Attachment_1_-_Draft_Deburring_Machine_Statement_of_Work.pdf

Statement of Work for an Automatic Deburring Finishing Machine and Dust Collection System for Tobyhanna Army Depot

1.0 General Scope

1.1 This Statement of Work (SOW) is for the turn-key design, supply, site preparation, delivery, off-loading, installation, cleaning, assembly, setup and training for an Automatic Deburring Finishing Machine and Dust Collection System (henceforward Deburr System) at Tobyhanna Army Depot (TYAD), Tobyhanna, PA 18466, for the deburring of aluminum parts that have been processed using a laser cutting machine. The Contractor shall supply all materials, supplies, freight, delivery, tools, equipment, consumables, labor, and supervision for the turn-key design, supply, site preparation, delivery, off-loading, installation, cleaning, assembly, setup and training for the Deburr System. The Deburr System shall meet or exceed all applicable Industrial, Federal, State and Local standards and codes. The Contractor shall supply only a new Deburr System and new associated equipment. A used and refurbished Deburr System and used and refurbished equipment are unacceptable and will not be considered. All repair and replacement parts for the Deburr System and associated equipment shall be new. All repair and replacement parts shall be available for purchase and supplied from within the continental United States.

1.2 The Contractor shall provide Deburr System operation and maintenance training for Government personnel. Training shall be conducted by the Contractor’s qualified training representative and shall be conducted on-site at the Deburr System location in Bldg. 1C Bay 3 at TYAD. This training shall focus on basic operations, programming, preventive maintenance, general maintenance, cleaning and housekeeping, and features familiarization.

Instruction shall also include maintenance that needs to be done by machine operators on a daily basis. All materials used during training shall become the property of TYAD.

1.3 The delivered Deburr System shall be designed and constructed to use 480V/3 Phase/60 Hz.

For a Deburr System that is not designed and constructed to use 480V/3 Phase/60 Hz the Contractor shall supply, install and connect the necessary transformer that permits the use of 480V/3 Phase/60 Hz.

1.4 The Bldg. 1C Bay 4 cargo door is the closest and most easily accessible door to the project installation worksite in Bldg. 1C Bay 3. The Contractor shall verify cargo door access dimensions. The Contractor shall be responsible to ensure that all material fits through this opening. In addition, all material handling equipment that is used by the Contractor shall likewise fit through this clearance WHILE MOVING AND HANDLING all material that is being delivered.

1.5 It shall be the responsibility of the Contractor to verify all Deburr System and worksite dimensions and ensure the Deburr System and ancillary pieces fit within the available floor space at the project installation worksite in Bldg. 1C Bay 3.

1.6 The Contractor shall be responsible to verify overhead clearance dimensions for the Deburr System and ancillary pieces at the project installation worksite in Bldg. 1C Bay 3.

1.7 A site visit will be scheduled and it is advised that interested Contractors attend. The site visit is for the purpose of interested Contractors to consider the layout and floor space of the project area and to enable the viewing of the delivery, utility and installation sites. The site visit shall be used by the Contractors to identify structures or conditions that may impede, obstruct or prevent completion of the work. It shall be the responsibility of the Contractor to identify obstructions and impediments to the project and to make appropriate accommodations for correction and modification to mitigate the problem. If corrective measures conflict with other requirements listed in the SOW or is outside the work area the Contractor shall identify these issues in the proposal submittal to the Government. Answers not contained in the SOW to all questions that are raised during the site visit shall be submitted in writing to the Contract Specialist assigned to the project. Should the Contractor fail to identify an obstruction or hindrance to the project that is identifiable from a site visit the Contractor shall provide a solution to the problem that is to the satisfaction of the Government and at no additional cost to the Government. It shall be the responsibility of the Contractor for all dimensioning of the system including all ancillary pieces and material. It shall be the responsibility of the Contractor to supply his personal protective equipment (PPE) for the site visit. At a minimum, the PPE needed is protective eyewear, protective footwear and aural protection.

1.8 Following installation completion and prior to Final Acceptance the Contractor shall supply to the Contracting Officer’s Representative (COR) a computer-aided design and drafting (CADD) as-built drawing of the installed Deburr System in Bldg. 1C Bay 3. The drawing shall be furnished in PDF and .dwg to the COR and shall be provided in hardcopy, ANSI D paper sized 22”x34”, in triplicate.

1.9 The Vendor, and all sub-contractors, must abide by all applicable regulations, publications, manuals, and local policies and procedures. This includes, but is not limited to; AR 25-1 as well as STIGs and SRGs as published on https://iase.disa.mil.

1.10 Upon solicitation, the Vendor will submit a written implementation plan for review and acceptance by the TYAD CCB. This plan will include, but is not limited to, detailed information of all IT equipment, components, software, firmware, and data to be delivered to TYAD. This plan, and the associated list of components will be verified by TYAD personnel to ensure the promised assets have not been tampered with prior to system delivery at TYAD.

The same component list will be used to verify that no assets are tampered with during the install phase, after delivery, but prior to acceptance by TYAD. The component list will continue to be used to verify system integrity, and track changes made, after acceptance by

TYAD.

