15B51926Q00000007- Solicitation.pdf

15B51926Q00000007 Page 1 of 28

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24 AND 30.

1. REQUISITION NUMBER

15B51926PR000210

PAGE 1 OF

5. SOLICITATION NUMBER

15B51926Q00000007

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 6. SOLICITATION ISSUE

DATE

05/06/2026

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

Jerry Johnson j30johnson@bop.gov

b. TELEPHONE NUMBER (No collect calls) 8. OFFER DUE DATE / LOCAL

TIME

05/21/2026 09:00 ET

CODE 15BGCS

Federal Bureau of Prisons

Field Acquisition Office

U.S. Armed Forces Reserve Complex

346 Marine Forces Drive

Grand Prairie, TX 75051

9. ISSUED BY X UNRESTRICTED OR SET ASIDE: % FOR

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

WOMEN-OWNED SMALL

BUSINESS (WOSB)

ECONOMICALLY DISADVANTAGED

WOMEN-OWNED SMALL BUSINESS

(EDWOSB)

8(A)

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

Employees

10. THE ACQUISITION IS

SEE SCHEDULE

11. DELIVERY FOR FREE ON BOARD

(FOB) DESTINATION UNLESS

BLOCK IS MARKED

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER THE

DEFENSE PRIORITIES AND

ALLOCATIONS SYSTEM -

DPAS (15 CFR 700)

13b. RATING

X REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

14. METHOD OF SOLICITATION

CODE15. DELIVER TO CODE16. ADMINISTERED BY

FACILITY

CODE

CODE

TELEPHONE NUMBER

17a. CONTRACTOR/

OFFEROR

15B519CODE18a. PAYMENT WILL BE MADE BY

Federal Bureau of Prisons USP Pollock 1000 Air Base Road Pollock, LA 71467 h7smith@bop.gov

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER SEE ADDENDUM

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

Ultrasound Services for AIC population at FCC Pollock per Statement of Work

UEI _____________________

Email ___________________ Firm Fixed Price

See Continuation Sheet(s) (Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

X 27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

ARE X ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN ____ COPIES TO

ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ALL ITEMS SET FORTH

OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT TO THE

TERMS AND CONDITIONS SPECIFIED.

29. AWARD OF CONTRACT: REFERENCE _____________________________

OFFER DATED _________________ . YOUR OFFER ON SOLICITATION (BLOCK

5) INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED 31b. NAME OF THE CONTRACTING OFFICER (Type or print)

Jerry Johnson

31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

15B51926Q00000007 Page 2 of 28

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: _________________________________

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

PARTIAL FINAL

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

COMPLETE PARTIAL FINAL

36. PAYMENT 37. CHECK NUMBER

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 11/2021) BACK

15B51926Q00000007 Page 3 of 28

Table of Contents

Section Description Page Number

1 Solicitation/Contract Form 2 Commodity or Services Schedule 3 Contract Clauses

2852.201-70 Contracting Officer's Representative (COR) (NOV 2020) 2852.222-70 Domestic Violence, Sexual Assault, and Stalking (DEC 2014) 2852.223-70 Unsafe Conditions Due to the Presence of Hazardous Material (NOV 2020) DOJ-05 Security of Department Information and Systems (OCT 2023) DOJ-07 Prohibition On Access By Non-U.S. Citizens To DOJ IT Systems (MAR 2002) 52.203-17 Contractor Employee Whistleblower Rights (Nov 2023) 52.204-13 (DEV) System for Award Management-Maintenance (Oct 2018) (DEVIATION NOV 2025) 52.209-10 (DEV) Prohibition on Contracting With Inverted Domestic Corporations (Nov 2015)

(DEVIATION NOV 2025)

52.212-4 (DEV) Terms and Conditions-Commercial Products and Commercial Services (Nov

2023) (DEVIATION NOV 2025)

52.222-41 (DEV) Service Contract Labor Standards (Aug 2018) (DEVIATION DEC 2025) 52.222-43 (DEV) Fair Labor Standards Act and Service Contract Labor Standards-Price Adjustment (Multiple Year and Option Contracts) (Aug 2018) (DEVIATION DEC 2025) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-3 (DEV) Protest after Award (Aug 1996) (DEVIATION NOV 2025) 52.240-91 (DEV) Security Prohibitions and Exclusions (DEVIATION NOV 2025) 52.233-4 (DEV) Applicable Law for Breach of Contract Claim (Oct 2004) (DEVIATION NOV 2025) DOJ-01 Whistleblower Information Distribution (Oct 2021) DOJ-03 Personnel Security Requirements For Contractor Employees (Nov 2021) DOJ-08 Continuing Contract Performance During a Pandemic Influenza or other National Emergency (OCT 2007)

4 List of Attachments 5 Solicitation Provisions

52.204-7 (DEV) System for Award Management-Registration (Nov 2024) (DEVIATION NOV 2025) 52.212-1 (DEV) Instructions to Offerors-Commercial Products and Commercial Services (Sep

