A.01.30_PWS_SCADA_programming.docx

PERFORMANCE WORK STATEMENT (PWS)

SCADA SUPPORT CONTRACT

Little Rock District Army Corps of Engineers Augsut 14, 2019 Part 1 General Information

1. GENERAL:

1.0 This is a non-personal services contract to provide consultation services for a Supervisory Control and Data Acquisition System at Table Rock Dam, Branson Missouri. A SCADA system is currently under development based on Siemens Corporation hardware and application software. The Contractor shall provide programming to accomplish items as identified in the detailed statement of work. The Contractor shall provide nine on site visits totally 360 hours plus travel time, 800 hours of off-site consultation/programming services shall also be provided for all seven plants. The Contractor shall also supply server licenses and 20 firewalls components/licenses. The Contractor shall also furnish a SIMIT Patch Management Software system and provide engineering support to set up the existing and nw simulators. The Contractor shall provide an annual software support updates and siemens technical support with options for 2 additional years of support. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 The contractor shall provide all personnel, equipment, supplies, travel, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform the work required. The contractor shall perform to the standards in this contract. The Contractor is responsible for review and knowledge of existing system and shall include all costs necessary in the contractor’s proposal to become familiar with the existing Siemens SCADA Control system.

1.2 The SCADA system is a centralized SCADA system with one master plant and six remote plants. There are 27 main generation units, 7 station service systems, and 7 switchyards total at the seven power plants. The equipment utilizes Siemens PCS7 operating system and Siemens PLC 400 Series. The operating system is PCS7 version 8.0 SP1 and is currently running version 8.1 SP1. The master plant ,Table Rock Power Plant, is located at Branson, MO and the six remote plants are located as follows: Beaver Power Plant is located near Eureka Springs, AR. Norfolk Power Plant is located near Mountain Home, AR. Bulls Shoals Power Plant is located near Mountain Home, AR. Greers Ferry Power Plant is located near Heber Springs, AR. Dardanelle Power Plant is located at Dardanelle, AR. Ozark Power Plant is located at Ozark, AR The period of performance for this contract is three (3) calendar years from the notice to proceed for this contract award.

1.3 Schedule

The Contractor shall develop and submit a schedule in accordance with period of performance requirements for approval. Submit schedule for approval within 15 days after notice to proceed.

1.4 General Information

1.5 Quality Control

The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

1.6 Quality Assurance:

The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.7 Recognized Holidays:

1.8 Hours of Work:

On site work shall be accomplished during normal works for the Table Rock Power plant. Normal work hours are 0630 to 1700 Monday through Thursday each week. On site work shall not be conducted on Federal Holidays.

1.9 Place of Performance:

The on-site work shall be conducted at Table Rock Power Plant, located near Branson Missouri.

1.10 Type of Contract:

The government will award a firm fixed price contract.

1.11 Security Requirements: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use and copies of programming performed by Contractor. At the close of each work period, government facilities, equipment, and materials shall be secured. The Contractor shall sign a non-disclosure agreement to protect information about the existing and new SCADA system. All site specific information shall be secured when not attended by persons with level II certification. In no circumstances are contractor personnel without level II certification be allowed to have access to Little Rock District’s security system and site specific documentation. The Contractor shall furnish a list of personnel and a photo ID that have level II certification that are working on this project. Refer to section 5 for additional security requirements.

1.11.1 National Threat Levels: The National Threat Level could be moved to a higher level during the course of this contract resulting in work delays. If there is a delay of more than one week the Contractor may be eligible for a time extension.

1.11.2 Cyber Security Training: The Contractor shall complete Government provided Cyber Security training and sign an acceptable use policy.

1.11.3 Security Background Certifications/Clearances: Security Requirements: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use and copies of programming performed by Contractor. At the close of each work period, government facilities, equipment, and materials shall be secured. The Contractor shall sign a non-disclosure agreement to protect information about the existing and new security system. All site specific information shall be secured when not attended by persons with level II certification. In no circumstances are contractor personnel without level II certification be allowed to have access to Little Rock District’s security system and site specific documentation. The Contractor shall furnish a list of personnel and a photo ID that have level II certification that are working on this project. Refer to Paragraph 7.4 for additional security information.

1.6.7.2 Vehicles.

Private vehicles of the Contractor shall enter and leave the project through approved means. Parking of private vehicles shall be restricted to areas designated by the Contracting Officer.

1.6.8 Special Qualifications:

The Contractor’s programmer and consultant shall meet the following minimum contractor experience in order to be considered qualified to perform this work. The Contractor shall submit data to confirm compliance with the minimal qualifications with their proposal.

1. A minimum of twenty (20) years programming experience Siemens Automation systems,

2. A minimum of ten (10) years programming experience with Siemens

PCS7.

3. Shall have programmed Automatic Generation Controls Software for a minimum of least 20 hydroelectric power plants.

4. Shall have programmed scheduling software for at least 20 hydroelectric power plants.

5. Shall have provided consulting services for Siemens for a minimum of 7 hydroelectric power plant SCADA systems.

6. Level 2 Security Background clearance for all personnel with access to the Government security system or associated documentation.

7. Shall be a Certified Siemens Solutions Partner

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.10 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Work by the Government Concurrent with Contractor work. It is possible that Government will have other work by Contractor or Government employees at or near the site of this work. The Contractor shall fully cooperate with other contractors or Government employees, heeding any direction by the Contracting Officer.

1.6.12 Safe Clearance Procedure. A Safe Clearance System as required by EM 385-1-1 is in use by project personnel to safeguard personnel and equipment and provide continuity of service. Any work by the Contractor requiring equipment to be out of service will be coordinated with the Government to obtain a clearance. Contractor personnel may not violate Safe Clearance procedures. A copy of the procedure will be supplied upon request.

