W912NW-17-T-0067-0001.pdf

CORPUS CHRISTI ARMY DEPOT

ATTN: NOELIA LELAURIN

(361) 961-3749

308 CRECY STREET, MAIL STOP 18

CORPUS CHRISTI TX 78419-5260

W45N7V617500Y9

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to remove Appendix D "Safety" and all references to Appendix D "Safety" in the Statement of Work

(SOW). Appendix D is renamed to "Security Requirements for All Contracts Performed at Corpus Christi Army Depot." All other terms and conditions remain unchanged.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 23

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 15-Aug-2017

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912NW-17-T-0067

X 9B. DATED (SEE ITEM 11)

10-Aug-2017

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

15-Aug-2017

CODE

CONTRACTING OFFICE AT CCAD

308 CRECY STREET

MAIL STOP 18

CORPUS CHRISTI TX 78419-5260

W912NW 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE W912NW

FACILITY CODECODE

EMAIL:TEL:

W912NW-17-T-0067

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been modified:

SOW

Statement of Work

Programmable Logic Controllers (PLC) Upgrade

1.0 INDEX TO STATEMENT OF WORK

SECTION/SUBJECT:

1.0 Index to Statement of Work

2.0 Project Scope and Description

3.0 Referenced Documents:

4.0 Definitions/Acronyms

5.0 Background

6.0 Work Requirements

7.0 Responsibilities

8.0 Data Rights

9.0 Shipment

10.0 Inspection

10.0 Acceptance

10.0 Physical Security

ADDENDUM:

APPENDIX A: Plating Line Upgrade Parts and Pictures

APPENDIX B: Critical Systems run by PLC

APPENDIX C: PLC Location Support

APPENDIX D: Security Requirements for All Contracts Performed at Corpus Christi Army Depot

2.0 PROJECT SCOPE AND DESCRIPTION:

The Corpus Christi Army Depot (CCAD) currently has nineteen (19) PLCs, which monitor many systems to include ovens, rectifiers, boilers, chillers, scrubbers, and cyanide alarms. The PLC system monitors operating parameters such as temperature, amperage, voltage, differential pressure, and air quality to ensure the successful plating of rotary wing components and the safety of Depot Employees.

The Contractor shall provide 19 PLC upgrades/replacement and data point address breakdown. The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to accomplish the upgrade and migration of the PLCs ladder logic from the Allen Bradley PLC-5 format to the format utilized by the replacement Allen Bradley PLCs.

The Contractor shall remove the existing legacy PLCs from each plating line control box, install the new upgrade version PLCs into each existing plating line control box (including the capability to power the PLCs on and off), reconnect all Input/Output (I/O) wiring, complete functionality testing of the newly installed PLCs and perform a satisfactory plating cycle. Plating lines shall be operated one at a time, and the order in which the plating lines shall be operated will be determined by the Government. The legacy PLCs are Government property and shall be surrendered to the Government upon removal. The Contractor shall provide necessary support to the Government during the programming/commissioning of the Supervisory Control and Data Acquisition (SCADA) system. Upon the commission of each line, the Contractor shall provide the plating line operator all required details and data within the appropriate SCADA pages. The task shall not be certified as complete until the PLCs/plating lines and system are upgraded and restored to full, operational status.

3.0 REFERENCE DOCUMENTS:

National Institute of Standards and Technology (NIST) SP 800-82 Revision 1 – “Guide to Industrial Control

Systems (ICS) Security,” dated May 2013.

4.0 DEFINITIONS/ACRONYMS

4.1 DEFINITIONS

4.1.1 Contractor. A supplier or vendor having a contract to provide specific supplies or service to the Government.

The term used in this contract refers to the prime.

4.1.2 Contracting Officer (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

4.1.3 Contracting Officer Representative (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

4.1.4 Defective Service. A service output that does not meet the standard of performance associated with the SOW.

4.1.5 Deliverables. Anything that can be physically delivered but may include non-physical things such as meeting minutes.

4.1.6 Physical Security. Actions that prevent the loss or damage of Government property.

4.1.7 Quality Control (QA). All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

4.1.8 QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

4.1.9 Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

4.1.10 Work Day. The number of hours per day the Contractor provides services in accordance with (IAW) the contract.

4.1.11 Work Week. Is defined as Monday through Friday, unless specified otherwise.

4.2 ACRONYMS

AR Army Regulation

CAC Common Access Card

CCAD Corpus Christi Army Depot

COR Contracting Officer Representative

DA Department of the Army

DFARS Defense Federal Acquisition Regulation Supplement

DLA Defense Logistics Agency

DOD Department of Defense

ETC Etcetera

FAR Federal Acquisition Regulation

IA Information Assurance

I/O Input/Output

KO Contracting Officer

NASCC Naval Air Station Corpus Christi

NIC Network Interface Card

PLC Programmable Logic Controller

PM Program Manager

POC Point of Contact

QA Quality Assurance

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Plan

SAAR System Authorization Access Request

SCADA Supervisory Control and Data Acquisition

SOP Standard Operating Procedure

SOW Statement of Work

SSHO Site Safety and Health Officer

SOH Safety and Occupational Health

TCP/IP Transmission Control Protocol/Internet Protocol

5.0 BACKGROUND: The SCADA system utilizes the PLC system for gathering information from various sensors, motors, meters and other devices which perform mathematical, analytical and logical functions that are sent to the

SCADA system for display of values, alarms and specific control of the process. CCAD intends to upgrade the 19

PLCs to the latest version.