2023) (DEVIATION NOV 2025)

2852.233-70 Protests Filed Directly with the Department of Justice (NOV 2020) 52.212-2 (DEV) Evaluation-Commercial Products and Commercial Services (Nov 2021)

(DEVIATION NOV 2025)

52.217-5 (DEV) Evaluation of Options (July 1990) (DEVIATION AUG 2025)

15B51926Q00000007 Page 4 of 28

Section 2 - Commodity or Services Schedule

SCHEDULE OF SUPPLIES/SERVICES

CONTINUATION SHEET

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 Ultrasound Services

Effective Date of Award (EDOA) through 12 months from EDOA

PSC: Q201

12 $________ $_________________

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0002 Ultrasound Services

13 months from Effective Date of Award (EDOA) through 24 months from EDOA

PSC: Q201

12 $________ $_________________

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0003 Ultrasound Services

25 months from Effective Date of Award (EDOA) through 36 months from EDOA

PSC: Q201

12 $________ $_________________

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0004 Ultrasound Services

49 months from Effective Date of Award (EDOA) through 60 months from EDOA

PSC: Q201

12 $________ $_________________

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0005 Ultrasound Services

49 months from Effective Date of Award (EDOA) through 60 months from EDOA

PSC: Q201

12 $________ $_________________

15B51926Q00000007 Page 5 of 28

Section 3 - Contract Clauses

A.1 ADDENDUM TO FAR 52.212-4, Terms and Conditions-Commercial Products and Commercial Services (Nov

2023) (DEVIATION NOV 2025)

The terms and conditions for the following clauses are hereby incorporated into this solicitation and resulting contract as an addendum to FAR clause 52.212-4.

Clauses By Reference

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

Clause Title Fill-ins (if applicable)

52.203-17 Contractor Employee Whistleblower Rights (Nov 2023)

52.204-13 (DEV) System for Award Management-Maintenance (Oct 2018)

(DEVIATION NOV 2025)

52.209-10 (DEV) Prohibition on Contracting With Inverted Domestic

Corporations (Nov 2015) (DEVIATION NOV 2025)

52.212-4 (DEV) Terms and Conditions-Commercial Products and

Commercial Services (Nov 2023) (DEVIATION NOV

2025)

52.222-41 (DEV) Service Contract Labor Standards (Aug 2018)

(DEVIATION DEC 2025)

52.222-43 (DEV) Fair Labor Standards Act and Service Contract Labor

Standards-Price Adjustment (Multiple Year and Option

Contracts) (Aug 2018) (DEVIATION DEC 2025)

52.232-40 Providing Accelerated Payments to Small Business

Subcontractors (Mar 2023)

52.233-3 (DEV) Protest after Award (Aug 1996) (DEVIATION NOV 2025)

52.240-91 (DEV) Security Prohibitions and Exclusions (DEVIATION NOV

2025)

15B51926Q00000007 Page 6 of 28

Clauses By Full Text

Statement of Work - Ultrasound Services - FCC Pollock

Subject The Federal Correctional Institution in Pollock, LA intends to make a single award of a firm fixed price requirements type contract to a responsible entity for the provision of professional ultrasound services, including diagnostic and therapeutic ultrasonic procedures, as prescribed in the description of duties listed below at the FCC Pollock Federal Correctional Institution in Pollock, LA.

Place of Performance Ultrasound Services will be performed in the Health Services Department at FCC Pollock, 1000 Airbase Road, Pollock, LA, 71467.

Schedule A session is defined as one clinic per month. The contractor will normally provide 1 (8) hour session per month, Monday- Friday excluding Federal Holidays.

Due to the nature of the correctional setting, delays in performance of work may be experienced. Such delays may include but are not limited to inclement weather, electrical or mechanical problems, or other security matters. When contract employees report to the institution but are unable to perform services due to such delays, the contractor will be paid for one clinic. The facility will provide the contract company with a minimum of twenty-four (24) hours’ notice to cancel a scheduled day’s service to avoid charges for that day.

Education and Experience The contract company shall provide exclusive technical personnel with appropriate registries, according to state of Louisiana and federal requirements, for completion of Radiological ultrasound studies. The contract employee must have at least three or more years of experience. Background clearance packets submitted by potential contractor employees shall be accompanied by a certified or photostatic copy of their current license.

The Contractor must be Cardio-Pulmonary Resuscitation (CPR) certified, in accordance with the American Heart Association or American Red Cross. The contractor must possess and submit with their quotation, evidentiary documentation of their graduation from an accredited school of radiology technology. In the case of a company, the qualified individual selected to perform these services on behalf of the contractor must be identified at the time the quotation is submitted.

Verification of credentials (state licensed if applicable federal licensed).

