TF33 3rd and 4th stage turbine blades_PWS.pdf

PERFORMANCE WORK STATEMENT (PWS)

for

Repair of TF33 3rd & 4th Stage Low Speed Turbine Blades

REV. 0

FD2030-23-01662

PREPARATION DATE: 30 MAY 2023

PREPARING ORGANIZATION:

421st Supply Chain Management Squadron (SCMS)/GUME

Oklahoma Air Logistics Center And

Air Force Life Cycle Management Center (AFLCMC) TF33 Technical Services Element (LPSAN)

TINKER AFB, OK 73145-3031

FD2030 23 01662

1 SECTION I – DESCRIPTION OF SERVICES/GENERAL INFORMATION

1.1 The purpose of this Performance Work Statement (PWS) is to define the requirements for the repair of TF33 Turbofan Engine 3rd, and 4th Stage Low Speed Turbine Blades. This repair effort includes repair paragraphs 3, 4, 6, 7, 9, 10, 14, and 17 in accordance with (IAW) applicable Air Force Technical Order (TO) 2J-TF33-53-7 WP 064 00. An Initial Product Evaluation (IPE) shall be required if the contractor facility has not repaired this component previously for the U.S. Air Force. The IPE will consist of three (3) assets. The contractor shall demonstrate the repairs required in T.O. 2J-TF33-53-7, WP 064 00. All repairs listed in this technical data will be performed. The contractor shall provide written documentation as to which asset received which repairs. These assets will be delivered to the United States Air Force/Department of Defense (USAF/DOD) for material and process testing. The contractor shall not repair any additional assets until the IPE assets have been inspected and deemed successful. The contractor shall be provided the results of the testing and any corrective actions required to begin the repair of the remainder of the contract quantity. If commercial processes or other processes not in TF33 technical data are proposed they will have to be demonstrated and qualified with final approval by the USAF. The contractor is responsible for the production, repair and scheduled delivery of a quality product.

1.1.1 The Contractor shall furnish all required tooling, labor, material, parts, facilities, test equipment and any incidentals necessary to repair TF33 3rd, and 4th Stage Turbine Low Speed Turbine Blades. All effort shall be provided IAW this SOW.

1.1.2 The Government will ship all blades to the Contractor. The part number on the blades are for each, and two of the same part numbers make a set as follows:

National Stock Number (NSN) & Part Number (PN)

3rd Stage PN: 781103 two each make up one set of PN: 781777, NSN: 2840-01-099-1805RV PN: 395203 two each make up one set of PN: 410036, NSN: 2840-00-439-9249RV

4th Stage PN: 447104 two each make up one set of PN: 476624, NSN: 2840-00-987-3757RV

1.1.3 The Contractor shall ensure requirements in this SOW are accomplished IAW the latest versions of the documents listed in SOW paragraph 1.2. If latest versions of the documents listed in SOW 1.2 impact cost or schedule, Contractor shall email a written evaluation, along with specific backup data and estimated price data for those changes which impact the Contractor’s performance to the Procurement Contracting Officer (PCO) within ten (10) workdays after receipt of an updated publication. The Contractor shall not incorporate these publication changes unless approved by the PCO. In the event there are conflicts between two or more referenced documents, the Contractor shall provide written evaluation, along with specific backup data to the PCO within ten

(10) workdays after knowledge of the conflict. Resolution of the conflict will be provided by the PCO. In addition, the Contractor shall implement those publication changes that result in no change in contract price or delivery and have no conflicts.

1.2 Government Documents.

1.2.1 The Contractor shall obtain the forms and publications expressly required to perform the work in this contract via internet at www.e-publishing.af.mil. In the event that a form or publication is not available online, the Supply Planner will provide the form, instruction, or publication to the Contractor upon written request (e-mail is acceptable) by the Contractor. In the event that laws, regulations, Technical Orders, Air Force Instructions, Air Force Material Command Instructions change during the term of this contract, the Contractor shall comply as such changes come into effect as required in 1.1.3 above.

