Attachment 1 - Performance Work Statement (PWS).pdf

PDF 2 MB Posted

Attached to
UPTO 60 MONTHS LEASE OF MULTIFUNCTIONAL DEVICES LOCATED THROUGHOUT GERMANY
Solicitation number
SP700022Q1002
Issued by

About this file

This performance work statement outlines requirements for a contract to lease 305 multifunctional devices in Germany for up to 60 months. The Defense Logistics Agency seeks to support the Army, DOD, Marines, and Air Force by procuring devices with capabilities including copying, printing, scanning, faxing, and secure document handling in accordance with standards like Trade Agreements Act compliance, network security, and Section 508 accessibility. Device quantities and specifications are defined for various volume bands with monthly impression minimums and paper handling requirements. The contractor must provide delivery and installation within set timeframes, end user training, full service maintenance, relocation services, technical refreshment, and removal in compliance with removal security protocols. Reporting responsibilities, network functionality, and testing requirements are also specified.

View the file

Other files

Show all 20

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DEFENSELOGISTICSAGENCY(DLA)
PERFORMANCEWORKSTATEMENT(PWS)

I. OVERVIEW

A. TheDefenseLogisticsAgency(DLA)seekstoenterintoacontractforThreeHundredandFive(305)
MultifunctionalDevicesforupto60monthleaseofMultifunctionalDevices(MFDs),accessoriesand
officedocumentdevices(hereaftercollectivelyreferredtoas“devices”)withinOUTSIDETHE
CONTIGUOUSUNITEDSTATES(OCONUS)–GERMANY.This contract is in support of the Army, DOD,
Marines, and Air Force. SpecificdetailsarefoundinsectionsIIandIII.
B. Theservicesassociatedwiththeleaseddevicessoughtaredeliveryandinstallation(sectionIV),end‐
usertraining(sectionV),fullservicemaintenance,includingallconsumablesupplies(excluding paper)
(sectionVI),relocation(sectionVII),technicalrefresh(sectionVIII),removal(sectionIX), reports
(sectionX),networkfunctionality(sectionXII),andnetworksecurity(sectionXIII).

II. DEVICES AND CONFIGURATIONS

A. All devices shall meet the following requirements:

1. EquipmentshallbeTradeAgreementAct(TAA)compliantandmanufacturednew(notrebuiltor
remanufactured).Newmeanscomposedofpreviouslyunusedcomponents,whethermanufactured
fromvirginmaterial,recoveredmaterialintheformofrawmaterial,ormaterialsandby‐products
generatedfrom,andreusedwithin,anoriginalmanufacturingprocess;providedthatthesupplies
meetcontractrequirements,includingbutnotlimitedto,performance,reliability,andlife

expectancy.

2. Simplex/duplex copying, printing, and scanning.

3. Automatic Document Feeder with a 30 page minimum capacity and duplexing.

4. Basic inline finishing functions which include stacking, collating, and multi‐position stapling.

5. Operate using at least 30% recycled 20 lb. paper.

6. Free‐standingwithcasters/wheels(orcabinetsprovidedasneeded).Nodevicesshallbe
configuredfortable‐topuse.

7. Copy resolution of at least 600 x 600 DPI.

8. Print resolution of at least 1,200 x 1,200 DPI.

9. Support current desktop and server operating systems.

10. A minimum of 1 Gigabyte of document management memory.

11. Print drivers shall be capable of Page Description Language (PDL) to support Adobe PS3, PCL5E and

PCL6.

12. Deliveredwithup‐to‐datesoftware/firmwareanddrivers,with32‐bitand64‐bitarchitecture
driversupport.ProvideallsubsequentupdatesalongwithinstallationinstructionstoDLA.
13. Operateusing220volts(V)/50hertz(Hz)alternatingcurrent(AC)electricalcurrent.Noexternal
transformersshallbeusedasanexception.Thecontractorshallalsoidentifythepowerplugtype

required.

14. Equippedwithanexternalsurgeprotectortoprotectallelectroniccomponents.Theexternalsurge
protectorshallbeprovidedinadditiontoanyinternalsurgeprotectors.Externalsurgeprotectors
shallhaveaminimumfive(5)yearmanufacturer’swarrantythatcovers:

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 1 of 34

a. Replacement of the surge protector if it fails, at no cost to the Government.

b.RepairorreplacementofanydeviceprovidedthroughthisPWSdamagedbyapowersurge
whenproperlyconnectedtotheContractor‐providedsurgeprotector.

15. Include a printed operator’s manual, in English, for each device.

16. Default to:

a. Automatically go into sleep mode after 20 minutes of inactivity

b. Automatically go into hibernation after an hour of inactivity.

c. Print duplex (2‐sided).

d. Print in gray scale on both monochrome and color MFDs

e. “Draft” quality printing rather than “high” quality printing

f. Display all information in English.

B. Devices shall meet the following security requirements:

1. Devices with hard drives shall have an encryption or overwrite Security Kit.

2. OnlyCLASSIFIEDdesignateddevicesshallbeplacedonthe SecretInternetProtocolRouter
Network(SIPRNet).
3. AllUniversalSerialBus(USB)ports/memorycardslotsonthedevicesshallbedisabledwhen
deliveredexcept:theprinterportusedtoconnectthedevicetoasinglecomputer;CommonAccess
Card(CAC)readers;andanyUSBportsneededforservicing/maintainingequipment.Additionally,
unusedports,protocolsandservicesoneachdeviceshallbeabletobeenabled/disabledbythe
localITadministrator.
4. AlldevicesshallhaveasecurescanningfunctionalitythatcomplieswithFederalInformation
ProcessingStandard(FIPS)140‐2(willbereplacedby140‐3FY22)encryptionwithroutingandfull
integrationtostandardnetworkinfrastructuredestinations,whichinclude:Scan‐to‐Email,Scan‐to‐
Folder,Scan‐to‐Network,Scan‐to‐ServerandScan‐to‐PC.Scanneddocumentsshallbemade
availableasaTIFF,JPEGandasaPDFfileformat.Thedefaultscanresolutionshallbe300x300
DPI.ThedefaultscanoutputfiletypeshallbePDF.DevicesshallhaveOpticalCharacter
Recognition(OCR)inordertoprocessandproducetext‐searchabledocumentstothescan
destination.Note:Fullintegrationdoesnotmeanscanningtoproprietaryback‐endcontent,
documentorrecordsmanagementsystemstosupportcustomizedindexingormetadata

requirements.

