Attachment 1 NGT PWS.pdf

Next Generation Transponder (NGT) Requirements

Contents

1.0 Scope

1.1 NGT Acquisition Objectives

1.2 NGT Descriptions and Specifications

1.3 NGT Use

1.4 NGT Applications

1.5 World-Wide Geographic Support

1.6 Attachments and Exhibits

2.0 Applicable Documents, Definitions, and Acronyms

3.0 NGT Equipment Requirements

3.1 General

3.2 Item Unique Identification (IUID)

3.3 Defense Information Standards Registry

3.4 Operating Environments

3.5 Labels:

3.6 Spectrum Supportability Compliance

3.7 Rugged Environment

3.8 Original Equipment Manufacturer Engineering Changes

3.9 Power Requirements

3.10 Rechargeable Batteries

3.11 Battery Protection

3.12 Equipment Delivery Requirements

3.13 Expedited Delivery Requirements

4.0 Next Generation Transponders (NGT)

4.1 General

4.2 NGT Requirements

5.0 NGT Transponder Data

6.0 Security

6.1 Security Standard

6.2 DOD Cybersecurity Requirements

6.3 DOD Wireless Device Security Requirements

6.4 Army Wireless Device Security Requirements

6.5 Common Criteria Compliance Requirements

6.6 Security Assessment and Authorization Support

6.7 Security Maintenance Services

6.8 Government Evaluation

6.9 Product Solutions on Contract

7. NGT Technical Engineering Services (TES)

7.1 General

7.1.1 Proposal Request for TES

7.1.2 Incidental Materials

7.1.3 Travel

7.1.4 TES Trip Report

8.0 MANANGEMENT

8.1 NGT Program Management

8.2 User Guide

9.0 <Reserved>

10.0 Project Progress Reviews

10.1 Monthly Sales and Status Report

10.2 Enterprise Contractor Manpower Reporting Application (eCMRA)

11.0 Changes and Modifications

12.0 Correction of Safety Hazards or Equipment Malfunctions

13.0 Risk Management

14.0 Equipment and Service Report (ESR)

15.0 Help Desk (Customer Support)

15.1 Technical Assistance

15.2 Toll-Free Customer Support Help Desk

15.3 Website

16.0 Warranty

17.0 ANTI-TERRORISM / OPERATIONS SECURITY (AT/OPSEC) REQUIREMENTS

17.1. AT Level I Training

17.2. Access and General Protection/Security Policy and Procedures

17.3. AT Awareness Training

17.4. iWATCH Training

17.5. Army Training Certification Tracking System (ATCTS)

17.6 OPSEC Standing Operating Procedure/Plan

17.7 OPSEC Training

17.8 Cyber Awareness Challenge Training

17.9 Information Assurance (IA)/Information Technology (IT) Certification

17.10 Classified Information

17.11. Threat Awareness Reporting Program

1.0 Scope

The mission of Product Lead Automated Movement Identification Solutions (PL AMIS) is to provide contracts for procurement and technical expertise across the suite of Automatic Identification Technology (AIT) enabling technologies that support focused logistics, Total Asset Visibility (TAV), and the integration of global supply chains. The Next Generation Transponder (NGT) contract will provide cellular / satellite hardware, integration, implementation, software (if required), documentation, and Technical Engineering Services (TES) to authorized users worldwide. Required services may also include training and warranty services for authorized users worldwide. Hardware delivery and installation, as well as performance of associated training, warranty, and documentation services shall be required at Continental United States (CONUS) and Outside the Continental United States (OCONUS) Government sites.

Performance of TES shall be required at CONUS and OCONUS Government sites and the Contractor facility. Emerging technologies in the field of NGTs are required for this contract, which include, but are not limited to: mesh technology and cellular / satellite communication sensor technology solutions. Future requirements for cellular / satellite devices and services include Chain of Custody, which includes tracking, monitoring, and security in a single integrated solution, and satellite services within additional Major Commands (MACOMs).

1.1 NGT Acquisition Objectives

The objective of the NGT acquisition is to provide the latest commercially available satellite and cellular enabled transponders to support the logistics tracking, locating, and monitoring of commodities and assets. Cellular / satellite enabled technologies will provide standardization and interoperability among Government users of NGT components purchased under this contract.

1.2 NGT Descriptions and Specifications

1.2.1 This Description and Specification section sets forth the requirements for the NGT acquisition. The contract shall provide for commercial cellular / satellite communications hardware, training, TES, and warranty to provide a common, integrated structure for logistics tracking, locating, and monitoring of assets. For the purposes of this contract, NGT components are those commercially available items necessary for the tracking of tagged commodities and assets, data collection, data processing, and data storage and retrieval. The NGT contract will provide cellular / satellite communications hardware / communication that will be used in fixed and mobile applications.

1.2.2 The NGT requirements include microprocessor-based, cellular / satellite communication hardware, communication access, and TES, to include: cellular devices, satellite devices, and cellular / satellite (hybrid) devices. Expected services include, but are not limited to: Activation, de-activation, installation, de-installation, and relocation of NGT devices; TES, business process planning, implementation, and integration development services; warranty; and training.