1.2.2 USAF Technical Orders.

Publication Number Title

33B-1-1 Nondestructive Inspection

2J-TF33-53-7

WP 064 00

Repair Blades Turbine

Paragraphs 3, 4, 6, 7, 9, 10, 14, & 17.

2J-TF33-53-6

WP 064 00

Inspection Blades Turbine

2J-TF33-53-2

WP 010 07

REWORK AND

REIDENTIFICATION

TO 2-1-111 STANDARD MAINTENANCE

PROCEDURES P&W

AIRCRAFT ENGINES

1.3 Industry Documents.

Publication Number Title

ISO/ANSI/ASQC

Q9001:

Quality Systems – Model for Quality Assurance in Production, Installation and Servicing http://www.e-publishing.af.mil/

1.4 General Requirements.

1.4.1 Quality System Requirements

The contractor shall develop and maintain a quality management system in compliance with either ISO/ANSI/ASQ Q9001 2015 or latest version, AS9100, NATO AQAP 2070, or equivalent Quality systems – Model for quality assurance in production, installation, and servicing as a minimum. The Contractor’s quality program shall be designed to promptly detect and correct assignable conditions adverse to quality. The quality system procedures, planning, and other documentation and data that comprise the quality system shall be made available to the Supply Planner (SP) for review upon request.

1.4.1.1 Deficiency Investigation Report: When the Contractor receives a deficiency report on an item required under the terms of the contract, the Contractor shall comply with the PCO’s directions. The Contractor shall investigate suspect defective items IAW 15A3-4-28-3 and submit findings to include root causes and corrective actions IAW T.O. 00-35D-54. The report shall be submitted within 60 days after receipt of the PQDR Exhibit.(CDRL A001–DI-ALSS-81534 – Commercial Asset Visibility (CAV) Reporting /Deficiency Investigation Report)

1.4.1.2 Measuring and Test Equipment (M&TE)

The Contractor shall use only National Institute of Standards and Testing (NIST) traceable gages. M&TE and measurement standards shall be labeled to indicate calibration status. The label shall identify, as a minimum, specific date calibrated (day, month, and year, Julian date or equivalent) and the specific calibration due date.

Tamper resistant seals shall be affixed to operator accessible control or adjustments on M&TE and measurement stands that, if moved, shall affect the calibration.

1.4.1.3 Material Review Board (MRB)

The Contractor is authorized to establish and convene an MRB to evaluate and non-conforming material and/or parts. Board members shall consist of representatives from the contractor’s quality, production control, and engineering (industrial product support or design) and Government Quality Assurance Representative (QAR). The Contractor shall prepare a report within 30 days after entering MRB pool detailing the non-conformance to include Part Number (PN), National Stock Number (NSN), and Serial Number (SN). The Contractor shall provide the report to the SP and PCO. The PCO shall provide disposition instructions to the Contractor. (CDRL A002 – DI-ILSS-80386 – Contract Depot Maintenance (CDM) Production Report \Material Review Board data)

1.4.1.4 Material Receiving Inspection

The Contractor shall perform a receiving visual inspection upon receipt of part for any shipping and/or packaging damage. The Contractor shall prepare a Report of Discrepancy (ROD), SF 364, and forward it to the shipping activity for corrective action to prevent re-occurrence. Contractor shall prepare and submit Discrepancy reports IAW SOW Section 1.5.3.

1.4.1.5 Technical Requirements

The Contractor shall repair the TF33 3rd & 4th Stage Low Speed Turbine Blades IAW TO 2J- TF33-53-7 Work Package 064 00 identified in Section 1.2. The Contractor shall have the required technical data, engineering drawings, Bill of Material design changes, repair documents, inspection and testing equipment to repair TF33 3rd & 4th Stage Low Speed Turbine Blades.TF33 4th stage turbine blade P/N 517704 shall be reworked and re-identified to P/N 477104 per TO 2J-TF33-53-2 Work Package 010 07. The Contractor shall not deviate from the TO process without prior approval from the PCO.

