Statement of Work (SOW) (2025) (2).pdf

PR #: 70098PR250000089

STATEMENT OF WORK

LAST UPDATED: 7/29/2025 PAGE 1/19

STATEMENT OF WORK (SOW)

FOR

U.S. Coast Guard (USCG) Office of Port & Facility Compliance Cargo and Facilities Division (CG-FAC-2)

Transportation Worker Identification Credential (TWIC) Handheld Biometric

Reader Hardware/Software/Maintenance Services

1.0 GENERAL

1.1 BACKGROUND

The United States Congress, through the Maritime Transportation Security Act (MTSA) of 2002 and the Safe Port Act of 2006, directed the Department of Homeland Security (DHS) to issue biometric transportation security credentials to any individual with unescorted access to secure areas of facilities and vessels and all mariners holding USCG credentials or qualification documents. Controlling access to secured areas is a critical component of DHS efforts to enhance port security.

TWIC is a common identification credential for all personnel requiring unescorted access to secure areas of MTSA-regulated facilities and vessels, and all mariners holding USCG issued credentials. The Transportation Security Administration (TSA) will issue a worker’s tamper-resistant “Smart Card” containing the worker’s biometric (fingerprint template) to allow for a positive link between the card itself and the individual. The USCG will verify TWIC when conducting vessel and facility inspections and during spot checks using Hand-Held Readers, ensuring credentials are valid.

Over 2.8 million transportation workers have been issued TWIC. This includes USCG-credentialed merchant mariners, port facility employees, longshoremen, truck drivers, and others requiring unescorted access to secure areas of maritime facilities and vessels regulated by MTSA.

1.2 SCOPE/OBJECTIVE

The U.S. Coast Guard (USCG) currently has Hand-Held Multi-Mode Biometric Readers deployed to USCG field units across the country. These readers have reached the end of service and due to a Transportation Security Administration (TSA) change in the definition and location of the Canceled Card List (CCL) and Visual Canceled Card List (VCCL) with respect to a URL address. Connectivity/availability to these lists will be lost once the irreversible change of the URL is put into production in July of 2024. As such, the USCG currently has a need to purchase new biometric hand-held readers. The hand-held readers shall be used to verify that Transportation Workers Identification Credentials (TWIC) and Seafarer Identification Documents (SID) issued by foreign governments are valid and enable one-to-one biometric matches of the holder to the fingerprint template stored within the credential. To ensure USCG operational units are able to seamlessly continue to electronically authenticate, verify, and validate TWICs during MTSA facility and vessel examinations, CG-FAC-2 must obtain software and hardware product support services for the USCG’s stock of electronic TWIC Readers.

LAST UPDATED: 7/29/2025 PAGE 2/19

1.3 PERIOD OF PERFORMANCE

The period of performance for this contract is one (1) Base Year of 12-months and four (4) 1-year Options of 12-months.

1.4 PLACE OF PERFORMANCE

The primary place of performance will be the Contractor’s facilities.

1.5 Travel

Contractor travel may be required to the USCG headquarters in Washington, DC or to the various U.S ports. All travel required by the Government outside the Contractor's local commuting area(s), i.e. non-local travel will be reimbursed to the Contractor in accordance with the Federal Travel Regulations. The Contractor must obtain COR approval for all reimbursable travel in advance of each travel event, electronic mail is acceptable. All travel documentation including the COR approval must be included as part of the invoice.

2.0 SPECIFIC REQUIREMENTS/TASKS

The Transportation Security Administration (TSA) TWIC Reader Hardware and Card Application Specifications, Version 1.1.1 (“TSA Reader Spec”) contains information applicable to this SOW.

If anything in this SOW differs with the TSA Reader Spec, the requirement in this SOW prevails.

TWIC readers must be fully compliant with U.S. Coast Guard TWIC requirements and CFATS RBPS 12 standards

2.1 TASK ONE: Biometric Hand-Held Reader Issuance and Support Services

The Contractor shall provide an Indefinite Delivery/Indefinite Quantity (IDIQ) of Hand-Held Multi- Mode Biometric Readers with software and hardware trouble shooting and support services.

Product support services shall include but are not limited to tracking TSA implemented technical changes, troubleshooting reader malfunctions, conducting hardware to repair services, developing full tested software patches and upgrades, and equipment refreshes due to reader end of life status or any updates/changes to the definition and location of the Canceled Card List (CCL) and Visual Canceled Card List (VCCL) with respect to a URL address. The Contractor shall ensure that the Hand-Held Readers along with the software shall be configured in accordance with the following sections of the TSA TWIC Reader Hardware and Card Application Specifications, Version 1.1.1: (Section 4 and Section 6-10, Appendix A (Authentication modes); Appendix C (reader adaptability); Appendix D (for the SID); and Appendix G (Biometric template usage). The readers shall also comply with Personal Identity Verification (PIV), Interoperable (PIV-1), and meet MIL-STD 810F specifications. The Hand- Held Reader shall also support the V1.0, V2.0, V2.3 marked TWIC cards, as well as future TWIC card versions issued during the duration of this order, in all supported modes of operations. In addition, the Contractor shall maintain a helpdesk log of all support service requests to be provided on an annual basis. The Biometric Hand-Held Reader will only be considered if it is listed on TSA’s Self-Certified Listed (TWIC® | Transportation Security Administration). The reader must be TWIC NEXGEN capable and backward compatible.

