W51AA1-23-Q-0020.pdf

SEE ADDENDUM

(No Collect Calls)

W51AA123Q0020 23-Aug-2023

b. TELEPHONE NUMBER

5706156125

8. OFFER DUE DATE/LOCAL TIME

04:00 PM 06 Sep 2023

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W51AA19. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JESSICA MCHUGH

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

SEE SCHEDULE

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

ACC-APG TOBYHANNA DIVISION

11 HAP ARNOLD BLVD

TOBYHANNA PA 18466

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE W25G1V 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

SEE BELOW FOR SEPARATE SHIPPING INSTRUCT

XXX

XXX PA 00000

TEL: FAX:

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$34,000,000

NAICS:

811210

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF73

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

Construction Contractor Safety Standards for TYAD Revised Jan 2023

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 2 Lot Preventative Maintenance - Base Year

FFP

Preventative maintenance on 42 Kardex storage systems, 14 Titan III, and 11 Kardex Remstar storage systems In Accordance With (IAW) the Statement of Work.

* Please include pricing from Attachment 1 - Pricing Table.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED. ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

FOB: Destination

MILSTRIP: W25G1V320600UL

PURCHASE REQUEST NUMBER: W25G1V320600UL

PSC CD: J039

NET AMT

0002 1 Lot Emergency Repairs Base Year

T&M Emergency Repairs

* Please include pricing from Attachment 1 - Pricing Table.

*Emergency(T&M) repairs include both time (hours) and materials used to complete the repairs.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED, ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

FOB: Destination

NSN: AASSVC320600W9

MILSTRIP: W25G1V320600W9

PURCHASE REQUEST NUMBER: W25G1V320600W9

TOT ESTIMATED PRICE

CEILING PRICE

0003 2 Lot OPTION Preventative Maintenance - Option Year 1

FFP

Preventative maintenance on 42 Kardex storage systems, 14 Titan III, and 11 Kardex Remstar storage systems IAW the Statement of Work.

* Please include pricing from Attachment 1 - Pricing Table.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED. ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

FOB: Destination

0004 1 Lot OPTION Emergency Repairs - OptionYear One.

T&M Emergency Repairs

* Please include pricing from Attachment 1 - Pricing Table.

*Emergency(T&M) repairs include both time (hours) and materials used to complete the repairs.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED, ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

0005 2 Lot OPTION Preventative Maintenance - Option Year 2

FFP

Preventative maintenance on 42 Kardex storage systems, 14 Titan III, and 11 Kardex Remstar storage systems IAW the Statement of Work.

* Please include pricing from Attachment 1 - Pricing Table.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED. ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

0006 1 Lot OPTION Emergency Repairs - OptionYear Two.

T&M Emergency Repairs

* Please include pricing from Attachment 1 - Pricing Table.

*Emergency(T&M) repairs include both time (hours) and materials used to complete the repairs.

PERIOD OF PERFORMANCE DATES PROVIDED IN SOLICITATION ARE

ESTIMATED, ACTUAL PERIOD OF PERFORMANCE WILL BE

DETERMINED AT TIME OF AWARD.

0007 1 Lot OPTION Six Month Extension

FFP

Six Month Extension In Accordance With IAW FAR 52.217-8.

* Please include pricing from Attachment 1 - Pricing Table.

As part of the price evaluation, the Government will evaluate the option to extend services under clause 52.217-8 by adding one-half of the offeror's final option period price to the offeror's total price. Thus, the offeror's total price for the purpose of evaluation will include the base and option year periods, and one-half of the last year extension option.

ADDENDUM

Addendum to 52.212-1, Instruction to Offerors-Commercial Items Proposal Submission Instructions:

A complete proposal submission shall include the following:

1. Completed SF 1449 (Blocks 30a, 30b, and 30c) and CLIN pricing.

2. Completed Attachment 1 – Pricing Table

3. Past performance or capabilities statement demonstrating that the offeror possesses the skills, knowledge, and resources to perform the required services.

Basis of Award: Reference FAR 52.212-2 for evaluation.

OFFEROR MUST COMPLETE FAR PROVISION 52.204-24 AND FAR PROVISION

52.204-26 AND SUBMIT WITH QUOTE.