1.2.3 The NGT equipment is required to meet the worldwide needs of the Department of Defense (DOD), the U. S. Coast Guard, the North Atlantic Treaty Organization (NATO), Coalition Partners, and other Federal Agencies in various CONUS and OCONUS locations.

Since DOD components may have shared NGT technology with Allied partners in joint operations, the NGT contract will be available for orders to meet Foreign Military Sales (FMS) requirements in order to provide interoperability for logistics support with Allies.

1.3 NGT Use

The Government intends to use NGT technology in applications that demand performance on a higher level than that available with bar code, Radio Frequency Identification (RFID), and other automated data storage and retrieval technologies. The NGT will be affixed to assets or other objects of interest to capture and transmit varying amounts of data, which are stored and processed.

1.4 NGT Applications

Some anticipated applications of NGT include, but are not limited to:

a. Tracking Government-owned commodities and assets;

b. Inventory and warehousing environments;

c. Large open-area storage facilities;

d. The military transportation community (e.g., seaports and air terminals) and petroleum distribution points (including fueling operations at airports, in-flight, and at sea);

e. The handling of perishables (e.g., medical supplies, foods, and other items sensitive to temperature changes);

f. The handling of hazardous, explosive, or otherwise regulated materials;

g. The control of military convoys; and

h. Health and intrusion monitoring (e.g., sensor technology: temperature, shock, humidity, light, and door alarms).

1.5 World-Wide Geographic Support

The Government requires NGT equipment that can be used globally. The Contractor shall provide NGT hardware, communication access/services, TES, and warranty to support the DOD operations in U.S. Northern Command (USNORTHCOM), U.S. Indo-Pacific Command (USINDOPACOM), U.S. Central Command (USCENTCOM), U.S. European Command (USEUCOM), U.S. Southern Command (USSOUTHCOM), and U.S. Africa Command

(USAFRICOM).

1.6 Attachments and Exhibits

The following is a list of Exhibits and Attachments associated with this PWS and incorporated into solicitation:

Attachment 1 – DD 254, Department of Defense Contract Security Classification Specifications Attachment 2 – Acronyms List Attachment 3 – NGT Numbering System Attachment 4 – Monthly Sales and Status Report Attachment 5 – Equipment and Service Report Attachment 6 – Contract Data Requirements List (CDRL) Details Attachment 7 – DOD Transponder Barcode Labeling Guidelines Attachment 8 – HERO Labeling Guidelines Attachment 9 – Sample ICD Data Format

2.0 Applicable Documents, Definitions, and Acronyms

The following are definitions of terms used in this PWS. All other definitions and meanings used shall be those which are commonly used in the NGT industry:

Equipment – The term “equipment,” as used throughout the PWS, refers to any combination of hardware, software, device drivers, utilities, libraries, and firmware.

Industrially Hardened Components – Components that can operate in a warehouse or manufacturing setting and survive the rough treatment and handling often found in shipping areas, loading docks, catwalks, ladders, or on the floor of a manufacturing facility.

Outside Official Hours of Operation – All hours not included in Official Hours of Operation, i.e., from 5:00 p.m. to 8:00 a.m. local time, Monday through Friday, and all-day during Saturday, Sunday and U.S. Federal and Host Nation holidays, based on the geographic location of the U.S.

Government site.

Workday – Monday through Friday, excluding U.S. Federal holidays.

Order – The term “order,” as used in this PWS, refers to a Delivery Order, Task Order, or Purchase Card Order used to buy products and/or services under the master agreement.

3.0 NGT Equipment Requirements

3.1 General

The Contractor shall provide all necessary NGT hardware, software, data communications, cables, connectors, peripherals, training, installation support services, TES, and documentation to operate and maintain the NGT Configurations, as stated in this PWS. Because of the diversity of applications, the Contractor shall provide the TES necessary to configure, install, interface, and integrate the appropriate hardware and software to satisfy specified applications. The Government requires Contractor support during Official Hours of Operations. NGT equipment shall operate in worldwide locations, and in the identified environments. The equipment shall conform to required industry, quality and safety standards, where applicable. The equipment shall be compatible with and support U.S. and Host Nation Country power and radio frequency requirements and shall operate effectively in geographic area in which the equipment is to be operated, as specified in the order. Program Management is required to support the Government’s efficient execution of this contract. Warranty services are required to ensure the operational availability of NGT equipment. TES may be required to help the Government incorporate NGT equipment into its applications.

3.2 Item Unique Identification (IUID)

DOD’s IUID policy is contained in DFARS 252.211-7003, Item Unique Identification and Valuation. No items require IUID within NGT.

3.3 Defense Information Standards Registry

The Defense Information Standards Registry (DISR) is the minimal set of rules governing the arrangement, interaction, and interdependence of the parts or elements that together form an information system. Its purpose is to ensure that DOD systems are interoperable, scalable, and portable. DISR standards are to be used within DOD as the “building codes” for all new systems. The standards are intended to facilitate interoperability and integration of systems within the DOD Information Network (DODIN). The NGT equipment specified in this contract is not considered by DOD to be a system. Rather, the NGT equipment is used to provide transportation and logistics data used within other DOD information systems. This specification may require the provision of small computer platforms and components that may be proprietary, or that have neither the capacity nor the scope to satisfy DISR requirements. For purposes of this contract, the DISR requirement is for NGT equipment to interface with supported systems, to include the Radio Frequency – In-Transit Visibility (RF-ITV) Tracking Portal. Current interface requirements will be specified within an Interface Control Document (ICD) to be provided after contract award and updated periodically over the life the contract (See Attachment #9).

