ML19114A242

Task Order No. 31310019F0010 Under Interagency Agreement No. 31310019N0006

ML19114A242
Person / Time
Issue date:	04/09/2019
From:	Williams M B Acquisition Management Division
To:	US Dept of Energy, Idaho Operations Office
References
31310019N0006
Download: ML19114A242 (18)

Text

INTERAGENCY AGREEMENT1. IAA NO.PAGE OF

2. ORDER NO.

3. REQUISITION NO.4. SOLICITATION NO.5. EFFECTIVE DATE6. AWARD DATE

7. PERIOD OF PERFORMANCE 31310019F0010 NMSS-19-0058 04/15/2019 04/05/2019 04/15/2019 TO 04/14/2024 18 18. SERVICING AGENCY9. DELIVER TO POC TELEPHONE NO.ENERGY IDAHO OPERATIONS OFFICE UNITED STATES DEPT OF1955 FREMONT AVEIDAHO FALLS ID 834021510 ROBERT SUN US NUCLEAR REGULATORY COMMISSION OFFICE OF NMSS 11555 ROCKVILLE PIKE ROCKVILLE MD 20852 ALC: DUNS: 048105530 +4:10. REQUESTING AGENCY POC TELEPHONE NO.11. INVOICE OFFICE Sandra Nesmith ACQUISITION MANAGEMENT DIVISION US NUCLEAR REGULATORY COMMISSION ONE WHITE FLINT NORTH 11555 ROCKVILLE PIKE

ROCKVILLE MD 20852-2738 US NUCLEAR REGULATORY COMMISSION ONE WHITE FLINT NORTH 11555 ROCKVILLE PIKE MAILSTOP O3-E17A ROCKVILLE MD 20852-2738 301-415-6836 ALC: 3100000 DUNS: 040535809 +4:13. LEGISLATIVE AUTHORITY

12. ISSUING OFFICE14. PROJECT ID15. PROJECT TITLE US NRC - HQ ACQUISITION MANAGEMENT DIVISION

MAIL STOP TWFN-07B20M WASHINGTON DC 20555-0001 Energy Reorganization Act of 1974 REVIEW AND CODE MATERIAL EVENT REPORTS AND MAINTAIN THE NUCLEAR MATERIAL EVENTS DATABASE (NMED)16. ACCOUNTING DATA 2019-X0200-FEEBASED-50-50D006-1038-34-5-126-252A-34-5-126-1038 17.ITEM NO.22.AMOUNT 21.UNIT PRICE 20.UNIT 19.QUANTITY 18.SUPPLIES/SERVICES Agreement No. 31310019N0006 Task Order No. 31310019F0010 Title: REVIEW AND CODE MATERIAL EVENT REPORTS AND MAINTAIN THE NUCLEAR MATERIAL EVENTS DATABASE

(NMED)

The NRC and Idaho National Laboratory (INL) hereby enter into this Agreement for the project

titled "Review and Code Material Event Reports

and Maintain the Nuclear Material Events Database

(NMED)."

Continued ...23. PAYMENT PROVISIONS24. TOTAL AMOUNT26a. SIGNATURE OF GOVERNMENT REPRESENTATIVE (REQUESTING) 26b. CONTRACTING OFFICER26c. DATE25a. SIGNATURE OF GOVERNMENT REPRESENTATIVE (SERVICING) 25b. NAME AND TITLE25c. DATE MONIQUE B. WILLIAMS 04/09/2019

$850,000.00 2 IAA NOPAGE OF 18 ORDER NO 31310019F0010 Period of Performance: April 15, 2019 - April 14, 2024 Consideration and Obligations:

(a) Authorized Ceiling $5,543,121.00

(b) The amount presently obligated with respect to this DOE Agreement is $850,000.00. When and

if the amount(s) paid and payable to the DOE

Laboratory hereunder shall equal the obligated

amount, the DOE Laboratory shall not be obligated

to continue performance of the work unless and

until the NRC Contracting Officer shall increase

the amount obligated with respect to this DOE

Agreement. Any work undertaken by the DOE

Laboratory in excess of the obligated amount

specified above is done so at the DOE

Laboratory's sole risk.