Email quote along with supporting documentation to jessica.l.mchugh.civ@army.mil by the date and time specified in the solicitation. Please reference the solicitation number “W51AA1-23-Q-0020” in the email. Email shall include a signed copy of the SF 1449 solicitation, pricing, and all other Items listed above. Complete pricing must be submitted for each CLIN listed in the SF 1449 Line items. No other offers will be considered. Offer shall be submitted and award made by the Government on an all or none basis. Therefore, offers are solicited on that basis only. The Government intends to immediately compare proposals and award a contract without conducting exchanges with offerors. Emails not including all of these items MAY not be accepted.

Emails not received by the date and time specified in the solicitation or not providing all of the required documentation, may not be considered for award. It is the responsibility of the Offeror to verify that the email, to include all attachments, was received by the date and time specified in the solicitation.

Only electronic proposals will be accepted. No hardcopy proposals will be accepted.

Each proposal must be submitted electronically via email to the Contract Specialist, Jessica McHugh at jessica.l.mchugh.civ@army.mil. The size per e-mail must not exceed 9MB. If necessary, offerors may submit multiple emails. If multiple emails are sent, emails must be marked 1 of 2, 2 of 2, etc. To be considered for award, the offeror's complete proposal, including all attachments, must be received in the email Inbox of the Contract Specialist identified in this solicitation before the closing date and time. If a complete proposal, including all attachments, does not appear in the email Inbox of the Contract Specialist identified in this solicitation before the closing date and time, then it is not received, and the offeror's entire proposal is late and will not be considered for award. If the offeror does not receive written confirmation of receipt from the Contract Specialist before the closing date and time, it is the responsibility of the offeror prior to closing of the solicitation to contact the Contract Specialist identified above to confirm their complete proposal has been received. The Government will not consider proposals that were delayed, or otherwise not timely delivered to the Contract Specialist's email Inbox because of an issue with the offeror's or the Government's service providers, to include email maintenance, firewall or delivery to any other email box (e.g. junk). Therefore, offerors should anticipate delays in transmission and are advised to plan ahead and to begin transmitting their proposal in enough time to ensure successful delivery prior to the close of the solicitation.

Questions must be submitted 5 days prior to the close date of the solicitation.

Responses to Questions received will be posted in the same manner as the solicitation.

STATEMENT OF WORK

1. BACKGROUND

This Statement of Work (SOW) and the documents referenced herein define the requirements to perform Preventative Maintenance and Emergency repairs on 42 Kardex Storage Systems, 14 Titan III and 11 Kardex Remstar Storage Systems as listed below, at Tobyhanna Army Depot (TYAD) in various locations:

Kardex Storage Systems

MODEL # STOCK # LOCATION NOMEN BAR CODE SERIAL #

Kardex 8000 3990013040011 Night Vision 1B-1 Storage and

Retrieval

AV923 12140

Kardex 12000T 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

BF549 55534

Kardex 16000 5981216000 Bldg.1A-B3 Tool Crib

Filing System BR050 70206

Kardex 8000T 598128000T Bldg. 3-B5 Automated Storage

BR477 15101

Kardex 16000 5981216000 Bldg.1A-B3 Tool Crib

Filing System BR693 70226

Kardex 12000T 5981212000T Night Vision 1B-2 Automated Storage

BV230 55458

Kardex 12000T 5981212000T Sidewinder Missile, Bldg. 1B

Automated Storage

BV231 55453

Kardex 12000T 5981212000T Decan Missile, Bldg.