5. AllNon‐ClassifiedInternetProtocolRouter(NIPR)devices,volumebands1‐5,shallhaveanalogfax
only.Note:Theanalogfaxfunctionshallbeconfiguredtoseparate/isolatethefaxcontrollerfrom
thenetworkcontroller.SIPRdevicesshallNOThavefaxcapability.

6. All devices shall have:

a.CAC/PersonalIdentityVerification(PIV)enablementinordertosecurethedevicefrom
unauthorizeduseandshallhavea“SecurePrint”featurethatallowsend‐userstouse
authenticationcredentials(ex.ID,Login)andpasswordidentification(PIN)toreleaseprintjobs
onthedevice.
b.CapabilityofintegrationwithPrinton‐demandsolution(e.g.,equivalentto“FollowMe,”“Follow
You,”“Push”or“Pull”printing)thatshallallowend‐userstoreleaseprintoutputonanydevice
onthenetwork.

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 2 of 34

CContractorsshallprovideoriginalequipmentmanufacturer(OEM)specificationsheets,toinclude
proposedconfigurations,foreachdevicewithproposaltotheContractingOfficer.

III. SPECIFICATIONS:

A.Inadditiontothefeatures/capabilities/configurationssetforthinsectionII(outlinedabove),the
Contractorshallprovidealldevicesinaccordancewiththechartbelow:

Quantity Volume Band

NIPR/

SIPR

Estimated Monthly

Impressions

Min.Speed
(PPM)PaperCapacity

Mono Color Mono/Color

62VB‐1NMNIPR5,000N/A25One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
1VB‐1SCSIPR3,0002,00025One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
78VB‐1NCNIPR3,0002,00025
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
58VB‐2NMNIPR10,000N/A35One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
3VB‐2SCSIPR5,0005,00035One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
41VB‐2NCNIPR5,0005,00035
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
21VB‐3NMNIPR20,000N/A45One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Four(4)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
5VB‐3SCSIPR10,00010,00045
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Four(4)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
22VB‐3NCNIPR10,00010,00045One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Four(4)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
1VB‐4NMNIPR35,000N/A50
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
One(1)HighCapacityTray[2,000SheetMinimum]‐8.5x11"
13VB‐4NCNIPR20,00015,00050
One(1)BypassTray[100SheetMinimum]‐Upto11"x17"
Two(2)AdjustablePaperTrays[500SheetMinimum/Tray]‐Upto11"x17"
One(1)HighCapacityTray[2,000SheetMinimum]‐8.5x11"

IV. DELIVERY AND INSTALLATION

A. Delivery and Installation of Ordered Devices:

1. DeliveryandInstallationofordereddevicesshallbeinaccordancewith(IAW)thetimeframes
outlinedinthechartbelow:
AmountofDevices
PerContractingAction
MaximumNumberofCalendarDays
toCompleteDeliveryandInstallation

Up to 100 30 days after receipt of contract

101 ‐ 200 45 days after receipt of contract

201 – 500 60 days after receipt of contract

More than 500 90 days after receipt of contract

2.Installationshallbedefinedasdeviceisfullyoperationalasordered,toincludenetwork
connectivityandscanning,ifrequired.TheContractorshallprovideonsitetechnicalandsystem
analystsupportandappropriatedigitalcards/productstosuccessfullyconnectdevicestoDLA
customers’networks.
3.Uponcompletionofdevicedelivery,theContractorshallobtaincustomersignatureanddateon
eachbilloflading(BOL)orpackingslip,andprovidethisproofofdeliverytothedesignatedDLA
PointofContact(DLAPOC)withinten(10)businessdaysafterdelivery.TheContractorshall

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 3 of 34

alsoprovidetheInstallationReport(Appendix#1)oramodifieddeliveryschedulewithserial
numbersaddedtothedesignatedDLAPointofContact(DLAPOC)withinten(10)businessdays
afterdeliveryandinstallationhavebeencompleted.
4.Ifadevicecannotbedeliveredandinstalledwithinthedeliverytimethatisgiven,theContractor
shallnotifytheissuingContractingOfficerassoonasthedelayisrealized,oftheexpecteddelivery
datefortheordereddevice(s).
5.Regardlessofinstallationdate,alldevices,includingreplacementdevices,shallmaintainaco‐
terminusPeriodofPerformance(PoP).
6.Uponinstallation,theContractorshallaffixoneachdeviceastickerwiththefollowinginformation:
manufacturer’sname,modelnumber,deviceserialnumberandtoll‐freetelephonenumber(s)to
placeservicemaintenancecallsandorderconsumablesupplies.Additionally,theContractorshall
addthePoPenddatetoDLAEMSstickerandaffixtodevice.(DLAshallprovidetheDLAEMS

stickers.)

7. The Contractor shall provide English‐speaking personnel at the toll‐free number(s) provided.

B. Options to Order Additional Quantities of Devices:

1. Asoptions,theContractorshall,atthesameunitprice,provideuptotwentypercent(20%)more
co‐terminusleaseddevicesthansetforthateachCLINofadeliveryorder;providedthatDLA
exercisesandissuesitsoptions,ifatall,priortotheendofthe24thmonthfollowingtheeffective
dateofthecontract.

V. TRAINING

A. The Contractor shall provide either on‐site or online training, in English, as specified in the contract, to end‐users.

