Special Notice ACSQT Process Guide v.Final.pdf

SPECIAL NOTICE

70T04026SN7573N001

For

The Department of Homeland Security

Transportation Security Administration

Air Cargo Screening Qualification Test

Process Guide

April 2026 ii

Air Cargo Screening Qualification Test Process Guide

Table of Contents I. Purpose

II. Disclaimer

III. Background

IV. ACSTL Overview

V. High-Level Requirements for ACSTL Screening Technology

VII. Visual Image Qualification Evaluation Methods

VIII. Qualification Process Steps

IX. Device Sustainment

X. Contact Information

XI. Appendices

Table 1: ACSTL Qualification Groups Table 2: Capacity Types for Aperture-based VI Devices Table 3: High-Level Requirements for ALL Technology Qualification Groups Table 4: High-Level Requirements for EACH Technology Qualification Group iii

Acronyms

Acronym

ACSQT

ACSTL

CM

CMP

CR

CT

DHS

EDS

EMD

ETD

FRD

IED

IMS

MCIL

MD

QDP

QG

QMP

PCA

PS

SAM

SOP

SSI

SSP

STA

TSA

TSL

VI

Definition

Air Cargo Screening Qualification Test Air Cargo Screening Technology List Configuration Management Configuration Management Plan Change Request Computed Tomography U.S. Department of Homeland Security Explosive Detection System Electronic Metal Detection Explosive Trace Detection Functional Requirements Document Improvised Explosive Devices Ion Mobility Spectrometry Master Configuration Item List Metal Detector Qualification Data Package Qualification Group Qualification Management Plan Physical Configuration Audit Performance Specification System for Award Management Standard Operating Procedures Sensitive Security Information Standard Security Program Security Threat Assessment Transportation Security Administration Transportation Security Laboratory

Visual Image

I. Purpose

The purpose of this document is to formally provide information regarding the Transportation Security Administration (TSA) Air Cargo Screening Qualification Test (ACSQT) process to vendors interested in listing their air cargo screening devices on the TSA Air Cargo Screening Technology List (ACSTL). This document and supporting ACSQT-related documents are posted on the System for Award Management (SAM) via a Special Notice under 70T04026SN7573N001.

TSA encourages white paper submissions in accordance with Appendix A (Not included in the document) (ACSQT White Paper Requirements and Templates) for vendors with technologies that meet the high-level requirements as set forth in this document, for the related technology group(s).

The three key objectives for this Special Notice are:

1. Define the candidate air cargo screening technology groups that are being considered by TSA for air cargo screening qualification.

2. Establish high-level requirements for submitting a white paper under the ACSQT process;

and

3. Provide an administrative and technical overview of the ACSQT process.

II. Disclaimer

This Special Notice is for informational purposes only and shall not be construed as a commitment or a promise of a contract by the Government. This Special Notice does not commit the Government to pay any costs incurred in the submission of any responses to this Notice. Although it is the intent of the Government to pursue qualification test activities as prescribed herein, the Government reserves the right to discontinue this process at any point and at any time if the cessation of this process is determined to be in the best interests of the Government. Obligations of the Government to the participants resulting from such a cessation are limited to that which is prescribed herein. Inclusion in the ACSTL does not guarantee receipt of a Government contract or a contract with an interested regulated party.

III. Background

The mission of TSA is to protect the nation’s transportation systems to ensure freedom of movement for people and commerce. To support this mission, TSA has established the ACSQT process for qualifying air cargo screening technologies to ensure a uniformly high standard performance in detecting explosive and incendiary threats and thereby preventing threat items from being transported in air cargo on all-cargo or passenger aircraft.

According to Public Law 110-53, air cargo uplifted onto passenger aircraft must be screened at a security level commensurate with that of passenger baggage. To meet its air cargo regulatory responsibilities, the TSA qualifies screening equipment and publishes a list of authorized systems, known as the ACSTL. Authorized screening facilities may only use systems listed on the ACSTL.

All systems listed on the ACSTL must comply with the TSA minimum requirements for the relevant technology type.