1.4.1.6 Inspection

The Contractor shall inspect the item to be repaired to confirm serviceability or repaired condition IAW the 2J-TF33-53-6 Engine Shop Manual WP 064 00. If the blades do not meet requirements for repair, a material discrepancy report shall be submitted per Para 1.4.1.3.

1.4.1.7 Delivery

The Contractor shall meet or exceed the delivery schedule. The PCO may at any time during performance under this contract, authorize fast transportation for the total quantity or any portion thereof. Transportation for end items on this contract are authorized to ship via air/land utilizing a government approved carrier.

Once PCO authorization for Fast Transportation has been received, the Contractor shall ship end items - Domestic Shipments – No later than four (4) business days.

1.4.1.8 Transportation Information

The Contractor shall provide the transportation information IAW SOW Section 1.5.

1.4.1.9 Support Equipment and Tooling

All tooling required to accomplish inspection and repair of blades shall be Contractor furnished. Tooling that has been adapted or modified is considered special tooling for inspection and test purposes and shall require approval from the CO prior to use.

1.4.1.10 Repair Documents

The Contractor shall provide a “Certificate of Conformance” to the SP for each part repaired.

The “Certificate of Conformance” shall certify that the part was repaired according to all applicable technical data to include inspection and lab results. A sample copy of the certificate of conformance shall be submitted to the SP for review and approval prior to production. The Contractor shall submit the report in accordance with referenced CRDL.

(CDRL A003 – Deficiency Report (DR) \ DI-MISC-81356)

1.4.1.11 Document Storage

The Contractor shall keep all records and reports on file for five years. The SP reserves the right to request and view any SOW required records at any time.

1.4.1.12 Production Problems

The Contractor shall report, via email, any potential production slippage or work stoppages to the Administrative Contracting Officer (ACO), PCO, and the SP at Tinker Air Force Base within two days of becoming aware of potential production slippage or work stoppage.

1.4.1.13 Production Report

The Contractor shall submit the Depot Maintenance Production Report in accordance with referenced CDRL. (CDRL A004) – Report of Shipping (Item) and Packaging Discrepancy) – (DI-ALSS-80728A)

1.4.1.14 Continuation of Mission Essential DoD Contractor Services During Crisis This requirement has been determined not to be mission essential and does not require continued support during a crisis as defined in DFAR 252.237-7023.

1.4.1.15 Green/Affirmative Procurement Determination

Green/Affirmative Procurement has been determined not to be applicable to this Statement Of Work.

1.5 SHIPPING AND TRANSPORTATION.

1.5.1 The Government will pack and ship the TF33 turbine blades to the Contractor for repair at the Government’s expense, Freight On Board (FOB) Destination. Note: The TF33 turbine blades become Government Furnished Property (GFP) when shipped off-base.

See SOW Section 3 regarding GFP.

1.5.2 The Contractor shall transmit a copy of the Bill Of Lading and tracking number by e-mail or phone to the following Government POC within 12 work hours as deliverables are shipped:

421SCMS/GUME Program Office Attn: Angela Anson

PH: 405-734-9659

Email: angela.anson@us.af.mil

The Contractor shall ship or transport applicable assets as appropriate in order to have assets available to support the customer’s operational requirements. The Contractor shall meet the contracted delivery schedule. Shipments under this contract shall be by fastest traceable means FOB Origin (Government’s expense).

1.5.3 Shipment Discrepancy:

Government Property received by the Contractor and recognized as misdirected, will be rerouted to the correct location if known by the Contractor. If the correct location cannot be identified, contact the 421 SCMS/GUME SP.

mailto:angela.anson@us.af.mil

A Supply Discrepancy Report, SF 364, will be prepared and forwarded to the shipping activity for corrective action to prevent reoccurrence. Manual Discrepancy reports shall be submitted by e-mailing the following address: dlacontactcenter@dla.mil. Their commercial number is (877) 352-2255 or DSN: 661-7766, FAX number (269)-961-7791, DSN: 661-7791 and contact 421 SCMS/GUME, Angela Anson.