The following documents are hereby made a part of this Agreement:

Attachment:

Statement of Work

This agreement is entered into pursuant to the authority of the Energy Reorganization Act of

1974, as amended (42 U.S.C 5801 et seq.). This

work will be performed in accordance with the

NRC/DOE Memorandum of Understanding dated

November 24, 1998. To the best of our knowledge, the work requested will not place the DOE and its

contractor in direct competition with the

domestic private sector.

Notwithstanding the agreement effective dates and period of performance start dates stated

elsewhere in the agreement, the effective date of

the agreement and start date of the period of

performance are the last date of signature by the

parties.

[X] Non-fee Recoverable Work

NRC COR: Robert Sun, 301-415-3421, robert.sun@nrc.gov

, Continued ...

3 IAA NOPAGE OF 18 ORDER NO 31310019F0010 DUNS: 040535809TAS: 31X0200 ALC: 31000001 Master IAA: 31310019N0006 Page 1 of 15 STATEMENT OF WORK (SOW)

NRC Agreement Number NRC Agreement Modification Number NRC Task Order Number (If Applicable)

NRC Task Order Modification Number (If Applicable) 31310019N000 6 31310019F0010 Project Title Review and Code Material Event Reports and Maintain the Nuclear Materia l Events Database (NMED) Job Code Number B&R Number Servicing Agency 34-5-126 Idaho National Laboratory (INL)

NRC Requisitioning Office Period of Performance Nuclear Materials Safety and Safeguards (NMSS)

April 15, 2019

- April 14, 2024 NRC Form 187, Contract Security and Classification Requirements Applicable Not Applicable Involves Proprietary Information Involves Sensitive Unclassified Non Fee-Recoverable Fee-Recoverable (If checked, complete all applicable sections below)

Docket Number (If Fee

-Recoverable/Applicable)

Inspection Report Number (If Fee Recoverable/Applicable)

EPID: CAC: A34010, NB

-NMU-Oversight-Event Evaluation

Page 2 of 15 CONTRACTING OFFICER'S REPRESENTATIVE Contracting Officer's Representative Name: Robert Sun Agency: U.S. Nuclear Regulatory Commission Office: Nuclear Materials Safety and Safeguards Mail Stop:

T-5B60 Washington, DC 20555

-0001 E-Mail: robert.sun@nrc.gov Phone: 301-315-3421 Alternate Contracting Officer's Representative Name: Michelle Burgess Agency: U.S. Nuclear Regulatory Commission Office: Nuclear Materials Safety and Safeguards Mail Stop:

T5B60 Washington, DC 20555

-0001 E-Mail: michelle.burgess@nrc.gov Phone: 301-415-5868 Page 3 of 15 STATEMENT OF WORK

1. BACKGROUND In accordance with its responsibility for evaluating and analyzing operating data for materials licensees, the U.S. Nuclear Regulatory Commission (NRC) collects, reviews, and codes materials license events data, and maintains a database of non

-reactor events. The data are primarily obtained from NRC Daily Reports (licensee telephone reports called into the headquarters or regional operations centers), preliminary notifications (PNs) of events or unusual occurrences, and licensee written reports of materials events submitted to NRC by materials licensees. Telephonic and written licensee reports of events are submitted to NRC under applicable reporting requirements for the licensed materials program. In addition, data may also be obtained from inspection reports, investigation reports, and enforcement action documents.