The legislative authority established by Public Law 110-53 drives many of the key differences between passenger aviation screening operations (checked baggage and checkpoint) and air cargo.

Unlike with TSA checked baggage and checkpoint screening operations, where TSA is the regulator, owner, and operator of screening technology, the owner/operator for air cargo screening operations is mostly decentralized across private industry and TSA primarily acts as a compliance regulator. As such, TSA generally does not purchase screening equipment for regulated parties. Therefore, the private industry owner/operator performs the cost analysis for their selection of screening technologies, which allows them to tailor their technology solutions to their specific circumstance based on their cost/benefit analysis.

Most devices listed on the ACSTL are commercial technologies intended for use in applications under TSA regulatory purview. Most of these ACSTL commercial technologies do not have TSA certified algorithms and may be sold overseas and to non-regulated entities. However, some ACSTL technologies, such as Explosive Detection Systems (EDS), use TSA certified algorithms, which may not be sold commercially without TSA approval.

IV. ACSTL Overview

In accordance with TSA Air Cargo Standard Security Programs (SSP), authorized private air cargo screening facilities may only use technologies listed on the TSA ACSTL. The ACSTL serves as the official technology list for regulated parties and their authorized representatives to use when procuring screening equipment in accordance with TSA-approved or accepted security programs.

TSA publishes new versions of the ACSTL as needed, typically two (2) to four (4) times per year.

Qualification Groups

There are four (4) Qualification Groups (QG) listed on the ACSTL, which are categorized by function/application, rather than by specific technology type. All screening technologies listed on the ACSTL must comply with the TSA functional requirements for the related QG. TSA has recently expanded its definition of each QG to include multiple types of technologies and for the development and inclusion of new and emerging technologies.

Table 1: ACSTL Qualification Groups

Qualification Group

Function/Application Example Technologies

QGl: VI

Visual Image (VI) inspection devices rely on operators to review each image to identify Improvised Explosive Devices (IED), Improvised Incendiary Devices (IID) or their components (e.g., power source, initiator or ignitor, main charge, or controls). These technologies do not have automated threat detection capabilities.

In previous versions of the ACSTL, this QG was referred to as "X-Ray”.

Transmission X-Ray, Computed Tomography

(CT)1

QG2: ETD

Explosive Trace Detection (ETD) devices automatically detect explosive residual material on typical cargo substrates through the application and analysis of either contact (i.e., swab-based) or non-contact collection processes, without opening or penetrating the item being inspected.

Ion Mobility Spectrometry (IMS), Mass Spectrometry

QG3: MD

Metal Detector (MD) inspection devices automatically scan for metallic IED or IID components (i.e., power source, initiator or ignitor, or controls).

In previous versions of the ACSTL this QG was referred to as "EMD."

Electronic Metal Detection (EMD), Magnetic Metal Detection

QG4: EDS

Explosive Detection System (EDS) devices have automated threat detection capabilities in accordance with TSA Checked Baggage Certification Detection Standards (or TSA approved equivalent). These technologies may or may not generate an image.

CT, X-Ray Diffraction

For each QG, TSA has a published Functional Requirements Document (FRD) that lists all TSA requirements. For some QGs, this document is called a Performance Specification (PS), but the term Performance Specification is being phased out to standardize terminology with other federal documents, therefore the term “Functional Requirements Document” or “FRD” will now be used.

1 CT is considered VI when it is not paired with automatic threat detection capabilities.

Qualified, Approved, Grandfathered

Each QG on the ACSTL is further categorized by their stage in the qualification process:

1. Qualified: Specifies device models that have successfully completed a TSA evaluation process and are deemed “Qualified” for screening operations. When procuring a device from the ACSTL, regulated parties are encouraged to select a device listed under the “Qualified” Technology section.