1.11 All data delivered to TYAD shall be provided with FIPS 140-2 compliant cryptographic hashes to enable TYAD to verify the integrity of the received files. The provided hashes shall not reside solely on the same physical media as the associated data, and must not be initially provided after receipt of the data by TYAD. Data received by TYAD which does not match the associated cryptographic hashes shall not be considered valid, and will not be accepted.

2.0 Definitions & Acronyms

2.1 Acronyms

AO Approving Official AR Army Regulation APMS Army Portfolio Management System ARCYBER United States Army Cyber Command ASB Automation Support Branch ATO Authority to Operate CCB Configuration Control Board CD Compact Disc CMVP Cryptographic Module Validation Program COR Contracting Officer Representative COTR Contracting Officer’s Technical Representative CPLD Complex Programmable Logic Device CSR Certificate Signing Request DISA Defense Information Systems Agency DOD United States Depart of Defense ELTY Electronic Tobyhanna Army Depot Form eMASS Enterprise Mission Assurance Support Service EULA End User License Agreement FIPS Federal Information Processing Standard FPGA Field Programmable Gate Array GIG Government Information Grid HBSS Host Based Security System IAVA Information Assurance Vulnerability Alert IAVB Information Assurance Vulnerability Bulletin ICAN Internal Campus Area Network IMD Information Management Division IS Information System IT Information Technology NETCOM United States Army Network Enterprise Technology Command NIST National Institute of Standards and Technology

OEM Original Equipment Manufacturer PKI Public Key Infrastructure PLC Programmable Logic Controller RMF Risk Management Framework SD Secure Digital SME Subject Matter Expert SOW Statement of Work SRG Security Requirements Guide STIG Security Technical Implementation Guide TRC Technical Review Cell USB Universal Serial Bus USCYBERCOM United States Cyber Command

2.2 Definitions

This section contains explanations of terms used in this document. They are taken from, and not to supersede, those definitions given in Army Regulation (AR) 25-1. All terms used in this document are in accordance with AR 25-1.

2.2.1 Automation Support Branch

The Automation Support Branch (ASB), under the Mission Support Division, under the Directorate of Production Engineering, is the single point of contact for all mission-related IT equipment at TYAD. The ASB develops, protects, and maintains specialty IT equipment, both networked and standalone, in support of unique workloads across TYAD.

2.2.2 Configuration Control Board

The Configuration Control Board (CCB) is the local approving authority, composed of Supervisory personnel, for all actions regarding IT equipment at TYAD. Receiving an ATO for an IT equipment, from NETCOM, does not automatically guarantee that the system can be utilized at TYAD. The IT equipment must also obtain approval from the TYAD CCB, before it may be used with Army ISs at TYAD. The CCB is the local entity responsible for approving the STIGs and SRGs deemed applicable by the TRC, before the ATO accreditation package is submitted to NETCOM for approval.

2.2.3 Government

Any federal civilian, or military personnel employed by the United States Department of Defense (DOD), United States Army (Army), and/or Tobyhanna Army Depot (TYAD).

2.2.4 Information Management Division

Part of the Directorate of Installation Services, the Information Management Division (IMD) is responsible for the development, protection, and maintenance of the TYAD-ICAN. The IMD operates all critical infrastructure upon which TYAD’s IT equipment operate.

2.2.5 Information System

Information System (IS) is defined as the organized collection, processing, transmission, and dissemination of information in accordance with defined procedures, whether automated or manual. For the purposes of Army Portfolio Management System (APMS), the terms "application" and "information system" are both IT investments describing a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (see JP 1–02).The application of IT to solve a business or operational (tactical) problem creates an information system.

2.2.6 Information Technology

Information technology (IT) is any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency. For purposes of the preceding sentence, equipment is used by an executive agency if the equipment is used directly or is used by a contractor under a contract with the executive agency, which 1) requires the use of such equipment; or 2) requires the use, to a significant extent, of such equipment in the performance of a service or the furnishing of a product. The term "information technology" also includes computers, ancillary equipment, software, firmware, and similar procedures, services (including support services), and related resources. The term "information technology" does not include any equipment that is acquired by a Federal contractor incidental to a Federal contract. (Reference 40 USC Subtitle III (Clinger-Cohen Act of 1996).)

2.2.7 Technical Review Cell

Composed of technical experts from both the ASB, and IMD, the Technical Review Cell (TRC) conducts the preliminary review of all actions, related to IT equipment at TYAD, prior to either ATO submission, or CCB approval. The TRC is responsible for determining which security technical implementation guides (STIGs), and security requirements guides (SRGs) are applicable to a given system, based on the direction given by NETCOM, and higher headquarters.

2.2.8 Vendor

Any non-Government personnel, whether the original equipment manufacturer (OEM), reseller, or third-party personnel involved in the procurement, installation, and/or maintenance of the IT equipment.

3.0 Minimum Deburr System Specifications, Characteristics and Features

3.1 The deburring machine shall be designed and constructed to be a dry processing machine with a vacuum conveyor table to convey tabled parts through the machine. The conveyor table, feed input opening, and feed output opening shall be 54” wide, minimally, to permit processing of 48” wide aluminum parts and aluminum sheets.

3.2 The dust collector unit shall be designed to be a wet dust collector unit and shall be constructed with all stainless steel parts for maximum corrosion protection.

