• WCS (ECS) utilizes ASCOMM communication library.

WCS Technical Requirements

Factor 2: Subfactor (b): Integration of Software/Firmware

• Focuses on the soundness of the contractor’s plan to satisfy all OT requirements related the integration of the AMHE solution

– At a minimum, the offeror’s description must cover the following:

• A thorough description of a robust Software Development Plan (SDP) pertinent to the proposed AMHE system

• Identification of critical software issues

• Software development involved

• Support, testing, and certification/validation of the system

• Description of software quality testing effort

• Describe and fully articulate the proposed methods of integrating all software/firmware with the hardware of the proposed system along with the existing facility that will house it.

• Network integration

• Connection and integration to DLA’s Mid tier WCS

• Proposals will be evaluated to determine the completeness of the offeror’s Software Development Plan and the soundness of their methods for integration of all software/firmware with the hardware/equipment supplied

“How” Pool 2 – AMHE and Systems Software Integration will be evaluated

Cybersecurity Background

• Security countermeasures, based on best practices and standards, protect the ICS critical assets through multiple layers of defenses, thereby improving protection for operations, personnel, and technology.

• Applying Defense-in-Depth strategies to ICS environments improves security by:

– Raising the “cost” of an intrusion

– Improves probability of detection

– Enhances capability to defend against a malicious threat actor.

• The end goal is to reduce the opportunities for an adversary to take advantage of the ability to move laterally through an entity’s networks/systems, and forcing the adversary to have a greater capability in order to accomplish their goal.

• DoD Cybersecurity is comprised of multiple instructions, directives, and manuals

– Primary DoD Instruction is DoDI 8500.01 – Cybersecurity

– Primary process for implementation is DoDI 8510.01 – Risk Management Framework (RMF) for DoD IT

• DoD Risk Management Framework (RMF):

– Process to reduce, mitigate, and/or avoid risks and vulnerabilities to an acceptable level

– Six (6) step process:

Cybersecurity Background

1. System Categorization

• Categorize, describe, and initiate registration of the OT solution(s) and/or systems as well as create the System Security Plan (SSP)

2. Select Security Controls

• Selection of security control(s) baseline for the OT solution(s) and/or system(s)

• Incorporates several updates to SSP and underlying documentation as part of security authorization package

3. Implement Security Controls

• Implementation of selected security control(s) and baseline as identified in RMF Step 2

• Continues incorporation of updating the SSP and underlying documentation as part of security authorization package

4. Assess Security Controls

• Assessment of the implemented security controls and baseline as identified in RMF Steps 2 and 3

• Continues incorporation of updating the SSP and underlying documentation as part of security authorization package

5. Authorize The System

• Final checks / punch-list of SSP, security authorization package, and achieve an Authority to Operate (ATO) / Authority to Connect (ATC)

• Must be achieved / completed prior to Initial Operating Capability (IOC)

6. Monitor Security Controls

• Sustainment of OT solution(s) and/or system(s) for the remaining duration of contract performance after completion of Step 5

• Continuously assess security posture and update SSP or underlying documentation as necessary

Cybersecurity Background

LMIS Pool 2 – AMHE and Systems Cybersecurity Background

• DLA’s approach to Cybersecurity must take into account the increasing threat environment to Industrial Control Systems (ICS)

– All Operational Technology (OT) solutions must be designed by contractors with Cybersecurity as part of system engineering

• Purdue Model for Control Hierarchy (ISBN 1-55617-265-6)

• Provides logical and/or physical architecture for networking, security hardware, software, and methods

• Zone based approach with levels 0 - 5

– OT systems/subsystems will need to be configured by “Privileged Access” users on Government Furnished Equipment (GFE) prior to Initial Operational Capability (IOC)

• “Privileged Access” users must meet requirements in DoDM 8570.01-M

• Government will provide final network environment and Human Machine

Interface (HMI) terminals

• Contractor must identify any software intended to be used as part of proposal to be evaluated