2. Approved: Specifies device models that have been conditionally approved by TSA for screening operations and are currently undergoing or scheduled to undergo field test activities. These devices have up to thirty-six (36) months from the date added to the “Approved” technology section to successfully pass TSA's suitability based field-test activities and be listed as “Qualified”. If a device is unable to pass field-test activities within the prescribed thirty-six (36) months, TSA may remove the device from the “Approved” technology section. Regulated parties who procure a device listed under the “Approved” technology section do so at their own risk as an “Approved” device that fails to achieve “Qualified” status in the established timeframe may be moved to the “Grandfathered” section of the ACSTL.

3. Grandfathered: Specifies device models which are currently qualified to screen cargo but have a stated expiration date. This allows regulated parties who are using the “Grandfathered” technology an opportunity to gradually phase out the device and transition to devices listed in the “Qualified” or “Approved” technology sections.

Regulated parties should not purchase devices listed under this section and should refer to the “Qualified” or “Approved” sections for their procurement needs.

Sensitive Security Information

As defined by Federal Regulation 49 C.F.R. Part 1520, Sensitive Security Information (SSI) is information that, if publicly released, would be detrimental to transportation security. The TSA has deemed some information pertaining to air cargo screening equipment as SSI. As such, the ACSTL is an SSI document and individuals viewing it must be TSA vetted. To facilitate the purchase of air cargo screening equipment, the TSA publishes a Non-Sensitive Security Information (Non-SSI) ACSTL which is publicly available at: https://www.tsa.gov/sites/default/files/non-ssi_acstl.pdf. The Non-SSI version does not identify the specific software versions qualified to screen air cargo, however it does identify the top assembly part numbers of the device.

Air Cargo Commodity Types

While TSA is mandated to ensure that air cargo is screened commensurate with that of checked baggage, there is a wider variety of irregularly shaped and much heavier objects screened in the air cargo venue than in checked baggage. The variety of dimensions and weights are much more diverse for air cargo parcels. Unlike checked baggage where the objects of inspection are generally luggage, air cargo's objects of inspection include cardboard boxes, wooden crates, plastic pouches, drums, metal containers, bags, and palletized cargo. As such, some air cargo screening technologies may be restricted to the screening of specific commodities. Restrictions may be placed on individual models of equipment, types of technologies, or entire Qualification Groups, as deemed appropriate by TSA.

Aperture-based Screening Technologies

TSA categorizes VI screening technologies by the maximum dimensional width and height capacity of their aperture. TSA has established three (3) capacities as defined by the aperture size ranges which can be found in the Table below.

Table 2: Capacity Types for Aperture-based VI Devices

Capacity

Designation Width Range Height Range Minimum

Parcel Weight Limitation

Normal Use

A 19.3” ≤ W < 31.5” (49 cm ≤ W 80 cm)

15.0” ≤ H < 23.6” (38 cm ≤ H < 60 cm)

110.2 lb (50 kg)

Single-Piece

B 31.5” ≤ W < 48.0” (80 cm ≤ W < 122 cm)

23.6” ≤ H < 60.2” (60 cm ≤ H < 153 cm)

220.5 lb (100 kg)

C 48.0” ≤ W (122 cm ≤ W)

60.2” ≤ H (153 cm ≤H)

2,205 lb (1,000 kg)

Homogenous Consolidation

V. High-Level Requirements for ACSTL Screening Technology

Table 3 below lists the high-level requirements applicable to all ACSTL technology qualification groups. The entire set of TSA ACSTL requirements by technology qualification group will be made available to vendors upon acceptance of a white paper and successful completion of a TSA conducted Security Threat Assessment (STA) for the company and selected employees. The STA is discussed subsequently in this document.

Table 3: High-Level Requirements for ALL Technology Qualification Groups

Area General high-level requirement for all technology qualification groups

Detection

Provide high throughput screening for a broad range of threats with real time detection while controlling false alarm rates and protecting against operator error.

Security Protect sensitive hardware, software components, and data records with security safeguards and countermeasures.

Sustainment Support, maintain and operate the hardware and software capabilities of a system.

Safety

Protect operators and transient personnel from electrical mechanical temperature, radiation, and electromagnetic hazards that are considered detrimental to health and human safety.

