+ All Categories
Home > Documents > OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of...

OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of...

Date post: 19-Apr-2020
Category:
Upload: others
View: 1 times
Download: 0 times
Share this document with a friend
24
ORDER FOR SUPPLIES OR SERVICES PAM IFPAE SDMC 12 201 M030-9 MM-12-DOS 1 IMR-1-05 U.S. NUC1ear Regulatory 00iaUaiOz1 IRc-WOOS b. STMSTAMRMS &MMMIOPm~mw-myCuimin Linda Yea U.S. Nuclear ADaF~latury Cnismiona Mai Stop 01"N 13124 Div. of Contracts AttalZ rTY d.=TPT LP c0c Xsmil Stop: M-02.-12030 WahntnD 05 -vaahnbzgton, DC 20S555 b. OOPA NMEI a hURCHoN r~l RISMIoNGOUR________-two, , ?, phMM~ - -1-CONSMMS" dmbuuyu b SOW kWMOM m SYrWAWRESS inwmuqftswmmduw ~ fdmawf d f fu wf w~a~~u g am is 6220 CULEMB RD uhi mua rumai. luw.i ft~de dre ItemsIATE. Itapo0 amN ANUCO 1 21 782395166 __________________________ S. ACCUWIAh9A1SW"MPMATIO DATA %ye& nwleamm .NPP. MA-12-051, FLMS: 12H413 BOA: 2012-N0200-20-11.-4-140. 7ob Code:. 74473, DOC; 252a MErqp. No.z L1zG200.a3_0. Qb: $42,000, Mr 207036842 0s. WUOMiN~eb6AMLIOUi4E (FW0 VEEu4AS USEWMThRsM I OV~ALL MJMuuMmDI~ 13.PU.00F 14OOUUS9ff IL . %ou DAMTOROBD POWI 18iucu7 WJMDTDY UwI QWMAr rlNR NO.BUF OSM 1Mu~ ORON UWI MOE A~MrWACEr The contract= shall provide servioes in accordance vdtb thm atteahed Statement of work nihLed, 18uport Qmed Maif st~ation I LiCenue Recnitm ftpl1at1Gn*. iTOW CUT? Amnnts $153,616 Total M~igated Mout 1 48. 000 Period of Pertonmn: 12-6-2011 throughi 9-28--24112 NRC CONj linda Yee 301-4.15-3072 Technical moitort BllU Rogex- 301-415-2945 List of Mttaaizmmta:. Statemmnt of work, Dalivrabile Schedule TOTAL ThAM OFU r-LTZ1I§ $153,S16 WD:M 007936S42 MAIM~ 541690 PSC: R499 Signature: Executive Diract, Constracts 6153, 616.00 21. ML UJVO TO:150 wUsSIW£ 0ms NftC~waynt&.8Mw~wz0nbc. o________ Attn: Piac=AlS=..cu Banch M D770 73012. IIManfirad AvenueGRN e. Myv IL MP /dTAI OOMcW1 $153,616 TO Denver CO 0235-2230 aHI~nsr~ES OSEDC /Steve Pool Branch Chief,NS uMrl FM.A wcIMACeMa PRw2EDT7Nr107LuaE OflN*L cauWM4 oIw.11)M 1 nw13SAFm*8cmS50 SUNSIFw, %OEVImW OOMii TEMpLAT - Dmoo' DEC 12 201
Transcript
Page 1: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

ORDER FOR SUPPLIES OR SERVICES PAM IFPAE

SDMC 12 201 M030-9

MM-12-DOS 1 IMR-1-05 U.S. NUC1ear Regulatory 00iaUaiOz1IRc-WOOS b. STMSTAMRMS

&MMMIOPm~mw-myCuimin Linda YeaU.S. Nuclear ADaF~latury Cnismiona Mai Stop 01"N 13124Div. of ContractsAttalZ rTY d.=TPT LP c0cXsmil Stop: M-02.-12030 WahntnD 05

-vaahnbzgton, DC 20S555

b. OOPA NMEI a hURCHoN r~l

RISMIoNGOUR________-two, , ?,phMM~ - -1-CONSMMS" dmbuuyu b SOW kWMOM

m SYrWAWRESS inwmuqftswmmduw ~ fdmawf d f fu wf w~a~~u g am is6220 CULEMB RD uhi mua rumai. luw.i ft~dedre

ItemsIATE. Itapo0amN ANUCO 1 21 782395166 __________________________

S. ACCUWIAh9A1SW"MPMATIO DATA %ye& nwleamm.NPP. MA-12-051, FLMS: 12H413BOA: 2012-N0200-20-11.-4-140. 7ob Code:. 74473, DOC; 252a

MErqp. No.z L1zG200.a3_0. Qb: $42,000, Mr 207036842

0s. WUOMiN~eb6AMLIOUi4E (FW0VEEu4AS USEWMThRsM I OV~ALL MJMuuMmDI~

13.PU.00F 14OOUUS9ff IL . %ou DAMTOROBD POWI 18iucu7

WJMDTDY UwI QWMArrlNR NO.BUF OSM 1Mu~ ORON UWI MOE A~MrWACEr

The contract= shall provide servioes in accordance vdtb thmatteahed Statement of work nihLed, 18uport Qmed Maifst~ation I LiCenue Recnitm ftpl1at1Gn*.

iTOW CUT? Amnnts $153,616Total M~igated Mout 1 48. 000Period of Pertonmn: 12-6-2011 throughi 9-28--24112

NRC CONj linda Yee 301-4.15-3072Technical moitort BllU Rogex- 301-415-2945List of Mttaaizmmta:. Statemmnt of work, Dalivrabile Schedule

TOTAL ThAM OFU r-LTZ1I§ $153,S16

WD:M 007936S42 MAIM~ 541690 PSC: R499

Signature:

Executive Diract, Constracts

6153, 616.00

21. ML UJVO TO:150

wUsSIW£ 0ms NftC~waynt&.8Mw~wz0nbc. o________

Attn: Piac=AlS=..cu Banch M D77073012. IIManfirad AvenueGRN

e. Myv IL MP /dTAI OOMcW1 $153,616 TO

Denver CO 0235-2230

aHI~nsr~ES OSEDC /Steve PoolBranch Chief,NS

uMrl FM.A wcIMACeMaPRw2EDT7Nr107LuaE

OflN*L cauWM4 oIw.11)M1 nw13SAFm*8cmS50

SUNSIFw, %OEVImW OOMiiTEMpLAT - Dmoo'

DEC 12 201

Page 2: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-1O0-M NRC,-TOOB

Table of Contnts

DEUVERY ORDER TERMS AND CONDITIONS NOT SPECIFIED IN THE CONTRACT . .... 3

A1 BRIEF DESCRIPTION OF WORK (MAR 1967) ........................................................... 3A.2 CONSIDERATION AND OBLIGATION-COST PLUS FIXED FEE (JUN 1988) ALTERNATE

I (JUN 1991) ...................................................................................................................... 3A.3 BUDGET ............................................................................................................................ 3X.4 DURATION OF CONTRACT PERIOD (MAR 7 ..............................1987........................ 3A.5 2052.215-70 KEY PERSONNEL (JAN 1993) .............................................................. 3A. 2052.215-71 PROJECT OFFICER AUTHORITY (NOVEMBER 2008) ......................... 4A.7 2052.215-78 TRAVEL APPROVALS AND REIMBURSEMENT -ALTERNATE 1 (OCT

19 ) ................................................................................................................................. 6AS SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY LEVEL I OR LEVEL II

ACCESS APPROVAL (JUL 2007) ..................................................................................... aA.9 SEAT BELTS ................................................................................................................. 9

.10 APPROPRIATE USE OF GOVERNMENT FURNISHED INFORMATION TECHNOLOGY(IT) EQUIPMENT AND/ OR IT SERVICES/ ACCESS (MARCH 2002).. ...................... 9

AllI NRC INFORMATION TECHNOLOGY SECURITYTRAINING (AUG 2003) ................ 9A 12 WI.STLEBLOWER PROTECTION FOR NRC CONTRACTOR AND SUBCONTRACTOR