3.4 Operating Environments

NGT equipment shall operate in diverse environments and under a full spectrum of climatic conditions. NGT equipment may be subjected to rough handling, shock, and vibration during transportation, setup, and dismantling. All NGT equipment shall be capable of being operated in industrial, hazardous, and ordnance environments; on board surface and subsurface naval vessels, aircraft, and tanks; in conditions that range from protected and controlled (office settings) to extremely harsh and severe environments; and in areas with high levels of electromagnetic noise and interference. NGT equipment is required for worldwide outdoor use, in every climate region, including but not limited to tropical, desert and arctic conditions. The Contractor shall certify that the provided components meet applicable Environmental Protection Act requirements.

3.4.1 Electromagnetic Environment. Commercial NGT equipment may be used in the vicinity of spectrum-dependent devices that receive low-level signals and/or transmit high-level signals (See MIL-STD-464A, Interface Standard for Systems Electromagnetic Environmental Effects, and MIL-STD-461F, Requirements for the Control of Electromagnetic Interference Characteristics of Subsystems and Equipment).

In order to certify the use of commercial NGT equipment in these environments, the Government may subject representative categories of equipment to radiated emission and susceptibility tests (See MIL-STD 461D, Requirements for the Control of Electromagnetic Interference Emissions and Susceptibility, and MIL-STD-462D, Measurement of Electromagnetic Interference Characteristics).

The Contractor shall support Government-testing efforts by providing technical data sheets and responding to the Contracting Officer’s Representative requests for additional data.

3.4.2 Ordnance Environment. NGT equipment may be used in the vicinity of ordnance susceptible to radiated energy. In order to determine that NGT equipment is safe to use in these ordnance environments, the Government will subject a single item from each NGT hardware contract line item number (CLIN) to stringent Hazards of Electromagnetic Radiation to Ordnance (HERO) environment testing (See MIL-STD 464A).

Each NGT item tested shall successfully complete HERO testing prior to being made available for ordering on the NGT contract, to include equipment added to the contract after contract award. The Contractor shall be responsible for providing any and all of its’ own contractor support required to successfully complete HERO testing for its equipment. Such support will be made at the direction of the Government Contracting Officer’s Representative (COR), and provided by the contractor at no additional cost to the Government. Contractors may be required to provide on-site support at the Government test facility (currently USN Dahlgren Laboratory) to support testing. The Government will bear the cost of the initial testing for each NGT hardware item offered on the contract, excluding the cost of test support provided by the Contractor. All subsequent testing costs due to failure of an item to meet the HERO requirements or product substitution shall be the sole responsibility of the Contractor.

3.5 Labels:

3.5.1 Hero Label. All NGT devices delivered to the Government under the NGT contract shall be furnished with a warning label that clearly indicates the safe separation distance that shall be maintained between ordnance and the irradiating source (See Attachment #8).

3.5.2 Transponder ID Label. All NGT devices shall be labeled with the type of transponder: C – cellular, S – satellite, and H – hybrid, and with a human readable barcode using the 14 numeric characters transponder numbering system, as defined by PL AMIS, for cellular, satellite, and cell/satellite hybrid transponders. Bar code labels shall follow the same guidelines as Attachment #7.

3.6 Spectrum Supportability Compliance

The DOD will obtain spectrum supportability guidance and approvals prior to procuring equipment that is designed to either transmit or receive electromagnetic (radio frequency) energy. Spectrum supportability includes spectrum certification, frequency assignments, and host nation coordination where employment of the system or equipment is planned. Radio frequency dependent components of the proposed system shall comply with applicable DOD, national, and international spectrum management policies and regulations, to include spectrum certification in accordance with DOD Instruction 4650.01, Policy and Procedures for Management and Use of the Electromagnetic Spectrum, and DOD Directive 5000.01, The Defense Acquisition System. Frequency allocation shall be documented with a DD Form 1494 (APPLICATION FOR EQUIPMENT FREQUENCY ALLOCATION) and/or a "Note to Holder," as appropriate (See CDRL A013).

The Contractor shall provide the technical data required to complete the spectrum supportability process, including information concerning specifications and testing of the transmitter, receiver, and antenna characteristics necessary for host nation coordination. The Contractor shall provide the technical support necessary to complete the DD Form 1494 no later than 30 days after Notice to Proceed or approval of a Contract Change Proposal (CCP) to add or replace applicable items on the contract. All Contractor-provided spectrum supportability compliance support shall be provided at no additional cost to the Government.

3.7 Rugged Environment

NGT equipment will be used by the Government in “rugged environments” (i.e., industrial and field settings under temperate, arctic, maritime, desert, and tropical conditions). The words “rugged” or “ruggedized,” when used in this PWS, means that the Government requires NGT equipment that is industrially hardened, designed, built, and tested to ensure reliable and continuous performance in all rugged and austere environments. In this environment, NGT equipment may be subjected to rough handling, continuous operational use, vibration, dropping onto hard surfaces, and shock caused by transportation over rough terrain. The equipment shall remain operational following a drop onto concrete from a height of six feet.