In addition to the high-level requirements applicable to all ACSTL technology qualification groups as reflected in Table 3, there are also high-level requirements that relate to each individual ACSTL Technology Group, which are reflected in Table 4 below.

Table 4: High-Level Requirements for EACH Technology Qualification Group

Qualification

Group High-level requirements for each technology qualification group

QGl: VI ► Must produce at least two (2) complimentary images ► Must meet image quality requirements

QG2: ETD ► Must meet TSA ETD Detection Standard Version 6.2, March 2015

QG3: MD ► Must meet TSA Cargo Metal Detection Standard, Version 2.0, February

QG4: EDS

► Must meet TSA EDS Detection Standard, Version 7.2. March 2014(i)(ii) ► Must meet image quality requirements, where applicable

(i) Alternate explosive detection certifications, based on detection testing performed at the Transportation Security Laboratory (TSL), may be acceptable if deemed commensurate with checked baggage explosives detection requirements.

(ii) Compliance with EDS explosive detection certification requirements is a prerequisite for white paper acceptance.

TSA Detection Standards for all technology qualification groups are classified. Therefore, TSA distribution of these Detection Standards to interested parties is dependent upon successful completion of government requirements related to receiving classified information.

VI. ACSQT Process Overview

The ACSQT process has both technical and administrative components, which vary by technology qualification group.

A. General Stages of Testing

The ACSQT evaluates the effectiveness and suitability of submitted devices based on requirements set forth in the FRD for that qualification technology group. The open submission process allows vendors to submit their devices into the ACSQT process at any time. The ACSQT process is divided into two (2) stages of assessment.

Stage I. Submission Processing and Requirements Testing. Stage I is a verification of device conformance with requirements based on 1) vendor furnished data, and 2) independent TSA-sponsored audits and testing. To pass Stage I testing, a device must meet all of the detection and non-detection requirements set forth in the related ACSTL Technology Qualification Group FRD.

However, individual requirements may be waived or deferred at TSA's discretion, on a case-by-case basis. All candidate devices must successfully satisfy Stage I criteria to be listed in the ACSTL Approved section.

Stage II. Field Assessment. Stage II testing is a validation of device performance in an operational air cargo screening environment. Stage II field observations, data collection and analysis assess a device's suitability as defined by reliability, maintainability and availability requirements within an operational screening environment. To pass Stage II testing, a device must meet all of the requirements set forth in the related ACSTL Technology Qualification Group FRD. All candidate devices must successfully satisfy Stage II criteria to be listed in the ACSTL Qualified section.

B. Progressing Through the ACSQT Process

At defined decision points within each stage of qualification testing, TSA will notify vendors in writing of their qualification status. TSA can either:

1. Accept,

2. Reject,

3. Conditionally Accept, or

4. Request Clarification/Remediation.

Accept. An "accept" signifies that a device can progress to the next stage of qualification testing. For white papers and Qualification Data Package (QDP) submissions, "accept" means that submission requirements have been satisfactorily addressed. For Stage I testing, an "accept" signifies that the device will be listed in the Approved section of the ACSTL. Upon completion of Stage II testing, an "accept" signifies that device will be listed in the Qualified section of the ACSTL.

Reject. A "reject" signifies that progression within the ACSQT process is stopped and removes the device from qualification consideration. The reasons for rejection will be provided in writing. Re-entry into the qualification process is granted, at TSA’s discretion, upon successful remediation of the reason for rejection.

Conditionally Accept. Generally, limited to completion of Stage I testing, a "conditionally- accept" signifies that a device can progress to Stage II qualification testing upon successful completion of TSA directed corrective action, which will be provided in writing. Depending on the area requiring remediation, TSA will also provide a timeframe for resolution for each requirement ranging from thirty (30) days to thirty-six (36) months. The timeframe will depend on the nature of the required corrective action and a reasonable expectation of time needed by the vendor for resolution.