EMPLOYEES (JULY 2006) ........................................................................................ 10A13 PROHIBITON OF FUNDING TO ACORN (NOV 2009) ............................................... 10A-14 REDUCING TEXT MESSAGING WHILE DRIVING (OCT 2009) ................................. 10A15 GREEN PURCHASING (JUN 2011) ............................................................................ 11

ATrACHMENT A.IT SECURITY REQUIREMENTS - CERTIFICATION ANDACCREDITATION (MAR 2011) ........................................................................................... 12

ATrACHMENT B:INFORMATION TECHNOLOGY (IT) SECURITY REQUIREMENTS -GENERAL (JULY 2011) ....................................................................................................... 14

ATTACHLET C:IT SECURITY REQUIREMENTS - NRC AND CONTRACTOR (NON-NRC)FACIULIES (MAR 2011) .......................................................................................................... 18

ATTACHMENT D:STATEMENT OF W ORK ............................................................................................... ......... 19

ATTACHMENT E:DEUVERABELE SCHEDULE FOR THE GRAND GULF NUCLEAR STATION .................. 24

Page 2

Page 3: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

URC"03-119481 NRC-TODS

DELIVERY ORDER TERMS AND CONDITIONS NOT SPECIFIED IN THE CONTRACT

A.1 BRIEF DESCRIPTION OF WORK (MAR 1967)

The objectv of this task order is to provide technical support In tOn area of quality assurance to lhe DLR projectteam in the review and evaluation of the Grand Gulf Nudear Station, Unit I LRA.

A.2 CONSIDERATION AND OBLIGATION-COST PLUS FIXED FEE (JUN 1986) ALTERNATE I (JUN199)

(a) The total esdmaed coat to the Government for fuU performance of this contract is $153,616.00, of which the sumof $142,315 represents toe estimated reimbursable costs, and of which $11,301 represents the fixed fee.

(b) Ther shell be no adusmer in the amount of the Contractor's fixed fee by reason of differences between anyestinmte of cost for W mae of the work under this contract and the actual cost for performance of that work.

(c) The amount cunrniy obligated by the Covernment with respect to this conrbact Is $48,000, of which the sum of$44,188 represents the estimated reinftnuable costs, and of which $3,812 n ts the fixed fe.

(d) ft is estimated that the amourd curwenty allotted will cover perrforma through Febnmay 28, 2012.

A.3 BUDGET

cost Total

Total Estimated Cost-P IWuF -w $1163,6116

AA DURATION OF CONTRACT PERIOD (MAR 1987)

This co.r-act shall commence on December 6, 2011 and will expire September 28,2012.

A.5 2052.215-70 KEY PERSONNEL (JAN 1993)

(a) The flowng Irndiiduals are considered to be essential to the successful performance of the work hereunder

Page 3

Page 4: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-O13-1O-O1 NRC-TOM

Todd Mlntz Program ManagerLane Howard Principal Investigator

The contractor agrees that personnel may not be removed from the contract work or replaced without compliance withpargraphs (b) and (c) of this section.

(b) If one or more of the key personnel, for whatever reason, becomes, or Is expected to become, unavailable forwork under this contnrac for a oontinumos period exceeding 30 work days, or Is expected to devote substantially lesseffort to the work than indik td in the proposal or initially andtcipeted, ft contractor shall immedately notify theconateling officer and shll, subject to the con-currence of the contracting officer, promptly replace tie personnel withperonnel of at leat substantially equal ability and qualifications.

(c) Each request for approval of substitutions must be In writing and contain a detailed explanation of theccusa necessitag the proposed substitutions. The request must also contain a complete resume for theprolpod rsbstitute end other tormation requested or needed by the ontracting officer to evaluate the proposedsubstitution. The conracting officer and the project officer shall evaluate the contractor's request and the contractingofficer hall promptly notify the contractor of his or her decision in writing.

((Q If the contracting oflicer determines that unable and tImey replacement of key personnel who have beenreassigned, ternited, or hae otherwise become unavmilable for the contract work is not reasonably forthcoming, orthat the resultant reduction of productive ~ would be so substanil as to impair the successful completion of thecontract or the service order, the contract may be terminated by the contracting ofcer defaul or for the convenienceof the Government, as appropriate. If the contracting officer finds the contractor at fault for the condition, the conactprice or ftied fee may be equitably adjused downward to compensate the Government for any resultant delay, loss, ordamage.

A. 20852215-71 PROJECT OFFICER AUTHORITY (NOVEMBER 2006)

(a) The contracting officer's ahorized representative (hereinafter referred to as the project offer) for this con tracs:

Name: Linda Yee

Address: Mall ftop OWFN 13E24Washington, DC 20555

Telephone Number 301-415-2945

(b) Performance of the work under this contract Is subject to the technical direction of fh NRC project officer. Theterm technlcal direction" Is defined to include the following:

(1) Technical direction to the contractor which shifts work emphasis between areas of work or tsks, authorizestravel which was unanticipated In the Schedule (0s., travel not contemplated In the Statement of Work (BOW) orchanges to specific travel identified in the SOW), fills In detals, or otherwise serves to acoomplh the contractual SOW

(2) Provide advice and guidance to the contractor In the preparation of drawings, specifications, or tedcical

pordonm of the work descriptio.

Page 4

Page 5: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-1O081 NRC-TO08

(3) Review and, where required by the conact, approval of technical reports, drawings, specIfications, andtechdical informathn to be delivered by the contractor to the Government under the contract

(c) Technical direction must be within the general stlatement of work stated in the contract The project officer doesnot have the authority to and may not issue any technical direction which:

(1) Constitutes an assignment of work outside the general scope of the contract

(2) Constitutes a change as defined in the "Changes clause of this contract.

(3) In any way causes an increase or decrease in the total estimated contract cost, the 1bed fee, If any, or the timerequired for contrad performance.

(4) Changes any of the exprssed terms, conditions, or specifications of the cotrat.

(5) Terminates the contract, settles any claim or dispute arstng underlie contract, or issues any unilateral directvwhatever.

(d) Al technif l directions must be Issued in writing by the project officer or must be confirmed by the project officer inwriting within ten (10) worlding days after verbal isuance. A copy of the written direction must be furnWhed to theco-racting officer. A copy of NRC Form 445, Request for Approval of Official Foreign Travel, which has received finalapproval from the NRC must be furnished to the contracting officer.

(e) The contractor shall proceed propty with the performance of technical directions duly Issued by the projectofficer In the manner prescribed by this clause and within the project officers authority under the provisions of thisdlause.

(M) If, in the opinion of the contractor, any Instruction or direction Issued by the project officer Is within one of thecategories as defined in paragraph (c) of this section, the contractor may not proceed but shall notify the contractingofficer In writing wilnin five (5) wordng days after the receipt of any instruction or direction and shall request thectacting oficer to modify the contract aocordingly. Upon recevng the notification from the contractor, the contractingofficer shal issue an appropate contract modification or advise the conrctor in wrig that, In the contracng office'sopinion, the tecW il direction Is within the scope of this artide and does not conswti a change under the "Changes"clause.

(g) My unauthkorzd commitment or direction issued by the pmject officer may result in an unnecessay delay In fthcontrao's performance and may even result in the contrator expending funds for unallowable costs under the

(h) A feurs of the parties to agree upon the nature of the Instnrction or direction or upon the contrc action to be

taken with respect tereto Is subject to 52.233-1 -Disputes.

(i) In addition to providing techncal direction as defined In paragraph (b) of the section, the project oficer shall:

(1) Monitor the contractors technical progress, Including sw8ellance and asessment of performance, andmoonmmed to the contracting officer changes In requirements.

(2) Assist the contractor in the resolution of technical problems encountered during performance.

(3) Review all costs requested for reimbursement by the contractor and submit to the contracting offerrecommendations for approval, disapproval, or suspension of payment for supplies and services required under thiscontract.

Page 5

Page 6: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03410-81 NRC-TO08

(4) Assist the onmtractor in obtaining the badges for the contractor personnel.

(5) immediately notify the Security Branch, Division of Facilitleb and Securty (SB/DFS) (via e-mail) when acontractor employee no longer requires access authorization and return of any NRC issued badge to SB/DFS withinelvee days after their terminatlor.