3.8 Original Equipment Manufacturer Engineering Changes

All Original Equipment Manufacturer (OEM)-sponsored Engineering Changes (ECs) adopted prior to the date of contract award shall be incorporated into the hardware, software, and firmware delivered under this contract.

3.9 Power Requirements

3.9.1 When ordered, Alternating Current (AC) adapters shall be compatible with the local country power grid for the geographic area in which the equipment is to be operated. The equipment order will specify the geography and/or location(s) in which equipment will be used.

3.9.2 The Contractor shall provide all necessary and appropriate AC plug adapters (when required for AC operation) for NGT equipment that is delivered. AC plug adapters are exempt from Underwriters Laboratories (UL) or equivalent certification.

3.10 Rechargeable Batteries

3.10.1 Rechargeable batteries shall not require discharge in order to attain full functionality and total rated battery capacity.

3.10.2 The Government desires rechargeable batteries that can be recharged without removal from the NGT equipment.

3.10.3 The Government desires battery chargers capable of charging multiple battery sets concurrently.

3.10.4 The Government desires a visible indicator of battery charge status while in the

NGT.

3.11 Battery Protection

The Contractor shall provide a methodology to prevent premature battery depletion, while in shipment or in storage before initial use, for any device containing non-rechargeable batteries.

3.12 Equipment Delivery Requirements

The Contractor shall provide all necessary items required to make each deliverable hardware item fully operational. The Contractor shall deliver all hardware and software items to the destination specified in the order within 30 days after the date of the order.

3.13 Expedited Delivery Requirements

The Contractor shall provide Expedited Delivery for CONUS and OCONUS locations when specified in the equipment order.

3.14 Operating / Storage Temperatures

The Contractor shall provide NGTs with a minimum operational temperature range between -40 Celsius (C) and +85C, and a minimum storage temperature range between -50C and +125C.

4.0 Next Generation Transponders (NGT)

4.1 General

The Contractor shall provide the following NGT devices with a three (3) year warranty and one

(1) year of airtime upon the device’s activation, including, but not limited to, data, network access, commissioning, decommissioning, etc. The warranty requirement does not apply to batteries. Post activation, users may procure additional year(s) of airtime services, which will include all costs associated with the functionality of the NGT device.

4.1.1 Cellular. The Contractor shall provide a cellular NGT, utilizing the industry's globally recognized mobile phone standards, minimally GSM (Global System for Mobile Communication) coverage, such as LTE/4G, with fallback to alternative standards (e.g., 3G and 2G), as required to interoperate globally on the data provider's cellular networks.

4.1.2 Satellite. The Contractor shall provide a satellite NGT with no less than the coverage provided by the Iridium satellite constellation. Satellite constellation providers with greater world-wide coverage than the Iridium satellite constellation is desired.

4.1.3 Hybrid (Cellular / Satellite). The Contractor shall provide a cellular NGT, utilizing the Industry's globally recognized mobile phone standards, minimally GSM (Global System for Mobile Communication) coverage, such as LTE/4G, with a fallback capability to alternative standards (e.g., 3G and 2G), as required to interoperate globally on the data provider's cellular networks. The Contractor shall provide a satellite NGT with no less than the coverage provided by the Iridium satellite constellation. Satellite constellation providers with equal or greater world-wide coverage than the Iridium satellite constellation is desired.

4.2 NGT Requirements

The Contractor shall provide NGTs that tailor all devices to DOD’s Business Process, which allows for the activation and deactivation of devices throughout DOD without the use of hardware (special tools) or software. The Offeror’s products shall be capable of the following:

4.2.1 NGT Activation. All NGT devices shall be delivered deactivated from the Contractor, unless otherwise specified in the order. The end user shall be responsible for activating the NGT devices, at no cost to the Government, through the help desk or Contractor website.

The Contractor shall provide a method/process for the end user to activate (power and reporting to an ‘on’ status) an NGT device upon receipt, on first use, or on re-use, without the use of hardware (special tools) or software. Device activation, as defined here, is the process of registering the NGT device with the cellular and/or satellite network, associating that device with the user’s account, and sending a test message from the device to the defined endpoint so the end user can confirm activation is complete.

4.2.2 NGT De-activation. The Contractor shall provide a method/process for the end user to de-activate an NGT device, without the use of hardware (special tools) or software.

Device de-activation (power and reporting to an ‘off’ status), as defined here, is the process of un-registering the NGT device with the cellular and/or satellite network.

4.2.3 Reserved. Reserved.

4.2.4 NGT Implementation. Activation and de-activation of NGT devices shall be accomplished by the end user through, at the end user’s preference, either a phone call to the vendor’s help desk, or by accessing the vendor’s website and providing the vendor required authentication information for the end user’s account.

4.2.5 NGT Batteries. Batteries or battery packs shall be user-replaceable in the field in less than two minutes, and without special tools (i.e., non-standard industry tools, or tools that are uniquely designed for purposes of changing batteries or battery packs). Positive and negative terminals shall be clearly marked on the batteries and NGT devices, unless the shape of the battery prevents improper or reversed installation.