3.3 The deburring machine and dust collector shall be connected by the Contractor using Contractor-supplied ducting. Contractor-supplied ducting shall be manufacturer’s specified and installed by the Contractor per manufacturer’s specification.

3.4 The Deburr System shall be designed and constructed to process only aluminum. The aluminum that will be processed by the Deburr System will be of varying alloys. Examples of the types of burrs being sought for removal by the Deburr System will be available for viewing by Contractors at the scheduled site visit.

3.5 The deburring machine, wet dust collector and all connective ducting shall be in compliance with NFPA 484 (Standard for Combustible Metals) and NFPA 654 (Standard for the Prevention of Fire and Dust Explosions from the Manufacturing, Processing, and Handling of Combustible Particulate Solids), current editions.

3.6 The deburring machine shall be designed and constructed to process part thicknesses of 0.024 inches, minimum, through 6.5 inches, maximum.

3.7 The deburring machine shall be designed and constructed to permit the deburring of a part size measuring 2 inches x 2 inches, minimum.

3.8 Conveyor feed speed through the machine shall be variable from 20 in./min. through 390 in./min. Feed speed shall be able to be set manually and to be set automatically.

3.9 The Deburr System shall not exceed 85 decibels when fully operational. For a Deburr System that exceeds 85 decibels when fully operational the Contractor shall furnish and install noise suppression equipment to reduce the fully operational noise level to 85 decibels, maximum.

3.10 As a safety feature the deburring machine shall be designed and constructed with an Emergency Stop (E-Stop) button on the front and on the back of the machine.

3.11 As a safety feature the deburring machine shall be designed and constructed with a hand safety feature that prevents hand insertion into the machine while the machine is operational.

3.12 The deburring machine’s Main Power Switch shall be able to be padlocked for safety.

3.13 The deburring machine shall be designed and constructed with a wireless electronic sensor gauge that permits the measuring of part material thickness prior to machine processing of the part.

3.14 The deburring machine shall be designed and constructed to permit both manual and automatic operation. Automatic operation of the deburring machine shall be computer controlled using operator input through an LCD color display touch screen control that uses English language and graphical representation intuitive programming and a QWERTY-configured keyboard.

3.15 All automatic functions and operations of the deburring machine shall be designed and constructed to permit manual override.

3.16 The deburring system shall meet all requirements outlined in Section 4.0.

3.17 The deburring machine shall be equipped with a self-diagnostic warning system that automatically monitors the machine and machine operation and identifies to the operator when a fault is detected; what is the detected fault; and the location of the detected fault.

3.18 The Deburr System shall utilize 480V/3 Phase/60 Hz. For a machine that is not designed and constructed to use 480V/3 Phase/60 Hz, the Contractor shall supply, install and connect the necessary transformer that permits the machine to fully utilize 480V/3 Phase/60 Hz.

3.19 The deburring machine shall be designed and constructed with 4 ea. internal processing stations all of which shall be configurable for both brushes and for drums to enable greatest configuration flexibility to adapt to workload requirements. The initial configuration for the deburring machine that is to be installed shall be hard drum followed by soft drum followed by a top brush and concluding with a Scotch Brite, or equivalent, drum. Grits for drum abrasive belts and brushes will be discussed with the Contractor at the post-award pre-installation meeting.

3.20 Internal processing stations configured for brushes shall be designed and constructed to ensure the brushes oscillate within the processing station.

3.21 The deburring machine internal processing stations shall be of a modular-type design and construction to enable quick and easy changes for station configuration.

3.22 The deburring machine shall be equipped with rubber-coated pressure rollers on the infeed side and on the outfeed side of the internal processing stations.

4.0 Cyber Requirements

4.1 Hardware Requirements

Without exception, all IT equipment shall comply with any, and all, applicable security technical implementation guides (STIGs) and security requirement guides (SRGs) as published by the Defense Information Systems Agency (DISA). This includes STIGs and SRGs regarding physical security. In addition, all IT equipment will comply with relevant Department of Defense (DOD) guidance, and mandates regarding hardware lifecycle upgrades. Without exception, all hardware must come from sources approved by the DOD, and abide by all current restrictions.

4.1.1 Communication Interfaces

All IT equipment must utilize at least RS-232 serial, or Universal Serial Bus (USB) communication methods. USB connections are to function as a peripheral device only, such as a printer. USB Mass Storage Devices are strictly prohibited. Additional communication interfaces, such as Ethernet, or RS-485, are acceptable, but cannot be in lieu of an RS-232, or USB interface. Full system functionality must be provided via all communication methods present in the IT equipment. All communication interfaces must be enabled, and available for use by the Government, upon delivery of the IT equipment to the Government. This is to ensure continuity of operations should a communication interface become either inoperable, or prohibited for security, or technical reasons.

4.1.2 Cryptographic Devices

Any, and all, hardware implementing cryptographic functionality must utilize a Federal Information Processing Standard (FIPS) 140-2 Level 1, or better, compliant device, certified by the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP).

4.1.3 Workstations and Servers

Only standardized, Government owned, managed, and maintained computing hardware shall be utilized.