6.0 WORK REQUIREMENTS

6.1 GENERAL DESCRIPTION: The Contractor shall provide an upgrade to the existing 19 PLCs located at

CCAD, Corpus Christi, Texas. PLCs shall be pre-programmed at the Contractor’s facility prior to installation onsite at the Government’s facility. The remainder of the required tasks under this contract shall be performed at the

Corpus Christi Army Depot. The Contractor shall provide qualified technician(s) to perform under this contract for services to upgrade, install, move, and/or remove Government owned PLC equipment as required in order to complete the PLC upgrade. Performance shall include supplying necessary back plates, cables, and other associated equipment and material for complete “turn-key” installations. The technician shall perform troubleshooting and shall provide recommendations for improvement on control systems as requested. Upon completion and prior to requesting final payment, the technician shall provide the COR with electronic copies of updated ladder logic to include comments to identify specific logic and its function. The Contractor shall ensure all personnel are properly trained, licensed, and/or authorized to perform all tasks within the scope of this contract. The Contractor shall provide documentation, credentials or other proof when requested. The Contractor shall provide transportation to and from the Government facility. The Contractor shall provide all necessary parts, tools, fixtures, engineering support, labor, expendable items, and equipment to assemble, install and commission all 19 PLCs. At completion of the PLCs upgrade, the Contractor shall ensure that the completed product provides the Government with a “turnkey solution” that satisfies technical oversight during Government on-site testing.

6.2 WORK AREA FLOOR PLAN: The COR does not have access to existing floor plans for each work area concerned, it is recommended that prior to installation day a site visit be arranged to investigate working space.

6.3 UPGRADE REQUIREMENTS: Upgrade 19 PLCs. Upgrade includes a data point address breakdown, which shall be provided directly to the COR. The Contractor shall remove the legacy PLCs and install the upgraded PLCs one at a time, and connect all inputs and outputs (I/O) to the new PLCs as well as test and commission the plating line PLCs. The legacy PLCs are Government property and shall be surrendered to the Government upon removal.

The Contractor shall provide necessary support to the Government during the programming and commissioning of

Citect/SCADA. Upon the commission of each line, the Contractor shall provide the plating line operator all required details and data within the appropriate SCADA pages. During the upgrade process, the Contractor shall provide an upgrade status report on a monthly basis via email to the COR.

6.4 WORKMANSHIP REQUIREMENTS: All cables/connectors and components shall be secured in such a fashion not to come loose with time and leaving no loose or dangling objects to cause safety concerns.

6.5 DOWN EQUIPMENT SCHEDULE: Only one PLC at a time shall be taken off line to complete this upgrade and only when the operators have agreed. The work area supervisors will be forewarned of Contractor’s schedule and all effort shall be made to work with the installation team; however, CCAD’s production will take precedence over this upgrade.

6.6 PROGRAM UPGRADE/MIGRATION: The Contractor shall provide the PLC program version that is current at the time of contract award. The Contractor shall, at the Contractor facility, perform the upgrade/migrate of the program to the new model, Government provided Allen Bradley PLC. The Government PLC program is proprietary and shall not be shared, duplicated (except for migration purposes) or copied in any part.

6.7 POINT BREAKDOWN: The Contractor shall provide a new data point address breakdown via email to the

COR by completion of the migration in order to allow Government personnel to effect changes to the SCADA program simultaneously with updated PLC installation.

6.8 CONFIGURATION MANAGEMENT: The configuration and installation of the PLC upgrade will be reviewed and inspected by the COR. Any major (defined as deviating from Technical Description, this does not include changes in dimension or user interface, only in functionality) deviations or changes will be approved by the COR and communicated to the KO. If changes are identified and requested by the Contractor, no changes or deviations will be implemented without prior authorization from the KO.

6.9 REMOVAL: The Contractor shall remove the PLC-5 controller, power supply, I/O cards and PLC-5 rack from each control box. The Contractor shall note each wire location for reconnection to the newly installed PLCs. The blue DH+ lines shall be removed completely, with the exception of lines C, F, J, L, N, R and T, which are main control PLCs that communicate to the SCADA server on a token ring network that shall remain operational until all lines are communicating via Ethernet. During the removal of these line PLCs, the blue DH+ Token Ring lines shall be relocated to an empty terminal block pair in order to maintain the Token Ring Connectivity. The legacy PLCs are Government property and will be surrendered to the Government.

6.10 INSTALLATION: The Contractor shall install new PLC racks, along with modules required for operation

IAW the SOW. The Contractor shall provide and install a rail mounted on/off switch to terminate power to the

PLC. The Contractor shall provide “turn-key solution” that shall meet or exceed technical oversight requirements during Government on-site testing.