In addition to data on materials events for NRC licensees, data on (1) materials events dating back to 1991 that have occurred in Agreement States

, and (2) lost non

-Atomic Energy Act (AEA) radioactive material dating back to October 1998, have been formally included in the Nuclear Material Events Database (NMED). The non-AEA lost radioactive material data is also collected from non

-Agreement States as well as Agreement States. The NRC receives approximately 2, 500 event records and updates annually from NRC licensees, non

-licensees (e.g., transportation or found materials events), and Agreement States. Since about 1993

, this data has been maintained in NMED by the Idaho National Laboratory (INL). The NMED system is used to assemble data to support: 1) the NRC performance goals and metrics; 2) reporting to Congress (including abnormal occurrences); 3) the Agency Action Review Meeting; and 4) event trending analysis.

The services to be provided by this agreement, which include providing resources in screening and updating nuclear material events data, ensures that NMED serves as an accurate source of performance data.

2. OBJECTIVE The purpose of the work described below is to provide technical assistance to the NRC staff in meeting NRC obligations for event review and analysis for materials events, and maintenance of NMED. 3. SCOPE OF WORK The scope of this work is to:

(1) collect, review, and code materials events; (2) provide event review, analysis

, and event assessment support to NRC's nuclear materials assessment staff; (3) provide short

-term technical assistance on specific problems covered by the scope of work and approved by the NRC Contracting Officer's Representative (COR)

(4) perform reviews of materials events for the identification of sensitive, unclassified information as well as personal privacy information; (5) develop new procedures and/or modify existing procedures and maintain NMED; (6) maintain and upgrade the NMED Agreement State software (local standalone system provided to States)

(7) upgrade NMED database, software, and website; and (8) ensure all computer security requirements are met

. Note that the task s listed below are not listed in order of priority

.

Page 4 of 15 All products resulting from the performance of this contract are the property of NRC, including, but not limited to the NMED Agreement State software (local standalone system provided to States); and the NMED data, database, software, and website.

Task 1 Collect, Review, and Code Materials Events Reports and Maintain NMED Using currently approved NMED coding procedures, collect, review, and code approximately 2 500 material event reports, which results in an estimated 50 0 new event records and 2000 updated records each fiscal year (FY). Material events include events associated with the use of radioactive material to include byproduct, source, and special nuclear material. Event reports to be entered into NMED include material event reports received from NRC licensees and Agreement States. They also include events reported by non

-Agreement States involving lost and/or found, stolen or abandoned radioactive material. The contractor shall review each event report and determine if the event was required by NRC or compatible Agreement State regulations to be reported to NRC or the Agreement State. Events that are not required to be reported shall not be maintained in NMED Procedures for the review and coding of events shall ensure that all reports received by NRC are properly accounted for to ensure accurate and consistent coding of event reports, inspection reports, etc. Modifications to coding procedures must be approved by the NRC COR before implementation.

The contractor shall maintain a Coding Manual outlining the coding procedures, including current as well as historical information. The Coding Manual shall be updated as modifications to the coding procedures are made. Copies of the Coding Manual shall be available to the NRC COR upon request.

The contractor, where necessary and through coordination with the NRC COR and appropriate NRC office(s), may contact Agreement States and NRC materials licensees on a limited basis to obtain complete and updated information on events. In addition to the above, the contractor, through a review of the data, shall identify to the NRC COR events that meet the criteria for potential Abnormal Occurrences (AOs).

The NMED shall be updated daily as follows:

ENs and PNs shall be entered into the NMED within 2 working days of the contractor's receipt; all other reports are entered within 2 working weeks of receipt. In addition to the above, within 2 working weeks following publication of NUREG

-0900, Report to Congress on Abnormal Occurrences, the contractor shall update the applicable NMED records to include the full description (from the NUREG) of all AO events and indicate that the events are AOs (no longer potential AOs).

Annually, the contractor will dispose of material event reports (event record reference documents) that are more than 2 years old in a secure fashion in Page 5 of 15 accordance with NRC Management Directive (MD) 12.6, NRC Sensitive Unclassified Information Security Program

. Deliverable:

A database of material events shall be updated daily (and uploaded to the NMED website per subtask 4.2). Copies of the coding manual shall be provided to the NRC COR upon request. The due dates shall be coordinated with the NRC COR.