4.1.4 Removable Storage Media

The use of removable storage media, including, but not limited to, Universal Serial Bus (USB) flash drives, CompactFlash cards, and Secure Digital (SD) cards is prohibited, except by authorized Government personnel. Neither the Vendor, nor their sub-contractors, shall utilize such devices, and will provide data via optical media, such as a compact disc (CD).

4.1.5 Memory Contents

In the event of main, and backup power failure, the IT equipment shall not utilize volatile memory to store information including, but not limited to, parameters, configurations, or passwords. Upon restoration of power, the IT equipment must return to a state such that the Government can continue to use the IT equipment without requiring service by either the Vendor, or any of their sub-contractors.

4.1.6 Smart Card Readers

DOD personnel utilize a smartcard, called a Common Access Card (CAC) to access IT equipment. All user identification, and authentication, is to be accomplished with a FIPS 201 compliant smartcard reader.

4.1.7 Testing Hardware

The Vendor, and all of their sub-contractors, shall provide additional hardware, and licenses to simulate all system functionality in a laboratory environment. These assets are to be used for testing purposes only, and will not be deployed for production use. In order to ensure that security updates, and configurations do not interfere with IT equipment in production use, the Government requires the ability to test a representative system in a controlled, laboratory environment.

4.1.8 Registration and Licensing

Sensitive information shall not be provided by the Government to the Vendor, or any sub-contractors. This information includes, but is not limited to; computer hostnames, IP addresses, usernames, or passwords. All products shall be registered to:

Commander Tobyhanna Army Depot 11 Hap Arnold Boulevard Tobyhanna, PA 18466

Unless approved by the TYAD CCB, physical security tokens are restricted to server use only, and prohibited in end-user IT equipment. No licensing terms between the Vendor, or any sub-contractors, may supersede any requirements from either TYAD, or higher DOD headquarters.

4.2 Software Requirements

Without exception, all IT equipment shall comply with any, and all, applicable STIGs, and SRGs developed by DISA, as well as relevant Army guidance, and mandates. Any, and all software, firmware, or operating system intended to be used on, with, or in support of any IT equipment is required to have a current, and valid, ATO, approval from the TYAD CCB, a unique name to identify the product, and employ a version numbering system to enable tracking of outdated software. All data delivered to TYAD will be provided with FIPS 140-2 compliant cryptographic hashes to enable TYAD to verify the integrity of the received files. The provided hashes shall not reside solely on the same physical media as the associated data. Without exception, all software, firmware, and data must come from sources approved by the DOD, and abide by all current restrictions.

4.2.1 Operating Systems

All IT equipment shall utilize only operating systems, approved by the Army, and configured according to applicable STIGs, SRGs, Army, and local TYAD guidance, and mandates. All operating system installations must be protected by the DOD’s Host Based Security System (HBSS) software suite.

4.2.2 Install Location

Unless authorized by the TYAD CCB, all software, firmware, and data provided the Vendor, and all sub-contractors, must be installed within, and provide full system functionality while running from, standard locations appropriate for the particular operating system on which it is installed (e.g., Program Files, Program Files (x86), etc.)

4.2.3 Account Credentials

The IT equipment must integrate with TYAD’s Active Directory infrastructure in order to utilize the existing public key infrastructure (PKI), operated by the Army, for user, service, and machine accounts. In addition, the Government must have the ability to change and/or disable, any, and all, built-in administrative, user, and service accounts in the system, including those in embedded sub-systems (e.g., microcontrollers, FPGAs, PLCs, CPLDs, etc.).

4.2.4 Cryptographic Functionality

All cryptographic functions must be FIPS 140-2 Level 1 compliant, or better, and utilize an implementation certified by the NIST CMVP.

4.2.5 Encryption Certificates

For cryptographic functionality, requiring use of a certificate, the system must be able to generate a certificate signing request (CSR) for submission to a DOD Certificate Authority. The CSR must be in a FIPS 140-2 Public Key Cryptography Standards (PKCS) #10 format of at least 2048 bits.

4.2.6 Connections to Outside Systems

All data shall remain within the bounds of the DOD Global Information Grid (GIG).

Connections to outside entities for purposes including, but not limited to, performance metric reporting, or remote support are prohibited.

4.2.7 Registration and Licensing

Sensitive information shall not be provided by the Government to the Vendor, or any sub-contractors. This information includes, but is not limited to; computer hostnames, IP addresses, usernames, or passwords. All products shall be registered to:

Commander Tobyhanna Army Depot 11 Hap Arnold Boulevard Tobyhanna, PA 18466

Unless approved by the TYAD CCB, physical security tokens are restricted to server use only, and prohibited in end-user IT equipment. No licensing terms between the Vendor, or any sub-contractors, may supersede any requirements from either TYAD, or higher DOD headquarters.

5.0 Site Preparation

5.1 Within 10 working days after receipt of order (ARO) the Contractor shall coordinate with the

COR for a post-award pre-installation meeting to be scheduled and attended at TYAD. The Contractor shall have to appear on-site to attend the scheduled post-award pre-installation meeting. The Contractor shall not use video teleconferencing and teleconferencing in lieu of on-site attendance at the post-award pre-installation meeting. At this meeting a project timeline shall be provided by the Contractor. It is suggested the Contractor’s sub-contractor personnel attend the post-award pre-installation meeting.