Defense-in-Depth

• Risk Management

• Cybersecurity Architecture

• Physical Security

• Network Architecture

• Network Perimeter Security

• Host Security

• Security Monitoring

• Vendor Management

• The Human Element

• Cyber Hygiene

• Robust CM process

• Disaster Recovery

Purdue Model Segmentation

“How” Pool 2 – AMHE and Systems Cybersecurity will be evaluated

Factor 2: Subfactor (c): Cybersecurity

• Focuses on contractor’s comprehension of the cybersecurity requirements described in the RFP and their description of efforts to meet / exceed them

– At a minimum, the offeror’s description must cover the following:

• Mannerisms used to incorporate cybersecurity into proposed solution

– Include preliminary solution diagram(s) formatted in Purdue Model

– Identify “how” the offeror’s proposed system / subsystem design would comply with:

» DODI 8510.01 “Risk Management Framework (RMF) for DoD Information Technology

» NIST SP 800-82 “Guide to Industrial Controls System (ICS) Security”

» NIST SP 800-160 “Systems Security Engineering (SSE)”

• Cybersecurity staffing / resources

– Identify “how” these resources will be used to comply with the cybersecurity requirements

– Ensure proposed resources meet or exceed requirements in DoDM 8570.01-M “Information Assurance Workforce Improvement Program”

• Overview of patch management / approach to prevent, detect, and respond to software risk(s)

LMIS Pool 2 – AMHE and Systems Required Contractor Key Personnel

• Project Manager

– Individual with authority to act as principle POC to KO and Government for contractor and responsible for maintaining contractor oversight

– Not expected to be required to comply with DoDM 8570.01-M

• Systems Security Engineer (SSE)

– Principle POC responsible for the design, development, implementation, integration, testing, and/or ensuring compliance to the Cybersecurity requirements for the OT system/subsystem.

– Will be required to comply with DoDM 8570.01-M

• Senior Operational Technology (OT) Specialist

– Acts as key principle on contractor staff with broad real-world engineering expertise on the specific OT system/subsystem

– Supports design, evaluation, integration, testing, deployment, and sustainment

– May be required to comply with DoDM 8570.01-M

• Depends on assigned duties and if privileged access is required

LMIS Pool 2 – AMHE and Systems DoDM 8570.01-M Cybersecurity Requirements

• Applicable DoD Approved Cybersecurity Baseline certs (https://public.cyber.mil/cwmp/dod-approved-8570-baseline-certifications/)

• Applicable DLA Approved Cybersecurity Computing Environment certs

– Microsoft Certified IT Professional (MCITP): Enterprise Administrator (EA)

– MCITP: Server Administrator (SA)

– Microsoft Certified Master (MCM): Windows Server (WS) 2008 or higher

– Microsoft Certified Architect (MCA): Microsoft Windows Server Directory

– Microsoft Certified Solutions Expert (MCSE): Windows Server 2012 or higher

– MCSE: Expert Messaging

– Microsoft Certified Solutions Associate (MCSA): WS2008 or higher

– Global Information Assurance Certification (GIAC): Certified Windows Security

Administrator (GCWIN)

– CCNA Security

– CySA+ **

– GICSP

– GSEC

– Security+ CE

– SSCP

– CASP+ CE

– CCNP Security

– CISA

– CISSP (or Associate)

– GCED

– GCIH

https://public.cyber.mil/cwmp/dod-approved-8570-baseline-certifications/

“How” Pool 2 – AMHE and Systems Cybersecurity will be evaluated

• Proposals will be evaluated to determine:

– Offeror’s cybersecurity design and approach for proposed system(s) / subsystem(s) compliant to DODI 8510.01 and other applicable guidance

– Overall offeror’s comprehension / understanding of cybersecurity requirements

– Extent of offeror’s employment of a disciplined, structured System

Security Engineering (SSE) process

– Mannerisms the offeror proposes to identify and mitigate vulnerability risks to the proposed system

LMIS Pool 2 – AMHE and Systems DLA Info Ops Key Deliverables

• Draft and final OT/IT Hardware baseline inventory

– Servers, thick clients and any specific OT/IT peripherals required

• Draft and final Software baseline inventory

– All special software required to run, monitor, or otherwise manage the AMHE system