https://www.tsa.gov/twic https://www.tsa.gov/twic

LAST UPDATED: 7/29/2025 PAGE 3/19

2.1.1 Salient Characteristics of the Reader

The TWIC readers utilize high-quality, durable components such as fingerprint scanners;

barcode readers, hot-swappable batteries, and optimized screens designed for rugged environments.

a. The reader shall weigh 5 pounds or less.

b. The reader shall have a rechargeable battery (attached or detachable) with 12 hours minimum operational time.

c. The reader shall have hot-swappable batteries, include on extra hot-swappable battery, and spare battery replacements shall be available.

i. A docking station capable of charging both the reader and the spare battery shall be included with a 120VAC power supply.

d. The reader shall have sufficient internal (i.e., local/onboard) memory/storage to function in accordance with this SOW.

e. The reader shall be certified for harsh conditions as follows:

i. MIL-STD 810F, METHOD 514.5 – Vibration

ii. MIL-STD 810F, METHOD 501.4 – High temperature (to +70oC/+158oF)

iii. MIL-STD 810F, METHOD 502.4 – Low temperature (to -10oC/-14oF)

iv. MIL-STD 810F, METHOD 507.4 – Humidity

v. MIL-STD 810F, METHOD 503.4 – Temperature shock

vi. MIL-STD 810F, METHOD 516.5 – Procedure IV (transit drop test) – 26 drops at 4 feet

f. The reader shall have the following operational availability:

i. Handle 1 million touches without degradation

ii. Yield a Mean Time Between Failure (MTBF) of 25,000 hours or greater

iii. Display if a biometric has been verified within the past 24 hours

g. The reader shall be hand-held.

h. The reader shall support multi-mode (modes 1-4) operation for TWIC cardholder validation.1

i. The reader shall have contact and contactless read capabilities.

i. The maximum contactless read range shall be 10 cm.

ii. When multiple cards are presented at the same time in a reader’s contactless field, the reader shall reject all of the presented cards.

iii. Allow the photo on a NexGen TWIC to be viewed after a contactless read

j. The reader shall have the following operational features:

i. Have a display suitable for user interaction

ii. Use a touch screen or other suitable means for user input/control

iii. Have an on-screen option to select different modes

iv. Have a real time clock

v. Display transaction result (pass, fail, etc.) on main screen

vi. Display power status (on, ready or out of service)

vii. Display battery level

viii. Have visual indicators that are visible in daylight

ix. Have a hibernation mode for protection against data loss

k. The reader shall have a finger guide to aid in proper finger placement on the sensor.

l. The reader shall not rely on peripheral attachments

(e.g., the fingerprint sensor and card interface shall be embedded in the reader’s chassis).

m. The reader shall achieve a standard maximum transaction time of 3 seconds

n. The reader shall have TWIC-PIN capability

1Section 4 of the TSA Reader Spec explains the modes of operation.

LAST UPDATED: 7/29/2025 PAGE 4/19

o. The reader shall be able to electronically validate TWIC while in “Airplane Mode” or comms off to improve field security

p. The reader shall be able to electronically validate Legacy TWIC cards modes 1-4.

q. The reader shall have card and scanning compatibility:

i. Electronically validate NEXGEN TWIC cards modes 1-4 and 5-6

ii. Display whether a scanned card is a NEXGEN or Legacy TWIC card

iii. Scan Legacy and NEXGEN TWIC cards in contactless mode 1-2

iv. Scan Legacy and NEXGEN TWIC cards via contact scan

r. The reader shall comply with MARSEC Levels 1-3 at all times without requiring manual setting, configuration or toggle adjustments

s. The reader shall be manufactured with a specific build SKU exclusive for the vendor, ensuring consistent supply of the same unit and application over a 5-year period

t. Reader may have built-in Access Control Lists (ACLs) capable of managing registered personnel, visitor lists, and watch lists for security enforcement

u. If capable of validating cards against Access Control Lists (ACLs) the reader shall perform this without requiring outside connectivity while deployed in the field

v. Biometric reader package should include the following or compatibility to:

i. Mobile Credential Reader (Product Code MZID-MCR-V3)

ii. Spare Battery (Product Code MZMCRBAT)

iii. Docking Station (Product Code MZID-MCRDOCK)

iv. 36 Month Extended Hardware Platinum Warranty (Product Code MZID-MCR36HRDWAR)

v. Software Configuration, Testing, & Development (Product Code MCR-V3-SCTD)

2.1.2 Software Configuration

a. The biometric sub-system shall provide an equal error rate (EER) of 1% (i.e., 1% false rejections at a setting of 1% false acceptance) on a per transaction basis. This EER presumes up to three attempts as a minimum standard error rate. Readers shall provide a mechanism to adjust the security level sensitivity.

b. The biometric template shall be encoded in a manner that communicates the following information to a reader for use in 1:1 matching logic:

i. The presence of zero, one or two fingerprint minutiae, and

ii. The quality level of said fingerprint minutiae.

c. Readers shall first check the number of minutiae present to determine if a 1:1 match may proceed.

d. The reader shall check all certificates on the card. All data shall be retrieved from the card application except for operations involving active card authentication.

e. The reader shall automatically identify various credentials without the user adjusting the settings.