For solutions utilizing rechargeable batteries:

a) The Contractor shall provide rechargeable batteries as separately orderable components.

b) The Contractor shall provide battery chargers as separately orderable components.

c) Battery chargers shall be designed to charge a minimum of a single battery set.

d) Battery chargers shall be compatible with the power supply and power outlets (or connectors) for the geographic area in which the equipment is to be operated, as specified in the order.

4.2.6 NGT Reporting. All NGT devices shall report data every two (2) hours while the

NGT device is in motion, and every four (4) hours when the NGT device is at rest for a minimum of 120-days.

4.2.7 NGT Size. NGT devices shall not exceed 86 cubic inches.

4.2.8 NGT Color. All NGT devices shall be subdued and generally unobtrusive (e.g., black, grey, olive green, desert sand or coyote brown).

4.2.9 NGT Ingress Protection (IP) Rating. The Contractor shall provide products with an IP rating of 67.

4.2.10 NGT Mounting. All NGT devices shall be capable of being attached and detached. Attachment shall require no modifications to the asset to which the device is being attached, and the device shall be secure under all transport conditions. All NGT devices shall provide mounting holes (minimum of two diagonal holes for secure attachment), which can be used to affix the NGT to an asset by virtue of rivets, screws, or tie-wraps. In the event that a mounting bracket is required, the mounting bracket shall be capable of being attached and detached (minimum of two holes for secure attachment). Attachment of the mounting bracket shall require no modifications to the asset to which the bracket is being attached, and the mounting bracket shall securely hold a NGT device under all transport conditions.

4.3 NGT Hardware

The Government desires Offerors to provide NGT hardware with the following attributes:

4.3.1 The Government desires that, if replaceable batteries are utilized to power the NGT, the batteries be of the same capacity (A, AA, etc.) for all three NGT devices.

4.3.2 The Government desires that, if AC adapters are utilized to charge the NGT with non-replaceable batteries, the same AC adapters be utilized for all three NGT devices.

4.3.3 The Government desires that the satellite / hybrid NGT utilize the Defense Information Systems Agency (DISA) Enhanced Mobile Satellite Services (EMSS) Gateway to minimize costs to the Government.

4.3.4 The Government desires NGT devices that are limited in depth to accommodate the depth of the corrugated ribs on the sides of a shipping containers to prevent the device from being knocked off during shipment or knuckling. For ISO shipping container applications, the Government desires the device to fit outside the container in between the ribs (when attached to the side of a container, the Government desires that the horizontal and vertical dimensions of the NGT device be no more than 2.5 inches, and the depth be no more than 1.5 inches, including mounting bracket, if any).

5.0 NGT Transponder Data

The Contractor shall transmit data to a server, as per PL AMIS direction, with PL AMIS stipulating the data and message format after contract award. The Offeror shall be required to execute an Interface Control Document (ICD) with PL AMIS, at no cost to the Government. The ICD will specify the interface requirements the participating systems must meet. The ICD will describe the concept of operations for the interface; define the data, message structure, and protocols that govern the interchange of data; and identify the communication paths along which PL AMIS expects data to flow.

All NGT devices shall have the following minimum formatted data elements:

Globally Unique Tag Identifier: example 21234567890123 (14 numeric character) (See Attachment #3) Event Date Time: 2018-04-25T18:30:21Z Position Coordinates:

Latitude: 49.46470 Longitude: 17.69983

Battery Capacity Percent Remaining: example 45% Transmission type: C (cellular) or S (satellite)

6.0 Security

6.1 Security Standard

The Contractor shall comply with the following standards and Government guidelines, to include all new versions, amendments, and modifications made to the listed documents and standards, as applicable.

a) Office of Management and Budget (OMB) Circular No. A-130, Revised (Transmittal Memorandum No. 4), Management of Federal Information Resources – Appendix III, Security of Federal Automated Information Resources, 28 November 2000.

b) National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) Publication140-3, Security Requirements for Cryptographic Modules, March 22, 2019.

c) NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, April 2013 (Updated January 22, 2015).

d) Department of Defense Directive (DODD) 8100.02, Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense (DOD) Global Information Grid (GIG), April 14, 2004 (Certified Current as of April 23, 2007).

e) Department of Defense Instruction (DODI) 8420.01, Commercial Wireless Local-Area Network (WLAN) Devices, Systems, and Technologies, November 3, 2017.

f) DODI 8420.02, DOD Satellite Communications (SATCOM), September 15, 2016.

g) DODI 8500.01, Cybersecurity, March 14, 2014 (Incorporating Change 1, Effective

October 7, 2019).

h) DODI 8510.01, Risk Management Framework (RMF) for DOD Information Technology

(IT), March 12, 2014 (Incorporating Change 2, July 28, 2017).

i) Assistant Secretary of Defense Memorandum, Use of Commercial Wireless Devices, Services, and Technologies In The Department of Defense (DoD) Global Information Grid (GIG), 14 April 2004.

j) Army Regulation (AR) 25-2, Army Cybersecurity, 4 April 2019.

k) Best Business Practice 09-EC-M-0010, Wireless Security Standards, Version 4.0, 26 June

2013.