(6) Ensure that d contractor employees thst require access to classified Restricted Data or National SecurityInformation or matter, access to sensitive wi1lassifAed information (Saeguards, Official Use Only, and Proprietaryinformatn) access to sensitive IT systems or data, unescortad access to NRC contrllied bldingssac, orunescorted access to protected and vitd ares of nuclear powe plants receive approval of SB/DFS prior to access Iaccorance with Management Directive and Handbook 12.3.

(7) For contracts for the design, development, maintenance or operation of Privacy Act Systems of Records, obtain*om the contractor as part of closeout procedures, written certification that the contractor has returned to NRC,trauntered to the successor contractor, or destoyed at the end of the contract In accordance with Instructions providedby the NRC Systems WMnerfor Privacy Act Systems of Records, all records (electronic or paper) which were created,compiled, obtained or maintained under the contract

A.7 2062215-71 TRAVEL APPROVALS AND REIMBURSEMENT -ALTERNATE 1 (OCT 19N9)

(a) Total expenditure for travel may not exceed $8.451 without the prior approval of the =oacig officer.

(b) Al foreign travel must be approved In advance by the NRC on NRC Form 445, Request for Approval of OfficialForeign Travel, and must be in compliance with FAR 52.247-63 Prefernce for U.S. Flag Ar Carriers. The contractorshall submit NRC Form 445 to the NRC no later #thn 30 days prior to the =unanoertemont of travel.

(c) The con•actor wil be reimbursed only forthose travel ,aoa' incurred that wre dimcy related to this cmac andwhich are alwable subject to the limitations prescribed In FAR 31.205-46.

(d) it is t•e responsblilty of the conractor to notify the contracti officer in accordance with the FAR Umhn~taon ofCost clnue of this contract when, at any time, ft contractor learns thd travel expenses will cause the cotractor toexceed the travel celing amount identified in paragraph (a) of this clause.

(e) Reasonable tavel costs for research and related activities performed at State and nonprofit institutions, inaccomance with Section 12 of Pub. L. 100-679. shall be charged In accordance with the contractors Institutional policyto the degree that the Imitations of Office of Management and Budget (OMB) guidance are not exceeded. Applicableguidance documents include OMB Circular A-67, Cost Principles for State and Local Governments; OMB Circular 'A-122, cost Principles for Nonprofit Organizations; and OMB Circular A-21, Cost Principles for Educational IstitutiOns.

A.8 SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY LEVEL I OR LEVEL I ACCESSAPPROVAL (JUL 2007)

The proposaufContractor must Identify all individuals and propose the level of Information Technology (IT) approvalfor each, using the following guidance. The NRC sposin office shall make the final determnatinon of the level, if any,of IT approval required for all Individuals working under this coftac The Government shal have and eme full andcomplete control and discretion over grantin, denying, withholdi, or terminating IT access approvals for indiMdualsperIng work under tdi contract.

The Contrator shall conduct a preliminary security inhrview or review for each IT level I or II access approval

Contractor pplica•nt and submit tothe Government only the names of candidates that have a reasonable probablft of

Page 6

Page 7: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

INRC-013-1O0-0811 NRC-TO08

obtaining the level of IT security access for which he, candidate has been proposed. The Contractor will pre-screen itsapplicants for the following:

(a) felony arrest in the last seven years; (b) alcohol related arrest within the last five years; (c) record ofany military courts-martial convictions in the past ten years; (d) illegal use of narcotics or other controlledsubstances possession in the past year, or illegal purchase, production, transfer, or distribution of arcotics or othercontrolled substances in the last seven years; (e) delinquency on any federal debts or bankruptcy in the last sevenyears.

The Contractor shall make a written record of its pre-screening Interview or review (including any information tomitigate the responses to items listed in (a) - (e)), and have the applicant verify the pre-screening record or review, signand date it. Two copies of the signed Contractor's pre-screening record or review will be supplied to FSBIDFS with theContractor employee's completed building access application package.

The Contractor shall further ensure that its employees, any subcontractor employees and consultants complete all ITacces security applications required by this clause within ten business days of notification by FSB/DFS of initiation ofthe application process. Timely receipt of property completed records of the pre-screening record and IT accesssecurity applications (submitted for candidates that have a reasonable probability of obtaining the level of securityassurance necessary for access to NRC's facilities) is a contract requirement. Failure of the Contractor to comply withthis contract administraion requirement may be a basis to cancel the award, or terminate the contract for default, oroffset from the contracts invoiced cost or price the NRC's incurred costs or delays as a result of inadequatepro-screening by the Contractor. In the event of cancellation or termination, the NRC may select another firm forcontract award.

SECURITY REQUIREMENTS FOR IT LEVEL I

Performance under this contract will involve prime Contractor personnel, subcontractors or others who performservices requiring direct access to or operate agency sensitive information technology systems or data (IT Level I). TheIT Level I involves responsibility for the planning, direction, and implementation of a computer security program; majorresponsibility for the direction, planning, and design of a computer system, including hardware and software; or thecapabiriy to access a computer system during its operation or maintenance in such a way that could cause or that has arelatively high risk of causing grave damage; or the capability to realize a significant personal gain from computeraccess.

A Contractor employee shall not have access to sensitive information technology systems or data until he/she isapproved by FSB/DFS. Temporary IT access may be approved based on a favorable review or adjudication of theirsecurity forms and checks. Final IT access may be approved based on a favorably review or adjudication. However,temporary access authorization approval will be revoked and the employee may subsequently be denied IT access inthe event the employee's investigation cannot be favorably adjudicated. Such an employee will not be authorized towork under any NRC contract requiring IT access without the approval of FSBIDFS. Where temporary accessauthorization has been revoked or denied, the Contractor is responsible for assigning another individual to perform thenecessary work under this contract without delay to the contract's performance schedule, or without adverse impact toany other terms or conditions of the contract. When an individual receives final IT access, the individual will be subject toa reinvestigation every ten years.

The Contractor shall submit a completed security forms packet, including the OPM Standard Form (SF) 85P(Questionnaire for Public Trust Positions), two copies of the Contractor's signed pre-screening record and two FD 258fingerprint charts, through the PO to FSB/DFS for review and favorable adjudication, prior to the individual performingwork under this contract. The Contractor shall assure that all forms are accurate, complete, and legible. Based onFSB/DFS review of the Contractor applicants security forms and/or the receipt of adverse information by NRC, theindividual may be denied access to NRC facilities, sensitive Information technology systems or data until a finaldetermmatio is made of his/her efigibility.

Page 7

Page 8: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-10-081 NRC-TO0

In accordance with NRCAR 2052.20470 "Security," IT Level I Contractors shall be subject to the lachsd NRC Form187 (See Section J for List of Atachments) and SF- 8SP which furnishes the basis for providing securly requirements toprime Contractor, subcontractors or others (e-g., bidders) who have or may have an NRC contractual relalionshipwhich requires access to or operation of agency sensitive information technology systems or remote developmentand/or analysis of sensitive Information technology systems or data or other access to such systems and data; accesson a continuing basis (On excess more than 30 calendar days) to NRC buildings; or otherwise requires issuance of anunescorted NRC badge.

SECURITY REQUIREMENTS FOR IT LEVEL II

Performance under this contract will Involve Contractor personnel that develop and/or analyze sensitive informationtechnology systems or data or otherwise have access to such systems or data (IT Level II).

The IT Level i1 involves responsllbflty for the planning, design, operation, or maintenance of a computer systen andall other computer or IT poeitions.

A Contractor employee shag not have a to sensitive informason technology systems or data until hefshe isapproved by FSB/DFS. Temporary access may be approved based on a favorable review of their security forms andchefcs. Fnal IT access may be appmved based on a favorably acjudlication. However, temporary access authorizationapproval will be revoked and the employee may subsequently be denied IT access in the event the employee'sinvestigaion cannot be favorably edjudicaled. Such an employee will not be uthorized to work under any NRCcontract requiring IT access without the approval of FSBIDFS. Wham temporary access authorization has beenrevoked or denied, the Contractor is responsible for assigning another Individual to perform the necessar work underthis contract without delay to the contract's performance schedule, or without adverse Impact to any other terms orconditions of the contract. When an Individual receives final IT access, the Individual will be subject to a review orreinvestigation every ten years.