1.6.13 Payment. The contractor will be eligible for partial payment upon submission of a proper invoice at the successful completion of each site visit. Invoices for off-site consulting shall be made monthly or quarterly at the Contractors option. Submit invoices to the Contracting Officer.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-physical things such as meeting minutes.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12. WORK WEEK. Is defined as Monday through Friday, unless specified otherwise.

2.1.13 SCHEDULE. Detailed schedule showing start and stop dates for training sessions. The Contractor shall submit this schedule for review and approval by the Contracting Officer. The Contracting Officer shall review and provide any comments back to the Contractor within 30 calendar days.

2.1.15 CONTRACTORS EXPERIENCE AND CERTIFICATION. The Contractor shall submit copies of previous experience documenting requirements of paragraph 1.6.8 with their proposal. Include dates of experience, location of work, name of hydroelectric facilities, and name and phone number , Failure to document experience shall result in rejection of the contractors proposal.

2.2. ACRONYMS:

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Facilities: The Government will provide a workplace at the power plant during on site visits. Restroom facilities are available for use by Contractor personnel.

3.2 Utilities: Electric power outlets are available at various work areas in Table Rock Power Plant. The Contractor shall furnish their on telephone service .

3.3 Equipment: The Government will provide access to SCADA equipment at Table Rock Power Plant and at each remote plant either on site or using remote software.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General; The Contractor shall furnish all labor, travel, materials, supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

PART 5

SPECIFIC TASKS

5. Specific Tasks:

5.1 Off-Site and On-Site Consulting

5.1.1 Off-Site Consulting

The Contractor shall provide 800 hours of offsite consulting and technical support services to assist the Government with technical issues related to the centralized control SCADA system implementation. This task shall be completed within the period of performance in Section 1.2 of this contract. The Contractor shall maintain a log of technical hours used and provide a monthly report of hours used that month and remaining hours. Consulting shall be charged in at least 15 minute blocks or less. Consulting hours shall be used to perform Government requested programming changes, software updates to newer versions and other Siemens software/hardware related tasks. The work shall include such items as patch management, SCADA NERC compliance commissioning, and other items required to improve the reliability of the SCADA system and the Bulk Electric System.

5.1.2 On-Site Consulting

5.1.2.1 The Contractor shall provide nine on site trips. Each on site trip shall be for forty (40) hours plus travel time each. Seven (7) on site trips are to support the commissioning of a new SCADA system developed by another contractor for Bull Shoals Power Plant near Lakeview Arkansas. Two (2) on site trips will be to table Rock Power Plant near Branson Missour to support commission efforts of the SCADA System and upgrades to PCS 7 version 9.0.

5.1.2.2 The site trips shall be at a time/date and power plant location to be coordinated by Government and the Contractor. On Site work is expected to start for Bull Shoals commissioning in late October 2019 and continue for approximately 1 year. The first trip to Table Rock is required In late September or early October 2019.

5.1.2.3 Bull Shoals has two Operation Stations (OS) and one Engineering Station (ES), 11 Siemens PCS7 PLCs supporting 8 generator/turbines, station system, and switchyard. There are 4 monitors per OS and 2 monitors for the ES. The Contractor shall be available on site at Bull Shoals Power Plant within two weeks of notification by the Government.

5.1.2.4 The contractor shall commission all software functions of the PCS7 program to commission the new SCADA system. Contractor shall perform 40 hours of on-site technical consultation services to assist the Government with technical issues related to the centralized control SCADA system implementation. The work shall include such items as patch management, SCADA NERC compliance commissioning and other items required to improve the reliability of the SCADA system. The list of SCADA points is listed in paragraph 5.2.

5.1.2.5 Commission activities include: All control functions, alarms, communications, analog points, digital inputs, digital outputs, sequencing, automatic generation control, water management control, scheduling software, relay protection systems, report generation, alarm printing, hsitorian, event analysis, trending, analog tuning and all other SCADA features.

5.1.3 License

The Contractor shall furnish 5 OS Software conversion packs to upgrade 2 servers to server redandancy. Provide one OS redundant server license. Redundant Server Licenses to replace PCS7 server license necessary for the backup redundant severs. Provide 3 OS Client licenses.

5.1.4 Fire Walls

The Contractor shall provide 20 of the following items for new firewalls:

Palo Alto Networks PA-220

Threat prevention subscription year 1, PA-220

PANDB URL filtering subscription year 1, PA-220

WildFire subscription year 1, PA-220

For US Government accounts only. Premium support year 1, PA-220

The Government will install and program the new firewalls.

5.1.5 SIMIT PATCH MANAGEMENT/SIMULATOR

5.1.5.1 The contractor shall furnish, install, and commission a complete system with the Siemens Simit Ultimate Version 9.0 and SIMIT Virtual Controller Software V10.1, Virtual Controllers, an PCS7 operator system server Software v9.0, Engineering station software 9.0 and PCS7 OS Client software v9.0 installed on an Government furnish ESXi Virtual Machine Server with the latest Bull Shoals project set-up that is being developed under another contract. The Contractor shall provide all necessary engineering SIMIT software, 11 virtual controllers, and licenses and install the simulator ready for use at Branson Missouri. The software dmware and the virtual machines shall run on windows 2016 . Include upgrades to the existing SIMIT simulator to version 10.1 and program 4 additional new virtual controllers and 2 existing virtual controllers to match 6 PLCs . The software dmware and the virtual machines shall run on windows 2016 . The Contractor shall furnish all necessary license for software and dongles will also include the development an environment for custom components (CTE) to exactly match the existing Siemens PCS7 custom SCADA programming which was developed by another Contractor for Bull Shoals generators/turbines, station equipment, and switchyard. The Contractor shall provide all passwords, licenses, software and hardware for the Government to either build their own custom components or enhance existing ones.