5.2 Government personnel will remove the machine that currently occupies the project installation worksite.

5.3 The concrete floor in Bldg. 1C Bay 3 is 6 inches thick without steel reinforcement. For a

Contractor-supplied Deburr System that requires installation of a foundation, the Contactor shall be responsible to supply all equipment, materials, supervision and labor for the turn-key installation of a manufacturer’s specified machine foundation. The Contractor shall saw-cut the concrete in Bldg. 1C Bay 3 at the required locations for the foundation. The Contractor shall remove the saw-cut concrete pieces and excavate to the required depths. The Contractor shall supply and install the manufacturer’s recommended steel reinforcements;

supply, pour and level the concrete. The Contractor shall supply a refuse receptacle for debris and rubbish collection and removal from TYAD. Location of the refuse receptacle will be provided by the Government to the Contractor prior to the start of the site preparation work. The Contractor shall clean the work site prior to the Contractor departing for the day and for the weekend.

5.4 The Contractor shall perform the saw-cutting and excavation work between the hours of 5:00

PM Friday and 6:00 PM Sunday. The Contractor may perform concrete installation and finishing during normal TYAD duty hours.

5.5 The Contractor shall be responsible to supply all PPE for all Contractor and sub-contractor personnel.

6.0 Delivery, Assembly and Installation

6.1 The Contractor shall use only electric-powered equipment inside all Government buildings.

For all Contractor-supplied electrical equipment that require battery recharging it shall be the responsibility of the Contractor to supply battery-charging equipment. Connection of the Contractor-supplied battery-charging equipment to TYAD power shall be the responsibility of the Contractor. A location for the battery-charging equipment will be provided by the Government to the Contractor.

6.2 It shall be the responsibility of the Contractor to deliver, off-load, transport, properly position, and place the Deburr System and all ancillary equipment at the designated floor location within Bldg. 1C Bay 3. The Contractor shall be responsible to provide all personnel and equipment necessary to deliver, off-load, transport, properly position, and place the Deburr System and ancillary equipment at the designated work site in Bldg. 1C Bay 3. Only electric-powered material handling equipment shall be used by the Contractor inside all Government buildings. Delivery date and time shall be coordinated by the Contractor with the COR a minimum 14 calendar days in advance of an anticipated delivery at TYAD. The Contractor shall be able to provide delivery to TYAD on a Saturday. Delivery shall include all accessory pieces and assembly pieces and materials. A partial delivery is not acceptable.

6.3 Within 7 calendar days after delivery to TYAD the Contractor shall arrive on-site to begin

Deburr System assembly and installation. The Contractor shall be responsible to remove all packaging, packing and crating material from all delivered equipment; from all delivered accessory pieces; and from all delivered assembly pieces and remove all of the packaging, packing and crating materials from TYAD. The Contractor shall be responsible to supply a refuse receptacle. Location for placement of the Contractor’s refuse receptacle will be provided by the Government to the Contractor in advance of work initiation. The Contractor shall remove the refuse receptacle within 5 working days following completion of all contractual work.

6.4 It shall be the responsibility of the Contractor to completely and thoroughly clean the Deburr

System equipment, ancillary equipment, accessory pieces and assembly pieces. The

Contractor shall supply and install a grounding rod and grounding strap for the Deburr System, per manufacturer’s specification. The Contractor shall connect the Deburr System to the grounding rod, per manufacturer’s specification. The Contractor shall furnish all equipment, tools, materials, and labor to install the grounding rod and grounding strap.

6.5 The Contractor shall be responsible for anchoring the Deburr System to the floor, per manufacturer’s specification. The Contractor shall supply all materials, labor, tools and equipment necessary to anchor to the floor the Deburr System, per manufacturer’s specification.

6.6 The Contractor shall be responsible to level the Deburr System, per manufacturer’s specification.

6.7 The Contractor shall thoroughly clean the work site prior to daily departure and prior to weekend and holiday departures.

6.8 The Contractor may perform assembly and installation work during normal 1st-shift duty hours: Monday—Thursday from 7:00 AM to 4:30 PM and Friday from 7:00 AM to 3:30 PM.

6.9 The Contractor shall furnish all paints, fluids, greases and lubricants required by the manufacturer for the Deburr System. The Contractor shall have all paints, fluids, greases and lubricants delivered with the Deburr System. The Contractor shall fill the Deburr System to the manufacturer’s recommended fluid levels and use all paints, greases, fluids and lubricants per manufacturer instruction. The Contractor shall furnish Safety Data Sheets (SDSs) for all paints, fluids, greases and lubricants to the COR thirty (30) calendar days prior to delivery to TYAD. The Contractor shall remove from TYAD all empty, fully-filled, and partially-filled paint, fluid, grease and lubricant containers. The Government will supply water for the Deburr System. The Contractor shall be responsible for filling the Deburr System with Government-supplied water.

