B.08.03 Amendment 0001- W9127S21Q0070.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

Amendment 0001 incorporates industry RFIs and the Government's responses.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 6

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 07-Sep-2021

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street , County, State and Zip Code) X W9127S21Q0070

X 9B. DATED (SEE ITEM 11)

23-Aug-2021

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

07-Sep-2021

CODE

CONTRACTING DIVISION

USACE, LITTLE ROCK (W9127S)

700 W. CAPITOL AVE, RM 7315

LITTLE ROCK AR 72201-3225

W9127S 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W9127S21Q0070

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 08-Sep-2021 12:00 PM to 14-Sep-2021 12:00 PM.

TABLE OF CONTENTS

The Table of Contents has changed from:

Exhibit/Attachment Table of Contents

DOCUMENT TYPE DESCRIPTION PAGES DATE

Attachment 1 Performance Work

Statement

14 18-FEB-2021

Attachment 2 Brand Name J&A 2 15-AUG-2021 Attachment 3 Wage Determinations-

Arkansas, AR

15 21-JUL-2021

Attachment 4 Wage Determinations- Pope, AR

15 21-JUL-2021

to:

Exhibit/Attachment Table of Contents

DOCUMENT TYPE DESCRIPTION PAGES DATE

Attachment 1 Brand Name J&A 2 15-AUG-2021 Attachment 2 Wage Determinations-

Arkansas, AR

15 21-JUL-2021

Attachment 3 Wage Determinations- Pope, AR

15 21-JUL-2021

Attachment 4 Revised Performance Work Statement

14 07-SEP-2021

Attachment 5 TopPro- Dardanelle Gate Control System

35 30-AUG-2021

Attachment 6 TopPro- Sheet 2E006 1 30-AUG-2021 Attachment 7 Dardanelle Set Up 1 19-NOV-2020 Attachment 8 Montgomery Point Set Up 1 04-DEC-2020

The following have been added by full text:

RFI RESPONSES

1. Is the current iFix stand alone or a server/client system?

There is a stand-alone system at each location; data is sent to offsite location with no control capabilities.

2. Please provide the existing PLC layout drawings.

This has been provided alongside these RFI responses.

3. Must all HMI development be done on site?

Programming development may be performed off site, but all contact with the onsite SCADA system and PLC’s must be performed from an authorized USACE desktop or laptop.

4. Please provide serial numbers for existing iFix software to be upgraded.

Proficy HMI/SCADA iFIX 5.1

Dardanelle License 200096235 MPLD License 200175717

5. Is a site walk through scheduled? If not are contractors able to schedule one? POC to schedule if allowed?

There is no site visit scheduled at this time. One may be arranged by interested firms by contacting Aaron Turner, aaron.c.turner@usace.army.mil.

6. Please provide a list of hardware to be replaced and/or supplied.

The Corps will provide Both desktops; DELL OptiPlex 7080 loaded with AGM (Army Gold Master) versions of Windows 10 build 1909.

7. What is the communications protocol for the current Micrologix?

Communications at both locations is DH+ using 1784 PKTX cards that will be transferred to the new desktops and reused. Dardanelle also has a Kepware Modbus module for communications to the powerhouse. The powerhouse is Modbus master to provide turban flow to the lock SCADA system.

8. How many? And what model of Micrologix are currently on site?

There is no Micrologix; these locations have a PLC5 processor with remote rack.

9. Please confirm that the existing PLC functionality is to remain and only changes required to communicate with upgraded iFix will be required.

This is correct.

10. Will the government be installing the iFix software or the contractor?

The contractor will provide installation, in accordance with the Performance Work Statement.

11. Please provide the number of PCs with iFIX needing upgraded at each site.

One PC at each site requires upgrade.

12. Can you supply an existing network architecture drawing of both sites? If available, we would like a schematic showing all SCADA PCs and all PLC5-40’s and MicroLogix. We would like this schematic to answer the following questions:

How many PLC 5-40's and MicroLogix PLCs are there at each lock and dam?

Montgomery Point L&D has one PLC and Dardanelle L&D has two PLCs.

Does the existing control system currently use DH+ for all the PLC-5's on the network?

Yes DH+ is the communications for both locations through a 1784PKTX card in each desktop.

Dardanelle also has a connection to the powerhouse that is 485 Modbus (this is to exchange turban flow data from the PH to the Dam PLC. The Modbus connection is through the PLC not the desktop.

What model of MicroLogix is currently being used at each lock and dam?

MicroLogix is not used at these facilities.

13. What version of iFIX is the government requesting to upgrade to? AIG, Inc. assumes it is V6.1.

The Government is requesting upgrade to V6.1.

14. If the computers have the AGM image of windows10, as stated in the SOW, the contractor would not have permissions to adjust the windows registry to install the latest version of iFIX. Assistance from the government IT personnel will be required based on our past experience from a similar USARMY project we completed in 2019. Would Government IT personnel be able to assist if needed to adjust the permissions?

Contractor will be provided with administrative rights for the duration of the project. District ISSO and Branson Lab will also be available.

15. Does the original SCADA Software have Proficy Historian setup on it, or is this a requested upgrade to the current system?

Historian is already installed.

16. Regarding the GFE Computers, will they be set up to have local admin accounts for the contractor's use?

Knowing this in advance helps AIG consider the level of effort needed to meet Cyber Security requirements.

Contractor will have all administrative rights until the final acceptance.

17. Can a list of all computer stations be given for each location? (Montgomery Point L&D and Dardanelle L&D).

Preferable would be a Control System Architecture diagram showing all computes and PLC’s.

Dardanelle one desktop that communicates with two AB PLC5’s DH+ and MPLD has one desktop one PLC5 rack and three remote IO racks.