1B

Automated Storage

BV232 55456

Kardex 12000T 5981212000T Maverick Missile, Bldg. 1B

Automated Storage

BV233 55465

Kardex 3500 598123500 Bldg.4-5 Breezeway Firefinder Parts

Automated Storage

CA2785 29113

Kardex 8000T 598128000T Bldg. 3 Bay 5 Automated Storage

CA3119 15150

Kardex 8000T 598128000T Bldg. 3 Bay 5 Automated Storage

CA3120 15102

Kardex 12000T 5981212000T Bldg.4-4 TPS-75 Area

Automated Storage

CA3846 0000055575

Kardex 12000T 5981212000T Bldg.1A-B3 Tool Crib

Automated Storage

CA3847 55577

Kardex 12000T 5981212000T Bldg.4-4 TPS-75 Area

Automated Storage

CA 4721 55594

Kardex 12000T 5981212000T Bldg. 3 Bay 6 DLA Automated Storage

CA5244 55596

Kardex 3500 598123500 Bldg.4-5 ATCALS Comp Branch

Automated Storage

CA5894 4040

Kardex 12000T 5981212000T Bldg. 3 Bay 6 Automated Storage

CA5902 55597

Kardex 12000T 5981212000T Bldg. 3 Bay 6 Automated Storage

CA5903 55598

Kardex 12000 5981212000 Bldg. 1A-B3 Tool Crib

Automated Storage

CA5906 50362

Kardex 12000T 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

CA5907 55533

Kardex 16000 5981216000 Bldg. 1A-B3 Tool Crib

Filing System CA5908 70227

Kardex 16000 5981216000 Bldg. 1A-B3 Tool Crib

Filing System CA5909 70205

Kardex 12000T 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

CA5910 55579

Kardex 12000T 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

CA5911 55578

Kardex 12000 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

CA5912 55260

Kardex 12000 5981212000T Bldg. 1A-B3 Tool Crib

Automated Storage

CA5913 55259

Kardex 12000 5981212000 Bldg. 1A-B3 Tool Crib

Automated Storage

CA5914 50364

Kardex 12000 5981212000 Bldg. 1A-B3 Tool Crib

Automated Storage

CA5915 50363

Kardex 12000T 5981212000T Night Vision 1B-2 Automated Storage

CA5917 55457

Kardex 8000 3990013040011 Night Vision 1B-1 Storage and Retrieval

CA5918 12141

Kardex 12000T 5981212000T Maverick Missile Automated Storage

CA5922 55463

Kardex 12000T 5981212000T Maverick Missile Automated

CA5923 55464

Kardex 12000T 5981212000T Sidewinder Missile Automated

CA5924 55454

Kardex 12000T 5981212000T Decan Missile Automated Storage

CA5925 55455

Kardex 6000 598126000 Bldg.4-5 South End of new extension

Automated Storage

CA5978 4112

Kardex 6000A 598126000 Bldg. 1A Airborne Automated Storage

CA6110 4041

Kardex 3500 598123500 DMOF Automated Storage

CA8723 4065

Kardex 3500 598123500 Bldg.1A outside

DMOF

Automated Storage

CA9130 4068

Kardex 3500 598123500 Bldg.1A outside

DMOF

Automated Storage

CA9131 4066

Kardex 3500 598123500 Bldg.1A outside

DMOF

Automated Storage

CA9132 4067

Kardex 12000T 5981212000T Bldg. 1A-B3 Tool Crib

Automated

CC0672 55614

Kardex Titan III

Kardex Titan III 711001C943217 Bldg. 4-B6 Automated

CA5559 80466

Kardex Titan III 711001C943217 Bldg. 4-B4 Automated Storage

CA6103 80496

Kardex Titan III 711001C943217 Bldg. 30 Automated Storage

CA6138 80508

Kardex Titan III 711001C943217 Bldg. 4-B4 Automated Storage

CA6606 80518

Kardex Titan III 3990013040011 ASE 1B-2 Storage and Retrieval

CA7111 80546

Kardex Titan III 5981212000 Bldg. 3 Bay 5 Automated Storage

CA7405 80547

Kardex Titan III 711001C943217 Bldg.5-1 Antenna

Automated Storage

CA7549 80564

Kardex Titan III 711001C943217 Bldg.72

SATCOM

Automated Storage

CA7903 80569

Kardex Titan III 711001C943217 Bldg.72

SATCOM

Automated Storage

CA7904 80570

Kardex Titan III 711001C943217 Bldg. 4-2 North Wall

Automated Storage

CA8042 80581

Kardex Titan III 711001C943217 1C-1 Turn-in area

Automated Storage

CA8693 80612

Kardex Titan III 711001C943217 Bldg. 1A Enclosure

Automated Storage

CA9063 80618

Kardex Titan III 711001C943217 Bldg. 1B Bay 5 Automated Storage

CA9064 80617

Kardex Titan III 5981235000 Bldg. 1B, Bay

Automated

CA7157 80561

Kardex Remstar Systems

MODEL # STOCK # LOCATION NOMEN

BAR

CODE

SERIAL #

XP250 Shuttle

VLM

69785XP250

Bldg. 1B Bay

Storage /

Retrieval Unit

CC1498 11006920/001

XP500 Shuttle

VLM

69785XP500

Bldg. 1B Bay

Storage /

Retrieval Unit

TY03052 12000981/004

120X-1311 Vertical Carousel

69785SYS1201311 Bldg. 15 File System CC1052 10004621/001

125S-1611 Vertical Carousel

69785SYS120 Bldg. 73 Media Station CC0847 3010000009