2.1.2.1 Software Development and Updates

i. The provider must continually improve and update its software to align with evolving security requirements.

ii. Routine patches and functional upgrades ensure compatibility with federal standards, enhancing both security and usability over time.

iii. Coordination and scheduling with USCG on delivery of software updates

2.1.2.2. Compliance and Certification

i. TWIC readers must be fully compliant with U.S. Coast Guard TWIC requirements and CFATS RBPS 12 standards.

LAST UPDATED: 7/29/2025 PAGE 5/19

ii. Meeting and maintaining the regulatory certifications involves ongoing updates and periodic re-certifications to ensure the readers align with federal guidance.

2.1.3 Proofs of Identity

The reader shall support Personal Identity Verification - Interoperable (PIV-I). The reader shall authenticate the V1.0, V2.0, V2.3 and V3 marked TWIC cards, as well as future TWIC card versions issued for the duration of this contract, in all modes of operations. The reader shall also authenticate CACs and SIDs.

2.1.4 Canceled Card List (CCL) Update and Access

The reader shall ensure the Hand-Held Readers are able to update the Canceled Card List stored on the Readers via a Wi-Fi connection. Encrypted communication paths shall be utilized for CCL retrieval and transmission of reports. CCL shall be downloaded and reside locally with the reader for stand-alone validation. The reader shall notify of CCL older than 24hrs and displayed on main screen. CCL shall be downloaded and reside locally with the reader for stand-alone validation.

2.1.5 Reader Logs

Reader logs, at a minimum, shall capture the complete Federal Agency Smartcard Number (FASC-N), time stamp, transaction result (pass, fail, etc.) and a transaction summary that details the challenges and results of the read-transaction/CCL-check, Card Authentication Certificate validation, biometric (e.g., fingerprint) match or failure, etc.). The reader display shall also capture the name and photograph of the TWIC, CAC or SID holder. The reader logs (in both spreadsheet and pdf format) shall be exportable via a Wi-Fi connection to USCG-designated addresses only. The reader shall establish an encrypted connection to the reports cloud repository. Credential read logs shall be purged from the reader after a secure upload completion is performed, with acknowledgement from the portal.

2.1.6 Connectivity

Other than establishing a Wi-Fi connection to update the CCL (in accordance with SOW 2.1.4), to export the reader logs to USCG-designated addresses (in accordance with SOW 2.1.5), and to load software patches and updates (in accordance with SOW 2.4), the reader shall not connect to any server. Reader must not require Wi-Fi for biometric validation. Readers shall not require any IT infrastructure or configuration.

2.1.7 Server Maintenance and Data Management

Providers must maintain dedicated encrypted servers for secure data storage, reader management, and reporting. This infrastructure ensures reliable data integrity, supports compliance tracking, and enables comprehensive reporting capabilities to meet data-driven decision-making needs. Maintains and meets all SOC2 standards.

2.2 TASK TWO: Shipment and Delivery of Product Support

All electronic TWIC readers and reader support services shall be delivered by the Contractor directly to various USCG units across the U.S. via an agreed upon shipping method NLT 60-90 days following contract award (or exercise of option period 1). The Contractor shall provide delivery to the Continental United States (CONUS) and Outside Continental United States

LAST UPDATED: 7/29/2025 PAGE 6/19

(OCONUS) locations. All deliveries shall be Free on Board (F.O.B.) destination not to exceed limit on this matter and is best value for the government. See pages 11-16 for delivery destinations.

2.3 TASK THREE: Technical Support (Base and Option Periods)

Product support services shall include tracking TSA implemented technical changes, troubleshooting reader malfunctions, conducting hardware repair services, and deploying fully tested software patches and upgrades.

2.3.1 Changes to Reader

Readers shall allow for future enhancements to be added in the field. A mechanism shall be provided that assures that only authorized/authenticated firmware/software updates are permitted. The Contractor shall stay abreast of revisions to the TSA Reader Spec and recommend software patches and updates to incorporate any applicable changes. The Contractor shall provide fully tested software patches and updates to the readers after the Contracting Officer’s Representative (COR) confirms that those patches and updates are necessary. Technical support shall include up to two (2) certificate changes per contract year as required by DHS/TSA or as deemed necessary by the COR.

2.3.2 Request for Technical Support

In addition to the warranty, the Contractor shall provide 24-hour technical support and respond within two (2) hours of a request for technical support. The Contractor shall maintain a log of all technical support requests and include this data in its monthly progress report (see SOW 4.8).

2.3.3 Reader Support

The vendor shall provide the same software operational configuration for a period of five years to minimize ongoing training and changes to the SOP. In case of an unsolvable hardware issue, the USCG must be able to ship the device to the vendor, and the vendor must immediately ship a replacement device. Support shall not be performed by any connected 3rd party MDM ( mobile device management) system or software.