6.11 CABLING/WIRING: The Contractor shall provide machine tool cabling and wiring in compliance with the requirements of the National Electric Code (NEC) for interconnecting electrical cable, for attachment of wires and leads, and shall include all cabling, wiring, functional boxes, and connectors necessary to interconnect internal components in their operating position. Cabling shall also be provided by Contractor between components and entry panels, including connectors. Sufficient cable length and test cables and extender cords shall be provided for any mounted equipment to permit operation and maintenance. Each electrical cable harness shall contain a minimum of

10% additional cabling to allow for future cable breakages.

6.12 CONNECTIONS: The Contractor shall provide jumper wires to reconnect all I/O connections and shall ensure conductivity that provides the same level or better of operation as with the legacy equipment. Strict cable management shall be used in order to provide organization and a clean, professional appearance. The COR will inspect and approval all cable management.

6.13 TESTING: The Contractor shall conduct functional testing of the installed PLCs to ensure all aspects of the

PLC program are fully functional and operational on each affected PLC line.

6.14 COMMISSIONING: The Contractor shall notify the COR once the self-testing phase is complete. Designated

CCAD plating operators and COR will witness and certify a satisfactory functional test prior to sign off.

6.15 SOFTWARE: The Contractor shall provide all software that is required in order to access the PLC system. The

Contractor shall make all required adjustments to the program with activation codes along with a digital copy of wiring diagrams for all I/O that were installed in this process.

6.16 QUALITY ASSURANCE PROVISIONS:

6.16.1 Inspection: The Government will conduct a User Test on the Hardware and Software configuration supplied by the Contractor. Faults encountered during the User Tests shall be reported individually using a Project Fault

Report form. To the greatest extent possible, User Testing shall continue. A Test Fault Log will be maintained by

Government, summarizing the status of all faults.

6.16.2 Acceptance at Destination: Government is responsible for conducting acceptance IAW the Terms of

Acceptance specified.

6.16.2.1 Acceptor: The COR will meet with the Contractor’s Program Manager (PM) for the resolutions of all issues. It will be the responsibility of the COR to accept deliverables. Government will provide, through the COR, a single consolidated response to any deliverable, Change Request, Decision Request, review or prototype demonstration.

6.16.2.2 Acceptance of Deliverables: Contractor shall be responsible for preparing the deliverables as identified in the Deliverables section. A deliverable will be accepted by Government if:

a. It satisfies the Scope of Work described in this document, and it contains the content described in the

Deliverables section; or

b. The acceptance time period expires without written notification from Government; or

c. Government signs the Acceptance Document.

6.17 DELIVERABLES: The following table provides a list of the deliverables required, per this SOW.

Deliverable Frequency Number of

Copies

Medium/Fo rmat Submit To

Upgrade Status Report (Paragraph 6.3) Monthly One (1) Electronic

(Email)

COR

PLC Programming (descriptive comments) (Paragraph 6.6)

During final line inspection for each plating line

One (1)

Electronic COR

Data Point Address Breakdown

(Paragraph 6.7)

Completion of the migration One (1)

Electronic

(Email)

COR

All Software utilized in accessing PLC program, including licensing and activation codes (Paragraph 6.15)

During final line inspection, and as required by the COR

Wiring Diagram (Paragraph 6.15)

During final line inspection for each plating line

7.0 RESPONSIBILITES:

7.1 GOVERNMENT RESPONSIBILITIES:

7.1.1 COR: The Government is responsible for appointing a COR, who will be identified by separate letter. The

COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract:

perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of Government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

7.1.2 The Government will work with the Contractor to establish an installation schedule.

7.1.3 The Government will conduct a User Test on the Hardware and Software configuration supplied by the

Contractor.

7.1.4 The Government is responsible for inspection and acceptance.

7.2 CONTRACTOR RESPONSIBILITIES:

7.2.1 The Contractor shall be in compliance with all referenced regulations, documents, standards, codes and specifications.

7.2.2 Contractor shall appoint a Program Manager (PM) to manage the internal requirements and serve as a focused point of contact for this effort.

7.2.3 The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to accomplish the upgrade and migration of the PLCs.

7.2.4 The Contractor shall surrendered the legacy PLCs to the Government upon removal.

8.0 POST AWARD MEETING: A Post Contract Award Meeting shall be held to convene the Contractor’s Upgrade and Installation team with CCAD and review the project. This meeting can occur via teleconference or in person at

CCAD. The idea is to engage both parties to provide input and to help manage expectations. The SOW shall be used as the guide for the discussion. The Contractor shall provide estimated delivery date for all materials and parts required for the PLC upgrade and a proposed timeline for the PLC upgrade project from commencement to completion.

9.0 WORK SCHEDULE: The Contractor shall provide services between the hours of 6:00 AM- 3:00 PM Monday thru Friday, except US Holidays or when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings. For other than firm fixed price contracts, the Contractor shall not be reimbursed when the Government facility is closed for the above reasons. The Contractor shall maintain at all times an adequate work force for the uninterrupted performance of all tasks defined within this SOW when the Government facility/installation is not closed."