6.10 The Contractor shall be responsible to connect all utilities—air, power, water—to the

Deburr System and to all ancillary pieces of equipment. The Contractor shall connect the Deburr System to all ancillary pieces of equipment. Utilities will be provided by TYAD to within 25 feet of the worksite. The Deburr System shall utilize 480V/3 Phase/60 Hz. For a Deburr System that is not designed and constructed to use 480V/3 Phase/60 Hz the Contractor shall supply, install and connect the necessary transformer that permits the Deburr System to fully utilize 480V/3 Phase/60 Hz. The Contractor shall ensure a minimum of 3 feet of clearance around all installed equipment, electrical assemblies, subassemblies, and wiring. The Contractor shall ensure all wiring is in accordance with NEC and OSHA standards. The Contractor shall ensure the installed equipment is in accordance with NEC and OSHA standards.

6.11 The Contractor shall be responsible to furnish all materials, equipment, tools, and labor to connect the deburring machine to the dust collector. The Contractor shall connect the deburring machine to the dust collector.

6.12 The Contractor shall note the installation site is located in an industrial work area populated by industrial equipment and personnel.

6.13 The Contractor shall be responsible to supply all PPE for all Contractor and sub-contractor personnel.

6.14 The Contractor shall be responsible to ensure the Deburr System is operating within manufacturer’s specifications prior to beginning the Government personnel training.

6.15 Following delivery of all equipment and all ancillary pieces at TYAD the Contractor shall have 60 calendar days to complete assembly; complete installation; complete all personnel training; and present all data and documentation to the COR.

6.16 Period of Performance (PoP) for the contract will be 180 days after receipt of order (ARO) by the Contractor.

7.0 Training

7.1 The Contractor shall provide 8 hours, minimum, and no more than 32 hours, maximum, of Deburr System operation training for Sheet Metal Fabrication Branch personnel. Training shall be conducted by the Contractor’s qualified training representative. This training shall focus on basic Deburr System operation, Deburr System programming, Deburr System cleaning and housekeeping, and Deburr System features familiarization. Instruction shall also include maintenance that needs to be performed by Sheet Metal Fabrication Branch personnel on a daily basis. Training shall be conducted on-site at the Deburr System in Bldg.

1C Bay 3. Sheet Metal Fabrication Branch personnel instruction shall be for up to 5 ea.

personnel. All materials used during training shall become the property of TYAD. Training shall be conducted during 1st-shift hours of Monday through Thursday from 7:30 AM to 4:00

PM.

7.2 The Contractor shall provide 8 hours, minimum, and no more than 32 hours, maximum, of

Deburr System maintenance training for Production Equipment Branch personnel. Training shall be conducted by the Contractor’s qualified training representative. Maintenance training shall include preventive maintenance (PM) and general maintenance including the lock-out/tag-out procedure to take the Deburr System to zero mechanical state and restore it to full operational capability. Maintenance instruction shall be for up to 3 ea. Production Equipment Branch personnel and shall be performed on-site at the Deburr System in Bldg.

1C Bay 3. All materials used during training shall become the property of TYAD. Training shall be conducted during 1st-shift hours of Monday through Thursday from 7:30 AM to 4:00

PM.

7.3 All Contractor-furnished training shall be conducted in English and all training materials shall be written in English.

7.4 Sheet Metal Fabrication Branch personnel training and Production Equipment Branch personnel training shall commence within 2 working days after the Deburr System and all ancillary pieces of equipment are operating within the manufacturer’s specifications. The Contractor shall complete all Government personnel training within 14 calendar days of initiation. The Contractor shall coordinate with the COR the initiation of Government personnel training.

8.0 Documentation

8.1 Digital Documentation

The Vendor, and all sub-contractors, shall provide a complete set of instruction manuals containing all information necessary to operate, maintain, administer, and reinstall software and hardware contained within the system. This information shall also provide step-by-step instructions to facilitate a complete restoration of the system, to the state in which it was initially accepted by TYAD, in the event of a fatal system error. If any software, firmware, or data has been customized for use by the Government, the Vendor, and all sub-contractors shall provide the associated source code, firmware, build environment, and build instructions to the Government. If any software, firmware, or data, governed by an open source license has been provided for use by the Government, the Vendor, and all sub-contractors shall provide the associated source code, firmware, build environment, and build instructions to the Government.

The cryptographic hashes of any products built using the information provided by the Vendor, and all sub-contractors, must match the cryptographic hashes of the compiled data provided to the Government. The Vendor, and all sub-contractors, shall also provide a backup copy of all configuration settings in effect at the time of successful demonstration of system functionality.

The Vendor, and all sub-contractors, shall provide at least a digital copy of this information, in a file format to be approved by the TYAD CCB.

8.2 Physical Documentation

8.2.1 The Contractor shall furnish in hardcopy three (3) each of the following manuals: 1)

Operation and Maintenance (O&M) manual; 2) Maintenance Parts manual that shall include a full parts list for the Deburr System—the parts list shall include part number, nomenclature, and quantity for each listed part. The Contractor’s furnished manuals shall include a comprehensive preventive maintenance (PM) schedule that also indicates the work that is to be performed as part of the scheduled PM and shall detail the lock-out/tag-out procedures that are required to bring the Deburr System to a zero mechanical state for maintenance and servicing. Procedures for returning the Deburr System to full operational capability shall also be provided.

8.2.2 The Contractor-furnished O&M manuals shall contain a complete set of mechanical drawings and diagrams; a complete set of electrical drawings and diagrams including electrical schematics; logic circuitry descriptions; spare parts list; operator and maintenance instructions for operating and maintaining the Deburr System. The O&M manuals shall contain complete detailed instructions and schedules for Deburr System PM.