125S-1611 Vertical Carousel

69785SYS120 Bldg. 73 Media Station CC0848 3010000010

XP500 Shuttle 814501C1646411 Bldg. 1A Storage /

Retrieval Unit

TY16200 17003618/006

XP500 Shuttle 814501C1646411

Bldg. 1A Storage /

Retrieval Unit

TY16201 17000597/001

TY16202

17001429/001

TY16203

17001429/003

TY16204

17000004/005

XP500 Shuttle 2450X846-US

Bldg. 10C

TY17232

20000044/005

2. PERIOD OF PERFORMANCE

The period of performance shall be for one (1) Base year of twelve (12) months and two

(2) twelve month option years. A six month extension is also included In Accordance With FAR 52.217-8.

3. SERVICE SHALL CONSIST OF

a) Preventive Maintenance (PM) consists of two inspection/maintenance visits per year.

b) PM includes cleaning, oiling, and adjusting the equipment

c) PM also includes installation of parts required that would normally be included when performing regular maintenance IAW manufacturers guidelines.

d) Technicians will notify TYAD POC of their arrival and departure at Tobyhanna Army

Depot when they arrive on-site to perform such services IAW TYAD security policies and procedures.

e) Emergency calls may be initiated between established contract dates and during normal contract business hours in order to return the storage units to an operational status. The emergency response time is within 48 hours of the call. Technicians are requested to be on site within this 48 hour time frame to access the problem unless there are extenuating circumstances (e.g. weekends, holidays, inclement weather, etc.). If the event that the 48 hour time frame cannot be met, then the technician shall coordinate through the POC of the extenuating circumstance preventing them from meeting the 48 hour response time.

f) Telephonic or email “trouble shooting” is not acceptable unless it the purpose is to gather additional information prior to conducting the on-site visit.

g) Technicians who arrive on post are required to check in with the TYAD POC: Darren Ruby (570-615-6639) before and after troubleshooting/repairing the machines.

h) Technician shall provide a written report status outlining the work completed during their visit with a signature from the on-site TYAD POC initiating the service call (or designated TYAD representative) before departing the depot.

i) For all emergency calls, the technician will provide the TYAD POC a quote for the work to be completed. All repairs must be approved by the TYAD POC prior to the commencement of any work.

j) Technician will provide a report of the PM completed to the TYAD POC.

k) An invoice is required for each visit with a report outlining the problem, solutions, and costs (e.g. parts, etc.) and shall be given to the TYAD POC. Invoicing is also required for each preventive maintainance visit (two per year). Invoicing shall be submitted in WAWF as outlined in FAR 252.232-7006, Wide Area WorkFlow Payment Instructions.

l) It is understood that the listed equipment at the starting date of the contract is in good operating condition and also that the service to be provided does not cover repairs required because of accident, fire, water, abuse, misuse, or conditions resulting from an Act of God; nor does it cover major overhauls, changes in setup, burned out motors or converters. Contractor has the right to inspect each machine before acceptance of the contract.

m) Technicians will report to the Depot Monday through Thursday between the hours of 0700 and 1600.

4. SPECIFICATIONS

Reference manufacturer’s user, repair, parts manuals as appropriate for the specifications for each storage unit referenced.

5. POC

POC is Darren Ruby, 570-615-6639

6. Special Requirements.

6.1 AT OPSEC requirements

14.0 TYAD SECURITY REQUIREMENTS

All TYAD contracts and other acquisition-related documents must ensure privacy and security controls follow the information, and that contractors and service providers protect Privacy Act information in the same way the organization adhering to the Federal Acquisition Regulations (FAR) Privacy Act provisions (Subparts 24.1 and 24.2) and include the specified contract clauses (Parts 52.224-1 and 52.224-2), as appropriate, to ensure that personal information is protected as mandated.