9.0 DATA RIGHTS: The Government has unlimited rights to all documents/material produced under this contract.

All documents and materials, to include the source codes of any software, produced under this contract will be

Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the

Contractor without written permission of the KO. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other

Government rights.

10.0 PHYSICAL SECURITY: The Contractor shall be responsible for safeguarding all Government provided information provided for Contractor use. Contractor shall adhere to all security requirements applicable with this contracted effort, Appendix D, “Security Requirements for All Contracts Performed at Corpus Christi Army Depot.”

APPENDIX A: PLATING LINE UPGRADE PARTS

1768/1769 COMPACTLOGIX SYSTEM GROUP

CompactLogix Parts List Totals QTY

1769-PA4 Power Supply 120/240 VAC Input 4A @ 5VDC, @A @ 24VDC 9

1769-IA16 16 Point 120 VAC Input Module 28

1769-OA16 16 Point 120/240 VAC Output Module 23

1769-OB16 16 Point 24 VDC Sourcing Output Module 14

1769-IR6 6 Channel RTD/Resistance Input Module 16

1769-IF8 8 Channel Alalog Input Module 9

1769-L33ER CompactLogix Controller 9

1769-ECR Right End Cap/Terminator 9

COMPACTLOGIX PARTS BY LINE/PLC

1768/1769 COMPACTLOGIX SYSTEM GROUP

Line K PLC 1977 QTY

1 1769-PA4 Power Supply 120/240 VAC Input 4A @ 5VDC, @A @ 24VDC 1

2 1769-IA16 16 Point 120 VAC Input Module 2

3 1769-OA16 16 Point 120/240 VAC Output Module 2

4 1769-IR6 6 Channel RTD/Resistance Input Module 2

5 1769-L33ER CompactLogix Controller 1

6 1769-ECR Right End Cap/Terminator 1

Line L PLC 1978

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 2

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 2

6 1769-L33ER CompactLogix Controller 1

7 1769-ECR Right End Cap/Terminator 1

Line M PLC 1979

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 3

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 1

6 1769-IF8 8 Channel Alalog Input Module 1

7 1769-L33ER CompactLogix Controller 1

8 1769-ECR Right End Cap/Terminator 1

Line N PLC 1980

2 1769-IA16 16 Point 120 VAC Input Module 4

3 1769-OA16 16 Point 120/240 VAC Output Module 4

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 2

6 1769-IF8 8 Channel Alalog Input Module 4

Line P PLC 1981

2 1769-IA16 16 Point 120 VAC Input Module 2

3 1769-OA16 16 Point 120/240 VAC Output Module 2

4 1769-IR6 6 Channel RTD/Resistance Input Module 2

5 1769-IF8 8 Channel Alalog Input Module 1

Line Q PLC 1982

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 2

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 2

Line R PLC 1983

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 3

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 2

6 1769-IF8 8 Channel Alalog Input Module 2

Line S PLC 1984

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 2

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 1

Line T PLC 1985

2 1769-IA16 16 Point 120 VAC Input Module 3

3 1769-OA16 16 Point 120/240 VAC Output Module 3

4 1769-OB16 16 Point 24 VDC Sourcing Output Module 2

5 1769-IR6 6 Channel RTD/Resistance Input Module 2

6 1769-IF8 8 Channel Alalog Input Module 1

APPENDIX B: CRITICAL SYSTEMS RUN BY PLC

Engine Test Cells - no engines could receive final testing.

Transmission Test Cells - no transmissions could receive final testing.

Water Treatment Facilities - no Reverse Osmosis (RO) or De-Ionized (DI) water could be produced, utilized in many processes at CCAD.

Engine Cleaning Lines - no component cleaning as per the Depot Maintenance Work Requirement (DMWR).

Plating Lines - no component could be coated with finial plate, an essential step in the refurbishment of helicopter components.

Cooling Towers - chemical content of cooling water would have to be manually maintained, overburdening the water treatment branch.

Shot Peen - unable to complete this mandatory step in refurbishment of all aircraft components (as per the

DMWRs).

Air Scrubbers - air purification systems in Bldg. 340 would be unable to operate as required by Environmental

Protection Agency (EPA), Occupational Safety and Health Administration (OSHA) and our own DMWRs.