The Contractor shall submit a completed security forms packet, including the OPM Standard Form (SF) OP(Questionnaire for Public Trust Positions), two copies of the Contractoft signed pre-screening record and two FD 258fingerprint charts, through the PO to FSB/DFS for review and favorable adudication, prior to the Indivdual performingwork under this contract The Contractor shal assure that all forms m accurate, complete, and legible. Based onFSBIDFS review of the Contractor applicant's security forms and/or the receipt of adverse information by NRC, theindividual may be dertied access to NRC facilties, sensitive Information technology systems or data until a finaldetermimnti is made of hisher elgibity.

In accordance with NRCAR 2052204 70 'Security," IT Level II Contractors shag be subject to the attached NRCForm 187 (See Section J for List of Atachmen•t), SF- 85P, and Contractor's record of the pre-screening whichfurnishes the basis for providing security requirements to prime Contractors, subcontractors or others (e.g. bidders) whohav or may have an NRC contractual relationship which requires access to or operation of agency sensitive informationtechnology systems or remote development and/or analysis of sensitive information technology systems or data or otheraccess to such systems or data; access on a continuing basis (In excess of more than 30 calendar days) to NRCbuildings; or otherwise requires issuance of an unescorted NRC badge.

CANCELLATION OR TERMINATION OF IT ACCESS/REQUEST

When a request for IT access is to be withdran or canceled, the Contractor shall Immediately notify the PO bytelephone In order that helshe will immediately contact FSBJDFS so that the access review may be promptlydiscontinued. The notification shall contain the full name of the IndMdual, and the date of the request. Telephonenotiications must be promptly confirmed by the Contractor In writing to the PO who will forward the confirmation viaemd to FSB/DFS. Additionally, FSB/DFS must be Immediately notified In writing when an individual no longer requiresaccess to NRC suneftive automated Information technology systems or data, including the voluntary or involuntaryseparnatlo of employment of an individual who has been approved for or is being processed for IT access.

Page B

Page 9: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC413-110-0811 NRC-1O08

(End of Clause)A.9 SEAT BELTS

Conactors, subcontractors, and grantees, are encouraged to adopt and enforce on-thejob seat belt policies andprograms for their employees when operating company-owned, rented, or personally owned vehicles.

A.10 APPROPRIATE USE OF GOVERNMENT FURNISHED INFORMATION TECHNOLOGY (IT)EQUIPMENT ANDI OR IT SERVICES! ACCESS (MARCH 2002)

As part of comdct performance the NRC may provide the contactor with Information technology (T) equipment andIT services or IT access as klentified In the solidctaon or subsequenty as Identified In the contract or delivery order.Government furnshed IT equipment, or IT services, or IT access may Include but Is not limited to computers, copiers,facsirrule madhines, printers, pagers, software, phones, Internet access and use, and emnail access and use. Thecontractor (Including the contracto's employees, consultants and suboontbctors) sha&l use the government furnished ITequipment, and I or IT provided services, mod! or IT access solely to perform the necessary efforts required under thecontract. The contractor (including the contractor's employees, consultants and subcontractors) are prohibited fromengaging or using the government IT equipment and government provided IT srces or IT access for any personal use,misuse, abuses or any other unauthorized usage.

The contractor Is responsible for monitoring Its employees, consultarts and subcontractors to ensure thatgovernment fumished IT equipmen andt or IT services, and/ or IT access are not being used for personal use, misusedor abused. The government reserves the right to withdraw or suspend the use of its government furnished ITequipment, IT services and/or IT access arising from contrator personal usage, or misuse or abuse: anrd/or to disallowany payments associated with contractor (indludhi the contractor's employees, consultarts and subconrctors)personal usage, misuses or abuses of IT equipment, IT services and/ or IT access; and/ or to terminate for camuse thecontrat or delivery order arising fro violation of this provision.

A.11 NRC INFORMATION TECHNOLOGY SECURITY TRAINING (AUG 2003)

NRC contractom shall ensure that their employees, consultants, and subconrtrcors with access to the agency'sifotnation technology (IT) equipment andfor IT services complete NRC'$ online initial and refresher IT security trainfgrequirements to ensure hat their knowledge of IT threats, vulnerabltes, and associated counteneasures remainscurrent Both the Initial and refresher IT security training courses generaiy last an hour or less and can be taken duringthe employee's regularly scheduled work day.

eoracor employees, consultants, and subcontractors shall complete the NRC's online, "Computer SecurityAwaeness" course on the same day that they receive access to the agency's IT equipment and/or services, as their fitaction using the equipmentlervice. For those contractor employees, consultants, and subconracto who are alreadyworking under this contract, the on-line training must be completed In accordance with agency Network Announcementsissued throughout the year 2003 within three weeks of Issuance of this modifc• on.

Contrctor employees, consulants, and subcontractom who have been granted access to NRC Information technologyequipment and/or IT services must continue to take IT security refresher training offered online by the NRC fthoughoutthe term of the contracL Contractor employees wEi receive notice of NRC's online IT security refresher trainingrequireents through agency-wide notices.

The NRC resenves the right to deny or withdraw Contractor use or access to NRC IT equipment and/or services, and/ortake other appropriate contract administrative actions (e.g., disallow costs, terminate for cause) should the Contractorviate the Contractor's responsibiity under hs dause.

Page9

Page 10: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-O1S-I0-061 NRC-T008

A.12 WHISTLEBLOWER PROTECTION FOR NRC CONTRACTOR AND SUBCONTRACTOREMPLOYEES (JULY 2006)

(a) The U.S. Nuclear Regulatory Commission (NRC) contractor and Its subcontractor are subject to theWhisleblower Employee Protection public law provisions as codified at 42 U.S.C. 5851. NRC conrctor(s) andsubcontractor(s) shall comply with the requirements of this Whlstleblowe Employee Protection law, and theimplementing regulations of the NRC and the Department of Labor (DOL). See, for ewample, DOL Procedures onHanding Complaints at 29 C.F.R. Part 24 conoeming the employer obigations, prhibited acts, DOL procedures and therequirement for prominent posting of notice of Employee Rights at Appendix A to Part 24.

(b) Under this Whistleblower Employee Protection law, as Implemented by regulaons, NRC contractor andsubcontractor employees are protected from discharge, reprisal, threas, Intimki t, coercion, blacklsting or otheremployment discrimination practices with respect to compensation, trm, conditions or privileges of their employmentbecause the cantractor or subcontractor employee(s) has provided notice to the employer, refused to engage In unldiafWpractices, assisted In proceedings or tetifiled on acHvIties concerning alleged violations of th.e Atom Energy Act of1954 (as amended) and the Energy Reorganization Act of 1974 (as amended).

(c) The contractor shail Irmert this or the submtance of this clause in ary subcontract involving work performed underthis contmcL

A.13 PROHIBITON OF FUNDING TO ACORN (NOV 2009)

in accordance with section 163 of the Continuing Approp.rations Resolution, 2010, Division B of Public Law No.111-68 (CR), until futher notice, no federal funds may be provided to the Association of Community Organizations forReform Now (ACORN), or any of its affillates, subsdiaries, or allied organizations. Additfonal information can be foundat:, httpJ/www.wthimhous.govkma _2010/m10-.1pdf

A.14 REDUCING TEXT MESSAGING WHILE DRIVING (OCT 2009)

(a) In accordance with Secdion 4 of Execubie Order 13513, "Federal Leadership on Reducing Text Messaging WhileDdvtng,"(October 1, 2009), the Contractor or Recipient Is encouraged to:

(1) Adopt and enforce policies that ban tew momsging while driving company-owned or rented vehicles orGovernment-owned vehicles, or while dring vehicles when on official Government business or whenperforming any work for or on behalf of the Government and

(2) Consider new rules and programs to further the poicies described in (a)(1), reevaluate existing programs toprohibit text messaging while driving, and conduct education, awareness, and other outreach programs for employeesabout the saey d associated wIth text messaging while driving. These Initiatives should encourage voluntarycompliance with the trex mesM ing policy while off duty.