After contract award, the Contractor may propose alternative or additional standards, at no additional cost to the Government, that meet or exceed the provisions of the listed standards.

6.2 DOD Cybersecurity Requirements

All devices and/or systems provided by the Contractor that receive, process, store, display, or transmit information shall comply with the applicable cybersecurity requirements specified in DODI 8500.01, Cybersecurity. Examples of systems that must meet these cybersecurity requirements include, but are not limited to: stand-alone information systems; networked computers and servers; mobile computing devices, such as laptops, handhelds, and personal digital assistants operating in either wired or wireless mode; and other information technologies that may be developed and/or proposed by the Contractor.

6.3 DOD Wireless Device Security Requirements

NGT implementations that utilize Institute of Electrical and Electronics Engineers (IEEE) Standard 802.11 WLAN products to store, process, or transmit unclassified information shall comply with the requirements specified in DODI 8420.01, Commercial Wireless Local-Area Network (WLAN) Devices, Systems, and Technologies.

6.4 Army Wireless Device Security Requirements

NGT implementations that utilize IEEE Standard 802.11 WLAN products or other wireless technologies to store, process, or transmit unclassified information shall comply with the applicable requirements specified in Army Regulation (AR) 25-2, Cybersecurity, and Army Best Business Practice 09-EC-M-0010, Wireless Security Standards.

6.5 Common Criteria Compliance Requirements

Common Criteria compliance is determined and verified by favorable product testing against a Common Criteria Protection Profile (CCPP). CCPPs are developed under sponsorship of the National Security Agency (NSA). Common Criteria tests are conducted by a Common Criteria Test Laboratory (CCTL) that has been approved and accredited by the National Information Assurance Partnership (NIAP). NIAP is a partnership agreement between NSA and the National Institute of Standards and Technology (NIST). Upon approval and adoption of a CCPP for NGT technology for which no CCPP exists, the Contractor shall submit product(s) with documentation to a designated CCTL for Common Criteria testing no later than six (6) months after the adoption of a relevant CCPP. Subsequently, only products tested and compliant at the Medium Robustness level (as defined in the CCPP standard) shall be provided under this contract. Information regarding Common Criteria Compliance can be obtained from the following website:

http://www.commoncriteriaportal.org/.

6.6 Security Assessment and Authorization Support

The Contractor shall support all Government efforts to obtain Assessment and Authorization (A&A) for the products provided under this contract in accordance with the guidance contained in the DODI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT). In support of the Government’s A&A activities, the Contractor shall provide copies, in vendor format, of component design specifications, component user manuals, and results of any security tests already completed. For testing in support of A&A, the Contractor shall provide the Government with access to Contractor personnel involved with the design, engineering, operations, and security attributes of the products.

6.7 Security Maintenance Services

The Contractor shall ensure that the devices and/or systems provided under this contract comply with all new versions, amendments, and modifications made to the security documents and standards cited in this PWS, when applicable and commercially available. To ensure continued compliance, the Contractor shall perform the necessary configuration changes, as approved by the Government. These configuration changes may include, but are not limited to, performing system configuration changes; installing patches and bug fixes; and conducting hardware/software upgrades, updates, and replacements.

6.8 Government Evaluation

The Contractor shall support Government compliance verification evaluation and security certification and accreditation of the products provided under this contract. The Government will coordinate the scheduling of any evaluation with the Contractor. The Contractor shall cooperate with Government personnel and Government representatives who plan, conduct, and report any Government testing. Support of Government testing, when requested, includes providing the Government, or its agents, access to Contractor facilities, documentation, and/or personnel used by the Contractor to produce the products provided under this contract. The Contractor shall assist in resolving any problems resulting from the Government verification evaluations and the security certification and accreditation process, to include problem reports, technical investigations, and any testing performed.

http://www.commoncriteriaportal.org/

6.9 Product Solutions on Contract

During the period of contract performance, any new products proposed, based on end-of-life issues or contract change proposal insertions, shall conform to the requirements within the PWS.

7. NGT Technical Engineering Services (TES)

7.1 General

The Contractor shall provide TES at locations designated by the Government, as specified in each order. TES may include services required for NGT turn-key implementation, including, but not limited to: site analysis, installation, de-installation, commissioning, decommissioning, re-commissioning, problem-solving, user unique training, communications, interfaces to other Government systems, and equipment and systems engineering services, to include NGT integration systems. Any mounting methodologies, cables, or adapters not listed in this contract, or other items and materials required for functionality / installation of Contractor-provided NGT components, may be ordered through the order issued by the ordering agency in accordance with the provision entitled “Incidental Materials.” The Contractor shall identify any technical dependencies and inform the government of any requirements, to include defining their interface with any other Government systems. The Government contracting office identified on the order will have the right to reject or require correction of any deficiencies found in the system, subsystem, or supply items that do not meet the requirements of the TES. Government rights under DFARS 227.7203-5(a) apply to all Contractor-developed software, which is delivered for turnkey solutions via TES.

7.1.1 Proposal Request for TES

Upon receipt of a request for proposal (RFP) for TES, which includes a description of the tasks, the Contractor shall submit a price proposal or a ‘No-bid’ response to by the ordering Contracting Officer as soon as possible, but not more than fifteen workdays after receipt of the request, unless agreed. The Contractor’s proposal shall contain sufficient detail to enable the Government to determine the acceptability of the proposal, and shall include, at a minimum:

a. A brief description of the technical approach, which demonstrates the Contractor’s understanding of the task(s);

b. Proposed timeline schedule;

c. Proposed labor categories from the master SLIN listing, and the number of hours for each category;

d. Proposed incidental materials, including a price and description of each item;

e. Proposed price for travel, with a breakout of airfare(s), per diem, rental car(s), and any other travel-related expenses;

f. For turnkey proposals only:

i. Proposed NGT hardware and software CLINs/SLINs required for the proposed solution; and

ii. Any required Government-furnished hardware and software and the associated logistical requirements (e.g., locations and dates for the Government to furnish the items).

The Government will negotiate a total firm-fixed price (FFP) for the effort, excluding travel and incidental materials. This FFP will include all labor and per diem required to complete the effort and will be included in the order according the labor categories listed in the contract.

The using activity’s representative, as stated on each order, shall perform inspection and acceptance of all items contained on the order.

The TES period of performance cannot extend beyond 12 months from contract expiration.

7.1.2 Incidental Materials

Incidental materials shall only include those items or materials necessary to complete the installation service ordered in accordance with PWS paragraph 7.1.1 “Proposal Request for TES.” The price for the items/materials shall be negotiated on a FFP basis for each order, if required. The total negotiated price for incidental materials for each order shall not exceed $100,000.

7.1.3 Travel

Prices for Contractor personnel travel to perform TES shall be in accordance with the requirements set forth in orders for TES.

7.1.4 TES Trip Report

The Contractor shall submit a TES Trip Report to the order Point of Contact (POC) or order COR, if applicable, no later than five (5) workdays after the completion of each trip made for TES. The trip report shall be in the Contractor’s format, and shall contain, at a minimum:

a. Report Date;

b. Customer Name, address, POC, and telephone number;

c. Project Name;

d. Time arrived and time departed;

e. Any recommended or provided Incidental Material description;

f. Contractor summary of work completed;

g. Contractor POC name and signature; and

h. Any additional or specific requirement, as stated in the order.

8.0 MANANGEMENT

The requirements found in this Section shall not be separately priced.

8.1 NGT Program Management

The Contractor shall provide the following NGT Program Management activities and services:

a. Provide a response within two (2) workday response to program issues and problems associated with the execution of the contract, as identified by PL AMIS;

b. Provide a response within one (1) workday to questions or problems associated with the execution of the NGT Data Services (see Section 5.0 of this PWS);

c. Coordinate shipments and deliveries;

d. Provide a Monthly Sales and Status Report, as per CDRL A001;

e. Maintain accurate records, to include warranty and airtime availability;

f. Provide access for NGT users to an identified database location for this contract;

g. Conduct Project Progress Reviews (PPR), as per CDRL A003;

h. Provide Equipment and Service Reports (ESR), as per CDRL A008; and

i. For Army requirements, report Enterprise Contractor Manpower Reporting Application

(eCMRA) information, as per CDRL A012.

8.1.1 Points of Contact. The Contractor shall provide a list of Contractor POCs to the COR no later than 10 workdays after the effective date of the contract. The list shall include names, telephone numbers, facsimile numbers, e-mail addresses, and areas of responsibility for the NGT contract. The Contractor shall notify the COR of the new POC’s information no later than five (5) workdays after the replacement of a POC.

8.1.2 NGT Contract Program Manager:

a. The Contractor shall identify the Program Manager for the NGT contract to the

COR. The Program Manager, or a designee authorized to make binding decision for the Contractor, shall be available with 24 hours’ notice to meet with the Government at 1420 Jackson Loop, Ft. Belvoir Virginia 22060-5526, at no additional cost to the Government. The NGT Contract Program Manager shall address and resolve NGT programmatic issues, facilitate information exchange with the Government, and facilitate management coordination.

b. The Contractor’s NGT Program Manager shall manage all orders, and shall be the Contractor’s authorized POC for PL AMIS, the COR, and the POC for each order issued under the contract. The Contractor’s NGT Program Manager shall be responsible for formulating and enforcing work standards, assigning schedules, reviewing work discrepancies, and communicating policies, purposes, and goals of the organization to the assigned Contractor personnel for performance of this contract.

8.2 User Guide

8.2.1 Configuration Tools. The Contractor shall develop and provide a User Guide (UG) to the Government, to assist Government personnel in configuring the NGT. The Contractor shall provide the UG no later than 90 calendar days after the contract’s effective date and shall make the UG available to users on the Contractor’s website, as per CDRL A002.

8.2.2 User Ordering Procedures. The UG shall contain ordering procedures that provide the user with all the necessary information required to order NGT products and TES, to include Contractor POCs, telephone numbers, Help Desk access, and addresses.

8.2.3 CLIN / SLIN Price List. The UG shall contain the contract’s Contract Line Item Number/Sub-Contract Line Item Number (CLIN/SLIN) Price List. The CLIN/SLIN Price List will be updated within five (5) days of an addition or deletion of a CLIN/SLIN on contract.

9.0 <Reserved>

10.0 Project Progress Reviews

The Contractor shall conduct Project Progress Reviews (PPRs) for Government personnel at a mutually agreeable facility. PL AMIS will schedule the PPR and will provide notice to the Contractor of the date, time, and location. Contractor representatives shall attend the scheduled PPR in person, unless this requirement is waived by the Government. Any requests to change the scheduled date by the Contractor shall be addressed directly to the Contracting Officer and the COR. The Government will determine if the request is acceptable or not. It is anticipated that the first PPR will occur no later than 90 calendar days after the contract effective date, and that PPRs shall subsequently occur on a quarterly basis for the life of the contract. During each PPR, the Contractor shall present material that addresses the following:

a. Status of current NGT hardware technological substitutions, additions, and future product enhancements;

b. Status of configuration and risk management activities;

c. Status of orders, including, but not limited to, received and processed dates (listed by ordering agency), scheduled delivery date, and shipped date;

d. Actions under warranty;

e. Significant trends (e.g., quantities order by CLIN and component reliability safety issues, problems, and recommended solutions);

f. Minutes from the previous PPR;

g. Activities determined to be of importance to the Government, such as unanticipated problems, and high visibility issues identified by the Government;

h. Status of significant program events;

i. Customer feedback;

j. Agencies and organizations contacted and initiatives with each; and

k. Reasons for delinquent orders.

The Contractor shall include a current organizational chart in each review that includes the names and telephone numbers of all key personnel proposed and included with the NGT contract, as well as any key personnel who may be proposed and used in securing subsequent Task Orders. The Contractor shall notify the Task Order Contracting Officer Representative (TCOR) of all changes to key personnel at the time changes are first known and shall explain how the Contractor intends to minimize the impact of such changes.

The Contractor shall prepare and submit an agenda and briefing charts for all PPRs to the COR at least five (5) workdays before a scheduled PPR, as per CDRL A004. The Contractor shall prepare and coordinate minutes of the PPRs with PL AMIS no later than five (5) workdays after the PPR, as per CDRL A005. Coordination shall be accomplished through electronic mail. The Contractor shall post minutes to their website, and the Government will hotlink the PL AMIS website to the Contractor’s website.

10.1 Monthly Sales and Status Report

The Contractor shall prepare and submit a Monthly Sales and Status Report in Microsoft Office Excel format, as per CDRL A001. The report shall include all orders placed by the Government, and by Government Contractors, during the reporting period.

The Contractor shall submit the first report to the COR on the 10th day of the month following the one-month period after the contract effective date. The Contractor shall submit subsequent reports in monthly increments on the 10th day of the month following the reporting period throughout the performance period of the contract. The report shall include, at a minimum, a list of all equipment delivered by:

a. CLIN, by month, and by Service or Agency, with a brief description and total quantities and dollar amounts;

b. Year-to-date, with total quantities and cumulative dollar amounts;

c. Contract-to-date, with total quantities and cumulative dollar amounts; and

d. Items Ordered, Order Number, CLIN, Quantity, Unit Price, Extended Price, Ship

Date, and Warranty Expiration Date.

The totals for each monthly sales and status report category (items a – d above) shall also reflect the values for products/equipment and services in a summary table.

10.2 Enterprise Contractor Manpower Reporting Application (eCMRA)

The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report ALL Contractor labor hours (including Subcontractor labor hours) required for performance of services provided under the NGT contract via a secure data collection site. The Contractor is required, as per CDRL A012, to completely fill in all required data fields using the following web address: http://www.ecmra.mil, and then click on "Department of the Army CMRA" or the icon of the DOD organization that is receiving or benefitting from the contracted services. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30.

While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk by http://www.ecmra.mil/ clicking on "Send an e-mail," which is located under the Help Resources ribbon on the right side of the login page of the applicable Service/Component's CMRA website. Contractors may use a direct XML data transfer to the data base server or fill in the fields on the website.

The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website, without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website. The required information includes:

1) Contracting Office, Contracting Officer, Contracting Officer's Technical Representative;

2) Contract number, including order number(s);

3) Beginning and ending dates covered by reporting period;

4) Contractor name, address, phone number, email address, and identity of Contractor employee entering data;

5) Estimated direct labor hours (including Subcontractors);

6) Estimated direct labor dollars paid the reporting period (including Subcontractors);

7) Total payments (including Subcontractors);

8) Predominant Federal Service Code (FSC) reflecting services provided by the Contractor

(and separate predominant FSC for each Subcontractor, if different);

9) Estimated data collection cost;

10) Organizational title associated with the Unit Identification Code (UIC) for the Army

Requiring Activity (the Army Requiring Activity is responsible for providing the Contractor with its UIC for the purposes of reporting this information);

11) Location(s) where the Contractor and Subcontractors perform the work (specified by zip code in the United States, and by nearest city, country, when in an overseas location, using standardized nomenclature provided on the website);

12) Presence of deployment or contingency contract language; and

13) Number of Contractor and Subcontractor employees deployed in theater the reporting period (by country).

11.0 Changes and Modifications

All OEM changes prior to contract award shall be included in equipment provided under this contract at no additional cost to the…