APPENDIX C: PLC LOCATION SUPPORT

Ovens Computer Bldg 340 2nd floor

Team Lead Monitor Bldg 340 1st floor wastewater area

Building 340 Plating

Line Monitors

Computer ABC Bldg 340 Line A 2nd floor Black Oxide

Computer DEF Bldg 340 Line D 2nd floor

Titanium Anodize

Computer GH Bldg 340 Line G 2nd floor

Metal Strip

Computer JK Bldg 340 Line J 2nd floor

Watts Sulfamate Nickel

Computer LMN Bldg 340 Line L 2nd floor

Preservation & Corrosion

Treat

Computer PQR Bldg 340 Line P 2nd floor

Chrome Strip

T-Line Computer Bldg 340 Line T 2nd

Alodine & Anodize

Computer ST Bldg 340 Line S 2nd floor

Cadmium Strip

CCADPRK2920 Bldg 340 2nd floor

Line 100 PLC Bldg 8 Cleaning Shop

Line 100 Computer

Bldg 8 Cleaning Shop

Line 100 SICK (Laser

Sighting System)

Bldg 8 Cleaning Shop

Line 200 PLC Bldg 8 Cleaning Shop

Line 200 Computer Bldg 8 Cleaning Shop

Line 200 SICK (Laser

Sighting System)

Bldg 8 Cleaning Shop

Line 300-400 PLC Bldg 8 Cleaning Shop

Line 300-400

Computer

Bldg 8 Cleaning Shop

Line 300-400 SICK

(Laser Sighting

System)

Bldg 8 Cleaning Shop

Line 500 PLC Bldg 8 Cleaning Shop

Line 500 Computer Bldg 8 Cleaning Shop

Line 500 SICK (Laser

Sighting System)

Bldg 8 Cleaning Shop

AA2 Bldg 340

AA1 Bldg 340

AA3 Bldg 340

AA4 Bldg 340

AA5 Bldg 340

AA6 Bldg 340

AA7 Bldg 340

CR1 Bldg 340

CR2 Bldg 340

CR3 Bldg 340

CR3 PanelView Bldg 340

CN1 Bldg 340

CN2 Bldg 340

MR1 Mech Room 1 near T700

Engine Assembly area

B42 Active

MR4 Mess 17?

MR5 Bld 1828 A2 Active

MR6 Trans Shop Under Mezz 27 C30 Active

MR8 Bld 1727

MR9 Site 2 C50 Active

RWA

MR95 Composite Panel Shop second floor

B16 Active

Eng TC 3 A48 Active

Eng TC 4 B2 Active

Eng TC 5 B4 Active

Eng TC 9 B8 Active

Eng TC 10 B15 Active

Eng TC 11 B14 Active

Eng TC 13 B14 Active

Eng TC 14 B15 Active

23 Eng TC 15 & 16 Engine Test Cell Roof.

Network Connection outside

B4 Active

0 Hydraulics Inside Mech Room in

Hydralices Shop

C46 Active

0 Heat Treatment Heat Treat Area next to foundary

B38 Active

0 XMSN Outside of transmissions

0 Whirl Tower Bld 49

CCADWKG1795IC Lyn's Laptop Industrial Office

0 (RWA) Waste

Treatment Plant

Bld 49

Comp DI controller South Side of Main

Assembly Line Buidling 8

Waste Tank PLC Bldg 340 1st floor next to waste tanks

Modbus Bridge to

Watlow Controllers

Bldg 340 2nd floor ovens area

Ovens PLC Bldg 340 Ovens 2nd floor

MCC PLC Bldg 340 1st floor

Batch Treatment Bldg 340 1st floor wastewater area

CCAD_B340_BWT

Comp RO controller South Side of Main

Assembly Line Buidling 8

Plastic Blast Booth

PSA Hanger

40HP Dust Collector 340 North Side

Control Logix Bldg 340 2nd Floor computer

Room

20HP Dust Collector 340 North Side

Vapor Degreasor Bldg 8 Near Gold Room

NDT Conveyor

System PLC

NDT Shop across from

Shotpeen

NDT Conveyor

System Panel View

NDT Shop across from

Shotpeen

Flow_meter outside fuel cntl

Vapor Degreasor 340 Second Floor

Vapor Degreasor Engine Cleaning Shop

Water Treatment

Recycle

Bldg 340 2nd floor Waste

Treatment Area

CCADH2O

Water Treatment

Recycle

Bldg 340 2nd floor Waste

Treatment Area

Bldg 8 MR1 Nalco

9300 Rades PSA Hanger Plastic Blast

Booth

CCADWKG2467IC Secondary

SCADA/PLC Laptop

Industustrial Automation

Shop

Bldg 340 Line R 2nd

Cadmium Plate

Bldg 340 Line Q 2nd floor

Dichromate

Line PQR Supporting PLC

Bldg 340 Line N 2nd floor

Chrome Plate

Bldg 340 Line M 2nd floor

Zincate

Line MN Supporting PLC

Bldg 340 Line k 2nd floor

Wax

Line KL Supporting PLC

Bldg 340 Line H 2nd floor

Silver & Copper

Line GHJ Supporting PLC

Bldg 340 Line F 2nd

Electrolass Nickel

Bldg 340 Line E 2nd floor

Nital Etch

Line DEF Supporting PLC

Bldg 340 Line C 2nd floor

Acid & Caustics

Bldg 340 Line B

2nd floor

Phosphate

Line ABC Supporting PLC

CCADA0SCADA0 SCADA Server Bldg

Bldg 340 2nd Floor computer

Room

CCADA0SCADA1 SCADA Server Bldg 8 site 1

Site 1

Engine Cleaning Shop

Server

JO1755 Site 1

CCADNBM2188 Carter Aimes Site 1

Temp Computer

USB Hub

Bldg 1828 Bearing

APPENDIX D: Security Requirements for All Contracts Performed at Corpus Christi Army Depot

CAO: April 2017

This document is a brief overview of rules and regulations of Naval Air Station Corpus Christi (NASCC) and

Corpus Christi Army Depot (CCAD). It is not intended to be all-inclusive or cover all contingencies.