Task 2 Provide Event Review, Analysis and Event Assessment Support to Nuclear Materials Assessment Staff Subtask 2.1 Prepare and publish periodic trending and significant event summary reports in Internet form.

On a fiscal year basis, the contractor shall prepare a summary of the past year of data and an analysis of the annual data for statistical significant trends. The contractor shall use statistical methods to evaluate data trends and patterns to identify any indicators of changing industry performance. Deliverable:

The annual report shall be provided to the NRC COR for review 4 months after the end of the fiscal year.

Subtask 2.2 Perform analyses of NMED data.

Perform various analyses of NMED data as directed by the NRC COR. Examples of these tasks include analysis of statistically significant trends or potential trends. After completion of each analysis, the contractor shall document a summary of the work and costs in a report to the NRC COR. This report may be included in the Monthly Letter Status Report, and is in addition to any technical reports required as part of the analysis. Any requests for such analysis from sources other than the NRC COR shall be referred to the NRC COR. A typical request is expected to take about 1 week, and total requests should not exceed

1. Deliverable:

Data analyses shall be performed as requested. The due dates shall be coordinated with the NRC COR.

Task 3 Short-Term Technical Assistance on Specific Problems Covered by the Scope of Work and Approved by the NRC COR Short-term technical assistance tasks typically shall involve but not be limited to:

Subtask 3.1 NRC and Agreement State staff requests to perform detailed data queries and data downloads estimated at approximately 20 per FY. A typical request is expected to take about 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br />, and the total number of hours for all requests should not exceed 60 hours6.944444e-4 days <br />0.0167 hours <br />9.920635e-5 weeks <br />2.283e-5 months <br /> per FY.

Page 6 of 15 Deliverable:

Detailed data queries shall be performed as requested. The due dates shall be coordinated with the NRC COR.

Subtask 3.2 Assistance to Agreement States in the use and maintenance of the NMED Agreement State software or compatible system, and assistance to website users in the use of the NMED website. Approximately 15 requests for assistance are estimated per FY. A typical request for assistance is expected to take 2 to 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> to process. The total time for all requests should not exceed 1 00 hours0 days <br />0 hours <br />0 weeks <br />0 months <br /> per FY. Deliverable:

Technical assistance shall be provided as requested. Initial contact with requesters shall be made within 2 working days of request.

Task 4 Develop New Procedures and/or Modify Existing Procedures and Maintain the NMED Database, Software, and Website Subtask 4.1 Implement changes in coding procedures and processes for NMED as may be required to accommodate changes in the scope and type of data collected.

Deliverable:

Copies of procedures and descriptions of processes shall be provided to the NRC COR upon request. The due dates shall be coordinated with the NRC COR.

Subtask 4.2 Perform necessary programming and database maintenance functions to:

1) ensure proper operation of the NMED database software and website; and 2) ensure that the data viewable at the NMED website is updated on a daily basis.

Deliverable:

The NMED website database shall be updated daily.

Task 5 Maintain and Upgrade NMED Agreement State Software to States and Upgrade NMED Database, Software, and Website Subtask 5.1 The NMED Agreement State software shall be upgraded every 5 years (unless a less frequent period is designated by the NRC COR) to stay current with changing program and database software requirements. In coordination with the NRC COR, the contractor shall provide training and/or user guidance for the upgrade to NRC and Agreement State personnel. The contractor shall create an upgrade plan in consultation with the NRC COR. The upgrade shall be performed in accordance with the plan. The upgraded software shall be distributed as directed by the NRC COR. The contractor shall provide assistance to the Agreement States in installing the upgraded software. Following completion of the upgrade, the contractor shall perform minor enhancements as directed by the NRC COR. It is anticipated that the contractor shall provide training (remotely

- once a year, or as needed) and technical assistance to Agreement State and/or NRC offices (see Subtask 3.2 for details).

Page 7 of 15 Deliverable:

The NMED Agreement State software shall be upgraded on a periodic basis. The due dates shall be coordinated with the NRC COR.