1.5.4 Terms Explained:

1.5.4.1 Julian Date: A Julian Date is a method used by the government to provide a date format that combines the current year and the number of days since the beginning of that year. (Example: Julian Date 12099. Number 12 refers to the year 2012 (a leap year), and 099 refers to the ninety-ninth day of that year, the eighth day of April in the year 2012 (example 8 April 2012).

1.5.4.2 Material Support Division (MSD) Items: Items that have an ERRC code of C (XD1) or T (XD2). These items are referred to as line replacement units (LRU) and shop replacement units (SRU) respectively.

1.6 Health and Safety off Government Installations: While performing work under this contract the contractor shall comply with all applicable federal, state and local regulations regarding occupational safety and health. During the execution of the contract, the Contractor shall notify the CO within one (1) business day of any damage to Government property in which the dollar value exceeds $500,000.00 and within two

(2) work days, for any damage to Government property less than $500,000.00.

Mishap notifications shall contain, as a minimum, the following information:

• contract name, contract number, name and title of the persons reporting the accident/incident

• date, time, and exact location of accident/incident

• a brief narrative of the accident/incident (Events leading to accident/incident)

• cause of accident/incident, if known

• estimated cost of the accident/incident (material and labor to repair/replace)

• nomenclature of the equipment and the names of the personnel involved in accident or incident mailto:dlacontactcenter@dla.mil

• corrective actions taken or proposed

• other pertinent information

If requested by the designated CO, the contractor shall immediately secure the mishap scene/damaged property and impound pertinent maintenance and training records, until released by the Procuring Safety Office. Contractors will not dispose of contract data related to a mishap until notified to do so by the CO.

1.7 Contractor Manpower Reporting

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the United States Air Force via a secure data collection site. The contractor is required to completely fill in all required data fields at http://www.ecmra.mil.

Reporting inputs will be for the labor executed during the period of performance for each Government fiscal year (FY), which runs 1 October through 30 September. While inputs may be reported any time during the FY, all data shall be reported no later than 31 October* of each calendar year. Contractors may direct questions to the CMRA help desk.”

*Reporting Period: Contractors are required to input data by 31 October of each year.

Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

User Manuals: Data for Air Force service requirements must be input at the Air Force CMRA link. However, user manuals for government personnel and contractors are available at the Army CMRA link at http://www.ecmra.mil.

2 SECTION II – SERVICES SUMMARY.

2.1 Performance Requirements

The Contractor service requirements are summarized into performance requirements that relate directly to mission essential items. The performance requirement threshold briefly describes the minimum acceptable levels of service for each requirement. These requirements are critical to the mission success. The Government will use the surveillance methods to evaluate the Contractor’s performance for the requirements listed below. In the event the requirement is not met, and is correctable, the Contractor shall immediately take corrective action in accordance with the performance threshold(s).

http://www.ecmra.mil/ http://www.ecmra.mil/

2.2 Service Summary (SS) Requirements

The Contractor shall ensure the performance objectives and performance requirement thresholds identified in Table 2-1 (below) are achieved.

2.3 Surveillance

The assigned DCMA representative will use the surveillance methods to evaluate the Contractor’s performance to determine if it meets the performance thresholds listed in this SOW.

Table 2-1 Performance Requirement Reference

Paragraph Performance

Requirement Threshold SS-1 When the Contractor receives a deficiency report on an item required under the terms of the contract, the Contractor shall comply with the ACO’s directions. The Contractor shall investigate suspect defective items IAW 15A3-4-28-3 and submit findings to include root causes and corrective actions IAW T.O. 00-35D-

54. The report shall be submitted within 60 days after receipt of the PQDR Exhibit The Contractor is authorized to establish and convene an MRB to evaluate and non-conforming material and/or parts. Board members shall consist of representatives from the contractor’s quality, production control, and engineering (industrial product support or design) and Government Quality Assurance Representative (QAR). The Contractor shall prepare a report within 30 days after

1.4.1.1 1.4.1.3 1.4.1.10 1.4.1.13

Required 100% timely delivery of each data report IAW CDRLs. At least 98% of information must be accurate.