Proof of Insurability Verify certification in CPR Failure to submit evidentiary documentation of certifications, licenses, qualifications, or the name of a qualified candidate who will perform these services may result in elimination from consideration for award. The individual selected to perform these services must be able to pass a drug screening and law enforcement agency background check.

Supplies and Equipment The Ultrasound equipment used at the facility shall be provided by the contractor and shall be under the direction of the contract manger. Any maintenance and service of this equipment is the sole responsibility of the contractor.

The facility will provide the contractor’s employees with the adequate space necessary to perform ultrasound services on the premises of the facility. The facility will not be responsible for providing any ultrasound equipment.

Health Requirements The contractor shall ensure their employee is free of communicable diseases. Any individual who subsequently develops a medical condition which might reasonably be expected to place other workers, inmates, or the public at risk shall be immediately removed from affected activities. In any such case, the contractor shall be responsible, at no additional cost to the institution, for securing the services of any replacement personnel required to perform this contract.

The contract employee may be required to submit to testing for/or provide evidence acceptable to the clinical director of recent testing for tuberculosis of other communicable diseases. Failure to submit to testing for or providing acceptable evidence of recent testing for or immunity to selected communicable diseases shall be grounds for denying access to inmates. The contract employee shall immediately inform, in writing to the Contract Officer’s Representative (COR) and Administrative Contracting Officer, and adverse action taken by any regulatory body involving certification. This includes, but is not limited to, suspensions, revocations, restrictions on licensure of contract employees.

15B51926Q00000007 Page 7 of 28

Description of Duties The services to be provided are professional in nature, and will be commensurate with The Joint Commission (TJC) standards of care. The methods utilized will meet medical practices established in the local community. These services, although not directly supervised, will be reviewed periodically by a physician or staff member at the institution. The performance of these services will be monitored by the COR. The Clinical Director and/or Bureau of Prisons’ (BOP) Physician(s) will retain professional responsibility for all patients referred to radiology.

The contractor shall provide qualified personnel, equipment, and expertise to perform ultrasonic procedures “in house” at the facility, which may include:

• Scope of Services -Diagnostic imaging (e.g., abdominal, vascular, musculoskeletal) -Portable/mobile ultrasound services at designated locations -Image interpretation and reporting by certified sonographers and/or radiologists -Receive training and orientation and comply with correctional techniques as they pertain to medical services.

- Receive patients and explain procedures to alleviate undue anxiety.

-Independently assess and select technical exposure factors and positions necessary to obtain a proper quality diagnostic exam.

-Possess knowledge of various pathological abnormalities as demonstrated by ultrasonic imaging.

-Possess knowledge of basic emergency situations that may occur during special ultrasonic procedures.

-Work with an inmate population from a variety of cultural, racial, religious and ethnic backgrounds.

• Deliverables -High-quality ultrasound images in DICOM or agreed format of up to 10 studies per clinic, with any studies over the threshold will be charged an additional fee per study.

-Written diagnostic reports within 48 hours of procedure completion

• Performance Standards -Compliance with HIPPA -Minimum image resolution and clarity standards as per institutions guidelines -Timely completion of procedures and reporting within agreed turnaround times -Adherence to infection control and patient safety protocols

Attire Additionally, the contractor is required to dress appropriately for the work environment. This includes business attire or scrubs (black and blue scrub uniforms are approved). The attire worn shall also be appropriate for the correctional environment in which the contract employee will be performing. Jeans (of any color), T-shirts, sandals (of any type), tank tops, and sweatpants/shirts are not considered appropriate professional attire. FCC Pollock will not be responsible for providing a uniform allowance.

Patient Management The contractor will be responsible for receiving patients and explaining procedures to alleviate undue anxiety, submitting reports and evaluations as requested. The contractor will be responsible for following directives and comply with Bureau of Prisons Health Services Manual, local institutional mandates, and the Health Services Department’s policies in the management of all patient encounters.

Patients shall be afforded impartial access to treatment or accommodations that are available or medically indicated, regardless of race, creed, sex, national origin, or religion. Staffing shall be commensurate with the expected needs of the patients and within the scope of services offered. The contractor shall NOT provide information to the inmates(s).

If the situation arises where inmate(s) are required to be provided information, the Clinical Director, Health Services Administrator (HSA), or COR shall provide any information the inmate(s) are to receive. The contractor is required to maintain an open line of communication with the Clinical Director, HSA, and COR.

Inmate Management Provision of services will require frequent and unsupervised contact with inmates. The contract employee shall not be responsible for the management of any inmates, other than to ensure inmates involved within the contract’s scope of work abide by all rules to ensure their safety and well-being. The successful contractor shall attend the Institution Familiarization Orientation program prior to assuming institution involvement. Reimbursement to the contractor for the time spent in the institution orientation or other specific security related training will be at the contract rate, prorated hourly. The contractor may, at any time, be removed from the institution at the discretion of the CEO. The contractor is to constantly be aware of security and maintain a professional relationship with inmates at all times. Any violation of the institution rules and regulations are to be brought immediately to the attention of any Government employee employed

15B51926Q00000007 Page 8 of 28 at the institution. The contractor will be required to provide documentation to the COR, or designee, of any infractions of institutional rules and regulations by inmates for proper action.