8.2.3 Following installation completion and prior to Final Acceptance the Contractor shall supply to the COR a computer-aided design and drafting (CADD) as-built drawing of the installed Deburr System in Bldg. 1C Bay 3. The drawing shall be furnished to the COR in PDF and .dwg and shall be provided in hardcopy, ANSI D paper size 22”x34”, in triplicate.

8.2.4 All Contractor-furnished documentation shall be written in English.

9.0 General Acceptance

The following criteria must be met before any IT equipment can be accepted, and put into use, by TYAD. Upon acceptance, all assets provided to TYAD by the Vendor, and all sub-contractors, shall become the sole property of the Government. All data delivered to TYAD shall be provided with FIPS 140-2 compliant cryptographic hashes to enable TYAD to verify the integrity of the received files. The provided hashes shall not reside solely on the same physical media as the associated data, and must not be initially provided after receipt of the data by TYAD. Data received by TYAD which does not match the associated cryptographic hashes shall not be considered valid, and will not be accepted.

9.1 Proof of Functionality

The IS must obtain written confirmation, from the Contracting Office Representative (COR), of successful demonstration of full system functionality. The demonstration must occur at TYAD, in the presence of either the COR, or the Contracting Office Technical Representative (COTR) and at least one TYAD subject matter expert (SME). The COTR cannot serve as the only SME, at least one SME shall be from the Cost Center where the asset is to be utilized. Full system functionality demonstrations shall only be performed on the fully installed IT equipment. The written confirmation, from the COR, will contain an itemized list of checks performed during the demonstration. Each check will detail the steps taken, inputs/commands given, and results received. The TYAD COR/COTR and TYAD SMEs shall sign and date the verified component list, as detailed in Section 1.10, as well as the completed system functionality demonstration checklist. End-user license agreements (EULA) and similar documents will be signed by the TYAD COR/COTR and TYAD SMEs, after signing both the verified component list, and completed system functionality demonstration checklist. If the COTR is present for the full system functionality demonstration test, and signs on behalf of the COR, then the COR must sign and date the same documents, upon receipt from the COTR.

9.2 Proof of Documentation

The COR will provide a signed and dated memo once all documentation outlined in Section 8.0 has been delivered to and verified by TYAD.

9.3 Proof of Authority to Operate

IT products, such as software to be installed on Army computing resources, must undergo the Risk Management Framework (RMF) Assess Only process. Systems fitting the description of an IS, such as those provided by a Vendor with software, firmware, or operating system not controlled by the Army, are required to undergo the RMF Assess and Authorize process. Both an IT product, and an IS must be registered in the Enterprise Mission Assurance Support Service

(eMASS). Proof of an Authority to Operate (ATO) is only valid once the relevant entry in eMASS receives a signature from the Approving Official (AO). Without an AO signature, no ATO exists, and the IT/IS cannot be accepted.

9.4 Proof of TYAD TRC Approval

The IS must obtain TYAD TRC approval. This process typically occurs in parallel with the ATO approval process. The COR will provide a signed and dated memo to the Vendor upon TRC approval.

9.5 Proof of TYAD CCB Approval

The IS must obtain TYAD CCB approval, which will also signify ATO approval. TYAD TRC approval is required before consideration by the TYAD CCB. The COR will provide a signed and dated memo to the Vendor upon CCB approval.

10.0 Final Acceptance

Final Acceptance will occur upon ACCEPTANCE by the COR in Wide Area Workflow (WAWF) of the Contractor’s submitted invoice. Final Acceptance will be granted only after General Acceptance has been given to the Contractor and all terms and conditions of the contract have been completed by the Contractor to the satisfaction of the COR. Should the Vendor be unable to provide a solution, acceptable to TYAD and within the period of performance, the Vendor is responsible for removing all assets installed as part of this SOW at the Vendor’s expense.

11.0 Warranty

11.1 Traditional Support Requirements

11.1.1 The Contractor shall warrant the Deburr System, all ancillary components, all installation parts and all workmanship for a period of one (1) calendar year, minimum, following Final Acceptance by the COR. During this warranty period all parts costs, labor costs, transportation and shipping costs, travel costs, tool costs and per diem for all Contractor personnel shall be the responsibility of the Contractor. The Contractor field repair technician shall arrive on-site within 72 hours after being contacted by TYAD personnel to make warranty repairs during the warranty period. The Contractor shall supply to the COR Contact Telephone Numbers and Points of Contact (POCs) for use by TYAD personnel for warranty, operations and maintenance questions and support.

11.1.2 The Contractor shall provide and perform Preventive Maintenance (PM) on the Deburr

System to be included as part of the provided warranty and without additional cost to the Government. The Contractor shall perform the contractual PM within 12 months, but no sooner than 10 months after Final Acceptance.

11.1.3 As a part of the contractual PM the Contractor shall provide to the COR, following completion of the contractual PM, a complete itemized listing of what was performed as part of the PM and the Contractor shall provide an itemized parts list with names, part numbers and quantities of the parts that have been replaced. Date for the contractual PM shall be coordinated by the Contractor with the COR. All replacement parts needed for the contractual PM shall be provided by the Contractor at no charge to the Government and installed by the Contractor at no charge to the Government.