Subtask 5.2 The NMED database, software, and website shall be upgraded every 5 years (unless a less frequent period is designated by the NRC COR) to stay current with changing program requirements and Internet standards. In coordination with the NRC COR, the contractor shall provide training and/or user guidance for the upgrade to NRC and Agreement State personnel. The contractor shall create an upgrade plan in consultation with the NRC COR. The upgrade shall be performed in accordance with the plan. Following completion of the upgrade, the contractor shall perform minor enhancements as directed by the NRC COR, such as changing the website to more closely replicate the NRC website standards, adding new search capabilities or modifying to accommodate changes made to the NMED Agreement State software. As time and funds permit, the contractor shall provide assistance to non

-Agreement States.

It is anticipated that the contractor shall provide training (remotely- once a year, or as needed) and technical assistance to Agreement State and/or NRC offices (see Subtask 3.2 for details). Deliverable:

The NMED database, software, and website shall be upgraded on a periodic basis. The due dates shall be coordinated with the NRC COR.

Subtask 5.3 The contractor shall document all significant changes made to the NMED Agreement State software and the NMED Internet software (i.e., NMED database, software, and website). The documentation shall include the date and nature of the changes.

The contractor report, "Nuclear Material Events Database, Software, and Website Description," documents the characteristics, functions, and functional relationships of the NMED database, Agreement State software, and website. This document shall be updated as required following upgrades and enhancements of Tasks 4.1, 4.2 , 5.1, and 5.2. The documentation shall include both diagrams and text sufficient to detail the functional relationships and descriptions of the software, tables, and fields. Hard and electronic copies shall be provided to the NRC COR as requested.

Deliverable:

Copies of software change documentation shall be provided to the NRC COR upon request. INL report, Nuclear Material Events Database, Software, and Website Description, shall be updated to reflect database, software, and website upgrades and enhancements. The due dates shall be coordinated with the NRC COR.

Task 6 Development and Maintenance of Information System Security Authorization The contractor shall support the development of all requisite systems authorization, supporting business and application design, test, operation, and maintenance documentation such that all information systems and information systems development, testing, and processing facilities obtain an Authority to Page 8 of 15 Operate (A TO) consistent with the NRC Information Systems Security Program Authorization , National Institute of Standards and Technology (NIST) and Federal Information Security Management Act (FISMA) guidance, and NRC Management Directive (MD) 12.5.

Subtask 6.1 The contractor shall support the efforts to assess the system to determine the system sensitivity level and system type. This may include assistance in development of a security categorization and a risk assessment.

Deliverable:

The due dates and deliverables shall be coordinated with the NRC COR. Subtask 6.2 Upo n determination of the system sensitivity level/type and the security policies and procedures for that level/type system, the contractor shall demonstrat e that all work performed at non

-NRC facilities shall be in facilities, networks, and computers that have been authorized for processing information at the appropriate sensitivity level. This includes systems used in development and testing. Such demonstration can be accomplished via independent demonstration or via documentation that the facilities, networks, and computers have been authorized by the U.S. Department of Energy (DOE) for processing information at the specified system sensitivity level.

Deliverable:

The due dates and deliverables shall be coordinated with the NRC COR. Subtask 6.3 Th e contractor shall support the efforts to authorize the NMED system, which is under FISMA, by assisting with the completion of required security deliverables that may include but is not limited to the following:

Memorandum of Understanding, Interconnection Security Agreements, Security Categorization, Privacy Impact Assessment, E-Authentication Risk Assessment, Security Risk Assessment, System Security Plan (SSP), Contingency Plan, Security Test and Evaluation Plan, Security Test and Evaluation Execution Report, Contingency Plan Test Execution Report, Corrective Actions Plan, and Certification Letter. In addition, the contractor shall support the effort to develop and conduct security tests and evaluations, and contingency plan tests as needed, to ensure or demonstrate system certification.