Request Clarification/Remediation. A "Request for Clarification/Remediation" signifies that progression within the ACSQT process has been placed on hold until the vendor has provided remediation as requested by TSA regarding one or more issues. Written evidence and/or demonstration of remediation must be addressed by the vendor within the time-period specified by TSA on an issue-by-issue basis. Failure to provide the requested information within the remediation period may result in the removal of the device from consideration.

Potential causes of a TSA request for remediation or a TSA decision to reject a device during qualification testing include, but are not limited to:

1. Lack of compliance with one or more TSA requirements.

2. Device issues or failures that require excessive maintenance or repair actions.

3. Difficulty obtaining data from the device and/or vendor to verify compliance with TSA requirements.

4. Screening difficulties, including lack of use by site personnel, which indicate performance, usability and suitability issues in an air cargo environment.

5. Lack of adequately trained maintenance support and/or availability of parts at all device locations to perform preventive and corrective maintenance within agreed- upon timeframes.

At its discretion, TSA can either accept or reject candidate devices at any time during qualification testing. Once a device has received Approved status after successful completion of Stage I testing, this device has up to thirty-six (36) months to pass Stage II testing.

VII. Visual Image Qualification Evaluation Methods

For VI technology qualification group (QG1) submissions, TSA uses one of three (3) evaluation methods, which determines the nature and extent of technical testing. While TSA reserves final discretion in determining the appropriate evaluation method for each qualification group technology submission, the following criteria will be among those considered by the TSA to determine the appropriate evaluation methods:

1. Device Similarity: Configuration similarity of submitted device to a device currently "Qualified" on the ACSTL from the same vendor.

2. Known Vendor Status: Vendors who have successfully participated in the ACSQT process previously within the same qualification group are considered to be "known" vendors. Vendors who have participated in other TSA programs, but not the ACSQT, are not considered known vendors. Likewise, a vendor who has successfully participated in ACSQT process, but in a different qualification group, is not considered a known vendor.

If a vendor does not meet the definition of known vendor, then it is considered a new vendor.

A. Evaluation Method #1

Evaluation Method # 1 is considered to be the most expeditious evaluation method. This method is reserved for devices manufactured by "known" vendors in which a "similar" device is already listed as Qualified on the ACSTL.

Evaluation Method #1 relies heavily on vendor furnished evidence, requires a Physical Configuration Audit (PCA), independent Image Quality (IQ) assessment and independent radiation survey. IQ may be performed by TSA or designated representatives at an agreed upon vendor facility or via vendor provided emulator supplied to a TSA designated test facility. Radiation surveys are conducted by TSA or designated representatives, or National Recognized Testing Laboratory (NRTL) or international equivalent. Stage II is not required for devices undergoing Evaluation Method #1 and at the successful conclusion of testing the device is listed in the Qualified section of the ACSTL.

B. Evaluation Method #2

Evaluation Method #2 is also considered an expedited evaluation method for devices manufactured by “known” vendors but not eligible for Evaluation Method #1.

Evaluation Method #2 requires a PCA and conducts full Stage I testing activities at an agreed upon vendor facility or TSA designated test facility. Stage II evaluation will only be conducted at the discretion of TSA. If Stage II is deemed not necessary, the device is listed in the Qualified section of the ACSTL at the successful conclusion of Stage I testing.

C. Evaluation Method #3

Evaluation Method #3 is for devices submitted by a vendor that do not meet the definition of “known” vendor. Evaluation Method #3 requires a PCA and conducts full Stage I testing activities at an agreed upon vendor facility or TSA designated test facility. Upon successful conclusion of Stage I testing the device is listed in the Approved section of the ACSTL. The device will then be placed in an operational air cargo facility for a period of not less than nine (9) months to assess the device’s suitability and effectiveness for the air cargo screening mission. Upon successful conclusion of testing the device is listed in the Qualified section of the ACSTL.

VIII. Qualification Process Steps

This section describes the administrative and technical steps required to fulfill qualification requirements used to evaluate a device. While most of these steps pertain to all qualification groups, there are some steps that specifically relate to certain technologies. As such, unless otherwise stated, each step is assumed to pertain to all qualification group technologies.