11.1.4 The Contractor who supplies a Deburr System that has a two (2) year manufacturer’s warranty, all parts costs, labor costs, transportation and shipping costs, travel costs, tool costs and per diem for all Contractor personnel shall be the responsibility of the Contractor during the warranty period. The Contractor field repair technician shall arrive on-site within 72 hours after being contacted by TYAD personnel to make warranty repairs.

11.1.5 The Vendor, and all of their sub-contractors, shall address all safety-related issues, as identified by the TYAD Safety Office, for the duration of the support contract. Delivery of all materials required to perform mitigation and/or remediation of safety hazards must be completed within the timelines set by the TYAD Safety Office.

11.2 Cyber Support Requirements

All IT equipment are required to have a valid support contract for at least the software, and firmware. While a support contract is in effect, the following requirements, and all those listed in applicable STIGs, and SRGs from DISA, as well as relevant DOD guidance, and mandates shall apply. The information contained within the Acceptance section of this document shall also apply for the duration of the support contract.

11.2.1 Response Time

The Government will receive a response from either the Vendor, or one of their sub-contractors, no later than 24 hours after the Government initiated a service request with either the Vendor, or one of their sub-contractors.

11.2.2 Replacement Hardware

Any, and all, replacement hardware shall be new, or functionally, and aesthetically, equivalent to new, in performance, and appearance.

11.2.3 Software Updates

Software support will include software updates and enhancements on covered software products.

Covered software products is defined as any software, or firmware provided, by the Vendor, to the Government.

11.2.4 Operating System Compatibility

The IT equipment must remain compatible with future updated operating systems in accordance with DOD migration schedules. Delivery, to the Government, of all materials required to perform upgrades for compatibility must be completed within the timelines set by DISA, NETCOM, U.S. Army Cyber Command (ARCYBER), U.S. Cyber Command (USCYBERCOM), and any additional DOD organizations tasked with the security of the GIG.

11.2.5 Security Updates

The Vendor, and all of their sub-contractors, shall address all security-related issues for the duration of the support contract. Delivery, to the Government, of all materials required to perform mitigation, and/or remediation of Information Assurance Vulnerability Alerts and Bulletins (IAVAs and IAVBs) must be completed within the timelines set by DISA, NETCOM, ARCYBER, USCYBERCOM, and any additional DOD organizations tasked with the security of the GIG.

12.0 Safety

12.1 The Deburr System shall meet all requirements set forth in OSHA General Industry

Standards, current edition. All energy control sources shall have the capability of being locked-out and tagged-out. The Contractor’s manuals shall detail the lock-out/tag-out procedures that are required to bring the Deburr System to a zero mechanical state for maintenance and servicing. Procedures for returning the Deburr System to full operational capability shall also be provided.

12.2 Prior to soldering, welding, grinding, torch cutting, and all forms of burning and use of open flame the Contractor shall be responsible to obtain a Hot Work Permit from the TYAD Fire Department. The Contractor shall use safety screens that offer the required level of protection for the type of work being performed and to provide protection for all personnel in the surrounding area.

12.3 See below the Contractor Safety Standards for TYAD for additional information and requirements.

13.0 Environmental

13.1 The Contractor shall not use fossil-fueled vehicles and fossil-fueled equipment inside

Government buildings. Only electric vehicles and electric equipment are permissible.

13.2 The Contractor shall furnish SDSs to the COR for all consumables furnished by the

Contractor and used by the Contractor. All SDSs for hazardous consumables shall be furnished to the COR 30 calendar days prior to the hazardous consumables being brought on-post.

13.3 See below the Standard Specifications for Projects Under the National Environmental

Policy Act for additional information and requirements.

14.0 DEPOT ACCESS FOR THE CONTRACTOR

14.1 A background check and approval from Tobyhanna Army Depot (TYAD) Security

Branch is required for all contractor and subcontractor personnel prior to on-site access at TYAD. All persons seeking entrance to TYAD shall submit to and comply with all security standards and requirements in force at the time such persons are seeking entry. All contractors, regardless of resident status or citizenship, will be subject to vehicle search and intense in-processing by TYAD security personnel prior to being granted access to TYAD.

This security screening process may be time consuming and access may be delayed or denied. The contractor shall ensure ELTY Form 648-C is completed for all contractor and subcontractor personnel requiring depot access to include warranty services. The TYAD point of contact (POC) will provide ELTY Form 648-C, “Request Access to Tobyhanna Army Depot” to the contractor/vendor at least ten days prior to the expected visit date for completion. The contractor/vendor shall return the completed ELTY Form 648-C to the TYAD POC in a timely manner so the same may be submitted to Security for processing no later than seven days prior to the visit. All of the required fields on the form shall be complete and accurate by the contractor/vendor for timely processing. This requirement is inclusive of on-site supervisory or managerial personnel and sub-contractor personnel that the Contractor anticipates will be performing work or visiting on-site. This security screening does not relieve the contractor of any responsibilities to conduct thorough pre-employment background checks and drug screening. Contractor workers will not be granted access to the work site until security screening is completed and access is approved.