In addition to the changes authorized by the clause of this contract; should Force Protection Condition (FPCON) at the installation change, the Government may require changes in contractor security matters and/or processes.

FPCON impact on work levels. (Please annotate with an X which may apply):

_____ During FPCONs Charlie and Delta, [XXX] services are discontinued. [XXX] services will resume when the FPCON level is reduced to level Bravo or lower.

_____This contract and its employees are considered mission essential. Therefore, all contractor employees are required to report for duty and remain on duty during declared emergencies and/or elevated FPCON levels unless otherwise directed by the contacting officer via the appropriate COR.

Contingency Operations Plan The Contractor shall prepare and submit a Contingency Operations Plan to the Government. The Contingency Operations Plan shall document Contractor plans and procedures to maintain support during an emergency. The Contingency Operations Plan shall include the following:

A description of the Contractor’s emergency management procedures and policy A description of how the Contractor will account for their employees during an emergency Planned temporary work locations or alternate facilities How the Contractor will communicate with Government during emergencies A list of primary and alternate Contractor POCs, each with primary and alternate telephone numbers Procedures for protecting Government Furnished Equipment (GFE)/Government furnished property (if any) Procedures for safeguarding sensitive and/or classified Government information (if applicable)

Unscheduled gate closures by the Security Police may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

The contractor’s employees shall become familiar with and obey the regulations of the installation, including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification at all times. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance.

Antiterrorism (AT) Level I Training. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level I awareness training prior to contract report date. This training is required for any additional or new contractor employees, who start after that period. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR/POC within 10 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: , https://www.jcs.mil/JKO/ for their training. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record, or contractor equivalent. As applicable, contractor employees must complete annual AT awareness training as it pertains the length of the contract.

iWATCH Army Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH Army Program. This will consist of utilizing the tools and media products on the informational iWATCH

Army website to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR/POC. The iWATCH training is available at the following website:

https://www.youtube.com/watch?v+vlzYhQp7fPw select Family Programs and Services, in the drop down boxes select: Go To, iWATCH Army –“See Something, Say Something”. The contractor shall notify the COR/POC within 10 calendar days of review of the information on the website for any new employees or subcontractor personnel to assure the ELTY form 583 or contractor equivalent is properly documented. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record or contractor equivalent.

Access and General Protection/Security Policy and Procedures. Contractor and all associated sub-contractors’ employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by TYAD Law Enforcement. Contractor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA, and/or local policy.

Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by the government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

A background check and approval from Tobyhanna Army Depot (TYAD) Law Enforcement is required for all contractor and subcontractor personnel prior to on-site access at TYAD. All persons seeking entrance to TYAD shall submit to and comply with all security standards and requirements in force at the time such persons are seeking entry. All contractors, regardless of resident status or citizenship, will be subject to vehicle search and intense in-processing by TYAD security personnel prior to being granted access to TYAD. This security screening process may be time consuming, and access may be delayed or denied. The contractor shall ensure ELTY Form 648-C is completed for all contractor and subcontractor personnel requiring depot access to include warranty services. The TYAD point of contact (POC) will provide ELTY Form 648-C, “Request Access to Tobyhanna Army Depot” to the contractor/vendor at least ten days prior to the expected visit date for completion. The contractor/vendor shall return the completed ELTY Form 648-C to the TYAD POC in a timely manner so the same may be submitted to Security for processing no later than seven days prior to the visit. All the required fields on the form shall be completed accurately by the contractor/vendor for timely processing. This requirement is inclusive of on-site supervisory or managerial personnel and sub-contractor personnel that the Contractor anticipates will be performing work or visiting on-site. This security screening does not relieve the contractor of any responsibilities to conduct thorough pre-employment background checks and drug screening. Contractor workers will not be granted access to the work site until security screening is completed and access is approved. Any contractor personnel on-site who fail screening will not be permitted further access to TYAD. See “Access and General Protection/Security Policy and Procedures”.