Step 1: White Paper Submission

Submission of a white paper is a candidate device's entry point into the ACSQT process. The white paper provides TSA with an introduction to the device and serves as a foundational documentation to support a level of confidence that a device may be able to successfully meet the requirements of the ACSQT process. All white papers must comply with common eligibility and formatting requirements. However, each qualification technology group has unique white paper technical specifications as defined in Appendix A of this Special Notice.

All completed white paper submission packages (white paper form and attachment files) shall be transmitted electronically in either PDF or Microsoft Word format to the ACSQT program office at OSC_ACSQT@tsa.dhs.gov. In the subject line of the electronic submission, vendors shall include the Special Notice title, Special Notice number, and the qualification group number of the submitted device. Vendors are encouraged to obtain written confirmation of TSA receipt of white paper submissions (reference Section 8 for contact information).

Step 2: White Paper Assessment

Vendor furnished white papers will be reviewed by the TSA to determine if a candidate device meets threshold criteria for entering the ACSQT process. Following the TSA white paper evaluation, a decision will be reached to: 1) accept, 2) reject, or 3) request clarification/remediation. An eligibility letter will be transmitted to notify the vendor of their device's status.

Step 3: Security Threat Assessment

After white paper acceptance, vendors are required to submit applicable documentation for the Security Threat Assessment (STA) as defined in Appendix B (SECURITY THREAT ASSESSMENT AND DISCLOSURE OF SSI). An STA may be waived for those vendors with previously submitted devices and/or those that have already been vetted.

Elements of the ACSQT require access to Sensitive Security Information (SSI). In order to access SSI, under the requirements of 49 CFR Part 1520, the vendor must receive a positive Security Threat Assessment for all personnel with a need-to-know. The vendor must appoint a Senior Corporate Official, who as a senior corporate representative is obligating the vendor to comply with the requirements of 49 CFR Part 1520. The vendor is also advised to appoint an SSI Coordinator to assist in the preparation of ACSQT submissions and provide the necessary vetting information found in Appendix B (SECURITY THREAT ASSESSMENT AND DISCLOSURE OF SSI) to TSA upon receipt of white paper acceptance. Both the Senior Corporate Official and SSI Coordinator must receive a positive STA. The vendor must designate either the Senior Corporate Official or SSI Coordinator as the recipient of SSI communications and materials. Once the vendor's SSI POC and all other necessary personnel are successfully vetted in accordance with the procedures outlined in Appendix B, TSA will be able to electronically transmit password protected copies of documents so that vendors can compile their QDPs. Reference Appendix B for additional details.

In the event of an unfavorable STA, a vendor may be disqualified from the ACSQT process. This disqualification decision will be disclosed in writing and is not subject to appeal. Any reasons for disqualification will also not be disclosed.

Step 4: ACSQT Coordination Teleconference

After notifying a vendor of ACSQT program eligibility based on an acceptance of the white paper submission and favorable STA, TSA will coordinate a teleconference to discuss the requirements of further participation in the ACSQT process. This teleconference will provide vendors the opportunity to ask questions of TSA personnel. If applicable, TSA responses to questions will be recorded and published under this Special Notice announcement.

During the ACSQT Coordination Teleconference, TSA will provide vendors with a detailed briefing on the qualification process, including an overview of the following qualification-related documentation:

1. Functional Requirements Document (FRD): For each qualification group, TSA has a published FRD that lists all TSA requirements and serves as the primary basis for a vendor to prepare a QDP.

2. Qualification Management Plan (QMP): For each qualification group, the QMP establishes the overarching management strategy for qualification and the technology evaluation method(s). The QMP also includes detailed instructions for completing a technology specific Qualification Data Package (QDP).

3. Configuration Management Plan (CMP): For each qualification group, the CMP and its accompanying Standard Operating Procedures (SOPs) define the methods for managing the configuration of devices to control functional characteristics, operational performance, and physical attributes. The CMP also defines the methodologies for configuration auditing, defining baselines, and change management.