(b) For purposes of complying with the Executive Order:

(1) wT1" or "Text Measagn" means reading from or entering dab into any handheld or other electronic device,Incldung for the purpose of SMS texting. e-maiing, instant mesapig, obtaini navigational informnation, or engagingin any other form of electronic data retrieval or electronic data communication.

(2) "Driving" means operating a motor vehicle on an act•ve roadway with the motor running, Including whiletemporarily stationary because of traffic, a traff light or stop sign, or otherwise. It does not include operaing a motor

Page 10

Page 11: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-10431 NRC-T'o08

vehiole with or wiout the motor running when one has pulled over to the side of, or off, an active miraway and hashalted In a location where one can safely remain stationary.

(q) The Contractor or Recipient shall encourage its suboonraor(s) or sub-recipient(s) to adopt and enforce thepolicies and initatives described in this clause.

A.15 GREEN PURCHASING (JUN 2011)

(a) In furtherance of the sustainable acquisition goals of Executive Order 13514, "Federal Leadership InEnvironmental, Energy, and Economic Perforammnce products and serves provided under this contnetorder shael beenergy- efficient (Energy Star or Federal Energy Management Program (FEMP) designated), water-effcient, biobased,environmentlally preferable (e.g., Electronic Product Environmental Assessment Tool (EPEAT) certified), non-ozonedepleting, contain recycled contenut or are non-toc or less tmdoc alternatives, where such products and services meetagency pofomtancs requirements. httpJAww.fadoenter.govlprogramuleol 35141

(b) The conbutor shd flow down this clause Into al subontote od agreemene that relate to perowmwa ofthis contractorder.

Pap11

Page 12: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC0340.M8 NRC-Tm08

ATTACHMENT A

IT SECURITY REQUIREMENTS - CERTIFICATION AND ACCREDITATION

SECURfY RISK ASS IENTThe contractor shall worc with the NRC project officer in perfoming Risk Assessment activides according to NRC poiy,standards, and guidance. The contractor shall perform Risk sesemnet activities that include analy-ng how thearchitecture biipluieute the NRC documented security policy for the system, n how manage opeand technical securty conrol featu are planned or imdplemented and how the system interconnects to other systemsor networks while mintaining security.

SYSTEM SECURITYPLANThe contractor shall develop the sysWt security plan (SSP) acomdng to NRC policy, stmndrd, and guidnce to definthe Implementation of IT security controls necessary to met both the functional assurance and security requfirments.The contractor will ensure that all controls required to be Implemented are documented In the 88P.

ASESSMWT•PROCEDURES - SECURITY TEST & EVALUATTONThe contatr shaDl follow NRC policy, standards, and guidance for exemution of toe test procedurea These proceduresshall be supplemented and augmented by tailored test procedurs based on the control objective as it applies to NRC.The contractor shall include verification and validation to ensure that appropriate corrective mation was taken onIdentiffed security weaknesses.

The contractor shall perform ST&E activities, hiclud but not Mied to, coordinating the ST&E and developing theST&E Plan, execution ST&E test cases and documentation of test results. The contractor shall prepare the Plan ofAction and Mlestoe (P0AMM) based on the SUrE results.

PLAN OF ACTiON AND MLESTONES (POA.W NA1NTWANCE & REPORTINGThe contrctor shal provide a determination, in a wrtt form agreed to by the NRC project officer and ComputerSecurity Office, on whether the implemented corrective action was adequate to resolve the identified infonnatlonsecurity weaknesses and provide the reasons for any excptons or risked-based decisions. The contractor shalldocument any vulnerablllties i ndc g which portio of the security control have not been implemented or applied.

The contrador shall develop and implement solutions that provide a means of planning and monitoring correctiveactions; define roles and responhbitlles for risk mitigation; assist in ideifying security funding requirements; track andprioritize resources; and inftnn decision-makers of progress of open POA&M Items.

The contact shall perform verification of IT security weaknesses to ensure that all weaknesses identified thrugh thrdparty (e.g., OIG) audies are included In the POA&Ms that the quartery reporting to OMB Is accurate nd the reasons forany exeptions or risked-based decisions are reasonable and dearly documented. This vedfication process will be doneIn conjunction with the continuous monitoring activiles.

CER11RCATION & ACCRWA TION DOCUMAENTATIONThe contractor shall creat update maintain d Certiflication and Accreditation (C&A) docunention In accordance withthe following NRC Certification and Accredciation procedures and guidance:

" C&A Nor-SGI Unclassified Systems" C&A SGI Unclasesf[e Systems" C&A Classified Systems

The Contractor must develop contingency plan and ensure annual contingency testing Is compleled within one year of

previous test and provide an updated security plan and test report according to NRC's policy and procedure.

Page 12

Page 13: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC403404,81 NRC-TOGS

The Contractor must conduct annual securfty control testing according to NRC's policy and procedure and updatePOA&M, 8P, etc. to reflect any findings or chdges to management, operadornl and technical controlL

-End of Clause-

Page 13

Page 14: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-0t0--0S1 NRC-T.S

ATTACHMENT B

INFORMATION TECHNOLOGY (fT) SECURFTY REQUIREMENTS - GENERAL (JULY 2011)

auk Contmct n'scw-ur R*eqmwdsFor unclassailed information used for the effort, the contractor shall provide an Informalton security categorizationdocument Indicating the snMly of the irnrmaon processed as part of this contract F the Infonation secowrt

agorhmionwa not provided In the statement of work. The determifnation shall be made using National Institte ofStandards and Technology (NIST) Special Publication (SP) 800-60 and must be approved by CSO. The NRCcontracting officer and project officer shafl be notfied kmede before the contractor begins to process information ata higher sensiti•t level.

If he effort includes use or processing of classified Inforrnatio, the NRC contracting officer and project officer shall benotified before the contractor begins to process info tn at a more restrictive classification level.

All work under this contract shall comply with the latest version of policy, procedures and standards. Individual taskorders will reference latest versions of standards or exceptions as necessary. These policy, procedures and standardsInclude: NRC Management Directive (Md ) volume 12 Secuty, Computer Security Office policies, procedures andstandards, National Institute of Standards and Technology (MST) gukime and Federal Inrimbation Processn-Standards (FPS), and Committee on National Security Systems (CNSS) po•ty, directives, instructions, and guidance.This information Is available at the following links:

NRC Policies, Procedures and S (CSO internal wembite):htto://Wwirmn23Mgao2MSOooa~ie.htmnl

NRC Policy and Procedures For Handling, Marking and PrOtecting Sensitive Unclassified Non-Safguards Information(SUJNSI):

ADNRC Manament Dirctve (pubic webef):

NIST SP and FP8 documentation is located at

CNSS documents are locaed at

The Contractor shall ensure comprlance with the atst version of NIST guidance and FIPS standards available atcontiact Issuance and continued compliance with the lates versions wthin one year of the release daft.

When e-man is used, the Contractors shall only use NRC provided e-mail accounts to send and receive sensitiveinformation (imformation that Is not releasable to the publc) or mechanisms to protect the Information duringtrnsmission to NRC that have been approved by CSO.AN Contaor employees must sign the NRC Agency-Wide Rules of Behavior for Authoried Computer Use prior to

being granted access to NRC computing resources.

The Contactor shall adhere to following NRC policies:

1. Management Directim 12.5, Automated Information Secufrty Program

Page 14

Page 15: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-1001 NRC-TOOS

2. NRC Sensitiv Undcassfied Non-Safeguards Information (SUNSi)3. Computer Security Policy for Encryption of Data at Rest When Outside of Agency Facilities4. Policy for Copying, Scanning, Printing, arid Faxing SGI & Classified Information5. Computer Security Information Protection Policy6. Remote Access Policy7. Use of Commercial Whiess Devices, Services and Technologies Policy8. Laptop Security Policy9. Computer Security Incident Reo Policy

Connrator will adhere to NRC's prohibition of use of personal devices to process and store NRC sensitive information.

AN electronic process of NRC sensitive Information, including system dewlopment and operalorm and maintenancepemfonred at non-NRC facites shag be In facitles, networks, and computers that have been accredited by NRC forprocsIng information at the highest sensitivity of the information that Is processed or will ultOmately be processed.