5,1,5,2 Bull Shoals Power Plant has 8 hydroelectric turbine/generators with necessary auxiliary components. Bull Shoals power plant also has a plant station service system and a switchyard. The contractor shall configure the simulator with complete SCADA controls to represent francis turbines, generators, station systems, and switchyard. The Contractor shall provide complete start stop controls, electrical shutdowns, mechanical shutdowns, start up interlocks, alarms, status points, automatic generation control, generation start/stop schedular,and minimum flow controls.

5.1.5.3 The Contractor shall furnish and install a Simulator on top of the Simit installation an OS Server, an ES and an OS Client shall be provided. The Government will furnish the server for the Contractor to install the software. Standard PCS7 licenses shall be provided for these components, and shall be available to be used for the training simulator in the same way they are used for the “real” plant.

5.1.5.4 The Contractor shall install the software in a virtual environment (VMware ESXi 6.5), allowing one processor core per Virtual Controller and one for the Simit Framework. Additionally, an OS Server, ES and a Clients shall be installed as separate virtual machines on the same server housing the Simit software. As HMI two thin clients shall be included in this proposal. One will access the OS Client with a typical set-up with 4 monitors, the other can be used to access the Simit Framework, i.e. to run through training scenarios, OS Server or Engineering Station. In a virtualized plant configuration, each of the OS Server and Engineering Station would get their one thin client.

5.1.5.5 The contractor shall program the existing Graphical User Interface Screen into the SIMIT0020 User Graphical Interface (UGI) shall be developed to match the existing screens on the existing Bull Shoals PCS7 SCADA program. There are four screens per unit, four for station systems, 8 for the switchyard and 10 additional GUI screens. Each GUI screen for generator/turbines, station, and switchyards have all PLC associate inputs, outputs points identified in paragraph 5.2. The Contractor shall configure graphics with one line diagrams for each generator/turbine, station, and switchyard. It shall match the existing SCADA GUI Screen layouts. The Contractor shall program the Generation Scheduler, Automatic Generation Control, historian and water management screens. All existing SCADA controls shall be programmed and GUI points shall be added to appropriate screens in the SIMIT simulator to match existing SCADA system at Bull Shoals power plant. Refer to paragraph 5.2 for list of all points.

5.1.6. The Contractor shall provide one base year of Siemens PCS7 technical support and software upgrades/updates service and two option years. The Contractor shall provide a new maintenande contract starting from the end date of the current maintenance contract. The Contractor shall include all costs to maintain a continous maintenance contract from current maintenance contract and then for an one additional base year and two additional option years. This shall be provided for the following:

Single Server SUS; Quantity = 12 PCS 7 OS Client SFC Visualization SUS; Quantity =11 PCS 7 Engineering AS/OS SUS; Quantity = 4 PCS 7-PLCSIM SUS; Quantity = 2 PCS 7 Maintenance Station SUS; Quantity = 2 PCS 7 Redundant Server SUS; Quantity =7 PCS 7 SIMIT SUS, Quantity = 2

5.2 BULL SHOALS SCADA POINTS LIST:

The Contractor shall program all of the following points into the new SIMIT Simulator.

Generator/Turbine Digital Input Points (Shown for one unit, the contractor shall program eight units):

BS-U1 DIFFERENTIAL (86G)

BS-U1 ELECTRICAL SHUTDOWN (5C)

BS-U1 CO2 DISCHARGE (63CG)

BS-U1 EXCITER FAILURE (53)

BS-U1 COOLING WATER (63WAX)

BS-U1 GEN. GD. BEARING TEMP RELAY (38GG)

BS-U1 GEN. GD. BEARING HIGH TEMPERATURE

BS-U1 EXCITER BRIDGE FAILURE (86BR)

BS-U1 THRUST BEARING TEMP RELAY (38TB)

BS-U1 THRUST BEARING COOLING WATER (63WTX)

BS-U1 THRUST BEARING LOW OIL LEVEL (63QGTX)

BS-U1 EXCITER FAN FAILURE

BS-U1 GOVERNOR LOW OIL PRESSURE (63QX)

BS-U1 TURB. GD. BEARING TEMP RELAY (38TG)

BS-U1 TURB. GD. BEARING OIL LEVEL/PRESSURE

BS-U1 TURB. GD. BEARING HIGH TEMPERATURE

BS-U1 TURB. GD. BEARING AC OIL PUMP FAIL

BS-U1 TURB. PACKING GLAND WATER

BS-U1 MECHANICAL SHUTDOWN (5M)

BS-U1 INCOMPLETE START SEQUENCE (48)

BS-U1 OVERSPEED (12)

BS-U1 CREEP

BS-U1 NEGATIVE SEQUENCE (46G)

BS-U1 GROUND (64G)

BS-U1 OVERVOLTAGE (59G)

BS-U1 OVERCURRENT (51G)

BS-U1 STATOR TEMPERATURE RELAY (49G)

BS-U1 LOSS OF FIELD (40G)

BS-U1 FIELD GROUND (64F)

BS-U1 STATOR HIGH TEMPERATURE

BS-U1 52G1 FAILURE (50BF)

BS-U1 OVER/UNDER FREQUENCY (81)

BS-U1 RELAY FAILURE

BS-U1 VOLTAGE REGULATOR IN CURRENT MODE

BS-U1 NORMAL SHUTDOWN (5-1)

BS-U1 HEADGATE DOWN POSITION

BS-U1 HEADGATE UP POSITION

BS-U1 REMOTE-LOCAL SWITCH (43M)

BS-U1 RUN RELAY (3)