Submit the completed ELTY Forms 648-C form(s) to the COR or POC. Ensure contracts include the provisions that check for the possibility of and prevent undocumented workers for inclusion in contracted work related to Army missions.

The company will ensure that its employees entering Army-controlled installations or facilities have obtained access badges and passes in accordance with facility regulations and that these badges and passes are obtained in advance so as not to delay the accomplishment of contracted services.

Common Access Card (CAC) and Information Systems/Network Access by Contractor Workers. [If applicable.] Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

For contractors that do not require CAC but require access to a DoD facility or installation: Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/AR 190-13); applicable installation, facility and area commander installation and facility access and local security policies and procedures (provided by Government representative); or, at OCONUS locations, in accordance with status-of-forces agreements and other theater regulations.

Collection of Badges: The Contractor shall account for all forms of Government-provided identification issued to the Contractor employees in connection with performance under this contract. The Contractor shall return such identification to the issuing agency at the earliest of any of the following, unless otherwise determined by the Government:

(1) When no longer needed for contract performance.

(2) Upon completion of the Contractor employee’s employment.

(3) Upon contract completion or termination.

The Contracting Officer may delay final payment under a contract if the Contractor fails to comply with these requirements. The Contractor shall insert the substance of this clause, including this paragraph, in all subcontracts when the subcontractor’s employees are required to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system. It shall be the responsibility of the prime Contractor to return such identification to the issuing agency in accordance with the terms set forth in of this section, unless otherwise approved in writing by the Contracting Officer. The company will return all issued U.S.

Government Common Access Cards, installation badges, and/or access passes to the COR when the contract is completed or when a contractor employee no longer requires access to the installation or facility. Contractor personnel will obtain a vehicle pass for access to the military installation and Common Access Cards (CAC) for computer access, if applicable.

Security and privacy requirements for all Department of Defense-Tobyhanna (TYAD) information technology (IT) procurements.

Applicability: The requirements established in this document apply to all employees, contractors, and users authorized to participate in the TYAD IT procurement process. Further, the requirements established herein apply as the entire contract or order (hereafter referred to as a “contract”), or any portion thereof, includes either or both of the following:

a. Access (Physical or Logical) to Government Information: Physical and Logical Access refers to when contractor personnel (and/or any subcontractor) are expected to have (1) routine physical access to an TYAD-controlled facility; (2) logical access to an TYAD-controlled information system; (3) access to government information, whether in an TYAD-controlled information system or in hard copy; or (4) any combination of circumstances (1) through (3) as per OMB M-05-24, Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors.

b. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) employee will operate a federal system and information technology containing data that supports the TYAD mission. In addition to the Federal Acquisition Regulation (FAR) Subpart 2.1 definition of “information technology” (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources.

Requirements: Safeguarding Information and Information Systems In accordance with the Federal Information Processing Standards Publication (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems, the Contractor (and/or any subcontractor) shall:

a. Protect Government information and information systems in order to ensure:

Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information.

Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity.

Availability, which means ensuring timely and reliable access to and use of information.

b. Provide security for any Contractor systems, and information contained therein, connected to a TYAD network, or operated by the Contractor on behalf of TYAD regardless of location. In addition, if new or unanticipated threats or hazards are discovered by either the agency or contractor, or if existing safeguards have ceased to function, the discoverer shall immediately, within sixty (60) minutes or less, bring the situation to the attention of the other party.

c. Adopt and implement policies, procedures, controls, and standards that are in effect at the time of contract solicitation and required by the TYAD Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain the TYAD Information Security Program security requirements based on the National Institute of Standards and Technology (NIST) “Framework for Improving Critical Infrastructure Cybersecurity.” The framework contains the five (5) core functions to “Identify,” “Protect,” “Detect,” “Respond (to),” and “Recover (from)” any cybersecurity event.

d. Comply with the Privacy Act requirements and with the Federal Information Security Modernization Act (FISMA) and with the OMB memo M-17-12, Preparing for and Responding to a Breach of Personally Identifiable Information, Contractor Employee Personnel Security Screenings documents, and FAR clauses as applicable and incorporated into this solicitation/contract. Personally Identifiable Information is defined as below.