18. Will any upgrades be required or expected to each PLC? Can a list of PLCs be given for each site so that the number of HMI Topics can be estimated?

PLC’s may need firmware upgrades, but no programming changes are anticipated.

19. Will Remote Access (offsite) be allowed into any of the Computer workstations and/or PLCs?

No; remote access will not be allowed.

20. The current system communication appears to be AB Data Highway Plus which is an outdated system. Will this communication system be subject to any changes?

No changes to this system are anticipated.

21. Per section 5.4 Cyber Security will any additional IT infrastructure (hardware) be acquired to adhere with these standards listed in section 5.4?

No additional devices or appliances are anticipated. Cyber Security compliance will be verified by the

ISSO.

22. Per the solicitation, the contractor is required to provide the Allen Bradley communications card required for the Corps supplied PC. Is this correct?

The A&B 1784 communications cards currently in use will be reused in the new PCs.

23. How many pictures (HMI Screens) will need to be converted/upgraded to the new software version from Montgomery Point L&D?

Sixteen (16) will be upgraded.

24. How many pictures (HMI Screens) will need to be converted/upgraded to the new software version from Dardanelle L&D?

Twenty-five (25) will be upgraded.

25. How many tags are in the database at Montgomery Point L&D?

There are less than 100 tags in the database.

26. How many tags are in the database at Dardanelle L&D?

There are less than 100 tags in the database.

27. Will the upgraded SCADA systems need to support any other Industrial Control System protocols? (Ex. Modbus ethernet) The system(s) will need to support Modbus and OPC.

28. Will the new computers need to be joined to a domain or have users managed centrally? (ex. Microsoft Active Directory, Operating System user accounts setup on new Dell systems) These systems are stand-alone- no domain. All user accounts will be setup and maintained by the ISSO.

29. Does either site have a failover SCADA system?

No.

30. How many PLCs are at Montgomery Point L&D?

One.

31. How many PLCs are at Dardanelle L&D?

Two.

32. What are the specifications of the Dell T3620 computers provided by the government?

The Government will provide Dell OptiPlex 7080s.

33. Will the government allow any portion of the contract to be fulfilled remotely at the Contractor office?

Program development and testing may be performed off site; desktops will need to be scanned by the district ISSO before placing into service.

34. If yes, will the government provide remote access through VPN or another method?

No; remote access will not be allowed.

35. Contract Reference:

Part 5 Specific Tasks:

5.4 Cyber Security

Description:

The Contractor shall provide system testing and minor programming changes as necessary to comply with the Risk Management Framework for Information Systems and Organizations Requirements per NIST SP 800-37r2 and AR 25-2.

Verified by UCIC ISSO-R.

Question:

The Contractor shall provide system testing and minor programming changes as necessary to comply with the Risk Management Framework for Information Systems and Organizations Requirements per NIST SP 800-37r2 and AR 25-2. Verified by

UCIC ISSO-R.

The system is in compliance with the security standards for the current operating system using the appropriate DISA STIG available. An upgrade to the Operating System will require additional hardening procedures be completed using the DISA STIGs available for the OS on any new workstations.

Occasionally registry settings and group/local policy effect the operation functionality of SCADA applications; 'minor testing' requires the integrator to determine what setting, if any, prohibit the application from performing its specified function. The hardening process should be started before the application is installed but can be done at any time.

36. Contract Reference:

TE 1 (pg42): PRS # 2 Description:

The contractor shall demonstrate compliance with Cyber Security Requirements. Standard: SCAP Compliance Checker Scan completed, and corrections installed and tested.

Question:

Who is required to complete this scan

– Gov or Contractor? Can you provide further guidance on how to "demonstrate compliance"?

Compliance is demonstrated through an automated Security Compliance Checker (SCC) tool that is released by DISA. This tool will be provided for the contractor. Both the raw data and a completed checklist are artifacts of compliance.

37. Contract Reference: Description: Question:

TE 2 (pg43) & Part 2 Definitions and Acronyms (pg 35) 2.1.14

CONTRACTORS EXPERIENCE AND

CERTIFICATION. The Contractor shall submit copies of previous experience documenting requirements of paragraph

1.6.8 with their proposal. Include dates of experience, location of work, name of hydroelectric facilities, and name and phone number. Failure to document experience shall result in rejection of the contractor’s proposal.

Past Experience and License – lists a requirement to submit Past experience and License per paragraph 1.6.8 with the Contractor’s bid proposal, but the PWS only goes to paragraph 1.4.12.

There is no 1.6.8. Please clarify if Past performance and license is required and details of the requirement.

Past Performance documentation is NOT required. This section in the PWS will be revised.

38. Contract Reference:

Part 5 Specific Tasks:

5.1 Hardware &

Software Upgrades

Description:

Refer to specifications and drawings for interfaces and features; however, some changes have been made since the original development and the Contractor shall maintain the changes with the new system.

Question:

Please provide referenced drawings and specifications.

Physical and logical drawings and updated hardware and software lists will be provided by the contractor.

There are templates for diagrams and HW/SW lists which will be provided to the contractor upon successful bid.

39. Contract Reference:

Part 6 Applicable Publications

Description:

6.1 aEM-385-1-1. Corps of Engineers Safety and Health Requirements (2008)

Question:

The publication website lists the 2014 version. Which version should be used (2008 or 2014)?

Please use the 2014 version. This section in the PWS will be revised.

40. Contract Reference:

General Description:

Question:

Please provide the required training list. i.e. Safety training, cybersecurity training, any site specific access training

Cybersecurity Fundamentals training and a signed AUP.

41. Contract Reference:

Will the workstations be installed in the same location as the existing workstations?

Yes.

42. Contract Reference:

Will new cabling need to be ran?

New cabling is not required.

(End of Summary of Changes)