• 8570 Requirements

– Submission of initial Personnel

– M and D accounts

– Reoccurring report throughout duration of contract

• Submission of draft and final PPSM

– Ports, protocols, and service management

• Submission of draft and final Network diagram

– Must clearly delineate AMHE OT network up to the point intersects with DLA’s existing OT network

• Submission of draft and final test plans

WARFIGHTER FIRST

DLA Distribution Logistics Modernization Integration Support Contract (LMIS)

Pre-Proposal Conference Pool (2)

Instructions to Offerors Pool (2), Material Handling Capability

• Key Points:

– Communications Between the Government and Offerors

• Procedure and Deadline for submitting questions

– All questions shall be submitted by electronic mail to Jason.1.Taylor@dla.mil

– Solicitation question submittal due date is December 20th at 2:00pm Eastern

Local Time.

– Proposal submission and deadline

• Only electronic submission via DoD SAFE Web Application (https://safe.apps.mil) in

PDF, Microsoft Word, Excel and/or AutoCAD Format shall be considered. Files shall be sent via DoD SAFE to Jason.1.Taylor@dla.mil and Karen.Ghani@dla.mil. The DoD SAFE link, or links, with the complete proposal must be time-stamped or received in the Acquisition Specialist, Jason Taylor, e-mail on or before the proposal submission deadline.

• Proposals due date is January 31st at 2:00pm Eastern Local Time IAW FAR 15.208(b)(1)(i)

• Offerors are reminded of the regulation contained in FAR 15.208 – Submission, Modification, Revision, and Withdrawal of Proposals for timeliness of proposal submissions regarding transmission through an electronic commerce method.

• Proposal Preparation Requirements Key Points:

– Ensure the table of contents page numbers correlate to the correct pages.

– All text shall be no less than 10 point font.

• Plan of Action and Milestones (POAMs) shall be no less than 10 point font

– Ensure resumes are marked “PERSONALLY IDENTIFIABLE

INFORMATION (PII).”

– All pages of submittals shall include the statement “SOURCE

SELECTION SENSITIVE INFORMATION – SEE FAR 2.101 &

3.104.”

Volume I Past Performance Proposal

Instructions to Offerors

• Evaluation Factor 1: Performance Confidence Assessment Proposal

– The data must be relevant. This is defined as those similar in terms of scope, magnitude of effort, and complexity of the requirement.

– Performance must have occurred during the last five (5) years. If an Offeror has no relevant experience, this must be stated.

– Questionnaire

• Offeror/Major Subcontractor shall ask their customer to complete the questionnaire (Attachment 2) and return directly to the Acquisition Specialist.

– Data must be provided for Offeror and any major subcontractors. This is defined as “those providing twenty percent (20%) of total dollar threshold AND/OR twenty-five percent (25%) of total man-hour effort”. Only prime Offeror and major subcontractors information will be evaluated.

– Relationships between subsidiaries, sister and predecessor companies must be defined.

Volume II Technical / Business Approach Proposal

Instructions to Offerors

• Executive Summary

– The executive summary will briefly describe the Offeror’s approach for a successful project completion and summarize the contents of the Technical/Business Proposal Volume submitted. This information will provide an overview of the important aspects of the proposal.

Instructions to Offerors

• Evaluation Factor 2: Delivery Order Scenario Design and Integration

• Subfactor (a): System Design and Layout

• Subfactor (b): Integration of Software/Firmware

• Subfactor (c): Cybersecurity

• Subfactor (d): Project Management Plan (PMP)

• Subfactor (e): Organization Structure and Qualifications

• Subfactor (f): Reliability/Maintainability

Instructions to Offerors

• Evaluation Factor 2: Subfactor (a): System Design and Layout

1. Describe the proposed equipment layout for the DDSP AWOS system with automatic labeling, Bldg.

2001, AWOS Section. Include a description of operations demonstrating how all required material will be processed throughout the system. Discuss the components/equipment, workstations, materials to be handled, operating conditions, and material flow. Provide a complete list of all equipment proposed (with exact quantities of each type) and of all integration firmware (with exact quantities of each type), and descriptive literature.