2.2.3 Meetings

The Contractor shall attend meetings (not more often than once per year and for not more than one day) at USCG HQ or in the Washington, DC metropolitan area.

2.4 TASK FOUR: Biometric Hand-Held Reader Manual

Each delivered reader shall include an Operator’s Manual and quick reference guide in accordance with standard industry practice.

2.5 TASK FIVE: Stand-Alone Capability

The Hand-Held Readers shall be able to operate independently from and not rely upon use of desktops, laptops, servers, the USCG Standard Workstation network, or any other computers or mobile devices. The reader shall be 5 pounds or less. The reader shall function as a stand-

LAST UPDATED: 7/29/2025 PAGE 7/19

alone solution without requiring any communications or connectivity to perform authentication operations TWIC, CAC, PIV, or PIV-I credentials. Credential read operations may be performed in remote areas or locations where standalone security is required and necessary. Battery shall last a minimum of 12 hours on full charge.

2.6 TASK SIX: Connectivity

Other than establishing Wi-Fi connection to update the CCL (in accordance with SOW 2.1.4), to export the reader logs to USCG-designated addresses (in accordance with SOW 2.1.5.), and to load software patches and updates (in accordance with SOW 2.4), the reader shall not connect to any server.

2.7 TASK SEVEN: Standard Commercial Warranty

The Contractor shall provide a standard commercial warranty for three (3) years for all Hand- Held Readers.

2.8 TASK EIGHT: Reader Logs

Hand-Held Reader logs shall be exportable via Wi-Fi or USB cable and/or USB flash device.

Reader logs, at a minimum, shall capture the complete FASC-N, time stamp, transaction result (pass, fail, etc.) and a transaction summary that identifies or details the challenges and results of the read transaction (CCL check validated, Card Authentication Certificate Validated, biometric match or failure, etc.). The reader logs shall also capture the name of the TWIC holder.

2.9 TASK NINE: Training and Training Material (Base and Options)

The Contractor shall provide computer-based / on-line training for proper operation of the Hand- Held Readers to begin NLT the date of the first shipment and to end upon the expiration of this contract. The training shall include how to use the reader with the TWIC, SID, CAC and other standard biometric enabled credentials along with basic trouble shooting. The training will be considered successful if the USCG personnel are able to operate the Hand-Held Readers and demonstrate proficiency in meeting all the checks required. It is expected that the USCG personnel who complete the training will be able to train other USCG personnel on how to properly use the Hand-Held Readers. The Contractor shall provide training materials in the form of Handouts via Microsoft PowerPoint, web-based training materials from the Contractor’s website and via media player or Microsoft Windows 10 compliant player on Compact Disc (CD) for future distribution. Support Documents, training videos, operation manuals shall be readily available from each portal location. The USCG has the license to use, reproduce and distribute these materials within DHS.

2.10 TASK TEN: Coast Guard Designated Reader Portal

a. A reports portal shall be designed specifically for the U.S. Coast Guard

b. All traffic is encrypted using SSL

c. Provided services run in a horizontally scalable environment with a high available(HA) offering

d. Initial Portal Users in Sectors, MSU's and facilities will be assigned via USCG HQ administration

LAST UPDATED: 7/29/2025 PAGE 8/19

e. Restricted access requiring vetted email address and password with optional multi-factor authentication

f. Users to have full control over their accounts and access

g. Access can be granted or removed at any time. Each MSU, Sector and facilities users shall have their own secure login

h. Each MSU, Sector and facilities users shall have their own secure login

i. Each portal location shall support multiple users

j. Data is encrypted at rest and controlled using role-based access control (RBAC)

k. Download reports from the handheld devices

l. Report logs shall be archived for a minimum of two years or longer

m. Provides DHS certificate revocation list (CRL) to the handheld devices

n. Easily provision handhelds to sectors for insights into port access

o. Report logs shall be configured and stored per TSA reader rule requirements

p. The logs from each device will be time stamped and noted by device serial number as assigned to their perspective location

q. Copies of portal stored log reports shall be downloadable in .CVS or .pdf file type and not delete able via the user

r. The portal must be accessible 24/7 from any PC utilizing common Microsoft browsers

s. Access to the portal shall be restricted exclusively to the U.S. Coast Guard (third party support access must be granted by U.S. Coast Guard)

3.0 CONTRACTOR PERSONNEL

Project Manager (Senior Level)

3.1QUALIFIED PERSONNEL

The Contractor must provide qualified personnel to perform all requirements specified in this

SOW.

3.2 KEY PERSONNEL

Before replacing any individual designated as Key by the Government, the Contractor shall notify the Contracting Officer no less than 15 business days in advance, submit written justification for replacement, and provide the name and qualifications of any proposed substitute(s). All proposed substitutes shall possess qualifications equal to or superior to those of the Key person being replaced, unless otherwise approved by the Contracting Officer. The Contractor shall not replace Key Contractor personnel without approval from the Contracting Officer. The following Contractor personnel are designated as Key for this requirement. Note:

The Government may designate additional Contractor personnel as Key at the time of award.