NOTE: Vendors may elect to waive the Coordination Teleconference if they have previously submitted a device and have already been briefed by TSA. However, if the teleconference is waived, it is the vendor's responsibility to ensure that they have and are using the latest copy of the QMP, FRD, and template for the QDP submission.

Step 5: QDP Submission

After participating in the ACSQT Coordination Teleconference, vendors wishing to continue participation in the qualification test must compile and submit a QDP. Details for compiling the QDP will be covered during the ACSQT Coordination Teleconference and are provided in the QMP.

Electronic submission of the QDP is required. Due to size constraints, email is not always desirable, and vendors are encouraged to contact the ACSQT program office for advice on file submission through a secure website.

Step 6: QDP Assessment

QDP submissions will be assessed by the TSA to determine candidate screening device compliance with FRD and QMP requirements. Similar to white paper submissions, following the assessment, a decision will be reached to: 1) accept, 2) reject, or 3) request clarification/remediation. Following the assessment decision, an eligibility letter will be transmitted to notify the vendor of their device's status.

Step 7: Stage I Logistical Coordination and Device Bailment

Once TSA notifies a vendor of QDP acceptance, TSA will schedule a teleconference to discuss logistical coordination details for Stage I testing, as applicable.

During the coordination process, vendors may be required to enter into a bailment agreement with a TSA-designated third-party site host, depending on the facility arrangements. The purpose of the bailment agreement will be to establish the responsibilities and liabilities for the TSA-designated third-party site and the vendor while the equipment is in the custody of the designated third-party site host.

For testing to be performed at a location other than the vendor's facility, vendors will be required to ship at least one unit to the TSA-designated third-party site. For QGl: VI, QG3: MD, and QG4: EDS, at least one device must be provided. For QG2: ETD, at least four (4) units must be provided. ETD units may be provided to more than one TSA-designated third-party site.

TSA will not be responsible for costs associated with preparing the device for test activities, which can include: delivering the device to the test facility, uncrating the device, removing packaging material, installing the device, providing and installing ancillary equipment, calibrating the equipment, and training personnel on the device's operational functionality.

TSA will not be responsible for costs associated with operating and sustaining the device for test activities, to include all consumables, parts, labor, and travel associated with preventive maintenance, and parts, labor, and travel associated with corrective maintenance.

TSA will not be responsible for costs associated with removing the device from the test facility after test activities are complete, which may include: crating the device and associated ancillary equipment, transporting the device and ancillary equipment from the set-up location to the loading dock, loading the device and ancillary equipment onto the delivery truck, and transporting the device and ancillary equipment back to their point of origin.

Step 8: Physical Configuration Audit (PCA)

A PCA is required to verify the configuration of the device being tested prior to any verification testing. Each configuration item will be verified on the physical device and linked to the Master Configuration Item List (MCIL), engineering drawings, drawing tree, and other documentation linked to the vendor design and manufacturing process.

The vendor will provide documentation with the QDP submission for review by the ACSQT Program Office and provide technical support during the PCA. The PCA will be conducted prior to the start of Stage I testing. The ACSQT Program Office will use this documentation to create a device’s product baseline, which will be controlled while the device is listed on the ACSTL. Specific PCA requirements are included in the Configuration Management Plan (CMP) and Configuration Identification Standard Operating Procedure (SOP), which can be requested from OSC_CMAC@tsa.dhs.gov.

Step 9: Stage I Requirements Testing

Requirements testing for each qualification group will be performed in accordance with the corresponding QMP. Requirements testing involves testing a device's compliance with applicable FRD requirements.

With the exception of QG4: EDS related to Detection Standard Testing, the high-level requirements for each ACSTL Qualification Group will be tested/verified in this step.

In certain cases, detailed results of testing may be classified and will not be made available to vendors without proper security clearances.

Step 10: TSA Review and Notification of Stage I Results

After TSA's review of test results, TSA will notify vendors in writing of their Stage I test status.

Devices that pass Stage I testing, which are not required to undergo Stage II testing, will be added to the Qualified section of the ACSTL. Devices that pass Stage I testing, but must still undergo Stage II testing, will be added to the Approved section of the ACSTL.