Institution Security The contractor/contract employees shall agree to all regulations prescribed by the institution for the safety, custody, and conduct of inmates. The contract employee will be required to operate a system of records as identified for medical treatment documentation, and will require adherence to the Privacy Act of 1974. The contract employee will be required to sign in and out of the institution for accountability purposes. A badge will be issued and worn at all times for proper identification.

Non-Personal Services/Common Law Employee Information The service is a contractual arrangement and not a personnel appointment. Payment is based on the provision of an end product or the accomplishment of a specific result. The service does not constitute an employer/employee relationship.

The contractor will not be subject to Government supervision, except for security related matters. However, contractor performance shall be monitored.

If the resulting contract is made to an individual(s), the provision of these services has been determined to meet certain criteria for creating common law employee relationship. Therefore, the BOP is responsible for the payment of FICA taxes (7.65%) and the withholding of the individual’s taxes. These responsibilities apply only when award of this solicitation is made to an individual. It does not apply to companies or individuals who are incorporated. For evaluation purposes, an additional 7.65% will be added to the price submitted by individuals who are not incorporated.

2852.201-70 Contracting Officer's Representative (COR) (NOV 2020)

(a) Mr./Ms. Carrie Scott of FCC Pollock , 1000 Airbase Rd, Pollock, LA 71467 , 318-561-5300 , is hereby designated to act as Contracting Officer's Representative (COR) underTBD , for the period of EDOA through 60 months from EDOA (specify the performance period of the contract that the designation covers).

(b) Performance of work under this contract is subject to the technical direction of the COR identified above, or another representative designated in writing by the Contracting Officer. The term “technical direction” includes, without limitation, the following:

(i) Receiving all deliverables;

(ii) Inspecting and accepting the supplies or services provided in accordance with the terms and conditions of this contract;

(iii) Clarifying, directing, or redirecting the contract effort, including shifting work between work areas and locations, filling in details, or otherwise serving to accomplish the contractual statement of work to ensure the work is accomplished satisfactorily;

(iv) Evaluating performance of the Contractor; and

(v) Certifying all invoices/vouchers for acceptance of the supplies or services furnished for payment.

(c) The COR does not have the authority to issue direction that:

(i) Constitutes a change of assignment or work outside the contract specification/work statement/scope of work.

(ii) Constitutes a change as defined in the clause entitled “Changes” or other similar contract term.

(iii) Causes, in any manner, an increase or decrease in the contract price or the time required for contract performance;

(iv) Causes, in any manner, any change in a term, condition, or specification or the work statement/scope of work of the contract;

(v) Causes, in any manner, any change or commitment that affects price, quality, quantity, delivery, or other term or condition of the contract or that, in any way, directs the contractor or its subcontractors to operate in conflict with the contract terms and conditions;

(vi) Interferes with the contractor's right to perform under the terms and conditions of the contract;

(vii) Directs, supervises, or otherwise controls the actions of the Contractor's employees or a Subcontractor's employees.

(d) The Contractor shall proceed promptly with performance resulting from the technical direction of the COR. If, in the opinion of the Contractor, any direction by the COR or the designated representative falls outside the authority of (b) above and/or within the limitations of (c) above, the Contractor shall immediately notify the Contracting Officer.

(e) Failure of the Contractor and Contracting Officer to agree that technical direction is within the scope of the contract is a dispute that shall be subject to the “Disputes” clause and/or other similar contract term.

(f) COR authority is not re-delegable.

(End of Clause)

Tailoring: Contract Administration Data

Type of Contract:

15B51926Q00000007 Page 9 of 28

The Government contemplates a single award of an indefinite delivery/requirements type contract with firm fixed unit prices resulting from this solicitation. It is anticipated that the contract resulting from this solicitation will be awarded in May 2026, with an anticipated Effective Date of Award (EDOA) of June 01, 2026. On or about the EDOA, FCC Pollock will issue a delivery/task order to the contractor. The contractor shall commence full performance services on the EDOA.

The quantity of services to be provided by the Contractor is estimated. These estimates are not a representation to a quoter or contractor that the estimated quantities will be required or ordered, or that conditions affecting requirements will remain stable or normal. Contract pricing shall include all charges to the Government for providing the services required by this solicitation." Pursuant to FAR 17.203(c), the Government’s evaluation shall be inclusive of options. The Government will evaluate quotes for award purposes by adding the total price of all options to the total price of the base year requirement. Quoters may offer varying prices for options, depending on the quantities actually ordered and the dates when ordered. The resulting contract will include a base year period from the effective date of award (EDOA) through 12 months from the EDOA with four (4) possible 12-month option years and a six (6) month option period for renewal at the unilateral discretion of the Government. Quoters are advised that the Government has the unilateral right to exercise option periods in accordance with FAR 52.217-9, "Option to Extend the Term of the Contract” and FAR 52.217-8, "Option to Exend Services."