Direct specific security requirements questions to the following numbers:

CCAD: (361) 961-3313

NASCC: (361) 961-2480

Regulations:

Army Directive 2014–05 (or its successor) Policy and Implementation Procedures for Common Access Card

Credentialing and Installation Access for Uncleared Contractors

AR 25-1, Army Knowledge Management and Information Technology AR 25-2, Information Assurance

AR 25-55, The Department of the Army Freedom of Information Act AR 70-31, Standards for Technical Reporting

AR 190-13, Department of the Army Physical Security Program AR 360-1, The Army Public Affairs Program

AR 380-5, Department of the Army Information Security Program

AR 380-10, Foreign Disclosure and Contact with Foreign Representatives AR 380-49, Industrial Security Program

AR 380-67, Personnel Security (PERSEC) AR 530-1, Operations Security (OPSEC)

AR 530-1, AMC Supp Operations Security (OPSEC) AR 530-1, CCAD Plan Operations Security (OPSEC) AMC-R

525-13, AMC Force Protection Program

DoD 5220.22-M National Industrial Security Program Operating Manual DoD Directives 5230.24, Distribution

Statements on Technical Documents

DoD Directives 5230.25, Withholding of Unclassified Technical Data from Public Disclosure DoD Regulation

5200.2-R Personnel Security Program

DoD 5400.11-R, Department of Defense Privacy Program UFC 4-010-01 9 February 2012 Change 1, 1 October

DoD MINIMUM ANTITERRORISM STANDARDS FOR BUILDINGS UNIFIED FACILITIES CRITERIA

(UFC)

DoDI 1000.13, Identification (ID) Cards for Members of the Uniformed Services, Their Dependents, and other

Eligible Individuals

DoDM 1000.13, Volume 1, DoD Identification (ID) Cards: ID Card Life-Cycle DoDI 5200.02 DoD Personnel

Security Program

DoDM 5200.02 Procedures for the DoD Personnel Security Program

U.S. Office of Personnel Management Memorandum, "Final Credentialing Standards for Issuing Personal Identity

Verification Cards under HSPD-12," July 31, 2008Federal Acquisition Regulation (FAR), March 2005

1. Conduct and Behavior: IAW DoD Directive 5200.8, “Security of DoD Installations and Resources”, the NAS commander has broad authority to remove or exclude any person or persons from the military installation to protect personnel and property, to maintain good order and discipline, and to ensure the uninterrupted and successful performance of the installations mission. In the exercise of this authority, the commander may refuse to grant entry or may bar Contractor employees. Refusal of entry or barment of any employee does not relieve the Contractor of the responsibility to continue performance under this contract.

1.1. All personnel entering and working at CCAD are subject to all rules, regulations and applicable laws. All personnel and their effects are subject to search, to include vehicles and company belongings.

1.2. No person shall willfully fail or refuse to comply with lawful orders or direction of any civilian or military security police officer.

1.3. The Contractor shall not employ persons for work on this contract if such employees are identified to the

Contractor by the Government as a potential threat to the health, safety, security, general well-being or operational mission of the installation and its population. Disrespectful behavior, failure to obey orders or regulations, fighting, horseplay, stealing, illegal use of drugs (using/transporting/selling), consuming or being under the influence of alcohol, or being in the possession of illegal weapons are prohibited and subject to appropriate penalties. This may include being detained, banned from entering the Government facility, or remanded to civilian authorities.

1.4. All Contractor personnel will limit their travel on the installation only to specific areas required for performance of the contract, specified break and meal areas, or in travel directly to and from these locations. Employees found on the installation away from officially identified areas may be detained and/or debarred from the installation.

1.5. Subcontracts; if the Contractor enters into a Subcontractor arrangement with another Contractor, the prime

Contractor is responsible for Subcontractor performance and compliance. The prime Contractor must provide a copy of the security requirements to the subcontractor. The contracting officer must ensure any questions of adequacy of the Subcontractor are resolved to the mutual satisfaction of the prime Contractor, Subcontractor, security, and

CCAD commander.

1.6. All prospective government and contractor employees are subject to a check of their criminal history prior to being granted access to CCAD. Adverse or derogatory information revealed by these checks, or failure to provide full disclosure, may result in denial of access.

2. Support:

2.1 Security support provided by CCAD to the Contractor includes (if applicable) storage containers for classified information/material, use of base destruction facilities, classified reproduction facilities, use of base classified mail services, security badging, investigation of security incidents, base traffic regulations, use of security forms, and conducting inspections required by DoD 5220.22-R “Industrial Security Regulation”, Army Instruction 380-49

“Industrial Security Program”, AR 380-5 “Department of Army Information Security Program”, and AR 25-2

“Information Assurance” and others as required or deemed necessary by the Government.