BS-U1 MAIN BREAKER STATUS (52G)

BS-U1 BRAKE STATUS

BS-U1 CONDENSING (65CO)

BS-U1 EXCITER AC BREAKER (41E) OPEN

BS-U1 24VDC PWR SUPPLY FAIL

BS-U1 SYNC SPEED

BS-U1 SYNC ENABLE

BS-U1 4X

BS-U1 EXCITER INCOMPLETE SEQUENCE

Generator Turbine Digital Outputs (Shown for one unit, the contractor shall program eight units):

U1 START

U1 STOP

U1 SPEED ADJUST RAISE

U1 SPEED ADJUST LOWER

U1 EXCITATION RAISE

U1 EXCITATION LOWER

U1 GATE LIMIT RAISE

U1 GATE LIMIT LOWER

U1 52G1 SYNC ENABLE

U1 52G1 OPEN

U1 HEADGATE ENABLE

U1 HEADGATE LOWER

U1 EMERGENCY STOP

Generator/Turbine Analog points (Shown for one unit, the contractor shall program eight units)::

BS-U1 MW IN/OUT

BS-U1 MVAR IN/OUT

BS-U1 KILOVOLTS

BS-U1 STATOR AMPS

BS-U1 REV/MIN (RPM)

BS-U1 SPEED ADJUST

BS-U1 GATE POSITION

BS-U1 GATE LIMIT

BS-U1 DC FIELD AMPS

U1 Stator Coil RTD 1 U1 Stator Coil RTD 2 U1 Stator Coil RTD 3 U1 Stator Coil RTD 4 U1 Stator Coil RTD 5 U1 Stator Coil RTD 6 U1 Stator Coil RTD 7 U1 Stator Coil RTD 8 U1 Stator Coil RTD 9 U1 Stator Coil RTD 10 U1 Stator Coil RTD 11 U1 Stator Coil RTD 12 U1 Thrust Bearing RTD 13 U1 Thrust Bearing RTD 14 U1 Thrust Bearing RTD 15 U1 Thrust Bearing RTD 16 U1 Turbine Guide Bearing RTD 17 U1 Turbine Guide Bearing RTD 18 U1 Thrust Bearing Oil RTD 19 U1 Thrust Bearing Oil RTD 20 #1 Transformer Temp RTD 21 #1 Transformer Temp RTD 22 #1 Transformer Temp RTD 23

Swithyard Digital Inputs:

BS-XFMR1 LOCKOUT (86T)

BS-XFMR1 RELAY FAILURE

BS-XFMR1 SYSTEM SPRAY

BS-XFMR1 WINDING TEMPERATURE RELAY (49T)

BS-XFMR1 TRANSFORMER HIGH TEMPERATURE

BS-XFMR1 OIL & WATER FLOW

BS-XFMR1 SHUTDOWN TIMER (2T)

BS-XFMR1 OIL & GAS TROUBLE

BS-PCB12 LOW AIR PRESSURE

BS-PCB12 LOW GAS PRESSURE

BS-PCB12 BREAKER STATUS (U1 MAIN BUS)

BS-PCB18 LOW AIR PRESSURE

BS-PCB18 LOW GAS PRESSURE

BS-PCB18 BREAKER STATUS (U1 AUX BUS)

BS-50BF RELAY FAILURE

BS 161KV OIL FILLED CABLE SYSTEM - LOW PRESS

BS-XFRMR2 LOCKOUT (86T)

BS-XFMR2 RELAY FAILURE

BS-XFMR2 SYSTEM SPRAY

BS-XFMR2 WINDING TEMPERATURE RELAY (49T)

BS-XFMR2 TRANSFORMER HIGH TEMPERATURE

BS-XFMR2 OIL & WATER FLOW

BS-XFMR2 SHUTDOWN TIMER (2T)

BS-XFMR2 OIL & GAS TROUBLE

BS-PCB32 LOW AIR PRESSURE

BS-PCB32 LOW GAS PRESSURE

BS-PCB32 BREAKER STATUS (U2 MAIN BUS)

BS-PCB38 LOW AIR PRESSURE

BS-PCB38 LOW GAS PRESSURE

BS-PCB38 BREAKER STATUS (U2 AUX BUS)

BS-EAST AUX BUS RELAY FAILURE

BS-EAST AUX BUS RELAY TRIP

BS-XFMR3 RELAY FAILURE

BS-XFMR3 SYSTEM SPRAY

BS-XFMR3 WINDING TEMPERATURE RELAY (49T)

BS-XFMR3 TRANSFORMER HIGH TEMPERATURE

BS-XFMR3 OIL & WATER FLOW

BS-XFMR3 SHUTDOWN TIMER (2T)

BS-XFMR3 OIL & GAS TROUBLE

BS-XFMR3 LOCKOUT (86T)