B. TheContractorshallcoordinatedirectlywitheachcommand’sPOClistedonthecontracttoestablish
thetrainingschedule.

C. Training shall include the following:

1. How to operate the basic function keys of the device.

2. How to operate special features including duplexing, enlargements, reductions, and multiple job queues.

3. Diagnosis and resolution of basic device malfunctions, including paper jams.

4. Location and procedures for installing consumables such as paper, toner, staples, etc.

D. Foron‐sitetraining,theContractorshallsubmitaSummaryofOn‐SiteTrainingReport(MicrosoftExcel
format),listingdeviceserialnumber,personneltrainedanddatetrainingwascompleted,tothe
designatedDLAPOCwithinfive(5)businessdaysoftrainingcompletion.Initialinvoicepaymentshall
notbereleaseduntilthisreportisreceived.
E. Foronlinetraining,theContractorshallprovideeachPOClistedonthedeliveryschedulewith
manufacturer‐approvedtrainingthat,ataminimum,coversallitemslistedinparagraphV.C.Thelink
shallbeaccessiblebyDLAanditscustomersviahttporhttps.TheContractorshallsubmitaSummary
ofOnlineTrainingReport(MicrosoftExcelformat),listingdeviceserialnumber,personneltrained,
emailaddressestraininglinkwassentto,anddatetraininglinkwassent,tothedesignatedDLAPOC
withinfive(5)businessdaysofemailtopersonnel.Initialinvoicepaymentshallnotbereleaseduntil
thisreportisreceived.
F.Inadditiontoeitheron‐siteoronlinetraining,theContractorshallprovideaquickreferencedesk
guide(singlesheet,8.5”x11”papersize,laminated,fullcolorandabletobeeasilystowedawaywith
thedevice).ThecontractorshallalsoprovideaCD‐ROM/DVDand/orweb‐basedtraining(URLprinted

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 4 of 34 on a sticker to be placed on the front of the device) to serve as follow‐up training.

VI. MAINTENANCE

A. Service

1. TheContractorshallmaintaineachdeviceataminimum95%monthlyavailablerate.Maintaining
thedevicesincludes:

a. Preventive maintenance

b. Service calls

c. Repairs

d. Troubleshooting

e. Connectivity

f. All associated labor and travel

2. Ifamalfunctioncannotbecorrectedduringtheinitialservicecall,theContractorshallresolveall
issuesnolaterthanten(10)calendardaysfromdateofinitialservicecall.
3.TheContractorshallprovideEnglishspeakingservicetechniciansupportMondaythroughFriday
from8:00a.m.–4:30p.m.localtime,withtheexceptionofFederalholidays.
4.TheContractorshallrespondtoworkstoppagesituationswithintwo(2)businesshoursofa
servicecall.Workstoppageisdefinedasarequiredfunctionofthedevice(printing,copying,
scanningorfaxing)isnon‐operational.Atelephonecall(unlessitresultsinsolvingtheproblem)
shallnotbedeemedanacceptableserviceresponse.Theservicetechnicianshallcalltheend‐user
withinanhourtodiscusstheserviceproblemandtimeofarrival.Itisestimatedthat10%of
servicecallsshallbeclassifiedas“workstoppage”acrossthetotaldevicepopulationonayearly

basis.

5.TheContractorshallrespondtonon‐workstoppagesituationswithinfour(4)businesshoursof
aservicecall.Non‐Workstoppageisdefinedasarequiredfunctionofthedevice(printing,copying,
scanningorfaxing)isdegraded.Atelephonecall(unlessitresultsinsolvingtheproblem)shallnot
bedeemedanacceptableserviceresponse.Theservicetechnicianshallcalltheend‐userwithinan
hourtodiscusstheserviceproblemandtimeofarrival.
6.InthecaseofdevicesclearedforCLASSIFIEDmaterial,theContractor’srepairtechniciansshall
haveaDepartmentofDefense(DoD)securityclearanceequaltoorhigherthantheclassificationof
thedeviceandbeabletoprovideverificationwhenrequested.
7.TheContractorshallberesponsibleforalldamagesduetonormalwearandtearandlossor
damagecausedbytheContractororitsagents.
8.Ifadeviceisdeterminedtobenon‐repairable,toincludedamageddevices,theContractorshall
informthedesignatedDLAPOCwithintwo(2)businessdaysofmakingthisdetermination.The
Contractorshalldeliverandinstallacomparablereplacementdevicewithinfifteen(15)calendar
daysfromwrittennotificationfromtheContractingOfficer.

B. Consumable Supplies

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 5 of 34

1. TheContractorshallprovideallconsumablesupplies(includingstaples)necessaryforthe
operationofthedevices.Paperisexcludedasaconsumablesupply.
2. TheContractorshalldeliverallrequiredconsumablesuppliestothedesignatedlocationslistedon
thedeliveryscheduleidentifiedonthecontract,withinthree(3)businessdaysafterreceiptofa
requestforsupplies.

VII. DEVICE RELOCATION

A. For device relocations, the Contractor shall:

1. Providedevicerelocationservices,withina50‐mileradius,for100%ofthetotalnumberofdevices
ordered,foreachyearofthespecifiedperiodofperformance.(Forexample,ifthereare100
devicesordered,theContractorshallproviderelocationsforupto100devicesperyear.Thiscould
berelocatingthesamedevice100times,relocating100differentdevicesonetimeeachorany
othercombinationthereofeachyear.)Thedevicerelocationsshallnotrequireriggingorspecial
handling.DevicesshallnotberelocatedwithoutwrittenapprovalfromthedesignatedDLAPOC
andshallbecompletedwithinthirty(30)calendardaysafterreceiptofthewrittenrequest.
2. Includethefollowing:Breakdownandpackingofequipment,shipping,uncrating,re‐installation
andend‐usertraining.

3. Be responsible for any and all repairs that may be required following any relocation performed.

4. Uponcompletion,obtaincustomersignatureontheRemoval/RelocationReportcontainedwithin
Appendix#2andtheMFDHardDriveRemovalRecord(Appendix#3)ifapplicable.

VIII. TECHNICAL REFRESH

A. IntheeventtheContractorisnolongerabletoprovidetheproductsproposed,theContractormay,
onlyafterwrittenapprovalbytheContractingOfficer,removetheproductsfromthecontractand
providereplacementproductswhichshallmeetorexceedtheVolumeBandrequirementsaslistedin
thisPWS,atthecontractprice.
1.Replacementdevicesshallbenewertechnologythanthemodelstheyarereplacing.Ifthe
Contractorsubmitsnewmodelsfortesting,thedevicesshallbe“inproduction”andnotnear“end
oflife.”
2.Priortodelivery,ifreplacementdeviceshavenotbeenpreviouslytestedbyDLA,theyshallbe
testedasoutlinedinsectionXV.