entering MRB pool detailing the non-conformance to include Part Number (PN), National Stock Number (NSN), and Serial Number (SN). The Contractor shall provide the report to the SP and PCO. The PCO shall provide disposition instructions to the Contractor. The Contractor shall provide a “Certificate of Conformance” to the SP for each part repaired. The “Certificate of Conformance” shall certify that the part was repaired according to all applicable technical data to include inspection and lab results. A sample copy of the certificate of conformance shall be submitted to the SP for review and approval prior to production. The Contractor shall submit the report in accordance with referenced CDRL The Contractor shall submit the Depot Maintenance Production Report in accordance with referenced CDRL.

SS-2 The Contractor shall meet or exceed the delivery schedule.

The PCO may at any time during performance under this contract/order, by written authorization through the ACO, authorize fast transportation for the total contract/order quantity or any portion thereof.

Transportation for end items on this contract are authorized to ship via air/land utilizing a Government approved carrier. Once PCO

1.4.1.7 100% Compliance authorization for Fast Transportation has been received, the Contractor shall ship end items by one of the following methods:

(1) Domestic Shipments – No later than four business days or the earliest available delivery date thereafter.

SS-3 The contractor shall develop and maintain a quality management system in compliance with either

ISO/ANSI/ASQ Q9001 2015

or latest version, AS9100, NATO AQAP 2070, or equivalent Quality systems – Model for quality assurance in production, installation, and servicing as a minimum.

The Contractor’s quality program shall be designed to promptly detect and correct assignable conditions adverse to quality. The quality system procedures, planning, and other documentation and data that comprise the quality system shall be made available to 76th Propulsion Maintenance Group Supply Planner (SP)

(OC-ALC/76PMXG/MXDEO)

for review upon request.

1.4.1. 100% Compliance

SS-4 Contractor shall transmit a copy of the Bill Of Lading and tracking number by e-mail or phone to the following Government POC within 12 work hours as deliverables are shipped

1.5.2 100% Compliance

3 SECTION III – GOVERNMENT FURNISHED PROPERTY AND SERVICES.

3.1 GENERAL:

Government Furnished Property (GFP) is applicable to the performance of this contract. The laser clad repair of TF33 (Turbo Fan) 3rd, and 4th Stage Low Speed Turbine Blades require repair off-base as described in SOW Section 1 and listed in the GFP Attachment #2.

3.2 SHIPPING AND TRANSPORTATION:

In accordance with PWS Section 1.5.

3.3 LOSS OF GOVERNMENT PROPERTY:

In accordance with the Government Property contract clauses. (CDRL A005 – Counterfeit Prevention Plan (CPP))

3.4 DISPOSITION OF GFP:

The PCO will furnish to the Contractor final disposition instructions for all GFP.

Plant Clearance Automated Reutilization Screening System (PCARSS) shall not be required for disposal of GFP.

3.4.1 Condemned Government Property:

The Contractor shall request from the PCO, disposition instructions for all items, such as critical items, MSD and save list items that are condemned during the performance of this contract. All recommended condemnations shall be tagged and returned to OC-ALC Tinker AFB using a DD Form 1149.

3.4.2 Processing of GFP Rejects:

Action to be taken in disposing of GFP contact 421 SCMS/GUME Program Office, Supply Planner and provide data on monthly production form.

3.4.3 Contract Excess:

The Contractor shall ensure that all excess re-manufacturable end items being returned to the Air Force have the note “Contract Excess” entered into the shipping documents to preclude OC-ALC recording such excess as additional re-manufacturable generations. The Contractor shall ensure that excess re-manufacturable end items are returned to OC-ALC unless another address is specified.

The Contractor shall use a DD Form 1149 in returning excess, Government re-manufacturable end items. The Contractor shall transmit a copy of the DD Form 1149 to the 421 SCMS/GUME PMS within 12 work hours after shipment.

3.5 GOVERNMENT FURNISHED SERVICES:

Government Furnished Services (GFS) are not applicable to this contract.