After Stage I testing, there may be cases in which TSA will "conditionally-accept" a device for the Approved section of the ACSTL when TSA has identified one or more areas where the device is not fully compliant with some of the FRD requirements. Lack of compliance with certain requirements (i.e., data recording/reporting) may impede the verification/validation process of compliance with other requirements (e.g., false alarm rate in an operational environment, frequency of critical failures) and preclude completion of evaluation of all requirements. TSA, at its own discretion, will determine the timeframe for compliance any non-compliance.

Step 11: Stage II Logistical Coordination

For devices that pass Stage I and are added to the Approved section of the ACSTL, vendors will be responsible for entering into a bailment agreement with a TSA-designated third-party host facility for Stage II evaluation. The bailment agreement will require the vendor to provide an Approved device, for a minimum of nine (9) months and up to thirty-six (36) months, to a TSA designated third-party host facility for operational evaluation at no cost to the government.

For the duration specified in the bailment agreement, the third-party host facility will utilize equipment to meet screening requirements in accordance with the applicable Standard Security Program. In the event that a vendor submits multiple devices from the same product line during Stage I, TSA may elect for the vendor to provide only one device to represent the family of devices during Stage II. If a vendor is unable to participate in Stage II, TSA will remove the vendor's device from the Approved section of the ACSTL.

Step 12: Equipment Installation

TSA will not be responsible for any delivery, offloading, training, site planning, preparation, installation, integration, maintenance, or removal costs associated with the device during Stage II.

The vendor will also be responsible for loading and delivery of the device back to its point of origin upon completion of Stage II.

Step 13: Data Collection

On a periodic basis (usually monthly), a TSA authorized representative will travel to the Stage II location and witness equipment screening operations as a means to evaluate operational suitability, and document screening issues and equipment failures. During qualification testing, TSA shall have access to all data recorded on the device.

If the device has difficulty recording and storing all required data as required by its related FRD, or the data on the device is deleted by a maintenance technician, operator, automatically, or by another party, TSA may delay the qualification process and/or TSA may opt to reject the device from the qualification process. Additionally, if device data downloads are arduous (e.g., data can only be downloaded one week at a time or multiple reports must be downloaded to fulfill FRD requirements), TSA may delay the qualification process and/or TSA may opt to reject the device from the qualification process.

Based on an analysis of the data collected, TSA may opt to place the device on the Qualified section of the ACSTL either before the estimated end date of Stage II testing, at the end date of Stage II testing, sometime after the estimated end of Stage II testing, or reject the device from the Qualification process entirely.

Step 14: TSA Review and Publication of Stage II Results

Stage II data will be reviewed, and the vendor will be notified of the results. Devices that successfully pass Stage II testing will be listed in the Qualified section of the ACSTL. Failure of a device to pass Stage II within a thirty-six (36) month timeframe may result in its removal from the Approved section of the ACSTL.

IX. Device Sustainment

Devices that are published on the ACSTL will be required to comply with the configuration control and management process as set forth in the CMP and supporting SOPs. This requires vendors to 1) maintain a configuration controlled MCIL, 2) notify TSA of anticipated configuration changes throughout the lifecycle of the device via Change Requests (CR) as defined in the TSA Configuration Change Management SOP, and 3) obtain TSA approval of changes prior to their implementation and marketing to regulated parties and their authorized representatives. TSA will conduct necessary technical reviews to determine if CRs are deemed acceptable variants or baseline changes of the originally Approved/Qualified device, or if the proposed change requires additional testing. Vendors' failure to comply with the configuration control and management process as detailed in the CMP and supporting SOPs may jeopardize future updated/upgraded versions qualification status of the devices in question and their placement on the ACSTL.

X. Contact Information

Contact information for white paper submission and general correspondence is as follows:

Email: OSC_ACSQT@tsa.dhs.gov

XI. Appendices

1) Appendix A QG1

2) Appendix A QG2

3) Appendix A QG3

4) Appendix A QG4

5) Appendix B Terms