BS-PCB52 LOW AIR PRESSURE

BS-PCB52 LOW GAS PRESSURE

BS-PCB58 LOW AIR PRESSURE

BS-PCB58 LOW GAS PRESSURE

BS-PCB22 LOW AIR PRESSURE

BS-PCB22 LOW GAS PRESSURE

BS-EAST AUX BUS PCB18 HOT LINE ORDER

BS-L1 (MANSFIELD) RELAY FAILURE

BS-PCB18 RECLOSER STATUS

BS-L1 (MANSFIELD) RECLOSER STATUS

BS-L1 (MANSFIELD) HOT LINE ORDER STATUS

BS-161KV BREAKER FAILURE

BS-L2 (AP&L-NORFORK/MH) LINE CARRIER FAILURE

BS-L2 (AP&L-NORFORK/MH) RELAY TRIP

BS-L1 (MANSFIELD) RELAY TRIP

BS-L1 MOD27 STATUS

BS-PCB42 LOW AIR PRESSURE

BS-PCB42 LOW GAS PRESSURE

BS-PCB42 LINE 2 STATUS

BS-L2 (AP&L-NORFORK/MH) RELAY FAILURE

BS-L2 (AP&L-NORFORK/MH) CARRIER LOCAL STATUS

BS-L2 (AP&L-NORFORK/MH) RECLOSER STATUS

BS-L2 (AP&L-NORFORK/MH) HOT LINE ORDER STATUS

BS-L2 MOD47 STATUS

BS-PCB62 LOW AIR PRESSURE

BS-PCB62 LOW GAS PRESSURE

BS-PCB62 LINE 3 STATUS

BS-L3 (AP&L-HARRISON) RELAY FAILURE

BS-PCB58 RECLOSER STATUS

BS-L3 (AP&L-HARRISON) RECLOSER STATUS

BS-L3 (AP&L-HARRISON) HOT LINE ORDER STATUS

BS-L3 (AP&L-HARRISON) CARRIER REMOTE STATUS

BS-L3 (AP&L-HARRISON) CARRIER LOCAL STATUS

BS-L3 (AP&L-HARRISON) LINE CARRIER FAILURE

BS-L3 (AP&L-HARRISON) RELAY TRIP

BS-L3 MOD67 STATUS

BS-PCB38 RECLOSER STATUS

BS SWITCHYARD REMOTE/LOCAL SWITCH (43C)

BS-SWITCH 43SYX STATUS

BS-PCB22 CIRCUIT BREAKER STATUS

BS-PCB42 CIRCUIT BREAKER STATUS

BS-PCB52 CIRCUIT BREAKER STATUS

BS-PCB58 CIRCUIT BREAKER STATUS

BS-PCB62 CIRCUIT BREAKER STATUS

BS-SWITCH 43SWE STATUS

BS-EAST AUX BUS PCB38 HOT LINE ORDER

BS-EAST AUX BUS PCB58 HOT LINE ORDER

BS-XFMR4 RELAY FAILURE

BS-XFMR4 SYSTEM SPRAY

BS-XFMR4 WINDING TEMPERATURE RELAY (49T)

BS-XFMR4 TRANSFORMER HIGH TEMPERATURE

BS-XFMR4 OIL & WATER FLOW

BS-XFMR4 SHUTDOWN TIMER (2T)

BS-XFMR4 OIL & GAS TROUBLE

BS-XFRMR4 LOCKOUT (86T)

BS-PCB72 LOW AIR PRESSURE

BS-PCB72 LOW GAS PRESSURE

BS-PCB78 LOW AIR PRESSURE

BS-PCB78 LOW GAS PRESSURE

BS-PCB72 CIRCUIT BREAKER STATUS

BS-PCB78 CIRCUIT BREAKER STATUS

BS-WEST AUX BUS RELAY FAILURE

BS-WEST AUX BUS RELAY TRIP

BS-PCB82 LOW AIR PRESSURE

BS-PCB82 LOW GAS PRESSURE

BS-L4 (NORFORK/LONE ROCK) RELAY FAILURE

BS-SWITCH 43SWW STATUS

BS-L4 (NORFORK/LONE ROCK) RECLOSER STATUS

BS-L4 (NORFORK/LONE ROCK) HOT LINE ORDER

BS-PCB78 RECLOSER STATUS

BS-WEST AUX BUS PCB78 HOT LINE ORDER

BS-L4 (NORFORK/LONE ROCK) RELAY TRIP

BS-L4 MOD87 STATUS

BS-PCB82 CIRCUIT BREAKER STATUS

BS-161KV BUS DIFFERENTIAL

BS 161KV OIL FILLED CABLE SYSTEM - LOW GAS PSI

BS-MOD MB1 STATUS

BS-PCB92 LOW AIR PRESSURE

BS-PCB92 LOW GAS PRESSURE

BS-L5 (DARDANELLE) RELAY FAILURE

BS-L5 (DARDANELLE) RECLOSER STATUS

BS-L5 (DARDANELLE) HOT LINE ORDER STATUS

BS-L5 (DARDANELLE) RELAY TRIP

BS-L5 MOD97 STATUS

BS-PCB102 LOW AIR PRESSURE

BS-PCB102 LOW GAS PRESSURE

STATUS-LINE 6

BS-L6 (TABLE ROCK) RELAY FAILURE

BS-L6 (TABLE ROCK) RELAY TRIP

BS-L6 (TABLE ROCK) RECLOSER STATUS

BS-L6 (TABLE ROCK) HOT LINE ORDER STATUS

BS-PCB92 CIRCUIT BREAKER STATUS

BS-PCB102 CIRCUIT BREAKER STATUS

BS-PCB112 CIRCUIT BREAKER STATUS

BS-PCB118 CIRCUIT BREAKER STATUS

BS-WEST AUX BUS PCB118 HOT LINE ORDER

BS-PCB118 LOW AIR PRESSURE

BS-PCB118 LOW GAS PRESSURE

BS-PCB118 RECLOSER STATUS

BS-L6 MOD107 STATUS

BS-PCB78 HOT LINE ORDER STATUS

BS-PCB118 HOT LINE ORDER STATUS

Switchyard Digital Outputs:

BS-PCB12 BREAKER CLOSE

BS-PCB12 BREAKER TRIP

BS-PCB18 BREAKER CLOSE

BS-PCB18 BREAKER TRIP

BS-PCB22 BREAKER CLOSE

BS-PCB22 BREAKER TRIP

BS-L1 MOD27 CLOSE

BS-L1 MOD27 OPEN

BS-L1 RECLOSER ON

BS-L1 HOT LINE ORDER ON

BS-L1 HOT LINE ORDER OFF

BS-PCB32 BREAKER CLOSE

BS-PCB32 BREAKER OPEN

BS-PCB38 BREAKER CLOSE

BS-PCB38 BREAKER OPEN

BS-PCB18 RECLOSER ON

BS-PCB38 RECLOSER OFF

BS-PCB38 RECLOSER ON

BS-L2 RECLOSER OFF

BS-L2 RECLOSER ON

BS-L2 HOT LINE ORDER ON

BS-L2 HOT LINE ORDER OFF

BS-PCB42 BREAKER CLOSE

BS-PCB42 BREAKER TRIP

BS-L2 MOD47 CLOSE

BS-L2 MOD47 OPEN

BS-L2 CARRIER ON

BS-L2 CARRIER OFF

BS-PCB62 BREAKER CLOSE

BS-PCB62 BREAKER TRIP

BS-PCB58 BREAKER TRIP

BS-PCB52 BREAKER CLOSE

BS-PCB52 BREAKER TRIP

BS-L3 MOD67 CLOSE

BS-L3 MOD67 OPEN

BS-L3 RECLOSER OFF

BS-L3 RECLOSER ON

BS-L3 HOT LINE ORDER ON

BS-L3 CARRIER ON

BS-L3 CARRIER OFF

BS-PCB58 RECLOSER OFF

BS-PCB58 RECLOSER ON

BS-SWITCHYARD TO SWPA

BS-SWITCHYARD TO COE

BS-PCB18 HOT LINE ORDER ON

BS-PCB18 HOT LINE ORDER OFF

BS-PCB38 HOT LINE ORDER ON

BS-PCB38 HOT LINE ORDER OFF

BS-PCB58 HOT LINE ORDER ON

BS-PCB58 HOT LINE ORDER OFF

BS-PCB72 BREAKER CLOSE

BS-PCB72 BREAKER OPEN

BS-PCB78 BREAKER CLOSE

BS-PCB78 BREAKER OPEN

BS-PCB82 BREAKER CLOSE

BS-PCB82 BREAKER OPEN

BS-L4 MOD87 CLOSE

BS-4 MOD87 OPEN

BS-L4 RECLOSER OFF

BS-L4 RECLOSER ON

BS-L4 HOT LINE ORDER ON

BS-L4 HOT LINE ORDER OFF

BS-PCB78 RECLOSER OFF

BS-PCB78 RECLOSER ON

BS-L5 MOD97 CLOSE

BS-L5 MOD97 OPEN

BS-PCB92 BREAKER CLOSE

BS-PCB92 BREAKER OPEN

BS-L5 RECLOSER OFF

BS-L5 RECLOSER ON

BS-L5 HOT LINE ORDER ON

BS-L5 HOT LINE ORDER OFF

BS-PCB102 BREAKER CLOSE

BS-PCB102 BREAKER OPEN

BS-L6 MOD107 CLOSE

BS-L6 MOD107 OPEN

BS-L6 RECLOSER OFF

BS-L6 RECLOSER ON

BS-L6 HOT LINE ORDER ON

BS-L6 HOT LINE ORDER OFF

BS-PCB118 RECLOSER OFF

BS-PCB118 RECLOSER ON

BS-PCB112 BREAKER CLOSE

BS-PCB112 BREAKER OPEN

BS-PCB118 BREAKER CLOSE

BS-PCB118 BREAKER OPEN

BS-PCB78 HOT LINE ORDER ON

BS-PCB78 HOT LINE ORDER OFF

BS-PCB118 HOT LINE ORDER ON

BS-PCB118 HOT LINE ORDER OFF

BS-MOD MB1 CLOSE

BS-MOD MB1 OPEN

Switchyard Analog Points:

8 Channel Metering Input east bus (8 inputs) 8 Channel Meeting input switchyard (8 inputs) 8 Channel Metering Input west bus (8 inputs) 8 Channel Meeting input switchyard 2 (8 inputs) Station Service Digitial Inputs:

BS-STA. SERVICE BUS TIE BREAKER STATUS (52BT)

BS-STA. SERVICE UNIT A BREAKER STATUS (52GXA)

BS-STA. SERVICE UNIT B BREAKER STATUS (52GXB)

BS-STA. SERVICE UNIT A EMERGENCY STOP (5-1)

BS-STA. SERVICE BUS 1 GROUND (64B)

BS-STA. SERVICE UNIT A GEN. OVERCURRENT (51)

BS-STA. SERVICE UNIT A BEARING HIGH TEMP

BS-STA. SERVICE UNIT A BEARING LOW OIL LEVEL

BS-STA. SERVICE UNIT A THRUST BRG. COOLING WTR

BS-STA. SERVICE UNIT A OVERSPEED

BS-STA. SERVICE UNIT A RUN RELAY

BS-STA SERVICE UNIT A RELAY FAILURE

BS-STA SERVICE UNIT A UNDER/OVERVOLTAGE

BS-STA. SERVICE UNIT B EMERGENCY STOP (5-1)

BS-STA. SERVICE BUS 2 GROUND (64B)

BS-STA. SERVICE UNIT B GEN. OVERCURRENT (51)