2. Identify whether the components to be used are commercial products or modified commercial products.

3. For commercial designs, describe the system fully and provide available commercial literature (manufacturer’s name, address, and phone number, catalog cuts, descriptive brochures, sketches, diagrams, isometrics, photographs, etc.).

4. For modified commercial designs, describe the design of the commercial product fully and provide available commercial literature as in 1 above. Describe fully the modifications made to the commercial product.

Instructions to Offerors

• Evaluation Factor 2: Subfactor (a): System Design and Layout (Cont.)

5. Indicate how long the proposed systems have been in production. Indicate the availability of and delivery time for spare parts/components.

6. The throughput capacities at all major processing areas throughout the system.

7. Discuss the safety aspects of personnel and equipment included in the design.

8. Identify the design of the integration of firmware equipment products as a commercial product or a modified commercial product.

9. For commercial firmware equipment provide the brand name and model of each firmware product or describe the design fully and provide available commercial literature (catalog cuts, brochures, etc.).

10. For modified commercial firmware equipment, describe the design of the commercial product fully and provide available commercial literature. Describe fully the modifications made to the commercial product.

Instructions to Offerors

• Evaluation Factor 2: Subfactor (b): Integration of Software/Firmware

1. Describe the Software Development Plan (SDP), including identification of critical software issues, software development, support, testing and certification/validation. Include a description of the software quality effort.

2. Describe the proposed methods of integrating all software/firmware with the Building 2001 and AWOS hardware/equipment to provide a fully functional system.

Instructions to Offerors

• Evaluation Factor 2: Subfactor (c): Cybersecurity

1. The Offeror must describe the proposed design and approach to incorporate required cybersecurity principles for all automated equipment technologies to be integrated within the DoD network environment.

a. This description must provide detailed diagrams formatted in Purdue Enterprise Reference Architecture (commonly known as the Purdue Model) to describe the proposed methods of integration.

b. This description must identify in detail how the contractor will provide the necessary staffing, resources, system security engineering (SSE), and design artifacts to ensure successful compliance with the latest revisions of DoD Instruction (DODI) 8510.01 “Risk Management Framework (RMF) for DoD Information Technology (IT)”, National Institute of Standards and Technology (NIST) Special Publication (SP) 800-82 “Guide to Industrial Control Systems (ICS) Security”, and NIST SP 800-160 “Systems Security Engineering (SSE)”.

c. This description must identify the approach used to prevent, detect, and respond to software risk(s) including (but not limited to) insertion / discovery of malware within the proposed

Instructions to Offerors

• Evaluation Factor 2: Subfactor (d): Project Management Plan (PMP)

1. Briefly describe your plan for managing and coordinating the proposed work.

2. Provide a schedule of events that tracks all efforts necessary to accomplish the work and the associated time frames.

3. Identify key aspects of the work that will impact the critical path towards timely completion of the project.

Instructions to Offerors

• Evaluation Factor 2: Subfactor (e): Organization Structure and Qualifications

1. Provide specific information (experience, qualifications, background, etc.) for all key personnel assigned to this project, and identify what their specific responsibilities will be.

2. Identify those personnel who will be on-site during the installation and testing phases.

3. Identify all subcontractors, vendors, suppliers (firm names, addresses, and telephone number) to be used, and a brief description of the work to be performed and/or materials/equipment to be furnished by each.

4. The Offeror must provide any provisional organizational chart(s) for proposed staff.

Instructions to Offerors

• Evaluation Factor 2: Subfactor (f): Reliability/Maintainability

1. Provide documentation of equipment reliability for components included in the proposed system.

Reliability documentation should be taken from identical components operating in a similar system environment.

2. Describe the maintenance requirements of the proposed systems including any special features that contribute to the ease of maintenance of the system, the use of off-the shelf parts that are the most efficient and best suited for their intended purpose.

3. Describe all system features which provide for error detection and modular components that simplify maintenance.

4. The Offeror must describe how their company intends to provide operational sustainment, maintenance, and patching for the proposed solution and underlying equipment after successful deployment.

5. The Offeror must describe how their approach to supply chain risk management (including but not limited to) the mechanisms and countermeasures to effectively mitigate risks associated with critical equipment / components necessary for maintaining operability of the proposed system.