Supply Chain Risk Management (SCRM)

The contractor shall identify, assess, plan for, and mitigate actual or potential threats, vulnerabilities, and disruptions to the Air Force's supply chain throughout the lifecycle to ensure mission effectiveness. The contractor shall inform and include the Government in any mitigations or alterations to the program. The SCRM plan shall address the broad spectrum of supply chain risks that have the potential to: jeopardize the integrity of products, services, people, and technologies; compromise intellectual property; disrupt the flow of product, materiel, information, and finances needed for continued Air Force operations; and drive materiel cost increases to the program. The contractor shall develop and execute processes for identifying supply chain risks as early as possible; the persistent and comprehensive tracking, monitoring, and re-evaluation of supply chain risks and their corresponding mitigation actions; and communicating supply chain risks to affected stakeholders and the Government. The contractor shall notify in writing the identified actual and potential supply chain risks. The contractor's SCRM program and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product and/or service. As part of the overall SCRM approach, the Contractor shall establish, document and maintain documentation about subcontractors/vendors for all parts that will be used for Government contracts. The contractor shall continuously monitor their sources of supply for unknown, unauthorized, non-certified, or unqualified sources providing parts or services from any sub-tier supplier within the contractor's supply chain. The contractor shall investigate and submit findings to include root causes, impacts and a corrective action.

Continuity of Operations (COOP)

Contractor shall include a SCRM plan detailing the offeror's supply chain risk management approach, providing specific emphasis on the risks associated with a.) Continuity of Operations b.) Foreign Influence and c.) Cybersecurity. The contractor shall detail the specific supply chain risk (listed below) and provide a management and mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.

The contractor will develop and/or update a Continuity of Operations Plan (COOP), also known as a Business Operations Plan, which outlines the processes and actions to prepare for, and respond to, unplanned natural and man-made disruptions to mission essential operations and provide that to the U.S. Government.

The COOP will address disruptions caused by:

a) natural causes possible in the local vicinity (winter weather, earthquakes, hurricanes, fires, flooding, wind, pandemics, etc.) and

b) man-made causes (cyber attacks, electrical outages, strikes affecting workforce, civil unrest, modes of transportation, and receiving/shipping goods, etc.).

The plan will explain:

a) how work will continue in the same or alternate facility(ies),

b) ability to use and/or augment the current workforce,

c) ability to repair/restore key infrastructure (machinery, computers, logistics etc.),

d) how to communicate with, and inform the US Government and others in the supply chain.

Contractor shall provide essential records management for personnel working on U.S. government contracts.

Records will be accessible to key members of the organization. Contractor shall ensure continuous records management support (training, etc.) despite any changes in personnel.

If applicable the contractor shall prepare for the continuation of essential DoD services during crisis IAW DFARS 252.237-7023, DFARS 252.237-7024, and other applicable references as necessary. In a state of emergency, if the Government deems necessary, the contractor shall provide all services necessary to ensure mission accomplishment. On occasion, services may be required to support an activation, or exercise of contingency plans outside normal duty hours.

Foreign Influence

The contractor shall disclose any Foreign Ownership, Control or Influence (FOCI) for the purpose of initial or continued facility clearance eligibility. A Standard Form 328 Certificate Pertaining to Foreign Interest shall be submitted to the Government cognizant security office specified in each DD254.

The contractor shall provide information regarding FOCI. If the contract requires access to classified information, DD254, Contract Security Classification Specification, shall be required. Contractor shall provide an update on its financial health and potential FOCI when a merger or acquisition occurs.

Foreign contractor participation is excluded at the prime and subcontractor level, unless authorized through a current approved National Interest Determination (NID). It is solely the responsibility of the contractor to obtain necessary certification from the U.S. Department of State and to comply with the federal laws and regulations. Question must be directed to the U. S. Department of State’s Directive of Defense Trade Controls.

Subcontract Management. The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team only after notification to the Procuring Contracting Officer (PCO) and Contracting Officer Representative

(COR).

Foreign Disclosure:

"Foreign Disclosure Restrictions do not apply."