Performance Period(s): The anticipated Effective Date of Award (EDOA) Base Year: Effective Date of Award (EDOA) through 12 months from EDOA;

Option Year 1: 13 months from EDOA through 24 months from EDOA Option Year 2: 25 months from EDOA through 36 months from EDOA Option Year 3: 37 months from EDOA through 48 months from EDOA Option Year 4: 49 months from EDOA through 60 months from EDOA

Point of Acceptance: The point of acceptance for services is FCC Pollock.

Service Contracting Information: This service is a contactual arrangement and not a personal appointment. Payment is based on the provison of an end product or the accomplishment of a specific task. The service does not constitute an employer/employee relationship. The contractor will not be subject to Government supervision, except for security related matters. However, contractor performance shall be monitored. The contractor shall attend all training required by the Bureau of Prisons for contract workers. The contractor will not be permitted to attend istitution meetings, staff recalls or Government training sessions for institution staff.

Reviews: The Contracting Officer or designee is authorized to review by on-site survey, review of records, or by any other reasonable manner, the quality of supplies rendered under this contract. All records shall be subject to review by the Contracting Officer or other representative of the BOP. Payments will be denied when such service does not support the charges or if the service is deemed not necessary or appropriate. Such determinations may be made by the Contracting Officer or Contracting Officer Representative (COR), whichever is appropriate. All records shall be subject to review by the Contracting Officer or other delegated representatives of the BOP.

Contracting Officer Responsibility: Authority to negotiate changes in the terms, conditions, or amounts cited in this contract is reserved to the Contracting Officer. This responsibility may be delegated to an Administrative Contracting Officer by the Contracting Officer.

Contract Administration Office (CAO): The Contracting Office at USMCFP Springfield is assigned to be the CAO for a resultant contract. This assignment carries with it the authority to perform all normal contract administration functions as listed in FAR 42.302(a), items 1 through 71; to the extent those functions apply to this contract. This assignment also includes delegation of authority to perform functions specified in FAR 42.302(b), items 1 through 11.

Authorized Ordering Official: Individual task orders may be issued only by the Contracting Officer, Administrative Contracting Officer, or an ordering official for FCC Pollock with an appropriate certificate of appointment. Each task order will identify the services schedule for that period. Orders can be issued orally, by facsimile, mail, or electronic commerce methods. Task orders will take the form of an SF-1449.

Delivery Tickets and Invoices: An itemized invoice shall be submitted on a per month basis and/or upon expiration the contract, whichever occurs first, for all services received during a billing period to include total dollar values and from which payment has not been received.

A proper invoice shall consist of:

Name and address of the contractor;

Invoice date and number;

15B51926Q00000007 Page 10 of 28

Contract Number: Terms of any discount for prompt payment offered;

Name, title, and phone number of person to notify in event of defective invoice;

Dates of service with itemized list of services provided

The individual invoice will be paid once monthly. The period of discount, if applicable, will commence on the final date of the billing period or the date of the receipt of the invoice for all services accepted during the billing period, whichever is later. An invoice will be considered received on the date it is received by the Financial Management Department. These invoices are to be submitted to the following address:

Requirements for Security Clearances: The Contractor will not be subject to Government supervision, except for security related matters and monitoring of contract performance. The following investigative procedures may be applied and appropriate forms completed before any Contractor employees are permitted inside an institution: (1) National Crime Information Center (NCIC) check; (2) Declaration of Federal Employment (OF-306); (3) FD-258 (fingerprint check); (4) Law Enforcement Agency checks; (5) Vouchering of Employers; (6) Employment Resume; (7) Completed Contractor Pre-employment Questionnaire; (8) Release of Information; (9) Questionnaire for Sensitive Positions (SF-85 for Low Risk, SF-85P for above low risk); (10) Credit Check, if applicable; (11) Urinalysis, if applicable. Quoters should also note that clause DOJ-03, Personnel Security Requirements for Contractor Employees (Nov 2021) requires that contractor personnel have a "favorable credit report". Quoters are strongly encouraged to pre-screen potential candidates for credit issues before submitting the candidate to FCC Pollock.

By submitting a quote for service, the contractor and its employees agree to complete the required documents and undergo the listed procedures. An individual who does not pass the security clearance will be unable to enter the Bureau facility. Any individual employed by the contractor who is deemed not suitable by the Bureau requirements will not be granted access to perform services under the contract. This is a condition of the contract. Finally, the contractor shall be in compliance with 8 CFR 274a regarding employment of aliens.