BS-STA. SERVICE UNIT B BEARING HIGH TEMP

BS-STA. SERVICE UNIT B BEARING LOW OIL LEVEL

BS-STA. SERVICE UNIT B THRUST BRG. COOLING WTR

BS-STA. SERVICE UNIT B OVERSPEED

BS-STA. SERVICE UNIT B RUN RELAY

BS-STA SERVICE UNIT B RELAY FAILURE

BS-STA SERVICE UNIT B UNDER/OVERVOLTAGE

BS-STA-SERVICE BUS TIE RELAY FAILURE

BS-SYNCHRONIZER 1 FAILURE

BS-SYNCHRONIZER 2 FAILURE

BS OIL ROOM CO2 DISCHARGE

BS SMOKE ALARM

BS ESSENTIAL AC SUPPLY

BS SWITCHYARD DC BREAKER TRIP

BS DC BREAKER TRIP

BS AC FEEDER BREAKER TRIP

BS 161KV CABLE PRESSURE

BS 161KV CABLE OIL PUMP

BS BATTERY CHARGER #1

BS BATTERY CHARGER #2

BS POSITIVE BATTERY GROUND

BS NEGATIVE BATTERY GROUND

BS MAIN FREQUENCY RECORDER

BS DAM SUMP HIGH

BS STATION SUMPS HIGH

BS UPS FAIL

BS UPS BYPASS

BS UPS BATTERY LOW

BS UPS AC FAIL

BS UPS BATTERY CHARGER FAIL

BS FISHERMAN'S WARNING HORN

BS PAINT & GREASE ROOM CO2 DISCHARGE

BS-SS 24VDC PWR SUPPLY FAIL

BS ACB AIR SUPPLY LOW PRESSURE

BS ESSENTIAL AC INVERTER ALARM

BS-SEWAGE TANK

Station Service Digitial Outputs:

BS-STA. SERVICE UNIT A EMERGENCY STOP

BS-STA. SERVICE UNIT A PENSTOCK VALVE CLOSE

BS-STA. SERVICE UNIT A EMERGENCY STOP

BS-STA. SERVICE UNIT A PENSTOCK VALVE CLOSE

BS-FISHERMAN'S WARNING HORN INITIATE

Station Service Analog Inputs:

BS-SS GEN A KW

BS-SS GEN A FREQUENCY

BS-SS GEN A VOLTS

BS-SS GEN A AMPS

BS-SS GEN B KW

BS-SS GEN B FREQUENCY

BS-SS GEN B VOLTS

BS-SS GEN B AMPS

BS-SWYD BUS VOLTS

BS-SYSTEM FREQ.

BS-SS GEN A RPM

BS-SS GEN B RPM

BS AGC SIGNAL FROM SWPA

5.2 Documentation and Programming Work Group Instruction.

The Contractor shall furnish documentation in electronic format on the programming developed for this project. The documentation shall be sufficient for Government Test Engineers to setup, modify, and perform diagnostics on the programming developed by the Contractor. Any special macro's or other programs shall be furnished by the Contractor. The Contractor shall provide programming work group instructions along with educational material during the on-site visits for Government personnel on how to set up and use the contractors programs. Additional support may be requested as part of the off-site consulting hours. All passwords and necessary hardware to access all programs to view, modify, print, program changes, by government personnel shall be provided by the contractor/integrator. There shall be no portions of the software programs, computer operating systems, engineering systems that are unavailable to government personnel except original source code for the PCS7 software that is provided by Siemens.

5.3. CONTRACTOR MANAGEMENT REPORTING (CMR) The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report ALL Contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall completely fill in all the information in the format using the following web address https://Contractormanpower.army.pentagon.mil. The required information includes: (1) Contracting Office, Contracting Officer, Contracting Officer’s Technical Representative (COTR) or also know as the Contracting Officer’s Representative (COR); (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor's name, address, phone number, e-mail address, identity of Contractor employee entering data; (5) Estimated direct labor hours (including sub-Contractors); (6) Estimated direct labor dollars paid this reporting period (including sub-Contractors); (7) Total payments (including sub-Contractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each sub-Contractor if different); (9) Estimated data collection cost; (10) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the Contractor with its UIC for the purposes of reporting this information); (11) Locations where Contractor and sub-Contractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website); (12) Presence of deployment or contingency contract language; and (13) Number of Contractor and sub-Contractor employees deployed in theater this reporting period (by country). As part of its submission, the Contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

5.4. Cybersecurity Requirements:

5.4.1 Cybersecurity consists of ensuring the security posture of the components delivered by the Contractor are at an acceptable level. Cybersecurity will be done in accordance with DoD requirements as well as in accordance with all applicable current cybersecurity regulations, policies, and processes. Reference DoDI 8500.01 and DoDI 8510.01 for details. The Contractor shall assist the Information System Owner (ISO) by providing any applicable artifacts necessary for the ISO to obtain a System Authority to Operate (ATO) via the Risk Management Framework (RMF) process in relation to the Information Technology (IT) hardware (HW) and software (SW) the Contractor is providing per this contract. The Contractor shall provide patches for vulnerabilities (vendor specific as well as globally published vulnerabilities), adhere to Information Assurance Vulnerability Alerts (IAVAs), and adhere to Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) alerts and notifications for all IT HW and SW provided by the Contractor within 30 days of notification.

5.4.2 Secure Configurations of Computer Operating Systems (OS) and Network Devices: The OS and network devices shall be configured following the principle of least privilege and application separation as described below. The OS and network devices shall be configured per the latest Security Technical Implementation Guides (STIGs) as released by the Defense Information Security Agency (DISA) and install the most current security relevant software and firmware updates. The Contractor may utilize the USACE- provided Army Gold Master image for Windows based operating systems utilized in the control system.

5.4.3 All applicable STIGs shall be implemented on the system. Any deviations from the STIGs for operational requirements or are incompatible with the production operating environment shall be documented by the Contractor, including the reason why the STIG requirements cannot be met. The Contractor shall utilize the Security Configuration Automation Protocol (SCAP) tool, or similar scanning tool or a manual check, to scan the computers using the latest benchmarks released by DISA appropriate for the system and network devices provided. The scan results shall be imported into the DoD STIG Viewer or equivalent and the completed checklist shall be provided by the contractor to demonstrate the secure configuration of all devices.