• Project Manager (Senior Level)

3.2.1 Contractor Key Personnel shall not be assigned by the Contractor to more than one key position for this requirement.

3.3 ON-CALL POINT OF CONTACT

The Contractor shall provide an On-Call Point of Contact who shall be responsible for all Contractor work performed under this SOW. The On-Call Point of Contact shall be a single point of contact for the Contracting Officer and the Contracting Officer’s Representative (COR). It is

LAST UPDATED: 7/29/2025 PAGE 9/19

anticipated that the On-Call Point of Contact shall be one of the senior level employees provided by the Contractor for this work effort. The name of the On-Call Point of Contact, and the name(s) of any alternate(s) who shall act for the Contractor in the absence of the On-Call Point of Contact, shall be provided to the Government as part of the Contractor’s proposal. The On- Call Point of Contact is further designated as Key by the Government. During any absence of the On-Call Point of Contact, only one alternate shall have full authority to act for the Contractor on all matters relating to work performed under this contract. The On-Call Point of Contact and all designated alternates shall be able to read, write, speak and understand English.

Additionally, the Contractor shall replace the On-Call Point of Contact with prior approval from the Contracting Officer.

3.3.1 The On-Call Point of Contact shall be available to the COR via telephone between the hours of 0800 and 1600 ET, Monday through Friday, and shall respond to a request for discussion or resolution of technical problems within 24 hours of notification.

3.4 EMPLOYEE IDENTIFICATION

3.4.1 Contractor employees visiting Government facilities must wear an identification badge that, at a minimum, displays the Contractor name, the employee’s photo, name, clearance-level and badge expiration date. Visiting Contractor employees must comply with all Government escort rules and requirements. All Contractor employees must identify themselves as Contractors when their status is not readily apparent and display all identification and visitor badges in plain view above the waist at all times.

3.4.2 Contractor employees working on-site at Government facilities must wear a Government issued identification badge. All Contractor employees must identify themselves as Contractors when their status is not readily apparent (in meetings, when answering Government telephones, in e-mail messages, etc.) and display the Government issued badge in plain view above the waist at all times.

3.5 EMPLOYEE CONDUCT

Contractor’s employees must comply with all applicable Government regulations, policies and procedures (e.g., fire, safety, sanitation, environmental protection, security, “off limits” areas, wearing of parts of DHS uniforms, and possession of weapons) when visiting or working at Government facilities. The Contractor must ensure Contractor employees present a professional appearance at all times and that their conduct must not reflect discredit on the United States or the Department of Homeland Security. The Project Manager must ensure Contractor employees understand and abide by Department of Homeland Security established rules, regulations and policies concerning safety and security.

3.6 REMOVING EMPLOYEES FOR MISCONDUCT OR SECURITY REASONS

The Government may, at its sole discretion (via the Contracting Officer), direct the Contractor to remove any Contractor employee from DHS facilities for misconduct or security reasons.

Removal does not relieve the Contractor of the responsibility to continue providing the services required under the contract. The Contracting Officer will provide the Contractor with a written explanation to support any request to remove an employee.

LAST UPDATED: 7/29/2025 PAGE 10/19

4.0 OTHER APPLICABLE CONDITIONS

4.1 SECURITY AND PROTECTION OF INFORMATION

The Contractor shall not have access to Security Sensitive Information.

4.2 DISCLOSURE OF INFORMATION

Information made available to the Contractor by the Government for the performance or administration of this effort shall be used only for those purposes and shall not be used in any other way without the written agreement of the Contracting Officer. The Contractor shall agree to assume responsibility for protecting the confidentiality of such information, which may not be public.

4.3 PERIOD OF PERFORMANCE

The period of performance for this contract is a one-year base period with four one-year option periods as follows:

Base Period December 1, 2025 through November 30, 2026 Option Period One December 1, 2026 through November 30, 2027 Option Period Two December 1, 2027 through November 30, 2028 Option Period Three December 1, 2028 through November 30, 2029 Option Period Four December 1, 2029 through November 30, 2030

4.4 PLACE OF PERFORMANCE

The primary place of performance will be the Contractor’s Facilities.

4.5 TRAVEL

Contractor travel may be required to support this requirement. All travel required by the Government outside the local commuting area(s) will be reimbursed to the Contractor in accordance with FAR 31.205-46, Travel Costs. The Contractor must be responsible for obtaining COR approval (electronic mail is acceptable) for all reimbursable travel in advance of each travel event.

4.6 POST AWARD CONFERENCE

The Contractor must attend a Post Award Conference with the Contracting Officer and the COR no later than five (5) business days after the date of award. The purpose of the Post Award Conference, which will be chaired by the Contracting Officer, is to discuss technical and contracting objectives of this contract and review the Contractor's draft project plan. The Post Award Conference will be held at the Government’s facility, located at 2703 Martin Luther King Jr Ave SE, Washington, DC 20593 or via teleconference.