Conbact Pwefammme And ClumeoutThe contractor shall ensure that the NRC data piroca d during the periormance of tOf contrac shall be purged from andata storage component of the conradctos computer fadlity. Tools used to perform data purging shall be approved bythe CISO. The contractor shal provide written certification to this NRC contracting officer that the contractor does notretain any NRC data within 30 calendar days after contract completion. Until all data Is purged, the contractor shalensure ta any NRC data remaining in any storage component will be protected to prevent unautharked disclosu e

When contractor employees no longer require access to an NRC system, the contractor shall notify the project officerwithin 24 hours.

Upon contract completion, the contractor shall provide a status list of all contractor employees who were users of NRCsysterms and shall note If any users still require access to the system to peform work If a follow-on contract ortask orderhas been Issued by NRC.

Contrl OftMoatnl And DabThe contractur shall not prilish or disclose In any mamnr, without the contracting officer's written consert the details ofany security nale or counterme s eher dignd or developed by the contractor under this contr orotherwise proviled by the NRC.

Any IT system used to process NRC seenstive information shal:

1. Include a mechanism to require users to uniquely Idenbty themselves to the system before beginning to performany other actions that the system Is expected to provide.

2. Be abe to authenticate data that Includes Information for verifing the claimed identity of individual users (e.g.,

&. Protect authenticaton data so tha it cannot be acesdby any unauthorized user4. Be able to enforce individual acoountabift by providing the capability to uniquely identify each individual

computer system user5. Report to appropriate security personnel when attempts am made to guem the aufthetication data whether

Inadveten y or delberately.

Access ConbiolsAny contractor system being used to process NRC data shal be able to define and enforce cces privileges forindividuai users. The discretionary access controls mechanisms shall be configurable to protect obets (e.g., ies,folders) from unauthorized access.

The corrctor syterm bng used to process NRC data shall provide only essential capalMies and scfica prohbtanri/or restrict the use ofspecified functions, ports, protocols, and/or services.

Page 15

Page 16: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-3-34.001 NRC-TO08

The contracturs shall only use NRC approved methods to send and receive information considered sensitive orciassifled. Specifily,

1. Clmifod Intnmdion - All NRC Classified data being transmitted over a network shall use NSA approvedencryption and adhere to gWdance In MD 122 NRC Classified Information Security Program, MD 12.5 NRCAutomated Information Security Program and Committee on National Security Systems. Classified processingshall be only within facilites, computers, and spaces that have been speciflclly approved for clanliedprocessing.

2. Wg! Info* on - AN SGI being transmtted over a network shall adhere to guidance In MD 12.7 NRCSafeguards Information Security Program and MD 12.5 NRC Automated Information Security Program. SGIprocessi shal be only wthin facliies, computers, and spaces that have been specx'fIcaly approved for SGAprocessig. Cryptographic modules provided as per of the system shall be vaidated under the CrQtographModule Vaidation Program to conformn to NIST FIPS 140-2 overall level 2 and must be operated In FIPS mode.The contactor shta provide the FIPS 140-2 cyptographic module certificate number end a brief description ofthe encryption module that Includes the encryption algorithm(s) used, the key length, and the vendor of theproducL

The most restrictive set of fghtsrvileges or accesses needed by users (or processes acft on behalf of users) for theperformance of specified tasks must be enforced by the system through assigned access authorzations.

Separation of duties for contractor systemsn used to process NRC information must be enforced by the system throughassigned acces authoriations.

The mechaqisms within the contractor system or application that enfonres access control and olher security featuresslbe continuously protected against tampering endor urnuthorized change

Conjafi SembralsAll systems used to process NRC sensitive irformatlon shall meet NRC configuration standards available atNtH'wvwointemaI~nm.aov/CSO/ xedhtmlI.

All media used by the contractor to store or process NRC infonnmton shaD be controled In accordance with thesensitivity level.

The contractor shall not perform sanittiaon or destruction of media approved for processing NRC informationdeslgnatd as SGI or Classified. The contractor must povide the media to NRC for destruction.

The Contractor must adhere to NRC patch management processes for ad systems used to process NRC Information.Patch Management reports will made available to the NRC upon request for fowing seuity categorizations and

* 5 calendar days after being requested for a high sensitivity system* 10 calendar days after being requested fora moderate sensitivi system* 15 calender days after being requested fora low sensitivity system

For any contractor system used to process NRC infonnation, fte contractor must ensure that Information loaded into thesystem is scanned for viruses prior to posting; servers are scamed for viruses, adware, and spyware on a regular basis;and virus signatures ae updated at the following frequency:

S1 calendar day for a high sesmtMty systemPage 16

Page 17: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC.L03.0461 NRC-T=O

* 3 cWana days for a moderate seW iy sydtm* 7 cWendar days fbr a low snserte system

--End of Clause-~

pq? 17

Page 18: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NIRC-013-1O.-0811 NRC-T00l

ATTACHMENT C

IT SECURITY REQUIREMENTS - NRC AND CONTRACTOR (NON-NRC) FACILITIES

BACKUPSThe conactor shall ensure that backup media b created. encrypted (In accordance with informatlon sensltvty) andverifed to ensure that data can be retrieved and bs restorable to NRC systems based on information sensitity levels.Backups shall be executed to cratem readable media that slows succeeshd file/data restoration at the fokwngfre-lecis

" At least every Jcalendar day for a high sensitivfty system" At least every jqalendar day for a moderate seneltivty system" At ast every Z clendar days for a low sensiWdit system

PBEIMEMn PROTECT/ONThe Contracor must employ perimetr protection mechanims, such as fIrewafs and router, to deny allcommunications unless explicitly slowed by exception.

The ontracto must deploy and monitor intrusion detection capablit and hav an deploye and activelyengaged security monitoring capability in place for systems placed in operation for the NRC. Intrusion detection andmTnltong reports wIll made avalable to the NRC upon request for following security categorizations and reportingtimeframes:

* 5 calendar days after being requested for a high sensltMty system* 10 calendar days after being requested for a moderate sensitIvity system* 16 calendar days after being requested for a low sensitivity system

CON'RACTOR FACILITREWEWAND APPROVAL PROCESSThe contractor shall conmplete a security survey of the proposed facility in accordance with MD 12.1 in order for NRC todetermine fte adequacy and e of the adminishaion of the secuhily program and the protection afforded NRCInformation, employees, and aet. before the facliky Is used for any NRC ~fort tat Includes IT.

Upon facility approval per MD 12.1, the contractor shall perform a full certlflcatlon and obtain accreditation of the fclityand computing system that wil be used by the contractor as part of the NRC effort that Includes IT prior to comfmencwthe efforL The certfication shall be performed at the Wovl of the highest sensiti of the data tat is used at the facilityor will ultbnay be used by the product of the eflort.

-- End of Clause-

Page 18

Page 19: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-104S1 NRC-TOUR

ATTACHMENT 0

STATEMENT OF WORK

Project Tre:

Job Code:

Task Area&

Technical Assistance for Quality Assprance Reviw Support, U.S. Nucm, RegulatoryCommission, Office of Nuclear Reactor Regulation

J-4473

Kick-off Meeting, Technical Review Packages, Audit Preparlon. Audit Perbman,Audit Report, Request for Additional Information, Review Appkwct Responses, SERInput

Task Order No.:

Budget & Reporting No.:

NRC Issuing Office:

NRC Pralect Offlcer.