Cybersecurity

The contractor shall develop and implement a cybersecurity protection of supply chain information plan and provide a copy to the U. S. Government. The contractor shall conduct early and continuous monitoring throughout the contract to prevent or reduce impacts of cyber vulnerabilities where adversaries are able to exploit, steal, alter, manipulate, interrupt, or destroy system functionality, information, or technology. The contractor's plan shall: a) make specific reference to those aspects of the National Institute of Standards and Technology Special Publication (NIST SP) 800-161, “Supply Chain Risk Management Practices for Federal Information Systems and Organizations” that represent the contractor's implemented processes and practices;

b) include a description of how the contractor shall protect the supply chain from exploitation due to the insertion of counterfeits/malware, unauthorized production, tampering, theft, insertion of malicious software and hardware, functionality alteration, and any other elements that would allow adversaries to gain unauthorized access to data, alter data, interrupt communications, or otherwise disrupt operations; c) inform the U. S. Government of any instances of unauthorized access and/or compromise, such as those listed in item “b” to contractor’s digital information and parts and components and d) make specific reference to those aspects of NIST SP 800-53 that represent the processes and practices the contractor will implement. The plan and processes shall apply to the prime and their suppliers, subcontractors, associated integrators, and vendors, spanning the entirety of the supply chain, from raw material stage to delivery of a finished product.

The Contractor and any subcontractors shall provide to the government a system security plan (or extract thereof) and any associated plans of action developed to satisfy the adequate security requirements of DFARS 252.204-7012, and in accordance with NIST Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations” in effect at the time the solicitation is issued or as authorized by the contracting officer, to describe the contractor’s unclassified information system(s)/network(s) where covered defense information associated with the execution and performance of this contract is processed, is stored, or transmits. The contractor shall {develop, update} an incident-handling capability plan that utilizes guidance provided in NIST SP 800-61 revision 2, Computer Security Incident Handling Guide, consisting of 1) incident response policy and plan, 2) procedures for performing incident handling and reporting, 3) guidelines for communicating with outside parties regarding incidents, 4) incident team structure and staffing model, 5) relationships and lines of communication between the incident response team and other groups, both internal and external, 6) services the incident response team should provide, and 7) staffing and training the incident response team. Any incident reported to Defense Industrial Base Cybersecurity Program (https:\\dibnet.dod.mil) shall also be reported to the responsible contracting officer within 24 business hours.

Cybersecurity (electronic components - FSG 59, with the exception of those that do NOT contain any programmable components) N/A

The contractor shall provide information to obtain a Defense Intelligence Agency – Threat Assessment Center (DIA-TAC) Report when National Critical Materials and Critical Components (CC) are known based on the Functional Thread Analysis. The contractor shall trace the Bill of Materials to the lowest critical components. The contractor shall update design via system engineering processes to ensure above-medium risk components are not in the system.

The contractor shall ensure all hardware, with special emphasis on lowest critical components (CCs) and components containing Critical Program Information (CPI), are from trusted sources and are manufactured by approved personnel as documented in the contractor Security Plan. The contractor shall develop a SCRM plan documented in the contractor Security Plan, in accordance with (IAW) the current version of Committee on National Security Systems Directive (CNSSD) No. 505 and NIST SP 800-161, to mitigate supply chain risk. The contractor shall ensure that no critical components procured are on the Section 806 (National Defense Authorization Act for FY 2011 (Public Law 111-383)) and Section 2339a (Title 10, United States Code) Lists in the Supplier Performance Risk System (SPRS) (CDRL 25, 27, 29). The contractor shall develop and implement a Counterfeit Parts Prevention Program in compliance with Defense Federal Regulation (DFAR) 252.246–7007 Contractor Counterfeit Electronic Part Detection and Avoidance System, using SAE AS5553, SAE AS6171, SAE AS6081, and Independent Distributors of Electronics Association (IDEA) Standard [IDEA-STD-1010B] or similar practices to prevent the inclusion of counterfeit parts or parts with malicious logic. The contractor shall perform acceptance testing on lowest CCs and components containing CPI in accordance with the Counterfeit Parts Prevention Program.