4.7 PROJECT PLAN

LAST UPDATED: 7/29/2025 PAGE 11/19

The Contractor shall provide a Draft Project Plan NLT the Post Award Conference for Government review and comment. The Contractor shall provide a Final Project Plan to the COR no later than five (5) days after receipt of Government comments.

4.8 PROGRESS REPORTS

The On-Call Point of Contact shall provide a monthly progress report to the COR via electronic mail. This report shall include a summary of all Contractor work performed, an assessment of technical progress, schedule status, any travel conducted and any Contractor concerns or recommendations for the previous reporting period.

4.9 GENERAL REPORT REQUIREMENTS

The Contractor must provide all written reports in electronic format with read/write capability using applications that are compatible with DHS workstations (Microsoft Office Applications).

4.10 INTELLECTUAL PROPERTY

The Hand-Held Biometric Reader is a commercial item for which the Government acquires only the rights of a Government purchaser of commercial items. This limitation applies to internal modifications made to the Hand-Held Biometric Readers under this contract. However, interface aspects developed during this contract are also related to such other interfacing items and for such interface developments, the USCG acquires unlimited data rights. The USCG will be developing its use and internal training procedures incident to this purchase that will be focused on using the Hand-Held Biometric Reader as well as any competing Reader and the Contractor acquires no rights in such procedural documentation. The USCG is authorized to incorporate information from Contractor’s operating manuals, training instructions, and associated documentation into its procedures and instructions. Nothing in this contract shall be deemed to be a waiver of data rights that reside with the Government by reason of actions of other entities such as TSA, which developed the specifications.

4.11 SECTION 508 COMPLIANCE

Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) as amended by P.L.

105-220 under Title IV (Rehabilitation Act Amendments of 1998) all Electronic and Information Technology (EIT) developed, procured, maintained and/or used under this contract shall be in compliance with the “Electronic and Information Technology Accessibility Standards” set forth by the Architectural and Transportation Barriers Compliance Board (also referred to as the “Access Board”) in 36 CFR Part 1194. The complete text of Section 508 Standards can be accessed at http://www.access-board.gov/ or at http://www.section508.gov.

5.0 GOVERNMENT TERMS

TABLE 4.1 – GOVERNMENT TERMS

Acronym Terms

CAC Common Access Card CCL Canceled Card List CG-FAC-2 Cargo & Facilities Division COR Contracting Officer’s Representative DHS Department of Homeland Security http://www.section508.gov/

LAST UPDATED: 7/29/2025 PAGE 12/19

TABLE 4.1 – GOVERNMENT TERMS

Acronym Terms

KO Contracting Officer MTSA Maritime Transportation Security Act PRS Performance Requirement Summary SID Seafarer Identification Documents TSA Transportation Security Administration TWIC Transportation Worker Identification Credential

6.0 GOVERNMENT FURNISHED RESOURCES

The Government does not anticipate providing property related to the performance of this contract. If Government property is provided, it shall be documented and returned to the Government at the end of contract performance. Example data such as reports and other inputs will be furnished to fulfill the requirements of this contract.

7.0 CONTRACTOR FURNISHED PROPERTY

The Contractor must furnish all facilities, materials, equipment and services necessary to fulfill the requirements of this contract.

8.0 GOVERNMENT ACCEPTANCE PERIOD

The COR will review deliverables prior to acceptance and provide the contractor with an e-mail that provides documented reasons for non-acceptance. If the deliverable is acceptable, the COR will send an e-mail to the Contractor notifying it that the deliverable has been accepted.

8.1 The COR will have the right to reject or require correction of any deficiencies found in the deliverables that are contrary to the information contained in the Contractor’s accepted proposal. In the event of a rejected deliverable, the Contractor will be notified in writing by the COR of the specific reasons for rejection. The Contractor may have an opportunity to correct the rejected deliverable and return it per delivery instructions.

8.2 The COR will have 10 business days to review deliverables and make comments. The Contractor must have 14 business days to make corrections and redeliver.

8.3 All other review times and schedules for deliverables must be agreed upon by the parties based on the final approved Project Plan. The Contractor must be responsible for timely delivery to Government personnel in the agreed upon review chain, at each stage of the review. The Contractor must work with personnel reviewing the deliverables to assure that the established schedule is maintained.

9.0 DELIVERABLES

The Contractor must consider items in BOLD as having mandatory due dates. Items in italics are deliverables or events that must be reviewed and/or approved by the COR prior to proceeding to next deliverable or event in this SOW.