5.4.4 Unnecessary Software and Services: The Contractor shall ensure that any unnecessary software not required for the operation and maintenance of the control system is removed from all computers on the system. Software related to games, entertainment, unnecessary diagnostic packages, etc. shall not be installed on the system computers. The Contractor shall remove or disable all services and ports on the supplied computers which are not required for normal, emergency, or troubleshooting operations. Unnecessary services on the automation hardware, such as web servers, shall be disabled in configuration when not required for normal or emergency operations or troubleshooting.

5.4.5 Complete Software Listing: The Contractor shall provide a comprehensive software listing for each computer on the control system. The listing shall include the software name, vendor, and version number at a minimum.

5.4.6 Complete Hardware Listing: The Contractor shall provide to the Government a complete listing of all hardware devices to be utilized on the control system. The listing shall include all PLCs and related components, computers, network devices, interface converters, and similar devices. The listing shall include the Manufacture, Model Number, Firmware Version Number (where applicable), and Installation Location at a minimum.

5.4.7 Ports, Protocols, and Services: The Contractor shall provide a comprehensive listing of the Ports, Protocols, and Services necessary for normal operations, emergency operations, and troubleshooting of the control system.

5.4.8 Default Passwords: The Contractor shall change any default passwords on the equipment provided under this contract, including any PLCs, HMI, and network devices. A comprehensive listing of the passwords required to properly operate, maintain, and troubleshoot the system shall be provided to the Government. If a default password that cannot be changed is present on any configurable device provided under this contract, it shall be disclosed to the Government in writing.

5.4.9 Principle of Least Privilege: The Contractor shall configure the system using the principle of least privilege, including operating system permissions, file access, user accounts, and application-to-application communications. The control system shall be configured using a role-based scheme so that normal operations occur using an Operator level account with minimum privileges required to operate the system. The Contractor shall document the minimum privileges required for the Operator level account. Administration-level (privileged access) accounts shall be required to perform any configuration changes on the system. All required service accounts should be created as normal users with no administrative permissions. Separate administration-level accounts shall be provided for each administrator on the system. Removable media devices and USB ports (with the exception of keyboard and mouse) shall be disabled for Operator level accounts. The availability of the USB ports and removable media devices shall be configurable using the accounts on the system. Unnecessary/unused accounts shall be removed from the control system. Any “guest-level” accounts that are created on the System by default shall be disabled.

5.4.10 Account Management: The Contractor shall provide a comprehensive Account Listing for each configurable device on the control system. This includes any application accounts, OS accounts, network device accounts, service accounts, or communications accounts. The listing shall provide the unique username and password for each account on each device on the system. The username and account information is sensitive and shall be protected by the Contractor. The listing shall be provided in encrypted form to the COR. Passphrases required to decrypt the data shall be provided to the COR in a separate communication.

5.4.11 Basic Input/output System (BIOS) protection: A protection mechanism shall be provided to prevent unwanted changes to the system BIOS for all devices on the system where feasible. A password meeting DISA STIG requirements shall be utilized. The passwords used for BIOS protection shall be provided to the Government to allow access by system engineering/administrative personnel after initial commissioning of the system.

5.4.12 Antivirus/Antimalware Software: The computers on the control system shall include most up to date DoD approved antivirus software with up to date signatures. The Contractor shall verify that the Antivirus/ antimalware software will not negatively affect the operation of the control system. Computers and servers being installed on the system shall be configured with up-to-date antivirus signatures, not older than 10 days, prior to deployment. Evidence of a clean scan shall be provided to the government prior to installing a computer onto the control system.

5.4.13 Logging and Auditing: The control system shall log critical events and operator actions related to the operation of the control system. The Log of operator actions shall not be accessible via any accounts on the system without privileged level access. The operations log shall include a time stamp, the control action taken, and the account via which the action was initiated. OS logging shall be configured per the STIG requirement without exception, including the specified minimum log sizes defined in the STIGs.

5.4.14 Communications: Communications using either the public switched telephone network, leased lines, or any wireless between the different locations and between different facilities on the same location shall be protected via 140-2 compliant encryption methods. Virtual Private Network IPSec tunnels shall be established between the different facilities using approved network devices to include all wireless devices. Certificates are the preferred method, passphrases and/or pre-shared keys utilized for encryption shall meet DoD minimum standards. Firewalls shall be provided to control communications between sites. The proposed network and wireless devices shall be Cisco components, or Government equivalent found on DISA’s approved product list (APL). Publically accessible DISA APL link: https://aplits.disa.mil/processAPList

5.4.15 Application Separation: The concept of application separation consists of the operating system on the primary partition of the hard drive. An application database shall be installed on a different partition. A web server shall be installed on a different partition. Web servers and database servers should not be installed on the same computer. In the case of virtual machines, the virtual machines would be separate computers and the communications path would be required to communicate to physical switch ports for each computer.

5.4.16 System Network Documentation: The Contractor shall provide a complete System Architecture Diagram to include all control system and maintenance components. The diagram must include labels of device type (e.g., workstation, server, PLC, etc.), manufacturer/model, operating system and version number. The Contractor shall provide a complete Network Diagram that shows all of the devices on the control network that communicate via TCP/IP protocol. Any VLAN segregation of the devices shall be indicated on the diagram. The Contractor shall provide a Data Flow Diagram that indicates the normal system communications among the devices on the network, including the ports and protocols utilized for communications. The diagrams shall be formatted in 11” X 17” sheets and provided electronically in Microsoft Visio or Micro station and Portable Document Format (PDF). All system data transferred to the Government shall be encrypted and password protected.

5.4.17 Control Device Code Protection: The Contractor shall configure and utilize the cyber security features available on the devices to be added to the control network.