2852.222-70 Domestic Violence, Sexual Assault, and Stalking (DEC 2014)

(a) It is DOJ policy to enhance workplace awareness of and safety for victims of domestic violence, sexual assault, and stalking. This policy is summarized in “DOJ Policy Statement 1200.02, Federal Workforce Responses to Domestic Violence, Sexual Assault, and Stalking,” available in full for public viewing at: http://www.justice.gov/sites/default/files/ovw/ legacy/2013/12/19/federal-workplacee-responses-to-domesticeviolence-sexualassault-stalking.pdf.

Vendor agrees, upon contract award, to provide notice of this Policy Statement, including at a minimum the above-listed URL, to all Vendor employees and employees of subcontractors who will be assigned to work on DOJ premises.

(b) Upon contract award, DOJ will provide the Contractor with the name and contact information of the point of contact for victims of domestic violence, sexual assault, and stalking for the component or components where the Contractor will be performing. The Contractor agrees to inform its employees and employees of subcontractors, who will be assigned to work on DOJ premises, with the name and contact information of the point of contact for victims of domestic violence, sexual assault, and stalking.

(End of Clause)

2852.223-70 Unsafe Conditions Due to the Presence of Hazardous Material (NOV 2020)

(a) “Unsafe condition” as used in this clause means the actual or potential exposure of Contractor or Government employees to a hazardous material.

(b) “Hazardous Material” as used in this clause includes any material defined as hazardous under the latest version of Federal Standard No. 313 (including revisions adopted during the term of the contract), any other potentially hazardous material requiring safety controls, or any other material or working condition designated as hazardous by the Contracting Officer's Representative (COR).

(c) The Occupational Safety and Health Administration (OSHA) is responsible for issuing and administering regulations that require Contractors to apprise its employees of all hazards to which they may be exposed in the course of their employment; proper conditions and precautions for safe use and exposure; and related symptoms and emergency treatment in the event of exposure.

(d) Prior to commencement of work, Contractors are required to inspect for and report to the Contracting Officer the presence of, or suspected presence of, any unsafe condition including asbestos or other hazardous materials or working conditions in areas in which they will be working.

15B51926Q00000007 Page 11 of 28

(e) If during the performance of the work under this contract, the Contractor or any of its employees, or subcontractor employees, discovers the existence of an unsafe condition, the Contractor shall immediately notify the Contracting Officer, or designee (with written notice provided not later than three (3) working days thereafter), of the existence of an unsafe condition. Such notice shall include the Contractor's recommendations for the protection and the safety of Government, Contractor and subcontractor personnel and property that may be exposed to the unsafe condition.

(f) When the Government receives notice of an unsafe condition from the Contractor, the parties will agree on a course of action to mitigate the effects of that condition and, if necessary, the contract will be amended. Failure to agree on a course of action will constitute a dispute under the Disputes clause of this contract.

(g) Nothing contained in this clause shall relieve the Contractor or subcontractors from complying with applicable Federal, State, and local laws, codes, ordinances and regulations (including the obtaining of licenses and permits) in connection with hazardous material including but not limited to the use, disturbance, or disposal of such material.

(End of Clause)

DOJ-05 Security of Department Information and Systems (OCT 2023)

I. Applicability to Contractors and Subcontractors Section 2839.102 of the Justice Acquisition Regulation (JAR), (48 C.F.R. § 2839.102), applies to this contract.

Accordingly, all contractors are obligated to comply with all applicable DOJ security policies, directives, or guidance documents, including the security requirements in the provisions in this contract clause. This contract clause applies to all contractors and subcontractors, including cloud service providers (“CSPs”), and personnel of the contractors and subcontractors (hereinafter collectively, “Contractor”) that may access, collect, store, process, maintain, use, share, retrieve, disseminate, transmit, or dispose of DOJ Information. The security requirements set forth herein are in addition to those required by the Federal Acquisition Regulation (“FAR”), and any other applicable laws, mandates, contract clauses, DOJ policies, directives or guidance documents and Executive Orders pertaining to the development and operation of Information Systems and/or the protection of Government Information. This clause does not alter or diminish any existing rights, obligations, or liability under any other civil and/or criminal law, rule, regulation, or mandate.

II. General Definitions The following general definitions apply to this clause. Specific definitions also apply as set forth in other paragraphs.

A. Authorization to Operate (“ATO”), as defined in National Institute of Standards and Technology (“NIST”) Special Publication (“SP”) 800-37 Revision 2, is the official management decision given by a senior Federal official or officials to authorize operation of an information system and to explicitly accept the risk to agency operations (including mission, functions, image, or reputation), agency assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security and privacy controls.

B. Cloud Computing, as defined in DOJ Order 0904 Cybersecurity Program, is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This cloud model is composed of five essential characteristics, three service models, and four deployment models in accordance with NIST SP 800-145.