IX. DEVICE REMOVAL

A. For device removal, the Contractor shall:

1. Removealldevicesandassociatedsupplieswithinthirty(30)calendardaysofcontractexpiration
orreceiptofamodificationsignedbytheContractingOfficer.

2. Notify the issuing Contracting Officer as soon as any delay in device removal is realized.

3. Priortodeviceremoval,removeallharddrivesandsurrenderthemtoDLA(oritsassignee).Upon
completionoftheharddriveremoval,theContractorshallobtaintherequiredsignaturesonboth
theRemoval/RelocationReport(Appendix#2)andtheMFDHardDriveRemovalRecord(Appendix
#3).Aftertheharddrivehasbeenremoved,ALLclassificationstickersshallberemovedprior
todeviceremoval/disposal.
4. TheGovernmentreservestherighttowithholdfinalpaymentifalldevicesarenotremovedfrom
thepremiseswithinthirty(30)calendardaysofcontractexpirationortermination.
5. 5.BesubjecttopaymentofalldisposalfeesincurredbytheGovernmentforanydevicesnotremoved
withinthirty(30)calendardaysofterminationorexpiration.Afterthistimeperiod,thedevices
willbeconsideredabandoned.

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 6 of 34

X. REPORTS

A. The Contractor shall provide the following reports:

1. Installation Report, as referenced in section IV.A.3.

2. Summary of On‐Site Training Report, as referenced in section V.D.

3. DeviceListingReport(MicrosoftExcelformat)shallbesubmittedviaWideAreaWorkflow
(WAWF)totheDLAPOCwiththemonthlyinvoice.Thereportshallcontainanaccuratelistingof
alldevicesundercontract(model,serialnumber,location).

4. Removal/Relocation Report, as applicable, as referenced in section VII.A.6 and IX.A.

B. Uponrequest,theContractorshallprovidethefollowingreportswithin5businessdays,atnocostto
theGovernment:

1. Usage Report (Appendix #4) shall be submitted to the DLA POC.

2. ResponseTimeReportshallbesubmittedtotheDLAPOCandtheContractingOfficer.Thisreport
shallidentifythetechnician’sresponsetime,definedasthetimebetweenwhentheservicecallis
placedandwhenthetechnicianarrivesonsitetorepairtheequipment.Iftheissueisabletobe
resolvedonthephone,theresponsetimeshallbedefinedasthetimetheservicecallwasplaced
andwhentheissuewasresolvedoverthephone.
3. DeviceDowntimeReportshallbesubmittedtotheDLAPOC.Thisreportshallidentifythetimethe
equipmentwasinoperable/non‐functional.Downtimeisdefinedasthetimetheservicecallis
placednotifyingtheContractor’srepresentativethattheequipmentisinoperable/non‐functional
orwhenthetechnicianbeginsserviceontheequipmentifthedeviceisoperable/functionalupon
arrival.Inaddition,thereportshallincludeinformationrelativetothefrequencyofservicecalls,
productionvolumebetweenservicecalls,typesofrepairs,aswellaspartsrequired.
4. DeviceUptimeReportshallbesubmittedtotheDLAPOCandtheContractingOfficer.Thisreport
shallidentifythetimetheequipmentwasoperableandavailableandwillbeusedtoverifythe
requiredminimum95%monthlyavailablerate,asoutlinedinsectionVI.A.1.

XI. INVOICING

A.AllinvoicesshallbesubmittedwiththeDeviceListingReportviaWideAreaWorkflow(WAWF)
andshallbesubmittedinUnitedStatesDollars.Thefollowingwebsiteprovidesadditional
informationregardingWAWFincludinginformationfor“vendorsgettingstarted”withthesystem:
https://wawf.eb.mil/xhtml/unauth/help/help.xhtml.

B. For devices that are relocated or removed, invoices shall include the Removal/Relocation Report

(Appendix#2)andtheHardDriveRemovalRecord(Appendix#3)andtheBOL.Invoicessubmitted
withouttheapplicablereportsshallnotbepaid.

XII. NETWORK FUNCTIONALITY

A. DoDpolicyprohibitsthepublicationofnetworkconfigurationinformation;therefore,DoD
installationsshallnotfilloutpre‐installationsitesurveys.Therequiredinformationshallbe
providedattimeofinstallation.
B. TheContractorshallprovidedevicesthatshalloperateonandcoexistonanetworksupportingallof
thefollowing:

1. Internet Protocol Version 4 (IPv4), SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 7 of 34

2. Internet Protocol Version 6 (IPv6),

3. A hybrid of IPv4 and IPv6.

C. Support shall be provided for network configurations based on agency hardware/software.

XIII. NETWORK SECURITY

A. TheContractorshallprovidedevicesthatcanbeconfiguredtocomplywiththecurrentDefense
InformationSystemsAgency(DISA)SecurityTechnicalImplementationGuide(STIG)titled
MultifunctionDeviceandNetworkPrinterSTIG(latestversionandrelease),availableat:

https://cyber.mil/.

B. Contractorsshallmonitorindustrystandardvulnerabilitysites(e.g.http://nvd.nist.gov/,
https://www.us‐cert.gov/ncas/alerts,http://oval.mitre.org/)andtakeappropriateactionsiftheir
equipmentissubjecttoaknownvulnerability.WhenvulnerabilitiesareidentifiedbytheContractor,
DLAoritscustomers,theContractorshallprovideremediationfordistributiontoallinstalled
equipmentinaccordancewithUSCYBERCOMTASKORDregulationsunlessadifferenttimeperiodis
directedbyUSCYBERCOMviaDLA.TheTASKORDisForOfficialUseOnly.Thefollowingisauthorized
tobequotedfromtheTASKORDforreference:
1.AssuredComplianceAssessmentSolution(ACAS)assignsseverityscoresofcritical,high,medium
andlowtoplug‐infindings.
a. Criticalfindingsreflectdiscoveryofacommonvulnerabilityandexposure(CVE)thatposes
significantrisktotheconfidentiality,integrity,andavailabilityofDODINNetworks.Actionsto
mitigateorremediatecriticalvulnerabilitiesshallbeinitiatedupondiscoverwiththegoalof
mitigation/remediationwithinseven(7)calendardays.
b. Findingswithaseverityscoreofhighshallbeaddressedinthesamemannerasvulnerabilities
addressedviaInformationAssuranceVulnerabilityAlert(IAVA)directivesandmitigatedor
remediatedwithintwenty‐one(21)calendardaysofdiscovery.
c. Findingswithseverityscoresofmediumandlowshallbeaddressedinaccordancewithlocal
ApprovingOfficial(AO),InformationSystemSecurityManager(ISSM),orInformationSystem
SecurityOfficer(ISSO)guidanceuntilfurthernotice.
d. Inallinstances,DoDcomponentsshallconsiderexposuretothreat,missionimpact,sensitivity
ofdata,andcurrentmitigatingsecuritycontrolswhenprioritizingimplementationoffix