Deliverable:

The due dates and deliverables shall be coordinated with the NRC COR. Subtask 6.4 Upon completion of the categorization, and authorization of the system, the contractor shall ensure the appropriate level of security controls is implemented and/or maintained with respect to system modifications. All system modifications must comply with NRC security policies and procedures, as well as federal laws, guidance, and standards to ensure FISMA compliance.

Deliverable:

The due dates and deliverables shall be coordinated with the NRC COR.

Page 9 of 15 Subtask 6.5 Upon completion of final versions of any required documents, the contractor will maintain updated versions of the documents, reflecting any system, process, data or facility changes.

Deliverable:

The due dates and deliverables shall be coordinated with the NRC COR. 4. DELIVERABLES, SCHEDULE, AND/OR MILESTONES The contractor shall prepare deliverables for the NRC COR as outlined below. For each deliverable transmitted, identify the project task/subtask number under which the work was performed.

Referenced Section/Task Deliverables/Schedule Task 1 A database of material events shall be updated daily (and uploaded to the NMED website per subtask 4.2). Copies of the coding manual shall be provided to the NRC COR upon request. The due dates shall be coordinated with the NRC COR. Task 2.1 The annual report shall be provided to the NRC COR for review 4 months after the end of the fiscal year.

Task 2.2 Data analyses shall be performed as requested. The due dates shall be coordinated with the NRC COR.

Task 3.1 Detailed data queries shall be performed as requested. The due dates shall be coordinated with the NRC COR.

Task 3.2 Technical assistance shall be provided as requested. Initial contact with requesters shall be made within 2 working days of request.

Task 4.1 Copies of procedures and descriptions of processes shall be provided to the NRC COR upon request. The due dates shall be coordinated with the NRC COR.

Task 4.2 The NMED website database shall be updated daily.

Task 5.1 The NMED Agreement State software shall be upgraded on a periodic basis. The due dates shall be coordinated with the NRC COR.

Task 5.2 The NMED database, software, and website shall be upgraded on a periodic basis. The due dates shall be coordinated with the NRC COR.

Page 10 of 15 Task 5.3 Copies of software change documentation shall be provided to the NRC COR upon request. INL report, Nuclear Material Events Database, Software, and Website Description, shall be updated to reflect database, software, and website upgrades and enhancements. T he due dates shall be coordinated with the NRC COR.

Task 6.1 The deliverables and due dates shall be coordinated with the NRC COR.

Task 6.2 The deliverables and due dates shall be coordinated with the NRC COR.

Task 6.3 The deliverables and due dates shall be coordinated with the NRC COR.

Task 6.4 The deliverables and due dates shall be coordinated with the NRC COR.

Task 6.5 The deliverables and due dates shall be coordinated with the NRC COR.

Section 11 Monthly Letter Status Reports (MLSR) are due the 20th day of each month.

5. TECHNICAL AND OTHER SPECIAL QUALIFICATIONS REQUIRED Contractor personnel assigned to the task of reviewing and coding materials events reports shall have the following qualifications:

Sufficient knowledge of NRC and equivalent Agreement State rules and regulations on reporting requirements for material licensees to review and code event records from event reports including ENs, PNs, inspection reports, licensee reports, and Agreement State reports; Sufficient knowledge and familiarity with the application of the NRC abnormal occurrences criteria; Sufficient knowledge of the applications of various medical modalities (e.g., brachytherapy and thyroid ablation therapy) and medical device functionality (e.g., dose calibrators);

A thorough knowledge of health physics and radiation safety practices associated with: 1) the use of material covered under the AEA (e.g., byproduct, naturally occurring and accelerator

-produced [NARM], source, and special nuclear material in medical applications, research, industrial radiography, well logging, industrial Page 11 of 15 measuring, and irradiators); and 2) the transportation and disposal of such material; and A high level of knowledge of the operation of computer database systems and the NMED database data entry application.