NRC Technic•aMorior:

Fee Recoverable:

TAC Numbers:

Perfming OrganLzion:

Eight (8) - Grand Gulf Nuclear Station, Unit I

2012-x0200-11-4-148

Office of Nuclear Reactor Regulation

Linda Yee, (301) 41-072, ndLyee@ .gov

B1 Rogem, (301) 418-2948, bNiy.mgrwrsnrrgov

Yes

Th") (Grand Gulf Nuclear Station, Unit 1)

Center for Nuclear Waste Regulatory Ana"yses (CNWRA)

1.0 Background

The U.S. Nuclear Regulatory Commission's (NRC'$) Office of Nuclear Reactor Regukltion (NRR) Is responsil forensmuring the public healbh and se•ty through licensing and inspection activitles at all commerce! nuclear pow reactorfacillien m the United Stal.. _Evaluation of License Renewal Applicalion (LRAs) a performed by the Divison ofLicense enewal (DLR). DLR performs Its work in accordance with the requirermnts of Title 10 of the Code of FederalRaguWao Padt 54 (10 CFR Part 54), "Requrernents for Renewal of Operating Licenses for Nuclear Power PIanls"In addition, DLR uses guidance provided in NUREG-100, "31andard Review Plan for Review of UceIe RenewalAplications for Nuclear Power Plants," Revision 2 (SRP-LR), dated December 2010 and NUREG-11801, GenerirAgingLesson Leamed Report,* Revision 2 (GALL Report), also dated December2010. The staff is seeking technicalassistance hI the review of LRAs In the area of quality assurance.

2.0 Oectve

The otjecbive of this task order Is to provide technical support In the area of quality assurance to the DLR plect team inreviwlng and evaluatng the LRA of the Grand Gulf Nuclear Stdon, Unit 1.

3.0 Scope of Work

Technical support is needed to support DLR In the review and evaluation of the Grand Gulf Nuclear Station, Unit 1, LRA

Page 19

Page 20: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC403-IO.OI NRC-TONl

as follows: (1) development of technical review packages (TRPs) and (2) the sooping and screening methodologyreview and aging management program (AMP) quality assurance requirements review.

For this LRA, the Contraco will work In conjunction with NRC staff to develop TRPs, audit and review the scoping andscreening methodology used by applicants to identify systems, structures, and components within the scope of licenserenewal, and audit and review ft quality assurance related elements of AMPs submitted by the applicant, usingappicable NRC guidance. The LRA review activities are coordinated by the NRC license renewal Project Manager(PM).

The Contractor shall provide subject matter experts (SMEs) who are knowlaedeable and experbiced i the area ofquality amrac and capable of providing technical assistance as follows: One (1) SME for Task A three (3) SMEsfor Task B, two (2) SMEs for Task C, and one (1) $ME for Task D.

TerhnIS1 Reftm p=aykm Devgunwi~t

TRPs organied by technical subject areas and are developed usig a systematic pro=ess. The developmert of TRP.requis adherence to a proceduml guide, provided by the NRC Technical Monitor (FM), as wel as the use of pastexamples and lessons earnied. The process also requires a detailed comarison of Items preented In the LRA vemusitems found in the Bcense renewal guidance documents including NUREG-1800 and NUREG-1801. TheContractorshall identify the contents of each techncal assignment work package In accordance with training and procedu•rsprovided by the TM and Information provided by the PM. and assemble the TRPs for um by the NRC technical staff.

Scoolpa and Screenln= Msthodoloay Review

The scoping arid screening methodology review Incudteshe review of the LRA, Implerme documents, plantdrawings, final safety analysis report, and other current licensing basis documents to detenine whether the applicanthas identified the system structures and components included within the scope of license renewal and the structuresand components subject to an aging management review (AMR).

The Contactorwill focus on the scoping and screening methodology implemented by the applicant. The Conbator willalso review th three AMP program elements related to quality assurance, corrective actions, uonffrmation process, andadmbisle controlB, to verify their consistency with the program elements described In the GALL Report.

For the soaping and screening methodology reviews, the team evaluates and audits Ve methodology used to idmifythe components within the scope of license renewal and the components subject o an AMP. For each ofthe assigniedteas, the team will review the applcant's LRA and also audit the applcare methodology during an on-elle audit.Follow up aciMvies •uncling the development of requests for addtional Inforimaon (RA/s), audit report input and saftyevaluation report (SER) input, as assigned by the TM or designated NRC audit team leader (TL), as appllcale.

For the AMP quality assurance review, the teem will evaluate and aucit the applicant's AMPa for the conecv actions,confrnmation proies and administrative controls program elements during the on-site audit. Follow-up activiiesinclding the deelpmert of RAs, audit report Irpi4, wd SER input will also be mquired as assigned TM or T1, asapplicable.

The Contract shall assign SMEs that have the required educaion, background, work experines, or a combinationthereof, to meet both the tedvch and regulatory obj*c of the work specifled In this statement of work (SOW). TheConitator shall ensre list the SME reviews and becomes familiar withte plant-epecifi LP The b antractor shallensure that die SUE also reviews, for farnillarization: (1) the audit ieport and (2) Section 2 of a recently NRC issuedSER. The TM or TL wl idenllky the specific aud reports and SERs for review.

Page 20

Page 21: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-'I0-081 NRC-TOOB

Task A Y Mak..o si

The Contractor SIE shall review the LRA and paricipate in a telephone conference call with NRC staff within 5 workingdays of award of the agreement, or ae otherwis directed by the TM. The purpose of the telephone conference cl is todiscuss the project activities and expectations in response to the agreement request for proposal. The TM and SMEshall establish tie various elements of the project, inclusive of delIverables, schedules, and staing;, and shall discussexpecatios and objectives of the technical assistance, timeliness and qualty of review products. The Contractor shallperform the review in accordaMce with the project schedue and assignments developed by the TM.

Task B Technical Reimew Pacaman

The dellerable for this task Is the collection of TRPs provided In electronic format to the TM no later than 20 woddngdays from the aseignment of the tak For ths task order, l*e Contractor sW work with the TM and additional DLRmanagement and stalf, to develop specific technical work padcages as directed by the TM.

TRPs will be identified by technical subject areas and developed to Idenify specilc areas for review. The creation ofTRPs b a sysatmatic process which requires the adherenoe to a DLR procedural guide, as well athe use of psteumples and lessons learned. The process also requires a detailed comparison of Items presented In the LRA versusitusfound in the license renewal guidance documrent including NUREG-1800, and NUREG-1801. Additional rining

Sprovided by the TM arid staff.

The Contractor shall, under the direction of the TM, Identify the contents of each TRP In accordance with training andprocedures provided by the TM, and assemble the TRPs for use by the NRC technical staff. The Conracor will followthe procedure in ai with a Cortractor quality assurance plan to ensure accuracy of the TRPs. If theContrlctor Identifte potntial procedural Improvement, that information should be provided to the TM for approvalbefore procedunal charges can be made. ;

Task C Awdit EmRloudltlM. andAit Ro

The deliverables for this task is draft audit report hnpi for the copng mad screening methodology audit report (auditreport).

The TM or TL will provide the work sssinents to the SMEs. The Contrctor shall provide two (2) quafied SME's topwaipatb in an NRC led audi, of upto B days. The purpose of the auditIsto detereinuehOrw. 1)theapplicanthasdeveloped and Implemented a saoping and screening methodology to identify systems, structures and componentswithin the smope of license renewal and structures and component subject to AMR and 2) has applied adequate qualityconhri totho quality assurance related program elements - corrective actions, confirmation pross, and administrativecontrols, of AMPs.

The TM orTL wil provide a sample of an audit report to the Contractor to aid In the pro-write of the audit reportand acunent copy of the wrt•n guidelines. The Contractor shag perform work necessary to prepare for the audit and reviewat the Contractor office prior to the audit The SMEs sha review Inforrnation relevant to the assignments and prsmwdtethe assgned portion of the audit repod, where possible, to minimze the time needed at the applicarts sL The SUEshal prepare questions after reviewing the IRA for discussion with the applicant during the audit.

The Contractor shall use the information extracted from the LRA and the results of the audit and review acaltles todevelop the draft audit report In accordance with the example form provided. The Contractor shall ensure the reportis technically correct and complete. The Contractor shall also provide technical writing services to prepare the draftaudit report The Contractor shal deliver the draft audit report to the TM or TL within 10 worldng days followingcomIpetion of the audit

Page 21

Page 22: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC4-3104618 NRC-,TO8

The COntro el Mi crporate comments from the peer riew, and comments from the NRC staff into the final auditreport The Contractor shall revise the draft sections to reflect the NRC staff comments and shall deliver the finalsection of the audit report no later than 5 working days after receipt of the NRC'. comments on the draft sectins.