LAST UPDATED: 7/29/2025 PAGE 13/19

ITEM SOW

REFERENCE DELIVERABLE / EVENT DUE BY

DISTRIBUTION

1 4.6 Post Award Conference NLT five (5) days following date of award

COR

2 4.8 Progress Report Monthly

3 2.3 Software Patches and Upgrades

NLT 30 days following date of revision to TSA

Reader Spec

4 2.3.1 Certificate Changes Upon Request

5 2.9 Training Material Date of first shipment

6 2.2 Delivery of 125 Readers By End of Base Period

Unit Address

Sector Boston

U.S. Coast Guard Sector Boston Attn: Prevention Department 427 Commercial St Boston, MA 02109

Sector Long Island Sound

U.S. Coast Guard Sector Long Island Sound Attn: Prevention Department 120 Woodward Ave New Haven, CT 06512

Sector New York

Commanding Officer U.S. Coast Guard Sector New York Attn: Shoreside Compliance Branch 212 Coast Guard Drive Staten Island, NY 10305

Sector Northern New England

U.S. Coast Guard Sector Northern New England Prevention Department 259 High Street South Portland, ME 04101

LAST UPDATED: 7/29/2025 PAGE 14/19

Sector Southeastern New England

U.S. Coast Guard Sector Southeastern New England Attn: Prevention Department 20 Risho Avenue East Providence, RI 02914

Sector Maryland - National Capital Region

U.S. Coast Guard Sector Maryland-National Capital Region 2401 Hawkins Point Road Baltimore, MD 21226

Sector Delaware Bay

U..S. Coast Guard SECTOR DELAWARE BAY Attn: Prevention Department ONE WASHINGTON Ave

PHILADELPHIA, PA 19147

Sector Virginia

U.S. Coast Guard Sector Virginia Attn: Prevention Department Norfolk Federal Building 200 Granby St., 7th Floor Norfolk, VA, 23510

Sector North Carolina

U.S. Coast Guard Sector North Carolina Attn: Prevention Department

721 MEDICAL CENTER DR STE 100

Wilmington, NC 28401

MSU Savannah

U.S. Coast Guard Marine Safety Unit Savannah Juliette G Low Federal Building 100 W. Oglethorpe Ave. STE 1017 Savannah, GA 31401

Sector Charleston

U.S. Coast Guard Sector Charleston Attn: Prevention Department 1050 Register St North Charleston, SC 29405

Sector Jacksonville

U.S. Coast Guard SECTOR JACKSONVILLE Attn: Prevention Department

4200 OCEAN STREET

Atlantic Beach, FL 32233

Sector Key West

U.S. Coast Guard Sector Key West Attn: Prevention Department 100 Trumbo Rd Key West, FL 33040

LAST UPDATED: 7/29/2025 PAGE 15/19

Sector Miami

U.S. Coast Guard Sector Miami Attn: Prevention Department 100 MacArthur Causeway Miami Beach, FL 33139

Sector San Juan

U.S. Coast Guard SECTOR SAN JUAN Attn: Prevention Department #5 Calle La Puntilla San Juan, PR 00901

Sector St. Petersburg U.S. Coast Guard Sector St. PetersburgAttn: Prevention Department600 8th Ave SESt. Petersburg, FL 33701

MSD Fort Smith U.S. Coast Guard Marine Safety Detachment Fort Smith 7030 Taylor Ave, Suite 4 Fort Smith, AR 72916

MSD Panama City U.S. Coast Guard Marine Safety Detachment Panama City 1700 Thomas Dr Panama City, FL 32407-5804

MSU Brownsville U.S. Coast Guard Marine Safety Unit Brownsville 2993 N. Indiana Ave Suite A Brownsville TX 78521

MSD Cincinnati U.S. Coast Guard Marine Safety Detachment Cincinnati 3653 River Rd Cincinnati, OH 45204-1153

MSD Nashville U.S. Coast Guard Marine Safety Detachment Nashville 220 Great Circle Rd, Suite 148 Nashville, TN 37228-1700

MSD Peoria U.S. Coast Guard Marine Safety Detachment Peoria 97 Conference Center Dr East Peoria, IL 61611-9570

MSD Quad Cities

U.S. Coast Guard Marine Safety Detachment Quad Cities Rock Island Arsenal Navy Operational Support Center Building 218 218 Rodman Ave Rock Island, IL 61204-3220

MSD St. Paul U.S. Coast Guard Marine Safety Detachment St. Paul 5600 American Blvd W, Ste 660 Bloomington, MN 55437-1454

LAST UPDATED: 7/29/2025 PAGE 16/19

MSD Vicksburg U.S. Coast Guard Marine Safety Detachment Vicksburg 225 Coast Guard Rd Vicksburg, MS 39183

MSU Victoria U.S. Coast Guard Marine Safety Unit Victoria

1936 FM 1432

Victoria, TX 77904-1849

MSU Baton Rouge U.S. Coast Guard Marine Safety Unit BATON ROUGE 6041 Crestmount Drive Baton Rouge, LA 70809

MSU Houma U.S. Coast Guard Marine Safety Unit HOUMA 423 Lafayette St, STE 204 Houma, LA 70360

MSU Huntington U.S. Coast Guard Marine Safety Unit HUNTINGTON 95 Peyton St.