Per Office of Management and Budget (OMB) Circular A-130, Personally Identifiable Information (PII) is “information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual.” Examples of PII include, but are Security and Privacy Requirements for Information Technology Procurements not limited to the following: social security number, date and place of birth, mother’s maiden name, biometric records, etc.

Per TYAD, sensitive PII is PII that if released improperly could result in harm, embarrassment, inconvenience, or unfairness to the individual whose name or identity is linked to the information. Context must be accounted for in order to determine whether PII is sensitive. Some PII is always sensitive, and some is only sensitive when it is used in a particular context. For example, a list of people subscribing to a government newsletter is generally not sensitive PII; a list of people receiving treatment for substance abuse would always be considered sensitive PII.

The list below is not exhaustive. Context must be accounted for in order to determine whether PII is sensitive. The following types of information are always considered sensitive:

Social Security Numbers (including using just the last 4 digits of the SSN) Date of birth Mother’s maiden name Biometric identifiers (e.g., fingerprint, iris scan, voice print) Personal financial information, credit card and purchase card account numbers Citizenship and immigration status Criminal history Computer access passwords and security questions Medical records

a. Mandatory Training for All Contractor Staff - All contractor (and/or any subcontractor) employees assigned to work on this contract shall complete the applicable TYAD Cybersecurity and Privacy Awareness training (provided upon contract award) before performing any work under this contract (this training is available to new contractors, even if they do not have a PIV card).

b. Thereafter, the employees shall complete the TYAD Cybersecurity and Privacy Awareness training at least annually, during the life of this contract. All provided training shall be compliant with TYAD training policies.

Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government information system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services and must successfully complete the DOD Information Assurance (IA) Awareness prior to access to the information system and then annually thereafter.

c. Training Records - The contractor (and/or any subcontractor) shall maintain training records for all its employees working under this contract in accordance with TYAD policy. A copy of the training records shall be provided to the COR within 30 days after contract award and annually thereafter, or upon request.

Information assurance (IA)/information technology (IT) training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working in IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

Information assurance (IA)/information technology (IT) certification. Per DoD 8570.01-M. DFARS

252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

Acceptable Use Policy: Users who require TYAD Network access are required annually to digitally sign an Acceptable Use Policy. (AUP) The Acceptable Use Policy is intended to outline expected behavior in regard to the use of Government information technology (IT) resources and to delineate between authorized and unauthorized operating practices. The Acceptable Use Policy also provides an overview of IT system security policies mandated by TYAD. All Government IT resources, including but not limited to, hardware, software, storage media, and computer and network accounts, provided by TYAD are the property of TYAD. They are to be used for business purposes in serving the interests of the Government and TYAD customers in the course of normal operations. Use of Government IT resources for purposes other than those identified within this policy are strictly prohibited and could negate the security of TYAD IT systems. Effective security is a team effort involving the participation and support of everyone who deals with information and/or information systems. It is the responsibility of everyone to know these guidelines, and to conduct their activities accordingly.

The policy represents the commitment of TYAD to ensure that system and information integrity policy is appropriately defined and implemented, in order to protect TYAD systems from intentional or unintentional acts that may negatively impact system security. The policy applies to the use of information, electronic and computing devices, and network resources to conduct TYAD business. All TYAD employees, contractors, and vendors are responsible for exercising good judgment regarding appropriate use of information, electronic devices, and network resources in accordance with TYAD policies and standards, and local laws and regulation.

This policy applies to employees, contractors, and vendors. This policy applies to all equipment that is owned or leased by TYAD. This policy covers TYAD entire operational environment, including telework locations/sites.

Employees do not have a right, nor should they have any reasonable expectation, of privacy while using any Government IT resources at any time, including accessing the Internet or using e-mail. To the extent that employees wish that their private activities remain private, they should avoid using Government IT resources such as their TYAD-issued computer, Internet access, or e-mail for such activities. By using Government IT resources, employees give their consent to disclosing the contents of any files or information maintained using this equipment.

Security Clearances. [If applicable.] Performance of work will require access to classified information or equipment IAW the DD Form 254, Contract Security Classification Specification, provided as an attachment.

Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22- M); (2) any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

If, after the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

The Contractor agrees to insert terms that conform substantially to the language of this clause but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil.