TaskD aNued for A"onal bdgMSMO, ReWsw ADnRl;#mfLBVggMM ja InDixt Mgd-PAMnPnA U rMK EUDU- TMID MaL ,MKDOnMe

The deliverables for thi task, if applicable, ae (1) draft RAIs, (2) technical edited final RPAls, (3) SER Input without RNresponses incorporated, and (4) SER Input with RN responses Incorporated.

The Contractor i* provide an SME to prepare RAls, when determined appropriate, to obtain additional Information tocomplete theU scoping and screening methodology and AMP quaty assurance review. The RN alml cite tho chnicaland regulatory basis for requesting the informalion. The Contractor Ill deliver draft RAts from the audit to the TM orTL prior to the audit exit briefing. The TM or TL shall provide the Contractor comments to the draft RAts and toeContdractor shall revise the draft RAls to reflect the NRC doff comments and deliver the final RAJs no late fthan 3 workingdays after receipt of NRC's comments on the draft RAIJ.

The Contractor shall develop ft draft SER input In accordance with "Safety Evaluation Report Writng Guidefines andSamples no later than 15 working days afltr the completion of the firt onsite visit. The TM or TL will oordinate anyintrnal NRC staff review of the draft SER input and will prepare a at of NRC staff comments. The TM or TL willprovide and discuss the comments with the Contractor. The Contractor shall revise the draft SER to reflect thecomments provided by the TM or TL and deliver the final SER np-ut no later than 5 working days after receipt of thecomments.

When responses to RAts hoew been received from the applicant1 the TM or TI h provie the applicanrs responses tothe Contraor for review and Incorporation Into the SER. The Contractor shall provide an SME to review applicantsresponses tothe RAI and to determinewhether the applicnre responses am acceptable. TheContractorshalideliverthe documentalion of aoceptabity to the TM or TL no later than 3 working days after receiving the appicai responsesfrom t• TM or TL When determined to be acceptale, te Co shall Incorporate responses to the RAIs Into theSER and provide the SER input with RAI responses to the TM or TL wthin 7 working days after receiving the responsesfrom the TM orTL

The Contactor shall develop and follow Its quality control plan which oulnes the procedures and sydemto be usedbfordomument version contrl, tednical input tracking, dcange management, amd technical and editorial reviews. TheContractor shall organiz, track, and manage dhnges In a atnucded, systematic, and transparent manner, throughoutthe review and production of the draft and final SER.

4.0 Technical and Other Special QuaHf1ca11oris Required

It is the responsibglity of the Contrac to assign tecdhcal saf, employees, suboonractore, or speclaglsts who have therequired educational background, experience, or combination thereof to meet both te technical and regulatoryobjectives of toe tasks specified In this SOW. The NRC will rely on representations made by the Conftao concerningthe qualifcatlons of the peronnel assigned to this agreement, inc•luing assurance all WInfion contained in thetechnical and cost proposal, including resumes, is accurate and truhfuL The use of experienced personnel for Ihe keypositions on each task under this proect is essential to the sucoess of the project

The Contractor shall provide SME(s) capable of conducting the SOW including the following disc=iplins: systemsengineering, power plant engineering or equivalent disciplines, es applicable to license renewal activities. For thepurpose of bidding, assume two (2) SMEa ftom the required disciplines will participate with NRC providing staff in othertechnical areas. It Is expected the Contractor will review and comment on the sections of the SER provided by NRCstaff. The NRC prepared sections will be incorporated In the camera-ready copes of the SER after the qualityassurance and editing process of the sections are completed.

Page 22

Page 23: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC..3-10-M8 NRC-TO0l

The Contracor shalt provide all necessary personnel, equipment, faclities and materials to acoomplish the oftplaced under this task order. The use of particular personnel on this project Is suljct to the TM'W and NRC PrlectOffer's (PO) approval. This includes proposed changes to key personnel during the fife of the agreement.

If any task wlf| be subcontracted or performed by subcontractors or consultants, the Contractor shall obtain the P0'swritten approval of th subcontractor or consultant prior to initiation of the subcontracted effort Conflict of interestconderao shal apply to any subcontracted effort

The SMEs wil have demonstrated their expertise a documented in resumes, describing oral presentations at publicmreeting, professional conferences, management briefings, and providing expert testimony In hearings.

Compilation of information to conduct she audits and document findings In the draft SER may require exten•veinterviewing of ataeholders including power plant personnel and Federal, State, and local gowment officials. Alstskeholder Interactions shall be coordinated with the plant PM.

.LO Meetlng anM Trael

Development of the TRP is expected to take up to I week and Is anticipated to occur in December 2011 (Wtea l).

The audit at the Grand Gulf Nuclear Station, Unit 1, is a single audit that is eopected to take up to I week in length andIs scheduled for January 2012 (eave). Routine status meetings (weekly to monthly) by the TM and f1acilitatorshould be conducted using elelmnic means of TeOeIdeo - conferences or other means to minimi travel costs.Progress meetings wilt be quarterly during any active phase of this project, at the discretion of the NRC. Each of thesemeetings between the Contractor and the TM or TL for the task order Is expect to last I day. The Contractor shouldplan to mak available key permsnel assigned to active tasks durng the course of thi meetings. Periodically, aprogram review meeting, which involves NRC and Contractor management, will be held at the Contractoe oflice to.re overall objev and project peformance; propum review are typically held annually. In addilton,meaqrgs et NRC r and technical information gathering bips, such as training, may be necessary and wi beIdentifed by the TM.

Meetings potentially requirin Conrtracto travel are =umma bbelw

" TRP Preparaon: three (3) SMEs, 3-day trip" Sits Audit two (2) SNEs, 5-day trip

SpecaT meeting and tael requirements will be Identified In the flnalfzed project plan. Other travel will be confirmedwi the TM and PM prior to commencement of th vel

6.0 Fkrunad and Technical Status Reports

The Contractor shll submit periodic technical and financial mpoft In accordae with the contract. The estimatedstdffet shoud bercorded t the sub i ve. The work accomplished and the degree of completeress shouldalso be treaked by subteek. The reports are due within 15 calendar days after the end of the reo period (ie, eachfour week perlod). The TM shall receive one copy of the periodic stabs repot and the PO shall reve one copy.See the co*adt for further distrbution requIrements.

Page 23

Page 24: OR SERVICES PAM IFPAE 12 201 · (1) Constitutes an assignment of work outside the general scope of the contract (2) Constitutes a change as defined in the "Changes clause of this

NRC-03-10-081 NRC-TmO

ATrACHMENT E

DELIVERY SCHEDULE

rmfunwhmLd P.Mmdi Am fnr fla emrm#4 rdiffl Nuca~r "*aie f O .4DMLA, . *-UWMI II %V

Deliverable Numewt Delverab i cle t D i ip •li Comivletion Daif15076.0&00&201 Task B: L of Completion 20 working days after

fo~r Bundle of Technical msignment of the task________________Review Packauses _______

15976.06.0082202 Task C: Letter of Completi 5 worift das afterfor Draft RAIs and Draft Audt ompletion of the ombte visitReport Sections Provided atthe End of the Onsb Visit

15076.08.008.203 TaskC: Letter of Completion 5 worifn days after thefor Final Audit Report Sections rece{pt of any NRC owomrmetW any NRC Comments am on #a draft sectionsRecewied

15976.0&008.204 Task D: Letter of Completion 5 workfn daysafter assignedfor Additiona Draft RAIs If anyare Requred

15976.0S8.0205 Task D: Letter of Completio 3 wo"n dlays after rece offor Technically E•• ted Final any NRC commento on draftRAs RAs

1597l&6.6.0206 TaskD: Administratie itsm - 7 wofti days after receingLetter Documenting responses from the applicantAcceptability of RAResponses

15976.0&.00W.207 Task D: Letter of Corp on 15 worWg days Amfor Draft SER Input vth Open completion of the onsm% visIterns

15976.08.008208 Taok D: Letter of Completon 5 wokng days aft receipt offor Final SER Input with Open ay NRC commentsI- __ _ _

'Not CNNWRA aans intamai deerame numlbens tt 54gM ctnumber, 2-di*psnumber. 3-dict task nUmber. and 3-dialt rot nume.

Page 24


Recommended