2.2 Security support requiring joint Army and Contractor coordination includes packaging classified information, mailing and receiving classified materials, implementing emergency procedures for protection of classified information, security checks, and internal security controls for protection of classified material, sensitive material, and high value pilfer able property.

3. Security Investigation Requirements:

3.1. Investigation requirements including IT level and CAC requirements should be clearly indicated in the contract and Performance Work Statement (PWS) as prescribed in paragraph 4.1303, of the FAR:

Personal Identity Verification of Contractor Personnel

(a) The Contractor shall comply with agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget (OMB) guidance M-05-24 and Federal Information Processing Standards Publication (FIPS PUB) Number 201.

(b) The Contractor shall account for all forms of Government-provided identification issued to the Contractor employees in connection with performance under this contract. The Contractor shall return such identification to the issuing agency at the earliest of any of the following, unless otherwise determined by the Government:

(1) When no longer needed for contract performance.

(2) Upon completion of the Contractor employee’s employment.

(3) Upon contract completion or termination.

(c) The Contracting Officer may delay final payment under a contract if the Contractor fails to comply with these requirements.

(d) The Contractor shall insert the substance of this clause, including this paragraph (d), in all subcontracts when the subcontractor’s employees are required to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system. It shall be the responsibility of the prime Contractor to return such identification to the issuing agency in accordance with the terms set forth in paragraph (b) of this section, unless otherwise approved in writing by the Contracting Officer.

3.2. Subcontracts; if the Contractor enters into a Subcontractor arrangement with another Contractor, subcontractors must be clearly identified in the contract agreement.

3.3. Contractors must maintain the same level investigation or higher as their civilian counterparts. In the absence of a civilian counterpart, CCAD Security will determine the level of investigation based on a position sensitivity review. Close coordination with the COR and company are required. All documentation required for access to

CCAD for classified contracts or IT Level I & II shall be processed through the CCAD Security Personnel Security

Office prior to entering CCAD facilities.

3.4. Classified Contracts: An interim clearance must be in place prior to entering CCAD facilities. All documentation (i.e. SF 86, etc.) required for security clearance shall be processed through the Contractor Facility

Security Office (FSO).

3.4.1. For all contracts involving employees who require a security clearance for performance of their duties or access to classified material, the Contractor must possess or obtain a facility security clearance prior to performing contract work. If the Contractor does not possess a facility clearance, the Government (Contracting Office) may request one from the Defense Security Service (DSS).

3.4.2. Contractor employees without a clearance level or background check properly indicated in the Joint Personnel

Adjudication System (JPAS) or its successor, will not be assigned to this task directly or indirectly. Contractor employee(s) will not be authorized access, regardless of personal clearance, without the facility first being cleared to the appropriate level by Defense Security Service (DSS).

3.4. The Contractor shall request security clearances for personnel requiring access to classified information or IT

Level I or II within 15 days after receiving a facility clearance. If the Contractor is already cleared, they shall request security clearances for the personnel within 15 days after contract award. Due to costs involved with security investigations, requests for Contractor employee security clearances shall be kept to an absolute minimum necessary to perform contract requirements.

3.4.1. IT Level I positions; Contractor employees shall have one of the following prior to commencing work: A current, valid Tier 5 investigation or equivalent or “Interim” Top Secret eligibility by Defense Industrial Security

Clearance Office (DISCO) indicated in JPAS.

3.4.2. IT Level II positions; Contractor employees shall have one of the following prior to commencing work: A favorably completed Tier 3 investigation or equivalent or “Interim” Secret eligibility by DISCO indicated in JPAS.

3.4.3. IT Level III positions: Contractor employees shall have one of the following prior to commencing work: A favorably completed Tier 3 investigation or equivalent or “Interim” Secret eligibility by DISCO indicated in JPAS.

3.5. Unclassified Contracts requiring IT access: All documentation (i.e. SF 85*, etc.) required for their initial security appointment for unclassified contracts to IT Level III shall be processed through the CCAD Security

Personnel Security Office prior to entering CCAD facilities.

3.6. IT Level III positions; Contractor employees requiring access to CCAD Local Area Network (LAN) shall have background investigation processed through CCAD Personnel Security Office. If the Contractor employee does not possess the proper investigation, the Government (Contracting Officer Representative) will request one. The

Government assumes costs and initiates non-clearance investigation by submitting the appropriate Personnel

Security Investigation request to the Army Center of Excellence. Minimum requirements for CAC issuance and access to the LAN is an initiated investigation with favorable FBI fingerprint check. Due to costs and the inherent delays involved with security investigations, requests for Contractor LAN access shall be kept to an absolute minimum necessary to perform contract requirements.

3.6.1. Fitness Issues: CCAD Security will be notify the Contracting Officer Representative (COR) when discovery of adverse information indicates potentially actionable issues that may disqualify the Contractor employee from access.