Instructions to Offerors

• Evaluation Factor 3: Global Partnering and Strategic Alliance

1. The Offeror must describe how their firm / company, partnerships, and strategic alliances are truly capable of providing the necessary labor, resources, equipment, and skillsets to support future requirements as described within Section C-6 of the LMIS Program PWS for Material Handling Capabilities.

a. The Offeror must ensure this description identifies the world-wide / global capabilities to support requirements originating from various DOD facilities within the Contiguous United States (CONUS) and Outside the Contiguous United States (OCONUS).

2. The Offeror must provide and describe the approach to manage Team Partner(s) and/or subcontractors based on projects of similar size, scope and complexity as described within Section C- 6 of the LMIS Program PWS for the Material Handling Capability awardee pool. The proposal must identify what Team Partner(s) will be responsible for each task within Section C-6 of the LMIS Program PWS and the rationale for their assignments as well as describe the process the Offeror will use to enter into Operating Level Agreements (OLAs) and/or Service Level Agreements (SLAs) with other contractors and service providers. The Offeror will provide the methodology for forming long and short-term partnering arrangements with its Team Partner(s) and/or subcontractors, partnering agreements, as well as a description of the level of past Team experiences with those partners and demonstrated success.

Volume III Subcontracting / Small Business

Approach

Instructions to Offerors

• Evaluation Factor 4: Small Business Participation Commitment Document

– The Offeror’s proposal will be utilized to evaluate Factor 4 Small Business Participation Commitment Document (SBPCD).

– The SBPCD is NOT the same as the Subcontracting Plan.

– The SBPCD should complement the Offeror’s Small Business Subcontracting Plan, if the Offeror is required to submit a plan.

– All Offerors (both other than small businesses and small businesses) will provide the following SBPCD requirements.

– This required information will be used to evaluate the extent of the offeror’s proposed participation/commitment to use U.S. small businesses in the performance of this acquisition.

Instructions to Offerors

• Evaluation Factor 4: Section (a): Small Business Participation Commitment Document (SBPCD) (Cont.)

1. Prime Offeror’s Size: Identify the applicable size and applicable socioeconomic categories for the PRIME offeror only when submitting your proposed SBPCD. Include this information within the initial section of the proposed SBPCD and check all applicable boxes:

Prime Offeror’s Size { } Other than Small Business or { } Small Business also categorized as a { } Small Disadvantaged Business (SDB) { } Woman-Owned Small Business (WOSB) { } Historically Underutilized Business Zone (HUBZone) Small Business { } Service Disabled Veteran Owned Small Business (SDVOSB)

Instructions to Offerors

• Evaluation Factor 4: Section (a): Small Business Participation Commitment Document (SBPCD) (Cont.)

2. The small business concerns (SBC), as defined in FAR Part 19, used in the offeror’s proposed approach to satisfying the requirements of this solicitation for the entire performance period must be identified.

The offeror must provide the following information about each entity: company name, Cage Code, business category(ies), description of products or services and NAICS code to be provided by each SBC. The nature of the commitment with the SBC should be identified. Use the table/format below in proposing this required information to provide the required information.

Instructions to Offerors

• Evaluation Factor 4: Section (a): Small Business Participation Commitment Document (SBPCD) (Cont.)

*NOTE: The NAICS code/size standard for this requirement is stated elsewhere in the solicitation and should be considered in making any business size determinations for any company that will contribute to contract performance.

*NOTE: The work to be performed directly by a small business prime offeror will be evaluated as Small Business Participation. Small business prime offerors must include their company information in the above table.

Instructions to Offerors

• Evaluation Factor 4: Section (a): Small Business Participation Commitment Document (SBPCD) (Cont.)

3. In addition to completing the table above, the offeror must provide supporting documentation of the nature of the commitment. Examples of verification include a letter of commitment, joint venture documentation, mentor protégé agreements, or a subcontracting agreement.