Contractor personnel assigned to the task of updating and maintaining the software systems shall have a thorough knowledge of and demonstrated experience in database design methodology and programming in Microsoft Access and Internet applications. Also, these personnel shall have thorough knowledge of information technology (IT) security as appropriate for their role (e.g., system administrators must receive training in the IT security of the operating system being used, system architects must receive training in IT security architecture) as specified in the NIST Special Publication 800

-16 or the most current IT security training requirements.

Contractor personnel assigned to the task of performing statistical analyses of NMED data shall have a high level of knowledge and experience in performing data analysis and trending on small data sets.

Contractor personnel assigned to Task 6 shall have a thorough knowledge of, and experience in, the information systems security required for the Federal government (FISMA) and the ability to implement the NRC's Information Systems Security Authorization process as defined under the Project Management Methodology (PMM). Experience in FISMA includes identifying system security risks, mitigating the risks to an acceptable level in order to authorize the system, and documenting the controls which were established.

6. KEY PERSONNEL

Key personnel assigned to this task order are as follows:

7. MEETINGS AND TRAVEL No travel is anticipated under this agreement.

8. TRAINING FOR THE CONTRACTOR Depending upon the availability of space, contractor staff members assigned to the review and coding of materials events shall be authorized to attend online training or webinars available through the NRC as needed. The contractor shall select the training course(s) in consultation with the NRC COR.

Page 12 of 15 9. NRC-FURNISHED MATERIAL Copies of licensee event reports including ENs, PNs, Daily Reports, inspection reports, etc., are obtainable through the NRC's public website (including PARS). The NRC COR will provide the contractor with copies of the PMM and NRC MD s 2.8 and 12.6.

1 0. REPORTING REQUIREMENTS 1 0.1 Monthly Letter Status Reports (MLSR)

The contractor shall submit a MLSR by the 20th day of each month following the period reported. The MLSR should contain at a minimum all of the required information as shown in NRC's MD 11.7, Exhibit 7, "Monthly Letter Status Report Requirements." 1 0.2 Technical Reports The contractor shall prepare draft and final versions of all written deliverables. These deliverables shall be prepared in accordance with MD 11.7, "NRC Procedures for Placement and Monitoring of Work with the U.S. Department of Energy (DOE)," Part 2.

Within 30 days of receipt of each draft deliverable, the NRC COR will provide comments for use in the final deliverable. These comments will identify potential problem areas, discrepancies, and technical insights on the draft. A final report shall be prepared within 30 days from receipt of NRC draft deliverable comments. 1 0.3 MLSR and Deliverable Distribution The following summarizes the required distribution under this SOW. The NRC COR shall provide the contractor PM with current NRC mailing addresses for this distribution. Electronic submittal in accordance with NRC policies may be substituted for hard copy distribution.

Draft/Final MLSR Written Distribution Reports Deliverables NRC COR (Primary) 1 1 Robert Sun NRC COR (Backup) 1 1 Michele Burgess

Page 13 of 15 1 1. SPECIALLY REQUIRED DATA PROCESSING All data files developed and maintained under this project shall be user friendly and compatible with desktop computers operating in an MS Windows 7 or later operating system or Windows 7 environment using Microsoft Word 2013, and Microsoft Access 20 13 or later version of the software. If any deliverable is provided on a compact disk (CD) or digital video disk (DVD), the CD or DVD shall be scanned for viruses prior to delivery to NRC.

NRC has a Project Management Methodology (PMM), MD 2.8, which provides guidance regarding things to consider and steps to be taken in developing and maintaining application systems. The contractor shall follow practices similar to those in NRC's PMM. Through thes e practices, the contractor shall ensure that tracking/management, design validation, configuration management, and software quality requirements are met. It shall be the contractor's responsibility to be familiar with the latest version of NRC's PMM.