actions.

C.Intheeventremediationcannotbeachievedwithinthemandatedtimeline,theContractorshall
provideaPlanofActionandMilestonesandreceiveapprovalthereofbytheCustomer’sagency
AuthorizingOfficialordesigneeforriskacceptance.
D.AlldevicesshallbeInternationalOrganizationforStandardization(ISO)/InternationalElectrotechnical
Commission(IEC)15408(CommonCriteria)certifiedIAWCNSSP‐11usingtheNationalInformation
AssurancePartnership(NIAP)approvedcriteriaorequivalent.
1.AdeviceshallbeacceptableifitisincludedoneithertheNIAPCCEVSProductCompliantList
(https://www.niap‐ccevs.org/Product/)orCommonCriteriaPortalCertifiedProductslist

(http://www.commoncriteriaportal.org/products/).

2.AlldevicesshallhavecurrentISO/IEC15408certificationandrecertification,ifapplicable,before
theContractorcanschedulelabtime.SeesectionXIV.GuidanceforCommonCriteriaMaintenance
andReevaluationisavailableat:https://www.niap‐

ccevs.org/documents_and_guidance/ccevs/scheme‐pub‐6.pdf

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 8 of 34

E.AlldevicesshallbecapableofobtainingaccreditationthroughtheRiskManagementFramework(RMF)
forDoDInformationTechnology(IT).Aspartofthis,theContractoragreestoprovideallrequested
informationandworkingoodfaithwithDLAsotheDLAcustomerscanexpeditiouslyobtainRMF
accreditationpriortodevicedeliveryandinstallation.TheContractorshallalsoprovidedevicesfor
vulnerabilityandSTIGtestingtoDLAorcustomer’ssite.TheContractorfurtheragreesthatifthe
proposeddevice(s)doesnotobtainRMFaccreditation,thecontractorshallremovethedevice(s).
InformationregardingRMFisfoundinRiskManagementFramework(RMF)forDoDInformation
Technology(IT)Instruction8510.1dated12March2014:
http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf.InordertomaintainRMFand
STIGcompliance,devicesarerequiredtobedeliveredwiththemostup‐to‐datefirmware,asoutlinedin
sectionII.A.11.
F.TheContractorshallsupplyaSMARTCARDPublicKeyInfrastructure(PKI)Solutionwhichiscompliant
withDODI8520.03andNISTFIPS201(PIV)standards.Thecontractorshallprovidecardreadersthat
shallreadandprocessallapprovedCACandPIVcards.TheContractorshallmaintaincompliancewith
DoD‐wideSMARTCARDandDoDPKIstandards,andsupportallapprovedphysicalcardsduringthefull
leaseperiod.
G.ThecontractorshallprovideaSMARTCARDPKISolutionwithSIPRNettokencapability,whichis
compliantwithDoDrequirementsforPK‐enablingandinteroperabilityassetforthinDODI8520.02.
TheContractorshallprovidecardreadersthatshallreadandprocessallapprovedSIPRNettoken
cards.TheContractorshallprovidedevicesupportsystemsthatincorporatetheuseofPKIfor
encryptionofinformationintransitoratrest.TheContractorshallprovidedevicesthatarecompatible
with3.3voltSafeNetSC650tokenandthatarecompatiblewiththe90MeterMiddlewaresolutionfor
CAC,knownasCACSmartCardManager‐90.TheContractorshallmaintaincompliancewithDoDwide
SIPRandDoDPKIstandards,andsupportallapprovedphysicalcardsandfirmwareduringthefull
leaseperiod.ForcurrentDODIinstructionsgoto:

http://www.dtic.mil/whs/directives/corres/ins1.html.

H.TheContractorshallensurethatCAC/SIPRtokenauthenticationisavailableforscanning,printingand
copyingandshallbe:

1. Capable of digitally signing emails using the senders DoD PKI Certificate(s).

2. Capable of encrypting emails using the receivers DoD PKI Certificate(s).

3. Capable of scan to file on networked devices.

4. In compliance with Homeland Security Presidential Directive‐12 (HSOP‐12).

I. The Contractor shall produce certificates of compliance, if requested.

XIV. TESTING

A. AlldevicesproposedinresponsetothecontractshallbetestedforcompliancewithNetworkSecurity
asdefinedinsectionXIIIafteraward.
B. Theestimatedtimefortestingistwenty(20)businessdays.Testingandapprovalshallbeperformed
bytheDLAInformationOperationsEMSDivisioninconjunctionwiththeContractor’sassistance.The
Contractorshallprovideonsiteengineeringassistanceandothersupportnecessarytoconfigure,setup,
andtesttheequipmentasneeded.
1. DLAtestsdevicestomeetDoDRMFandSTIGCompliance.Ifalldevicespassthepreliminary
testingprocess,DLAshallsubmitacompliancememorandumtotheContractorinformingthem
thatthedeviceshavepassedthepreliminarytestingprocess.Insomecases,priortobeingaddedto
theDLAcustomer’snetwork,additionalcertificationproceduresandtestingshallberequiredprior

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 9 of 34

toriskacceptance.IfrequiredbyDLA,theContractorshalldelivertestdevicestotheDLAcustomer
priortoproceedingwithinstallation.DLAshallexerciseduediligencetoassistwithtechnical
mitigationandresolveanyquestionsand/orconcernsraisedbythatagencyduringthetesting
reviewprocess.
2. Ifthedevicesdonotpassanyofthetestingproceduresforanyreason,DLAshallnotproceedwith
installationofsaiddevicesatthecustomerlocationsandDLAshallterminatethecontract.