C. Covered Contract is any contract, order or other agreement under which the contractor, or a subcontractor at any tier, including a cloud service provider, may access, collect, store, process, maintain, use, share, retrieve, disseminate, transmit, or dispose of DOJ Information (as defined below) in the course of providing a product or service to the Department, with the exception of acquisitions under the micro-purchase threshold.

D. Covered Information System means any information system used for, involved with, or allowing, the processing, storing, or transmitting of DOJ Information under a Covered Contract.

E. Data means recorded information, regardless of form or the media on which it may be recorded. The term includes technical data, computer software, and personally identifiable information (PII) (defined below). The term does not include information incidental to contract administration, such as financial, administrative, cost or pricing, or management information.

F. DOJ Information, as defined in DOJ Order 0904, means any Information that is owned, produced, controlled, protected by, or otherwise within the custody or responsibility of the DOJ, including, without limitation, information related to DOJ programs or personnel. It includes, without limitation, Information (1) provided by or generated for the DOJ, 15B51926Q00000007 Page 12 of 28

(2) managed or acquired by the Contractor for the DOJ in connection with the performance of the contract, and/or (3) acquired to perform the contract.

G. Information, as defined in DOJ Order 0904, is any communication or representation of knowledge such as facts, data, or opinions, in any form or medium, including textual, numerical, graphic, cartographic, narrative, or audiovisual. This includes any communication or representation of knowledge in an electronic format that allows it to be stored, retrieved, or transmitted.

H. Information System, means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502(8)).

I. Personally Identifiable Information (“PII”), as defined in the FAR 24.101, means information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual. It includes but is not limited to common data elements such as names, addresses, dates of birth, and places of employment, to identity documents, Social Security numbers or other government-issued identifiers, precise location information, medical history, and biometric records. This definition covers all PII that is created by or becomes available to the contractor, including its employees, subcontractors, or affiliates, as a result of performing under this contract. PII, as supplementally defined in DOJ Order 0904, also includes information about an individual maintained by an agency, including, but not limited to, information related to education, financial transactions, medical history, and criminal or employment history and information, which can be used to distinguish or trace an individual’s identity.

J. Private Cloud, as defined in NIST SP 800-145, is the deployment model for cloud infrastructure provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the organization, a third party, or some combination of them, and it may exist on or off premises.

K. Security Breach means any security incident (as defined below) that directly relates to the loss of control, compromise, exfiltration, manipulation, unauthorized disclosure, unauthorized acquisition, unauthorized exposure or unauthorized access or any similar occurrence of any Covered Information System or any DOJ Information or any PII accessed by, retrievable from, processed by, stored on, or transmitted within, to or from any such system. This includes incidents where (1) a person other than an authorized user accesses or potentially accesses PII or DOJ Information or (2) an authorized user accesses or potentially accesses PII or DOJ Information for an unauthorized purpose.

a. Potential Security Breach (hereinafter, “Potential Breach”) means any suspected, but unconfirmed security breach (as defined above).

b. Confirmed Security Breach (hereinafter, “Confirmed Breach”) means any confirmed security breach (as defined above).

L. Security Incident means any occurrence that (1) may actually or imminently jeopardize, without lawful authority, the availability, integrity, authentication, confidentiality, or nonrepudiation of DOJ Information or a Covered Information System; or (2) may constitute a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

a. Potential Security Incident means any suspected, but unconfirmed security incident (as defined above).

b. Confirmed Security Incident means any confirmed security incident (as defined above).

M. Vulnerability, as defined in DOJ Vulnerability Management Plan, and the OCIO Information Security Management Procedure, means a weakness or flaw discovered in the design of a system that, when exploited, may result in a loss of confidentially, integrity, or availability of DOJ Information or an Information System.

III. Confidentiality and Non-Disclosure of DOJ Information A. Preliminary and final contract deliverables and all associated working papers and material generated by the Contractor developed using DOJ Information, product, source code, and/or methods of operations, are the property of the U.S.

Government and must be submitted to the Contracting Officer (“CO”) or the CO’s Representative (“COR”) at the conclusion of the contract. The U.S. Government has unlimited data rights to all such deliverables and associated working papers and materials in accordance with FAR 52.227-14 (Rights in Data-General). The Contractor will define a method of monitoring the development activity to include any activity associated with DOJ Information, product, source code, and methods of operations. The data rights and development details shall be defined within the Contract.

15B51926Q00000007 Page 13 of 28

If the Contractor intends to utilize its existing data, for which it has a patent or copyright, to develop a contract deliverable, it is incumbent upon the Contractor to negotiate with the CO the proper FAR Part 27 clauses in the contract to protect its existing data.

B. Pursuant to FAR 52.227-14(d)(2), all documents and data produced in the performance of this contract containing DOJ Information, product code, source code, and/or methods of operations are the property of the U.S. Government and, without the prior written permission of the CO, the Contractor shall neither reproduce nor release such information to any third-party at any time, including during performance or following expiration and/or termination of the contract.