Volume IV Price Proposal

Volume IV Section 1

Solicitation / Award Documents

Instructions to Offerors

• Cover Letter

– If the Offeror makes any qualifications to any provisions in the RFP, all such qualifications shall be listed in a cover letter to the proposal

• Completed Standard Form 1449

– Ensure that an authorized Contractor Representative signs the offer in

Blocks 30a – 30c.

• Complete SF 30, if applicable

– Offerors must acknowledge any amendments to the solicitation by completing Block 15a-c of the SF-30, Amendment of Solicitation/Modification of Contract and including any applicable amendments in the proposal, otherwise the Offeror’s proposal could be considered unacceptable and may not be considered.

Volume IV Section 2 Pricing

Instructions to Offerors

• Volume IV – Price Proposal, Key Points:

– Offerors shall complete the schedule of Supplies/Services (Attachment 31).

Prices must be rounded to two decimal points.

– The price proposal will be submitted in sufficient detail for the Government to examine the basis for the offeror’s proposed price.

– Submit all required tables in MS EXCEL format. Do not hide formulas or cells. The Government must be able to replicate the calculations.

– The Offeror will provide a price proposal by completing the tables and/or addressing the narrative requirements.

Instructions to Offerors

• Volume IV – Price Proposal, Basic Contract

– CLIN 0001 Material Handling Capability:

• CLIN 0001 is for complex projects to identify, design, purchase, install, and integrate proven and reliable technologies to fulfill specific MHE capability gaps / requirements at DLA Distribution Centers and warehouses. Delivery orders will be issued on a Firm-Fixed-Price/Firm-Fixed-Price - Economical Price Adjustment basis.

• Due to the complexity and duration of these delivery orders, the delivery order will be priced with discrete CLINs and phases. While each phase/CLINs are priced separately, offerors are hereby notified that their proposed approach and pricing for that approach should be holistic in nature. When the entire delivery order and its phases/CLINs are completed, all phases/CLINs need to work together as an integrated and fully operating system.

• The Government has provided an estimated value for this line item. Prices for the required material handling capability efforts will be established at the delivery order level. For the price proposal for CLIN 0001, offerors are required to ensure that the Government’s estimated value is inserted into their proposal.

Instructions to Offerors

• Volume IV – Price Proposal, Basic Contract (Cont.)

– CLIN 0002 Labor:

• CLIN 0002 is for additional labor associated with PWS task 6.1.10 Operational, Sustainment, Maintenance, and Lifecycle Support as ordered. Delivery orders will be issued on a Firm-Fixed-Price basis.

• The Government has provided an estimated value for this line item. Prices for the required labor will be established at the delivery order level. For the price proposal for CLIN 0002, offerors are required to ensure that the Government’s estimated value is inserted into their proposal.

• In addition, offerors shall provide a fixed burdened labor rate for each labor category as documented in attachment 31 tab 2 for each contract year. This fixed burdened labor rate will be the basis for either a Firm Fixed Price task order where the number of hours will be fixed for the effort.

Instructions to Offerors

• Volume IV – Price Proposal, Sample Delivery Order

– Offerors will complete the table below for the necessary services, labor, material, equipment and control components required to furnish and install the AWOS with automatic labeling system AWOS Section, at DLA Distribution Susquehanna PA (DDSP), located in New Cumberland, PA for the Delivery Order Scenario for Pool 2 Material Handling Capability.

– While each phase/CLINs are discretely priced, offerors are hereby notified that their proposed approach and pricing for that approach should be holistic in nature. When the entire delivery order and its phases/CLINs are completed, all phases/CLINs need to work together as an integrated and fully operating system.

Instructions to Offerors

• Volume IV – Price Proposal, Sample Delivery Order (Cont.)

3. The offeror will complete Attachment 31 Tab 3.

4. Offerors will complete the Summary Table below.

SUMMARY TABLE CLIN 000X TOTAL PRICE

CLIN 0001

CLIN 0002

CLIN 0003

CLIN 0004

CLIN 0005

TOTAL FIRM FIXED PRICE

Volume IV Section 3

Offeror Representations and Certifications

Instructions to Offerors

• Completed Certifications and Representations

– FAR 52.212-3 (Oct 2018) OR Offeror statement indicating that said certifications and representations are current and located…