C. A device shall not be tested if it cannot be assigned to one of the Volume Bands as outlined in section V.

D. Thedevicesshallbedeliveredwithallrequiredaccessories,software,firmware,etc.Outputpaper
handlingaccessoriesarenottestedandshallnotbedeliveredtothelab.

E. Approved devices previously submitted to DLA for testing are not required to be re‐tested.

F. TheContractorshalldeliverthedevicesforeachVolumeBandseries,undereachFunctionalArea,to
DLAInformationOperationsJ67Elocatedat430MifflinAvenue,Building430,NewCumberland,PA
17070,fortesting,atnocosttothegovernment.Deliverycoordinationshalltakeplacewithinfive(5)
businessdaysofcontractaward.TheMFDConfigurationManagercanbereachedat(717)770‐4060.
G. TheContractorshallresolvenon‐complianceissuesasquicklyaspossible.Iftheissuescannotbe
resolvedwithinfourteen(14)calendardays,thetestshallbesuspended.Afterthenon‐compliance
issuesareresolvedbytheContractor,thesuspendedsessionshallbescheduledwhenlabtimeisnext
available.IfrequestedbyDLA,theContractorshallremovetheirdevicesfromthelabtoavoiddelaying
thenextscheduledtest.
H. ForalldevicestestedandplacedontheDLAcontract,theContractorshallcollaboratewiththeDLA
ConfigurationManagertodevelopthetestingresultspackage.TheContractorshalldevelopthedevice
ImplementationGuide.TheImplementationGuideshallprovidestep‐by‐stepinstructionsand
screenshotstoconfigurethedevicesinaccordancewiththetestingresults.Governmentacceptanceof
theImplementationGuideisatthediscretionoftheDLAEMSDivision.
I. ThesecurityrequirementssetforthinthisPWSareminimumdevicespecificationsandhavebeen
identifiedasthebasicrequirementscommonacrossGovernmentagencies.Thesearetheminimum
securityrequirementsapplicabletoalldevicesawardedunderthiscontract.Eachorderingactivitymay
haveitsownhardware/softwareacceptanceprocesses.Alldevicesshallbesubjecttoorderingactivity
hardware/softwareevaluationprocesses.Ifthedevicefailsasecurityevaluation,theContractormay
selectadifferenttechnologyormitigatethefailedcontrolstofulfillthisrequirement.TheContractor
shallbeavailabletomeetwiththeinformationtechnology(IT)andsecuritypersonnelatamutually
convenienttimeduringtheevaluationprocess,andshallidentifyamutuallyacceptablesolution.The
Contractorshallprovidethenecessaryequipmentorexpertisetocompletesecuritytestingand
integrationintotheexistingenvironment.ThecustomeragencymayrequiretheContractortoship
devicestoaspecificlocationfortestingattimeofaward.
J. If,duringthelifeofthecontract,arequirementinsectionXIIandXIIIischanged,updatedorrevised,
theContractorshallcomplywiththemostcurrentversionoftherequirement.
K. TheContractorshallremoveallhardwarefromtheDLAtestlabwithinten(10)calendardaysupon
notificationoftestcompletion.

XV. SUPPLY CHAIN RISK MANAGEMENT

A. Aspartofitsquote,theContractorshallprovidewrittendocumentationdemonstratinghowthe
integrityandsecurityofallequipment,componentsthereof,repairpartsandconsumablesitwill
provideand/oruseinperformingthiscontractwillmeetthestandardssetforthinNationalInstituteof
StandardsandTechnology(NIST)SpecialPublication800‐161.Thisdocumentationshallclearly
demonstratehowtheContractoristakingeffectivemeasurestomitigatetherisksofforeign
intelligenceservices,terroristgroups,orothersfrominsertingunwantedfunctionalityintothesupplies
and/orservicesDLAreceivesthroughthiscontract.Additionally,thisdocumentationshallprovide
specificdetailsofwhat—

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 10 of 34

1. Policies the Contractor has in place to prevent both (a) the use of counterfeit or altered equipment, components thereof, consumables and parts and (b) their introduction into the Contractor’s supply chain;

2. Security procedures the Contractor uses to track the chain of custody of equipment, components thereof, consumables and parts, to include while this material is in storage and in transit; and

3. StepstheContractortakestoensuretheintegrityandauthenticityofequipment,components
thereof,repairpartsandconsumablestopreventtamperingsotheywillperformaccordingto
specificationswithoutadditionalunwantedfunctionality.

B. The Contractor shall continuously meet the standards of NIST Special Publication 800‐161 while taking

effectivemeasurestomitigatetherisksofforeignintelligenceservices,terroristgroups,orothersfrom
insertingunwantedfunctionalityintothesuppliesand/orservicesprovidedthroughthiscontract.
Uponrequest,theContractorshallprovidewrittendocumentationmeetingallrequirementssetforth
inpartA,above.

XVI. ENTERPRISE MANAGEMENT TOOL

A. TheContractorshallprovideanEnterpriseManagementToolthatmanagesdevices.The
management/monitoringsoftwaretoolshallresidewithinthecustomers’networkinordertomonitor,
manageandgenerateusagetofacilitatecontinuedfleetoptimizationreports.
B. TheEnterpriseManagementToolshalluseSNMPV3.Themanagementtoolshallmonitormeterreads,
volume,usage,supplylevels,andissuenotifications/alertsaboutdevicestatus.Thenotifications/alerts
shallnotifydesignatedpersonnelwhentoorderconsumablesandrequestmaintenance/repair

services.