C. Any DOJ Information made available to the Contractor under this contract shall be used only for the purpose of performance of this contract and shall not be divulged or made known in any manner to any persons except as may be necessary in the performance of this contract. In performance of this contract, the Contractor assumes responsibility for the protection of the confidentiality of all DOJ Information processed, stored, or transmitted by the Contractor. The Contractor shall comply with information security responsibilities and duties throughout the contract and after expiration/ termination as appropriate per contract close-out activities. When requested by the CO (typically no more than annually), the Contractor shall provide a report to the CO identifying, to the best of the Contractor’s knowledge and belief, the type, amount, and level of sensitivity of the DOJ Information processed, stored, or transmitted under the Contract, including an estimate of the number of individuals for whom PII has been processed, stored or transmitted under the Contract and whether such information includes social security numbers (in whole or in part).

IV. Compliance with Information Technology Security Policies, Procedures and Requirements A. For all Covered Information Systems, in addition to any other applicable requirements, as set forth in Part I, the Contractor shall comply with the security requirements of the Federal Information Security Modernization Act of 2014 (“FISMA”), Privacy Act of 1974, E-Government Act of 2002, National Institute of Standards and Technology (“NIST”) Special Publications (“SP”), including NIST SP 800-37, 800-53, and 800-60 Volumes I and II, Federal Information Processing Standards (“FIPS”) Publications 140-2, 199, and 200, Federal Risk and Authorization Management Program (“FedRAMP”), DOJ IT Security Standards as amended, and OMB Memoranda relating to the security of information and/ or Federal Information Systems.

B. In addition, for all Covered Information Systems, the Contractor shall comply with the following requirements, which are listed here only to highlight certain specific applicable requirements from one of the sources identified in the first paragraph of this Section. This is not an exhaustive list of all such requirements with which the Contractor is obligated to comply, and the omission of a requirement from this list should not be construed as negating the materiality of that requirement. These requirements and those in the authorities in the prior paragraph should be read together.

1. Limiting access to DOJ Information and Covered Information Systems to authorized users and to transactions and functions that authorized users are permitted to exercise.

2. Providing security awareness training at least annually to all Contractor employees and contractors involved with the Covered Contract. Such training shall include, but not be limited to, recognizing and reporting potential indicators of insider threats to users and managers of DOJ Information and Covered Information Systems.

3. Creating, protecting, and retaining, in accordance with applicable requirements but in any event at least until the expiration of the contract, Covered Information System audit records, reports, and supporting documentation to enable reviewing, monitoring, analysis, investigation, reconstruction, and reporting of unlawful, unauthorized, or inappropriate activity related to such Covered Information Systems and/or DOJ Information.

4. Maintaining authorizations to operate any Covered Information System.

5. Performing continuous monitoring on all Covered Information Systems, to include but not be limited to, collecting, reviewing, and analyzing appropriate logs and timely investigating security alerts and potential security incidents.

6. Establishing and maintaining baseline configurations and current inventories of Covered Information Systems, including hardware, software, firmware, and documentation, throughout the Information System Development Lifecycle, and establishing and enforcing security configuration settings for IT products employed in Covered Information Systems.

15B51926Q00000007 Page 14 of 28

7. Ensuring appropriate contingency planning has been performed, including DOJ Information and Covered Information System backups.

8. Identifying Covered Information System users, processes acting on behalf of users, or devices, and authenticating and verifying the identities of such users, processes, or devices, using multifactor authentication or HSPD-12 compliant authentication methods as defined by NIST 800-63-3, Digital Identity Guidelines or current revision.

9. Establishing and maintaining an operational incident handling capability for Covered Information Systems that includes adequate and timely development, logging, detection, analysis, containment, recovery, and user response activities, and tracking, documenting, and timely reporting incidents to appropriate officials and authorities within the Contractor’s organization and the DOJ.

10. Performing periodic and timely maintenance on Covered Information Systems, and providing effective controls on tools, techniques, mechanisms, and personnel used to conduct such maintenance.

11. Protecting Covered Information System media containing DOJ Information, including paper, digital and electronic media, and DOJ assets under Contractor control; protecting them from environmental impacts, access, and equipment positioning requirements defined; limiting access to DOJ Information to authorized users; and sanitizing or destroying Covered Information System media containing DOJ Information before disposal, release or reuse of such media.

12. Limiting physical access to Covered Information Systems, equipment, and physical facilities housing such Covered Information Systems to authorized personnel according to DOJ 03.

13. Screening individuals prior to authorizing access to Covered Information Systems to ensure compliance with DOJ Security standards including personnel background checks.

14. Continuously assessing the risk to DOJ Information in Covered Information Systems, including scanning and remediating vulnerabilities, or implementing appropriate mitigation in accordance with DOJ policy, and ensuring the timely removal of assets no longer supported by the Contractor.

15. Continuously monitoring the application of security controls of Covered Information Systems, assessing the efficacy of…