All software development, modifications or maintenance tasks shall follow general guidance in MD 2.8 and specific quality guidance designated by the NRC COR. 1 2. REFERENCES NRC MD 2.8, "Project Management Methodology (PMM)" ADAMS Accession Number ML071900252 NRC M D 3.14, "U.S. Nuclear Regulatory Commission External Web Site" ADAMS Accession Number ML041270384 NRC MD 11.7, "NRC Procedures for Placement and Monitoring of Work With the U.S. Department of Energy (DOE)" ADAMS Accession Number ML070870004 NRC MD 12.1, "NRC Facility Security Program" ADAMS Accession Number ML072270008 NRC MD 12.2, "NRC Classified Information Security Program" ADAMS Accession Number ML072270009 NRC MD 12.3, "NRC Personnel Security Program" ADAMS Accession Number ML041770520 NRC MD 12.4, "Telecommunications Systems Security Program" ADAMS Accession Number ML041700601 NRC MD 12.5, "NRC Automated Information Security Program" ADAMS Accession Number ML052310031

Page 14 of 15 NRC MD 12.6, "NRC Sensitive Unclassified Information Security Program" ADAMS Accession Number ML041700603 NRCAR 2052.204

-70, "Security" http://www.nrc.gov/about

-nrc/contracting/48cfr

-ch20.html#_1_189 Atomic Energy Act of 1954, as amended, 42 U.S.C. 2011 et seq.; 18 U.S.C. 793 and 794 Clinger-Cohen Act Director of Central Intelligence Directives 6

-1, 6-3, 6-5, and 8-1 Executive Orders 12958, 12968, and 13356 Federal Enterprise Architecture (FEA)

Federal Information Processing Standards (FIPS) 199, 200, and 201 Federal Information Security Management Act (FISMA)

Financial Management Improvement Act Financial Management Integrity Act FIPS 140-2, "Security Requirements for Cryptographic Modules" http://csrc.nist.gov/publications/fips/fips140

-2/fips1402.pdf Homeland Security Presidential Directives 7 and 12 Intelligence Reform and Terrorism Prevention Act National Security Directive 42 National Strategy for Secure Cyberspace NIST 800 Series Office of Management and Budget (OMB) Memorandum M 22, "OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002" OMB M-04-04, "E-Authentication Guidance for Federal Agencies" OMB M-05-04, "Policies for Federal Agency Public Websites" OMB Circulars A

-11, A-123, and A

-130 OMB Information System Security Line of Business Privacy Act of 1974 Requirements for Contractors Developing Content for NRC

-Sponsored Web Domains

Page 15 of 15 1 4. NEW STANDARDS FOR PREPARING NUREG

-SERIES MANUSCRIPTS The NRC began to capture most of its official records electronically on January 1, 2000. T he NRC will capture each final NUREG

-series publication in its native application. Therefore, the final manuscript that has been approved by the NRC COR should be submitted in both electronic and camera

-ready copy. All format guidance, as specified in NURE G-0650, Revision 2, will remain the same with one exception. The NUREG

-series designator on the bottom of each page of the manuscript is no longer required. The NRC will assign this designator when the camera

-ready copy is sent to the printer by NRC, and will place the designator on the cover, title page, and spine. The designator for each report will no longer be assigned when the decision to prepare a publication is made. The NRC's Publishing Services Branch will inform the NRC COR for the publication of the assigned designator when the final manuscript is sent to the printer. The electronic manuscript shall be prepared in the text in the NRC agency standard software for correspondence. Any of the following file types for charts, spreadsheets, etc.:

File Type File Extension

Microsoft Office PowerPoint

.ppt Portable Document Format.pdf Microsoft Office Word.doc Microsoft Office Excel.xls This list is subject to change if new software packages come into common use at NRC or by its licensees or other stakeholders that participate in the electronic submission process. If a portion of the manuscript is from another source and an acceptable electronic file type for this portion (e.g., an appendix from an old publication) cannot be obtained, the NRC can, if necessary, create a tagged image file format (file extension.tif) for that portion of the report. Original photographs should be submitted to be scanned, since digitized photographs do not print well.

If a CD of the publication is used, the CD copies of the manuscript should include

1) a portable document format (PDF) and 2) a Microsoft Office Word file format

.