XVII. INSTALLATION SECURITY REQUIREMENTS

A. TheContractorshallcomplywithallrulesandregulationstoobtainGovernmentinstallationaccessin
ordertomeetallresponsetimesidentifiedwithinthePWS.
B. TheContractorshallcomplywithGovernmentbaseaccessrequirementsassetforthinthebase/
commandregulations.
C. TheContractorshallberesponsibleforanyandallfeesassociatedwiththeapplicationprocessand/or
enrollmenttoaccessanyinstallationorfacility.
D. FordevicesclearedforCLASSIFIEDmaterial,theContractor’srepairtechniciansshallhaveaDoD
securityclearanceequaltoorhigherthantheclassificationofthedeviceandshallprovideverification
whenrequested.

XVIII. GENERAL CONDITIONS

A. TheContractorshallassignasinglepointofcontact(POC)tocoordinatewiththeContractingOfficerin
allaspectsofthiscontractwithinthree(3)businessdaysofreceiptoftheaward.TheContractorshall
provideitsassignedPOC’sname,title,businessaddress,phonenumberandemailaddresstothe
ContractingOfficer.
B. TheContractorshallcomplywiththeHealthInsurancePortabilityandAccountabilityAct(HIPAA)
wheninstallingdevicesatGovernmentmedicalsites.
C. TheContractorshallcomplywiththeSection508accessibilityrequirements.Bysubmissionofitsoffer,
theContractoraffirmsthatitsElectronicInformationTechnology(EIT)suppliesandservicesare
accessibleasoutlinedinthelaw,thestandard,andFARSubpart39.2.TheContractorshallcompletethe
VoluntaryProductAccessibleTemplate(VPAT®)document(Appendix#5)withtheirproposal.

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 11 of 34

XIX. APPENDICES

A. Appendix #1: Installation Report

B. Appendix #2: Removal/Relocation Report

C. Appendix #3: Hard Drive Removal Record

D. Appendix #4: Usage Report

E. Appendix #5: VPAT® Template

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 12 of 34

Appendix #1 INSTALLATION REPORT

Activity Name Customer Address

Customer POC Phone # Customer POC Email

Contract #

CLIN# Manufacturer Model # Serial # Install

Date

Building

Number

Floor Number/ Room Number

Continue on the back, if needed. Note: A Delivery Schedule or Spreadsheet can be used as an attachment to this install report.

Customer Accepting Receipt of Device (Print): Customer Signature

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 13 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

CLIN# Manufacturer Model # Serial # Install

Date Building Number

Floor Number/ Room Number

(Page 2 – Appendix #1)

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 14 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Appendix #2 REMOVAL/RELOCATION REPORT

Activity Name Customer Address

Customer POC Phone # Customer POC Email

Contract #

CLIN# Manufacturer Model # Serial # Date Building# / Floor # / Room #

Continue on the back, if needed. Note: A Delivery Schedule or Spreadsheet can be used as an attachment to this install report.

*HARD DRIVE REMOVAL (SIGNATURES REQUIRED)*

Customer Approving Removal of Device (Print Name):

Must be the EMS DLA Information Operations POC, or designated representative.

Customer Signature

Information Assurance Manager (IT) Receipt of HD (Print

Name):

Information Assurance Manager (IT)

Signature

Contractor Technician (Print Name): Technician Signature

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 15 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

CLIN# Manufacturer Model # Serial # Date Building# / Floor # / Room #

(Page 2 ‐ Appendix #2)

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 16 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Appendix #3 Equipment Management Solutions Hard Drive Removal Record

Form log number

FY ‐ SEQ#

DLADCSVC ‐ ‐

Contract number

Customer (Agency/Command)

Drive manufacturer and model

Hard drive serial number

MFD serial number

Date removed

Printed name of technician removing hard drive

Signature of technician removing hard drive

Drive classification ☐ Classified (up to Secret) ☐ Unclassified (CUI)

Hard drive disposition

☐ Retained by customer ☐ Shipped to DLA Information Operations ☐ Shipped to NSA

Printed name of EMS Division representative accepting drive for DLA Information Operations or customer accepting drive

Signature of EMS Division representative accepting drive for DLA information Operations or customer accepting drive

Printed name/title of person sanitizing hard drive

Signature of person sanitizing hard drive

Date destroyed

Printed name/title verification after Degaussing and Crushing

Signature for verification after degaussing and crushing

Degausser/crusher location ☐ DSI HD‐1T (Phil) ☐ EM/Garner Model TS‐1 (NOR)

☐ SEM Model 0101(Phil) ☐ SEM Model 0101(NOR)

Post‐Sanitization destination (recycling center)

Contact phone number to degausser operator and verification personnel

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 17 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Appendix #4 USAGE REPORT

Monochrome Color

Contract

Model

Serial #

Install Date

(MM/DD/YYYY)

Beginning

Meter

Ending

Usage

Beginning

Ending

Usage

Was Meter

Read

Estimated?

(Yes/No)

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 18 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Appendix #5

[Company] Accessibility Conformance Report

(Based on VPAT® Version 2.4)

Name of Product/Version:

Report Date:

Product Description:

Contact Information:

Notes:

Evaluation Methods Used:

Applicable Standards/Guidelines

This report covers the degree of conformance for the following accessibility standard/guidelines:

Standard/GuidelineIncludedInReport
WebContentAccessibilityGuidelines2.0LevelA(Yes/No)
LevelAA(Yes/No)
LevelAAA(Yes/No)
WebContentAccessibilityGuidelines2.1LevelA(Yes/No)
LevelAA(Yes/No)
LevelAAA(Yes/No)
RevisedSection508standardspublishedJanuary18,2017andcorrected
January22,2018

(Yes / No )

EN301549AccessibilityrequirementssuitableforpublicprocurementofICT
productsandservicesinEurope,‐V3.1.1(2019‐11)

(Yes / No )

Terms

The terms used in the Conformance Level information are defined as follows:

Supports:Thefunctionalityoftheproducthasatleastonemethodthatmeetsthecriterionwithoutknown
defectsormeetswithequivalentfacilitation.
PartiallySupports:Somefunctionalityoftheproductdoesnotmeetthecriterion.
DoesNotSupport:Themajorityofproductfunctionalitydoesnotmeetthecriterion.
NotApplicable:Thecriterionisnotrelevanttotheproduct.
NotEvaluated:Theproducthasnotbeenevaluatedagainstthecriterion.ThiscanbeusedonlyinWCAG