Threat Awareness and Reporting Program (TARP). [If applicable.] For all contractors with security clearances, per AR 381-12, TARP contractor employees must receive initial and annual TARP training by a CI Agent or other trainer as specified in 2-4b.

Contracts that Require an OPSEC Standing Operating Procedure/Plan. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training. The training is available at the following website:

http://cdsetrain.dtic.mil/opsec/index.htm The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR/POC within 10 calendar days after completion of training. Completion of contractor employee training will be documented on ELTY form 583, TYAD On-Post Training Record or contractor equivalent.

a. Contractor personnel shall not discuss government operations in public or over unprotected or unencrypted communications. Official Business, controlled unclassified information may only be transmitted as directed in the

SOW/PWS.

b. Contractor personnel shall not discuss government operations in public or over unprotected or unencrypted communications. Official Business, controlled unclassified information may only be transmitted as directed in the

SOW/PWS.

c. The Contractor shall not post to company websites, publications, newsletters, or other media any images, data or information that reveal sensitive government operations, personnel, equipment, and/or classified or controlled unclassified information. When in doubt, company press releases related to this contract should be coordinated through the Contracting Officer Representative (COR) or Technical Point of Contact, as applicable.

d. Because observation of events, operations, physical changes, etc. may reveal National Security information, specific restrictions are needed to preclude unintentional release of this information to unauthorized parties.

(Unauthorized disclosure and transfer of National Security Information is punishable under 18 USC § 793.)

Therefore, contractor personnel shall not disclose to unauthorized third parties, post to unofficial sites (including Social Networking sites) any images, data or information, or observed events that reveal sensitive government operations, personnel, equipment, including, but not limited to:

e. Tactics, techniques and procedures, production or work schedules, any visible or concealed modifications, upgrades, additions to vessels, aircraft, or weapons or equipment; increases, change, or decreases in work/deployment frequency or government personnel, vehicle, vessel or aircraft movements; specialized equipment orders, deliveries, shipments, etc., Unauthorized disclosures and attempts to solicit this type of information by unauthorized third parties or others not affiliated with this contract shall be reported to the installation Security Office, contract point of contact, and your company Facility Security Officer and/or the Defense Security Service.

Non-Disclosure requirements remain in effect during the duration of this contract and indefinitely thereafter.

f. Government issued badges, identification shall be removed and/or concealed from plain sight when off station and shall not be left in vehicles or unprotected. Badges and passes may not be duplicated or copied or loaned to others. Lost or stolen identification badges, vehicle passes etc. will be immediately reported to the installation Security Office.

g. Practice OPSEC and implement countermeasures to protect CI and other sensitive unclassified information and execution of military operations performed or supported by the contractor in support of the mission. Protection of CI will include the adherence to and execution of countermeasures which the contractor initiates or as provided by TYAD, for CI on or related to the SOW/PWS.

h. It is strongly recommended the contractor mark and protect related internal production schedules, deliverables, inventories, and shortages and identified vulnerabilities related to production of government material.

Internal company markings e.g., Business Sensitive, etc., are appropriate for identifying the aforementioned as sensitive information. Specific Government-provided information, drawings etc., will be protected in accordance with guidance in applicable paragraphs of the SOW.

i. All government information must be destroyed at contract termination or returned to the government at the government’s discretion.

Information Security (INFOSEC) Contractor personnel must comply with local security requirements for entry and exit control for personnel and property at the Government leased facility or any Government facility where work is being performed.

Contractor employees will be required to comply with all Government security regulations and requirements. Initial and periodic security training and briefings will be required. Failure to comply with security requirements can cause for removal and the Contractor will not be permitted to provide service on this contract.

The Contractor shall not divulge any information about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the Government leased facility or any other Government facilities where work is being performed. Identification shall be worn and displayed as required.

COMSEC/IT Security. All communications with DOD organizations are subject to communications security (COMSEC) review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DOD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DOD organizations. Therefore, the contractor is advised that any time contractor place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DOD information. The contractor shall abide by all Government regulations concerning the authorized use of the Government's computer network, including the restriction against using the network to recruit Government personnel or advertise job openings.

Safeguarding Controlled Unclassified Information (CUI) CUI is defined as “information that laws,…