Barboursville, WV 25504

MSU Lake Charles U.S. Coast Guard Marine Safety Unit Lake Charles 127 West Broad St, Lake Charles, LA 70601

MSU Morgan City U.S. Coast Guard Marine Safety Unit Morgan City 7327 Highway 182 E, First Floor Morgan City, LA 70380

MSU Paducah U.S. Coast Guard Marine Safety Unit PADUCAH 225 Tully Street Paducah, KY 42003

MSU Pittsburgh U.S. Coast Guard Marine Safety Unit Pittsburgh 1041 Washington Pike, Suite 300 Bridgeville, PA 15017-2704

MSU Port Arthur U.S. Coast Guard Marine Safety Unit Port Arthur 2901 Turtle Creek Dr Port Arthur TX 77642

MSU Texas City U.S. Coast Guard Marine Safety Unit TEXAS CITY

3101 FM 2004

Texas City, TX 77591

Sector Corpus Christi U.S. Coast Guard Sector Corpus ChristiAttn:

Prevention/Facilities249 Glasson Drive, Corpus Christi, TX 78406

LAST UPDATED: 7/29/2025 PAGE 17/19

Sector Houston/Galveston

U.S. Coast Guard Sector Houston/Galveston Attn: Prevention Department 13411 Hillard St, Houston, TX 77034

Sector Lower Misssissippi River (LMR)

U.S. Coast Guard Sector Lower Mississippi River Attn: Prevention Department 2 A. W. Willis Ave Memphis, TN 38105

Sector Mobile

U.S. Coast Guard Sector Mobile Attn: Facility Compliance Branch 1500 15th Street, Brookley Complex Mobile, AL 36615-1300

Sector New Orleans

U.S. Coast Guard SECTOR NEW ORLEANS (PREVENTION) Attn: Prevention Department 200 Hendee Street New Orleans, LA 70114

Sector Ohio Valley

U.S. Coast Guard Sector Ohio Valley Attn: Prevention Office 600 Martin Luther King Jr. Pl Mazzoli Federal Bldg, Room 409-D Louisville, KY 40202-2251

Sector UMR

U.S. Coast Guard Sector Upper Mississippi River Attn: Prevention Department/Facilities Branch 1222 Spruce St. Suite 7.103 St. Louis, MO 63103-2846

MSU Chicago U.S. Coast Guard Marine Safety Unit Chicago 555 Plainfield Rd., Suite A Willowbrook, IL 60527

MSU Cleveland U.S. Coast Guard Marine Safety Unit Cleveland 1055 East Ninth Street Cleveland, OH 44114

MSU Duluth U.S. Coast Guard Marine Safety Unit Duluth 515 W. First Street, Room 145, Duluth, MN 55802

MSU Toledo U.S. Coast Guard Marine Safety Unit Toledo 420 Madison Ave, Suite 700 Toledo, OH 43604

LAST UPDATED: 7/29/2025 PAGE 18/19

Sector Eastern Great Lakes

U.S. Coast Guard Sector Eastern Great Lakes Attn: Prevention Department 1 Fuhrmann Blvd Buffalo, NY 14203

Sector Detroit

U.S. Coast Guard Sector Detroit Attn: Prevention Department 110 Mt Elliott Street Detroit, MI 48207

Sector Lake Michigan

U.S. Coast Guard Sector Lake Michigan Attn: Prevention Department 2420 S. Lincoln Memorial Drive Milwaukee, WI 53402

Sector Northern Great Lakes

U.S. Coast Guard Sector Northern Great Lakes Attn: Prevention Department 337 Water Street Sault Ste Marie, MI 49783

Sector Los Angeles/Long Beach

U.S. Coast Guard SECTOR Los Angeles/Long Beach Attn: Prevention Department 1001 S. Seaside Ave, Bldg 20 San Pedro, CA 90731-0208

Sector San Diego

U.S. COAST GUARD SECTOR SAN DIEGO

Attn: Prevention Department 2710 North Harbor Drive

SAN DIEGO, CA 92101

Sector San Francisco U.S. Coast Guard SECTOR SAN FRANCISCOAttn:

Prevention Department1 Yerba Buena Island, Yerba Buena Island Northgate RdSan Francisco, CA 94130

MSU Portland U.S. Coast Guard Marine Safety Unit Portland 6767 N Basin Ave Portland, OR 97217

Sector Puget Sound

U.S. Coast Guard SECTOR PUGET SOUND Attn: Prevention Department 1519 Alaskan Way S Seattle, WA 98134

Sector Guam

U.S. Coast Guard Sector Guam Attn: Prevention Department PSC 455 Box 176

FPO AP, GU 96540

LAST UPDATED: 7/29/2025 PAGE 19/19

Sector Honolulu

U.S. Coast Guard Sector Honolulu Prevention Pier 4 Attn: Prevention Department 433 Ala Moana Blvd.

Honolulu, HI 96813

MSU Valdez

U.S. Coast Guard Marine Safety Unit Valdez Attn: Facilities Compliance Branch 105 Clifton Drive Valdez, AK 99686-0486

Sector Anchorage

U.S. Coast Guard Sector Anchorage Attn: Prevention Department Bldg 49000, Guard Road

JBER, AK 99505

Sector Southeast Alaska

U.S. Coast Guard Sector Southeast Alaska Attn: Facilities Branch 709 W 9th St

PO BOX 25517

Juneau, AK 99801

TRACEN Yorktown

U.S. Coast Guard TRACEN Yorktown Attn: MSTC Nicholas Fegley 1 U.S. Coast Guard TRN CTR Yorktown, VA 23690