3.6.2. OPM Memorandum, Final Credentialing Standards for Issuing Personal Identity Verification Cards under

HSPD-12 provides government-wide credentialing standards to be used by all Federal departments and agencies in determining whether to issue or revoke personal identity verification (PIV) cards to employees and contractor personnel.

3.6.3. Whether or not to grant access is the sole discretion of the Government. The decision not to grant access will not be grounds for contract modification and shall not constitute an excuse for Contractor performance failure.

3.7. System Authorization Access Request (SAAR): Prior to system access, a SAAR, DD Form 2875, shall be completed by the Contractor employee. The Contractor employee shall complete Part I, the COR shall complete Part

II, and CCAD Personnel Security shall complete Part III.

3.8. Unclassified Contracts NOT requiring IT access: Contracts not requiring access to CCAD LAN shall be subject to installation access requirements that include the Defense Biometric Identification System (DBIDS) and/or guest sponsorship. The COR shall provide the appropriate details and contact information.

4. IT/IA Requirements:

4.1. All contract employees with access to the CCAD network must be registered in the Army Training Certification

Tracking System (ATCTS) at commencement of services. Contractors and associated subcontractor employees must also complete DoD IA Awareness Training before they can be granted access to the CCAD network and complete the training annually thereafter.

4.2. All contractors working IA/IT functions must comply with DoD and Army training requirements in DoDD

8570.01, DoD 8570.01-M, and AR 25-2 within 6 months of employment.

4.3. Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, the contractor employees’ supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification, as stipulated in DoD

8570.01-M, must be completed upon contract award.

5. Foreign Nationals:

5.1. Official Visits: All official foreign visits (visits sponsored by a foreign government) must be based on a legitimate need, be sanctioned by the appropriate foreign attaché or embassy, and approved through Department of

Army channels. Access will be coordinated through the CCAD Foreign Disclosure Officer (FDO), COR, and respective NASCC/CCAD security offices.

5.2. Unofficial Visits: These are visits by foreign nationals that are not endorsed by a foreign government. The

Contractor will submit a request for employee access, based on a legitimate need, to the appropriate COR. The COR will in turn notify the FDO of the request. Due to security considerations, requests for these types of visits should be kept to a minimum. Foreign nationals will require a government escort at all times while on CCAD property. The

COR will ensure the foreign contractor employee provides a copy of their passport to NASCC and CCAD security offices, to ensure the appropriate background checks are completed. NOTE: Properly validated permanent resident alien registration card holders are exempt from this requirement.

6. Notifications: The following information will be submitted to the COR and the CCAD Security Manager on company letterhead, signed by the Contractor Facility Security Officer (FSO) within 15 days of awarding the contract. An updated listing shall be provided quarterly or when the company or an employee’s status or information changes. Electronic equivalents are acceptable. The notification shall include:

a. Name, address, and telephone number of company representatives.

b. Employee's name, last four of social security number, shift.

c. The contract number and contracting agency.

d. The highest level of classified information to which Contractor employees require access.

e. The location(s) of contract performance.

f. The date contract performance begins and terminates.

7. Security Point of Contact: At no cost to the Government, the Contractor shall appoint a senior Contractor employee to serve as an on-site point of contact for any security concerns at the CCAD location. This may be a full time position or an additional duty position.

8. Security Training:

8.1. All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 30 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at https://atlevel1.dtic.mil/at.

8.2. US-based contractor and subcontractor employees who are required to travel overseas in performance of their duties must receive government provided AT awareness training that is specific to the area of responsibility (AOR), as directed by AR 525-13. Specific AOR training content will be directed by the combatant commander and the unit

ATO will ensure an applicable AT foreign travel briefing is provided to the contractor.

8.3. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program. This is a locally developed training is provided by CCAD security and will be used to inform employees of the types of suspicious behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees’ commencing performance, with the results reported to the COR no later than 30 days after training completion.

8.3.1 Contracts with a scope of work that call for the use of CCAD specific information or equipment at off base locations and facilities must develop an OPSEC Standard Operating Procedure (SOP)/Plan within 90 days of contract award which will be reviewed by the CCAD OPSEC Officer for approval IAW AR 530-1, Operations

Security. The SOP/Plan must identify CCAD's critical information, why it needs to be protected, where it is located, who is responsible, and how the contractor intends to protect it. This plan is “For Official Use Only” and must contain appropriate document controls in accordance with AR 25-55, Chapter 4. The plan must be stored in a secure location such as a lockable container and must be properly destroyed when no longer needed in accordance with local CCAD policy CCADR 25-92, Chapter 1, Section 1-6(j).

8.4. IAW AR 530-1, new contractors and associated subcontractors who require a CAC Card and access to the

CCAD network must complete Level I OPSEC training within 30 calendar days of reporting for duty and annual

OPSEC contractor refresher training, thereafter.

8.5. Threat Awareness Reporting Program Training: Per AR 381-12 Threat Awareness and Reporting Program

(TARP), contractor employees must receive annual TARP training presented by a Counterintelligence Special

Agent.

9. Pass and Identification Items: The Contractor shall obtain the pass and…