2.0 Level AAA.

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 19 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Revised Section 508 Report Notes:

Chapter 3: Functional Performance Criteria (FPC) Notes:

Criteria Conformance Level Remarks and Explanations

302.1WithoutVision.
Whereavisualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatdoesnotrequireuservision.
302.2WithLimitedVision.
Whereavisualmodeofoperationisprovided,ICTshallprovideatleast
onemodeofoperationthatenablesuserstomakeuseoflimitedvision.
302.3WithoutPerceptionofColor.Whereavisualmodeofoperationis
provided,ICTshallprovideatleastonevisualmodeofoperationthat
doesnotrequireuserperceptionofcolor.
302.4WithoutHearing.
Whereanaudiblemodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatdoesnotrequireuserhearing.
302.5WithLimitedHearing.
Whereanaudiblemodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatenablesuserstomakeuseoflimited

hearing.

302.6WithoutSpeech.
Wherespeechisusedforinput,control,oroperation,ICTshall
provideatleastonemodeofoperationthatdoesnotrequireuser

speech.

302.7WithLimitedManipulation.Whereamanualmodeofoperation
isprovided,ICTshallprovideatleastonemodeofoperationthatdoes
notrequirefinemotorcontrolorsimultaneousmanualoperations.
302.8WithLimitedReachandStrength.
Whereamanualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatisoperablewithlimitedreachand
limitedstrength.
302.8WithLimitedReachandStrength.
Whereamanualmodeofoperationisprovided,ICTshallprovideat
leastonemodeofoperationthatisoperablewithlimitedreachand
limitedstrength.
302.9WithLimitedLanguage,Cognitive,andLearningAbilities.ICT
shallprovidefeaturesmakingitsusebyindividualswithlimited
cognitive,language,andlearningabilitiessimplerandeasier.

Chapter 4: Hardware Notes:

Criteria Conformance Level Remarks and Explanations

402.1General.(ClosedFunctionality)
ICTwithclosedfunctionalityshallbeoperablewithoutrequiringthe
usertoattachorinstallassistivetechnologyotherthanpersonal
headsetsorotheraudiocouplers,andshallconformto402.

Heading cell – no response required Heading cell – no response required

402.2.1InformationDisplayedOn‐Screen.
Speechoutputshallbeprovidedforallinformationdisplayedon‐

screen.

402.2.2TransactionalOutputs.
Wheretransactionaloutputsareprovided,thespeechoutputshall
audiblyprovideallinformationnecessarytoverifyatransaction.
402.2.3SpeechDeliveryTypeandCoordination.
Speechoutputshallbedeliveredthroughamechanismthatisreadily
availabletoallusers,including,butnotlimitedto,anindustrystandard
connectororatelephonehandset.Speechshallberecordedordigitized
human,orsynthesized.Speechoutputshallbecoordinatedwith

SP7000-22-Q-1002 Attachment 1 - Performance Work Statement (PWS) Page 20 of 34

FOROFFICIALUSEONLY–INTERNALDLAJ67USEONLY
DLAInformationOperationsPerformanceWorkStatement(PWS)Version21.1

Criteria Conformance Level Remarks and Explanations

informationdisplayedonthescreen.
402.2.4UserControl.
Speechoutputforanysinglefunctionshallbeautomatically
interruptedwhenatransactionisselected.Speechoutputshallbe
capableofbeingrepeatedandpaused.
402.2.5BrailleInstructions.
Wherespeechoutputisrequiredby402.2,brailleinstructionsfor
initiatingthespeechmodeofoperationshallbeprovided.Brailleshall
becontractedandshallconformto36CFRpart1191,AppendixD,
Section703.3.1.
402.3.1PrivateListening.
WhereICTprovidesprivatelistening,itshallprovideamodeof
operationforcontrollingthevolume.WhereICTdeliversoutputbyan
audiotransducertypicallyhelduptotheear,ameansforeffective
magneticwirelesscouplingtohearingtechnologiesshallbeprovided.
402.3.2Non‐privateListening.
WhereICTprovidesnon‐privatelistening,incrementalvolumecontrol
shallbeprovidedwithoutputamplificationuptoalevelofatleast65
dB.Afunctionshallbeprovidedtoautomaticallyresetthevolumeto
thedefaultlevelaftereveryuse.
402.4CharactersonDisplayScreens.
Atleastonemodeofcharactersdisplayedonthescreenshallbeina
sansseriffont.WhereICTdoesnotprovideascreenenlargement
feature,charactersshallbe3/16inch(4.8mm)highminimumbased
ontheuppercaseletter“I”.Charactersshallcontrastwiththeir
backgroundwitheitherlightcharactersonadarkbackgroundordark
charactersonalightbackground.
402.5CharactersonVariableMessageSigns.
Charactersonvariablemessagesignsshallconformtosection703.7
VariableMessageSignsofICCA117.1:2009.
403.1Biometrics
Whereprovided,biometricsshallnotbetheonlymeansforuser
identificationorcontrol.
404.1PreservationofInformationProvidedforAccessibility
ICTthattransmitsorconvertsinformationorcommunicationshallnot
removenon‐proprietaryinformationprovidedforaccessibilityorshall
restoreitupondelivery.
405.1Privacy.
Thesamedegreeofprivacyofinputandoutputshallbeprovidedtoall
individuals.Whenspeechoutputrequiredby402.2isenabled,the
screenshallnotblankautomatically.
406.1StandardConnections
Wheredataconnectionsusedforinputandoutputareprovided,at
leastoneofeachtypeofconnectionshallconformtoindustry
standardnon‐proprietaryformats.
407.2Contrast.
Whereprovided,keysandcontrolsshallcontrastvisuallyfrom
backgroundsurfaces.Charactersandsymbolsshallcontrastvisually
frombackgroundsurfaceswitheitherlightcharactersorsymbolsona
darkbackgroundordarkcharactersorsymbolsonalightbackground.
407.3.1TactilelyDiscernible.
Inputcontrolsshallbeoperablebytouchandtactilelydiscernible
withoutactivation.

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .