Attachment 0003 - Performance Work Statement 15 SEP 21.pdf

PERFORMANCE WORK STATEMENT

FOR ISO REGISTRATION SERVICES

FOR ROCK ISLAND ARSENAL JOINT MANUFACTURING

AND TECHNOLOGY CENTER (RIA-JMTC)

Dated 15 SEP 21

A. Introduction

RIA-JMTC is an Army manufacturing center owned and operated by the Department of Defense (DoD) and staffed with civilian and military employees. RIA-JMTC is currently certified to the ISO 9001:2015 standard. RIA-JMTC is responsible for the following manufacturing activities:

Assembly, Painting, Forging, Foundry, Heat-Treat, Investment Casting, Plating, Machining, Non-Destructive Testing, Pliable Materials, Tool, Die and Gage manufacturing, Welding and Fabrication. RIA-JMTC manufacturing activities combine to produce major field support systems such as: Artillery Systems, Mobile Field Maintenance Systems, Field Service Gages, and Armor Products for the Department of Defense. RIA-JMTC currently employs 1200 people working 3 shifts per day, is located in the 1.5 million square foot Kingsbury Complex, and is the only general-purpose, vertically integrated, metal manufacturer in the Department of Defense.

RIA-JMTC is located on Rock Island Arsenal, a government installation located on an island in the Mississippi river located between Davenport, IA and Moline and Rock Island, IL.

B. Scope of Work

B.1 The contractor shall provide all necessary services and support to assist RIA-JMTC in certifying to, obtaining and maintaining the most current revision of each International Standard Organization (ISO) certifications that RIA-JMTC deems necessary.

B.2 This performance work statement (PWS) describes the general requirements and deliverables required for this effort through the end of the contract. Each ISO certification required by RIA- JMTC will be included as an appendix to this PWS and will describe the specific requirements and deliverables for that ISO certification. Unless specifically stated, the general requirements and deliverables of this PWS will apply to each ISO certification. The Government will add a new appendix to this PWS for new RIA-JMTC ISO requirements. All revisions/changes to the PWS will be coordinated with the Contractor.

C. GENERAL REQUIREMENTS

C.1.1 The Offeror shall be accredited to ISO 17021 with a scope of accreditation that includes but, is not limited to, ISO 45001:2018 and ISO 9001:2015. The Accreditation Body must be a member of the International Accreditation Forum (IAF). The Offeror cannot have any previous suspensions or revocations of their accreditation.” The contractor shall have objective evidence that they’ve performed successful completion of two ISO audits specific to RIA-JMTC’s requirements on DoD facilities of greater than 1000 personnel.

C.1.2 RIA-JMTC shall be scheduled for audits to ensure no lapse of any certificates. It is the intention of RIA-JMTC to schedule all audits in one calendar week each year. Deviations from the intended scheduling may be necessary to achieve initial registration and may occur at the discretion of RIA-JMTC. Section C1.2-ISO 17021 requires a surveillance audit once per calendar year. No lapse in certification will occur if audits are conducted once per calendar year.

A recertification audit occurs 60 days prior to expiration of a certificate.

C.1.3 The contractor and/or sub-contractor shall abide by all applicable requirements of ISO for the duration of this contract.

C.1.4 The Certification Body shall conduct all pre-assessment and formal registration audits including review of documentation. Reviewing of RIA-JMTC’s documentation shall be performed at least two weeks in advance of any formal audit.

C.1.5 The Certification Body shall provide registration audits and/or Surveillance/Maintenance Audits to be conducted, to maintain the requested ISO certification through the end of the contract.

C.1.6 The specific schedule for each of these audits shall be agreed upon between RIA-JMTC’s Management Representative and the Certification Body. The audit duration is governed by IAF.

The Government may require additional audit days to allow for a more extensive audit than what the IAF recommends.

C.1.7 The scope of the certification is not segmented but rather is inclusive of the entire facility with the exceptions of RIA-JMTC’s exclusions mentioned previously. Therefore, audits shall be performed facility wide, simultaneously over one calendar week, or in the timeframe scheduled, to avoid unnecessary disruption of the organization.

C.1.8 Sub-contracting. Contractor shall not sub-contract the certification process to a third party.

Contractor must be able to perform all aspects of the certification process upon award of the contract.

C.2 DELIVERABLES. The ultimate deliverable under this contract is formal ISO certification/maintenance during the period of the contract. In addition, the Certification Body shall provide the following:

C.2.1 Information regarding the certification process, including processing complaints and appeals and any associated fees. This should be provided prior to each audit.

C.2.2 The name of, and when requested, background information on each member of an audit team. Such information should be provided sufficiently in advance of the audit to allow reconstitution of the audit team in the event RIA-JMTC objects to any audit team member.

C.2.3 Provide an audit plan, at least 30 days in advance to each audit to allow an agreement between RIA-JMTC and the Certification Body’s lead auditor on dates, times, and areas to be audited. This notice shall include a single point of contact with which RIA-JMTC will communicate.

C.2.4 After any audit is complete, the Certification Body is required to provide an electronic audit report. The contractor shall submit a report summarizing the work completed under the PWS in accordance with Contract Data Requirements List (CDRL), DD Form 1423.

C.2.5 Upon an initial or re-registration audit, the Certification Body must notify RIA-JMTC of the decision to certify or not certify. If the decision is to certify, the Certification Body is required to provide a certification document to RIA-JMTC.

C.2.6 The Certification Body is required to communicate audit results during and after an audit and to respond to RIA-JMTC’s response to any nonconformance. The results of the Certification Body’s review of such response to nonconformities shall be reported to RIA-JMTC.

C.2.7 Transfers of certificates for RIA-JMTC;

Note: Transfer of certificates means that RIA-JMTC maintains certification by an Accreditation Body which is a member of the IAF (International Accreditation Forum) and those responsibilities are being assumed by another Accreditation Body which is a member of the IAF (International Accreditation Forum). New certificate reflects new Certification Body.

C.2.8 Audit support for the certification or maintenance of certifications of RIA-JMTC. All information that could potentially affect certification to ISO shall be communicated to the RIA- JMTC representative immediately when found.

C.2.9 Any other deliverables required by the certification process in accordance with IAF (International Accreditation Forum, whether listed herein or not.

C.3 PERIOD OF PERFORMANCE. The period of performance for this contract is five years (one base year and four one-year option periods) from the date of award. It is RIA-JMTC’s intent to maintain ISO registration/certification without a break in service.

C.4 SAFETY. The contractor shall provide for the safety and protection of personnel employed in support of this contract. The contractor shall comply with all RIA-JMTC Safety Regulations and all Standing Operating Procedures to include wearing appropriate eye and shoe safety equipment when required. Procurement of safety glasses and shoes is the responsibility of the contractor. The contractor /subcontractor shall comply with all Occupational Safety and Health Act (OSHA), as well as Federal, State, and local laws and regulations.

C.5 SECURITY

C.5.1 Site Security. The contractor/subcontractor shall be responsible for the security of your own supplies, material, and equipment. The RIA is an Army installation subject to Department of Defense safe-guards, various precautions and plant protection measures. At all times during execution of this PWS, the contractor will maintain adequate plant protection devices to minimize espionage, sabotage, and other malicious destruction and damage. The contractor shall comply with all security requirements of the Rock Island Arsenal.

C.5.1.A Security Requirements.

AT Level I Training. This provision/contract text is for contractor employees with an area of performance within an Army-controlled installation, facility, or area. All contractor employees, including subcontractor employees, requiring access to Army installations, facilities,or controlled access areas shall complete AT Level I awareness training within 60 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 60 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at https://jkodirect.jten.mil.

Access and General Protection/Security Policy and Procedures. This standard language is for contractor employees with an area of performance within an Army-controlled installation, facility, or area. The contractor and all associated subcontractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services, or Security office. The contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DoD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the change clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

For contractors that do not require CAC, but require access to a DoD facility or installation. Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center interstate identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

Contractor will acquire and need to return all issued U.S. Government Common Access Cards, installation badges, and/or access passes. Use FAR 52.204-9 or PADDS Clause IF00015.

IWATCH (See Something, Say Something) Training. This standard language is for contractor employees with an area of performance within an Army-controlled installation, facility, or area. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR.

This training shall be completed within 60 calendar days of contract award and within 60 calendar days of new employees commencing performance, with the results reported to the COR no later than 60 calendar days after contract award.

Impact on contractor performance during increased FPCON during periods of increased threat (contractor personnel working on an installation). During FPCONs Charlie and Delta, services may be discontinued/postponed due to higher threat. Services will resume when FPCON level is reduced to level Bravo or lower.

Random Antiterrorism Measures Program (RAMP) participation. Contractor personnel working on an installation are subject to participation in installation RAMP security program (e.g. vehicles searches, wearing of ID badges, etc.).

C.5.2 Contractor Personnel. Contractor personnel employed in support of this contract shall be native born or naturalized citizens of the United States and may require security clearances issued by the U.S. Government. Foreign nationals shall not be used as auditors due to stringent security requirements. The contractor shall be responsible for obtaining any security clearances that are required for contractor and sub-contractor personnel.

C.5.3 Visitor’s Requests. Ten days prior to commencing work, contractor shall provide a completed visitor’s request form to the contracting officer representative (COR) for all personnel who will be working onsite or visiting during performance of the PWS. This request shall include:

Employee’s full name Employee’s Social Security Number Employee’s date and place of birth Employee’s naturalization number (if applicable) Employee’s citizenship Date of Visit: From (Month/Day/Year) To (Month/Day/Year) Purpose of visit RIA-JMTC point of contact Degree of security clearance, date issued, issuing authority (if applicable)

Contractor shall notify the RIA-JMTC POC within 48 hours of personnel changes or changes in personnel information.

C.6 INSPECTION. Contractor shall be subject to announced/unannounced security inspections conducted by physical security and other security offices while on Rock Island Arsenal.

Inspections can include vehicle searches and searches of the personal and professional property within those vehicles and on the contractor’s person.

C.7 HOURS OF OPERATION. Normal hours of operation are 0630-1700, Monday through Thursday, except for Federal holidays or as stated in the PWS. The contractor /subcontractor shall comply with these hours of operation. Requests to work outside these hours shall be filed with the COR at least two weeks in advance.

C.8 QUALITY ASSURANCE. Inspection and acceptance of services will be performed by the COR, in accordance with, the RIA-JMTC Quality Assurance Surveillance Plan (QASP).

C.9 PERSONNEL. The contractor/subcontractor shall provide a work force possessing the skills, knowledge and training to satisfactorily perform the services required under this PWS.

This is a non-personal service contract; personnel performing work under this PWS remain your employees and are not employees of the Government.

C.10 SPECIFIC TASKS. The PWS for new/additional ISO requirements will include a definitive statement of work, to include a delivery or performance schedule, a description of the requirement and any other special information. Contractor response shall include a cost estimate, based on agreed and supplied cost schedules, and proposed performance schedule if you will not be able to meet the performance schedule. The Government Contracting Officer will notify you if we take exception to anything in your proposal and if necessary, conduct negotiations.

C.11 PROGRAM MANAGEMENT

C.11.1 The contractor shall manage all technical performance issues, including logistics support, schedule, and data delivery requirements of the contract. Contractor management responsibility shall include Program Planning and Control, Subcontractor Control and Data Management.

C.11.2 Management Control. The contractor shall have management control, in sufficient detail, to identify contractor, subcontractor, or partner responsibilities.

C.11.3 Logs. Contractor shall maintain daily work logs for work performed under the PWS and have them available for review. As a minimum, the logs shall contain the work date, employee names, work location, and type of work performed.

C.11.4 Progress. Contractor shall make progress on assigned tasks so as not to endanger timely performance. Progress will be determined by adherence to schedule. Adherence to schedule shall be monitored by the RIA-JMTC Performance Certifier in conjunction with the department/s requesting the audit service.

C.11.5 Contractor Manpower Reporting. The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. The contractor is required to completely fill in all required data fields using the following Web address: http://www.ecmra.mil/, and then click on "Department of the Army CMRA" or the icon of the DoD organization that is receiving or benefitting from the contracted services. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2013. Contractors may direct questions to the help desk by clicking on "Send an email" which is located under the Help Resources ribbon on the right side of the login page of the applicable Service/Component's

CMR website.

D. GOVERNMENT FURNISHED EQUIPMENT and SERVICES

D.1 Government Furnished Equipment. RIA-JMTC shall provide an office environment to include applicable space for the contractor to perform on-site auditing services.

D.2 Government Furnished Services. RIA-JMTC will provide full-time escorts during all visits.

APPENDEX A

ISO 9001:2015

Performance Work Statement

E.1 The contractor will provide accreditation, compliance audits, and certifications to International Standard, ISO 9001:2015, Quality Management System (includes audit pre-assessment activities) as well as ISO 45001, Occupational Health and Safety. Future requirements may include AS9100.

Note: ISO 9001:2015 specifies requirements for a quality management system (QMS) that can be used for internal application by organizations, or for certification, or for contractual purposes.

It focuses on the effectiveness of the quality management system in meeting customer requirements.

E.1.2 RIA-JMTC shall be scheduled for audits to ensure no lapse of any certificates. It is the intention of RIA-JMTC to schedule all audits in one calendar week each year. Deviations from the intended scheduling may be necessary to achieve initial registration and may occur at the discretion of RIA-JMTC. To ensure no lapse of any certificates, the first audit must be completed by the second week of October annually. Subsequent audits, if ordered, must be conducted in the option periods during that same time frame.

E.1.3 Upgrades or conversions to International Standard, ISO 9001:20XX, Quality Management System.

Note: Upgrade or conversion means an upgrade or conversion from International Standard, ISO:

9001:2015, Quality Management System if there is a new version released by ISO.

E.1.4 The contractor shall schedule an out-brief for the installation commander and plant management.

E.1.5 All other specific requirements refer to sections A through D.2.

E.1.6 Any other deliverables required by the registration process in accordance with IAF, whether listed herein or not.

APPENDEX B

ISO 45001

Performance Work Statement

D.1. The Certification Body shall provide registration audits and/or Surveillance/Maintenance Audits to be conducted, to maintain certification through the end of the contract. However, the follow up surveillance/maintenance audits for the 45001 registration will be required through the end of the contract.

D.1.2 The specific schedule for each of these audits shall be agreed upon between RIA-JMTC’s Management Representative and the Certification Body. The number of audit days for each audit shall meet, at a minimum, the most current IAF audit requirements. The Government may require additional audit days to allow for a more extensive audit than the minimum.

D.1.3 The scope of the registration is not segmented but rather is inclusive of the entire facility with the exceptions of RIA-JMTC’s exclusions mentioned previously. Therefore, audits shall be performed facility wide, simultaneously over one calendar week, or in the timeframe scheduled, to avoid unnecessary disruption of the organization.

D.1.4 Any other deliverables required by the registration process in accordance with IAF, whether listed herein or not.

D.1.5 All other specific requirements refer to sections A through D.2.